last executing test programs:

32.26228512s ago: executing program 3 (id=166):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)="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", 0xfe)

32.193054283s ago: executing program 3 (id=168):
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7)
r1 = gettid()
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x4e8, 0xffffffff, 0x310, 0x0, 0x248, 0xffffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x101, [0x1000, 0x10000], 0x3, 0x4, 0x1, [@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private1, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x3a}, @remote, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x1b}, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @remote}], 0x1}}, @common=@mh={{0x24}, {'s1'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x310}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x2, 0x1, [0x5, 0xfffd, 0x8001, 0x2, 0x40, 0x2, 0x1ff, 0x0, 0x7, 0x80, 0x9, 0x9, 0xe, 0x400, 0xa, 0x5]}}]}, @common=@unspec=@AUDIT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544)
timer_create(0x0, &(0x7f0000000540)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000580))
timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x4, 0x4, 0x10800}, 0x50)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000680), 0x2, 0x141102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r5 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000280)='n', 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f00000002c0))
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
socket$inet_sctp(0x2, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/kcov\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
writev(r4, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2)
r6 = getpgid(r3)
prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x2, &(0x7f0000000400))

32.114974537s ago: executing program 3 (id=169):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000940)=0x80)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0)
write(r0, &(0x7f00000003c0)='1000\n', 0x5)

31.339539576s ago: executing program 3 (id=172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101840, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file3\x00', 0x105042, 0x0)
mount(&(0x7f0000000240)=@sr0, &(0x7f0000000280)='./file3\x00', &(0x7f00000002c0)='erofs\x00', 0x0, &(0x7f0000000300)='acl')
close(0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)='g', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)="1b", 0x1}], 0x1}}], 0x2, 0x40)
sendto$inet6(r2, &(0x7f0000000500)="8b", 0x1, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @remote, 0x80000}, 0x1c)
shutdown(r2, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000004200100027bd7400fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
fadvise64(r1, 0x400001fe, 0x4, 0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040804}, 0x840)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'veth0_to_team\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000008c0)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000900)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000980)={&(0x7f00000009c0)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000a40)='.', 0x1}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000))

31.042950613s ago: executing program 3 (id=177):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="6000000001090500000000040c00048008000140000000006c9fa0c0b66ceebec45be00dcb2d364613536183127767aba47f19af011c4c6ad9a7299d07088a91fb4f2482fa986e88adbb8ee5684cb80473ea4f36661447a61f0129471d39df0c24d7b5b7757c81bb0ec9ff4c0de1a62c9f3e6a6c056b00ef9bf1c1052e060c0296059138ec309fc3530b9c601028790c6ee51e0553473332791354368b6551d5cc2f3cf88813a9d63fa1d736bb41b813a431fb09cf6f6a4bf4d695dca32bd0e3fcc677032751789d12874865b46ef415"], 0x20}, 0x1, 0x0, 0x0, 0x8850}, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000780)='100', 0x3)
mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil)
socket(0x1e, 0x4, 0x0)
r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x46)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYRES16=r0], 0xac}}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0)
mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x8400, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sched_setattr(0x0, &(0x7f0000000280)={0xfdd7, 0x0, 0x20, 0x0, 0x80000000, 0xd, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@ipv6_newaddrlabel={0x30, 0x48, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0xd}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084c1}, 0x20000800)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0)
syz_clone(0x20000, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000800000000000000000"], 0x50)
pread64(0xffffffffffffffff, &(0x7f0000002840)=""/102386, 0x18ff2, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000940)=0x3, 0x4)

30.94320651s ago: executing program 3 (id=178):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00')
pread64(r3, &(0x7f00000001c0)=""/11, 0xb, 0x4)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)

15.332623449s ago: executing program 32 (id=178):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00')
pread64(r3, &(0x7f00000001c0)=""/11, 0xb, 0x4)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)

3.552707727s ago: executing program 4 (id=298):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0, 0x8e}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000019400)=ANY=[], 0x2a, 0x0)
add_key(&(0x7f0000019440)='encrypted\x00', &(0x7f0000019480), &(0x7f00000194c0), 0xca, 0xfffffffffffffffe)
r4 = getpgid(r1)
fcntl$setownex(r3, 0xf, &(0x7f0000019500)={0x1, r4})
add_key$user(0x0, &(0x7f0000019540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
mkdir(&(0x7f0000019580)='./cgroup/../file0\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000195c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x0, 0x2e})
sendmsg$nl_route(r0, &(0x7f0000019680)={0x0, 0x0, 0x0}, 0x20008804)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f00000196c0)={0x0, 0x10000, 0x6a2f, 0x40000a6, 0x3, '\x00', 0x10, 0x200008})
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000019700))
openat$ppp(0xffffffffffffff9c, &(0x7f0000019740), 0xc0802, 0x0)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000019780), 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close(r6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.events\x00', 0x275a, 0x0)

2.41886895s ago: executing program 2 (id=303):
socket$kcm(0x2, 0x3, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @auto=[0x30, 0x54, 0x64, 0x37, 0x34, 0x64, 0x62, 0x63, 0x34, 0x66, 0x32, 0x65, 0x63, 0x34, 0x64, 0x66]}, 0x0, 0x0, 0x0) (async)
add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @auto=[0x30, 0x54, 0x64, 0x37, 0x34, 0x64, 0x62, 0x63, 0x34, 0x66, 0x32, 0x65, 0x63, 0x34, 0x64, 0x66]}, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x8d)
socket$kcm(0x10, 0xd6d055e1c151d7a8, 0x10) (async)
r1 = socket$kcm(0x10, 0xd6d055e1c151d7a8, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000000040), 0x3db66e6159adff3, 0x10100, 0x0)
recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES32=r0], 0xfe33)

2.372916264s ago: executing program 2 (id=304):
r0 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vlan0\x00', <r1=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000240), 0x56)
sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r1, 0x3e, 0xb00}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200590214000600002fb96dbcf706e105000000884700001144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0)

2.371781797s ago: executing program 2 (id=305):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0xf0, 0x0, 0x0, 0x0}, 0x50)

2.309790276s ago: executing program 2 (id=306):
r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000240)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, 0x0, 0x1)

2.308943814s ago: executing program 1 (id=307):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x5) (async)
listen(r0, 0x5)
bind$unix(r0, &(0x7f0000000800)=@file={0x1, './bus/file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x41, 0x49)
mkdirat(r1, &(0x7f0000000080)='./bus/file0\x00', 0x0)
sendmsg$sock(r0, &(0x7f0000000b40)={&(0x7f00000008c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, 0x7}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)="eff67aa7890303d0a15a8be81902a6221284d1f9080603bf27891d81426ea0e08151d27401bcbbd36dce5ebff5e95a3dc01af26e4eb8aa11aec6b42cb4db32f639236e9f6a75d26522efe551b448bd10d82148a74d8ff0718fc3dc0529210c891191f1022dd165c223054c66e2779710dc15535707eee39108", 0x79}, {&(0x7f00000009c0)="abf43c0509b1fb2cb299c421d662f14c40fbb1794d6cbedbfcb091e75d93fec528fcd8cbf82d6472b1d72730f616096a394a19a4aa961578df8f2d1fd461aefa9b52bba7dbbd601f2aff6b9a3881dfff09a0361798b8deb2a670bb35d605cca3e58c5130b21f6ac16e400c1c642bf35faa6ddfef38e65cbeef651debc510202a63d6f7a94c27e7391f40220292f0981d653de036382c0d996afd5bd282", 0x9d}], 0x2, &(0x7f0000000ac0)=[@txtime={{0x14, 0x1, 0x3d, 0x39f}}, @mark={{0x10, 0x1, 0x24, 0x99}}, @mark={{0x10, 0x1, 0x24, 0x8}}, @txtime={{0x14}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x756}}], 0x68}, 0x4040000)
socket(0x2, 0x80805, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)="c4", 0x1}], 0x1}}, {{&(0x7f0000000600)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)='I', 0x1}], 0x1}}], 0x2, 0x4050000) (async)
sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)="c4", 0x1}], 0x1}}, {{&(0x7f0000000600)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)='I', 0x1}], 0x1}}], 0x2, 0x4050000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000006c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000700)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000740)={r3}, 0x8) (async)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000740)={r3}, 0x8)
r4 = openat(r1, &(0x7f0000004280)='./file0\x00', 0x10000, 0x0)
getdents64(r4, &(0x7f0000000240)=""/164, 0xa4)
socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r8=>0x0})
r9 = msgget$private(0x0, 0x1f3)
msgrcv(r9, 0x0, 0x0, 0xfffffffffffffff9, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc) (async)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendto(r10, &(0x7f0000000480)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x6000, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

2.30874146s ago: executing program 2 (id=308):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffff8, 0x7ffd, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0xfc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setns(0xc9, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x41)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000b00)={{}, "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"})
mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./sys\x00', 0x152)
mount(0x0, 0x0, &(0x7f0000001b40)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x15d)
mkdirat(0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001bc0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001c00)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001c40), 0x80200, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000001c80), 0x2, 0x141102)
writev(r7, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="94", 0xf000}, {0x0}], 0x2)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0), &(0x7f0000001f00), 0x407f, r9, 0x4}, 0x38)

1.630011812s ago: executing program 2 (id=309):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0900010073797a31000000000900020073797a3200000000540000001c0a030000000000000000000a00000608000940000000010900020073797a32000000000900010073797a310000000008000a40000000030800094000000000040004800c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
pipe(0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0xa7c, r4}, 0x38)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth1_to_bond\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x844)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff)
mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/fillfile\x00', 0x42, 0x9f)
openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0], 0x70}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f00000009c0)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c011)
landlock_restrict_self(0xffffffffffffffff, 0xc)

1.422143009s ago: executing program 1 (id=310):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0xc0ff, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5be4", 0x0, 0x80000e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.361731853s ago: executing program 4 (id=312):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdd]}}]}}]}, 0x8c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) (async)
r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) (async)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) (async)
r7 = fcntl$dupfd(r5, 0x406, r5)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r7, @ANYRES32=r5, @ANYRES8=r6, @ANYRES64=r4], 0xfffffdcf) (async)
connect$unix(r7, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)

952.877244ms ago: executing program 0 (id=314):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x6, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000040)=""/231, 0xe7}, {0x0}, {&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000280)=""/74, 0x4a}, {&(0x7f0000000300)=""/7, 0x7}]}, &(0x7f00000004c0)="5a353fffeb00", 0x0, 0xbc, 0x10032, 0x2000, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x1, &(0x7f0000000380)=[{0x6, 0xfd, 0x2, 0xfffffffa}]}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xa2200) (async)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
pselect6(0x40, &(0x7f0000000240)={0xda, 0xfffffffffffffffc, 0xd0, 0x80, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) (async)
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r2, 0x1})
ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') (async)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000540)=0x1)
close_range(r3, r5, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000440)={0x80003, 0x0, 0x4, 0x7, 0x2000, 0x20010000}) (async)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x26fe9}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async)
r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x1100)
ioctl$VIDIOC_QUERYSTD(r8, 0x8008563f, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000500)={0x1, [<r9=>0x0]}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000000c0)={r9, 0x100}, &(0x7f00000001c0)=0x8) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f00000003c0)=0x4, 0x4) (async)
sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001e00431bfdffffff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x20}}, 0x4040014)

503.050064ms ago: executing program 1 (id=315):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]})
close_range(r0, 0xffffffffffffffff, 0x0)

499.727132ms ago: executing program 0 (id=316):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x2, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, 0x0, 0x3f1341, 0x0)
pipe(0x0)
pipe(&(0x7f0000000140))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r4=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x50)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0xa8, r3, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_IE={0x6c, 0x2a, [@fast_bss_trans={0x37, 0x52, {0x40, 0x0, "9b9ecef89937efeadce61ede8e17238a", "9457b7b2de8e7a85f4f0967e0ed2235182b2175e0e4ab99d9f4410e177f7e50a", "22feea9d961ba72e4de6bec5b43151501b5de30c2d0966f13ca44f070b6a05a4"}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0xf040}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000006c0)={0x1, 0x2, 0x4, 0x0, 0xfe})
r6 = syz_open_dev$vim2m(&(0x7f0000000700), 0x8, 0x2)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000040))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r7, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000740)={0xf0f024})

499.510768ms ago: executing program 1 (id=317):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\v\x00'], 0x50) (async)
write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020005007e0500001720000501"], 0x11a) (async)
write$UHID_INPUT2(r2, &(0x7f0000000400)=ANY=[], 0x37) (async)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r3, 0x1, 0x1070bd0b, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40060)

372.74755ms ago: executing program 1 (id=318):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000140), 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000089134631ad8614593ff40fe8000000000000000000000000000bbfe8000000000000000000000000000aa0092"], 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000480)=0x8, 0x4)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x4}, 0x10)
write(r2, &(0x7f00000001c0)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14)
recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x7, 0x1, 0x3, 0x11, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8000, 0x7, 0x3}})
sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv4_newaddr={0x48, 0x14, 0x2, 0x70bd26, 0x25dfdbfd, {0x2, 0x18, 0xa0, 0x0, r3}, [@IFA_LABEL={0x14, 0x3, 'pimreg1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x80000000, 0x40, 0x127}}, @IFA_FLAGS={0x8, 0x8, 0x10}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x40000)
getsockopt$sock_buf(r0, 0x1, 0x9, &(0x7f0000000040)=""/154, &(0x7f0000000100)=0xffffffffffffffdc)

262.829314ms ago: executing program 1 (id=319):
prctl$PR_MCE_KILL(0x29, 0x1, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0xba, &(0x7f0000000280)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000540), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x2)
recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000600)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_open_dev$usbmon(&(0x7f00000006c0), 0x0, 0x0)
ppoll(&(0x7f0000000700)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0)
write(r5, &(0x7f0000000780)='1', 0x1)

183.063713ms ago: executing program 4 (id=320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283aff", @ANYRES8=r1], 0x0)

181.429412ms ago: executing program 0 (id=321):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0)
write$tcp_mem(r0, &(0x7f0000000140)={0x9, 0x20, 0x2, 0x20, 0x100000001}, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x109) (async)
mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhci\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020) (async)
write(r1, &(0x7f0000003780)="ff80", 0x2) (async)
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000}) (async)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, <r3=>0x0}, &(0x7f00000003c0)=0xc)
setregid(0xffffffffffffffff, r3) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0)
write$binfmt_format(r5, &(0x7f0000000500)='1\x00', 0x2) (async)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async)
r6 = accept4(r4, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r6) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10060}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_MTU={0x8, 0x4, 0x48f}]}, 0x40}}, 0x0)

181.200415ms ago: executing program 4 (id=322):
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="0332b2aebdc5", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x6c, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @local}}}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x62181, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x30000, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x1, 0x70bd28, 0x25dfdbfd, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d80)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000dc0)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd80000000000000005dc000000040100"})

92.563097ms ago: executing program 4 (id=323):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2510000000050010000700000005000f0009000000080001006f"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x40000080)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x24c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xcc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555550001}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0x14c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffff01}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0xa4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000004}, 0x880)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x4, 0x700000000000000}, 0x0)
mkdir(0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000080)={0x14}, 0x14)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x0, 0x0, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x108, 0x1a, 0x1, 0xfffffffe, 0xff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0xff}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x7fffffff}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x28}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x108}}, 0x844)

92.43423ms ago: executing program 0 (id=324):
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="0332b2aebdc5", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x6c, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @local}}}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x62181, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x29, 0x1, 0x70bd28, 0x25dfdbfd, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) (fail_nth: 5)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d80)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000dc0)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd80000000000000005dc000000040100"})

92.347696ms ago: executing program 0 (id=325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008041}, 0x4)

638.74µs ago: executing program 0 (id=326):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000002480)='dir0\x00', 0x80)
mount(0x0, &(0x7f00000024c0)='dir0\x00', &(0x7f0000002500)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002540)='dir0/per_cpu/cpu0/trace\x00', 0x48342, 0x1a1)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2000413, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)={0x10, 0x0, r2}, 0x10)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./sec\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='path_group G1 /bin/true\n', 0x18)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='2', 0x1)

