last executing test programs:

22.807537514s ago: executing program 3 (id=1303):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffff003f}}], 0x1, 0x0, 0x0)

22.740002864s ago: executing program 3 (id=1305):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x890b, &(0x7f0000000140)="000000000000000000000f0000000000000000006c61706230")

22.739888165s ago: executing program 3 (id=1306):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x300000000000000)

22.659965638s ago: executing program 3 (id=1308):
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2)
syz_emit_ethernet(0x34, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@generic={0x8906, "ed9e681963b59679626ced9af0b1af9db4b9ba44905bd8bb232ea0f04bdbf0904bc60fb5f75f"}}}, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x66, @time={0x0, 0x6}, 0x1, {0x6, 0x7}, 0x7, 0x2}) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4005}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x24000020}, 0x4000) (async, rerun: 32)
r2 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32)
mkdir(&(0x7f0000000080)='./file1\x00', 0xb) (async)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) (async)
sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="9551d8a566e251455d00731d84c81fab9a34826718f792c58e2557ed717e53f39aa1826f069d2426342be6f15a0f49738f9efe907e67b2572a7992d67387ef554d3cdd05cefe3a2a21bf3634411bd30af42d9fcabd51a52387545806d35bd73e84d17464627fad6b529bcd7b3506ac7eb641a2c96587c4edf27421818492cb3791b279127577418a98c514157ff178e053d057bbaa9065ed023367360890e0a0", 0xa0}, {&(0x7f0000000340)="7cd84cce3b5202ecaf3f02acf52aef6e93250ff0bbea78a909a81fb4cf1bec0f4b387f7acc51012eef2fa2bc4efebbc3c7065768f53d64aa083e267fbac3881bc98102b37b5e8527136b72240f73b0624712fdf3bea573d09b47f6c4e073a790e7b9f3d7f44e0227a63e177dcbc2321cabaa23550cc87a502224", 0x7a}, {&(0x7f00000003c0)="3e3a8881b5ac7d81e5c7d01ff029e7134c31ed1197a2de46a221030db1386359247569342c3fb5708eba6b4c0d32c9b7038bc5fee86176f1b1e01ef1f07edef92a7c649c177048bf9f7cd4ec427ee4476b1f20435e51ad7674f916585eab28d793d2eb2a7ea002a0550c4ef22f19f1eb2510aa48423308b7a2ff6db998", 0x7d}, {&(0x7f0000000440)="10fdd29396835f65beeaca3bdacc8a1f8dd7e3cfc3efaa2b81ef317e6213abad5cee012895974fe619366d63ceb8c06756d7e007af765e3550468ecdfae9d9790e87e17f6454b1ca7c938b07f88919d1cc2c40ea6cf4bcd0241ce361f4d27f", 0x5f}], 0x4}, 0x24000085)

22.65905211s ago: executing program 3 (id=1309):
openat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x600, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x20000800)
close(r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0xff03, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r5, 0x8b32, &(0x7f0000000040))
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x1, 0x3, [<r9=>0x0, 0x0, 0x0, <r10=>0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, r10, 0x0, r10], [0x2b8], [0x0, 0x1]})
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

22.538959288s ago: executing program 3 (id=1310):
syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x400000) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x400000)
read$usbfs(r0, &(0x7f0000000040)=""/4096, 0x1000) (async)
read$usbfs(r0, &(0x7f0000000040)=""/4096, 0x1000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001040)={0x4, <r1=>r0, 0x1})
write$nbd(r1, &(0x7f0000001080)={0x67446698, 0x0, 0x1, 0x4, 0x2, "1e613994580cb325b7baa29a21c18e811231be"}, 0x23)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000010c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000013c0)={{'\x00', 0x1}, {0x2}, 0x2, 0x0, 0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)="39de8a4ce0cae145e2abff084b0e49734df4f150e914e43ee2e51e8d613a3a3897766a9a42735b720b724a3e1d2ac839c10e0ebf05ab327d9f4dab4d06d8a8ee24cf062937b852261ec495d0ebf55f7729e7e1f4bb214f702021f1e1f6c0012a51e9ba2ba760b21c356499f5cd9ed0ab6ad0867da1377b687124b54a3a42061b24a29aad2d5b05ead80b2006e20b5081088c831c96399cbab2e1965bc67fe9f4d9679e81e5d1c102441a8032f98edeb3a352eeedf424e7cae2951e", 0xbb, 0x0, &(0x7f0000001240)={0x2, 0xbb, {0x1, 0xc, 0x4b, "844eda55d227a11297b923c2649940f9e6441654916f54dfd250734173748ff42bdea0fcb5ddef3cc08bacf3cbb4cea5b1a94aa004290f341f04ce8583a719cbd376cfff1738149877cc17", 0x63, "7029d19098b8c8643a30c20770c28c8ca9395579dd5cb95ca8bdb40cecbbca7e1009d4df5219329b6617b906487c7dc4c51f5f3afa03ebd81a5db6d95f431dff25cace65cf3cf6d49fe194a6911efca2b911a7e12e151baff39c273195a793b3f7bc6b"}, 0x83, "b41882bf59ff2a59a474155470d7fb079ac880cfdbde324efeb6a9b92996e65c618e6a48d0393766d56d58c77faf34aa79e7af024cfe0a380a143ab327e68c614ac456da40b58cf3b6e9074a027828ca4fe54fbcfd57a8502f8cae11340d1bee50f020f4932d4e5b3b1a7bd02e25a47eb10ce73f22e1dfbd6e1e618b77e330e28ce364"}, 0x14a})
quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async)
r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000015c0)={&(0x7f0000001440), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x48041) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000015c0)={&(0x7f0000001440), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x48041)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000001600)=""/240) (async)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000001600)=""/240)
syz_clone(0x20000480, &(0x7f0000001700)="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", 0xfd, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="f755d38793ab03fbf8fc66c64c44bd3b8b69324ecea7dc054915909092839a29a01301a0993cf0d06a9b2a1dd7b49fab32371b099ebe531c34915bbb22675013982cf146ba770b3b218078afda0a28275dd4d717775e0896a6a7f69eca986a13116cd7e7c4d1b64fef58f2bf4240373e78c025c005c81f4071962d2ba9f12204a1beebb1e32c83dfbdcd4ef5f0a6c55fdd8e5cf9fd487f4beba95e8a0ca8bbff292f8670ca57082ddc2ae72ab9f97518967fdb4c87794aa20e904a3e4679fdb35ecaddd553c8d55335b16dc272435e75a6b7ae2ecb19627cef947c018d4af4c37c0dce80c269307c119ced7849a1acc238ce92d4d8045ed0c4b734991a509f9f76baa597908eee9dfa215ad4b4660c95afade7a46a5ff67022fe9f5ed7d7d3efdfc9b1b6bb7c7e3f84e016445ed8a4b7b0cc4c27473e0b78012ab93fd08b3dac113b5b773e8340017ed88127847a367451782cea52f903a91d33b439adbb966700082e6a9f0cd0221f9c71f968175a4ac6b3506a1e6ca46b1eaba13b151d3937f3acf08c4da24c7bf1b3d0e579708b44bedd642809f66877f621e30243d64f0e433e1cb3b89176fd763a8ea63822627f86e168a815e53a44314a7c076d6444e7e31b6a279b99c63c51892d55202839dce1a18ea8ccbca172bf9ebeaf5a6df35809c0d56b82d9a31bb5b3544d8e24cf8a2e5ba0ea977025e399ccd23e8e2f6b641399dd0026b1dc6964b28a429772bd18f2c81923c2a33834c5da76de74577d537b571e44f35d3514bd9b1f73f24e791b27cc8476feed4ab4dcfd7b02d0467c7bad973ca34d14aca7670126ce2724215a5f09637a762d7b6a910e928ea2416e2ec92500c09655f5fba684fa007e6af621d13356fc127b121938af2d037d0241fa5ec854eaa70e3d0e0648c878f0b4c86b6f0eb68e4ba0bf800c4d6ef24dc9832370af241f9f153289f76ed1bd0c6bfdade21b569311c0271da56dd8583fa23674ec5ec92d79cc34299c2309be47a4a3bca708dc70f0bad937d27fb5d647432cda9acd5371d5509b5f400e94ae5520ccd1e765bad2b301258ec5143d61f54a24f8bab4cb6b429f9e020d81f78b37044801e4eee6647a7153eafaaff0d0bc94251ce2d09d6dec98f66de5339ce822d2cc230b2a85ea5d56d925a93a9dacbee611f628f54c46df2e695c51ca75c4a47c08b44a3f6c15a7ace4705e9b9a401fc7c3971505a0f40965ca758cebe247f4afd71edbb1c96a208cc618fa45e2d1d8515ad6eb82ea117990bb96fa4ff38bdc21b9f1c7aaef9b28b2873e38bf8899032d61d9a7ca86f4128ca13d598e74f36d843dd59c9c9a7619a2be50bdaba87f78a2d3feb51085f5a0e1e346ba1666407099edfd283dc8e7991e3752d53d5f1fdb80dc9669989529133c36cbeba3652e46d287eab7fef55c683dc792812310d785a42e0f0f041872642aff9cc953bb758458caabda225de1507ce4cf4c898864f07cec2b1c4f1681fe40ada574270411f8f57107bd70786a298e0bb60ca4e2f755152bd6e4e09608c401718fd8fe872bd18d714052c9e0e4b705120328230904f40fe11b4e273f92c684164922e9de31b2dcdfb6602e2963974299904f02ca569e71025375faf6bdc756a183b319b9d520526d81a26ff9e9ffc34598937552c3d2589c6689034e3db0d559ee3f5e8db0bd2488c0e20b45fd218df6324bec1c1635dcb207fb9c5d30cc0e9e64d4b7ac27ea6fc4a4320c0d9771b2fb1cf6e71ae343b1944bc57c286ff5d62c3d9b9db54fd4a3ec4ba51f26e0c9d2bd43185995b2f8caf6f79adc1d94729ac7be0152e11c438351112a65972a338c48a409a1acfa17bbcdb709a44fd7ae85a680f25648d00993389334f8c0063cd7787f2429fe4c5425cf0bd410e24dbbc5ed4bc5a052371722e6123b9eb34a09e99037a3165f7d76f6862bf51d3422845508208420ae40083c10c50a348bb904196f11f813ba9ac6d8f8c186fe9c15fb8eaf7fc3ecebec286a950e7efbe45413a17b4abe51c677bc31489577efb6d91868209663093af640da0de6a6f518f6ea9446b889d99fac7781bc9dc682ff4f62ec02831e2e3310c50dfa8eb9c5077dbd922798aab78985794445af271c1e86282c49f56bea73f604fda35bf6b51850227c1465fd2337b97c357d93162c14386c6b0f16d18d4d0337369f93943553363730ea846aa9d159bf16810722b05b380c16d302bb70e21c9405b8f5f5d18ce8f5e6d77bbe51762350e52aa12bc922d34373a263228a57441fdb10870aca6d4a8a82586e6fd578d8dc4631f616541018740985598a5f8be4d641a1614d52ff849f682554a90d849fbcf5682d1520b68afab1bee338fd24b39037e0b632ff69c5a30644bb23a5e34002534179ef1403a85585315348467d98052d729b5f57d36ddf2a6c49b96c0e2f0521f65b0ee588df7a01de68a2680b528957371cccefe69792fc7c5285e884d182c8606f88af82cfd45e16dbb2638ca9d7e6c5e71f21051d4a6dc4dc6bbdae454fa1642c5f44f3c8257b6b54c48bd4f4dd04f65f9e5c2935c6639e5b02eea483dfe93d9b2ff1651f45d595bf3b17d1bcc983bbb4132f48ccea0733cae9d55326ce28507e711d4181be2124731974a04ac73d31d0c052aaeba600b6bbbdb83d4f0f15d3ab63275fdfe5524159c151f2bb5b2e575c5cae7f44a4bcad8ffb3759a39fa3f9aa059d29ad0a45e918abf2dd8d32f5889d26d526f3617231e30c364979d95f42b5c7154c248b90520a5c75ddfb63e9667d17a35e0c92e6bcd46aa8c4f38e8b5867b9937a57c3e74af06968ad176c16e700909a9f8cf8e912d67c5d02d12b8219be1a6805e125417b3f3e70d5ad3c18d7de6a6d0395704fa8d52c79db48db207c3dd7d5fa1d856a0427e6a5b3ee205c880a21783add5d6c34f42e63384b769aa2bce29eac8c22c8e6bc8936ff6a90d978f660366f22b26c6e4076c59c4a000e33e2d131b670f933fd9eb45ccc5823718446338a6d63fed3872197502d1d7f44d047fcd48b1756b51788490abc7485afa867e0b65e9610cfd6ac0393aab1d2dd357a0cb7e68b5b78be69ffde53eda85798ee7b91861f93e2c1a76a21162e725d96b46648a9696604d5536e647b6954eae74c7f3560d7a6e3ffc2dfd54eb94194df7dd128bbd215173f4733f58c9a352feda6bab81819c0e83cf4feed076a0cd443fc204624993db7cd4ad4a01093090b394bbd832ea8e76afd9ee522b1d7017d91c6f26d16581aa1a3f01ba911e0764dbbdb94ab43d948f1b3bd94f4d5b90f16b796f0aa57b5de3bd4d75d39b6c1a2adb66eacc8353e889e1b6ca50e078132f04901a5e2064380c94821a3036e7330c5f65303d64e00debe10685c62a21bfa889ee38b265393de69274bac6b450b2276a46ea4260a517bf5111a76ed8e9b5ec34ad85846d6a36ca68e12c3d44f73358d9149aa5484d1938e42a83e53042116f9d60a0bbc134540b755da1b0b6cdd6ba42d570711334f6a1dc0920cabb38a7e28964b74de154529e83dc013d290a9e899f13c2c516d608fc3a63b7e8d992b3d2edaf244e466225fa901e7e6db7b3a5f947169d2473a850c6e9bd9811e1aeaf24cc100600aa7ba393a745914c21e14c068faa969517aa83ed7760d98df9da06bceb5746e0f0306c192e21c26410b41d0f61747318f36509ff01251345f0be144bb6cd1d7b2a95a7f03de5add7abc43990acfb36ea9777692299e749a7e4c4993ad03cd28fef4d46be2e6f60e1050c2778392c05cc504b0ff135e55afe5b6bba5c433860d50b22d1961b19a5075571e75d6baaa0fc8698810dbe605d75f1f4f82696f637a60c57d05902df6050aac28939a3f0995781f1218c8d9ec2b4828ec223beb292c92288a0582a5099dc81f3939278f7702d375251500944053bd8463871e14fdf313dcc8d84e2ca619d17b4283d61c5584ca03fa0420506b09fc0aee97f649d8b17bb0a18ae1c2093dfd876fd4da994036c0e14e9d39fc542f627c5fa9a0e6ccd2252390bf7e1eaa02247ad2d05875702c8729c3effd87e10a2dab171513f2388e552974086c3be7f245f214ed7d072954055b91c57da1c37c8f51bdc12bd0c221840292183519b91dac5fc2974f8897796cd83dc61ea07aebe3ca5fd92f1a836ab37be3ecd4eabb8f66a759695b32e04f428e3bcb35ce57a957f78a0fbed7608c150bea5158fc8a0946d3501578bd7339c961a33c16f98959a726a6b0317ecb30e80cfe7c4014865871544a62c6aa905037e3a37f169c1cf72c647dfc8300e8bdd877e2cca3125715a231baf01967be5178e46f561bf66bf91df3913b59e12712980f44b259fb6c7676da7592c54d50e9e5cb1bbe4b74cfb4f18706976a250d1f4b060b36dbf90f26bf0c65f99adc121d3f86b35466b99d389c50b701aa4bb95493a9886cf0e56ebd86680aac877dc57fc8db35e3a346bd050c2fe560ae7e6833fcbf94cb39d7b6869aa41126bbd53a139c2d406a8f43b299ba4ccb914cc3f7a77c7299d0a93bc7bbf6249a55f0774b12a0041ad4ff251f1b9a47eb15d52c0a92f99d0e3faa8fabd1659b9194de714609048c9e13efcd9709558f67fd1846e6722e9dcc86220d0799a9699e2a43f2da9135990b12da96c36b0f2df90f964db7e10364fd0531b1ed924e4ad954b62d0fb0266187bdb3a9eab734f2b423607ce21f16f6ea008311fb76a545862c7b6376a032aa280c8b4626b59f62fcb17eee7ae31270d19d64551298d42ac02e26e127e194711b0bcb1b4dcdaa2293830d98d025fa075f01810cd36fb3ded38e1d00d084588dada9bc5cee6ac7740001f65f2e41306a6517a5ac84ba8d7b04bff9efb429154b5dcec88e061803fa4db10c88a760372cedbf883a46d7138d1c2406bcf07ed03f6196578a46f4660e3aad482806a03c150c860fe617640eae35691cfe810fed8b628ce16e0c3b23235cbd65a093cb0b97a5d42ca9ea43681727b686b0bf524a6c63eb279cf8eb630942cd44c65c8d0c1886e0fd9625291268965542769cfa703e3032d4885b4589d959972b17ba25bc11b2e0ba3db2308b85072de0d3b6ab81ba3200f90d6aa39c4cf6b8aa46945fac31266920129e9709eac5c35c0e3fb1c6b5f0e73a814c3efc5227442e0e9fff58773dbf1e2331f0ff6513adeaccea480a695e7af8ed06f06245192d6f451268949c3f07a428d265453d06c54f4749140d4b28b18b7561754193126fe4070e002f208238c8d7b4c62468f4e88e1fa6e7e6ea8153792672e227cb8ec66fbf11842859ab527bc547cc5d71bac12a0ea7cf7b71f8afcdcdec2493f40fe3e784327ecf82579c6397f4a7df34491892a0b42ff84c013417df43a58f33a8747a7e573bc4e43c0c27ee57ef10fd5e33458fd9fd9226ec85061cb1c071fe7d6c814c0895977e7ddac2805ac0e01b6e38097220bfb25a24a2ad514707c0f3822074c646e5484e41550e01a6140c3a7639aa85d7c9f8b8440100e47dadc402f95b1013ef4215c4bb229927139b89d5a7de723ebfc660e034f06808db66e2b3887329cceb013ef56ae18cf463ab36e9719490e6e64512bda9cb4ecade72c741ee85b4c92a5b84dee88d069e0d36a002c239510ce8a3714a2b4d5415a45fe9b8eb02805e45a0ee45ec02604c9525c0fb5aacc740436911d50268ae6a300f405d72b021594fd739e1889e5c51877a9f97b309d29cae47c92d501f2a6aaff7a22de656a03900eb5ce50c8a6e5db65633ac58af316bfc287b267a93976de3befd4aaba75b4c30") (async)
syz_clone(0x20000480, &(0x7f0000001700)="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", 0xfd, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="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")
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000002880)={<r6=>0x0, 0x6, 0x0, [0x6, 0x4, 0x7, 0x40, 0x3], [0x7, 0x2, 0x25b7, 0x7ff, 0x40, 0x0, 0xfe55, 0x1, 0x1, 0x6, 0x5ed, 0x1, 0xc9a4, 0xffffffffcdf83c2a, 0x8001, 0x255, 0x3, 0xffffffff, 0xfff, 0x9, 0x147a0f8e, 0x6, 0x8, 0xa, 0x140000000000, 0x7, 0x8, 0x6, 0x5bea, 0x5, 0x1ffc0, 0x4, 0x1000, 0x0, 0x800, 0x5, 0xffffffffffffff80, 0x80, 0xffffffffffffffff, 0x8, 0x8, 0x2, 0x6, 0x6, 0x0, 0x5, 0x7, 0x2, 0xff, 0xfffffffffffffffd, 0x8, 0x1, 0x7fffffff, 0x6, 0x1, 0x4, 0x1, 0x1, 0x80, 0xffffffffffffffff, 0x600000, 0x40, 0x7, 0x3, 0x4, 0x8cbc, 0x6, 0x7, 0x0, 0x8, 0x8001, 0x7, 0x7fffffff, 0x7, 0xbc, 0x646c4530, 0x400, 0xfffffffffffffffc, 0x77db3085, 0xffff, 0xfffffffffffeffff, 0x4, 0x9, 0x8, 0xfffffffffffffff7, 0x5, 0x5, 0x1000, 0x80000001, 0x7, 0x7, 0xffffffff, 0x28, 0x2, 0x401, 0x2627, 0x0, 0xfffffffffffffffa, 0x7f, 0x4, 0x2, 0x985, 0x10001, 0x7bf, 0x6fa5, 0x1, 0x7, 0x7473, 0x2, 0x4, 0x4, 0xff, 0x6, 0xbfe, 0x8, 0x3, 0x3, 0x5, 0x1, 0x4d, 0x2]})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002cc0)={r6, "494d039ce793838e80e13ece8e8cb3d8"})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003d00)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003d40)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003d80)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003d80)=<r9=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000003e80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003dc0)={0x44, 0x0, 0x400, 0x0, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan4\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '(.*-[/\\'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x51)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000003f00), 0xffffffffffffffff)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000003fc0)={&(0x7f0000003ec0), 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xb0b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20040801)
read$FUSE(r1, &(0x7f0000004000)={0x2020, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2020)
sched_getaffinity(r11, 0x8, &(0x7f0000006040))
socket$netlink(0x10, 0x3, 0xb) (async)
r12 = socket$netlink(0x10, 0x3, 0xb)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x2000000, 0x50, r1, 0x20000000) (async)
r13 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x2000000, 0x50, r1, 0x20000000)
r14 = mmap$IORING_OFF_CQ_RING(0x0, 0x7fffffff, 0x2000000, 0x11, r1, 0x8000000)
syz_io_uring_setup(0x45e9, &(0x7f0000006080)={0x0, 0x694c, 0x80, 0x3, 0x202}, &(0x7f0000006100), &(0x7f0000006140), &(0x7f0000006180)=<r15=>0x0)
syz_io_uring_submit(r13, r14, r15, &(0x7f0000006240)=@IORING_OP_CONNECT={0x10, 0x72, 0x0, r12, 0x80, &(0x7f00000061c0)=@in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xcb}, 0x0, 0x0, 0x1})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

