last executing test programs:

1m0.371606732s ago: executing program 1 (id=181):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080)=0xe00b000000000000, 0x7f03)

1m0.368792052s ago: executing program 1 (id=182):
creat(0x0, 0x102)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r4, 0xf5f)
accept(r4, 0x0, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='proc\x00', 0x189, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001800010324bd6202fadbdf250f0000002a6832fe88e72b91a581030ad5100771e3291da4362736f864ebde97d6e88709363b6afbdb0dcd8f401e39e158435e850e8cd7613d6a9a9535f10b86b821d5266e0d824cb4c7765fad22c2ad79f39a09d108b8c5209e6cfb2d8348413f51629266c1eb64fb56df7f566e755a31bc2b78932b5916c38adf3d770425ac8d2ed2a93543ef025eacdc730f30ad"], 0x14}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00')
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6)
r10 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f0000000000)={0x0, 0x34524742, 0x140, 0x2cf, 0x1, @stepwise={{0x7d, 0x101}, {0x6, 0x6}, {0x6, 0x8}}})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000010000000000001000000001000c000000000d"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4044)

59.272066501s ago: executing program 1 (id=200):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000001a80)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "10000000d7b0945b"}}}}}, 0x0)
io_setup(0x1, &(0x7f00000004c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}]}, 0x48}}, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xfff0, 0xffff}, {0x1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x2c}}, 0x0)
sendto$packet(r2, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000680)={0x11, 0x0, 0x2}, 0x14)

59.08264924s ago: executing program 1 (id=203):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x80)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
read$FUSE(r2, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, &(0x7f0000001180)='./tracefs_dir/buffer_size_kb\x00')
r5 = open_tree(r0, 0x0, 0x9001)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$KDDELIO(r0, 0x4b35, 0x10000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0x100, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}, @common=@mh={{0x28}, {"df07", 0xfe}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip_vti0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000380))
shmget(0x2, 0x2000, 0x80, &(0x7f0000788000/0x2000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(r5, &(0x7f0000001140)='./tracefs_dir\x00', 0x0)
mount(&(0x7f0000000300)=@filename='./dev\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jfs\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')

58.975946133s ago: executing program 1 (id=204):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syzkaller1\x00', 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r5 = creat(&(0x7f0000000080)='./file1\x00', 0xec)
write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a007f"])
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a000200000000000d1032b9b7df0000000004188bc64700000000000000", @ANYRES32=0x0, @ANYBLOB="1800"], 0x48}], 0x1, 0x4800)

58.679870555s ago: executing program 1 (id=209):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

58.608247715s ago: executing program 32 (id=209):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

26.71862296s ago: executing program 4 (id=713):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1001e00})

26.635898592s ago: executing program 4 (id=716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffd46, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000001f1000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080)

26.635802299s ago: executing program 4 (id=717):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000001c0)={'bond_slave_0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000"], 0xffdd)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$int_out(r3, 0x2, &(0x7f0000000180))

25.090449365s ago: executing program 4 (id=727):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40483, 0x2c01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40850)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
stat(&(0x7f0000000a40)='./file0/file2\x00', &(0x7f0000000a80))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff)
r1 = getpgrp(0xffffffffffffffff)
capset(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000140)={0x7, 0xfffff800, 0x5c, 0x9, 0x1, 0xfffffff3})
mount(0x0, &(0x7f0000000000)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f0000001080)='./sys_link\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})

24.898055801s ago: executing program 4 (id=731):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x58, 0x64, 0x0, 0x8, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x20, 0x606f, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x14, 0xf989, "e0625660bac570f7f163f1bb3603f207"}, @window={0x3, 0x3, 0x1}, @exp_smc={0xfe, 0x6}, @nop, @mss={0x2, 0x4, 0x200}, @mss={0x2, 0x4, 0x5}, @timestamp={0x8, 0xa, 0xe6, 0x10000}]}}}}}}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)

24.610205781s ago: executing program 4 (id=734):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) (async)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c00198008000100ad0800003c0001800c000280050001003a0000002c000180140003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) (async)
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10001}]}]}, 0x28}}, 0x884b)
r2 = socket$kcm(0x21, 0x2, 0x2) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x0)
fchdir(r3) (async)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async)
statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94) (async)
syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0)