0s ago: executing program 4 (id=327):
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0900010073797a31000000000900020073797a3200000000540000001c0a030000000000000000000a00000608000940000000010900020073797a32000000000900010073797a310000000008000a40000000030800094000000000040004800c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
pipe(0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0xa7c, r3}, 0x38)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth1_to_bond\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x844)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff)
mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/fillfile\x00', 0x42, 0x9f)
write(r4, &(0x7f00000006c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)
openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f00000009c0)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c011)
landlock_restrict_self(0xffffffffffffffff, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45611' (ED25519) to the list of known hosts.
[   32.676052][ T5706] cgroup: Unknown subsys name 'net'
[   32.818294][ T5706] cgroup: Unknown subsys name 'cpuset'
[   32.822000][ T5706] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   33.821888][ T5706] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.623343][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.626466][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.633391][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.633833][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.634184][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.635995][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.636194][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.636556][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.638208][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.640841][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.641038][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.641216][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.641583][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.642133][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.642801][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.644535][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.645929][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.647253][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.667789][   T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.684027][   T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.923003][ T5788] rdma_rxe: Failed to create IPv6 UDP tunnel
[   37.924160][ T5797] rxe_eth0 speed is unknown, defaulting to 1000
[   37.934970][ T5797] rxe_eth0 speed is unknown, defaulting to 1000
[   37.936240][ T5797] rxe_eth0 speed is unknown, defaulting to 1000
[   37.956103][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   37.993345][ T5798] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   38.034958][ T5797] infiniband rxe0: set active
[   38.035508][ T5797] infiniband rxe0: added rxe_eth0
[   38.043947][ T5797] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   38.043966][ T5797] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   38.043987][ T5797] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   38.056379][ T5801] rxe_eth0 speed is unknown, defaulting to 1000
[   38.059233][ T5797] RDS/IB: rxe0: added
[   38.059340][ T5797] smc: adding ib device rxe0 with port count 1
[   38.059379][ T5797] smc:    ib device rxe0 port 1 has no pnetid
[   38.070864][ T5801] rxe_eth0 speed is unknown, defaulting to 1000
[   38.077937][ T5797] rxe_eth0 speed is unknown, defaulting to 1000
[   38.175006][ T5797] rxe_eth0 speed is unknown, defaulting to 1000
[   38.286551][ T5797] rxe_eth0 speed is unknown, defaulting to 1000
[   38.339483][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.339597][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.339715][ T5789] bridge_slave_0: entered allmulticast mode
[   38.341017][ T5789] bridge_slave_0: entered promiscuous mode
[   38.361158][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.361228][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.361293][ T5789] bridge_slave_1: entered allmulticast mode
[   38.362004][ T5789] bridge_slave_1: entered promiscuous mode
[   38.405181][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.405844][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.406006][ T5788] bridge_slave_0: entered allmulticast mode
[   38.406916][ T5788] bridge_slave_0: entered promiscuous mode
[   38.408667][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.408727][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.408885][ T5788] bridge_slave_1: entered allmulticast mode
[   38.409639][ T5788] bridge_slave_1: entered promiscuous mode
[   38.412682][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.414173][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.442685][ T5797] rxe_eth0 speed is unknown, defaulting to 1000
[   38.450041][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.450083][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.450226][ T5798] bridge_slave_0: entered allmulticast mode
[   38.450908][ T5798] bridge_slave_0: entered promiscuous mode
[   38.460020][ T5789] team0: Port device team_slave_0 added
[   38.462153][ T5789] team0: Port device team_slave_1 added
[   38.462228][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.462267][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.462328][ T5798] bridge_slave_1: entered allmulticast mode
[   38.462990][ T5798] bridge_slave_1: entered promiscuous mode
[   38.472526][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.474548][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.494230][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.505466][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.505476][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.505488][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.507132][ T5788] team0: Port device team_slave_0 added
[   38.508259][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.509171][ T5788] team0: Port device team_slave_1 added
[   38.527062][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.527072][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.527085][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.550029][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.550043][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.550062][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.558825][ T5798] team0: Port device team_slave_0 added
[   38.560107][ T5798] team0: Port device team_slave_1 added
[   38.565672][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.565681][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.565693][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.587186][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.587200][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.587218][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.615094][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.615109][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.615127][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.639890][ T5789] hsr_slave_0: entered promiscuous mode
[   38.640388][ T5789] hsr_slave_1: entered promiscuous mode
[   38.648297][ T5788] hsr_slave_0: entered promiscuous mode
[   38.649148][ T5788] hsr_slave_1: entered promiscuous mode
[   38.649802][ T5788] debugfs: 'hsr0' already exists in 'hsr'
[   38.649863][ T5788] Cannot create hsr debugfs directory
[   38.720098][ T5798] hsr_slave_0: entered promiscuous mode
[   38.720777][ T5798] hsr_slave_1: entered promiscuous mode
[   38.721294][ T5798] debugfs: 'hsr0' already exists in 'hsr'
[   38.721311][ T5798] Cannot create hsr debugfs directory
[   38.989511][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.989973][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.990095][ T5797] bridge_slave_0: entered allmulticast mode
[   38.990771][ T5797] bridge_slave_0: entered promiscuous mode
[   38.994999][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.995063][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.995120][ T5797] bridge_slave_1: entered allmulticast mode
[   38.995906][ T5797] bridge_slave_1: entered promiscuous mode
[   39.004867][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.009795][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.019433][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.019465][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.023421][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.023931][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.026291][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.034893][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.040867][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.043097][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.069100][ T5797] team0: Port device team_slave_0 added
[   39.070493][ T5797] team0: Port device team_slave_1 added
[   39.088470][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.091915][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.104176][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.108119][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.109037][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.109046][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.109058][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.109501][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.113727][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.124681][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.124690][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.124703][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.130436][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.134285][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.145398][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.145490][ T5788] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.145919][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.146004][ T5788] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.163502][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.164703][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.205232][ T5797] hsr_slave_0: entered promiscuous mode
[   39.206518][ T5797] hsr_slave_1: entered promiscuous mode
[   39.207268][ T5797] debugfs: 'hsr0' already exists in 'hsr'
[   39.207286][ T5797] Cannot create hsr debugfs directory
[   39.217790][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.224357][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.226526][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.232913][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.247193][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.249883][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.250755][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.253959][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.453523][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.466283][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.468505][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.473785][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.474173][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.476632][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.476993][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.480145][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.480903][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.485003][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.510924][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   39.518476][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[   39.519445][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.519502][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.527551][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.527596][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.530237][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.540711][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.541035][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.560353][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.560434][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.577862][ T5798] 8021q: adding VLAN 0 to HW filter on device team0
[   39.597647][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.597737][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.621328][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.621375][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.670800][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.716916][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[   39.717378][   T67] Bluetooth: hci1: command tx timeout
[   39.720279][ T5152] Bluetooth: hci0: command tx timeout
[   39.725754][ T5152] Bluetooth: hci3: command tx timeout
[   39.725913][ T5152] Bluetooth: hci2: command tx timeout
[   39.736962][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.737005][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.764076][  T255] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.764162][  T255] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.970780][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.011773][ T5789] veth0_vlan: entered promiscuous mode
[   40.014935][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.022683][ T5789] veth1_vlan: entered promiscuous mode
[   40.057136][ T5789] veth0_macvtap: entered promiscuous mode
[   40.059540][ T5798] veth0_vlan: entered promiscuous mode
[   40.063720][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.064475][ T5789] veth1_macvtap: entered promiscuous mode
[   40.076485][ T5798] veth1_vlan: entered promiscuous mode
[   40.083542][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.090250][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.121318][ T5798] veth0_macvtap: entered promiscuous mode
[   40.141912][ T5798] veth1_macvtap: entered promiscuous mode
[   40.148196][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.154581][ T5788] veth0_vlan: entered promiscuous mode
[   40.166756][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.181817][ T5788] veth1_vlan: entered promiscuous mode
[   40.195888][  T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.195909][  T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.202576][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.233096][ T5797] veth0_vlan: entered promiscuous mode
[   40.236133][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.248330][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.248343][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.250135][ T5797] veth1_vlan: entered promiscuous mode
[   40.264249][ T5788] veth0_macvtap: entered promiscuous mode
[   40.268739][ T5788] veth1_macvtap: entered promiscuous mode
[   40.283670][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.308357][ T5797] veth0_macvtap: entered promiscuous mode
[   40.310414][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.310430][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.315618][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.327000][ T5797] veth1_macvtap: entered promiscuous mode
[   40.336718][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.338564][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.338579][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.362514][ T5789] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.374062][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.378138][ T5789] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.381097][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.381617][ T5789] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.382586][ T5789] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.391060][ T5789] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.501411][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.501430][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.519460][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.519480][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.543749][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.543762][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.562732][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.562745][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.597267][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.597874][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.598336][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.598813][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.599084][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665421][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665449][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665466][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665483][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665499][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665516][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665533][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665549][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.665566][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.789195][ T5958] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[   41.077636][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   41.185519][   T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   41.260316][ T5966] 9pnet_virtio: no channels available for device syz
[   41.343954][ T5958] jffs2: notice: (5958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   41.795760][   T67] Bluetooth: hci2: command tx timeout
[   41.796137][ T5152] Bluetooth: hci3: command tx timeout
[   41.796159][ T5152] Bluetooth: hci0: command tx timeout
[   41.796170][ T5152] Bluetooth: hci1: command tx timeout
[   42.358600][ T5973] netlink: 'syz.0.6': attribute type 12 has an invalid length.
[   42.358666][ T5973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6'.
[   42.529994][ T5980] netlink: 'syz.0.8': attribute type 21 has an invalid length.
[   42.530016][ T5980] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8'.
[   42.530154][ T5980] netlink: 'syz.0.8': attribute type 4 has an invalid length.
[   42.530165][ T5980] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8'.
[   42.965520][ T5883] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   43.739405][   T34] usb 6-1: unable to get BOS descriptor or descriptor too short
[   43.739448][   T34] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   43.743432][   T34] usb 6-1: unable to read config index 0 descriptor/start: -71
[   43.743460][   T34] usb 6-1: can't read configurations, error -71
[   43.781264][ T5896] usb 7-1: unable to get BOS descriptor or descriptor too short
[   43.781303][ T5896] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   43.784577][ T5896] usb 7-1: unable to read config index 0 descriptor/start: -71
[   43.784597][ T5896] usb 7-1: can't read configurations, error -71
[   43.844843][   T42] audit: type=1326 audit(1793155148.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.2.12" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x0
[   43.875962][   T67] Bluetooth: hci0: command tx timeout
[   43.885615][   T67] Bluetooth: hci1: command tx timeout
[   43.885642][   T67] Bluetooth: hci2: command tx timeout
[   43.885654][   T67] Bluetooth: hci3: command tx timeout
[   44.356310][   T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   45.219438][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'.
[   45.724191][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short
[   45.724217][ T5883] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   45.729191][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -71
[   45.729211][ T5883] usb 5-1: can't read configurations, error -71
[   45.761397][ T6008] IPv6: addrconf: prefix option has invalid lifetime
[   45.915341][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'.
[   45.956257][ T5791] Bluetooth: hci0: command tx timeout
[   45.956290][ T5791] Bluetooth: hci3: command tx timeout
[   45.956331][   T67] Bluetooth: hci2: command tx timeout
[   45.965487][   T67] Bluetooth: hci1: command tx timeout
[   46.216374][ T5896] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   46.360100][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'.
[   46.555348][ T5883] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   46.605396][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   46.710043][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short
[   46.710108][ T5883] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   46.711399][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -71
[   46.711416][ T5883] usb 5-1: can't read configurations, error -71
[   46.712652][ T5883] usb usb5-port1: attempt power cycle
[   46.936813][   T34] usb 6-1: unable to get BOS descriptor or descriptor too short
[   46.936839][   T34] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   46.937433][   T34] usb 6-1: unable to read config index 0 descriptor/start: -71
[   46.937449][   T34] usb 6-1: can't read configurations, error -71
[   46.938633][   T34] usb usb6-port1: attempt power cycle
[   47.005683][ T6028] rxe_eth0 speed is unknown, defaulting to 1000