7.563503897s ago: executing program 32 (id=1310):
syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x400000) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x400000)
read$usbfs(r0, &(0x7f0000000040)=""/4096, 0x1000) (async)
read$usbfs(r0, &(0x7f0000000040)=""/4096, 0x1000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001040)={0x4, <r1=>r0, 0x1})
write$nbd(r1, &(0x7f0000001080)={0x67446698, 0x0, 0x1, 0x4, 0x2, "1e613994580cb325b7baa29a21c18e811231be"}, 0x23)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000010c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000013c0)={{'\x00', 0x1}, {0x2}, 0x2, 0x0, 0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)="39de8a4ce0cae145e2abff084b0e49734df4f150e914e43ee2e51e8d613a3a3897766a9a42735b720b724a3e1d2ac839c10e0ebf05ab327d9f4dab4d06d8a8ee24cf062937b852261ec495d0ebf55f7729e7e1f4bb214f702021f1e1f6c0012a51e9ba2ba760b21c356499f5cd9ed0ab6ad0867da1377b687124b54a3a42061b24a29aad2d5b05ead80b2006e20b5081088c831c96399cbab2e1965bc67fe9f4d9679e81e5d1c102441a8032f98edeb3a352eeedf424e7cae2951e", 0xbb, 0x0, &(0x7f0000001240)={0x2, 0xbb, {0x1, 0xc, 0x4b, "844eda55d227a11297b923c2649940f9e6441654916f54dfd250734173748ff42bdea0fcb5ddef3cc08bacf3cbb4cea5b1a94aa004290f341f04ce8583a719cbd376cfff1738149877cc17", 0x63, "7029d19098b8c8643a30c20770c28c8ca9395579dd5cb95ca8bdb40cecbbca7e1009d4df5219329b6617b906487c7dc4c51f5f3afa03ebd81a5db6d95f431dff25cace65cf3cf6d49fe194a6911efca2b911a7e12e151baff39c273195a793b3f7bc6b"}, 0x83, "b41882bf59ff2a59a474155470d7fb079ac880cfdbde324efeb6a9b92996e65c618e6a48d0393766d56d58c77faf34aa79e7af024cfe0a380a143ab327e68c614ac456da40b58cf3b6e9074a027828ca4fe54fbcfd57a8502f8cae11340d1bee50f020f4932d4e5b3b1a7bd02e25a47eb10ce73f22e1dfbd6e1e618b77e330e28ce364"}, 0x14a})
quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async)
r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000015c0)={&(0x7f0000001440), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x48041) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000015c0)={&(0x7f0000001440), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x58, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x48041)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000001600)=""/240) (async)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000001600)=""/240)
syz_clone(0x20000480, &(0x7f0000001700)="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", 0xfd, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="f755d38793ab03fbf8fc66c64c44bd3b8b69324ecea7dc054915909092839a29a01301a0993cf0d06a9b2a1dd7b49fab32371b099ebe531c34915bbb22675013982cf146ba770b3b218078afda0a28275dd4d717775e0896a6a7f69eca986a13116cd7e7c4d1b64fef58f2bf4240373e78c025c005c81f4071962d2ba9f12204a1beebb1e32c83dfbdcd4ef5f0a6c55fdd8e5cf9fd487f4beba95e8a0ca8bbff292f8670ca57082ddc2ae72ab9f97518967fdb4c87794aa20e904a3e4679fdb35ecaddd553c8d55335b16dc272435e75a6b7ae2ecb19627cef947c018d4af4c37c0dce80c269307c119ced7849a1acc238ce92d4d8045ed0c4b734991a509f9f76baa597908eee9dfa215ad4b4660c95afade7a46a5ff67022fe9f5ed7d7d3efdfc9b1b6bb7c7e3f84e016445ed8a4b7b0cc4c27473e0b78012ab93fd08b3dac113b5b773e8340017ed88127847a367451782cea52f903a91d33b439adbb966700082e6a9f0cd0221f9c71f968175a4ac6b3506a1e6ca46b1eaba13b151d3937f3acf08c4da24c7bf1b3d0e579708b44bedd642809f66877f621e30243d64f0e433e1cb3b89176fd763a8ea63822627f86e168a815e53a44314a7c076d6444e7e31b6a279b99c63c51892d55202839dce1a18ea8ccbca172bf9ebeaf5a6df35809c0d56b82d9a31bb5b3544d8e24cf8a2e5ba0ea977025e399ccd23e8e2f6b641399dd0026b1dc6964b28a429772bd18f2c81923c2a33834c5da76de74577d537b571e44f35d3514bd9b1f73f24e791b27cc8476feed4ab4dcfd7b02d0467c7bad973ca34d14aca7670126ce2724215a5f09637a762d7b6a910e928ea2416e2ec92500c09655f5fba684fa007e6af621d13356fc127b121938af2d037d0241fa5ec854eaa70e3d0e0648c878f0b4c86b6f0eb68e4ba0bf800c4d6ef24dc9832370af241f9f153289f76ed1bd0c6bfdade21b569311c0271da56dd8583fa23674ec5ec92d79cc34299c2309be47a4a3bca708dc70f0bad937d27fb5d647432cda9acd5371d5509b5f400e94ae5520ccd1e765bad2b301258ec5143d61f54a24f8bab4cb6b429f9e020d81f78b37044801e4eee6647a7153eafaaff0d0bc94251ce2d09d6dec98f66de5339ce822d2cc230b2a85ea5d56d925a93a9dacbee611f628f54c46df2e695c51ca75c4a47c08b44a3f6c15a7ace4705e9b9a401fc7c3971505a0f40965ca758cebe247f4afd71edbb1c96a208cc618fa45e2d1d8515ad6eb82ea117990bb96fa4ff38bdc21b9f1c7aaef9b28b2873e38bf8899032d61d9a7ca86f4128ca13d598e74f36d843dd59c9c9a7619a2be50bdaba87f78a2d3feb51085f5a0e1e346ba1666407099edfd283dc8e7991e3752d53d5f1fdb80dc9669989529133c36cbeba3652e46d287eab7fef55c683dc792812310d785a42e0f0f041872642aff9cc953bb758458caabda225de1507ce4cf4c898864f07cec2b1c4f1681fe40ada574270411f8f57107bd70786a298e0bb60ca4e2f755152bd6e4e09608c401718fd8fe872bd18d714052c9e0e4b705120328230904f40fe11b4e273f92c684164922e9de31b2dcdfb6602e2963974299904f02ca569e71025375faf6bdc756a183b319b9d520526d81a26ff9e9ffc34598937552c3d2589c6689034e3db0d559ee3f5e8db0bd2488c0e20b45fd218df6324bec1c1635dcb207fb9c5d30cc0e9e64d4b7ac27ea6fc4a4320c0d9771b2fb1cf6e71ae343b1944bc57c286ff5d62c3d9b9db54fd4a3ec4ba51f26e0c9d2bd43185995b2f8caf6f79adc1d94729ac7be0152e11c438351112a65972a338c48a409a1acfa17bbcdb709a44fd7ae85a680f25648d00993389334f8c0063cd7787f2429fe4c5425cf0bd410e24dbbc5ed4bc5a052371722e6123b9eb34a09e99037a3165f7d76f6862bf51d3422845508208420ae40083c10c50a348bb904196f11f813ba9ac6d8f8c186fe9c15fb8eaf7fc3ecebec286a950e7efbe45413a17b4abe51c677bc31489577efb6d91868209663093af640da0de6a6f518f6ea9446b889d99fac7781bc9dc682ff4f62ec02831e2e3310c50dfa8eb9c5077dbd922798aab78985794445af271c1e86282c49f56bea73f604fda35bf6b51850227c1465fd2337b97c357d93162c14386c6b0f16d18d4d0337369f93943553363730ea846aa9d159bf16810722b05b380c16d302bb70e21c9405b8f5f5d18ce8f5e6d77bbe51762350e52aa12bc922d34373a263228a57441fdb10870aca6d4a8a82586e6fd578d8dc4631f616541018740985598a5f8be4d641a1614d52ff849f682554a90d849fbcf5682d1520b68afab1bee338fd24b39037e0b632ff69c5a30644bb23a5e34002534179ef1403a85585315348467d98052d729b5f57d36ddf2a6c49b96c0e2f0521f65b0ee588df7a01de68a2680b528957371cccefe69792fc7c5285e884d182c8606f88af82cfd45e16dbb2638ca9d7e6c5e71f21051d4a6dc4dc6bbdae454fa1642c5f44f3c8257b6b54c48bd4f4dd04f65f9e5c2935c6639e5b02eea483dfe93d9b2ff1651f45d595bf3b17d1bcc983bbb4132f48ccea0733cae9d55326ce28507e711d4181be2124731974a04ac73d31d0c052aaeba600b6bbbdb83d4f0f15d3ab63275fdfe5524159c151f2bb5b2e575c5cae7f44a4bcad8ffb3759a39fa3f9aa059d29ad0a45e918abf2dd8d32f5889d26d526f3617231e30c364979d95f42b5c7154c248b90520a5c75ddfb63e9667d17a35e0c92e6bcd46aa8c4f38e8b5867b9937a57c3e74af06968ad176c16e700909a9f8cf8e912d67c5d02d12b8219be1a6805e125417b3f3e70d5ad3c18d7de6a6d0395704fa8d52c79db48db207c3dd7d5fa1d856a0427e6a5b3ee205c880a21783add5d6c34f42e63384b769aa2bce29eac8c22c8e6bc8936ff6a90d978f660366f22b26c6e4076c59c4a000e33e2d131b670f933fd9eb45ccc5823718446338a6d63fed3872197502d1d7f44d047fcd48b1756b51788490abc7485afa867e0b65e9610cfd6ac0393aab1d2dd357a0cb7e68b5b78be69ffde53eda85798ee7b91861f93e2c1a76a21162e725d96b46648a9696604d5536e647b6954eae74c7f3560d7a6e3ffc2dfd54eb94194df7dd128bbd215173f4733f58c9a352feda6bab81819c0e83cf4feed076a0cd443fc204624993db7cd4ad4a01093090b394bbd832ea8e76afd9ee522b1d7017d91c6f26d16581aa1a3f01ba911e0764dbbdb94ab43d948f1b3bd94f4d5b90f16b796f0aa57b5de3bd4d75d39b6c1a2adb66eacc8353e889e1b6ca50e078132f04901a5e2064380c94821a3036e7330c5f65303d64e00debe10685c62a21bfa889ee38b265393de69274bac6b450b2276a46ea4260a517bf5111a76ed8e9b5ec34ad85846d6a36ca68e12c3d44f73358d9149aa5484d1938e42a83e53042116f9d60a0bbc134540b755da1b0b6cdd6ba42d570711334f6a1dc0920cabb38a7e28964b74de154529e83dc013d290a9e899f13c2c516d608fc3a63b7e8d992b3d2edaf244e466225fa901e7e6db7b3a5f947169d2473a850c6e9bd9811e1aeaf24cc100600aa7ba393a745914c21e14c068faa969517aa83ed7760d98df9da06bceb5746e0f0306c192e21c26410b41d0f61747318f36509ff01251345f0be144bb6cd1d7b2a95a7f03de5add7abc43990acfb36ea9777692299e749a7e4c4993ad03cd28fef4d46be2e6f60e1050c2778392c05cc504b0ff135e55afe5b6bba5c433860d50b22d1961b19a5075571e75d6baaa0fc8698810dbe605d75f1f4f82696f637a60c57d05902df6050aac28939a3f0995781f1218c8d9ec2b4828ec223beb292c92288a0582a5099dc81f3939278f7702d375251500944053bd8463871e14fdf313dcc8d84e2ca619d17b4283d61c5584ca03fa0420506b09fc0aee97f649d8b17bb0a18ae1c2093dfd876fd4da994036c0e14e9d39fc542f627c5fa9a0e6ccd2252390bf7e1eaa02247ad2d05875702c8729c3effd87e10a2dab171513f2388e552974086c3be7f245f214ed7d072954055b91c57da1c37c8f51bdc12bd0c221840292183519b91dac5fc2974f8897796cd83dc61ea07aebe3ca5fd92f1a836ab37be3ecd4eabb8f66a759695b32e04f428e3bcb35ce57a957f78a0fbed7608c150bea5158fc8a0946d3501578bd7339c961a33c16f98959a726a6b0317ecb30e80cfe7c4014865871544a62c6aa905037e3a37f169c1cf72c647dfc8300e8bdd877e2cca3125715a231baf01967be5178e46f561bf66bf91df3913b59e12712980f44b259fb6c7676da7592c54d50e9e5cb1bbe4b74cfb4f18706976a250d1f4b060b36dbf90f26bf0c65f99adc121d3f86b35466b99d389c50b701aa4bb95493a9886cf0e56ebd86680aac877dc57fc8db35e3a346bd050c2fe560ae7e6833fcbf94cb39d7b6869aa41126bbd53a139c2d406a8f43b299ba4ccb914cc3f7a77c7299d0a93bc7bbf6249a55f0774b12a0041ad4ff251f1b9a47eb15d52c0a92f99d0e3faa8fabd1659b9194de714609048c9e13efcd9709558f67fd1846e6722e9dcc86220d0799a9699e2a43f2da9135990b12da96c36b0f2df90f964db7e10364fd0531b1ed924e4ad954b62d0fb0266187bdb3a9eab734f2b423607ce21f16f6ea008311fb76a545862c7b6376a032aa280c8b4626b59f62fcb17eee7ae31270d19d64551298d42ac02e26e127e194711b0bcb1b4dcdaa2293830d98d025fa075f01810cd36fb3ded38e1d00d084588dada9bc5cee6ac7740001f65f2e41306a6517a5ac84ba8d7b04bff9efb429154b5dcec88e061803fa4db10c88a760372cedbf883a46d7138d1c2406bcf07ed03f6196578a46f4660e3aad482806a03c150c860fe617640eae35691cfe810fed8b628ce16e0c3b23235cbd65a093cb0b97a5d42ca9ea43681727b686b0bf524a6c63eb279cf8eb630942cd44c65c8d0c1886e0fd9625291268965542769cfa703e3032d4885b4589d959972b17ba25bc11b2e0ba3db2308b85072de0d3b6ab81ba3200f90d6aa39c4cf6b8aa46945fac31266920129e9709eac5c35c0e3fb1c6b5f0e73a814c3efc5227442e0e9fff58773dbf1e2331f0ff6513adeaccea480a695e7af8ed06f06245192d6f451268949c3f07a428d265453d06c54f4749140d4b28b18b7561754193126fe4070e002f208238c8d7b4c62468f4e88e1fa6e7e6ea8153792672e227cb8ec66fbf11842859ab527bc547cc5d71bac12a0ea7cf7b71f8afcdcdec2493f40fe3e784327ecf82579c6397f4a7df34491892a0b42ff84c013417df43a58f33a8747a7e573bc4e43c0c27ee57ef10fd5e33458fd9fd9226ec85061cb1c071fe7d6c814c0895977e7ddac2805ac0e01b6e38097220bfb25a24a2ad514707c0f3822074c646e5484e41550e01a6140c3a7639aa85d7c9f8b8440100e47dadc402f95b1013ef4215c4bb229927139b89d5a7de723ebfc660e034f06808db66e2b3887329cceb013ef56ae18cf463ab36e9719490e6e64512bda9cb4ecade72c741ee85b4c92a5b84dee88d069e0d36a002c239510ce8a3714a2b4d5415a45fe9b8eb02805e45a0ee45ec02604c9525c0fb5aacc740436911d50268ae6a300f405d72b021594fd739e1889e5c51877a9f97b309d29cae47c92d501f2a6aaff7a22de656a03900eb5ce50c8a6e5db65633ac58af316bfc287b267a93976de3befd4aaba75b4c30") (async)
syz_clone(0x20000480, &(0x7f0000001700)="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", 0xfd, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="f755d38793ab03fbf8fc66c64c44bd3b8b69324ecea7dc054915909092839a29a01301a0993cf0d06a9b2a1dd7b49fab32371b099ebe531c34915bbb22675013982cf146ba770b3b218078afda0a28275dd4d717775e0896a6a7f69eca986a13116cd7e7c4d1b64fef58f2bf4240373e78c025c005c81f4071962d2ba9f12204a1beebb1e32c83dfbdcd4ef5f0a6c55fdd8e5cf9fd487f4beba95e8a0ca8bbff292f8670ca57082ddc2ae72ab9f97518967fdb4c87794aa20e904a3e4679fdb35ecaddd553c8d55335b16dc272435e75a6b7ae2ecb19627cef947c018d4af4c37c0dce80c269307c119ced7849a1acc238ce92d4d8045ed0c4b734991a509f9f76baa597908eee9dfa215ad4b4660c95afade7a46a5ff67022fe9f5ed7d7d3efdfc9b1b6bb7c7e3f84e016445ed8a4b7b0cc4c27473e0b78012ab93fd08b3dac113b5b773e8340017ed88127847a367451782cea52f903a91d33b439adbb966700082e6a9f0cd0221f9c71f968175a4ac6b3506a1e6ca46b1eaba13b151d3937f3acf08c4da24c7bf1b3d0e579708b44bedd642809f66877f621e30243d64f0e433e1cb3b89176fd763a8ea63822627f86e168a815e53a44314a7c076d6444e7e31b6a279b99c63c51892d55202839dce1a18ea8ccbca172bf9ebeaf5a6df35809c0d56b82d9a31bb5b3544d8e24cf8a2e5ba0ea977025e399ccd23e8e2f6b641399dd0026b1dc6964b28a429772bd18f2c81923c2a33834c5da76de74577d537b571e44f35d3514bd9b1f73f24e791b27cc8476feed4ab4dcfd7b02d0467c7bad973ca34d14aca7670126ce2724215a5f09637a762d7b6a910e928ea2416e2ec92500c09655f5fba684fa007e6af621d13356fc127b121938af2d037d0241fa5ec854eaa70e3d0e0648c878f0b4c86b6f0eb68e4ba0bf800c4d6ef24dc9832370af241f9f153289f76ed1bd0c6bfdade21b569311c0271da56dd8583fa23674ec5ec92d79cc34299c2309be47a4a3bca708dc70f0bad937d27fb5d647432cda9acd5371d5509b5f400e94ae5520ccd1e765bad2b301258ec5143d61f54a24f8bab4cb6b429f9e020d81f78b37044801e4eee6647a7153eafaaff0d0bc94251ce2d09d6dec98f66de5339ce822d2cc230b2a85ea5d56d925a93a9dacbee611f628f54c46df2e695c51ca75c4a47c08b44a3f6c15a7ace4705e9b9a401fc7c3971505a0f40965ca758cebe247f4afd71edbb1c96a208cc618fa45e2d1d8515ad6eb82ea117990bb96fa4ff38bdc21b9f1c7aaef9b28b2873e38bf8899032d61d9a7ca86f4128ca13d598e74f36d843dd59c9c9a7619a2be50bdaba87f78a2d3feb51085f5a0e1e346ba1666407099edfd283dc8e7991e3752d53d5f1fdb80dc9669989529133c36cbeba3652e46d287eab7fef55c683dc792812310d785a42e0f0f041872642aff9cc953bb758458caabda225de1507ce4cf4c898864f07cec2b1c4f1681fe40ada574270411f8f57107bd70786a298e0bb60ca4e2f755152bd6e4e09608c401718fd8fe872bd18d714052c9e0e4b705120328230904f40fe11b4e273f92c684164922e9de31b2dcdfb6602e2963974299904f02ca569e71025375faf6bdc756a183b319b9d520526d81a26ff9e9ffc34598937552c3d2589c6689034e3db0d559ee3f5e8db0bd2488c0e20b45fd218df6324bec1c1635dcb207fb9c5d30cc0e9e64d4b7ac27ea6fc4a4320c0d9771b2fb1cf6e71ae343b1944bc57c286ff5d62c3d9b9db54fd4a3ec4ba51f26e0c9d2bd43185995b2f8caf6f79adc1d94729ac7be0152e11c438351112a65972a338c48a409a1acfa17bbcdb709a44fd7ae85a680f25648d00993389334f8c0063cd7787f2429fe4c5425cf0bd410e24dbbc5ed4bc5a052371722e6123b9eb34a09e99037a3165f7d76f6862bf51d3422845508208420ae40083c10c50a348bb904196f11f813ba9ac6d8f8c186fe9c15fb8eaf7fc3ecebec286a950e7efbe45413a17b4abe51c677bc31489577efb6d91868209663093af640da0de6a6f518f6ea9446b889d99fac7781bc9dc682ff4f62ec02831e2e3310c50dfa8eb9c5077dbd922798aab78985794445af271c1e86282c49f56bea73f604fda35bf6b51850227c1465fd2337b97c357d93162c14386c6b0f16d18d4d0337369f93943553363730ea846aa9d159bf16810722b05b380c16d302bb70e21c9405b8f5f5d18ce8f5e6d77bbe51762350e52aa12bc922d34373a263228a57441fdb10870aca6d4a8a82586e6fd578d8dc4631f616541018740985598a5f8be4d641a1614d52ff849f682554a90d849fbcf5682d1520b68afab1bee338fd24b39037e0b632ff69c5a30644bb23a5e34002534179ef1403a85585315348467d98052d729b5f57d36ddf2a6c49b96c0e2f0521f65b0ee588df7a01de68a2680b528957371cccefe69792fc7c5285e884d182c8606f88af82cfd45e16dbb2638ca9d7e6c5e71f21051d4a6dc4dc6bbdae454fa1642c5f44f3c8257b6b54c48bd4f4dd04f65f9e5c2935c6639e5b02eea483dfe93d9b2ff1651f45d595bf3b17d1bcc983bbb4132f48ccea0733cae9d55326ce28507e711d4181be2124731974a04ac73d31d0c052aaeba600b6bbbdb83d4f0f15d3ab63275fdfe5524159c151f2bb5b2e575c5cae7f44a4bcad8ffb3759a39fa3f9aa059d29ad0a45e918abf2dd8d32f5889d26d526f3617231e30c364979d95f42b5c7154c248b90520a5c75ddfb63e9667d17a35e0c92e6bcd46aa8c4f38e8b5867b9937a57c3e74af06968ad176c16e700909a9f8cf8e912d67c5d02d12b8219be1a6805e125417b3f3e70d5ad3c18d7de6a6d0395704fa8d52c79db48db207c3dd7d5fa1d856a0427e6a5b3ee205c880a21783add5d6c34f42e63384b769aa2bce29eac8c22c8e6bc8936ff6a90d978f660366f22b26c6e4076c59c4a000e33e2d131b670f933fd9eb45ccc5823718446338a6d63fed3872197502d1d7f44d047fcd48b1756b51788490abc7485afa867e0b65e9610cfd6ac0393aab1d2dd357a0cb7e68b5b78be69ffde53eda85798ee7b91861f93e2c1a76a21162e725d96b46648a9696604d5536e647b6954eae74c7f3560d7a6e3ffc2dfd54eb94194df7dd128bbd215173f4733f58c9a352feda6bab81819c0e83cf4feed076a0cd443fc204624993db7cd4ad4a01093090b394bbd832ea8e76afd9ee522b1d7017d91c6f26d16581aa1a3f01ba911e0764dbbdb94ab43d948f1b3bd94f4d5b90f16b796f0aa57b5de3bd4d75d39b6c1a2adb66eacc8353e889e1b6ca50e078132f04901a5e2064380c94821a3036e7330c5f65303d64e00debe10685c62a21bfa889ee38b265393de69274bac6b450b2276a46ea4260a517bf5111a76ed8e9b5ec34ad85846d6a36ca68e12c3d44f73358d9149aa5484d1938e42a83e53042116f9d60a0bbc134540b755da1b0b6cdd6ba42d570711334f6a1dc0920cabb38a7e28964b74de154529e83dc013d290a9e899f13c2c516d608fc3a63b7e8d992b3d2edaf244e466225fa901e7e6db7b3a5f947169d2473a850c6e9bd9811e1aeaf24cc100600aa7ba393a745914c21e14c068faa969517aa83ed7760d98df9da06bceb5746e0f0306c192e21c26410b41d0f61747318f36509ff01251345f0be144bb6cd1d7b2a95a7f03de5add7abc43990acfb36ea9777692299e749a7e4c4993ad03cd28fef4d46be2e6f60e1050c2778392c05cc504b0ff135e55afe5b6bba5c433860d50b22d1961b19a5075571e75d6baaa0fc8698810dbe605d75f1f4f82696f637a60c57d05902df6050aac28939a3f0995781f1218c8d9ec2b4828ec223beb292c92288a0582a5099dc81f3939278f7702d375251500944053bd8463871e14fdf313dcc8d84e2ca619d17b4283d61c5584ca03fa0420506b09fc0aee97f649d8b17bb0a18ae1c2093dfd876fd4da994036c0e14e9d39fc542f627c5fa9a0e6ccd2252390bf7e1eaa02247ad2d05875702c8729c3effd87e10a2dab171513f2388e552974086c3be7f245f214ed7d072954055b91c57da1c37c8f51bdc12bd0c221840292183519b91dac5fc2974f8897796cd83dc61ea07aebe3ca5fd92f1a836ab37be3ecd4eabb8f66a759695b32e04f428e3bcb35ce57a957f78a0fbed7608c150bea5158fc8a0946d3501578bd7339c961a33c16f98959a726a6b0317ecb30e80cfe7c4014865871544a62c6aa905037e3a37f169c1cf72c647dfc8300e8bdd877e2cca3125715a231baf01967be5178e46f561bf66bf91df3913b59e12712980f44b259fb6c7676da7592c54d50e9e5cb1bbe4b74cfb4f18706976a250d1f4b060b36dbf90f26bf0c65f99adc121d3f86b35466b99d389c50b701aa4bb95493a9886cf0e56ebd86680aac877dc57fc8db35e3a346bd050c2fe560ae7e6833fcbf94cb39d7b6869aa41126bbd53a139c2d406a8f43b299ba4ccb914cc3f7a77c7299d0a93bc7bbf6249a55f0774b12a0041ad4ff251f1b9a47eb15d52c0a92f99d0e3faa8fabd1659b9194de714609048c9e13efcd9709558f67fd1846e6722e9dcc86220d0799a9699e2a43f2da9135990b12da96c36b0f2df90f964db7e10364fd0531b1ed924e4ad954b62d0fb0266187bdb3a9eab734f2b423607ce21f16f6ea008311fb76a545862c7b6376a032aa280c8b4626b59f62fcb17eee7ae31270d19d64551298d42ac02e26e127e194711b0bcb1b4dcdaa2293830d98d025fa075f01810cd36fb3ded38e1d00d084588dada9bc5cee6ac7740001f65f2e41306a6517a5ac84ba8d7b04bff9efb429154b5dcec88e061803fa4db10c88a760372cedbf883a46d7138d1c2406bcf07ed03f6196578a46f4660e3aad482806a03c150c860fe617640eae35691cfe810fed8b628ce16e0c3b23235cbd65a093cb0b97a5d42ca9ea43681727b686b0bf524a6c63eb279cf8eb630942cd44c65c8d0c1886e0fd9625291268965542769cfa703e3032d4885b4589d959972b17ba25bc11b2e0ba3db2308b85072de0d3b6ab81ba3200f90d6aa39c4cf6b8aa46945fac31266920129e9709eac5c35c0e3fb1c6b5f0e73a814c3efc5227442e0e9fff58773dbf1e2331f0ff6513adeaccea480a695e7af8ed06f06245192d6f451268949c3f07a428d265453d06c54f4749140d4b28b18b7561754193126fe4070e002f208238c8d7b4c62468f4e88e1fa6e7e6ea8153792672e227cb8ec66fbf11842859ab527bc547cc5d71bac12a0ea7cf7b71f8afcdcdec2493f40fe3e784327ecf82579c6397f4a7df34491892a0b42ff84c013417df43a58f33a8747a7e573bc4e43c0c27ee57ef10fd5e33458fd9fd9226ec85061cb1c071fe7d6c814c0895977e7ddac2805ac0e01b6e38097220bfb25a24a2ad514707c0f3822074c646e5484e41550e01a6140c3a7639aa85d7c9f8b8440100e47dadc402f95b1013ef4215c4bb229927139b89d5a7de723ebfc660e034f06808db66e2b3887329cceb013ef56ae18cf463ab36e9719490e6e64512bda9cb4ecade72c741ee85b4c92a5b84dee88d069e0d36a002c239510ce8a3714a2b4d5415a45fe9b8eb02805e45a0ee45ec02604c9525c0fb5aacc740436911d50268ae6a300f405d72b021594fd739e1889e5c51877a9f97b309d29cae47c92d501f2a6aaff7a22de656a03900eb5ce50c8a6e5db65633ac58af316bfc287b267a93976de3befd4aaba75b4c30")
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000002880)={<r6=>0x0, 0x6, 0x0, [0x6, 0x4, 0x7, 0x40, 0x3], [0x7, 0x2, 0x25b7, 0x7ff, 0x40, 0x0, 0xfe55, 0x1, 0x1, 0x6, 0x5ed, 0x1, 0xc9a4, 0xffffffffcdf83c2a, 0x8001, 0x255, 0x3, 0xffffffff, 0xfff, 0x9, 0x147a0f8e, 0x6, 0x8, 0xa, 0x140000000000, 0x7, 0x8, 0x6, 0x5bea, 0x5, 0x1ffc0, 0x4, 0x1000, 0x0, 0x800, 0x5, 0xffffffffffffff80, 0x80, 0xffffffffffffffff, 0x8, 0x8, 0x2, 0x6, 0x6, 0x0, 0x5, 0x7, 0x2, 0xff, 0xfffffffffffffffd, 0x8, 0x1, 0x7fffffff, 0x6, 0x1, 0x4, 0x1, 0x1, 0x80, 0xffffffffffffffff, 0x600000, 0x40, 0x7, 0x3, 0x4, 0x8cbc, 0x6, 0x7, 0x0, 0x8, 0x8001, 0x7, 0x7fffffff, 0x7, 0xbc, 0x646c4530, 0x400, 0xfffffffffffffffc, 0x77db3085, 0xffff, 0xfffffffffffeffff, 0x4, 0x9, 0x8, 0xfffffffffffffff7, 0x5, 0x5, 0x1000, 0x80000001, 0x7, 0x7, 0xffffffff, 0x28, 0x2, 0x401, 0x2627, 0x0, 0xfffffffffffffffa, 0x7f, 0x4, 0x2, 0x985, 0x10001, 0x7bf, 0x6fa5, 0x1, 0x7, 0x7473, 0x2, 0x4, 0x4, 0xff, 0x6, 0xbfe, 0x8, 0x3, 0x3, 0x5, 0x1, 0x4d, 0x2]})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002cc0)={r6, "494d039ce793838e80e13ece8e8cb3d8"})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003d00)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003d40)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003d80)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000003d80)=<r9=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000003e80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003dc0)={0x44, 0x0, 0x400, 0x0, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan4\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '(.*-[/\\'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x51)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000003f00), 0xffffffffffffffff)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000003fc0)={&(0x7f0000003ec0), 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xb0b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20040801)
read$FUSE(r1, &(0x7f0000004000)={0x2020, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2020)
sched_getaffinity(r11, 0x8, &(0x7f0000006040))
socket$netlink(0x10, 0x3, 0xb) (async)
r12 = socket$netlink(0x10, 0x3, 0xb)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x2000000, 0x50, r1, 0x20000000) (async)
r13 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x2000000, 0x50, r1, 0x20000000)
r14 = mmap$IORING_OFF_CQ_RING(0x0, 0x7fffffff, 0x2000000, 0x11, r1, 0x8000000)
syz_io_uring_setup(0x45e9, &(0x7f0000006080)={0x0, 0x694c, 0x80, 0x3, 0x202}, &(0x7f0000006100), &(0x7f0000006140), &(0x7f0000006180)=<r15=>0x0)
syz_io_uring_submit(r13, r14, r15, &(0x7f0000006240)=@IORING_OP_CONNECT={0x10, 0x72, 0x0, r12, 0x80, &(0x7f00000061c0)=@in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xcb}, 0x0, 0x0, 0x1})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.884043834s ago: executing program 2 (id=1632):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x5)
setresuid(r4, r4, r4)
ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, &(0x7f0000000080))
setxattr$trusted_overlay_origin(&(0x7f0000000140)='./gadget/ep1in-bulk\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, 0x0)