24.513861986s ago: executing program 33 (id=734):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) (async)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c00198008000100ad0800003c0001800c000280050001003a0000002c000180140003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) (async)
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10001}]}]}, 0x28}}, 0x884b)
r2 = socket$kcm(0x21, 0x2, 0x2) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x0)
fchdir(r3) (async)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async)
statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94) (async)
syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0)

3.725387985s ago: executing program 3 (id=1029):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x1})
sendfile(r0, r0, 0x0, 0x200000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/loopback.usb0\x00', 0x1ff) (async)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="edc08818", 0x4}, {0x0, 0x13}], 0x2)

3.656486236s ago: executing program 3 (id=1031):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) (fail_nth: 21)

3.579642029s ago: executing program 3 (id=1032):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x1)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600553100000000000000004a0000001800008014000100ff02bd863abcb76d0000000000000000000000000001"], 0x2c}}, 0x0)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
socket(0x18, 0x0, 0x0)
ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x3f00000000000000)

3.579387301s ago: executing program 2 (id=1033):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
read(r0, &(0x7f0000000080)=""/123, 0x7b)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400})

3.526340681s ago: executing program 2 (id=1034):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r2, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r2, 0x500, 0x0, 0x0, 0x0, 0x1})

3.397777135s ago: executing program 2 (id=1035):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'vlan0\x00', @local})
syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')

3.397507104s ago: executing program 2 (id=1036):
socket(0xa, 0x3, 0x3a)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000007ff0800034000000106340000000c0a01040000000000000000070000010c00038008000080040001800900010073797a30000000000800044000000000140000001000010000000000000000000084000a21a8a49fbe778f88359fb0f89bd561fd61518697aed376ef676958bfbed54e79f7529c73a725dc3cbd1826d13c2125ed49acb75ffd330180e33cfc3cfd0210a80e6645ecc83e54916e95164f291cefc83f53d2116204b664fe484a910a173fee7d5f6db3b3ccd9f1391c1929537f9698523a0aa38953283aa4ee129dcaa7aa9622d2a48c0079fa5f550ff6fb5ffa51715fc9a8e07a0d101108fc2b15b80177e86f72850284137ff7934e291e54f5ea33efa475d0fd49309cd5d28d"], 0xe4}}, 0x20050800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000400), 0x20002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)="001122", 0x3)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xd9, 0x80000, <r4=>0xffffffffffffffff})
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={<r5=>0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x84083, &(0x7f0000000080)={@_ha_fsid={[0x92, 0xd873]}, {0xf1de, 0x5, 0x7, 0xdba}}, 0x22, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xffff7e83})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000009732f832f52f320900010073797a30000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
ioctl$CDROM_GET_MCN(r4, 0x5311, &(0x7f00000001c0))
ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000180)=r5)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, r8, <r10=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000200)={0x28, 0x1, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f0000000280)={0x20, r10, &(0x7f0000000040)=[{0x1}, {0x1, 0x3}, {0x1}, {}, {}, {0x0, 0x2}, {0x0, 0x2}, {0x1}], 0xdeadbeef, 0x8, 0x8})

3.205531315s ago: executing program 2 (id=1037):
madvise(&(0x7f0000595000/0x1000)=nil, 0x1000, 0xe)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0f0000007000000000001400000008000300109515457bbdeb23bc1c3825cc76fc0f8869d2b3887e17dd834c04b421a430996595f668611b9f02a3c154ce4416683f179537b55d67dee7122a3b76b795a27dbd8b389b50a006037809e4d901a1c7161ec4106d8e8edca52a16ef2dd283acdce38527f88ece4bde432c1a5cb06aaf2c421cce6bb4fc69ba6be48c39dece2acfeb527fa4433db1e7af1f81797733cfcc7bb3f3b07cd41b5b75c44b703f274c63e3ae22f6c83e00256d3027b8dea5b799a6efffc4c1d0e4f9f403d9208973e5139921ca92a060bfd6000000000000", @ANYRES32=r1, @ANYBLOB="050029000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)

3.130902508s ago: executing program 2 (id=1038):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1ff)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x20, &(0x7f0000000840)=[{&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="e7a762aba6549a417605ee9b1e5b761b31fcef66cbd25860bfe66101d032571bdb16e277bc01cb2763f4c4696903"], 0xe0}], 0x1, 0x0, 0x23, 0x880}, 0x20040095)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x1ff, 0x0, 0x1, 0x3, [<r8=>0x0, 0x0, 0x0, <r9=>0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, r9, 0x0, r9], [0x2b8], [0x0, 0x1]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={r9, 0x80000, <r10=>0xffffffffffffffff})
fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000100), &(0x7f0000000140)={'U-', 0x8c}, 0x16, 0x1)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_int(r11, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0)
write(r12, &(0x7f00000001c0)='p', 0x1)
r13 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDMKTONE(r13, 0x4b30, 0x1005e000)