[   47.775359][   T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   48.237817][   T50] rxe_eth0 speed is unknown, defaulting to 1000
[   48.440878][ T6049] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   48.448821][   T42] audit: type=1326 audit(1793155152.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.449019][   T42] audit: type=1326 audit(1793155152.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.449428][   T42] audit: type=1326 audit(1793155152.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.450864][   T42] audit: type=1326 audit(1793155152.970:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.450889][   T42] audit: type=1326 audit(1793155152.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.451150][   T42] audit: type=1326 audit(1793155152.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.452353][   T42] audit: type=1326 audit(1793155152.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.452501][   T42] audit: type=1326 audit(1793155152.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.452750][   T42] audit: type=1326 audit(1793155152.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.28" exe="/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf743efbc code=0x7ffc0000
[   48.734178][ T6057] Zero length message leads to an empty skb
[   48.973006][ T5896] usb 7-1: unable to get BOS descriptor or descriptor too short
[   48.973071][ T5896] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   48.974639][ T5896] usb 7-1: unable to read config index 0 descriptor/start: -71
[   48.974673][ T5896] usb 7-1: can't read configurations, error -71
[   49.198418][   T42] kauditd_printk_skb: 16 callbacks suppressed
[   49.198431][   T42] audit: type=1326 audit(1793155153.720:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.0.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000
[   49.199099][   T42] audit: type=1326 audit(1793155153.720:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.0.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000
[   49.364133][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[   49.364179][    T9] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   49.368695][    T9] usb 8-1: unable to read config index 0 descriptor/start: -71
[   49.368722][    T9] usb 8-1: can't read configurations, error -71
[   49.377499][ T6066] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   49.508680][   T42] audit: type=1804 audit(1793155154.030:30): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.36" name="/newroot/6/file0" dev="tmpfs" ino=55 res=1 errno=0
[   49.651300][ T6076] FAULT_INJECTION: forcing a failure.
[   49.651300][ T6076] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   49.651346][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.2.38 Not tainted syzkaller #0 PREEMPT(full) 
[   49.651367][ T6076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   49.651387][ T6076] Call Trace:
[   49.651406][ T6076]  <TASK>
[   49.651414][ T6076]  dump_stack_lvl+0x100/0x190
[   49.651446][ T6076]  should_fail_ex.cold+0x5/0xa
[   49.651471][ T6076]  _copy_from_user+0x2e/0xd0
[   49.651503][ T6076]  __sys_bpf+0x2f5/0x4b60
[   49.651536][ T6076]  ? __pfx___sys_bpf+0x10/0x10
[   49.651585][ T6076]  ? find_held_lock+0x2b/0x80
[   49.651610][ T6076]  ? futex_wake+0x4ea/0x5e0
[   49.651654][ T6076]  ? rcu_read_lock_any_held+0x6a/0x90
[   49.651678][ T6076]  ? find_held_lock+0x2b/0x80
[   49.651698][ T6076]  ? ksys_write+0x190/0x250
[   49.651720][ T6076]  ? ksys_write+0x190/0x250
[   49.651756][ T6076]  ? lock_acquire+0x1d1/0x380
[   49.651772][ T6076]  ? __might_fault+0xc5/0x140
[   49.651791][ T6076]  ? find_held_lock+0x2b/0x80
[   49.651818][ T6076]  ? __ia32_sys_bpf+0xcc/0x170
[   49.651843][ T6076]  __ia32_sys_bpf+0xcc/0x170
[   49.651871][ T6076]  ? __might_fault+0x111/0x140
[   49.651888][ T6076]  __do_fast_syscall_32+0x14b/0x8c0
[   49.651916][ T6076]  do_fast_syscall_32+0x32/0x70
[   49.651938][ T6076]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   49.651958][ T6076] RIP: 0023:0xf747efbc
[   49.651974][ T6076] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   49.651989][ T6076] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[   49.652022][ T6076] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000480
[   49.652035][ T6076] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
[   49.652045][ T6076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   49.652055][ T6076] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   49.652067][ T6076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   49.652093][ T6076]  </TASK>
[   50.159950][ T6077] batadv_slave_1: entered promiscuous mode
[   50.161099][ T6075] batadv_slave_1: left promiscuous mode
[   50.224489][ T6082] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET)
[   50.313284][   T34] usb 6-1: unable to get BOS descriptor or descriptor too short
[   50.313310][   T34] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   50.313916][   T34] usb 6-1: unable to read config index 0 descriptor/start: -71
[   50.313932][   T34] usb 6-1: can't read configurations, error -71
[   50.387980][ T6091] comedi comedi2: comedi_config --init_data is deprecated
[   50.422033][ T6095] FAULT_INJECTION: forcing a failure.
[   50.422033][ T6095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.422066][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT(full) 
[   50.422088][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   50.422099][ T6095] Call Trace:
[   50.422104][ T6095]  <TASK>
[   50.422111][ T6095]  dump_stack_lvl+0x100/0x190
[   50.422139][ T6095]  should_fail_ex.cold+0x5/0xa
[   50.422166][ T6095]  _copy_from_user+0x2e/0xd0
[   50.422198][ T6095]  __sys_bpf+0x2f5/0x4b60
[   50.422230][ T6095]  ? __pfx___sys_bpf+0x10/0x10
[   50.422253][ T6095]  ? find_held_lock+0x2b/0x80
[   50.422274][ T6095]  ? futex_wake+0x4ea/0x5e0
[   50.422315][ T6095]  ? rcu_read_lock_any_held+0x6a/0x90
[   50.422342][ T6095]  ? find_held_lock+0x2b/0x80
[   50.422364][ T6095]  ? ksys_write+0x190/0x250
[   50.422388][ T6095]  ? ksys_write+0x190/0x250
[   50.422427][ T6095]  ? lock_acquire+0x1d1/0x380
[   50.422443][ T6095]  ? __might_fault+0xc5/0x140
[   50.422459][ T6095]  ? find_held_lock+0x2b/0x80
[   50.422486][ T6095]  ? __ia32_sys_bpf+0xcc/0x170
[   50.422513][ T6095]  __ia32_sys_bpf+0xcc/0x170
[   50.422538][ T6095]  ? __might_fault+0x111/0x140
[   50.422555][ T6095]  __do_fast_syscall_32+0x14b/0x8c0
[   50.422581][ T6095]  do_fast_syscall_32+0x32/0x70
[   50.422602][ T6095]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   50.422645][ T6095] RIP: 0023:0xf747efbc
[   50.422669][ T6095] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   50.422684][ T6095] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[   50.422703][ T6095] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000480
[   50.422715][ T6095] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000
[   50.422726][ T6095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   50.422736][ T6095] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   50.422747][ T6095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   50.422770][ T6095]  </TASK>
[   50.424094][ T6095] batadv_slave_1: entered promiscuous mode
[   50.425974][ T6094] batadv_slave_1: left promiscuous mode
[   50.508121][ T6100] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   50.618164][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'.
[   51.665737][   T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   51.869865][ T6121] jffs2: notice: (6121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   51.925433][ T5863] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   52.215420][ T5883] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   54.244155][ T6205] FAULT_INJECTION: forcing a failure.
[   54.244155][ T6205] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.244249][ T6205] CPU: 3 UID: 0 PID: 6205 Comm: syz.0.60 Not tainted syzkaller #0 PREEMPT(full) 
[   54.244269][ T6205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   54.244279][ T6205] Call Trace:
[   54.244285][ T6205]  <TASK>
[   54.244292][ T6205]  dump_stack_lvl+0x100/0x190
[   54.244321][ T6205]  should_fail_ex.cold+0x5/0xa
[   54.244347][ T6205]  _copy_to_user+0x32/0xd0
[   54.244392][ T6205]  v4l2_compat_put_array_args+0x27e/0x710
[   54.244424][ T6205]  ? __pfx_v4l2_compat_put_array_args+0x10/0x10
[   54.244448][ T6205]  ? tomoyo_path_number_perm+0x188/0x580
[   54.244475][ T6205]  ? __pfx___video_do_ioctl+0x10/0x10
[   54.244505][ T6205]  ? get_pid_task+0x106/0x250
[   54.244525][ T6205]  ? video_usercopy+0x703/0x14c0
[   54.244546][ T6205]  video_usercopy+0x51f/0x14c0
[   54.244569][ T6205]  ? __pfx_video_usercopy+0x10/0x10
[   54.244594][ T6205]  ? __fget_files+0x215/0x3d0
[   54.244617][ T6205]  ? hook_file_ioctl_common+0x140/0x440
[   54.244651][ T6205]  v4l2_ioctl+0x1bd/0x250
[   54.244669][ T6205]  v4l2_compat_ioctl32+0x20f/0x2d0
[   54.244693][ T6205]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[   54.244718][ T6205]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   54.244744][ T6205]  __do_fast_syscall_32+0x14b/0x8c0
[   54.244767][ T6205]  ? lockdep_hardirqs_on+0x7d/0x110
[   54.244790][ T6205]  do_fast_syscall_32+0x32/0x70
[   54.244812][ T6205]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   54.244834][ T6205] RIP: 0023:0xf743efbc
[   54.244847][ T6205] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   54.244861][ T6205] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   54.244878][ T6205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0245628
[   54.244889][ T6205] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[   54.244899][ T6205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   54.244907][ T6205] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   54.244915][ T6205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   54.244938][ T6205]  </TASK>
[   54.388215][   T34] usb 6-1: unable to get BOS descriptor or descriptor too short
[   54.388255][   T34] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   54.389255][   T34] usb 6-1: unable to read config index 0 descriptor/start: -71
[   54.389345][   T34] usb 6-1: can't read configurations, error -71
[   54.702324][ T5863] usb 7-1: unable to get BOS descriptor or descriptor too short
[   54.702366][ T5863] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   54.703624][ T5863] usb 7-1: unable to read config index 0 descriptor/start: -71
[   54.703651][ T5863] usb 7-1: can't read configurations, error -71
[   54.794327][ T6219] UHID_CREATE from different security context by process 46 (syz.2.63), this is not allowed.
[   55.015153][ T5883] usb 8-1: unable to get BOS descriptor or descriptor too short
[   55.015195][ T5883] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   55.016239][ T5883] usb 8-1: unable to read config index 0 descriptor/start: -71
[   55.016272][ T5883] usb 8-1: can't read configurations, error -71
[   55.059903][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'.
[   55.088170][   T67] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   55.088262][   T67] Bluetooth: hci0: Injecting HCI hardware error event
[   55.088806][   T67] Bluetooth: hci0: hardware error 0x00
[   55.247917][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'.
[   55.495440][ T6051] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   55.548845][ T6230] jffs2: notice: (6230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   56.545359][   T41] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   57.155440][   T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   58.261226][ T6051] usb 5-1: unable to get BOS descriptor or descriptor too short
[   58.261265][ T6051] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   58.263324][ T6051] usb 5-1: unable to read config index 0 descriptor/start: -71
[   58.263351][ T6051] usb 5-1: can't read configurations, error -71
[   58.292571][ T6250] =======================================================
[   58.292571][ T6250] WARNING: The mand mount option has been deprecated and
[   58.292571][ T6250]          and is ignored by this kernel. Remove the mand
[   58.292571][ T6250]          option from the mount to silence this warning.
[   58.292571][ T6250] =======================================================
[   58.527123][ T6261] FAULT_INJECTION: forcing a failure.
[   58.527123][ T6261] name failslab, interval 1, probability 0, space 0, times 1
[   58.527148][ T6261] CPU: 3 UID: 0 PID: 6261 Comm: syz.0.78 Not tainted syzkaller #0 PREEMPT(full) 
[   58.527161][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.527167][ T6261] Call Trace:
[   58.527171][ T6261]  <TASK>
[   58.527175][ T6261]  dump_stack_lvl+0x100/0x190
[   58.527194][ T6261]  should_fail_ex.cold+0x5/0xa
[   58.527211][ T6261]  should_failslab+0xc2/0x120
[   58.527227][ T6261]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   58.527241][ T6261]  ? find_held_lock+0x2b/0x80
[   58.527255][ T6261]  ? __d_alloc+0x34/0xad0
[   58.527273][ T6261]  __d_alloc+0x34/0xad0
[   58.527291][ T6261]  d_alloc_pseudo+0x1c/0xc0
[   58.527304][ T6261]  alloc_file_pseudo+0x118/0x290
[   58.527316][ T6261]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   58.527327][ T6261]  ? alloc_fd+0x471/0x7a0
[   58.527344][ T6261]  sock_alloc_file+0x50/0x210
[   58.527360][ T6261]  __sys_socket+0x1c0/0x260
[   58.527372][ T6261]  ? __pfx___sys_socket+0x10/0x10
[   58.527384][ T6261]  ? __might_fault+0xc5/0x140
[   58.527398][ T6261]  __ia32_sys_socket+0x72/0xb0
[   58.527410][ T6261]  __do_fast_syscall_32+0x14b/0x8c0
[   58.527427][ T6261]  do_fast_syscall_32+0x32/0x70
[   58.527442][ T6261]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   58.527456][ T6261] RIP: 0023:0xf743efbc
[   58.527465][ T6261] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   58.527475][ T6261] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[   58.527485][ T6261] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000003
[   58.527492][ T6261] RDX: 00000000000000ff RSI: 0000000000000000 RDI: 0000000000000000
[   58.527498][ T6261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   58.527503][ T6261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   58.527531][ T6261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   58.527547][ T6261]  </TASK>
[   58.580048][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'.
[   58.681518][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[   58.683884][ T6272] capability: warning: `syz.2.83' uses deprecated v2 capabilities in a way that may be insecure
[   58.823486][ T6270] FAULT_INJECTION: forcing a failure.
[   58.823486][ T6270] name failslab, interval 1, probability 0, space 0, times 0
[   58.823579][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full) 
[   58.823604][ T6270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.823616][ T6270] Call Trace:
[   58.823623][ T6270]  <TASK>
[   58.823632][ T6270]  dump_stack_lvl+0x100/0x190
[   58.823659][ T6270]  should_fail_ex.cold+0x5/0xa
[   58.823683][ T6270]  should_failslab+0xc2/0x120
[   58.823726][ T6270]  kmem_cache_alloc_noprof+0x92/0x6a0
[   58.823753][ T6270]  ? __kernfs_new_node+0xd2/0xa10
[   58.823782][ T6270]  __kernfs_new_node+0xd2/0xa10
[   58.823807][ T6270]  ? __pfx___kernfs_new_node+0x10/0x10
[   58.823828][ T6270]  ? lock_acquire+0x1d1/0x380
[   58.823843][ T6270]  ? kernfs_root+0x23/0x2a0
[   58.823860][ T6270]  ? find_held_lock+0x2b/0x80
[   58.823880][ T6270]  ? kernfs_root+0xee/0x2a0
[   58.823899][ T6270]  ? kernfs_root+0xee/0x2a0
[   58.823926][ T6270]  kernfs_new_node+0x194/0x200
[   58.823950][ T6270]  ? __pfx_kernfs_new_node+0x10/0x10
[   58.823970][ T6270]  ? kernfs_create_link+0xe4/0x280
[   58.823993][ T6270]  ? kernfs_create_link+0xe4/0x280
[   58.824021][ T6270]  kernfs_create_link+0x100/0x280
[   58.824048][ T6270]  sysfs_do_create_link_sd+0x90/0x140
[   58.824071][ T6270]  sysfs_create_link+0x61/0xc0
[   58.824091][ T6270]  driver_sysfs_add+0x112/0x2d0
[   58.824118][ T6270]  really_probe+0x146/0xa60
[   58.824146][ T6270]  __driver_probe_device+0x210/0x460
[   58.824170][ T6270]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   58.824191][ T6270]  driver_probe_device+0x4a/0x140
[   58.824223][ T6270]  __driver_attach+0x231/0x5b0
[   58.824251][ T6270]  ? __pfx___driver_attach+0x10/0x10
[   58.824275][ T6270]  bus_for_each_dev+0x13e/0x1d0
[   58.824296][ T6270]  ? __pfx_bus_for_each_dev+0x10/0x10
[   58.824315][ T6270]  ? bus_add_driver+0x306/0x620
[   58.824345][ T6270]  bus_add_driver+0x4bf/0x620
[   58.824376][ T6270]  driver_register+0x1e2/0x360
[   58.824396][ T6270]  ? rcu_is_watching+0x13/0xc0
[   58.824421][ T6270]  usb_gadget_register_driver_owner+0x132/0x210
[   58.824446][ T6270]  raw_ioctl+0x1a85/0x2b80
[   58.824470][ T6270]  ? __pfx_raw_ioctl+0x10/0x10
[   58.824493][ T6270]  ? __pfx_raw_ioctl+0x10/0x10
[   58.824515][ T6270]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   58.824549][ T6270]  __do_fast_syscall_32+0x14b/0x8c0
[   58.824575][ T6270]  do_fast_syscall_32+0x32/0x70
[   58.824597][ T6270]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   58.824619][ T6270] RIP: 0023:0xf743efbc
[   58.824634][ T6270] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   58.824649][ T6270] RSP: 002b:00000000f5454424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   58.824668][ T6270] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000005501
[   58.824681][ T6270] RDX: 0000000000000000 RSI: 00000000f742dff4 RDI: 00000000f54554c0
[   58.824693][ T6270] RBP: 00000000f742dff4 R08: 0000000000000000 R09: 0000000000000000
[   58.824703][ T6270] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   58.824713][ T6270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   58.824738][ T6270]  </TASK>
[   58.824894][ T6270] raw-gadget.0 gadget.0: really_probe: driver_sysfs_add failed
[   58.826308][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.826812][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.050567][ T6295] batman_adv: batadv0: Adding interface: syzkaller0
[   59.050580][ T6295] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.050595][ T6295] batman_adv: batadv0: Interface activated: syzkaller0
[   59.266740][   T41] usb 8-1: unable to get BOS descriptor or descriptor too short
[   59.266767][   T41] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   59.267395][   T41] usb 8-1: unable to read config index 0 descriptor/start: -71
[   59.267411][   T41] usb 8-1: can't read configurations, error -71
[   59.443923][ T6294] batman_adv: batadv0: Interface deactivated: syzkaller0
[   59.465007][ T6300] openvswitch: netlink: Actions may not be safe on all matching packets
[   59.466093][ T6294] batman_adv: batadv0: Removing interface: syzkaller0
[   59.497653][ T6304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.93'.
[   59.593303][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'.
[   59.599939][ T6316] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   59.635848][ T6318] device-mapper: raid: Ignoring chunk size parameter for RAID 1
[   59.635866][ T6318] device-mapper: raid: Choosing default region size of 4MiB
[   59.637581][ T6318] device-mapper: raid: Device 0 specified for rebuild; clearing superblock
[   59.703308][ T6320] FAULT_INJECTION: forcing a failure.
[   59.703308][ T6320] name failslab, interval 1, probability 0, space 0, times 0
[   59.703329][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(full) 
[   59.703342][ T6320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   59.703349][ T6320] Call Trace:
[   59.703353][ T6320]  <TASK>
[   59.703358][ T6320]  dump_stack_lvl+0x100/0x190
[   59.703378][ T6320]  should_fail_ex.cold+0x5/0xa
[   59.703395][ T6320]  should_failslab+0xc2/0x120
[   59.703413][ T6320]  kmem_cache_alloc_noprof+0x92/0x6a0
[   59.703428][ T6320]  ? __asan_memcpy+0x3c/0x60
[   59.703441][ T6320]  ? __kernfs_new_node+0xd2/0xa10
[   59.703457][ T6320]  __kernfs_new_node+0xd2/0xa10
[   59.703472][ T6320]  ? __pfx___kernfs_new_node+0x10/0x10
[   59.703487][ T6320]  ? lock_acquire+0x1d1/0x380
[   59.703497][ T6320]  ? kernfs_root+0x23/0x2a0
[   59.703532][ T6320]  ? find_held_lock+0x2b/0x80
[   59.703547][ T6320]  ? kernfs_root+0xee/0x2a0
[   59.703558][ T6320]  ? kernfs_root+0xee/0x2a0
[   59.703573][ T6320]  kernfs_new_node+0x194/0x200
[   59.703587][ T6320]  ? __pfx_kernfs_new_node+0x10/0x10
[   59.703600][ T6320]  ? kernfs_create_link+0xe4/0x280
[   59.703616][ T6320]  ? kernfs_create_link+0xe4/0x280
[   59.703636][ T6320]  kernfs_create_link+0x100/0x280
[   59.703653][ T6320]  sysfs_do_create_link_sd+0x90/0x140
[   59.703665][ T6320]  sysfs_create_link+0x61/0xc0
[   59.703676][ T6320]  driver_sysfs_add+0x91/0x2d0
[   59.703692][ T6320]  really_probe+0x146/0xa60
[   59.703710][ T6320]  __driver_probe_device+0x210/0x460
[   59.703725][ T6320]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   59.703739][ T6320]  driver_probe_device+0x4a/0x140
[   59.703756][ T6320]  __driver_attach+0x231/0x5b0
[   59.703772][ T6320]  ? __pfx___driver_attach+0x10/0x10
[   59.703788][ T6320]  bus_for_each_dev+0x13e/0x1d0
[   59.703801][ T6320]  ? __pfx_bus_for_each_dev+0x10/0x10
[   59.703813][ T6320]  ? bus_add_driver+0x306/0x620
[   59.703832][ T6320]  bus_add_driver+0x4bf/0x620
[   59.703847][ T6320]  driver_register+0x1e2/0x360
[   59.703857][ T6320]  ? rcu_is_watching+0x13/0xc0
[   59.703872][ T6320]  usb_gadget_register_driver_owner+0x132/0x210