1.789939607s ago: executing program 2 (id=1633):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r1 = socket(0x400000000010, 0x3, 0x0)
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac", 0x4, 0x5, 0xffffffff}], 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"})
r3 = syz_open_pts(r2, 0x60801)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x4c840)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x50bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x55}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041094}, 0x40890)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0xc, '\x00', @buffer={"6ec190283a8cc61aa9c9e87940989ce36c189075f1513b6faea3f510efe03f93", 0x20}, 0x40}]})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000940)='securityfs\x00', 0x0, 0x0)

919.835392ms ago: executing program 2 (id=1649):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RLCREATE(r3, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x40, 0x2}, 0x3}}, 0x18)
r4 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472614b8671d466646e6f1d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k'])
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000040))
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x2798, 0x7}, @timestamp, @sack_perm, @sack_perm], 0x4)

748.861128ms ago: executing program 2 (id=1655):
chroot(&(0x7f0000000000)='./bus\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_clone(0x2100000, &(0x7f0000002400)="ebddc42578706cefe283849af81254561b65524e78d358a4deddc1c19a7404dc8e5e747737389acbfd1df5bb0043871693ac1bf5e15cea75edc42cdb3bc63f008cbfa24fa270d58ea9ed18adf9094e11012e8beca197a3b713d2befa7f9df861d902c0ee4fbb2bc826eb9806011ee2046672e88d82df07e9fed71110f0431e65fd8689df53eeb8d7fc0c60ad9afd6640e0019aae77d667548d61501b41d3ea2b87aea3aeac7e0d4597143ce4e4ae1bd2d3bedb71971b9d7690955bb3", 0xbc, &(0x7f00000024c0), &(0x7f0000002500), &(0x7f0000002540)="4d39b6e097688c94917755deb116e4591fca99cec76202") (async)
renameat(r0, &(0x7f0000002380)='\x00', r0, &(0x7f00000023c0)='./bus\x00')
open_tree(0xffffffffffffffff, 0x0, 0x1002) (async)
r1 = fanotify_init(0xf00, 0x2)
fanotify_mark(r1, 0x105, 0x8971, r0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, <r2=>0x0}, 0x2020)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000020c0)={{{@in=@dev, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002580)=0xe8) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000002200)='./bus\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x4000)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x4100004) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000025c0), r5)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002680)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x200408c1) (async)
setreuid(0xee01, 0x0)
setresuid(0x0, 0xee01, 0x0) (async)
write$eventfd(r6, &(0x7f0000001100)=0xffffffffffffffff, 0x8) (async)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000022c0)={0xa0, 0x0, r2, {{0x13, 0x2, 0x6, 0x101, 0x40, 0xfffffffb, {0x1, 0x8b, 0xbe, 0xcb, 0xd7fe, 0x407, 0x8, 0x4, 0xef05, 0x2000, 0xbdfd, r3, r4, 0x214, 0x10000}}}}, 0xa0)

748.010936ms ago: executing program 0 (id=1657):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10)
write(r4, &(0x7f00000002c0)="04", 0x1)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x80)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000)
r6 = dup2(r5, r5)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r2, &(0x7f0000002a80)={0x2020}, 0x8637)
write$vhost_msg_v2(r6, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e22, 0x81, @empty, 0x4}}, 0x4, 0x6}, &(0x7f0000000140)=0x90)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r9, 0x6}, 0x8)
close(r4)
process_vm_readv(r1, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c20000000100"})

689.743892ms ago: executing program 4 (id=1659):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000009c0)=[@acquire, @transaction={0x40406300, {0x1, 0x1f00, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000840)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x35}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000008c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})

688.870235ms ago: executing program 2 (id=1660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000100000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="60a00200000000001400030073797a5f74756e00000000000000000008000a"], 0x3c}}, 0x8000)

688.522299ms ago: executing program 4 (id=1661):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x800)
connect(r0, &(0x7f00000000c0)=@generic={0x1f, "89020821292940b4ae5aea0ffea4c5ccb7f4514410c32637628ac57b2e748d26039628fe7cd47f6847c5dffaa37beec479c34f2f2fee652d9fbd8df5ce345a8be87e48614ab52f6c32b97b25c97d4f16fa1801c58593b8c3750a13b5394eedb177bc31ab5239b6281d28e1718443a9f298b1b57b2d61e6cd37c168255c72"}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0xeddee9727d716731}, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={<r3=>0x0, 0xfff, 0x20, 0x200, 0x1}, &(0x7f0000000300)=0x18)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000340), 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x5}, 0x4001)
ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x284, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffbc, 0x3e}}}}, [@NL80211_ATTR_TESTDATA={0xc5, 0x45, "52974d81fcb58bb88ac5b3095486e4787d546bda5969f7a63dd316085e217336bdcb32d6b42ef380e7b3a5c2c795241029feff1fdaa7b8ada19c15097ed8847ffc0963526b2899dbd63ff5f1782909ff1391bb81e11218686ef48682e7aad90bf6b26dde5b7bba7a8a4d4f54d3813eadeedee34ce4d01b94afb3f303013588763d46a98033b2ec245cd9e4541068dd34975eabfa3b9bf9445e80a0898017a8ca334d0dc72a86b75f6362c2db27107c57a37c22a943cf3da9675a3a457011dd9575"}, @NL80211_ATTR_TESTDATA={0xa9, 0x45, "765401618a9fd484547fb94c624390f2938929336dd89ee40ab42631df99e1be6dc1d2c1ee0e3960a9e7b7efd3dc07ff70847ca9915d2214b189afb008bf158bd9c78693f98124d6eeaf161111d02be5791eb86571964a5519d2083cea23bbb3acd5a905cf8484ebf085d3c64ad879b48738ab28afd57ccf72fddb76bb5085f9f264caba3debf05cc728eea21507e756fbc2a376b75a9d857badd568fce2c57c43e67acb40"}, @NL80211_ATTR_TESTDATA={0x6a, 0x45, "c4dcb7a55057da8a62a212006ea92067ab76d40f275fef7b973d058a728a147b17867f77f00c820e00c66dd1cc2e214c9647a2abe2e3d1742fbd730b578adaa6fff06e33bd64ba8a1b8ee3d6af0c8940ffd901444c68e4dbe44cd8add78b37eca5e3cf31ee8d"}, @NL80211_ATTR_TESTDATA={0x7c, 0x45, "f89e896d017886cbd24faec221d1a6ae64a0c1b42c93fc9cc0fb7bcdc0a8c2c45ff5dfa25b3dbb9b8b4bf8ca895c95d1f96de4ea74250166f3327c5e8e96916c22a163e086e6e4b50757002e94a79c32d03dc1af98fb7f673cd1bf69cd2f3289a5d628645f893a84d7f9ce3f43cf951378571f6f728dca54"}]}, 0x284}, 0x1, 0x0, 0x0, 0x40040}, 0x2)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000800)=0xfffffffc, 0x4)
ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000840))
recvmsg$inet_nvme(r0, &(0x7f0000000b80)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/111, 0x6f}, {&(0x7f0000000980)=""/206, 0xce}, {&(0x7f0000000a80)=""/25, 0x19}], 0x3, &(0x7f0000000b00)=""/119, 0x77}, 0x10000)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x2f8, 0x3b8, 0x3b8, 0x208, 0x208, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000bc0), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1022", 0x1}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xffffffff, 0x0, 0xff000000], 0x1, 0x0, {0x3}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x2, 0x6, 0x1, 0x0, 0x4], 0x1, 0x1}}}, @common=@ah={{0x30}, {[0x7f, 0x8], 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfff, 0x8c, @private=0xa010100, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x2, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/bsg/2:0:0:0\x00', 0x40800, 0x0)
ioctl$BSG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000001200))
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001240)={r3, 0x7, 0xb, 0x3e1}, &(0x7f0000001280)=0x10)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000)
ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000001400)={0x3, 0x1})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001440)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x5, @local, 0x2}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}], 0xc0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, &(0x7f0000001540))
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001580)={'vxcan1\x00', 0x101})
pipe2$watch_queue(&(0x7f00000015c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
ioctl$BLKPBSZGET(r8, 0x127b, &(0x7f0000001600))
syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r4)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r9, 0x20, 0x4, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1c93}]}, 0x34}}, 0x20000001)

625.963188ms ago: executing program 4 (id=1662):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}, 0x1, 0x0, 0x700}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

625.727064ms ago: executing program 0 (id=1663):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x890b, &(0x7f0000000140)="00000000fffffffffffffdfd000000000f0000006c61706230")

625.529982ms ago: executing program 2 (id=1664):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1200020, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0xfffffffffffffe63}, 0x1, 0x0, 0x0, 0x8041}, 0x4) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0xfffffffffffffe63}, 0x1, 0x0, 0x0, 0x8041}, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x3)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000010000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\x00\x00'], 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500680601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c3bf760"], 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

624.144303ms ago: executing program 0 (id=1665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="58fe00001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0)

548.962862ms ago: executing program 0 (id=1666):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000002c0)="240000001a005f0400f9f4070009048c4f8e9a9f061e6c2f143aecc0b90c2589e9012699", 0x24)
mkdir(0x0, 0x1ff)
accept4(r0, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80, 0x80000)
r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x9, '\x00', "249e4502", "9e068dd9", '\x00', ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "0000effffffff700c00500", "000000000000000400"]})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407090000e234ecd1"], 0xa)

547.74312ms ago: executing program 0 (id=1668):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0xff07, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

434.904922ms ago: executing program 1 (id=1673):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
mount$overlay(0x5c00000000000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

359.332048ms ago: executing program 1 (id=1674):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @mss={0x2, 0xf}, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x3, 0x9}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae", 0x59}], 0x1, 0x0, 0x0, 0x1100}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x44040)

239.712443ms ago: executing program 1 (id=1675):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="390000002b20080002000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffffffffffc, {0xf7ffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd0a, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r3, 0x90000915, 0x200000000005)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @lsm=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f00000001c0))

139.769946ms ago: executing program 1 (id=1676):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0)
symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='dummy_udc.0\n', 0xc)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x800000038)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, &(0x7f00000006c0))
readahead(r7, 0x11a68990, 0x2)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000083, 0x0, 0x1001}]})
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66e", 0x59}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {0x0}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040)

49.167932ms ago: executing program 4 (id=1677):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x1f, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
syz_emit_ethernet(0x0, 0x0, 0x0)
ftruncate(r0, 0x208280000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x424)

48.19738ms ago: executing program 1 (id=1678):
setns(0xc9, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x3f, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)

48.054807ms ago: executing program 4 (id=1679):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xd8, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

233.31µs ago: executing program 0 (id=1680):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x5)
setresuid(r4, r4, r4)
ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, &(0x7f0000000080))
setxattr$trusted_overlay_origin(&(0x7f0000000140)='./gadget/ep1in-bulk\x00', &(0x7f0000000180), &(0x7f0000000240), 0x2, 0x0)
ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, 0x0)

82.336µs ago: executing program 4 (id=1681):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05000000010000", 0x7) (fail_nth: 1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x5)
setresuid(r4, r4, r4)
ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, &(0x7f0000000080))
setxattr$trusted_overlay_origin(&(0x7f0000000140)='./gadget/ep1in-bulk\x00', &(0x7f0000000180), &(0x7f0000000240), 0x2, 0x0)
ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, 0x0)

0s ago: executing program 1 (id=1682):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0x0, 0x3fffffffffffe000}, 0x0)

kernel console output (not intermixed with test programs):