2.650062973s ago: executing program 3 (id=1039):
unshare(0x6a040000)
syz_usb_disconnect(0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (fail_nth: 27)

2.445330003s ago: executing program 5 (id=1044):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x70bd2c, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880)
socket$inet(0x2, 0x1, 0x6)

2.339499255s ago: executing program 3 (id=1045):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'})
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x70}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1})
syz_usb_control_io$uac2(r0, &(0x7f0000000440)={0x14, &(0x7f0000000200)={0x40, 0x4, 0xef, {0xef, 0x3, "c280b5bfa4a537e3bf51490d06cf033921183b0a918c49512a7cb1bf854ad6b025a8ed76ab06bb978a3dc2aed513b05bdbb5069afea9ac26eaf2562176341b052f68457a5953a87fca2e101e55c2e84b30f40bdab4a1ccefa001c42029ff311fe3eacee0597249d29e7bb477eabc21fc41b2f9763715cc5ed4089fdaa801b24b6da32d28e7a9758295b4e58e8ec5e74969bfa0342a08203ae5b2ca4465c1e446c07e7ce37d4f13e20dac72df202b395f2f941770285467863bb320e55a0d0ed8c9c59a8f2bab4d545517c59fa622043fb7e22e97645bac519102e665b295e3d303392cd0c08f9a947f8b22f738"}}, &(0x7f0000002340)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000700)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="c90700000000"], &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000002680)=ANY=[@ANYBLOB="208103000000ebdbc1de64d8914fe538ae1a903c82472ccd66162a7b5c419d01d10fe216f0606d47c57d7092c68ef8738fd07a2e4f7e0021ce719c54e7dea31cf8bbe073226184d1574b088ac88133253dbd20dce4ffbe5f7320839e27fa5930d8d6548799a6276484363b6529152f5687c685ea8a7614aee900cf73b3682f3101fff538f322e5e1f4591e8ef2b808850c67bab31145ecdb80a57065dabec2968877ca5d806c8322ef41bd8db48788040962655f1866f38418af7d1175599cf3e1"], &(0x7f0000002780)=ANY=[@ANYBLOB="f100c0834af9006caa8370ae51a119f30f77000000"], &(0x7f0000000640)=ANY=[@ANYBLOB="00030000004000"], &(0x7f00000000c0)=ANY=[@ANYBLOB="6fb4ccfe6464d8dbc65873c269"], &(0x7f00000006c0)={0x20, 0x85, 0x3, "e833a1"}})
socket(0xa, 0x3, 0x3a)

2.221378089s ago: executing program 5 (id=1046):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, r1, 0x1, 0x1, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d683c6e302c92431e16114757e63d3f93a92c296"}}]}]}, 0x54}, 0x1, 0xffffff7f}, 0x40880)

2.142231534s ago: executing program 5 (id=1048):
mount(0x0, 0x0, 0x0, 0x2080426, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR={{0x99}, 0x4}}}, 0x7)

2.139117756s ago: executing program 5 (id=1049):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
fcntl$notify(r0, 0x402, 0x0)
r2 = accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f1be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2.040754746s ago: executing program 5 (id=1050):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0x5, 0x9, 0x0, 0x0, 0xfc7cce807af2adb8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94)
fanotify_init(0x4, 0x101000)
r5 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r5, 0xffff)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/warn_count', 0x781040, 0x176)
sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15a89040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x400, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000080)
fcntl$addseals(r5, 0x409, 0x3)
close(0x3)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r5, 0x1, 0x0, 0x2000})
lseek(r2, 0x0, 0x1)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/23, 0x17}], 0x1, 0x0, 0xfffffffe)