[   59.703888][ T6320]  raw_ioctl+0x1a85/0x2b80
[   59.703909][ T6320]  ? __pfx_raw_ioctl+0x10/0x10
[   59.703930][ T6320]  ? __pfx_raw_ioctl+0x10/0x10
[   59.703948][ T6320]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   59.703973][ T6320]  __do_fast_syscall_32+0x14b/0x8c0
[   59.704002][ T6320]  do_fast_syscall_32+0x32/0x70
[   59.704024][ T6320]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   59.704045][ T6320] RIP: 0023:0xf747efbc
[   59.704060][ T6320] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   59.704076][ T6320] RSP: 002b:00000000f5473424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   59.704097][ T6320] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005501
[   59.704109][ T6320] RDX: 0000000000000000 RSI: 00000000f746dff4 RDI: 00000000f54744c0
[   59.704121][ T6320] RBP: 00000000f746dff4 R08: 0000000000000000 R09: 0000000000000000
[   59.704138][ T6320] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   59.704149][ T6320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   59.704174][ T6320]  </TASK>
[   59.704197][ T6320] raw-gadget.0 gadget.1: really_probe: driver_sysfs_add failed
[   59.708860][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.711008][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.211444][ T6318] mdX: WARNING: ram1 appears to be on the same physical disk as ram1.
[   60.211466][ T6318] True protection against single-disk failure might be compromised.
[   60.211533][ T6318] FAULT_INJECTION: forcing a failure.
[   60.211533][ T6318] name failslab, interval 1, probability 0, space 0, times 0
[   60.211560][ T6318] CPU: 2 UID: 0 PID: 6318 Comm: syz.0.98 Not tainted syzkaller #0 PREEMPT(full) 
[   60.211582][ T6318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   60.211594][ T6318] Call Trace:
[   60.211600][ T6318]  <TASK>
[   60.211609][ T6318]  dump_stack_lvl+0x100/0x190
[   60.211641][ T6318]  should_fail_ex.cold+0x5/0xa
[   60.211669][ T6318]  should_failslab+0xc2/0x120
[   60.211698][ T6318]  __kmalloc_cache_noprof+0x91/0x6d0
[   60.211718][ T6318]  ? setup_conf+0x166/0x11d0
[   60.211751][ T6318]  setup_conf+0x166/0x11d0
[   60.211777][ T6318]  ? _printk+0xcf/0x110
[   60.211803][ T6318]  raid1_run+0x1a5/0x4e0
[   60.211830][ T6318]  ? md_run.cold+0x15c/0x3e9
[   60.211858][ T6318]  md_run+0xc2f/0x2510
[   60.211887][ T6318]  ? __pfx_md_run+0x10/0x10
[   60.211905][ T6318]  ? __pfx_autoremove_wake_function+0x10/0x10
[   60.211943][ T6318]  raid_ctr+0x489c/0xc2a0
[   60.211984][ T6318]  ? __pfx_raid_ctr+0x10/0x10
[   60.212003][ T6318]  ? kasan_quarantine_put+0x104/0x240
[   60.212026][ T6318]  ? lockdep_hardirqs_on+0x7d/0x110
[   60.212053][ T6318]  ? dm_split_args+0x3db/0x570
[   60.212083][ T6318]  ? dm_split_args+0x441/0x570
[   60.212113][ T6318]  ? dm_table_add_target+0x58b/0xee0
[   60.212136][ T6318]  dm_table_add_target+0x58b/0xee0
[   60.212167][ T6318]  ? __pfx_dm_table_add_target+0x10/0x10
[   60.212203][ T6318]  table_load+0x3b9/0x7b0
[   60.212237][ T6318]  ? __pfx_table_load+0x10/0x10
[   60.212257][ T6318]  ? __might_fault+0xc5/0x140
[   60.212275][ T6318]  ? __might_fault+0xc5/0x140
[   60.212306][ T6318]  ctl_ioctl+0x4d2/0xcc0
[   60.212327][ T6318]  ? __pfx_table_load+0x10/0x10
[   60.212351][ T6318]  ? __pfx_ctl_ioctl+0x10/0x10
[   60.212400][ T6318]  ? __fget_files+0x21f/0x3d0
[   60.212433][ T6318]  dm_compat_ctl_ioctl+0x23/0x30
[   60.212453][ T6318]  ? __pfx_dm_compat_ctl_ioctl+0x10/0x10
[   60.212472][ T6318]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   60.212500][ T6318]  __do_fast_syscall_32+0x14b/0x8c0
[   60.212524][ T6318]  ? lockdep_hardirqs_on+0x7d/0x110
[   60.212549][ T6318]  do_fast_syscall_32+0x32/0x70
[   60.212574][ T6318]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   60.212597][ T6318] RIP: 0023:0xf743efbc
[   60.212613][ T6318] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   60.212630][ T6318] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   60.212648][ T6318] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c138fd09
[   60.212660][ T6318] RDX: 0000000080001740 RSI: 0000000000000000 RDI: 0000000000000000
[   60.212670][ T6318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   60.212681][ T6318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   60.212691][ T6318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   60.212717][ T6318]  </TASK>
[   60.212761][ T6318] md: pers->run() failed ...
[   60.561302][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'.
[   60.645958][ T6051] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   60.646263][ T6318] device-mapper: table: 248:0: raid: Failed to run raid array (-ENOMEM)
[   60.646285][ T6318] device-mapper: ioctl: error adding target to table
[   60.692367][ T6343] openvswitch: netlink: Actions may not be safe on all matching packets
[   60.792821][ T6346] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   60.794053][ T6346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'.
[   60.828753][ T6330] jffs2: notice: (6330) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   61.748549][ T6354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.106'.
[   61.969509][ T6354] fuse: Unknown parameter '0x000000000000000c00000000000000000000'
[   62.196145][   T67] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   62.196205][   T67] Bluetooth: hci2: Injecting HCI hardware error event
[   62.197393][   T67] Bluetooth: hci2: hardware error 0x00
[   62.231810][ T5804] Bluetooth: hci2: unexpected event for opcode 0x0803
[   62.295617][ T6369] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   63.207529][ T6382] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'.
[   63.355402][ T5377] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   63.422368][ T6051] usb 8-1: unable to get BOS descriptor or descriptor too short
[   63.422512][ T6051] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   63.424463][ T6051] usb 8-1: unable to read config index 0 descriptor/start: -71
[   63.424508][ T6051] usb 8-1: can't read configurations, error -71
[   63.491264][ T6383] fuse: Unknown parameter '0x000000000000000c00000000000000000000'
[   63.505762][ T5377] usb 7-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[   63.506230][ T5377] usb 7-1: config 0 has no interfaces?
[   63.507993][ T5377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.508005][ T5377] usb 7-1: Product: syz
[   63.508012][ T5377] usb 7-1: Manufacturer: syz
[   63.508019][ T5377] usb 7-1: SerialNumber: syz
[   63.514418][ T5377] usb 7-1: config 0 descriptor??
[   63.723438][ T6375] netlink: 'syz.2.113': attribute type 4 has an invalid length.
[   63.737780][ T6375] netlink: 'syz.2.113': attribute type 4 has an invalid length.
[   64.276320][   T67] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   64.288187][ T5883] usb 7-1: USB disconnect, device number 8
[   64.344877][ T6404] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   65.025384][ T5883] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   65.186650][ T6409] jffs2: notice: (6409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   65.417404][ T6395] Console: switching to colour dummy device 80x25
[   66.226036][    T9] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[   66.253325][ T6422] svc: failed to register lockdv1 RPC service (errno 5).
[   66.253473][ T6422] lockd_up: makesock failed, error=-5
[   66.346494][ T6431] FAULT_INJECTION: forcing a failure.
[   66.346494][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   66.346538][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT(full) 
[   66.346558][ T6431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.346569][ T6431] Call Trace:
[   66.346575][ T6431]  <TASK>
[   66.346583][ T6431]  dump_stack_lvl+0x100/0x190
[   66.346612][ T6431]  should_fail_ex.cold+0x5/0xa
[   66.346637][ T6431]  _copy_from_user+0x2e/0xd0
[   66.346664][ T6431]  get_compat_msghdr+0xb3/0x480
[   66.346687][ T6431]  ? __pfx_get_compat_msghdr+0x10/0x10
[   66.346710][ T6431]  ? _kstrtoull+0x144/0x200
[   66.346734][ T6431]  ? __pfx__kstrtoull+0x10/0x10
[   66.346754][ T6431]  ___sys_sendmsg+0x1b6/0x1e0
[   66.346777][ T6431]  ? __pfx____sys_sendmsg+0x10/0x10
[   66.346796][ T6431]  ? __lock_acquire+0x5c0/0x1f40
[   66.346821][ T6431]  ? __fget_files+0x34/0x3d0
[   66.346863][ T6431]  __sys_sendmmsg+0x304/0x440
[   66.346891][ T6431]  ? __pfx___sys_sendmmsg+0x10/0x10
[   66.346912][ T6431]  ? find_held_lock+0x2b/0x80
[   66.346949][ T6431]  ? __might_fault+0xc5/0x140
[   66.346966][ T6431]  ? find_held_lock+0x2b/0x80
[   66.346987][ T6431]  ? __might_fault+0xc5/0x140
[   66.347002][ T6431]  ? __might_fault+0xc5/0x140
[   66.347023][ T6431]  __ia32_compat_sys_sendmmsg+0x9d/0x100
[   66.347046][ T6431]  __do_fast_syscall_32+0x14b/0x8c0
[   66.347068][ T6431]  ? lockdep_hardirqs_on+0x7d/0x110
[   66.347091][ T6431]  do_fast_syscall_32+0x32/0x70
[   66.347114][ T6431]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   66.347136][ T6431] RIP: 0023:0xf747efbc
[   66.347151][ T6431] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   66.347166][ T6431] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159
[   66.347184][ T6431] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000ac0
[   66.347195][ T6431] RDX: 0000000004000095 RSI: 0000000000000000 RDI: 0000000000000000
[   66.347212][ T6431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   66.347222][ T6431] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   66.347231][ T6431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   66.347253][ T6431]  </TASK>
[   66.378283][    T9] usb 8-1: not running at top speed; connect to a high speed hub
[   66.378311][    T9] usb 8-1: New USB device found: idVendor=1b1c, idProduct=1c0a, bcdDevice=0.40
[   66.379401][    T9] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   66.379425][    T9] usb 8-1: config 1 interface 0 has no altsetting 0
[   66.381593][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.381613][    T9] usb 8-1: Product: ⚳㘬虿ᢨ鵮깯ࣃ혳궽媵㔳뤵컽ｼ㳦⣣譚꼑
[   66.381628][    T9] usb 8-1: Manufacturer: ы
[   66.381640][    T9] usb 8-1: SerialNumber: 䀊
[   66.385980][ T6420] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   66.406868][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.407448][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.491585][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.496611][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.562416][ T6422] svc: failed to register nfsdv3 RPC service (errno 5).
[   66.562429][ T6422] failed to unregister tcp with rpcbind
[   66.627788][ T6335] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.627829][ T6335] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.627858][ T6335] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.627886][ T6335] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.122024][    T9] usbhid 8-1:1.0: can't add hid device: -71
[   67.122075][    T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[   67.124650][    T9] usb 8-1: USB disconnect, device number 10
[   67.455401][    T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   67.751545][ T5883] usb 7-1: unable to get BOS descriptor or descriptor too short
[   67.751571][ T5883] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   67.752796][ T5883] usb 7-1: unable to read config index 0 descriptor/start: -71
[   67.752813][ T5883] usb 7-1: can't read configurations, error -71
[   68.040490][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'.
[   68.552761][ T6485] 0x000000000000-0x000000010000 : ""
[   68.572061][ T6485] ftl_cs: FTL header not found.
[   68.586322][ T6485] FAULT_INJECTION: forcing a failure.
[   68.586322][ T6485] name failslab, interval 1, probability 0, space 0, times 0
[   68.586357][ T6485] CPU: 3 UID: 0 PID: 6485 Comm: syz.1.149 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   68.586384][ T6485] Tainted: [L]=SOFTLOCKUP
[   68.586391][ T6485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.586403][ T6485] Call Trace:
[   68.586410][ T6485]  <TASK>
[   68.586418][ T6485]  dump_stack_lvl+0x100/0x190
[   68.586448][ T6485]  should_fail_ex.cold+0x5/0xa
[   68.586474][ T6485]  should_failslab+0xc2/0x120
[   68.586500][ T6485]  __kmalloc_cache_noprof+0x91/0x6d0
[   68.586524][ T6485]  ? percpu_ref_init+0xec/0x3f0
[   68.586552][ T6485]  ? __pfx_blk_queue_usage_counter_release+0x10/0x10
[   68.586575][ T6485]  percpu_ref_init+0xec/0x3f0
[   68.586599][ T6485]  blk_alloc_queue+0x574/0x790
[   68.586627][ T6485]  blk_mq_alloc_queue+0x174/0x290
[   68.586645][ T6485]  ? __pfx_blk_mq_alloc_queue+0x10/0x10
[   68.586679][ T6485]  ? blk_mq_alloc_tag_set+0xbbd/0x12d0
[   68.586722][ T6485]  __blk_mq_alloc_disk+0x29/0x120
[   68.586741][ T6485]  add_mtd_blktrans_dev+0x7ad/0x1520
[   68.586777][ T6485]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[   68.586820][ T6485]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   68.586842][ T6485]  ? mtdblock_add_mtd+0x4a/0x270
[   68.586873][ T6485]  mtdblock_add_mtd+0x1cc/0x270
[   68.586901][ T6485]  blktrans_notify_add+0xa2/0xf0
[   68.586928][ T6485]  add_mtd_device+0xb6d/0x1820
[   68.586953][ T6485]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   68.586979][ T6485]  ? __pfx_add_mtd_device+0x10/0x10
[   68.587007][ T6485]  mtd_add_partition+0x376/0x6a0
[   68.587032][ T6485]  ? __pfx_mtd_add_partition+0x10/0x10
[   68.587055][ T6485]  ? __might_fault+0xc5/0x140
[   68.587072][ T6485]  ? __might_fault+0xc5/0x140
[   68.587102][ T6485]  mtdchar_blkpg_ioctl+0x207/0x250
[   68.587126][ T6485]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[   68.587176][ T6485]  mtdchar_compat_ioctl+0x3d6/0x440
[   68.587204][ T6485]  ? find_held_lock+0x2b/0x80
[   68.587228][ T6485]  ? __pfx_mtdchar_compat_ioctl+0x10/0x10
[   68.587267][ T6485]  ? __pfx_mtdchar_compat_ioctl+0x10/0x10
[   68.587295][ T6485]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   68.587322][ T6485]  __do_fast_syscall_32+0x14b/0x8c0
[   68.587351][ T6485]  do_fast_syscall_32+0x32/0x70
[   68.587374][ T6485]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   68.587397][ T6485] RIP: 0023:0xf747efbc
[   68.587412][ T6485] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   68.587429][ T6485] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   68.587448][ T6485] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269
[   68.587460][ T6485] RDX: 0000000080002700 RSI: 0000000000000000 RDI: 0000000000000000
[   68.587498][ T6485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   68.587508][ T6485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   68.587520][ T6485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   68.587547][ T6485]  </TASK>
[   68.602377][ T6483] process 'syz.0.148' launched './file1' with NULL argv: empty string added
[   68.985861][ T6051] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   69.135437][ T6051] usb 6-1: Using ep0 maxpacket: 16
[   69.137140][ T6051] usb 6-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40
[   69.138089][ T6051] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7
[   69.141655][ T6051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.141673][ T6051] usb 6-1: Product: Ъ
[   69.141685][ T6051] usb 6-1: Manufacturer: ఇ
[   69.141696][ T6051] usb 6-1: SerialNumber: ч
[   69.359977][ T6491] (syz.1.150,6491,3):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   69.359998][ T6491] (syz.1.150,6491,3):ocfs2_fill_super:1177 ERROR: status = -22
[   69.369967][ T6051] usb 6-1: unit 3 not found!
[   69.369987][ T6051] usb 6-1: unit 5 not found!
[   69.410657][ T6051] usb 6-1: USB disconnect, device number 8
[   69.434981][ T6499] FAULT_INJECTION: forcing a failure.
[   69.434981][ T6499] name fail_futex, interval 1, probability 0, space 0, times 1
[   69.435003][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.0.153 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   69.435018][ T6499] Tainted: [L]=SOFTLOCKUP
[   69.435022][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.435028][ T6499] Call Trace:
[   69.435032][ T6499]  <TASK>
[   69.435037][ T6499]  dump_stack_lvl+0x100/0x190
[   69.435055][ T6499]  should_fail_ex.cold+0x5/0xa
[   69.435072][ T6499]  get_futex_key+0x1c9/0x13e0
[   69.435099][ T6499]  ? __pfx_get_futex_key+0x10/0x10
[   69.435114][ T6499]  ? putname+0xb1/0x110
[   69.435129][ T6499]  ? kasan_save_stack+0x3f/0x50
[   69.435143][ T6499]  ? kasan_save_stack+0x30/0x50
[   69.435156][ T6499]  ? kasan_save_track+0x14/0x30
[   69.435171][ T6499]  futex_wake+0xf4/0x5e0
[   69.435189][ T6499]  ? __pfx_futex_wake+0x10/0x10
[   69.435220][ T6499]  do_futex+0x2b2/0x440
[   69.435235][ T6499]  ? __pfx_do_futex+0x10/0x10
[   69.435253][ T6499]  __ia32_sys_futex_time32+0x2f4/0x470
[   69.435272][ T6499]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[   69.435289][ T6499]  ? __might_fault+0xc5/0x140
[   69.435304][ T6499]  __do_fast_syscall_32+0x14b/0x8c0
[   69.435322][ T6499]  do_fast_syscall_32+0x32/0x70
[   69.435336][ T6499]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   69.435366][ T6499] RIP: 0023:0xf743efbc
[   69.435376][ T6499] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   69.435387][ T6499] RSP: 002b:00000000f54565cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[   69.435398][ T6499] RAX: ffffffffffffffda RBX: 00000000f7464f8c RCX: 0000000000000081
[   69.435405][ T6499] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[   69.435412][ T6499] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[   69.435419][ T6499] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   69.435425][ T6499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   69.435440][ T6499]  </TASK>
[   69.440783][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   69.596571][ T6504] openvswitch: netlink: Actions may not be safe on all matching packets
[   69.699024][ T6507] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   69.701362][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'.
[   69.701388][ T6507] erspan0: entered promiscuous mode
[   69.701404][ T6507] erspan0: entered allmulticast mode
[   69.717962][   T67] Bluetooth: hci3: command tx timeout
[   70.152868][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[   70.152896][    T9] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   70.155338][    T9] usb 8-1: unable to read config index 0 descriptor/start: -71
[   70.155358][    T9] usb 8-1: can't read configurations, error -71
[   70.648688][ T6516] netlink: 48 bytes leftover after parsing attributes in process `syz.3.159'.
[   70.805427][   T41] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   70.849467][ T6526] FAULT_INJECTION: forcing a failure.
[   70.849467][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.849514][ T6526] CPU: 3 UID: 0 PID: 6526 Comm: syz.3.162 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   70.849541][ T6526] Tainted: [L]=SOFTLOCKUP
[   70.849545][ T6526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   70.849551][ T6526] Call Trace:
[   70.849555][ T6526]  <TASK>
[   70.849560][ T6526]  dump_stack_lvl+0x100/0x190
[   70.849579][ T6526]  should_fail_ex.cold+0x5/0xa
[   70.849594][ T6526]  _copy_from_user+0x2e/0xd0
[   70.849612][ T6526]  copy_from_buffer+0x7f/0xc0
[   70.849629][ T6526]  copy_uabi_to_xstate+0x3bb/0x650
[   70.849648][ T6526]  ? __pfx_copy_uabi_to_xstate+0x10/0x10
[   70.849664][ T6526]  ? __might_fault+0xc5/0x140
[   70.849677][ T6526]  ? restore_from_ia32_fxstate+0x295/0x800
[   70.849694][ T6526]  ? x86_task_fpu+0x5f/0x90
[   70.849711][ T6526]  restore_from_ia32_fxstate+0x2f2/0x800
[   70.849729][ T6526]  ? __pfx_restore_from_ia32_fxstate+0x10/0x10
[   70.849754][ T6526]  fpu__restore_sig+0x525/0xe20
[   70.849770][ T6526]  ? lock_acquire+0x1d1/0x380
[   70.849780][ T6526]  ? __might_fault+0xc5/0x140
[   70.849790][ T6526]  ? __pfx_fpu__restore_sig+0x10/0x10
[   70.849805][ T6526]  ? __might_fault+0xc5/0x140
[   70.849814][ T6526]  ? __might_fault+0xc5/0x140
[   70.849829][ T6526]  ia32_restore_sigcontext+0x456/0x620
[   70.849842][ T6526]  ? __pfx_ia32_restore_sigcontext+0x10/0x10
[   70.849853][ T6526]  ? recalc_sigpending+0x1f9/0x280
[   70.849868][ T6526]  ? rcu_is_watching+0x13/0xc0
[   70.849882][ T6526]  ? _raw_spin_unlock_irq+0x23/0x50
[   70.849894][ T6526]  ? lockdep_hardirqs_on+0x7d/0x110
[   70.849909][ T6526]  __do_compat_sys_rt_sigreturn+0x171/0x260
[   70.849922][ T6526]  ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10
[   70.849937][ T6526]  do_int80_emulation+0x166/0x650
[   70.849953][ T6526]  asm_int80_emulation+0x1a/0x20
[   70.849964][ T6526] RIP: 0023:0xf746efba
[   70.849973][ T6526] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 <cd> 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   70.849984][ T6526] RSP: 002b:00000000f546550c EFLAGS: 00000292
[   70.849993][ T6526] RAX: 0000000000000036 RBX: 0000000000000003 RCX: 00000000c0502100
[   70.849999][ T6526] RDX: 00000000800008c0 RSI: 0000000000000000 RDI: 0000000000000000
[   70.850005][ T6526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   70.850011][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.850017][ T6526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   70.850030][ T6526]  </TASK>
[   70.958159][   T41] usb 6-1: device descriptor read/64, error -71
[   70.999826][ T1447] ieee802154 phy0 wpan0: encryption failed: -22
[   71.000077][ T1447] ieee802154 phy1 wpan1: encryption failed: -22