785903052.922:867): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[   91.916974][   T42] audit: type=1800 audit(1785903052.952:868): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[   91.918792][ T7816] FAULT_INJECTION: forcing a failure.
[   91.918792][ T7816] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.931025][ T7816] CPU: 3 UID: 0 PID: 7816 Comm: syz.3.698 Not tainted syzkaller #0 PREEMPT(full) 
[   91.931042][ T7816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   91.931049][ T7816] Call Trace:
[   91.931053][ T7816]  <TASK>
[   91.931058][ T7816]  dump_stack_lvl+0x100/0x190
[   91.931077][ T7816]  should_fail_ex.cold+0x5/0xa
[   91.931115][ T7816]  _copy_from_user+0x2e/0xd0
[   91.931144][ T7816]  memdup_user+0x6b/0xe0
[   91.931157][ T7816]  strndup_user+0x78/0xe0
[   91.931170][ T7816]  __x64_sys_mount+0x136/0x310
[   91.931187][ T7816]  ? __pfx___x64_sys_mount+0x10/0x10
[   91.931206][ T7816]  do_syscall_64+0x115/0x870
[   91.931221][ T7816]  ? clear_bhb_loop+0x40/0x90
[   91.931235][ T7816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.931246][ T7816] RIP: 0033:0x7f219659e019
[   91.931256][ T7816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.931266][ T7816] RSP: 002b:00007f2197549028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   91.931280][ T7816] RAX: ffffffffffffffda RBX: 00007f2196825fa0 RCX: 00007f219659e019
[   91.931287][ T7816] RDX: 0000200000000340 RSI: 0000200000000000 RDI: 0000200000000300
[   91.931294][ T7816] RBP: 00007f2197549090 R08: 0000200000000400 R09: 0000000000000000
[   91.931300][ T7816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.931307][ T7816] R13: 00007f2196826038 R14: 00007f2196825fa0 R15: 00007ffc7cfdb2e8
[   91.931321][ T7816]  </TASK>
[   91.981549][   T42] audit: type=1800 audit(1785903052.972:869): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[   91.989743][   T42] audit: type=1400 audit(1785903052.992:870): avc:  denied  { setopt } for  pid=7817 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.997547][   T42] audit: type=1400 audit(1785903053.002:871): avc:  denied  { write } for  pid=7817 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   92.006326][   T42] audit: type=1800 audit(1785903053.042:872): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[   92.011567][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.699'.
[   92.017489][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.699'.
[   92.024865][ T7819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=7819 comm=syz.1.699
[   92.032202][   T42] audit: type=1800 audit(1785903053.062:873): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[   92.055911][ T7825] netlink: 64 bytes leftover after parsing attributes in process `syz.3.702'.
[   92.063859][ T7825] syzkaller1: entered promiscuous mode
[   92.066066][ T7825] syzkaller1: entered allmulticast mode
[   92.140321][ T7830] xt_CT: You must specify a L4 protocol and not use inversions on it
[   92.203920][ T7834] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.290806][ T7834] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.359389][ T7834] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.432517][ T7834] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.527559][ T7793] overlayfs: statfs failed on './file0'
[   92.544902][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.547878][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.564715][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.567387][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.702894][ T7875] netlink: 'syz.3.720': attribute type 10 has an invalid length.
[   92.781077][ T7883] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   92.786529][ T7885] netlink: 'syz.3.725': attribute type 58 has an invalid length.
[   92.787576][ T7883] overlayfs: missing 'lowerdir'
[   92.953150][ T7912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.955502][ T7912] IPv6: NLM_F_CREATE should be set when creating new route
[   92.957736][ T7912] IPv6: NLM_F_CREATE should be set when creating new route
[   93.049020][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'.
[   93.155815][ T7930] binder: 7928:7930 ioctl c0306201 200000000080 returned -14
[   93.160455][ T7930] binder: 7928:7930 unknown command 1077961552
[   93.162458][ T7930] binder: 7928:7930 ioctl c0306201 2000000003c0 returned -22
[   93.314724][  T849] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   93.461532][ T7957] FAULT_INJECTION: forcing a failure.
[   93.461532][ T7957] name failslab, interval 1, probability 0, space 0, times 0
[   93.465640][ T7957] CPU: 0 UID: 0 PID: 7957 Comm: syz.0.747 Not tainted syzkaller #0 PREEMPT(full) 
[   93.465654][ T7957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   93.465661][ T7957] Call Trace:
[   93.465665][ T7957]  <TASK>
[   93.465670][ T7957]  dump_stack_lvl+0x100/0x190
[   93.465688][ T7957]  should_fail_ex.cold+0x5/0xa
[   93.465701][ T7957]  should_failslab+0xc2/0x120
[   93.465716][ T7957]  kmem_cache_alloc_noprof+0x91/0x6a0
[   93.465730][ T7957]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   93.465747][ T7957]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   93.465766][ T7957]  mmu_topup_memory_caches+0x11a/0x170
[   93.465783][ T7957]  kvm_mmu_load+0xe2/0x2570
[   93.465797][ T7957]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   93.465809][ T7957]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   93.465822][ T7957]  ? __pfx_kvm_mmu_load+0x10/0x10
[   93.465836][ T7957]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   93.465849][ T7957]  ? kvm_check_and_inject_events+0x873/0x12a0
[   93.465864][ T7957]  ? record_steal_time+0x3a0/0xbb0
[   93.465880][ T7957]  vcpu_run+0x3aaa/0x5de0
[   93.465911][ T7957]  ? __pfx_vcpu_run+0x10/0x10
[   93.465934][ T7957]  ? rcu_is_watching+0x12/0xc0
[   93.465953][ T7957]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   93.465969][ T7957]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   93.465988][ T7957]  kvm_vcpu_ioctl+0x730/0x1700
[   93.466001][ T7957]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   93.466014][ T7957]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   93.466028][ T7957]  ? do_vfs_ioctl+0x226/0x13e0
[   93.466045][ T7957]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   93.466060][ T7957]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   93.466083][ T7957]  ? __fget_files+0x215/0x3d0
[   93.466094][ T7957]  ? hook_file_ioctl_common+0x140/0x440
[   93.466111][ T7957]  ? selinux_file_ioctl+0x13b/0x290
[   93.466127][ T7957]  ? selinux_file_ioctl+0xb6/0x290
[   93.466144][ T7957]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   93.466157][ T7957]  __x64_sys_ioctl+0x18e/0x210
[   93.466173][ T7957]  do_syscall_64+0x115/0x870
[   93.466188][ T7957]  ? clear_bhb_loop+0x40/0x90
[   93.466208][ T7957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.466224][ T7957] RIP: 0033:0x7f4d86b9e019
[   93.466235][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.466246][ T7957] RSP: 002b:00007f4d84df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   93.466257][ T7957] RAX: ffffffffffffffda RBX: 00007f4d86e25fa0 RCX: 00007f4d86b9e019
[   93.466268][ T7957] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[   93.466274][ T7957] RBP: 00007f4d84df6090 R08: 0000000000000000 R09: 0000000000000000
[   93.466280][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   93.466286][ T7957] R13: 00007f4d86e26038 R14: 00007f4d86e25fa0 R15: 00007ffe2fd0e268
[   93.466300][ T7957]  </TASK>
[   93.542276][  T849] usb 6-1: not running at top speed; connect to a high speed hub
[   93.570088][  T849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.574334][  T849] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[   93.578316][  T849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.752767][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'.
[   93.756647][ T7970] netlink: 'syz.0.751': attribute type 1 has an invalid length.
[   93.759387][ T7970] nbd: error processing sock list
[   93.901755][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.753'.
[   93.908995][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'.
[   93.926531][ T7981] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   93.980313][ T7986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'.
[   94.120908][ T7999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.762'.
[   94.211619][ T8004] lo: entered allmulticast mode
[   94.215349][ T8002] lo: left allmulticast mode
[   94.258814][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.767'.
[   94.402133][ T8019] FAULT_INJECTION: forcing a failure.
[   94.402133][ T8019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.406973][ T8019] CPU: 2 UID: 0 PID: 8019 Comm: syz.2.772 Not tainted syzkaller #0 PREEMPT(full) 
[   94.406989][ T8019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.407001][ T8019] Call Trace:
[   94.407006][ T8019]  <TASK>
[   94.407010][ T8019]  dump_stack_lvl+0x100/0x190
[   94.407041][ T8019]  should_fail_ex.cold+0x5/0xa
[   94.407060][ T8019]  _copy_from_user+0x2e/0xd0
[   94.407108][ T8019]  video_usercopy+0xe71/0x1730
[   94.407129][ T8019]  ? __pfx___video_do_ioctl+0x10/0x10
[   94.407143][ T8019]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   94.407169][ T8019]  ? __pfx_video_usercopy+0x10/0x10
[   94.407191][ T8019]  v4l2_ioctl+0x1bd/0x250
[   94.407206][ T8019]  ? __pfx_v4l2_ioctl+0x10/0x10
[   94.407221][ T8019]  __x64_sys_ioctl+0x18e/0x210
[   94.407245][ T8019]  do_syscall_64+0x115/0x870
[   94.407258][ T8019]  ? clear_bhb_loop+0x40/0x90
[   94.407271][ T8019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.407282][ T8019] RIP: 0033:0x7f294339e019
[   94.407292][ T8019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.407303][ T8019] RSP: 002b:00007f29442db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   94.407315][ T8019] RAX: ffffffffffffffda RBX: 00007f2943625fa0 RCX: 00007f294339e019
[   94.407321][ T8019] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000003
[   94.407328][ T8019] RBP: 00007f29442db090 R08: 0000000000000000 R09: 0000000000000000
[   94.407334][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.407340][ T8019] R13: 00007f2943626038 R14: 00007f2943625fa0 R15: 00007ffcdef98718
[   94.407353][ T8019]  </TASK>
[   94.507839][ T8024] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   94.511132][ T8024] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock
[   94.514835][ T8024] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   94.517601][ T8024] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock
[   94.658272][ T8040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.780'.
[   94.721465][ T8047] FAULT_INJECTION: forcing a failure.
[   94.721465][ T8047] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.726538][ T8047] CPU: 2 UID: 0 PID: 8047 Comm: syz.3.783 Not tainted syzkaller #0 PREEMPT(full) 
[   94.726554][ T8047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.726561][ T8047] Call Trace:
[   94.726566][ T8047]  <TASK>
[   94.726570][ T8047]  dump_stack_lvl+0x100/0x190
[   94.726631][ T8047]  should_fail_ex.cold+0x5/0xa
[   94.726646][ T8047]  _copy_from_user+0x2e/0xd0
[   94.726670][ T8047]  copy_msghdr_from_user+0x9f/0x4c0
[   94.726694][ T8047]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   94.726707][ T8047]  ? rcu_is_watching+0x12/0xc0
[   94.726731][ T8047]  ? ___sys_recvmsg+0x177/0x1a0
[   94.726741][ T8047]  ? kfree+0x1e5/0x6c0
[   94.726766][ T8047]  ___sys_recvmsg+0xdd/0x1a0
[   94.726777][ T8047]  ? __pfx____sys_recvmsg+0x10/0x10
[   94.726796][ T8047]  ? __pfx___might_resched+0x10/0x10
[   94.726813][ T8047]  do_recvmmsg+0x2f3/0x740
[   94.726826][ T8047]  ? __pfx_do_recvmmsg+0x10/0x10
[   94.726840][ T8047]  ? __mutex_unlock_slowpath+0x35d/0x930
[   94.726892][ T8047]  ? __fget_files+0x21f/0x3d0
[   94.726915][ T8047]  __x64_sys_recvmmsg+0x22a/0x280
[   94.726932][ T8047]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   94.726951][ T8047]  do_syscall_64+0x115/0x870
[   94.726965][ T8047]  ? clear_bhb_loop+0x40/0x90
[   94.726979][ T8047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.726990][ T8047] RIP: 0033:0x7f219659e019
[   94.727000][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.727012][ T8047] RSP: 002b:00007f2197549028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   94.727024][ T8047] RAX: ffffffffffffffda RBX: 00007f2196825fa0 RCX: 00007f219659e019
[   94.727031][ T8047] RDX: 0000000000000004 RSI: 0000200000004480 RDI: 0000000000000003
[   94.727038][ T8047] RBP: 00007f2197549090 R08: 0000000000000000 R09: 0000000000000000
[   94.727044][ T8047] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000002
[   94.727051][ T8047] R13: 00007f2196826038 R14: 00007f2196825fa0 R15: 00007ffc7cfdb2e8
[   94.727089][ T8047]  </TASK>
[   95.009814][   T64] Bluetooth: hci2: unexpected event 0x07 length: 7 < 255
[   95.092671][ T8080] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   95.207913][ T8088] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.260815][ T8088] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.359451][ T8088] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.421349][ T8088] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.497775][ T8103] gfs2: error -5 reading superblock
[   95.604825][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.609774][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.642146][ T8114] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   95.645215][ T8114] overlayfs: missing 'lowerdir'
[   96.074479][ T3266] usb 6-1: USB disconnect, device number 3
[   96.109640][ T8126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.198473][ T8128] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[   96.227621][ T8130] mmap: syz.1.814 (8130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.281951][ T8133] binder: 8132:8133 ioctl c0306201 200000000080 returned -14
[   96.287662][ T8133] binder: 8132:8133 unknown command 1077961560
[   96.290443][ T8133] binder: 8132:8133 ioctl c0306201 2000000003c0 returned -22
[   96.512378][ T8149] FAULT_INJECTION: forcing a failure.
[   96.512378][ T8149] name failslab, interval 1, probability 0, space 0, times 0
[   96.517876][ T8149] CPU: 3 UID: 0 PID: 8149 Comm: syz.0.820 Not tainted syzkaller #0 PREEMPT(full) 
[   96.517892][ T8149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.517905][ T8149] Call Trace:
[   96.517913][ T8149]  <TASK>
[   96.517918][ T8149]  dump_stack_lvl+0x100/0x190
[   96.517948][ T8149]  should_fail_ex.cold+0x5/0xa
[   96.517969][ T8149]  should_failslab+0xc2/0x120
[   96.517984][ T8149]  kmem_cache_alloc_noprof+0x91/0x6a0
[   96.517998][ T8149]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   96.518014][ T8149]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[   96.518030][ T8149]  mmu_topup_memory_caches+0x11a/0x170
[   96.518048][ T8149]  kvm_mmu_load+0xe2/0x2570
[   96.518062][ T8149]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   96.518073][ T8149]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   96.518086][ T8149]  ? __pfx_kvm_mmu_load+0x10/0x10
[   96.518100][ T8149]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   96.518114][ T8149]  ? kvm_check_and_inject_events+0x873/0x12a0
[   96.518129][ T8149]  ? record_steal_time+0x3a0/0xbb0
[   96.518142][ T8149]  vcpu_run+0x3aaa/0x5de0
[   96.518157][ T8149]  ? mark_held_locks+0x40/0x70
[   96.518176][ T8149]  ? __pfx_vcpu_run+0x10/0x10
[   96.518196][ T8149]  ? rcu_is_watching+0x12/0xc0
[   96.518215][ T8149]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   96.518231][ T8149]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   96.518255][ T8149]  kvm_vcpu_ioctl+0x730/0x1700
[   96.518269][ T8149]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   96.518281][ T8149]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   96.518296][ T8149]  ? do_vfs_ioctl+0x226/0x13e0
[   96.518322][ T8149]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   96.518338][ T8149]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   96.518375][ T8149]  ? __fget_files+0x215/0x3d0
[   96.518386][ T8149]  ? hook_file_ioctl_common+0x140/0x440
[   96.518409][ T8149]  ? selinux_file_ioctl+0x13b/0x290
[   96.518426][ T8149]  ? selinux_file_ioctl+0xb6/0x290
[   96.518443][ T8149]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   96.518456][ T8149]  __x64_sys_ioctl+0x18e/0x210
[   96.518472][ T8149]  do_syscall_64+0x115/0x870
[   96.518490][ T8149]  ? clear_bhb_loop+0x40/0x90
[   96.518504][ T8149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.518516][ T8149] RIP: 0033:0x7f4d86b9e019
[   96.518527][ T8149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.518538][ T8149] RSP: 002b:00007f4d84df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   96.518553][ T8149] RAX: ffffffffffffffda RBX: 00007f4d86e25fa0 RCX: 00007f4d86b9e019
[   96.518560][ T8149] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[   96.518566][ T8149] RBP: 00007f4d84df6090 R08: 0000000000000000 R09: 0000000000000000
[   96.518572][ T8149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   96.518578][ T8149] R13: 00007f4d86e26038 R14: 00007f4d86e25fa0 R15: 00007ffe2fd0e268
[   96.518591][ T8149]  </TASK>
[   96.834821][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.847460][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.854677][   T42] kauditd_printk_skb: 162 callbacks suppressed
[   96.854697][   T42] audit: type=1800 audit(1785903057.882:1036): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[   96.864722][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.875109][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.880406][   T42] audit: type=1800 audit(1785903057.912:1037): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[   96.893086][ T8176] netlink: 44 bytes leftover after parsing attributes in process `syz.3.829'.
[   96.893882][   T42] audit: type=1800 audit(1785903057.922:1038): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[   96.912324][   T42] audit: type=1800 audit(1785903057.942:1039): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.830" name="ipv4_port" dev="configfs" ino=25358 res=0 errno=0
[   96.925026][   T42] audit: type=1800 audit(1785903057.942:1040): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[   96.936340][   T42] audit: type=1800 audit(1785903057.972:1041): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[   96.952250][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'.
[   96.954820][   T42] audit: type=1800 audit(1785903057.992:1042): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[   96.955800][ T8179] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   96.970030][   T42] audit: type=1800 audit(1785903058.002:1043): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[   96.980917][ T8187] syz_tun: entered allmulticast mode
[   96.987248][ T8186] syz_tun: left allmulticast mode
[   96.993607][   T42] audit: type=1800 audit(1785903058.022:1044): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[   97.006103][   T42] audit: type=1800 audit(1785903058.032:1045): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[   97.023838][ T8193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.835'.
[   97.061510][ T8192] macvtap1: entered allmulticast mode
[   97.063373][ T8192] bond0: entered allmulticast mode
[   97.065835][ T8192] bond_slave_0: entered allmulticast mode
[   97.067702][ T8192] bond_slave_1: entered allmulticast mode
[   97.069748][ T8192] bond_slave_0: entered promiscuous mode
[   97.073013][ T8192] bond_slave_1: entered promiscuous mode
[   97.078206][ T8192] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   97.083477][ T8192] bond0: left allmulticast mode
[   97.085433][ T8192] bond_slave_0: left allmulticast mode
[   97.087166][ T8192] bond_slave_1: left allmulticast mode
[   97.100672][  T849] bond_slave_0: left promiscuous mode
[   97.103816][  T849] bond_slave_1: left promiscuous mode
[   97.202870][ T8205] input: syz1 as /devices/virtual/input/input11
[   97.218147][ T8205] comedi comedi2: dac02: I/O base address or length out of range
[   97.223009][ T8205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1519 sclass=netlink_route_socket pid=8205 comm=syz.3.841
[   97.236009][ T8205] fuse: Unknown parameter 'fe'
[   97.341407][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.346509][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.353288][   T64] Bluetooth: hci2: unexpected event for opcode 0x1804
[   97.402680][ T8214] tipc: Started in network mode
[   97.405048][ T8214] tipc: Node identity ac14140f, cluster identity 4711
[   97.407948][ T8214] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   97.410816][ T8213] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   97.972280][ T8228] comedi comedi4: comedi_config --init_data is deprecated
[   98.000821][ T8230] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   98.003231][ T8230] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   98.003682][   T64] Bluetooth: hci2: unexpected event for opcode 0x0405
[   98.010562][ T8230] vhci_hcd vhci_hcd.0: Device attached
[   98.015042][ T8232] vhci_hcd: cannot find the pending unlink 6
[   98.023606][   T64] Bluetooth: hci1: unexpected event 0x07 length: 7 < 255
[   98.030937][ T8232] vhci_hcd: connection closed
[   98.033652][   T13] vhci_hcd vhci_hcd.1: stop threads
[   98.039095][   T13] vhci_hcd vhci_hcd.1: release socket
[   98.040855][   T13] vhci_hcd vhci_hcd.1: disconnect device
[   98.189899][ T8245] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in;
[   98.189899][ T8245]    program syz.0.856 not setting count and/or reply_len properly
[   98.196804][ T8245] No source specified
[   98.942521][ T8267] bridge_slave_0: left allmulticast mode
[   98.948194][ T8267] bridge_slave_0: left promiscuous mode
[   98.951017][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.963660][ T8267] bridge_slave_1: left allmulticast mode
[   98.969682][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.996266][ T8267] bond0: (slave bond_slave_0): Releasing backup interface
[   99.008267][ T8267] bond0: (slave bond_slave_1): Releasing backup interface
[   99.017786][ T8267] team0: Port device team_slave_0 removed
[   99.026349][ T8267] team0: Port device team_slave_1 removed
[   99.029441][ T8267] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.032152][ T8267] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.041243][ T8267] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.043681][ T8267] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.043744][ T8276] openvswitch: netlink: Actions may not be safe on all matching packets
[   99.052576][ T8267] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   99.099103][ T8283] syz.0.867 uses obsolete (PF_INET,SOCK_PACKET)
[   99.361416][ T8291] netlink: 'syz.3.871': attribute type 10 has an invalid length.
[   99.431280][ T8296] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   99.518756][ T8302] netlink: 'syz.1.876': attribute type 1 has an invalid length.
[   99.558937][ T8308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   99.662670][ T8318] binder: 8317:8318 ioctl c0306201 200000000080 returned -14
[   99.669072][ T8318] binder: 8317:8318 unknown command 1077961576
[   99.671388][ T8318] binder: 8317:8318 ioctl c0306201 2000000003c0 returned -22
[   99.945045][ T8340] FAULT_INJECTION: forcing a failure.
[   99.945045][ T8340] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   99.949375][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.2.891 Not tainted syzkaller #0 PREEMPT(full) 
[   99.949390][ T8340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   99.949397][ T8340] Call Trace:
[   99.949401][ T8340]  <TASK>
[   99.949405][ T8340]  dump_stack_lvl+0x100/0x190
[   99.949424][ T8340]  should_fail_ex.cold+0x5/0xa
[   99.949436][ T8340]  ? prepare_alloc_pages+0x16d/0x5f0
[   99.949453][ T8340]  should_fail_alloc_page+0xeb/0x140
[   99.949468][ T8340]  prepare_alloc_pages+0x1f0/0x5f0
[   99.949485][ T8340]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[   99.949498][ T8340]  ? __pfx_stack_trace_save+0x10/0x10
[   99.949511][ T8340]  ? stack_depot_save_flags+0x27/0x9d0
[   99.949538][ T8340]  ? stack_depot_save_flags+0x27/0x9d0
[   99.949552][ T8340]  ? lock_acquire+0x1b9/0x370
[   99.949567][ T8340]  ? kasan_save_stack+0x3f/0x50
[   99.949579][ T8340]  ? kasan_save_stack+0x30/0x50
[   99.949590][ T8340]  ? kasan_save_track+0x14/0x30
[   99.949602][ T8340]  ? __kasan_kmalloc+0xaa/0xb0
[   99.949613][ T8340]  ? __kvmalloc_node_noprof+0x34f/0x970
[   99.949625][ T8340]  ? __kvm_mmu_topup_memory_cache+0x455/0x5f0