1.987145326s ago: executing program 5 (id=1051):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffffffff}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x24, r1, 0x1, 0x121, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x24}}, 0x0)
nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0)
r2 = fsopen(&(0x7f00000004c0)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='%\x00', 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$nfc_llcp(r3, &(0x7f0000000e00)={0x27, 0x1, 0x0, 0x5, 0x1, 0x0, 'urn:nfc:sn:snep\x00'}, 0x60)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r4, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pread64(r7, &(0x7f0000000000)=""/10, 0xa, 0xffc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffd6d8}, {}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x52faa2e6}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0xe4, &(0x7f00000001c0)=""/228, 0x41000, 0x6a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x1, 0x1, 0x10, 0x4}, {0x5, 0x4, 0x4, 0x4}], 0x10, 0x4}, 0x94)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000001000)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x11c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2d}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x20}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x42af78e3f936989e}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_SSID={0xd, 0x34, @random="cdb6e4cf69391f6afa"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000050)
syz_usb_connect(0x0, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x4, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}, {{0x9, 0x4, 0x1, 0x0, 0x0, 0xff}}, {{0x9, 0x4, 0x2, 0x0, 0x0, 0xff}}, {{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x5, 0x0)
ioctl(r8, 0xc4c85513, &(0x7f0000000200)="1b0000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000")
ioctl(r9, 0xc4c85513, &(0x7f0000000200))

715.948979ms ago: executing program 0 (id=1063):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000024882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x3000000000000000, 0x10}])

598.287932ms ago: executing program 0 (id=1064):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_dev$video(&(0x7f0000000100), 0x5, 0x21c280)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), 0x4)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0), 0x2)
pidfd_getfd(r4, r2, 0x0)
close(r0)

534.149415ms ago: executing program 0 (id=1065):
syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="9723af4501000000000001008cc5595c4a9b8f99595311dc93a46126", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000116000/0x1000)=nil, 0x1000, 0x1000001, 0x8013, r2, 0xf6695000)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x86, 0x20000}, 0x20)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)

457.258714ms ago: executing program 0 (id=1066):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000011c0)={0xe4a4, 0x1000000})
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000691000/0x18000)=nil, &(0x7f0000001080)=[@text32={0x20, &(0x7f0000001000)="98650f01c4b9800000c00f3235001000000f3065f36db805000000b91b0000000f01c10f21e7b8000000000f23d80f21f835400000d00f23f89a2c4d00007b00b9470300000f32b989010000b80c000000ba000000000f30", 0x58}], 0x1, 0x32, &(0x7f0000001100)=[@dstype3={0x7, 0x9}, @cr4={0x1, 0x1}], 0x2)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000000))
r8 = dup(r0)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r8})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="08f64fd5250200b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="18000092d6c4bc34c5a86d107434431d480000000000000800"/35], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

201.679675ms ago: executing program 0 (id=1067):
write$selinux_access(0xffffffffffffffff, 0x0, 0x56)
syz_open_dev$dri(0x0, 0x1f, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601})
r1 = socket$kcm(0x2, 0xa, 0x2)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000030060f500000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)

63.83133ms ago: executing program 0 (id=1068):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000000080))
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0c0099000100010055000000"], 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x1)
mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="e07ab711c93346ba0ae3eeb3ee1c85bd2d7bef44b0aeda8577d5b95d853a58b4f94b2e09821bf017f9b8065f18720d97be519d5dd471bd62a763848c07e2dff50faf01944451c56006c512bfd8bcfc0f86363bf13011771778147da9e5e12c063af4bd30ca23cca325f3895f04a851ec77499abf05b4872379053b86b317f8d1da31d8a3d1f1153ef744bfb37505b43d94386a044794690e1a0b876b294fb36618a144650c889f92b2e8c63098f4f906a4965bdb716cbd22", @ANYRES64=0x0], 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r7=>0x0}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="2f0000002020000004000000", @ANYRES32=r7], 0x20)
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x124)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d80000001400810d4e81f782db44b9040a11080211000000040000a118000280fec9201114000e1208000f0100810401a80016ea1f000640c9201114c92011148ed08734843cb12b00000803600cfab9c14dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146bffa07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adb", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40804)
r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0)
pidfd_getfd(r8, r10, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r11, &(0x7f0000000b00)='\n', 0x1)