[   71.000871][   T29] cfg80211: failed to load regulatory.db
[   71.195341][   T41] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   71.325361][   T41] usb 6-1: device descriptor read/64, error -71
[   71.435752][   T41] usb usb6-port1: attempt power cycle
[   71.775417][   T41] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   71.796813][   T41] usb 6-1: device descriptor read/8, error -71
[   72.021370][ T6536] openvswitch: netlink: Actions may not be safe on all matching packets
[   72.037142][   T41] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   72.056678][   T41] usb 6-1: device descriptor read/8, error -71
[   72.100583][ T6538] MTRR 1 not used
[   72.165535][   T41] usb usb6-port1: unable to enumerate USB device
[   72.206240][ T6550] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   72.207799][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.167'.
[   72.207828][ T6550] erspan0: entered promiscuous mode
[   72.207842][ T6550] erspan0: entered allmulticast mode
[   73.063793][ T6556] /dev/sr0: Can't open blockdev
[   73.133877][ T6556] netlink: 'syz.3.172': attribute type 39 has an invalid length.
[   73.139591][ T6561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.173'.
[   73.166120][ T6564] openvswitch: netlink: Actions may not be safe on all matching packets
[   73.184766][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.184785][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.185862][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.185877][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.324261][ T6572] netlink: 72 bytes leftover after parsing attributes in process `syz.3.177'.
[   73.324277][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'.
[   73.324729][ T6572] FAULT_INJECTION: forcing a failure.
[   73.324729][ T6572] name failslab, interval 1, probability 0, space 0, times 0
[   73.324747][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.3.177 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   73.324762][ T6572] Tainted: [L]=SOFTLOCKUP
[   73.324766][ T6572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   73.324772][ T6572] Call Trace:
[   73.324775][ T6572]  <TASK>
[   73.324780][ T6572]  dump_stack_lvl+0x100/0x190
[   73.324798][ T6572]  should_fail_ex.cold+0x5/0xa
[   73.324813][ T6572]  should_failslab+0xc2/0x120
[   73.324830][ T6572]  __kmalloc_cache_noprof+0x91/0x6d0
[   73.324843][ T6572]  ? shrinker_alloc+0xf5/0xd00
[   73.324862][ T6572]  shrinker_alloc+0xf5/0xd00
[   73.324880][ T6572]  ? mark_held_locks+0x40/0x70
[   73.324897][ T6572]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   73.324910][ T6572]  ? rcu_is_watching+0x13/0xc0
[   73.324924][ T6572]  ? __pfx_shrinker_alloc+0x10/0x10
[   73.324942][ T6572]  ? lockdep_init_map_type+0x5c/0x250
[   73.324953][ T6572]  ? lockdep_init_map_type+0x5c/0x250
[   73.324963][ T6572]  ? __raw_spin_lock_init+0x3a/0x110
[   73.324975][ T6572]  ? __init_rwsem+0x10e/0x180
[   73.324987][ T6572]  sget_fc+0x97d/0x1f60
[   73.325004][ T6572]  ? __pfx_set_anon_super_fc+0x10/0x10
[   73.325018][ T6572]  ? __pfx_sget_fc+0x10/0x10
[   73.325032][ T6572]  ? lockdep_init_map_type+0x5c/0x250
[   73.325042][ T6572]  ? __raw_spin_lock_init+0x3a/0x110
[   73.325057][ T6572]  ? __pfx_fuse_fill_super+0x10/0x10
[   73.325070][ T6572]  get_tree_nodev+0x28/0x190
[   73.325084][ T6572]  fuse_get_tree+0x30e/0x490
[   73.325097][ T6572]  vfs_get_tree+0x92/0x320
[   73.325108][ T6572]  path_mount+0x7d0/0x2850
[   73.325121][ T6572]  ? __pfx_path_mount+0x10/0x10
[   73.325131][ T6572]  ? lockdep_hardirqs_on+0x7d/0x110
[   73.325145][ T6572]  ? putname+0xb1/0x110
[   73.325160][ T6572]  ? kmem_cache_free+0x127/0x6c0
[   73.325176][ T6572]  ? __ia32_sys_mount+0x292/0x310
[   73.325187][ T6572]  __ia32_sys_mount+0x292/0x310
[   73.325198][ T6572]  ? __pfx___ia32_sys_mount+0x10/0x10
[   73.325213][ T6572]  __do_fast_syscall_32+0x14b/0x8c0
[   73.325227][ T6572]  ? lockdep_hardirqs_on+0x7d/0x110
[   73.325260][ T6572]  do_fast_syscall_32+0x32/0x70
[   73.325277][ T6572]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   73.325291][ T6572] RIP: 0023:0xf746efbc
[   73.325301][ T6572] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   73.325311][ T6572] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015
[   73.325323][ T6572] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000840
[   73.325330][ T6572] RDX: 0000000080000880 RSI: 0000000000008400 RDI: 00000000800008c0
[   73.325337][ T6572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   73.325343][ T6572] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   73.325350][ T6572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   73.325364][ T6572]  </TASK>
[   73.335385][ T6051] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[   73.511047][ T6558] jffs2: notice: (6558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   75.391286][ T6589] openvswitch: netlink: Actions may not be safe on all matching packets
[   75.725342][ T5883] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   75.836241][ T6597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   76.091114][ T6051] usb 7-1: unable to get BOS descriptor or descriptor too short
[   76.091140][ T6051] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   76.093268][ T6051] usb 7-1: unable to read config index 0 descriptor/start: -71
[   76.093286][ T6051] usb 7-1: can't read configurations, error -71
[   76.096354][ T5863] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[   76.246792][ T5863] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[   76.248375][ T5863] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   76.248399][ T5863] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[   76.248418][ T5863] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[   76.249472][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   76.249489][ T5863] usb 6-1: SerialNumber: syz
[   76.254276][ T6597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   76.254429][ T6597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   76.462253][ T6597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   76.462346][ T6597] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   76.927879][ T5863] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[   77.094970][   T41] usb 6-1: USB disconnect, device number 13
[   77.096924][   T41] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[   77.318525][   T67] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   77.318580][   T67] Bluetooth: hci1: Injecting HCI hardware error event
[   77.322169][   T67] Bluetooth: hci1: hardware error 0x00
[   77.915376][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   78.086666][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[   78.086693][   T10] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   78.090619][   T10] usb 6-1: unable to read config index 0 descriptor/start: -71
[   78.090637][   T10] usb 6-1: can't read configurations, error -71
[   78.611287][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short
[   78.611316][ T5883] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   78.665057][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -71
[   78.665079][ T5883] usb 5-1: can't read configurations, error -71
[   78.715449][ T6622] openvswitch: netlink: Actions may not be safe on all matching packets
[   78.767164][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'.
[   78.973539][ T6629] input: syz1 as /devices/virtual/input/input5
[   79.372596][ T6633] netlink: 80 bytes leftover after parsing attributes in process `syz.2.196'.
[   79.372615][ T6633] openvswitch: netlink: Missing key (keys=40, expected=100)
[   79.395496][   T67] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   79.795533][ T5863] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[   79.957947][ T6640] jffs2: notice: (6640) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   80.035425][ T6051] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   80.284495][ T6051] usb 6-1: unable to get BOS descriptor or descriptor too short
[   80.284521][ T6051] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   80.285590][ T6051] usb 6-1: unable to read config index 0 descriptor/start: -71
[   80.285652][ T6051] usb 6-1: can't read configurations, error -71
[   80.305292][   T50] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   80.823548][ T6651] openvswitch: netlink: Actions may not be safe on all matching packets
[   81.365335][ T6051] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[   81.603112][ T6051] usb 6-1: unable to get BOS descriptor or descriptor too short
[   81.603169][ T6051] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   81.604842][ T6051] usb 6-1: unable to read config index 0 descriptor/start: -71
[   81.604859][ T6051] usb 6-1: can't read configurations, error -71
[   81.605133][ T6051] usb usb6-port1: attempt power cycle
[   82.208653][ T6657] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   82.579844][ T5863] usb 7-1: unable to get BOS descriptor or descriptor too short
[   82.579870][ T5863] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   82.582347][ T5863] usb 7-1: unable to read config index 0 descriptor/start: -71
[   82.582365][ T5863] usb 7-1: can't read configurations, error -71
[   82.737644][ T6667] /dev/sr0: Can't open blockdev
[   82.739953][ T6667] 9p: Bad value for 'dfltgid'
[   82.739963][ T6667] 9p: Bad value for 'dfltgid'
[   82.832641][ T6667] netlink: 'syz.2.209': attribute type 39 has an invalid length.
[   82.885931][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.886231][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.890969][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.890989][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.068005][   T50] usb 5-1: unable to get BOS descriptor or descriptor too short
[   83.068036][   T50] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   83.074685][   T50] usb 5-1: unable to read config index 0 descriptor/start: -71
[   83.074705][   T50] usb 5-1: can't read configurations, error -71
[   83.282283][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'.
[   83.689425][   T50] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   83.926891][ T6680] jffs2: notice: (6680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   84.455357][   T41] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[   84.906465][ T6707] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   84.908404][ T6707] erspan0: entered promiscuous mode
[   84.908422][ T6707] erspan0: entered allmulticast mode
[   86.299255][   T50] usb 5-1: unable to get BOS descriptor or descriptor too short
[   86.299334][   T50] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   86.301142][   T50] usb 5-1: unable to read config index 0 descriptor/start: -71
[   86.301168][   T50] usb 5-1: can't read configurations, error -71
[   86.301387][   T50] usb usb5-port1: attempt power cycle
[   86.705369][   T50] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   87.242147][   T41] usb 7-1: unable to get BOS descriptor or descriptor too short
[   87.242186][   T41] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   87.245972][   T41] usb 7-1: unable to read config index 0 descriptor/start: -71
[   87.246001][   T41] usb 7-1: can't read configurations, error -71
[   87.471054][ T6722] netlink: 124 bytes leftover after parsing attributes in process `syz.2.222'.
[   87.885390][   T41] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[   88.035476][   T41] usb 7-1: Using ep0 maxpacket: 8
[   88.036246][   T41] usb 7-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40
[   88.037162][   T41] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   88.037181][   T41] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.037197][   T41] usb 7-1: config 1 has no interface number 0
[   88.037226][   T41] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   88.037246][   T41] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   88.037264][   T41] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   88.039108][   T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.039126][   T41] usb 7-1: Product: syz
[   88.039138][   T41] usb 7-1: Manufacturer: syz
[   88.039149][   T41] usb 7-1: SerialNumber: syz
[   88.506314][ T6729] befs: (nullb0): No write support. Marking filesystem read-only
[   88.508044][ T6729] befs: (nullb0): invalid magic header
[   88.837897][    T9] usb 7-1: USB disconnect, device number 16
[   89.076400][ T6734] FAULT_INJECTION: forcing a failure.
[   89.076400][ T6734] name failslab, interval 1, probability 0, space 0, times 0
[   89.076423][ T6734] CPU: 3 UID: 0 PID: 6734 Comm: syz.1.225 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   89.076451][ T6734] Tainted: [L]=SOFTLOCKUP
[   89.076456][ T6734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   89.076463][ T6734] Call Trace:
[   89.076467][ T6734]  <TASK>
[   89.076472][ T6734]  dump_stack_lvl+0x100/0x190
[   89.076492][ T6734]  should_fail_ex.cold+0x5/0xa
[   89.076508][ T6734]  should_failslab+0xc2/0x120
[   89.076525][ T6734]  kmem_cache_alloc_noprof+0x92/0x6a0
[   89.076540][ T6734]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[   89.076552][ T6734]  ? acpi_ut_create_update_state+0x72/0x130
[   89.076576][ T6734]  acpi_ut_create_update_state+0x72/0x130
[   89.076593][ T6734]  acpi_ut_create_update_state_and_push+0x2f/0x70
[   89.076608][ T6734]  acpi_ut_update_object_reference+0x32f/0x800
[   89.076623][ T6734]  ? __pfx_acpi_ut_update_object_reference+0x10/0x10
[   89.076635][ T6734]  ? __pfx_acpi_ut_trace+0x10/0x10
[   89.076645][ T6734]  ? __pfx_acpi_ut_trace+0x10/0x10
[   89.076656][ T6734]  ? acpi_ut_status_exit+0x111/0x1c0
[   89.076671][ T6734]  acpi_ut_add_reference+0x80/0x170
[   89.076684][ T6734]  acpi_ex_resolve_node_to_value+0x7e1/0x9a0
[   89.076700][ T6734]  ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[   89.076718][ T6734]  ? acpi_ds_create_operand+0x267/0xc20
[   89.076737][ T6734]  acpi_ex_resolve_to_value+0x3da/0xcd0
[   89.076750][ T6734]  ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[   89.076763][ T6734]  ? __pfx_acpi_ns_lookup+0x10/0x10
[   89.076773][ T6734]  ? __asan_memset+0x23/0x50
[   89.076786][ T6734]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[   89.076799][ T6734]  acpi_ds_evaluate_name_path+0x30d/0x4a0
[   89.076815][ T6734]  ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[   89.076832][ T6734]  ? acpi_ps_get_next_namepath+0x1f6/0xa10
[   89.076847][ T6734]  ? acpi_ut_trace_ptr+0x141/0x2a0
[   89.076860][ T6734]  acpi_ds_exec_end_op+0xb78/0x1e60
[   89.076877][ T6734]  ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[   89.076894][ T6734]  acpi_ps_parse_loop+0x5e1/0x26e0
[   89.076914][ T6734]  ? __pfx_acpi_ps_parse_loop+0x10/0x10
[   89.076929][ T6734]  ? kmem_cache_alloc_noprof+0x2d5/0x6a0
[   89.076942][ T6734]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[   89.076953][ T6734]  ? acpi_ut_create_thread_state+0x6d/0x170
[   89.076973][ T6734]  acpi_ps_parse_aml+0x81e/0x1120
[   89.076997][ T6734]  acpi_ps_execute_method+0x5c4/0xe90
[   89.077019][ T6734]  acpi_ns_evaluate+0x640/0x1670
[   89.077043][ T6734]  acpi_ut_evaluate_object+0xf7/0x610
[   89.077069][ T6734]  acpi_rs_get_prt_method_data+0xa0/0x150
[   89.077090][ T6734]  ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[   89.077113][ T6734]  ? acpi_ut_status_exit+0x111/0x1c0
[   89.077133][ T6734]  ? acpi_rs_validate_parameters+0x104/0x210
[   89.077150][ T6734]  acpi_get_irq_routing_table+0xb8/0x140
[   89.077163][ T6734]  ? __pfx_acpi_get_irq_routing_table+0x10/0x10
[   89.077176][ T6734]  ? mark_held_locks+0x40/0x70
[   89.077192][ T6734]  ? irqentry_exit+0x202/0xab0
[   89.077206][ T6734]  ? lockdep_hardirqs_on+0x7d/0x110
[   89.077220][ T6734]  acpi_pci_irq_find_prt_entry+0x178/0xdd0
[   89.077237][ T6734]  ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[   89.077253][ T6734]  ? _raw_spin_unlock_irqrestore+0x31/0x80
[   89.077267][ T6734]  acpi_pci_irq_lookup+0x8e/0x6b0
[   89.077280][ T6734]  ? __pfx_acpi_pci_irq_lookup+0x10/0x10
[   89.077297][ T6734]  acpi_pci_irq_disable+0x1a8/0x360
[   89.077310][ T6734]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[   89.077323][ T6734]  pcibios_disable_device+0x89/0xb0
[   89.077337][ T6734]  do_pci_disable_device+0x9f/0x100
[   89.077349][ T6734]  ? __pfx_do_pci_disable_device+0x10/0x10
[   89.077363][ T6734]  ? pci_release_region.part.0+0x15b/0x2e0
[   89.077379][ T6734]  pci_disable_device+0x130/0x270
[   89.077391][ T6734]  virtio_pci_remove+0xcf/0x110
[   89.077404][ T6734]  pci_device_remove+0xb2/0x1d0
[   89.077420][ T6734]  ? __pfx_pci_device_remove+0x10/0x10
[   89.077437][ T6734]  device_remove+0xcb/0x180
[   89.077454][ T6734]  device_release_driver_internal+0x441/0x610
[   89.077468][ T6734]  pci_stop_bus_device+0x120/0x160
[   89.077480][ T6734]  pci_stop_and_remove_bus_device+0x58/0xa0
[   89.077493][ T6734]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   89.077505][ T6734]  remove_store+0x123/0x140
[   89.077518][ T6734]  ? __pfx_remove_store+0x10/0x10
[   89.077531][ T6734]  ? find_held_lock+0x2b/0x80
[   89.077545][ T6734]  ? sysfs_file_kobj+0xe4/0x290
[   89.077561][ T6734]  ? sysfs_file_kobj+0xe4/0x290
[   89.077583][ T6734]  ? __pfx_remove_store+0x10/0x10
[   89.077596][ T6734]  dev_attr_store+0x58/0x80
[   89.077609][ T6734]  ? __pfx_dev_attr_store+0x10/0x10
[   89.077621][ T6734]  sysfs_kf_write+0xf2/0x150
[   89.077638][ T6734]  kernfs_fop_write_iter+0x3e0/0x5f0
[   89.077652][ T6734]  ? __pfx_sysfs_kf_write+0x10/0x10
[   89.077670][ T6734]  vfs_write+0x6af/0x1050
[   89.077685][ T6734]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   89.077701][ T6734]  ? __pfx_vfs_write+0x10/0x10
[   89.077714][ T6734]  ? find_held_lock+0x2b/0x80
[   89.077736][ T6734]  ksys_write+0x12a/0x250
[   89.077750][ T6734]  ? __pfx_ksys_write+0x10/0x10
[   89.077768][ T6734]  __do_fast_syscall_32+0x14b/0x8c0
[   89.077782][ T6734]  ? lockdep_hardirqs_on+0x7d/0x110
[   89.077796][ T6734]  do_fast_syscall_32+0x32/0x70
[   89.077810][ T6734]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.077824][ T6734] RIP: 0023:0xf747efbc
[   89.077833][ T6734] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   89.077843][ T6734] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   89.077854][ T6734] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000ac0
[   89.077861][ T6734] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[   89.077867][ T6734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   89.077873][ T6734] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   89.077878][ T6734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   89.077893][ T6734]  </TASK>
[   89.078041][ T6734] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651)
[   89.147987][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.156722][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.161848][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.204497][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.227734][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.303705][ T6740] FAULT_INJECTION: forcing a failure.
[   89.303705][ T6740] name failslab, interval 1, probability 0, space 0, times 0
[   89.303736][ T6740] CPU: 2 UID: 0 PID: 6740 Comm: syz.1.227 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   89.303760][ T6740] Tainted: [L]=SOFTLOCKUP
[   89.303767][ T6740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   89.303776][ T6740] Call Trace:
[   89.303783][ T6740]  <TASK>
[   89.303790][ T6740]  dump_stack_lvl+0x100/0x190
[   89.303813][ T6740]  should_fail_ex.cold+0x5/0xa
[   89.303838][ T6740]  should_failslab+0xc2/0x120
[   89.303864][ T6740]  kmem_cache_alloc_noprof+0x92/0x6a0
[   89.303887][ T6740]  ? ptlock_alloc+0x1f/0x70
[   89.303912][ T6740]  ptlock_alloc+0x1f/0x70
[   89.303936][ T6740]  pte_alloc_one+0x82/0x3d0
[   89.303960][ T6740]  do_fault+0x960/0x1890
[   89.303983][ T6740]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[   89.304001][ T6740]  ? __pfx_do_fault+0x10/0x10
[   89.304018][ T6740]  ? pgd_none+0x9f/0xe0
[   89.304039][ T6740]  ? __pfx_pgd_none+0x10/0x10
[   89.304055][ T6740]  ? find_held_lock+0x2b/0x80
[   89.304080][ T6740]  __handle_mm_fault+0x150b/0x2f60
[   89.304107][ T6740]  ? __pfx___handle_mm_fault+0x10/0x10
[   89.304131][ T6740]  ? __pfx_mt_find+0x10/0x10
[   89.304177][ T6740]  handle_mm_fault+0x363/0xa20
[   89.304203][ T6740]  __get_user_pages+0x8a9/0x2c20
[   89.304230][ T6740]  ? __pfx_mt_find+0x10/0x10
[   89.304255][ T6740]  ? __pfx___get_user_pages+0x10/0x10
[   89.304285][ T6740]  populate_vma_page_range+0x267/0x3f0
[   89.304303][ T6740]  ? __pfx_populate_vma_page_range+0x10/0x10
[   89.304323][ T6740]  ? __pfx_find_vma_intersection+0x10/0x10
[   89.304353][ T6740]  __mm_populate+0x107/0x3a0
[   89.304375][ T6740]  ? __pfx___mm_populate+0x10/0x10
[   89.304393][ T6740]  ? up_write+0x2dc/0x5b0
[   89.304413][ T6740]  vm_mmap_pgoff+0x441/0x470
[   89.304435][ T6740]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   89.304460][ T6740]  ? lock_acquire+0x1d1/0x380
[   89.304473][ T6740]  ? __might_fault+0xc5/0x140
[   89.304490][ T6740]  ksys_mmap_pgoff+0xe4/0x610
[   89.304514][ T6740]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[   89.304534][ T6740]  ? __might_fault+0x111/0x140