[   99.949638][ T8340]  ? mmu_topup_memory_caches+0xbc/0x170
[   99.949654][ T8340]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   99.949666][ T8340]  ? kvm_vcpu_ioctl+0x730/0x1700
[   99.949677][ T8340]  ? do_syscall_64+0x115/0x870
[   99.949701][ T8340]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   99.949716][ T8340]  ? policy_nodemask+0xed/0x4f0
[   99.949733][ T8340]  alloc_pages_mpol+0x1fb/0x540
[   99.949748][ T8340]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   99.949762][ T8340]  ? __kvmalloc_node_noprof+0x36d/0x970
[   99.949778][ T8340]  alloc_pages_noprof+0x1a/0x160
[   99.949794][ T8340]  get_free_pages_noprof+0x10/0xb0
[   99.949808][ T8340]  __kvm_mmu_topup_memory_cache+0x278/0x5f0
[   99.949824][ T8340]  mmu_topup_memory_caches+0xbc/0x170
[   99.949840][ T8340]  kvm_mmu_load+0xe2/0x2570
[   99.949854][ T8340]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[   99.949865][ T8340]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[   99.949878][ T8340]  ? __pfx_kvm_mmu_load+0x10/0x10
[   99.949892][ T8340]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[   99.949905][ T8340]  ? kvm_check_and_inject_events+0x873/0x12a0
[   99.949924][ T8340]  ? record_steal_time+0x3a0/0xbb0
[   99.949937][ T8340]  vcpu_run+0x3aaa/0x5de0
[   99.949958][ T8340]  ? __pfx_vcpu_run+0x10/0x10
[   99.949977][ T8340]  ? rcu_is_watching+0x12/0xc0
[   99.949995][ T8340]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   99.950011][ T8340]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[   99.950030][ T8340]  kvm_vcpu_ioctl+0x730/0x1700
[   99.950043][ T8340]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   99.950056][ T8340]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   99.950069][ T8340]  ? do_vfs_ioctl+0x226/0x13e0
[   99.950085][ T8340]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   99.950101][ T8340]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   99.950124][ T8340]  ? __fget_files+0x215/0x3d0
[   99.950135][ T8340]  ? hook_file_ioctl_common+0x140/0x440
[   99.950151][ T8340]  ? selinux_file_ioctl+0x13b/0x290
[   99.950167][ T8340]  ? selinux_file_ioctl+0xb6/0x290
[   99.950185][ T8340]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   99.950197][ T8340]  __x64_sys_ioctl+0x18e/0x210
[   99.950213][ T8340]  do_syscall_64+0x115/0x870
[   99.950226][ T8340]  ? clear_bhb_loop+0x40/0x90
[   99.950239][ T8340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.950250][ T8340] RIP: 0033:0x7f294339e019
[   99.950259][ T8340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.950270][ T8340] RSP: 002b:00007f29442db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.950281][ T8340] RAX: ffffffffffffffda RBX: 00007f2943625fa0 RCX: 00007f294339e019
[   99.950287][ T8340] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[   99.950294][ T8340] RBP: 00007f29442db090 R08: 0000000000000000 R09: 0000000000000000
[   99.950300][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   99.950306][ T8340] R13: 00007f2943626038 R14: 00007f2943625fa0 R15: 00007ffcdef98718
[   99.950320][ T8340]  </TASK>
[  100.345017][ T8361] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.453094][ T8361] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.529178][ T8361] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.619646][ T8361] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.704940][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.714838][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.717671][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.720519][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.096794][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.100784][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.365783][ T8397] lo: entered allmulticast mode
[  101.369920][ T8396] lo: left allmulticast mode
[  101.409415][ T8401] __nla_validate_parse: 3 callbacks suppressed
[  101.409429][ T8401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.906'.
[  101.521177][ T8412] netlink: 'syz.2.910': attribute type 1 has an invalid length.
[  101.550626][ T8412] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.557889][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'.
[  101.561239][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'.
[  101.596017][ T8412] netlink: 'syz.2.910': attribute type 10 has an invalid length.
[  101.599387][ T8412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.910'.
[  101.603305][ T8412] dummy0: entered promiscuous mode
[  101.611795][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'.
[  101.615434][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.910'.
[  101.869042][   T42] kauditd_printk_skb: 133 callbacks suppressed
[  101.869069][   T42] audit: type=1800 audit(1785903062.892:1179): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  101.960358][   T42] audit: type=1800 audit(1785903062.992:1180): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[  101.978324][   T42] audit: type=1400 audit(1785903063.012:1181): avc:  denied  { append } for  pid=8433 comm="syz.0.918" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  102.066934][   T42] audit: type=1800 audit(1785903063.102:1182): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[  102.092357][   T42] audit: type=1800 audit(1785903063.122:1183): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[  102.118876][   T42] audit: type=1800 audit(1785903063.152:1184): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  102.129191][   T42] audit: type=1800 audit(1785903063.162:1185): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[  102.145036][   T42] audit: type=1800 audit(1785903063.182:1186): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.922" name="demote_size" dev="sysfs" ino=1252 res=0 errno=0
[  102.146363][ T8443] ip_tables: iptables: counters copy to user failed while replacing table
[  102.199882][   T42] audit: type=1800 audit(1785903063.232:1187): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0
[  102.257793][   T42] audit: type=1400 audit(1785903063.292:1188): avc:  denied  { shutdown } for  pid=8440 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  102.371865][ T8450] syzkaller0: entered promiscuous mode
[  102.374268][ T8450] syzkaller0: entered allmulticast mode
[  102.696236][ T8323] ceph: No mds server is up or the cluster is laggy
[  102.806629][ T8456] netlink: 'syz.1.926': attribute type 10 has an invalid length.
[  102.985650][ T8469] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  102.988706][ T8469] overlayfs: missing 'lowerdir'
[  103.082211][ T8478] IPv6: NLM_F_CREATE should be specified when creating new route
[  104.279476][ T8489] syz.2.935: calling unsupported SCSI_IOCTL_SEND_COMMAND
[  104.301774][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'.
[  104.333422][ T8493] FAULT_INJECTION: forcing a failure.
[  104.333422][ T8493] name failslab, interval 1, probability 0, space 0, times 0
[  104.339341][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.3.937 Not tainted syzkaller #0 PREEMPT(full) 
[  104.339357][ T8493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.339369][ T8493] Call Trace:
[  104.339374][ T8493]  <TASK>
[  104.339378][ T8493]  dump_stack_lvl+0x100/0x190
[  104.339409][ T8493]  should_fail_ex.cold+0x5/0xa
[  104.339423][ T8493]  should_failslab+0xc2/0x120
[  104.339437][ T8493]  kmem_cache_alloc_noprof+0x91/0x6a0
[  104.339451][ T8493]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  104.339467][ T8493]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  104.339484][ T8493]  mmu_topup_memory_caches+0x11a/0x170
[  104.339500][ T8493]  kvm_mmu_load+0xe2/0x2570
[  104.339515][ T8493]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  104.339526][ T8493]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  104.339539][ T8493]  ? __pfx_kvm_mmu_load+0x10/0x10
[  104.339553][ T8493]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  104.339567][ T8493]  ? kvm_check_and_inject_events+0x873/0x12a0
[  104.339582][ T8493]  ? record_steal_time+0x3a0/0xbb0
[  104.339595][ T8493]  vcpu_run+0x3aaa/0x5de0
[  104.339616][ T8493]  ? __pfx_vcpu_run+0x10/0x10
[  104.339636][ T8493]  ? rcu_is_watching+0x12/0xc0
[  104.339654][ T8493]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  104.339670][ T8493]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  104.339689][ T8493]  kvm_vcpu_ioctl+0x730/0x1700
[  104.339703][ T8493]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  104.339715][ T8493]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  104.339729][ T8493]  ? do_vfs_ioctl+0x226/0x13e0
[  104.339753][ T8493]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  104.339769][ T8493]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  104.339798][ T8493]  ? __fget_files+0x215/0x3d0
[  104.339809][ T8493]  ? hook_file_ioctl_common+0x140/0x440
[  104.339830][ T8493]  ? selinux_file_ioctl+0x13b/0x290
[  104.339861][ T8493]  ? selinux_file_ioctl+0xb6/0x290
[  104.339879][ T8493]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  104.339892][ T8493]  __x64_sys_ioctl+0x18e/0x210
[  104.339908][ T8493]  do_syscall_64+0x115/0x870
[  104.339926][ T8493]  ? clear_bhb_loop+0x40/0x90
[  104.339939][ T8493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.339950][ T8493] RIP: 0033:0x7f219659e019
[  104.339960][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.339970][ T8493] RSP: 002b:00007f2197549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.339982][ T8493] RAX: ffffffffffffffda RBX: 00007f2196825fa0 RCX: 00007f219659e019
[  104.339988][ T8493] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  104.339994][ T8493] RBP: 00007f2197549090 R08: 0000000000000000 R09: 0000000000000000
[  104.340000][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  104.340006][ T8493] R13: 00007f2196826038 R14: 00007f2196825fa0 R15: 00007ffc7cfdb2e8
[  104.340020][ T8493]  </TASK>
[  105.733129][ T8527] FAULT_INJECTION: forcing a failure.
[  105.733129][ T8527] name failslab, interval 1, probability 0, space 0, times 0
[  105.737427][ T8527] CPU: 1 UID: 0 PID: 8527 Comm: syz.3.948 Not tainted syzkaller #0 PREEMPT(full) 
[  105.737442][ T8527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.737448][ T8527] Call Trace:
[  105.737453][ T8527]  <TASK>
[  105.737457][ T8527]  dump_stack_lvl+0x100/0x190
[  105.737475][ T8527]  should_fail_ex.cold+0x5/0xa
[  105.737486][ T8527]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  105.737515][ T8527]  should_failslab+0xc2/0x120
[  105.737530][ T8527]  kmem_cache_alloc_noprof+0x91/0x6a0
[  105.737543][ T8527]  ? skb_clone+0x190/0x400
[  105.737560][ T8527]  skb_clone+0x190/0x400
[  105.737574][ T8527]  netlink_deliver_tap+0xaed/0xcc0
[  105.737589][ T8527]  netlink_dump+0x631/0xd00
[  105.737600][ T8527]  ? __pfx_netlink_dump+0x10/0x10
[  105.737609][ T8527]  ? kasan_quarantine_put+0x104/0x240
[  105.737627][ T8527]  ? kfree_skbmem+0x19f/0x210
[  105.737638][ T8527]  netlink_recvmsg+0x7dc/0xa90
[  105.737650][ T8527]  ? __pfx_netlink_recvmsg+0x10/0x10
[  105.737664][ T8527]  ? __import_iovec+0x1d2/0x640
[  105.737686][ T8527]  ? __pfx_netlink_recvmsg+0x10/0x10
[  105.737696][ T8527]  ____sys_recvmsg+0x5eb/0x670
[  105.737715][ T8527]  ? __pfx_____sys_recvmsg+0x10/0x10
[  105.737736][ T8527]  ? rcu_is_watching+0x12/0xc0
[  105.737753][ T8527]  ? ___sys_recvmsg+0x177/0x1a0
[  105.737762][ T8527]  ? kfree+0x1e5/0x6c0
[  105.737780][ T8527]  ___sys_recvmsg+0x16a/0x1a0
[  105.737791][ T8527]  ? __pfx____sys_recvmsg+0x10/0x10
[  105.737809][ T8527]  ? __pfx___might_resched+0x10/0x10
[  105.737825][ T8527]  do_recvmmsg+0x2f3/0x740
[  105.737840][ T8527]  ? __pfx_do_recvmmsg+0x10/0x10
[  105.737860][ T8527]  ? __mutex_unlock_slowpath+0x35d/0x930
[  105.737883][ T8527]  ? __fget_files+0x21f/0x3d0
[  105.737904][ T8527]  __x64_sys_recvmmsg+0x22a/0x280
[  105.737928][ T8527]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  105.737957][ T8527]  do_syscall_64+0x115/0x870
[  105.737975][ T8527]  ? clear_bhb_loop+0x40/0x90
[  105.737994][ T8527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.738012][ T8527] RIP: 0033:0x7f219659e019
[  105.738026][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.738042][ T8527] RSP: 002b:00007f2197528028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  105.738054][ T8527] RAX: ffffffffffffffda RBX: 00007f2196826090 RCX: 00007f219659e019
[  105.738061][ T8527] RDX: 0000000000000004 RSI: 0000200000004480 RDI: 0000000000000003
[  105.738068][ T8527] RBP: 00007f2197528090 R08: 0000000000000000 R09: 0000000000000000
[  105.738074][ T8527] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000002
[  105.738080][ T8527] R13: 00007f2196826128 R14: 00007f2196826090 R15: 00007ffc7cfdb2e8
[  105.738094][ T8527]  </TASK>
[  105.840444][ T8540] gadgetfs: bound to dummy_udc driver
[  105.893125][ T8547] bridge0: entered promiscuous mode
[  105.895201][ T8547] bridge0: entered allmulticast mode
[  105.938411][ T8552] IPv6: NLM_F_CREATE should be specified when creating new route
[  105.951088][ T8547] hfs: can't find a HFS filesystem on dev sr0
[  105.952745][ T8544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49280 sclass=netlink_route_socket pid=8544 comm=syz.2.955
[  105.961107][ T8554] FAULT_INJECTION: forcing a failure.
[  105.961107][ T8554] name failslab, interval 1, probability 0, space 0, times 0
[  105.965767][ T8554] CPU: 3 UID: 0 PID: 8554 Comm: syz.1.958 Not tainted syzkaller #0 PREEMPT(full) 
[  105.965782][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.965788][ T8554] Call Trace:
[  105.965792][ T8554]  <TASK>
[  105.965796][ T8554]  dump_stack_lvl+0x100/0x190
[  105.965815][ T8554]  should_fail_ex.cold+0x5/0xa
[  105.965829][ T8554]  should_failslab+0xc2/0x120
[  105.965844][ T8554]  __kmalloc_noprof+0xfc/0x820
[  105.965856][ T8554]  ? rcu_is_watching+0x12/0xc0
[  105.965873][ T8554]  ? tomoyo_realpath_from_path+0xb6/0x690
[  105.965888][ T8554]  tomoyo_realpath_from_path+0xb6/0x690
[  105.965902][ T8554]  tomoyo_path_number_perm+0x23c/0x580
[  105.965918][ T8554]  ? tomoyo_path_number_perm+0x22e/0x580
[  105.965934][ T8554]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  105.965962][ T8554]  ? find_held_lock+0x2b/0x80
[  105.965971][ T8554]  ? __fget_files+0x215/0x3d0
[  105.965982][ T8554]  ? hook_file_ioctl_common+0x140/0x440
[  105.965994][ T8554]  ? __fget_files+0x215/0x3d0
[  105.966007][ T8554]  ? __fget_files+0x21f/0x3d0
[  105.966020][ T8554]  security_file_ioctl+0xd3/0x230
[  105.966039][ T8554]  __x64_sys_ioctl+0xb7/0x210
[  105.966056][ T8554]  do_syscall_64+0x115/0x870
[  105.966069][ T8554]  ? clear_bhb_loop+0x40/0x90
[  105.966082][ T8554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.966093][ T8554] RIP: 0033:0x7f57c439e019
[  105.966102][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.966113][ T8554] RSP: 002b:00007f57c5243028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  105.966124][ T8554] RAX: ffffffffffffffda RBX: 00007f57c4625fa0 RCX: 00007f57c439e019
[  105.966130][ T8554] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004
[  105.966136][ T8554] RBP: 00007f57c5243090 R08: 0000000000000000 R09: 0000000000000000
[  105.966157][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.966163][ T8554] R13: 00007f57c4626038 R14: 00007f57c4625fa0 R15: 00007fff11b85358
[  105.966178][ T8554]  </TASK>
[  105.966195][ T8554] ERROR: Out of memory at tomoyo_realpath_from_path.
[  106.017622][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'.
[  106.063909][  T849] libceph: connect (2)0.0.0.0:6789 error -101
[  106.073281][  T849] libceph: ceph_tcp_connect failed: -101
[  106.078421][  T849] libceph: mon0 (2)0.0.0.0:6789 connect error
[  106.089829][ T8581] netlink: 'syz.3.964': attribute type 1 has an invalid length.
[  106.105125][ T8585] gadgetfs: bound to dummy_udc driver
[  106.119344][ T8581] bond2: entered promiscuous mode
[  106.144654][ T8581] bond2: entered allmulticast mode
[  106.146647][ T8581] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.161027][ T8589] erspan1: entered allmulticast mode
[  106.172163][ T8589] bond2: (slave erspan1): making interface the new active one
[  106.174910][ T8589] erspan1: entered promiscuous mode
[  106.178313][ T8589] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  106.334988][ T5827] libceph: connect (2)0.0.0.0:6789 error -101
[  106.340007][ T5827] libceph: ceph_tcp_connect failed: -101
[  106.342231][ T5827] libceph: mon0 (2)0.0.0.0:6789 connect error
[  106.345407][ T8598] netlink: 'syz.0.970': attribute type 83 has an invalid length.
[  106.380344][ T8601] (syz.0.971,8601,1):ocfs2_get_sector:1713 ERROR: status = -5
[  106.383371][ T8601] (syz.0.971,8601,1):ocfs2_sb_probe:753 ERROR: status = -5
[  106.390161][ T8601] (syz.0.971,8601,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  106.394285][ T8601] (syz.0.971,8601,0):ocfs2_fill_super:1177 ERROR: status = -5
[  106.445425][ T8604] x_tables: ip6_tables: CT target: only valid in raw table, not 
[  106.474369][ T8606] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  106.479656][ T8606] overlayfs: missing 'lowerdir'
[  106.535374][ T8614] gadgetfs: bound to dummy_udc driver
[  106.627576][ T8622] binder: 8621:8622 ioctl c0306201 200000000080 returned -14
[  106.633549][ T8622] binder: 8621:8622 unknown command 1077961717
[  106.640324][ T8622] binder: 8621:8622 ioctl c0306201 2000000003c0 returned -22
[  106.670795][ T8626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.780891][ T8635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.790915][ T8635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.866673][ T5827] libceph: connect (2)0.0.0.0:6789 error -101
[  106.869134][ T5827] libceph: ceph_tcp_connect failed: -101
[  106.871066][ T5827] libceph: mon0 (2)0.0.0.0:6789 connect error
[  106.911670][   T42] kauditd_printk_skb: 72 callbacks suppressed
[  106.911688][   T42] audit: type=1800 audit(1785903067.942:1261): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  106.934537][ T8638] gadgetfs: bound to dummy_udc driver
[  106.981876][   T42] audit: type=1800 audit(1785903068.012:1262): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  107.008458][   T42] audit: type=1800 audit(1785903068.042:1263): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  107.043635][ T8642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.988'.
[  107.051447][ T8642] bond0: entered promiscuous mode
[  107.053308][ T8642] bond_slave_0: entered promiscuous mode
[  107.055454][ T8642] bond_slave_1: entered promiscuous mode
[  107.058998][ T8642] gretap0: entered promiscuous mode
[  107.064044][ T8642] hsr1: entered promiscuous mode
[  107.127975][ T8568] ceph: No mds server is up or the cluster is laggy
[  107.159839][   T42] audit: type=1800 audit(1785903068.182:1264): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  107.172570][   T42] audit: type=1800 audit(1785903068.202:1265): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127067 res=0 errno=0
[  107.414142][   T42] audit: type=1800 audit(1785903068.442:1266): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  107.426088][   T42] audit: type=1800 audit(1785903068.462:1267): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127119 res=0 errno=0
[  107.585526][   T42] audit: type=1400 audit(1785903068.622:1268): avc:  denied  { block_suspend } for  pid=8655 comm="@" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  107.592020][   T42] audit: type=1800 audit(1785903068.622:1269): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127147 res=0 errno=0
[  107.598672][   T42] audit: type=1800 audit(1785903068.622:1270): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127162 res=0 errno=0
[  107.618296][ T8631] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  107.647114][ T8659] FAULT_INJECTION: forcing a failure.
[  107.647114][ T8659] name failslab, interval 1, probability 0, space 0, times 0
[  107.657422][ T8659] CPU: 3 UID: 0 PID: 8659 Comm: syz.0.995 Not tainted syzkaller #0 PREEMPT(full) 
[  107.657445][ T8659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  107.657463][ T8659] Call Trace:
[  107.657469][ T8659]  <TASK>
[  107.657476][ T8659]  dump_stack_lvl+0x100/0x190
[  107.657558][ T8659]  should_fail_ex.cold+0x5/0xa
[  107.657579][ T8659]  should_failslab+0xc2/0x120
[  107.657609][ T8659]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  107.657629][ T8659]  ? __alloc_skb+0x5b7/0x710
[  107.657666][ T8659]  ? __alloc_skb+0x140/0x710
[  107.657688][ T8659]  __alloc_skb+0x140/0x710
[  107.657706][ T8659]  ? __alloc_skb+0x5b7/0x710
[  107.657723][ T8659]  ? __pfx___alloc_skb+0x10/0x10
[  107.657749][ T8659]  netlink_alloc_large_skb+0x69/0x150
[  107.657769][ T8659]  netlink_sendmsg+0x680/0xda0
[  107.657790][ T8659]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.657809][ T8659]  ? selinux_socket_sendmsg+0x198/0x2f0
[  107.657857][ T8659]  ____sys_sendmsg+0xa4d/0xbe0
[  107.657880][ T8659]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.657917][ T8659]  ? __pfx_____sys_sendmsg+0x10/0x10
[  107.657953][ T8659]  ___sys_sendmsg+0x190/0x1e0
[  107.657971][ T8659]  ? __pfx____sys_sendmsg+0x10/0x10
[  107.657986][ T8659]  ? __lock_acquire+0x49f/0x1a40
[  107.658014][ T8659]  ? get_pid_task+0x106/0x250
[  107.658054][ T8659]  __sys_sendmsg+0x160/0x210
[  107.658077][ T8659]  ? __pfx___sys_sendmsg+0x10/0x10
[  107.658108][ T8659]  do_syscall_64+0x115/0x870
[  107.658147][ T8659]  ? clear_bhb_loop+0x40/0x90
[  107.658174][ T8659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.658190][ T8659] RIP: 0033:0x7f4d86b9e019
[  107.658206][ T8659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.658221][ T8659] RSP: 002b:00007f4d84df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.658239][ T8659] RAX: ffffffffffffffda RBX: 00007f4d86e25fa0 RCX: 00007f4d86b9e019
[  107.658250][ T8659] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008
[  107.658260][ T8659] RBP: 00007f4d84df6090 R08: 0000000000000000 R09: 0000000000000000
[  107.658269][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.658279][ T8659] R13: 00007f4d86e26038 R14: 00007f4d86e25fa0 R15: 00007ffe2fd0e268
[  107.658306][ T8659]  </TASK>
[  107.771030][ T8666] FAULT_INJECTION: forcing a failure.
[  107.771030][ T8666] name failslab, interval 1, probability 0, space 0, times 0
[  107.777000][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.3.998 Not tainted syzkaller #0 PREEMPT(full) 
[  107.777016][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  107.777023][ T8666] Call Trace:
[  107.777026][ T8666]  <TASK>
[  107.777031][ T8666]  dump_stack_lvl+0x100/0x190
[  107.777050][ T8666]  should_fail_ex.cold+0x5/0xa
[  107.777064][ T8666]  should_failslab+0xc2/0x120
[  107.777078][ T8666]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  107.777093][ T8666]  ? __alloc_skb+0x140/0x710
[  107.777109][ T8666]  __alloc_skb+0x140/0x710
[  107.777120][ T8666]  ? __alloc_skb+0x5b7/0x710
[  107.777132][ T8666]  ? __pfx___alloc_skb+0x10/0x10
[  107.777145][ T8666]  ? is_bpf_text_address+0x94/0x1a0
[  107.777160][ T8666]  ? kernel_text_address+0x8d/0x100
[  107.777175][ T8666]  alloc_skb_with_frags+0xdd/0x760
[  107.777194][ T8666]  sock_alloc_send_pskb+0x801/0x980
[  107.777207][ T8666]  ? __pfx_stack_trace_save+0x10/0x10
[  107.777218][ T8666]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  107.777233][ T8666]  ? stack_depot_save_flags+0x27/0x9d0
[  107.777266][ T8666]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  107.777279][ T8666]  ? kasan_save_stack+0x3f/0x50
[  107.777291][ T8666]  ? kasan_save_stack+0x30/0x50
[  107.777302][ T8666]  ? kasan_save_track+0x14/0x30
[  107.777314][ T8666]  ? __kasan_slab_free+0x5f/0x80
[  107.777328][ T8666]  ? __lock_acquire+0x49f/0x1a40
[  107.777344][ T8666]  __ip_append_data+0x20d3/0x44d0
[  107.777367][ T8666]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  107.777378][ T8666]  ? find_held_lock+0x2b/0x80
[  107.777391][ T8666]  ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750
[  107.777407][ T8666]  ? __pfx___ip_append_data+0x10/0x10
[  107.777419][ T8666]  ? __lock_acquire+0x49f/0x1a40
[  107.777435][ T8666]  ip_make_skb+0x28b/0x310
[  107.777449][ T8666]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  107.777462][ T8666]  ? __pfx_ip_make_skb+0x10/0x10
[  107.777482][ T8666]  ? udp_sendmsg+0x171c/0x2720
[  107.777494][ T8666]  udp_sendmsg+0x171c/0x2720
[  107.777510][ T8666]  ? __pfx_udp_sendmsg+0x10/0x10
[  107.777522][ T8666]  ? __pfx_avc_has_perm+0x10/0x10
[  107.777538][ T8666]  ? stack_trace_save+0x8e/0xc0
[  107.777551][ T8666]  ? __pfx_sock_has_perm+0x10/0x10
[  107.777582][ T8666]  ? __pfx_udp_sendmsg+0x10/0x10
[  107.777601][ T8666]  inet_sendmsg+0x105/0x140
[  107.777623][ T8666]  sock_sendmsg+0x352/0x410