0s ago: executing program 3 (id=1069):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x58, {"d3576ecf420f01b8a93a0b0f66baf80cb81c372e8cef66bafc0c66b8e3af66ef450f0017c441ad6a122ef2470f00d2c46335786d000b440f20c03502000000440f22c0400fdef2"}}], 0x58})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 21)

kernel console output (not intermixed with test programs):

b0
[   81.285755][ T7408]  ? lockdep_hardirqs_on+0x78/0x100
[   81.285768][ T7408]  do_syscall_64+0x115/0x870
[   81.285780][ T7408]  ? clear_bhb_loop+0x40/0x90
[   81.285794][ T7408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.285805][ T7408] RIP: 0033:0x7f808df9e019
[   81.285814][ T7408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.285825][ T7408] RSP: 002b:00007f808eedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   81.285836][ T7408] RAX: ffffffffffffffda RBX: 00007f808e225fa0 RCX: 00007f808df9e019
[   81.285843][ T7408] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000003
[   81.285849][ T7408] RBP: 00007f808eedf090 R08: 0000000000000000 R09: 0000000000000000
[   81.285856][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.285862][ T7408] R13: 00007f808e226038 R14: 00007f808e225fa0 R15: 00007fffbbb2df78
[   81.285874][ T7408]  </TASK>
[   81.408085][   T42] audit: type=1400 audit(1785876634.690:774): avc:  denied  { write } for  pid=7412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.449456][   T42] audit: type=1400 audit(1785876634.727:775): avc:  denied  { create } for  pid=7427 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   81.458349][   T42] audit: type=1400 audit(1785876634.737:776): avc:  denied  { write } for  pid=7423 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.479758][ T7428] loop5: detected capacity change from 0 to 2640
[   81.487871][ T7112] Buffer I/O error on dev loop5, logical block 0, async page read
[   81.491773][ T7112] Buffer I/O error on dev loop5, logical block 0, async page read
[   81.495388][ T7112] Buffer I/O error on dev loop5, logical block 0, async page read
[   81.498301][ T7112] Buffer I/O error on dev loop5, logical block 0, async page read
[   81.501008][ T7112] Buffer I/O error on dev loop5, logical block 0, async page read
[   81.569526][   T42] audit: type=1400 audit(1785876634.849:777): avc:  denied  { write } for  pid=7435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.611884][ T5745] Bluetooth: unknown link type 18
[   81.613655][ T5745] Bluetooth: hci3: connection err: -111
[   81.617515][   T42] audit: type=1400 audit(1785876634.886:778): avc:  denied  { write } for  pid=7447 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   81.675989][   T42] audit: type=1400 audit(1785876634.942:779): avc:  denied  { cmd } for  pid=7455 comm="syz.0.489" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[   81.777305][ T7465] team0: Device xfrm0 is of different type
[   81.839521][ T7472] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   81.843225][ T5890] IPVS: starting estimator thread 0...
[   81.915326][ T7477] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   81.918140][ T7477] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock
[   81.923493][ T7477] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   81.926347][ T7477] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock
[   81.941199][ T7473] IPVS: using max 47 ests per chain, 112800 per kthread
[   82.030624][ T7483] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   82.201580][ T7489] kvm: pic: non byte write
[   82.205232][ T7489] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer.
[   82.210916][ T7497] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   82.335412][ T7503] geneve3: entered promiscuous mode
[   82.346354][ T7503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7503 comm=syz.0.502
[   82.523483][ T7518] CIFS mount error: No usable UNC path provided in device string!
[   82.523483][ T7518] 
[   82.527181][ T7518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   82.618346][   T50] cfg80211: failed to load regulatory.db
[   83.047501][ T7553] netlink: 'syz.4.520': attribute type 12 has an invalid length.
[   83.091279][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'.
[   83.608648][ T7572] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   83.679618][ T7155] usb 8-1: USB disconnect, device number 3
[   83.838342][ T7582] device-mapper: ioctl: Invalid ioctl structure: name my_zoned_dm, dev 1
[   83.871419][ T7585] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[   83.877206][ T7586] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   83.898785][ T7585] 8021q: adding VLAN 0 to HW filter on device bond11
[   83.915078][ T7585] bond11: (slave gretap1): Enslaving as a backup interface with an up link
[   83.934862][ T7585] bond11: (slave dummy0): Enslaving as a backup interface with an up link
[   83.946313][ T7590] ptrace attach of "/syz-executor exec"[5743] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[   84.014256][   T13] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   84.041274][ T5845] IPVS: starting estimator thread 0...
[   84.146054][ T7613] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   84.153143][ T7604] IPVS: using max 47 ests per chain, 112800 per kthread
[   84.153197][   T13] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   84.482785][ T7639] only policy match revision 0 supported
[   84.482800][ T7639] unable to load match
[   84.579319][ T7646] vlan2: entered allmulticast mode
[   84.581755][ T7646] bond0: entered allmulticast mode
[   84.583673][ T7646] bond_slave_0: entered allmulticast mode