[   89.304551][ T6740]  ? syscall_user_dispatch+0x89/0x140
[   89.304575][ T6740]  __do_fast_syscall_32+0x14b/0x8c0
[   89.304601][ T6740]  do_fast_syscall_32+0x32/0x70
[   89.304619][ T6740]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.304642][ T6740] RIP: 0023:0xf747efbc
[   89.304656][ T6740] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   89.304672][ T6740] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0
[   89.304688][ T6740] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000
[   89.304699][ T6740] RDX: 0000000000000002 RSI: 0000000000008031 RDI: 00000000ffffffff
[   89.304709][ T6740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   89.304718][ T6740] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   89.304728][ T6740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   89.304749][ T6740]  </TASK>
[   89.375840][   T50] usb 5-1: unable to get BOS descriptor or descriptor too short
[   89.375865][   T50] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   89.376553][   T50] usb 5-1: unable to read config index 0 descriptor/start: -71
[   89.376587][   T50] usb 5-1: can't read configurations, error -71
[   89.383450][ T6335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.447946][ T6335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.513802][ T6335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.525000][ T6736] rxe_eth0 speed is unknown, defaulting to 1000
[   89.579870][ T6335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.636822][   T42] audit: type=1326 audit(1793155194.160:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000
[   89.636868][   T42] audit: type=1326 audit(1793155194.160:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000
[   89.637909][   T42] audit: type=1326 audit(1793155194.160:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.231" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf747efbc code=0x7ffc0000
[   89.638046][   T42] audit: type=1326 audit(1793155194.160:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000
[   89.638159][   T42] audit: type=1326 audit(1793155194.160:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000
[   89.698673][ T6335] bridge_slave_1: left allmulticast mode
[   89.698703][ T6335] bridge_slave_1: left promiscuous mode
[   89.699402][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.702240][ T6335] bridge_slave_0: left allmulticast mode
[   89.702260][ T6335] bridge_slave_0: left promiscuous mode
[   89.702438][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.726469][   T50] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   89.777808][ T6749] jffs2: notice: (6749) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   89.866516][ T6335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.889412][ T6335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.892805][ T6335] bond0 (unregistering): Released all slaves
[   90.188092][ T5508] 8021q: adding VLAN 0 to HW filter on device eth2
[   90.205435][   T64] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[   90.325906][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.325997][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.326074][ T6736] bridge_slave_0: entered allmulticast mode
[   90.327717][ T6736] bridge_slave_0: entered promiscuous mode
[   90.333140][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.334426][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.334577][ T6736] bridge_slave_1: entered allmulticast mode
[   90.345435][ T6781] 9pnet_virtio: no channels available for device syz
[   90.351677][ T6736] bridge_slave_1: entered promiscuous mode
[   90.408225][   T64] usb 6-1: unable to get BOS descriptor or descriptor too short
[   90.408265][   T64] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   90.408956][   T64] usb 6-1: unable to read config index 0 descriptor/start: -71
[   90.408973][   T64] usb 6-1: can't read configurations, error -71
[   90.412442][ T6736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.419007][ T6736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.470603][ T6736] team0: Port device team_slave_0 added
[   90.478253][ T6736] team0: Port device team_slave_1 added
[   90.511736][ T6335] hsr_slave_0: left promiscuous mode
[   90.512370][ T6335] hsr_slave_1: left promiscuous mode
[   90.527596][ T6335] veth1_macvtap: left promiscuous mode
[   90.527970][ T6335] veth0_macvtap: left promiscuous mode
[   90.528456][ T6335] veth1_vlan: left promiscuous mode
[   90.528964][ T6335] veth0_vlan: left promiscuous mode
[   90.988374][ T6335] team0 (unregistering): Port device team_slave_1 removed
[   91.003135][ T6335] team0 (unregistering): Port device team_slave_0 removed
[   91.075188][ T5508] 8021q: adding VLAN 0 to HW filter on device eth3
[   91.078776][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.078790][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.078809][ T6736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.080337][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.080348][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.080368][ T6736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.129606][ T6736] hsr_slave_0: entered promiscuous mode
[   91.132753][ T6736] hsr_slave_1: entered promiscuous mode
[   91.137850][ T6736] debugfs: 'hsr0' already exists in 'hsr'
[   91.137871][ T6736] Cannot create hsr debugfs directory
[   91.246161][ T6736] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.252232][ T6736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.254442][ T6736] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.260137][ T6736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.260791][ T6736] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.269686][ T6736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.270172][ T6736] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.272856][ T6736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.294988][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.295057][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.315341][   T67] Bluetooth: hci4: command tx timeout
[   91.317374][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.349704][ T6736] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.354120][ T5508] 8021q: adding VLAN 0 to HW filter on device eth4
[   91.369613][ T6736] 8021q: adding VLAN 0 to HW filter on device team0
[   91.375498][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.375563][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.396594][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.396665][ T6170] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.572289][ T5508] 8021q: adding VLAN 0 to HW filter on device eth5
[   91.657568][ T6736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.829131][ T6736] veth0_vlan: entered promiscuous mode
[   91.839377][ T6736] veth1_vlan: entered promiscuous mode
[   92.061196][ T6736] veth0_macvtap: entered promiscuous mode
[   92.077235][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'.
[   92.091791][ T6736] veth1_macvtap: entered promiscuous mode
[   92.154281][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'.
[   92.155984][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.161785][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.170726][ T6856] FAULT_INJECTION: forcing a failure.
[   92.170726][ T6856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   92.170749][ T6856] CPU: 1 UID: 0 PID: 6856 Comm: syz.1.242 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[   92.170764][ T6856] Tainted: [L]=SOFTLOCKUP
[   92.170767][ T6856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   92.170773][ T6856] Call Trace:
[   92.170777][ T6856]  <TASK>
[   92.170782][ T6856]  dump_stack_lvl+0x100/0x190
[   92.170809][ T6856]  should_fail_ex.cold+0x5/0xa
[   92.170829][ T6856]  strncpy_from_user+0x3b/0x2d0
[   92.170851][ T6856]  do_getname+0x78/0x390
[   92.170889][ T6856]  do_sys_openat2+0xc3/0x1d0
[   92.170902][ T6856]  ? __pfx_do_sys_openat2+0x10/0x10
[   92.170916][ T6856]  ? __do_sys_request_key+0x260/0x3c0
[   92.170929][ T6856]  ? __do_sys_request_key+0x35c/0x3c0
[   92.170945][ T6856]  __ia32_compat_sys_openat+0x12d/0x210
[   92.170958][ T6856]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   92.170977][ T6856]  __do_fast_syscall_32+0x14b/0x8c0
[   92.170991][ T6856]  ? lockdep_hardirqs_on+0x7d/0x110
[   92.171005][ T6856]  do_fast_syscall_32+0x32/0x70
[   92.171019][ T6856]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   92.171033][ T6856] RIP: 0023:0xf747efbc
[   92.171042][ T6856] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   92.171052][ T6856] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[   92.171063][ T6856] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800003c0
[   92.171070][ T6856] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000
[   92.171076][ T6856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   92.171083][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.171089][ T6856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   92.171103][ T6856]  </TASK>
[   92.250771][ T6170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.250784][ T6170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.350967][ T6170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.350983][ T6170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.357988][ T5867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.358383][ T5867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.358715][ T5867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.375418][ T5867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.539959][   T50] usb 5-1: unable to get BOS descriptor or descriptor too short
[   92.539986][   T50] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   92.540608][   T50] usb 5-1: unable to read config index 0 descriptor/start: -71
[   92.540624][   T50] usb 5-1: can't read configurations, error -71
[   92.540762][   T50] usb usb5-port1: unable to enumerate USB device
[   92.621410][ T6871] vivid-002: disconnect
[   92.623900][ T6870] vivid-002: reconnect
[   92.656978][ T6869] xfrm0: entered allmulticast mode
[   92.658334][ T6869] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[   92.662749][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'.
[   92.686435][ T5867] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.686705][ T5867] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.686725][ T5867] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.686742][ T5867] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.804517][ T6881] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   92.806154][ T6881] erspan0: entered promiscuous mode
[   92.806172][ T6881] erspan0: entered allmulticast mode
[   92.895422][ T5377] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[   93.085823][ T6875] jffs2: notice: (6875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   93.156244][ T5377] usb 6-1: unable to get BOS descriptor or descriptor too short
[   93.156270][ T5377] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   93.157047][ T5377] usb 6-1: unable to read config index 0 descriptor/start: -71
[   93.157072][ T5377] usb 6-1: can't read configurations, error -71
[   93.317187][   T67] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   93.317238][   T67] Bluetooth: hci3: Injecting HCI hardware error event
[   93.317970][   T67] Bluetooth: hci3: hardware error 0x00
[   93.395796][ T5804] Bluetooth: hci4: command tx timeout
[   93.648382][ T6174] IPVS: starting estimator thread 0...
[   93.708851][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   93.735722][ T6889] IPVS: using max 43 ests per chain, 103200 per kthread
[   93.965583][   T29] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[   94.149483][ T6891] jffs2: notice: (6891) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   94.585372][   T50] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   94.762439][   T50] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[   94.763638][   T50] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   94.763659][   T50] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[   94.768459][   T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.768477][   T50] usb 9-1: Product: syz
[   94.768488][   T50] usb 9-1: Manufacturer: ᰉ
[   94.768498][   T50] usb 9-1: SerialNumber: syz
[   94.793841][ T6914] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   95.015704][   T50] cdc_ncm 9-1:1.0: bind() failure
[   95.022568][   T50] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[   95.022605][   T50] cdc_ncm 9-1:1.1: bind() failure
[   95.035437][   T50] usb 9-1: USB disconnect, device number 2
[   95.485387][ T5804] Bluetooth: hci4: command tx timeout
[   95.635425][   T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   95.885377][ T5377] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[   96.098240][ T5377] usb 6-1: unable to get BOS descriptor or descriptor too short
[   96.098265][ T5377] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   96.099150][ T5377] usb 6-1: unable to read config index 0 descriptor/start: -71
[   96.099168][ T5377] usb 6-1: can't read configurations, error -71
[   96.136609][ T6923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.261'.
[   96.435319][   T41] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   96.700932][   T29] usb 7-1: unable to get BOS descriptor or descriptor too short
[   96.700974][   T29] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   96.701902][   T29] usb 7-1: unable to read config index 0 descriptor/start: -71
[   96.701930][   T29] usb 7-1: can't read configurations, error -71
[   96.755849][ T5883] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   96.799918][ T6940] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   96.801944][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.267'.
[   96.824966][ T6937] 9pnet_virtio: no channels available for device syz
[   96.905439][ T5883] usb 5-1: Using ep0 maxpacket: 8
[   96.906179][ T5883] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   96.907115][ T5883] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[   96.907169][ T5883] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   96.907193][ T5883] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   96.907225][ T5883] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[   96.907249][ T5883] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   96.907270][ T5883] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.907315][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.007463][ T6947] 9pnet_virtio: no channels available for device syz
[   97.115959][ T5883] usb 5-1: usb_control_msg returned -32
[   97.116000][ T5883] usbtmc 5-1:16.0: can't read capabilities
[   97.176391][ T6927] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[   97.565534][   T67] Bluetooth: hci4: command tx timeout
[   97.684876][ T5867] bond0: (slave bond_slave_0): interface is now down
[   97.684892][ T5867] bond0: (slave bond_slave_1): interface is now down
[   97.716543][ T5867] bond0: (slave bond_slave_0): interface is now down
[   97.716560][ T5867] bond0: (slave bond_slave_1): interface is now down
[   97.718463][ T5867] bond0: now running without any active interface!
[   97.880163][ T6963] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[   98.015488][    T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[   98.165491][ T5903] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[   98.191512][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[   98.191556][    T9] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   98.192328][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[   98.192355][    T9] usb 6-1: can't read configurations, error -71
[   98.737851][ T6971] fuse: blksize only supported for fuseblk
[   98.801623][ T6973] TC_ACT_REPEAT abuse ?
[   99.178053][   T41] usb 9-1: unable to get BOS descriptor or descriptor too short
[   99.178199][   T41] usb 9-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[   99.179106][   T41] usb 9-1: unable to read config index 0 descriptor/start: -71
[   99.179124][   T41] usb 9-1: can't read configurations, error -71
[   99.219009][ T6977] IPv6: Can't replace route, no match found
[   99.381138][ T6981] 9pnet_virtio: no channels available for device syz
[   99.561927][ T6433] usb 5-1: USB disconnect, device number 13
[   99.654561][ T6990] bridge_slave_0: left allmulticast mode
[   99.654577][ T6990] bridge_slave_0: left promiscuous mode
[   99.654680][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.665028][ T6990] bridge_slave_1: left allmulticast mode
[   99.665044][ T6990] bridge_slave_1: left promiscuous mode
[   99.665137][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.680721][ T6990] bond0: (slave bond_slave_0): Releasing backup interface
[   99.692519][ T6990] bond0: (slave bond_slave_1): Releasing backup interface
[   99.705928][ T6990] team0: Port device team_slave_0 removed
[   99.713655][ T6990] team0: Port device team_slave_1 removed
[   99.719999][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.720016][ T6990] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.720931][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.720941][ T6990] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.722192][ T6990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  100.003190][ T7004] overlayfs: failed to resolve 'work': -2
[  100.004543][ T7004] overlayfs: failed to resolve 'work': -2
[  100.175421][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  100.452446][ T7013] program syz.4.291 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.943449][ T5903] usb 7-1: unable to get BOS descriptor or descriptor too short
[  100.943480][ T5903] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[  100.946408][ T5903] usb 7-1: unable to read config index 0 descriptor/start: -71
[  100.946428][ T5903] usb 7-1: can't read configurations, error -71
[  101.245037][ T7048] trusted_key: encrypted_key: insufficient parameters specified
[  101.944844][ T7085] netlink: 13566 bytes leftover after parsing attributes in process `syz.2.303'.
[  102.075538][ T7098] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  102.739273][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'.
[  102.956527][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  102.956555][    T9] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40
[  102.957440][    T9] usb 5-1: unable to read config index 0 descriptor/start: -71
[  102.957459][    T9] usb 5-1: can't read configurations, error -71
[  102.997234][ T6051] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  103.013149][ T7128] FAULT_INJECTION: forcing a failure.
[  103.013149][ T7128] name fail_futex, interval 1, probability 0, space 0, times 0
[  103.013172][ T7128] CPU: 0 UID: 0 PID: 7128 Comm: syz.0.311 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  103.013186][ T7128] Tainted: [L]=SOFTLOCKUP
[  103.013190][ T7128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.013196][ T7128] Call Trace:
[  103.013199][ T7128]  <TASK>
[  103.013204][ T7128]  dump_stack_lvl+0x100/0x190
[  103.013223][ T7128]  should_fail_ex.cold+0x5/0xa
[  103.013238][ T7128]  get_futex_key+0x1c9/0x13e0
[  103.013255][ T7128]  ? __pfx_get_futex_key+0x10/0x10
[  103.013270][ T7128]  ? __lock_acquire+0x5c0/0x1f40
[  103.013284][ T7128]  futex_wake+0xf4/0x5e0
[  103.013302][ T7128]  ? __pfx_futex_wake+0x10/0x10
[  103.013320][ T7128]  ? find_held_lock+0x2b/0x80
[  103.013333][ T7128]  ? do_sys_openat2+0x1ae/0x1d0
[  103.013344][ T7128]  ? do_sys_openat2+0x1ae/0x1d0
[  103.013360][ T7128]  do_futex+0x2b2/0x440
[  103.013375][ T7128]  ? __pfx_do_futex+0x10/0x10
[  103.013392][ T7128]  __ia32_sys_futex_time32+0x2f4/0x470
[  103.013410][ T7128]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  103.013426][ T7128]  ? __might_fault+0xc5/0x140
[  103.013441][ T7128]  __do_fast_syscall_32+0x14b/0x8c0
[  103.013458][ T7128]  do_fast_syscall_32+0x32/0x70
[  103.013473][ T7128]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  103.013487][ T7128] RIP: 0023:0xf743efbc
[  103.013496][ T7128] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  103.013507][ T7128] RSP: 002b:00000000f54565cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  103.013518][ T7128] RAX: ffffffffffffffda RBX: 00000000f7464f8c RCX: 0000000000000081
[  103.013525][ T7128] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473
[  103.013531][ T7128] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000
[  103.013537][ T7128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  103.013543][ T7128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  103.013557][ T7128]  </TASK>
[  103.072441][ T7128] tipc: Started in network mode
[  103.072459][ T7128] tipc: Node identity 4, cluster identity 4711
[  103.072469][ T7128] tipc: Node number set to 4
[  103.195290][ T7121] jffs2: notice: (7121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  103.398625][   T42] audit: type=1326 audit(1793155463.975:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.0.314" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0xffff0000
[  103.917722][   T50] hid-generic 0005:057E:5002017.0002: unknown main item tag 0x0
[  103.917759][   T50] hid-generic 0005:057E:5002017.0002: unknown main item tag 0x0