[  107.777649][ T8666]  ? __pfx_inet_sendmsg+0x10/0x10
[  107.777670][ T8666]  ? __pfx_sock_sendmsg+0x10/0x10
[  107.777702][ T8666]  ? find_held_lock+0x2b/0x80
[  107.777718][ T8666]  ? __fget_files+0x215/0x3d0
[  107.777767][ T8666]  ? __fget_files+0x215/0x3d0
[  107.777790][ T8666]  io_sendmsg_zc+0x706/0xbc0
[  107.777824][ T8666]  __io_issue_sqe+0xe8/0x7a0
[  107.777853][ T8666]  io_issue_sqe+0x88/0x1540
[  107.777889][ T8666]  io_submit_sqes+0xb17/0x2480
[  107.777931][ T8666]  __do_sys_io_uring_enter+0xa88/0x1b10
[  107.777957][ T8666]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  107.777982][ T8666]  ? __fget_files+0x21f/0x3d0
[  107.777999][ T8666]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  107.778031][ T8666]  ? fput+0x79/0x100
[  107.778052][ T8666]  ? ksys_write+0x1ac/0x250
[  107.778067][ T8666]  ? __pfx_ksys_write+0x10/0x10
[  107.778090][ T8666]  do_syscall_64+0x115/0x870
[  107.778110][ T8666]  ? clear_bhb_loop+0x40/0x90
[  107.778123][ T8666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.778134][ T8666] RIP: 0033:0x7f219659e019
[  107.778144][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.778155][ T8666] RSP: 002b:00007f2197549028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  107.778167][ T8666] RAX: ffffffffffffffda RBX: 00007f2196825fa0 RCX: 00007f219659e019
[  107.778174][ T8666] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  107.778180][ T8666] RBP: 00007f2197549090 R08: 0000000000000000 R09: 00000000ffffff94
[  107.778186][ T8666] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  107.778192][ T8666] R13: 00007f2196826038 R14: 00007f2196825fa0 R15: 00007ffc7cfdb2e8
[  107.778207][ T8666]  </TASK>
[  107.831857][ T8670] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20004
[  107.834712][ T1047] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  108.021057][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1007'.
[  108.107269][ T1047] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.114745][ T1047] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  108.120141][ T1047] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  108.122992][ T1047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.364813][   T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  108.439002][ T8734] fuse: Bad value for 'fd'
[  108.441401][ T8734] overlayfs: overlapping lowerdir path
[  108.474193][ T8740] netlink: 'syz.0.1020': attribute type 10 has an invalid length.
[  108.528671][   T50] usb 8-1: Using ep0 maxpacket: 32
[  108.532404][   T50] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  108.536770][ T8751] gadgetfs: bound to dummy_udc driver
[  108.536775][   T50] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  108.543556][   T50] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.547806][   T50] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  108.555850][   T50] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  108.559653][   T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.562709][   T50] usb 8-1: Product: syz
[  108.564168][   T50] usb 8-1: Manufacturer: syz
[  108.568384][   T50] usb 8-1: SerialNumber: syz
[  108.653029][ T8763] loop5: detected capacity change from 0 to 7
[  108.690100][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'.
[  108.746397][ T8772] 9pnet_virtio: no channels available for device syz
[  108.782868][ T8764] netlink: 'syz.2.1026': attribute type 10 has an invalid length.
[  108.785854][ T8764] syz_tun: entered promiscuous mode
[  108.788433][ T8764] tipc: Resetting bearer <eth:syz_tun>
[  108.794112][ T8764] 
: (slave syz_tun): Enslaving as an active interface with an up link
[  108.821019][ T8763] Dev loop5: unable to read RDB block 7
[  108.822728][ T8763]  loop5: unable to read partition table
[  108.824636][ T8763] loop5: partition table beyond EOD, truncated
[  108.827277][ T8763] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  109.078115][ T8788] gadgetfs: bound to dummy_udc driver
[  109.116530][ T8790] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  109.155330][ T8792] FAULT_INJECTION: forcing a failure.
[  109.155330][ T8792] name failslab, interval 1, probability 0, space 0, times 0
[  109.159315][ T8792] CPU: 3 UID: 0 PID: 8792 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT(full) 
[  109.159331][ T8792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  109.159337][ T8792] Call Trace:
[  109.159341][ T8792]  <TASK>
[  109.159346][ T8792]  dump_stack_lvl+0x100/0x190
[  109.159363][ T8792]  should_fail_ex.cold+0x5/0xa
[  109.159377][ T8792]  should_failslab+0xc2/0x120
[  109.159398][ T8792]  __kmalloc_noprof+0xfc/0x820
[  109.159416][ T8792]  ? __pfx_dynamic_dname+0x10/0x10
[  109.159453][ T8792]  ? tomoyo_encode2+0xfb/0x3c0
[  109.159486][ T8792]  tomoyo_encode2+0xfb/0x3c0
[  109.159504][ T8792]  tomoyo_encode+0x29/0x50
[  109.159522][ T8792]  tomoyo_realpath_from_path+0x18c/0x690
[  109.159541][ T8792]  tomoyo_path_number_perm+0x23c/0x580
[  109.159558][ T8792]  ? tomoyo_path_number_perm+0x22e/0x580
[  109.159575][ T8792]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  109.159603][ T8792]  ? find_held_lock+0x2b/0x80
[  109.159613][ T8792]  ? __fget_files+0x215/0x3d0
[  109.159624][ T8792]  ? hook_file_ioctl_common+0x140/0x440
[  109.159637][ T8792]  ? __fget_files+0x215/0x3d0
[  109.159649][ T8792]  ? __fget_files+0x21f/0x3d0
[  109.159662][ T8792]  security_file_ioctl+0xd3/0x230
[  109.159681][ T8792]  __x64_sys_ioctl+0xb7/0x210
[  109.159699][ T8792]  do_syscall_64+0x115/0x870
[  109.159713][ T8792]  ? clear_bhb_loop+0x40/0x90
[  109.159726][ T8792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.159741][ T8792] RIP: 0033:0x7f294339e019
[  109.159752][ T8792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.159762][ T8792] RSP: 002b:00007f29442db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  109.159774][ T8792] RAX: ffffffffffffffda RBX: 00007f2943625fa0 RCX: 00007f294339e019
[  109.159780][ T8792] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004
[  109.159787][ T8792] RBP: 00007f29442db090 R08: 0000000000000000 R09: 0000000000000000
[  109.159793][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.159799][ T8792] R13: 00007f2943626038 R14: 00007f2943625fa0 R15: 00007ffcdef98718
[  109.159813][ T8792]  </TASK>
[  109.160157][ T8792] ERROR: Out of memory at tomoyo_realpath_from_path.
[  109.849658][ T8802] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  109.852499][ T8802] overlayfs: missing 'lowerdir'
[  110.143875][ T8810] gadgetfs: bound to dummy_udc driver
[  110.453946][ T5827] usb 6-1: USB disconnect, device number 4
[  110.621184][ T8820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  110.661323][ T8830] IPVS: Error connecting to the multicast addr
[  110.706652][ T8834] gadgetfs: bound to dummy_udc driver
[  111.130126][ T8851] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1058'.
[  111.133852][ T5739] usb 8-1: USB disconnect, device number 7
[  111.209799][ T8859] netlink: 'syz.3.1062': attribute type 1 has an invalid length.
[  111.235416][ T8862] gadgetfs: bound to dummy_udc driver
[  111.289174][ T8867] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  111.337407][ T8871] block2mtd: too many arguments
[  111.390061][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'.
[  111.399036][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'.
[  111.461450][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'.
[  111.493326][ T8888] overlayfs: overlapping lowerdir path
[  111.505231][ T8888] overlayfs: overlapping lowerdir path
[  111.512492][ T8888] overlayfs: overlapping lowerdir path
[  111.517380][ T8888] overlayfs: overlapping lowerdir path
[  111.519345][ T8892] raw_sendmsg: syz.2.1073 forgot to set AF_INET. Fix it!
[  111.522698][ T8888] overlayfs: overlapping lowerdir path
[  111.531412][ T8888] overlayfs: overlapping lowerdir path
[  111.540221][ T8888] overlayfs: overlapping lowerdir path
[  111.543544][ T8888] overlayfs: overlapping lowerdir path
[  111.544077][ T8889] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  111.551042][ T8889] overlayfs: overlapping lowerdir path
[  111.619385][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'.
[  111.655966][ T8906] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8906 comm=syz.3.1079
[  111.773482][ T8923] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1085'.
[  111.779388][ T8905] veth5: entered allmulticast mode
[  111.822517][ T8905] bond5: (slave veth5): Enslaving as an active interface with an up link
[  111.851411][ T8906] bond5 (unregistering): (slave veth5): Releasing backup interface
[  111.855697][ T8906] bond5 (unregistering): Released all slaves
[  111.928372][   T42] kauditd_printk_skb: 109 callbacks suppressed
[  111.928384][   T42] audit: type=1800 audit(1785903072.962:1380): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1086" name="idVendor" dev="configfs" ino=31010 res=0 errno=0
[  111.941359][   T42] audit: type=1800 audit(1785903072.972:1381): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1086" name="idProduct" dev="configfs" ino=33799 res=0 errno=0
[  111.950754][   T42] audit: type=1400 audit(1785903072.972:1382): avc:  denied  { write } for  pid=8924 comm="syz.0.1086" name="functions" dev="configfs" ino=10702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  111.964933][   T42] audit: type=1800 audit(1785903072.972:1383): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  111.972549][   T42] audit: type=1400 audit(1785903072.972:1384): avc:  denied  { write } for  pid=8924 comm="syz.0.1086" name="header" dev="configfs" ino=33802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  111.981473][ T8931] lo: entered allmulticast mode
[  111.982355][   T42] audit: type=1400 audit(1785903072.972:1385): avc:  denied  { write } for  pid=8924 comm="syz.0.1086" name="fs" dev="configfs" ino=33811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  111.986587][ T8930] lo: left allmulticast mode
[  111.991652][   T42] audit: type=1400 audit(1785903072.972:1386): avc:  denied  { write } for  pid=8924 comm="syz.0.1086" name="fs" dev="configfs" ino=33811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  112.001918][   T42] audit: type=1400 audit(1785903072.972:1387): avc:  denied  { write } for  pid=8924 comm="syz.0.1086" name="ss" dev="configfs" ino=33812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  112.011529][   T42] audit: type=1400 audit(1785903072.972:1388): avc:  denied  { write } for  pid=8924 comm="syz.0.1086" name="ss" dev="configfs" ino=33812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  112.019612][   T42] audit: type=1400 audit(1785903072.982:1389): avc:  denied  { write } for  pid=8924 comm="syz.0.1086" name="uncompressed" dev="configfs" ino=33816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  112.048055][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.051546][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.186415][ T8953] NILFS (nullb0): couldn't find nilfs on the device
[  112.239968][ T8958] binder: 8957:8958 ioctl c0306201 200000000080 returned -14
[  112.245251][ T8855] ceph: No mds server is up or the cluster is laggy
[  112.688957][   T64] Bluetooth: hci3: unexpected event for opcode 0x203c
[  112.696185][ T8980] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  112.700198][ T8980] block device autoloading is deprecated and will be removed.
[  113.275632][ T9024] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  113.284036][ T9025] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  113.421303][ T9036] ima: policy update completed
[  113.431070][ T9035] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  113.675226][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  113.833727][ T9075] netlink: 'syz.1.1144': attribute type 10 has an invalid length.
[  113.854872][   T60] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  114.027483][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.031003][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.034025][   T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.038843][   T60] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.041801][   T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.394652][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  114.565902][   T10] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  114.568458][   T10] usb 7-1: config 1 has no interface number 0
[  114.570411][   T10] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  114.573945][   T10] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  114.578908][   T10] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  114.581845][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.584342][   T10] usb 7-1: Product: syz
[  114.585768][   T10] usb 7-1: Manufacturer: syz
[  114.587258][   T10] usb 7-1: SerialNumber: syz
[  114.902040][ T9100] syz.1.1152 (9100) used greatest stack depth: 19120 bytes left
[  115.006481][ T9111] FAULT_INJECTION: forcing a failure.
[  115.006481][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.011845][ T9111] CPU: 3 UID: 0 PID: 9111 Comm: syz.1.1158 Not tainted syzkaller #0 PREEMPT(full) 
[  115.011868][ T9111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  115.011878][ T9111] Call Trace:
[  115.011885][ T9111]  <TASK>
[  115.011891][ T9111]  dump_stack_lvl+0x100/0x190
[  115.011918][ T9111]  should_fail_ex.cold+0x5/0xa
[  115.011940][ T9111]  _copy_to_user+0x32/0xd0
[  115.011981][ T9111]  simple_read_from_buffer+0xcb/0x170
[  115.012003][ T9111]  proc_fail_nth_read+0x1af/0x230
[  115.012039][ T9111]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.012065][ T9111]  ? rw_verify_area+0xce/0x6d0
[  115.012087][ T9111]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.012111][ T9111]  vfs_read+0x1e4/0xb40
[  115.012137][ T9111]  ? __pfx_vfs_read+0x10/0x10
[  115.012161][ T9111]  ? __fget_files+0x215/0x3d0
[  115.012182][ T9111]  ? __fget_files+0x21f/0x3d0
[  115.012205][ T9111]  ksys_read+0x12a/0x250
[  115.012228][ T9111]  ? __pfx_ksys_read+0x10/0x10
[  115.012259][ T9111]  do_syscall_64+0x115/0x870
[  115.012279][ T9111]  ? clear_bhb_loop+0x40/0x90
[  115.012299][ T9111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.012316][ T9111] RIP: 0033:0x7f57c435e84e
[  115.012330][ T9111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  115.012345][ T9111] RSP: 002b:00007f57c5242fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  115.012364][ T9111] RAX: ffffffffffffffda RBX: 00007f57c52436c0 RCX: 00007f57c435e84e
[  115.012373][ T9111] RDX: 000000000000000f RSI: 00007f57c52430a0 RDI: 0000000000000005
[  115.012383][ T9111] RBP: 00007f57c5243090 R08: 0000000000000000 R09: 0000000000000000
[  115.012393][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.012403][ T9111] R13: 00007f57c4626038 R14: 00007f57c4625fa0 R15: 00007fff11b85358
[  115.012423][ T9111]  </TASK>
[  115.093445][ T9114] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  115.095583][ T9114] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  115.098378][ T9114] vhci_hcd vhci_hcd.0: Device attached
[  115.133303][ T9115] vhci_hcd: connection closed
[  115.135004][   T12] vhci_hcd vhci_hcd.1: stop threads
[  115.139949][   T12] vhci_hcd vhci_hcd.1: release socket
[  115.142126][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  115.629236][ T9140] IPVS: Error connecting to the multicast addr
[  116.607275][   T50] usb 8-1: USB disconnect, device number 8
[  116.694088][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'.
[  116.751476][  T223] nvmet: connect request for invalid subsystem n!
[  116.757178][ T9166] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n"
[  116.809153][ T9181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9181 comm=syz.1.1181
[  116.870496][ T9177] nvme_fabrics: unknown parameter or missing value 'eÐ�¨¬9Ë™«x�e™™mù?”°7ù$mÂ<ŒYYôÛ¼™ÈO\´Ó[Û¡Ÿëô>Éiçqèê:Ã÷ä±HjS¨ÙvÉÞ´4	à·‰C�ˆS61¶' in ctrl creation request
[  116.918464][ T9188] overlayfs: unescaped trailing colons in lowerdir mount option.
[  116.954620][   T42] kauditd_printk_skb: 133 callbacks suppressed
[  116.954634][   T42] audit: type=1800 audit(1785903077.982:1523): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  117.104516][ T1047] usb 7-1: USB disconnect, device number 2
[  117.128995][   T42] audit: type=1800 audit(1785903078.162:1524): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  117.148434][   T42] audit: type=1800 audit(1785903078.182:1525): pid=9207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1190" name="new_device" dev="sysfs" ino=45846 res=0 errno=0
[  117.158665][   T42] audit: type=1800 audit(1785903078.192:1526): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  117.161694][ T9207] ucsi_ccg 0-0008: i2c_transfer failed -95
[  117.171082][   T42] audit: type=1800 audit(1785903078.192:1527): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131743 res=0 errno=0
[  117.171110][   T42] audit: type=1800 audit(1785903078.192:1528): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45844 res=0 errno=0
[  117.171130][   T42] audit: type=1800 audit(1785903078.192:1529): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=131744 res=0 errno=0
[  117.180736][ T9209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.189412][ T9207] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95
[  117.206020][ T9207] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95
[  117.208507][ T9209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.214013][ T9207] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08
[  117.218383][   T42] audit: type=1800 audit(1785903078.252:1530): pid=9210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1190" name="new_device" dev="sysfs" ino=47201 res=0 errno=0
[  117.227624][   T42] audit: type=1800 audit(1785903078.252:1531): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131757 res=0 errno=0
[  117.235436][   T42] audit: type=1800 audit(1785903078.252:1532): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=47199 res=0 errno=0
[  117.335391][ T9210] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110
[  117.337454][ T9210] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110
[  117.340204][ T9210] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08
[  117.405189][ T9214] afs: Unknown parameter ''
[  117.742464][ T9223] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  117.747882][ T9223] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1198'.
[  117.760344][ T9229] binder: 9228:9229 ioctl c0306201 200000000080 returned -14
[  117.838105][ T9238] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  117.961918][ T9241] block2mtd: illegal erase size
[  118.124682][   T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  118.276940][   T50] usb 7-1: config 0 has no interfaces?
[  118.279368][   T50] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  118.282840][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.484703][ T5820] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  118.634820][ T5820] usb 8-1: Using ep0 maxpacket: 8
[  118.638986][ T5820] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  118.641847][ T5820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.860035][ T9273] btrfs: Unknown parameter 'ïlñ:YæWºo'
[  118.968729][   T64] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1
[  118.969321][   T64] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  119.250775][ T9297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1227'.
[  119.351412][ T9302] ublk1: read batch cmd buffer failed
[  119.353832][ T9302] ublk1: read batch cmd buffer failed
[  119.536646][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'.
[  119.876193][ T9333] lo: entered allmulticast mode
[  119.887180][ T9336] netlink: 'syz.1.1242': attribute type 10 has an invalid length.
[  119.912364][ T9343] syz_tun: entered allmulticast mode
[  119.915975][ T9339] syz_tun: left allmulticast mode
[  120.210235][ T9341] lo: left allmulticast mode
[  120.285621][ T9361] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1250'.
[  120.368736][ T9360] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  120.421236][ T9366] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  120.425802][ T9366] overlayfs: missing 'lowerdir'
[  120.530519][ T9370] binder: 9369:9370 ioctl c0d05640 200000000080 returned -22
[  120.534432][   T64] Bluetooth: hci3: unexpected event for opcode 0x1804
[  120.748275][ T9377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.759683][ T9377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.845079][ T3266] usb 7-1: USB disconnect, device number 3
[  120.949260][ T9381] binder: 9380:9381 ioctl c0306201 200000000080 returned -14
[  121.023376][ T9385] Invalid logical block size (15)
[  121.228358][  T849] usb 8-1: USB disconnect, device number 9
[  121.290717][ T9388] binder: 9387:9388 ioctl c0a85352 200000000000 returned -22
[  121.379240][ T9396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.586589][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1270'.
[  121.593274][ T9414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  121.636610][ T9414] binder: 9413:9414 ioctl c0306201 200000000640 returned -22
[  121.730765][ T9424] syzkaller0: entered promiscuous mode
[  121.732673][ T9424] syzkaller0: entered allmulticast mode
[  121.886519][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'.
[  121.897826][ T9438] gretap0: entered promiscuous mode
[  121.907961][ T9438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9438 comm=syz.0.1280
[  121.982718][   T42] kauditd_printk_skb: 90 callbacks suppressed
[  121.982730][   T42] audit: type=1800 audit(1785903083.012:1623): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  122.001391][   T42] audit: type=1800 audit(1785903083.032:1624): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  122.016055][   T42] audit: type=1800 audit(1785903083.052:1625): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  122.024900][   T42] audit: type=1800 audit(1785903083.052:1626): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133505 res=0 errno=0
[  122.076130][   T42] audit: type=1800 audit(1785903083.112:1627): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  122.093881][   T42] audit: type=1800 audit(1785903083.122:1628): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  122.146859][   T42] audit: type=1800 audit(1785903083.182:1629): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0
[  122.170576][   T42] audit: type=1800 audit(1785903083.202:1630): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  122.181295][   T42] audit: type=1400 audit(1785903083.212:1631): avc:  denied  { shutdown } for  pid=9464 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.189508][ T9480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1289'.
[  122.202087][ T9478] netlink: 'syz.3.1293': attribute type 1 has an invalid length.
[  122.205706][ T9478] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1293'.
[  122.222148][   T42] audit: type=1800 audit(1785903083.252:1632): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  122.275449][ T9485] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1296'.
[  122.352441][ T9494] xt_hl: Unknown TTL match mode: 255
[  122.829695][ T9505] lo: entered allmulticast mode
[  122.836998][ T9503] lo: left allmulticast mode
[  122.901484][ T9514] tipc: Started in network mode
[  122.903134][ T9514] tipc: Node identity 7f000001, cluster identity 4711
[  122.906262][ T9514] tipc: New replicast peer: 127.0.0.1
[  122.908344][ T9514] tipc: Enabled bearer <udp:syz0>, priority 10
[  122.956635][ T9521] loop7: detected capacity change from 0 to 16384
[  123.223169][ T9535] binder: 9534:9535 ioctl c0306201 200000000080 returned -14
[  123.289898][ T9541] befs: (nullb0): No write support. Marking filesystem read-only
[  123.292753][ T9541] befs: (nullb0): invalid magic header
[  123.922733][ T3266] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  123.936985][ T5827] tipc: Node number set to 2130706433
[  124.168398][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'.
[  124.186313][ T3266] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  124.402243][ T9560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1320'.
[  124.526996][ T5820] usb 5-1: USB disconnect, device number 7
[  124.684686][ T1047] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  124.695735][ T3266] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  124.701864][ T9579] binder: BINDER_SET_CONTEXT_MGR already set
[  124.705598][ T9579] binder: 9578:9579 ioctl 4018620d 200000000100 returned -16
[  124.855063][ T1047] usb 7-1: Using ep0 maxpacket: 8
[  124.859864][ T1047] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  124.864363][ T1047] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  124.868825][ T1047] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  124.872710][ T1047] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  124.878159][ T1047] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  124.881584][ T1047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.966037][ T9548] ceph: No mds server is up or the cluster is laggy
[  125.490293][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  125.642684][ T9587] netlink: 'syz.1.1329': attribute type 7 has an invalid length.
[  125.650032][ T9596] 9pnet_virtio: no channels available for device syz
[  125.661190][ T9587] netlink: 'syz.1.1329': attribute type 7 has an invalid length.
[  125.674857][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.677600][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.680364][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.683769][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.710117][ T9600] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1334'.
[  125.716722][ T9602] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1335'.
[  125.779974][ T9611] netlink: 'syz.0.1338': attribute type 10 has an invalid length.
[  125.799246][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'.
[  125.807404][ T9607] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  125.880902][ T9613] 9pnet_virtio: no channels available for device syz
[  126.159012][ T9627] pci_bus 0000:01: busn_res: [bus 01] is released
[  126.197864][ T9633] lo: entered allmulticast mode
[  126.202101][ T9632] lo: left allmulticast mode
[  126.223152][ T9627] netlink: 29 bytes leftover after parsing attributes in process `syz.1.1344'.
[  126.225395][ T9629] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port
[  126.233874][ T9629] pci 0000:00:04.0: PCI bridge to [bus 01]
[  126.236100][ T9629] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  126.238387][ T9629] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[  126.241437][ T9636] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  126.242561][ T9629] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref]
[  126.246304][ T9636] overlayfs: missing 'lowerdir'
[  126.249671][ T9629] pci 0000:00:04.0: enabling Extended Tags
[  126.271758][ T9629] pci 0000:00:04.0: Adding to iommu group 4
[  126.285604][ T9629] pci 0000:00:04.0: PCI bridge to [bus 01]
[  126.293525][ T9629] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[  126.294529][ T9638] Line length is too long: Should be less than 4094
[  126.299608][ T9629] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000
[  126.305190][ T9629] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned
[  126.307761][ T9629] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned
[  126.311341][ T9629] pci 0000:00:04.0: bridge window [io  0x1000-0x1fff]: assigned
[  126.313897][ T9629] pci 0000:00:04.0: PCI bridge to [bus 01]
[  126.316145][ T9629] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  126.319975][ T9629] pci 0000:00:04.0:   bridge window [mem 0x80000000-0x801fffff]
[  126.324113][ T9629] pci 0000:00:04.0:   bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]
[  126.378680][ T9629] pcieport 0000:00:04.0: PME: Signaling with IRQ 25
[  126.417868][ T9629] pcieport 0000:00:04.0: AER: enabled with IRQ 26
[  126.823984][ T9666] vcan1: entered allmulticast mode
[  126.940414][ T9676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.954330][ T9676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.068252][   T42] kauditd_printk_skb: 73 callbacks suppressed
[  127.068270][   T42] audit: type=1400 audit(1785903088.102:1706): avc:  denied  { setopt } for  pid=9677 comm="syz.0.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  127.077135][   T42] audit: type=1400 audit(1785903088.102:1707): avc:  denied  { connect } for  pid=9677 comm="syz.0.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  127.436662][ T1048] usb 7-1: USB disconnect, device number 4
[  127.489348][   T42] audit: type=1800 audit(1785903088.522:1708): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  127.494538][ T9689] comedi comedi0: Cannot bond this driver to itself!
[  127.529882][   T42] audit: type=1800 audit(1785903088.562:1709): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  127.571461][   T42] audit: type=1800 audit(1785903088.602:1710): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  127.613408][   T42] audit: type=1800 audit(1785903088.642:1711): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  127.691929][   T42] audit: type=1800 audit(1785903088.722:1712): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  127.733722][   T42] audit: type=1800 audit(1785903088.762:1713): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  127.794723][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  127.799987][   T42] audit: type=1800 audit(1785903088.832:1714): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  127.954778][   T10] usb 5-1: Using ep0 maxpacket: 8
[  127.964197][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  127.973012][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  127.976416][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  127.979563][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  127.984260][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  127.988723][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.996611][   T42] audit: type=1800 audit(1785903089.032:1715): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=134186 res=0 errno=0
[  128.044791][ T5820] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  128.215752][ T5820] usb 7-1: not running at top speed; connect to a high speed hub
[  128.220750][ T5820] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.225147][ T5820] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  128.228762][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.548637][ T9708] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.551748][ T9708] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.620640][ T9708] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.623881][ T9708] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.700817][ T9708] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.704006][ T9708] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.768759][ T9708] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.771910][ T9708] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.874690][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.878261][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.881568][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.886079][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.904730][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.908134][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.911520][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.915213][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.418307][ T9735] GUP no longer grows the stack in syz.1.1385 (9735): 200000003000-20000000a000 (200000002000)
[  129.422193][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.1.1385 Not tainted syzkaller #0 PREEMPT(full) 
[  129.422210][ T9735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  129.422223][ T9735] Call Trace:
[  129.422229][ T9735]  <TASK>
[  129.422234][ T9735]  dump_stack_lvl+0x100/0x190
[  129.422304][ T9735]  gup_vma_lookup.cold+0x83/0x96
[  129.422324][ T9735]  __get_user_pages+0x241/0x32a0
[  129.422350][ T9735]  ? find_held_lock+0x2b/0x80
[  129.422367][ T9735]  ? mtree_load+0x311/0xa90
[  129.422408][ T9735]  ? __pfx___get_user_pages+0x10/0x10
[  129.422430][ T9735]  get_user_pages_remote+0x3d2/0xb10
[  129.422447][ T9735]  ? mas_root_expand+0x6e0/0x750
[  129.422466][ T9735]  ? __pfx_get_user_pages_remote+0x10/0x10
[  129.422490][ T9735]  __access_remote_vm+0x3bb/0x890
[  129.422510][ T9735]  ? __pfx___access_remote_vm+0x10/0x10
[  129.422526][ T9735]  ? proc_pid_cmdline_read+0x31b/0x9a0
[  129.422560][ T9735]  ? proc_pid_cmdline_read+0x4aa/0x9a0
[  129.422582][ T9735]  proc_pid_cmdline_read+0x552/0x9a0
[  129.422605][ T9735]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  129.422626][ T9735]  ? rw_verify_area+0xce/0x6d0
[  129.422642][ T9735]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  129.422659][ T9735]  vfs_readv+0x5d8/0x8d0
[  129.422682][ T9735]  ? __pfx_vfs_readv+0x10/0x10
[  129.422706][ T9735]  ? __fget_files+0x21f/0x3d0
[  129.422728][ T9735]  ? do_preadv+0x1ac/0x270
[  129.422743][ T9735]  do_preadv+0x1ac/0x270
[  129.422761][ T9735]  ? __pfx_do_preadv+0x10/0x10
[  129.422782][ T9735]  do_syscall_64+0x115/0x870
[  129.422796][ T9735]  ? clear_bhb_loop+0x40/0x90
[  129.422812][ T9735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.422824][ T9735] RIP: 0033:0x7f57c439e019
[  129.422835][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.422846][ T9735] RSP: 002b:00007f57c5243028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  129.422858][ T9735] RAX: ffffffffffffffda RBX: 00007f57c4625fa0 RCX: 00007f57c439e019
[  129.422866][ T9735] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005
[  129.422873][ T9735] RBP: 00007f57c443500c R08: 00000000fffffff9 R09: 0000000000000000
[  129.422880][ T9735] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  129.422888][ T9735] R13: 00007f57c4626038 R14: 00007f57c4625fa0 R15: 00007fff11b85358
[  129.422901][ T9735]  </TASK>
[  129.763810][ T9749] gadgetfs: bound to dummy_udc driver
[  130.164813][   T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  130.317553][   T50] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  130.320828][   T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.324184][   T50] usb 6-1: Product: syz
[  130.325909][   T50] usb 6-1: Manufacturer: syz
[  130.328174][   T50] usb 6-1: SerialNumber: syz
[  130.500769][ T5820] usb 5-1: USB disconnect, device number 8
[  130.825914][ T1047] usb 7-1: USB disconnect, device number 5
[  131.104509][ T9763] ehci-pci 0000:00:1d.7: remove, state 1
[  131.112261][ T9763] usb usb1: USB disconnect, device number 1
[  131.116280][ T9763] usb 1-1: USB disconnect, device number 2
[  131.169663][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'.
[  131.246417][ T9763] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[  131.428644][ T9773] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  131.433881][ T9776] gadgetfs: bound to dummy_udc driver
[  131.459954][ T9778] IPVS: Error connecting to the multicast addr
[  131.505747][ T5820] usb 2-1: new full-speed USB device number 2 using uhci_hcd
[  131.671162][ T5820] usb 2-1: not running at top speed; connect to a high speed hub
[  131.693631][ T5820] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  131.696896][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  131.700104][ T5820] usb 2-1: Product: QEMU USB Tablet
[  131.701989][ T5820] usb 2-1: Manufacturer: QEMU
[  131.703465][ T5820] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1
[  132.458074][   T42] kauditd_printk_skb: 57 callbacks suppressed
[  132.458092][   T42] audit: type=1800 audit(1785903093.492:1773): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  132.498222][   T42] audit: type=1800 audit(1785903093.532:1774): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  132.532764][   T42] audit: type=1800 audit(1785903093.562:1775): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  132.556312][   T42] audit: type=1800 audit(1785903093.592:1776): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  132.596354][   T42] audit: type=1800 audit(1785903093.632:1777): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  132.616550][ T9804] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  132.622862][   T42] audit: type=1800 audit(1785903093.652:1778): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=134950 res=0 errno=0
[  132.676009][   T42] audit: type=1800 audit(1785903093.712:1779): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1412" name="file1" dev="tmpfs" ino=1899 res=0 errno=0
[  132.807916][ T1048] usb 6-1: USB disconnect, device number 5
[  132.844179][   T42] audit: type=1800 audit(1785903093.872:1780): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  132.872477][   T42] audit: type=1800 audit(1785903093.902:1781): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  132.977083][ T1444] ieee802154 phy0 wpan0: encryption failed: -22
[  132.977904][   T42] audit: type=1800 audit(1785903094.012:1782): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0
[  132.980488][ T1444] ieee802154 phy1 wpan1: encryption failed: -22
[  132.999482][    C3] vcan0: j1939_tp_rxtimer: 0xffff888000c0f000: rx timeout, send abort
[  133.006382][    C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888000c0f000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  133.046136][ T9816] xt_hashlimit: size too large, truncated to 1048576
[  133.086818][ T9819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1417'.
[  133.989093][ T9859] syz_tun: entered allmulticast mode
[  133.993456][ T9858] syz_tun: left allmulticast mode
[  134.139914][ T9875] netlink: 'syz.2.1441': attribute type 23 has an invalid length.
[  134.159345][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.360765][ T9884] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  134.366117][ T1048] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  134.516030][ T1048] usb 6-1: not running at top speed; connect to a high speed hub
[  134.520516][ T1048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.524536][ T1048] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  134.528289][ T1048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.828259][ T9899] program syz.2.1450 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  134.864466][ T9904] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  135.485693][ T9928] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  135.491671][ T9928] udc dummy_udc.0: failed to start g1: -19
[  135.497739][ T9928] UDC core: g1: couldn't find an available UDC or it's busy
[  136.479741][ T9935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1464'.
[  136.600637][ T9945] gadgetfs: bound to dummy_udc driver
[  136.921270][ T9971] ip_tables: iptables: counters copy to user failed while replacing table
[  137.094276][ T9975] gadgetfs: bound to dummy_udc driver
[  137.112285][ T1047] usb 6-1: USB disconnect, device number 6
[  137.139540][ T9979] ip6_vti0: entered allmulticast mode
[  137.234672][   T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  137.259531][   T64] Bluetooth: hci3: unexpected event for opcode 0x1804
[  137.286327][ T9994] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  137.294317][ T9994] udc dummy_udc.0: failed to start g1: -19
[  137.299985][ T9994] UDC core: g1: couldn't find an available UDC or it's busy
[  137.307973][ T9996] binder: 9995:9996 ioctl c0306201 200000000080 returned -14
[  137.339348][ T9999] gadgetfs: bound to dummy_udc driver
[  137.385007][   T50] usb 7-1: Using ep0 maxpacket: 32
[  137.393983][   T50] usb 7-1: unable to get BOS descriptor or descriptor too short
[  137.399396][T10008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  137.403130][   T50] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  137.407266][   T50] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  137.409992][   T50] usb 7-1: config 14 has no interface number 0
[  137.411975][   T50] usb 7-1: config 14 has no interface number 1
[  137.413971][   T50] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  137.418708][   T50] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  137.422454][   T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  137.426220][   T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  137.429736][   T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  137.433210][   T50] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  137.434042][T10002] xt_l2tp: v2 doesn't support IP mode
[  137.437909][   T50] usb 7-1: config 14 interface 57 has no altsetting 0
[  137.441419][   T50] usb 7-1: config 14 interface 228 has no altsetting 0
[  137.441781][T10002] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1492'.
[  137.445296][   T50] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  137.446583][T10002] openvswitch: netlink: Flow key attr not present in new flow.
[  137.449274][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.454087][   T50] usb 7-1: Product: syz
[  137.455698][   T50] usb 7-1: Manufacturer: syz
[  137.457162][   T50] usb 7-1: SerialNumber: syz
[  137.465035][   T42] kauditd_printk_skb: 147 callbacks suppressed
[  137.465064][   T42] audit: type=1800 audit(1785903098.492:1930): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=136187 res=0 errno=0
[  137.473795][   T42] audit: type=1800 audit(1785903098.502:1931): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=136209 res=0 errno=0
[  137.493574][T10010] xt_nfacct: accounting object `syz0' does not exist
[  137.493671][   T42] audit: type=1400 audit(1785903098.522:1932): avc:  denied  { setopt } for  pid=10009 comm="syz.0.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  137.496598][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'.
[  137.504851][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'.
[  137.507102][   T42] audit: type=1800 audit(1785903098.542:1933): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  137.529471][   T42] audit: type=1800 audit(1785903098.562:1934): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  137.552732][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'.
[  137.566766][T10010] kernel read not supported for file /policy (pid: 10010 comm: syz.0.1495)
[  137.569776][   T42] audit: type=1800 audit(1785903098.602:1935): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0
[  137.584482][   T42] audit: type=1800 audit(1785903098.602:1936): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1495" name="policy" dev="selinuxfs" ino=20 res=0 errno=0
[  137.599131][   T42] audit: type=1800 audit(1785903098.632:1937): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1499" name="UDC" dev="configfs" ino=39057 res=0 errno=0
[  137.599869][T10020] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  137.608639][T10020] udc dummy_udc.0: failed to start g1: -19
[  137.613445][T10020] UDC core: g1: couldn't find an available UDC or it's busy
[  137.615240][   T42] audit: type=1800 audit(1785903098.642:1938): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=114367 res=0 errno=0
[  137.622587][   T42] audit: type=1800 audit(1785903098.642:1939): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=114372 res=0 errno=0
[  137.866827][T10023] xt_hashlimit: size too large, truncated to 1048576
[  138.060341][T10029] gadgetfs: bound to dummy_udc driver
[  138.172924][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  138.181704][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  138.185611][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  138.188582][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  138.191136][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  138.303897][T10054] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  138.308545][T10054] udc dummy_udc.0: failed to start g1: -19
[  138.311103][T10054] UDC core: g1: couldn't find an available UDC or it's busy
[  138.510203][   T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.532670][T10033] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.535045][T10033] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.537265][T10033] bridge_slave_0: entered allmulticast mode
[  138.539916][T10033] bridge_slave_0: entered promiscuous mode
[  138.544545][T10033] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.546964][T10033] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.549314][T10033] bridge_slave_1: entered allmulticast mode
[  138.552090][T10033] bridge_slave_1: entered promiscuous mode
[  138.571332][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.575893][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.591316][   T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.606443][T10033] team0: Port device team_slave_0 added
[  138.609566][T10033] team0: Port device team_slave_1 added
[  138.627876][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.630064][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.638962][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.643279][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.647333][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.655289][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.658009][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'.
[  138.665204][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'.
[  138.681963][   T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.686325][  T849] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  138.698801][T10033] hsr_slave_0: entered promiscuous mode
[  138.701010][T10033] hsr_slave_1: entered promiscuous mode
[  138.703147][T10033] debugfs: 'hsr0' already exists in 'hsr'
[  138.705296][T10033] Cannot create hsr debugfs directory
[  138.729498][T10074] gadgetfs: bound to dummy_udc driver
[  138.754194][   T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.777657][T10076] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  138.779683][T10076] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  138.783231][T10076] vhci_hcd vhci_hcd.0: Device attached
[  138.788384][T10077] vhci_hcd: connection closed
[  138.790028][   T12] vhci_hcd vhci_hcd.1: stop threads
[  138.793229][   T12] vhci_hcd vhci_hcd.1: release socket
[  138.799391][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  138.845800][  T849] usb 5-1: Using ep0 maxpacket: 8
[  138.855218][  T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  138.858723][  T849] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  138.861577][  T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.989592][   T13] bond2 (unregistering): (slave erspan1): Releasing active interface
[  138.992334][   T13] erspan1 (unregistering): left promiscuous mode
[  139.031073][   T13] bond0 (unregistering): Released all slaves
[  139.036462][   T13] bond1 (unregistering): Released all slaves
[  139.045466][   T13] bond2 (unregistering): Released all slaves
[  139.053996][   T13] bond3 (unregistering): Released all slaves
[  139.061552][   T13] bond4 (unregistering): Released all slaves
[  139.096624][T10033] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  139.102202][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  139.104937][T10033] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  139.108902][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  139.111582][T10033] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  139.115718][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  139.118368][T10033] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  139.122256][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  139.149631][T10033] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.152097][T10033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.154500][T10033] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.156804][T10033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.212812][   T13] IPVS: stopping master sync thread 6926 ...
[  139.215253][T10033] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.228982][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.233929][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.273575][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2
[  139.278457][T10033] 8021q: adding VLAN 0 to HW filter on device team0
[  139.286816][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.289186][ T8368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.294275][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.296745][ T8368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.404730][T10098] UDC core: g1: couldn't find an available UDC or it's busy
[  139.461259][   T13] hsr_slave_0: left promiscuous mode
[  139.465841][   T13] hsr_slave_1: left promiscuous mode
[  139.491232][   T13] veth1_macvtap: left promiscuous mode
[  139.494451][   T13] veth0_macvtap: left promiscuous mode
[  139.497475][   T13] veth1_vlan: left promiscuous mode
[  139.499969][   T13] veth0_vlan: left promiscuous mode
[  139.609653][T10112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.622983][T10112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.761707][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3
[  139.896717][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.901044][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4