[  103.926724][   T50] hid-generic 0005:057E:5002017.0002: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on syz0
[  103.979456][ T7158] fido_id[7158]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  104.254843][ T7183] FAULT_INJECTION: forcing a failure.
[  104.254843][ T7183] name failslab, interval 1, probability 0, space 0, times 0
[  104.254874][ T7183] CPU: 2 UID: 0 PID: 7183 Comm: syz.0.324 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  104.254898][ T7183] Tainted: [L]=SOFTLOCKUP
[  104.254905][ T7183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.254916][ T7183] Call Trace:
[  104.254922][ T7183]  <TASK>
[  104.254929][ T7183]  dump_stack_lvl+0x100/0x190
[  104.254960][ T7183]  should_fail_ex.cold+0x5/0xa
[  104.254982][ T7183]  ? __netlink_lookup+0x692/0x950
[  104.255010][ T7183]  should_failslab+0xc2/0x120
[  104.255038][ T7183]  kmem_cache_alloc_noprof+0x92/0x6a0
[  104.255062][ T7183]  ? netlink_deliver_tap+0x103/0xb50
[  104.255085][ T7183]  ? skb_clone+0x187/0x3f0
[  104.255116][ T7183]  skb_clone+0x187/0x3f0
[  104.255142][ T7183]  netlink_deliver_tap+0x82f/0xb50
[  104.255173][ T7183]  netlink_unicast+0x708/0x950
[  104.255219][ T7183]  ? __pfx_netlink_unicast+0x10/0x10
[  104.255255][ T7183]  netlink_sendmsg+0x9ac/0x10c0
[  104.255286][ T7183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.255348][ T7183]  ? apparmor_socket_sendmsg+0x165/0x280
[  104.255378][ T7183]  ? ____sys_sendmsg+0xa99/0xc30
[  104.255396][ T7183]  ____sys_sendmsg+0xa99/0xc30
[  104.255415][ T7183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.255444][ T7183]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.255477][ T7183]  ___sys_sendmsg+0x190/0x1e0
[  104.255499][ T7183]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.255530][ T7183]  ? find_held_lock+0x2b/0x80
[  104.255572][ T7183]  __sys_sendmsg+0x160/0x210
[  104.255597][ T7183]  ? __pfx___sys_sendmsg+0x10/0x10
[  104.255637][ T7183]  __do_fast_syscall_32+0x14b/0x8c0
[  104.255662][ T7183]  ? lockdep_hardirqs_on+0x7d/0x110
[  104.255687][ T7183]  do_fast_syscall_32+0x32/0x70
[  104.255712][ T7183]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  104.255735][ T7183] RIP: 0023:0xf743efbc
[  104.255751][ T7183] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  104.255769][ T7183] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  104.255785][ T7183] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040
[  104.255797][ T7183] RDX: 0000000020040000 RSI: 0000000000000000 RDI: 0000000000000000
[  104.255807][ T7183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  104.255817][ T7183] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  104.255827][ T7183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  104.255851][ T7183]  </TASK>
[  104.318996][ T7189] openvswitch: netlink: Tunnel attr 229 out of range max 16
[  104.328965][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'.
[  104.370156][ T7192] uhci_hcd 0000:00:1d.0: remove, state 4
[  104.370226][ T7192] usb usb1: USB disconnect, device number 1
[  104.418253][ T7192] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[  104.430869][ T7192] ==================================================================
[  104.430889][ T7192] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0
[  104.430909][ T7192] Read of size 1 at addr ffff88802259a480 by task syz.1.319/7192
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  104.430918][ T7192] 
[  104.430928][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.1.319 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  104.430944][ T7192] Tainted: [L]=SOFTLOCKUP
[  104.430948][ T7192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.430955][ T7192] Call Trace:
[  104.430959][ T7192]  <TASK>
[  104.430968][ T7192]  dump_stack_lvl+0x100/0x190
[  104.430984][ T7192]  print_report+0x13d/0x4b0
[  104.431002][ T7192]  ? __virt_addr_valid+0x239/0x430
[  104.431020][ T7192]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  104.431033][ T7192]  kasan_report+0xdf/0x1c0
[  104.431050][ T7192]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  104.431064][ T7192]  acpi_ns_get_attached_object+0x148/0x1b0
[  104.431076][ T7192]  acpi_ex_resolve_node_to_value+0xb7/0x9a0
[  104.431090][ T7192]  ? acpi_ut_trace_ptr+0x1d2/0x2a0
[  104.431101][ T7192]  ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[  104.431115][ T7192]  ? acpi_ds_create_operand+0x267/0xc20
[  104.431131][ T7192]  acpi_ex_resolve_to_value+0x3da/0xcd0
[  104.431143][ T7192]  ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[  104.431156][ T7192]  ? __pfx_acpi_ns_lookup+0x10/0x10
[  104.431166][ T7192]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  104.431177][ T7192]  acpi_ds_evaluate_name_path+0x30d/0x4a0
[  104.431193][ T7192]  ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[  104.431208][ T7192]  ? acpi_ps_get_next_namepath+0x1f6/0xa10
[  104.431224][ T7192]  ? acpi_ut_trace_ptr+0x141/0x2a0
[  104.431235][ T7192]  acpi_ds_exec_end_op+0xb78/0x1e60
[  104.431251][ T7192]  ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[  104.431266][ T7192]  acpi_ps_parse_loop+0x5e1/0x26e0
[  104.431283][ T7192]  ? __pfx_acpi_ps_parse_loop+0x10/0x10
[  104.431317][ T7192]  ? kmem_cache_alloc_noprof+0x2d5/0x6a0
[  104.431334][ T7192]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  104.431345][ T7192]  ? acpi_ut_create_thread_state+0x6d/0x170
[  104.431364][ T7192]  acpi_ps_parse_aml+0x81e/0x1120
[  104.431383][ T7192]  acpi_ps_execute_method+0x5c4/0xe90
[  104.431396][ T7192]  acpi_ns_evaluate+0x640/0x1670
[  104.431409][ T7192]  acpi_ut_evaluate_object+0xf7/0x610
[  104.431424][ T7192]  acpi_rs_get_prt_method_data+0xa0/0x150
[  104.431438][ T7192]  ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[  104.431451][ T7192]  ? acpi_ut_status_exit+0x111/0x1c0
[  104.431461][ T7192]  ? acpi_rs_validate_parameters+0x104/0x210
[  104.431474][ T7192]  acpi_get_irq_routing_table+0xb8/0x140
[  104.431486][ T7192]  ? __pfx_acpi_get_irq_routing_table+0x10/0x10
[  104.431500][ T7192]  acpi_pci_irq_find_prt_entry+0x178/0xdd0
[  104.431526][ T7192]  ? do_raw_spin_lock+0x128/0x260
[  104.431540][ T7192]  ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[  104.431553][ T7192]  ? mark_held_locks+0x40/0x70
[  104.431570][ T7192]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  104.431584][ T7192]  acpi_pci_irq_lookup+0x8e/0x6b0
[  104.431597][ T7192]  ? __pfx_acpi_pci_irq_lookup+0x10/0x10
[  104.431612][ T7192]  acpi_pci_irq_disable+0x1a8/0x360
[  104.431625][ T7192]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[  104.431637][ T7192]  pcibios_disable_device+0x89/0xb0
[  104.431649][ T7192]  do_pci_disable_device+0x9f/0x100
[  104.431661][ T7192]  ? __pfx_do_pci_disable_device+0x10/0x10
[  104.431677][ T7192]  ? usb_hcd_is_primary_hcd+0x53/0x70
[  104.431696][ T7192]  ? kfree+0x22b/0x6d0
[  104.431708][ T7192]  pci_disable_device+0x130/0x270
[  104.431720][ T7192]  usb_hcd_pci_remove+0x1ed/0x300
[  104.431731][ T7192]  pci_device_remove+0xb2/0x1d0
[  104.431748][ T7192]  ? __pfx_pci_device_remove+0x10/0x10
[  104.431765][ T7192]  device_remove+0xcb/0x180
[  104.431780][ T7192]  device_release_driver_internal+0x441/0x610
[  104.431792][ T7192]  pci_stop_bus_device+0x120/0x160
[  104.431803][ T7192]  pci_stop_and_remove_bus_device+0x58/0xa0
[  104.431815][ T7192]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  104.431826][ T7192]  remove_store+0x123/0x140
[  104.431839][ T7192]  ? __pfx_remove_store+0x10/0x10
[  104.431851][ T7192]  ? find_held_lock+0x2b/0x80
[  104.431864][ T7192]  ? sysfs_file_kobj+0xe4/0x290
[  104.431880][ T7192]  ? sysfs_file_kobj+0xe4/0x290
[  104.431895][ T7192]  ? __pfx_remove_store+0x10/0x10
[  104.431907][ T7192]  dev_attr_store+0x58/0x80
[  104.431917][ T7192]  ? __pfx_dev_attr_store+0x10/0x10
[  104.431928][ T7192]  sysfs_kf_write+0xf2/0x150
[  104.431943][ T7192]  kernfs_fop_write_iter+0x3e0/0x5f0
[  104.431956][ T7192]  ? __pfx_sysfs_kf_write+0x10/0x10
[  104.431977][ T7192]  vfs_write+0x6af/0x1050
[  104.431992][ T7192]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  104.432007][ T7192]  ? __pfx_vfs_write+0x10/0x10
[  104.432021][ T7192]  ? find_held_lock+0x2b/0x80
[  104.432038][ T7192]  ksys_write+0x12a/0x250
[  104.432051][ T7192]  ? __pfx_ksys_write+0x10/0x10
[  104.432068][ T7192]  __do_fast_syscall_32+0x14b/0x8c0
[  104.432085][ T7192]  do_fast_syscall_32+0x32/0x70
[  104.432098][ T7192]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  104.432113][ T7192] RIP: 0023:0xf747efbc
[  104.432121][ T7192] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  104.432131][ T7192] RSP: 002b:00000000f503150c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  104.432142][ T7192] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000780
[  104.432149][ T7192] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  104.432155][ T7192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  104.432161][ T7192] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  104.432167][ T7192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  104.432177][ T7192]  </TASK>
[  104.432181][ T7192] 
[  104.432184][ T7192] Allocated by task 1:
[  104.432189][ T7192]  kasan_save_stack+0x30/0x50
[  104.432203][ T7192]  kasan_save_track+0x14/0x30
[  104.432215][ T7192]  __kasan_slab_alloc+0x89/0x90
[  104.432229][ T7192]  kmem_cache_alloc_noprof+0x269/0x6a0
[  104.432241][ T7192]  acpi_ut_allocate_object_desc_dbg+0x86/0x240
[  104.432255][ T7192]  acpi_ut_create_internal_object_dbg+0x51/0x260
[  104.432269][ T7192]  acpi_ds_build_internal_object+0x173/0x790
[  104.432282][ T7192]  acpi_ds_create_node+0xe3/0x280
[  104.432295][ T7192]  acpi_ds_exec_end_op+0x10cf/0x1e60
[  104.432310][ T7192]  acpi_ps_parse_loop+0x5e1/0x26e0
[  104.432326][ T7192]  acpi_ps_parse_aml+0x81e/0x1120
[  104.432341][ T7192]  acpi_ps_execute_table+0x393/0x500
[  104.432351][ T7192]  acpi_ns_execute_table+0x596/0x970
[  104.432362][ T7192]  acpi_ns_parse_table+0xcb/0x160
[  104.432373][ T7192]  acpi_ns_load_table+0xc9/0x490
[  104.432383][ T7192]  acpi_tb_load_namespace+0x2b0/0x8f0
[  104.432397][ T7192]  acpi_load_tables+0x89/0x160
[  104.432407][ T7192]  acpi_init+0x146/0x840
[  104.432420][ T7192]  do_one_initcall+0x11c/0x6f0
[  104.432429][ T7192]  kernel_init_freeable+0x6ea/0x7b0
[  104.432441][ T7192]  kernel_init+0x21/0x1d0
[  104.432454][ T7192]  ret_from_fork+0x730/0xd60
[  104.432463][ T7192]  ret_from_fork_asm+0x1a/0x30
[  104.432472][ T7192] 
[  104.432474][ T7192] Freed by task 6734:
[  104.432480][ T7192]  kasan_save_stack+0x30/0x50
[  104.432492][ T7192]  kasan_save_track+0x14/0x30
[  104.432505][ T7192]  kasan_save_free_info+0x3b/0x70
[  104.432515][ T7192]  __kasan_slab_free+0x5f/0x80
[  104.432528][ T7192]  kmem_cache_free+0x127/0x6c0
[  104.432538][ T7192]  acpi_os_release_object+0x1c/0x30
[  104.432547][ T7192]  acpi_ut_delete_object_desc+0xea/0x130
[  104.432560][ T7192]  acpi_ut_update_ref_count.part.0+0x510/0x2250
[  104.432571][ T7192]  acpi_ut_update_object_reference+0x5f9/0x800
[  104.432583][ T7192]  acpi_ut_remove_reference+0x192/0x1d0
[  104.432593][ T7192]  acpi_rs_get_prt_method_data+0xcd/0x150
[  104.432604][ T7192]  acpi_get_irq_routing_table+0xb8/0x140
[  104.432616][ T7192]  acpi_pci_irq_find_prt_entry+0x178/0xdd0
[  104.432627][ T7192]  acpi_pci_irq_lookup+0x8e/0x6b0
[  104.432637][ T7192]  acpi_pci_irq_disable+0x1a8/0x360
[  104.432648][ T7192]  pcibios_disable_device+0x89/0xb0
[  104.432659][ T7192]  do_pci_disable_device+0x9f/0x100
[  104.432669][ T7192]  pci_disable_device+0x130/0x270
[  104.432678][ T7192]  virtio_pci_remove+0xcf/0x110
[  104.432689][ T7192]  pci_device_remove+0xb2/0x1d0
[  104.432704][ T7192]  device_remove+0xcb/0x180
[  104.432717][ T7192]  device_release_driver_internal+0x441/0x610
[  104.432727][ T7192]  pci_stop_bus_device+0x120/0x160
[  104.432736][ T7192]  pci_stop_and_remove_bus_device+0x58/0xa0
[  104.432746][ T7192]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  104.432757][ T7192]  remove_store+0x123/0x140
[  104.432768][ T7192]  dev_attr_store+0x58/0x80
[  104.432777][ T7192]  sysfs_kf_write+0xf2/0x150
[  104.432790][ T7192]  kernfs_fop_write_iter+0x3e0/0x5f0
[  104.432803][ T7192]  vfs_write+0x6af/0x1050
[  104.432815][ T7192]  ksys_write+0x12a/0x250
[  104.432827][ T7192]  __do_fast_syscall_32+0x14b/0x8c0
[  104.432839][ T7192]  do_fast_syscall_32+0x32/0x70
[  104.432852][ T7192]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  104.432864][ T7192] 
[  104.432866][ T7192] The buggy address belongs to the object at ffff88802259a478
[  104.432866][ T7192]  which belongs to the cache Acpi-Operand of size 72
[  104.432874][ T7192] The buggy address is located 8 bytes inside of
[  104.432874][ T7192]  freed 72-byte region [ffff88802259a478, ffff88802259a4c0)
[  104.432884][ T7192] 
[  104.432886][ T7192] The buggy address belongs to the physical page:
[  104.432891][ T7192] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802259af08 pfn:0x2259a
[  104.432902][ T7192] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  104.432912][ T7192] page_type: f5(slab)
[  104.432921][ T7192] raw: 00fff00000000200 ffff88801d44da40 ffffea0000897a10 ffffea0000897310
[  104.432931][ T7192] raw: ffff88802259af08 0000000200270006 00000000f5000000 0000000000000000
[  104.432936][ T7192] page dumped because: kasan: bad access detected
[  104.432941][ T7192] page_owner tracks the page as allocated
[  104.432945][ T7192] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2614514950
[  104.432961][ T7192]  post_alloc_hook+0xfd/0x120
[  104.432977][ T7192]  get_page_from_freelist+0x1113/0x35e0
[  104.432988][ T7192]  __alloc_frozen_pages_noprof+0x2f6/0x3190
[  104.432999][ T7192]  new_slab+0xb1/0x6d0
[  104.433009][ T7192]  refill_objects+0xe3/0x410
[  104.433020][ T7192]  __pcs_replace_empty_main+0x35e/0x650
[  104.433031][ T7192]  kmem_cache_alloc_noprof+0x4bf/0x6a0
[  104.433045][ T7192]  acpi_ut_allocate_object_desc_dbg+0x86/0x240
[  104.433060][ T7192]  acpi_ut_create_internal_object_dbg+0x51/0x260
[  104.433075][ T7192]  acpi_ds_create_operand+0x6be/0xc20
[  104.433090][ T7192]  acpi_ds_eval_data_object_operands+0x125/0x640
[  104.433106][ T7192]  acpi_ds_exec_end_op+0xe41/0x1e60
[  104.433121][ T7192]  acpi_ps_parse_loop+0x5e1/0x26e0
[  104.433135][ T7192]  acpi_ps_parse_aml+0x81e/0x1120
[  104.433150][ T7192]  acpi_ps_execute_table+0x393/0x500
[  104.433159][ T7192]  acpi_ns_execute_table+0x596/0x970
[  104.433170][ T7192] page_owner free stack trace missing
[  104.433174][ T7192] 
[  104.433176][ T7192] Memory state around the buggy address:
[  104.433180][ T7192]  ffff88802259a380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc
[  104.433187][ T7192]  ffff88802259a400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa
[  104.433194][ T7192] >ffff88802259a480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb
[  104.433199][ T7192]                    ^
[  104.433204][ T7192]  ffff88802259a500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb
[  104.433211][ T7192]  ffff88802259a580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc
[  104.433216][ T7192] ==================================================================
[  104.433336][ T7192] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  104.782495][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.1.319 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  104.785775][ T7192] Tainted: [L]=SOFTLOCKUP
[  104.787114][ T7192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.790199][ T7192] Call Trace:
[  104.791257][ T7192]  <TASK>
[  104.792192][ T7192]  dump_stack_lvl+0x100/0x190
[  104.793712][ T7192]  vpanic+0x553/0x970
[  104.794961][ T7192]  ? __pfx_vpanic+0x10/0x10
[  104.796381][ T7192]  ? mark_held_locks+0x40/0x70
[  104.797874][ T7192]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  104.799738][ T7192]  panic+0xd1/0xe0
[  104.800912][ T7192]  ? __pfx_panic+0x10/0x10
[  104.802299][ T7192]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  104.804186][ T7192]  ? preempt_schedule+0x57/0xd0
[  104.805695][ T7192]  check_panic_on_warn.cold+0x19/0x34
[  104.807363][ T7192]  end_report.part.0+0x3a/0x90
[  104.808859][ T7192]  kasan_report.cold+0xe/0x18
[  104.810334][ T7192]  ? acpi_ns_get_attached_object+0x148/0x1b0
[  104.812214][ T7192]  acpi_ns_get_attached_object+0x148/0x1b0
[  104.814101][ T7192]  acpi_ex_resolve_node_to_value+0xb7/0x9a0
[  104.815967][ T7192]  ? acpi_ut_trace_ptr+0x1d2/0x2a0
[  104.817719][ T7192]  ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[  104.820363][ T7192]  ? acpi_ds_create_operand+0x267/0xc20
[  104.822610][ T7192]  acpi_ex_resolve_to_value+0x3da/0xcd0
[  104.824741][ T7192]  ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[  104.826916][ T7192]  ? __pfx_acpi_ns_lookup+0x10/0x10
[  104.829009][ T7192]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  104.831436][ T7192]  acpi_ds_evaluate_name_path+0x30d/0x4a0
[  104.833551][ T7192]  ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[  104.835865][ T7192]  ? acpi_ps_get_next_namepath+0x1f6/0xa10
[  104.838224][ T7192]  ? acpi_ut_trace_ptr+0x141/0x2a0
[  104.840296][ T7192]  acpi_ds_exec_end_op+0xb78/0x1e60
[  104.842362][ T7192]  ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[  104.844300][ T7192]  acpi_ps_parse_loop+0x5e1/0x26e0
[  104.846400][ T7192]  ? __pfx_acpi_ps_parse_loop+0x10/0x10
[  104.848663][ T7192]  ? kmem_cache_alloc_noprof+0x2d5/0x6a0
[  104.850939][ T7192]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  104.852974][ T7192]  ? acpi_ut_create_thread_state+0x6d/0x170
[  104.855400][ T7192]  acpi_ps_parse_aml+0x81e/0x1120
[  104.857451][ T7192]  acpi_ps_execute_method+0x5c4/0xe90
[  104.859625][ T7192]  acpi_ns_evaluate+0x640/0x1670
[  104.861281][ T7192]  acpi_ut_evaluate_object+0xf7/0x610
[  104.863400][ T7192]  acpi_rs_get_prt_method_data+0xa0/0x150
[  104.865676][ T7192]  ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[  104.868186][ T7192]  ? acpi_ut_status_exit+0x111/0x1c0
[  104.870178][ T7192]  ? acpi_rs_validate_parameters+0x104/0x210
[  104.872365][ T7192]  acpi_get_irq_routing_table+0xb8/0x140
[  104.874635][ T7192]  ? __pfx_acpi_get_irq_routing_table+0x10/0x10
[  104.877185][ T7192]  acpi_pci_irq_find_prt_entry+0x178/0xdd0
[  104.879028][ T7192]  ? do_raw_spin_lock+0x128/0x260
[  104.880853][ T7192]  ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[  104.883227][ T7192]  ? mark_held_locks+0x40/0x70
[  104.884742][ T7192]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  104.887003][ T7192]  acpi_pci_irq_lookup+0x8e/0x6b0
[  104.889049][ T7192]  ? __pfx_acpi_pci_irq_lookup+0x10/0x10
[  104.890841][ T7192]  acpi_pci_irq_disable+0x1a8/0x360
[  104.892696][ T7192]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[  104.894764][ T7192]  pcibios_disable_device+0x89/0xb0
[  104.896394][ T7192]  do_pci_disable_device+0x9f/0x100
[  104.898493][ T7192]  ? __pfx_do_pci_disable_device+0x10/0x10
[  104.900439][ T7192]  ? usb_hcd_is_primary_hcd+0x53/0x70
[  104.902302][ T7192]  ? kfree+0x22b/0x6d0
[  104.903978][ T7192]  pci_disable_device+0x130/0x270
[  104.905641][ T7192]  usb_hcd_pci_remove+0x1ed/0x300
[  104.907339][ T7192]  pci_device_remove+0xb2/0x1d0
[  104.909228][ T7192]  ? __pfx_pci_device_remove+0x10/0x10
[  104.910951][ T7192]  device_remove+0xcb/0x180
[  104.912697][ T7192]  device_release_driver_internal+0x441/0x610
[  104.914904][ T7192]  pci_stop_bus_device+0x120/0x160
[  104.916513][ T7192]  pci_stop_and_remove_bus_device+0x58/0xa0
[  104.918892][ T7192]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  104.921019][ T7192]  remove_store+0x123/0x140
[  104.922636][ T7192]  ? __pfx_remove_store+0x10/0x10
[  104.924712][ T7192]  ? find_held_lock+0x2b/0x80
[  104.926191][ T7192]  ? sysfs_file_kobj+0xe4/0x290
[  104.928035][ T7192]  ? sysfs_file_kobj+0xe4/0x290
[  104.929988][ T7192]  ? __pfx_remove_store+0x10/0x10
[  104.931570][ T7192]  dev_attr_store+0x58/0x80
[  104.933153][ T7192]  ? __pfx_dev_attr_store+0x10/0x10
[  104.935260][ T7192]  sysfs_kf_write+0xf2/0x150
[  104.936739][ T7192]  kernfs_fop_write_iter+0x3e0/0x5f0
[  104.938560][ T7192]  ? __pfx_sysfs_kf_write+0x10/0x10
[  104.940559][ T7192]  vfs_write+0x6af/0x1050
[  104.941924][ T7192]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  104.944130][ T7192]  ? __pfx_vfs_write+0x10/0x10
[  104.945782][ T7192]  ? find_held_lock+0x2b/0x80
[  104.947289][ T7192]  ksys_write+0x12a/0x250
[  104.949077][ T7192]  ? __pfx_ksys_write+0x10/0x10
[  104.950842][ T7192]  __do_fast_syscall_32+0x14b/0x8c0
[  104.952491][ T7192]  do_fast_syscall_32+0x32/0x70
[  104.954460][ T7192]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  104.956611][ T7192] RIP: 0023:0xf747efbc
[  104.957939][ T7192] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  104.964890][ T7192] RSP: 002b:00000000f503150c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  104.967785][ T7192] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000780
[  104.970677][ T7192] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  104.973262][ T7192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  104.976185][ T7192] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  104.978558][ T7192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  104.981470][ T7192]  </TASK>
[  104.983275][ T7192] Kernel Offset: disabled
[  104.984876][ T7192] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:40:09  Registers:
info registers vcpu 0

CPU#0
RAX=00000000001d1ef9 RBX=ffffffff8fc91580 RCX=ffffffff8be86325 RDX=0000000000000001
RSI=ffffffff8e61b5db RDI=ffffffff8c832a80 RBP=fffffbfff1f922b0 RSP=ffffffff8fc07cf0
R8 =0000000000000001 R9 =ffffed10055c6825 R10=ffff88802ae3412b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000
RIP=ffffffff8be847bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88809529c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000559450eb6610 CR3=0000000044654000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85bd94c5 RDI=ffffffff9cf1d7e0 RBP=ffffffff9cf1d7a0 RSP=ffffc900045fe9b8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000037 R14=0000000000000001 R15=ffffc900045fecd0
RIP=ffffffff85bd94ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88809539c000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f7258e10 CR3=0000000070e46000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000000 RBX=ffff888000db2580 RCX=0000000000000001 RDX=1ffff110001b6568
RSI=ffffffff82678d95 RDI=ffff888027b45900 RBP=ffff888027b455c0 RSP=ffffc900065bf980
R8 =0000000000063ab9 R9 =00000000000001dc R10=0000000000000200 R11=0000000000000000
R12=ffff888000db2b40 R13=ffffffff82678d95 R14=ffffc900065bfd84 R15=0000000080000002
RIP=ffffffff81e8b200 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88809549c000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000031e16ff8 CR3=0000000070e46000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080080783 RBX=0000000000000000 RCX=ffff8880233ad1f0 RDX=000000000000009d
RSI=ffffffff87160b31 RDI=ffff8880233ad460 RBP=0000000000000001 RSP=ffffc900005e8bb0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000001 R13=0000000000004e20 R14=ffff8880233ad1f0 R15=0000000000000001
RIP=ffffffff87160b78 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc5d2874300 ffffffff 00c00000
GS =0000 ffff88809559c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7fe6ec0 CR3=000000002706b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=cd38a096ede987a6 eca43e60709b4384 cd38a096ede987a6 eca43e60709b4384 cd38a096ede987a6 eca43e60709b4384 cd38a096ede987a6 eca43e60709b4384
ZMM18=cb56652ced30e93e 03162ef62cb256fc cb56652ced30e93e 03162ef62cb256fc cb56652ced30e93e 03162ef62cb256fc cb56652ced30e93e 03162ef62cb256fc
ZMM19=2507000000000000 0000000000000005 2507000000000000 0000000000000004 2507000000000000 0000000000000003 2507000000000000 0000000000000002
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 088008000e800300 0800000800000206 027ade0023647261 632f6972642f7665
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 642f01ffffffffff ffffffe10800030c 800218828392e408 0001000000080606
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0114f20008000c98 0301aed008000c90 03019a08000c8803 01fe08000c800300
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0030008000ee803 0e04000ee4031804 000ee0030c04000e dc030804000ed803
ZMM25=c16f924ec16f924e c16f924ec16f924e c16f924ec16f924e c16f924ec16f924e c16f924ec16f924e c16f924ec16f924e c16f924ec16f924e c16f924ec16f924e
ZMM26=f05f8e34f05f8e34 f05f8e34f05f8e34 f05f8e34f05f8e34 f05f8e34f05f8e34 f05f8e34f05f8e34 f05f8e34f05f8e34 f05f8e34f05f8e34 f05f8e34f05f8e34
ZMM27=220e4fbf220e4fbf 220e4fbf220e4fbf 220e4fbf220e4fbf 220e4fbf220e4fbf 220e4fbf220e4fbf 220e4fbf220e4fbf 220e4fbf220e4fbf 220e4fbf220e4fbf
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=5904000059040000 5904000059040000 5904000059040000 5904000059040000 5904000059040000 5904000059040000 5904000059040000 5904000059040000