[  140.016486][ T5819] usb 7-1: USB disconnect, device number 6
[  140.042855][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5
[  140.045480][T10033] veth0_vlan: entered promiscuous mode
[  140.050778][T10033] veth1_vlan: entered promiscuous mode
[  140.068061][T10033] veth0_macvtap: entered promiscuous mode
[  140.073817][T10033] veth1_macvtap: entered promiscuous mode
[  140.083602][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.090312][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.140156][ T5785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.162501][  T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.165462][  T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.165753][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.192750][  T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.195418][ T5785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.198095][  T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.198480][ T5785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.254856][ T5743] Bluetooth: hci4: command tx timeout
[  140.277562][T10146] ip_tables: iptables: counters copy to user failed while replacing table
[  140.317473][T10150] gadgetfs: bound to dummy_udc driver
[  140.351865][T10152] UDC core: g1: couldn't find an available UDC or it's busy
[  140.543195][T10164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=10164 comm=syz.4.1528
[  140.573510][T10169] team0: Device vlan2 is already an upper device of the team interface
[  140.638841][T10176] binder: 10175:10176 ioctl c0306201 200000000080 returned -14
[  140.660751][T10178] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  140.671766][T10181] UDC core: g1: couldn't find an available UDC or it's busy
[  140.718633][T10183] gadgetfs: bound to dummy_udc driver
[  141.320026][T10210] UDC core: g1: couldn't find an available UDC or it's busy
[  141.404795][ T5819] usb 5-1: USB disconnect, device number 9
[  141.452353][T10212] gadgetfs: bound to dummy_udc driver
[  141.677771][T10231] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  141.684132][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1553'.
[  141.685521][T10231] udc dummy_udc.0: failed to start g1: -19
[  141.690012][T10231] UDC core: g1: couldn't find an available UDC or it's busy
[  141.713510][T10235] jfs: Unknown parameter 'grpquota/tun'
[  141.719391][T10235] jfs: Unknown parameter 'grpquota/tun'
[  141.729038][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'.
[  141.756704][T10240] gadgetfs: bound to dummy_udc driver
[  141.806168][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'.
[  141.891599][T10254] SELinux: ebitmap: start bit 0 comes after start bit 0
[  141.893960][T10254] SELinux:  invalid class
[  141.898579][T10254] SELinux: failed to load policy
[  141.911493][T10264] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  141.916770][T10264] udc dummy_udc.0: failed to start g1: -19
[  141.924437][T10264] UDC core: g1: couldn't find an available UDC or it's busy
[  141.935969][T10267] gadgetfs: bound to dummy_udc driver
[  141.997524][T10277] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  142.120312][T10290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1577'.
[  142.149861][T10292] gadgetfs: bound to dummy_udc driver
[  142.196948][T10300] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  142.200331][T10300] udc dummy_udc.0: failed to start g1: -19
[  142.203294][T10300] UDC core: g1: couldn't find an available UDC or it's busy
[  142.324773][ T5743] Bluetooth: hci4: command tx timeout
[  142.400031][T10319] gadgetfs: bound to dummy_udc driver
[  142.462648][T10330] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  142.466072][T10330] udc dummy_udc.0: failed to start g1: -19
[  142.469566][T10330] UDC core: g1: couldn't find an available UDC or it's busy
[  142.475413][   T42] kauditd_printk_skb: 149 callbacks suppressed
[  142.475422][   T42] audit: type=1800 audit(1785903103.512:2089): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=114367 res=0 errno=0
[  142.486314][   T42] audit: type=1800 audit(1785903103.512:2090): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  142.492921][   T42] audit: type=1800 audit(1785903103.522:2091): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=114372 res=0 errno=0
[  142.501519][   T42] audit: type=1800 audit(1785903103.522:2092): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=114376 res=0 errno=0
[  142.510095][   T42] audit: type=1800 audit(1785903103.532:2093): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=114375 res=0 errno=0
[  142.519417][   T42] audit: type=1800 audit(1785903103.532:2094): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=114378 res=0 errno=0
[  142.526979][T10334] binder: 10333:10334 ioctl c0306201 200000000180 returned -14
[  142.560528][   T42] audit: type=1800 audit(1785903103.592:2095): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  142.593493][   T42] audit: type=1800 audit(1785903103.622:2096): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  142.634232][T10344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.636648][   T42] audit: type=1800 audit(1785903103.672:2097): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[  142.648669][   T42] audit: type=1400 audit(1785903103.682:2098): avc:  denied  { write } for  pid=10345 comm="syz.4.1603" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  142.657054][T10344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.697071][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'.
[  142.747691][T10358] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  142.750280][T10358] udc dummy_udc.0: failed to start g1: -19
[  142.752673][T10358] UDC core: g1: couldn't find an available UDC or it's busy
[  142.807531][T10365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7952 sclass=netlink_route_socket pid=10365 comm=syz.4.1610
[  142.903066][T10368] binder: 10367:10368 ioctl c0306201 200000000080 returned -14
[  143.004416][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'.
[  143.008804][T10383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.025644][T10386] SELinux: ebitmap start bit (134217728) is beyond the end of the bitmap (1472)
[  143.028565][T10386] SELinux:  invalid class
[  143.033113][T10386] SELinux: failed to load policy
[  143.196645][T10400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.702518][T10444] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  143.704984][T10444] udc dummy_udc.0: failed to start g1: -19
[  143.707336][T10444] UDC core: g1: couldn't find an available UDC or it's busy
[  143.752621][T10451] ip_tables: iptables: counters copy to user failed while replacing table
[  143.803704][T10455] gadgetfs: bound to dummy_udc driver
[  143.814226][T10457] xt_time: unknown flags 0x78
[  144.084903][T10383] ceph: No mds server is up or the cluster is laggy
[  144.220574][T10479] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  144.223566][T10479] udc dummy_udc.0: failed to start g1: -19
[  144.229954][T10479] UDC core: g1: couldn't find an available UDC or it's busy
[  144.353599][T10481] ip_tables: iptables: counters copy to user failed while replacing table
[  144.405555][T10483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1641'.
[  144.640625][T10495] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  144.644278][T10495] udc dummy_udc.0: failed to start g1: -19
[  144.646785][T10495] UDC core: g1: couldn't find an available UDC or it's busy
[  144.724816][ T5743] Bluetooth: hci4: command tx timeout
[  144.856569][T10509] syz_tun: entered allmulticast mode
[  144.860084][T10508] syz_tun: left allmulticast mode
[  144.940360][T10525] binder: 10524:10525 ioctl c0306201 200000000080 returned -14
[  144.948884][T10522] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  144.951875][T10522] udc dummy_udc.0: failed to start g1: -19
[  144.958342][T10527] tipc: Resetting bearer <eth:syz_tun>
[  144.963695][T10527] syz_tun: left promiscuous mode
[  144.973201][T10522] UDC core: g1: couldn't find an available UDC or it's busy
[  144.976875][T10527] 
: (slave syz_tun): Releasing backup interface
[  144.980974][T10527] tipc: Resetting bearer <eth:syz_tun>
[  145.033378][T10532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.043951][T10532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.086701][ T5743] Bluetooth: hci3: unexpected event 0x07 length: 7 < 255
[  145.491370][T10564] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  145.501013][T10564] udc dummy_udc.0: failed to start g1: -19
[  145.514723][T10564] UDC core: g1: couldn't find an available UDC or it's busy
[  145.667622][T10573] gadgetfs: bound to dummy_udc driver
[  145.673752][T10574] ==================================================================
[  145.676293][T10574] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15ca/0x1bd0
[  145.678683][T10574] Read of size 8 at addr ffff888022ddc458 by task syz.4.1681/10574
[  145.681359][T10574] 
[  145.682762][T10574] CPU: 1 UID: 0 PID: 10574 Comm: syz.4.1681 Not tainted syzkaller #0 PREEMPT(full) 
[  145.682777][T10574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  145.682789][T10574] Call Trace:
[  145.682794][T10574]  <TASK>
[  145.682799][T10574]  dump_stack_lvl+0x100/0x190
[  145.682834][T10574]  print_report+0x13d/0x4b0
[  145.682872][T10574]  ? __virt_addr_valid+0x239/0x430
[  145.682892][T10574]  ? __mutex_lock+0x15ca/0x1bd0
[  145.682905][T10574]  kasan_report+0xdf/0x1c0
[  145.682925][T10574]  ? __mutex_lock+0x15ca/0x1bd0
[  145.682939][T10574]  __mutex_lock+0x15ca/0x1bd0
[  145.682952][T10574]  ? ep_open+0x4c/0x2c0
[  145.682976][T10574]  ? __pfx_avc_has_perm+0x10/0x10
[  145.683002][T10574]  ? hook_file_open+0x24f/0x8f0
[  145.683021][T10574]  ? __pfx___mutex_lock+0x10/0x10
[  145.683036][T10574]  ? __pfx_selinux_file_open+0x10/0x10
[  145.683056][T10574]  ? ep_open+0x4c/0x2c0
[  145.683070][T10574]  ep_open+0x4c/0x2c0
[  145.683084][T10574]  do_dentry_open+0x6ab/0x14d0
[  145.683095][T10574]  ? __pfx_ep_open+0x10/0x10
[  145.683110][T10574]  vfs_open+0x82/0x3f0
[  145.683123][T10574]  path_openat+0x2873/0x4280
[  145.683147][T10574]  ? __pfx_path_openat+0x10/0x10
[  145.683159][T10574]  do_file_open+0x20e/0x430
[  145.683171][T10574]  ? __pfx_do_file_open+0x10/0x10
[  145.683186][T10574]  ? alloc_fd+0x471/0x7a0
[  145.683198][T10574]  ? do_getname+0x191/0x390
[  145.683217][T10574]  do_sys_openat2+0x10f/0x1e0
[  145.683230][T10574]  ? __pfx_do_sys_openat2+0x10/0x10
[  145.683245][T10574]  __x64_sys_openat+0x12d/0x210
[  145.683258][T10574]  ? __pfx___x64_sys_openat+0x10/0x10
[  145.683274][T10574]  do_syscall_64+0x115/0x870
[  145.683286][T10574]  ? clear_bhb_loop+0x40/0x90
[  145.683299][T10574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.683310][T10574] RIP: 0033:0x7f2a3679e019
[  145.683320][T10574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.683331][T10574] RSP: 002b:00007f2a376e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  145.683343][T10574] RAX: ffffffffffffffda RBX: 00007f2a36a25fa0 RCX: 00007f2a3679e019
[  145.683350][T10574] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  145.683356][T10574] RBP: 00007f2a3683500c R08: 0000000000000000 R09: 0000000000000000
[  145.683363][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.683369][T10574] R13: 00007f2a36a26038 R14: 00007f2a36a25fa0 R15: 00007ffe93b4c248
[  145.683379][T10574]  </TASK>
[  145.683383][T10574] 
[  145.762735][T10574] Allocated by task 10573:
[  145.764159][T10574]  kasan_save_stack+0x30/0x50
[  145.765608][T10574]  kasan_save_track+0x14/0x30
[  145.767047][T10574]  __kasan_kmalloc+0xaa/0xb0
[  145.768455][T10574]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  145.770092][T10574]  gadgetfs_bind+0x582/0x890
[  145.771508][T10574]  gadget_bind_driver+0x28c/0xbf0
[  145.773138][T10574]  really_probe+0x241/0xa60
[  145.774601][T10574]  __driver_probe_device+0x20e/0x450
[  145.776208][T10574]  driver_probe_device+0x4a/0x140
[  145.777728][T10574]  __driver_attach+0x21f/0x5b0
[  145.779203][T10574]  bus_for_each_dev+0x13e/0x1d0
[  145.780684][T10574]  bus_add_driver+0x305/0x5b0
[  145.782183][T10574]  driver_register+0x1e2/0x360
[  145.783629][T10574]  usb_gadget_register_driver_owner+0x132/0x210
[  145.785510][T10574]  dev_config+0xdce/0x1610
[  145.786916][T10574]  vfs_write+0x2aa/0x1050
[  145.788217][T10574]  ksys_write+0x12a/0x250
[  145.789547][T10574]  do_syscall_64+0x115/0x870
[  145.790924][T10574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.792740][T10574] 
[  145.793470][T10574] Freed by task 10572:
[  145.794709][T10574]  kasan_save_stack+0x30/0x50
[  145.796125][T10574]  kasan_save_track+0x14/0x30
[  145.797528][T10574]  kasan_save_free_info+0x3b/0x70
[  145.799021][T10574]  __kasan_slab_free+0x5f/0x80
[  145.800446][T10574]  kfree+0x22b/0x6c0
[  145.801639][T10574]  put_ep+0x117/0x150
[  145.802908][T10574]  destroy_ep_files+0x163/0x420
[  145.804352][T10574]  gadgetfs_unbind+0x139/0x260
[  145.805800][T10574]  gadget_unbind_driver+0x20c/0x4f0
[  145.807406][T10574]  device_remove+0xcb/0x180
[  145.808775][T10574]  device_release_driver_internal+0x44e/0x620
[  145.810595][T10574]  driver_detach+0xd8/0x1b0
[  145.812004][T10574]  bus_remove_driver+0x13b/0x2e0
[  145.813496][T10574]  driver_unregister+0x76/0xb0
[  145.814983][T10574]  usb_gadget_unregister_driver+0x49/0x70
[  145.816688][T10574]  dev_release+0x132/0x1b0
[  145.818057][T10574]  __fput+0x3ff/0xb50
[  145.819261][T10574]  task_work_run+0x150/0x240
[  145.820676][T10574]  exit_to_user_mode_loop+0x1d8/0x6f0
[  145.822368][T10574]  do_syscall_64+0x666/0x870
[  145.823826][T10574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.825625][T10574] 
[  145.826355][T10574] The buggy address belongs to the object at ffff888022ddc400
[  145.826355][T10574]  which belongs to the cache kmalloc-512 of size 512
[  145.830507][T10574] The buggy address is located 88 bytes inside of
[  145.830507][T10574]  freed 512-byte region [ffff888022ddc400, ffff888022ddc600)
[  145.834561][T10574] 
[  145.835326][T10574] The buggy address belongs to the physical page:
[  145.837253][T10574] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22ddc
[  145.839884][T10574] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  145.842421][T10574] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  145.844717][T10574] page_type: f5(slab)
[  145.845956][T10574] raw: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122
[  145.848585][T10574] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  145.851244][T10574] head: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122
[  145.853928][T10574] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  145.856579][T10574] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  145.859181][T10574] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  145.861852][T10574] page dumped because: kasan: bad access detected
[  145.863889][T10574] page_owner tracks the page as allocated
[  145.865713][T10574] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3122997658, free_ts 0
[  145.871595][T10574]  post_alloc_hook+0xfd/0x120
[  145.873173][T10574]  get_page_from_freelist+0xf48/0x3530
[  145.874867][T10574]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  145.876689][T10574]  new_slab+0xa2/0x640
[  145.877921][T10574]  refill_objects+0xe3/0x410
[  145.879335][T10574]  __pcs_replace_empty_main+0x376/0x680
[  145.881024][T10574]  __kmalloc_flags_noprof+0x695/0x8b0
[  145.882621][T10574]  __pcs_replace_empty_main+0x41a/0x680
[  145.884258][T10574]  kmem_cache_alloc_noprof+0x46e/0x6a0
[  145.885908][T10574]  acpi_ps_alloc_op+0x212/0x2b0
[  145.887389][T10574]  acpi_ps_create_op+0x4b3/0xd10
[  145.888884][T10574]  acpi_ps_parse_loop+0x93f/0x26e0
[  145.890408][T10574]  acpi_ps_parse_aml+0x81e/0x1120
[  145.892017][T10574]  acpi_ps_execute_method+0x5c4/0xe90
[  145.893638][T10574]  acpi_ns_evaluate+0x640/0x1670
[  145.895125][T10574]  acpi_evaluate_object+0x420/0xe00
[  145.896716][T10574] page_owner free stack trace missing
[  145.898344][T10574] 
[  145.899100][T10574] Memory state around the buggy address:
[  145.900768][T10574]  ffff888022ddc300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  145.903205][T10574]  ffff888022ddc380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  145.905630][T10574] >ffff888022ddc400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.908046][T10574]                                                     ^
[  145.910149][T10574]  ffff888022ddc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.912651][T10574]  ffff888022ddc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.915132][T10574] ==================================================================
[  145.924777][T10574] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  145.927314][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.4.1681 Not tainted syzkaller #0 PREEMPT(full) 
[  145.930111][T10574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  145.933594][T10574] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  145.934622][T10574]  <TASK>
[  145.935707][T10574]  dump_stack_lvl+0x100/0x190
[  145.937151][T10574]  vpanic+0x552/0x970
[  145.938339][T10574]  ? __pfx_vpanic+0x10/0x10
[  145.939706][T10574]  ? rcu_is_watching+0x12/0xc0
[  145.941133][T10574]  ? __mutex_lock+0x15ca/0x1bd0
[  145.942673][T10574]  panic+0xd1/0xe0
[  145.944197][T10574]  ? __pfx_panic+0x10/0x10
[  145.945844][T10574]  ? __mutex_lock+0x15ca/0x1bd0
[  145.947618][T10574]  ? preempt_schedule_common+0x42/0xc0
[  145.949339][T10574]  ? check_panic_on_warn+0x1f/0x90
[  145.951034][T10574]  check_panic_on_warn.cold+0x19/0x34
[  145.952722][T10574]  end_report.part.0+0x3a/0x90
[  145.954201][T10574]  kasan_report.cold+0xe/0x18
[  145.955651][T10574]  ? __mutex_lock+0x15ca/0x1bd0
[  145.957167][T10574]  __mutex_lock+0x15ca/0x1bd0
[  145.958607][T10574]  ? ep_open+0x4c/0x2c0
[  145.960057][T10574]  ? __pfx_avc_has_perm+0x10/0x10
[  145.961620][T10574]  ? hook_file_open+0x24f/0x8f0
[  145.963137][T10574]  ? __pfx___mutex_lock+0x10/0x10
[  145.964727][T10574]  ? __pfx_selinux_file_open+0x10/0x10
[  145.966358][T10574]  ? ep_open+0x4c/0x2c0
[  145.967625][T10574]  ep_open+0x4c/0x2c0
[  145.968908][T10574]  do_dentry_open+0x6ab/0x14d0
[  145.970373][T10574]  ? __pfx_ep_open+0x10/0x10
[  145.971826][T10574]  vfs_open+0x82/0x3f0
[  145.973062][T10574]  path_openat+0x2873/0x4280
[  145.974458][T10574]  ? __pfx_path_openat+0x10/0x10
[  145.975976][T10574]  do_file_open+0x20e/0x430
[  145.977353][T10574]  ? __pfx_do_file_open+0x10/0x10
[  145.978864][T10574]  ? alloc_fd+0x471/0x7a0
[  145.980188][T10574]  ? do_getname+0x191/0x390
[  145.981548][T10574]  do_sys_openat2+0x10f/0x1e0
[  145.983003][T10574]  ? __pfx_do_sys_openat2+0x10/0x10
[  145.984601][T10574]  __x64_sys_openat+0x12d/0x210
[  145.986106][T10574]  ? __pfx___x64_sys_openat+0x10/0x10
[  145.987722][T10574]  do_syscall_64+0x115/0x870
[  145.989141][T10574]  ? clear_bhb_loop+0x40/0x90
[  145.990561][T10574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.992354][T10574] RIP: 0033:0x7f2a3679e019
[  145.993652][T10574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.999303][T10574] RSP: 002b:00007f2a376e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  146.001752][T10574] RAX: ffffffffffffffda RBX: 00007f2a36a25fa0 RCX: 00007f2a3679e019
[  146.004203][T10574] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  146.006512][T10574] RBP: 00007f2a3683500c R08: 0000000000000000 R09: 0000000000000000
[  146.008880][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.011273][T10574] R13: 00007f2a36a26038 R14: 00007f2a36a25fa0 R15: 00007ffe93b4c248
[  146.013645][T10574]  </TASK>
[  146.015208][T10574] Kernel Offset: disabled
[  146.016607][T10574] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:04:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8ebe8200 RCX=ffffffff91d3bb01 RDX=0000000000000000
RSI=ffffffff8c402600 RDI=0000000000000000 RBP=ffffffff81b866be RSP=ffffc9000ea77918
R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000017aed
R12=ffff88802b99ca80 R13=ffffc9000ea779d0 R14=0000000000000202 R15=ffffc9000ea77a04
RIP=ffffffff81e5fa3d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f5d03a15880 ffffffff 00c00000
GS =0000 ffff8880d5dd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f57c515da08 CR3=00000000340c0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002000002 Opmask01=00000000c0000000 Opmask02=000000000fffffff Opmask03=0000000082000020
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056236c812b50 000056236c811b50
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056236c811b50 000056236c811b50
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056236c7f7ff0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056236c806e30
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d033f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737325501f0c7483 737325557d1e3f59
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 56c2ba119b8a33f4 737373761145b488
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056236c7ecf50 000056236c7ef7b0 0000000000000031 0000000000000030
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 25b1c962e8f94087 000056260e497015 0000000000000111 6500347475706e69
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a30275 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc900045ef210
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666
R12=0000000000000000 R13=0000000000000054 R14=ffffffff9b6fe1ef R15=ffffffff85a30210
RIP=ffffffff85a3029f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
FS =0000 00007f2a376e96c0 ffffffff 00c09300 DPL=0 DS   [-WA]
GS =0000 ffff8880d5ed8000 ffffffff 00c09300 DPL=0 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000035e0e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001fffffe Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a376e9050 0000003000000010
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe93b4c736
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe93b4c736 00007ffe93b4c73c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a368355ef
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a3683562f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a36835793
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a36835621
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73697664616d2065 74616c75706f7000 757a253d657a6973 2070253d72747000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 564c534144480540 51444950554a5500 505f0018405f4c56 0555001857515500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a369f25f8 00007f2a369f25c8 00007f2a369f2600 00007f2a369f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff825ed301 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000057 RSP=ffffc90000ff7558
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffffc90000ff7838 R13=ffffea0000f04600 R14=ffff8880278f9d48 R15=000000003c118025
RIP=ffffffff820a5d97 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5fd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b339f0000 CR3=000000003430c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdef98c06
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdef98c06 00007ffcdef98c0c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29434355ef
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f294343562f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2943435793
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2943435621
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffea000144f7c0 RBX=0000000000000000 RCX=ffffffff825dcd56 RDX=ffff88802f474a80
RSI=ffffffff825dcd60 RDI=ffff88802f474a80 RBP=ffffc90005087968 RSP=ffffc900050877b8
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=ffffea000144f7c0 R14=ffff888035dfeec0 R15=80000000513df007
RIP=ffffffff825ee0d7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d60d8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000003900 CR3=000000000e994000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c515d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff11b85846
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff11b85846 00007fff11b8584c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c44355ef
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c443562f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c4435793
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c4435621
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c45f2600 00007f57c45f25e0 00007f57c45f25e8 00007f57c45f2618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c45f25f8 00007f57c45f25c8 00007f57c45f2600 00007f57c45f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000