[   84.585520][ T7646] bond_slave_1: entered allmulticast mode
[   84.634655][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'.
[   84.645890][ T5788] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   84.648890][ T5788] netdevsim netdevsim10 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   84.657560][ T5788] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   84.660646][ T5788] netdevsim netdevsim10 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   84.671089][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'.
[   84.684580][ T7650] team0: Port device team_slave_0 removed
[   84.844786][ T7655] netlink: 'syz.4.558': attribute type 2 has an invalid length.
[   85.065197][ T7670] serio: Serial port ptm0
[   86.300247][   T42] kauditd_printk_skb: 46 callbacks suppressed
[   86.300260][   T42] audit: type=1400 audit(1785876639.266:826): avc:  denied  { write } for  pid=7712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.346644][   T42] audit: type=1400 audit(1785876639.313:827): avc:  denied  { write } for  pid=7715 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.362625][   T42] audit: type=1400 audit(1785876639.331:828): avc:  denied  { write } for  pid=7717 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   86.406734][ T7720] xt_l2tp: wrong L2TP version: 0
[   86.411685][   T42] audit: type=1400 audit(1785876639.378:829): avc:  denied  { module_request } for  pid=7719 comm="syz.4.572" kmod="net-pf-2-proto-15-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   86.462306][   T42] audit: type=1400 audit(1785876639.416:830): avc:  denied  { write } for  pid=7722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.465869][ T7720] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[   86.515663][   T42] audit: type=1400 audit(1785876639.481:831): avc:  denied  { write } for  pid=7726 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.525639][ T5849] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   86.645831][   T42] audit: type=1400 audit(1785876639.593:832): avc:  denied  { write } for  pid=7734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.687356][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.694496][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.698833][ T5849] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   86.703313][ T7739] xt_hashlimit: size too large, truncated to 1048576
[   86.704735][   T42] audit: type=1400 audit(1785876639.649:833): avc:  denied  { write } for  pid=7737 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.705579][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.725045][ T5849] usb 7-1: config 0 descriptor??
[   86.885306][   T42] audit: type=1400 audit(1785876639.818:834): avc:  denied  { write } for  pid=7746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.935123][   T42] audit: type=1400 audit(1785876639.865:835): avc:  denied  { write } for  pid=7750 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.167324][ T5849] hid_parser_main: 91 callbacks suppressed
[   87.167340][ T5849] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   87.173556][ T5849] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   87.179084][ T5849] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0003/input/input8
[   87.205804][ T5849] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[   87.384378][   T34] usb 7-1: USB disconnect, device number 6
[   87.462232][ T7786] fuse: Invalid rootmode
[   87.471471][ T7786] pim6reg: entered allmulticast mode
[   87.476840][ T7786] cgroup: fork rejected by pids controller in /syz3
[   87.484915][ T7785] pim6reg: left allmulticast mode
[   87.885800][ T7801] netlink: 'syz.4.583': attribute type 1 has an invalid length.
[   87.901577][ T7801] bond4: entered promiscuous mode
[   87.903546][ T7801] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.961144][ T7808] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   88.125623][   T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.223306][   T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.317063][   T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.326058][   T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.331842][   T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.335565][   T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.339539][   T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.344348][   T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.403241][   T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.451045][ T7827] netlink: 'syz.2.591': attribute type 1 has an invalid length.
[   88.453675][ T7827] netlink: 'syz.2.591': attribute type 4 has an invalid length.
[   88.456304][ T7827] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.591'.
[   88.647956][   T13] team0: Port device xfrm0 removed
[   88.694458][   T13] bond0 (unregistering): Released all slaves
[   88.703997][   T13] bond1 (unregistering): Released all slaves
[   88.713412][ T7840] x_tables: duplicate underflow at hook 1
[   88.717232][   T13] bond2 (unregistering): Released all slaves
[   88.724807][   T13] bond3 (unregistering): Released all slaves
[   88.733738][   T13] bond4 (unregistering): Released all slaves
[   88.743435][   T13] bond5 (unregistering): Released all slaves
[   88.756300][   T13] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface
[   88.764201][   T13] bond6 (unregistering): Released all slaves
[   88.785650][  T589] tipc: Resetting bearer <eth:team0>
[   88.790596][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6
[   88.878168][   T13] tipc: Disabling bearer <eth:team0>
[   88.897542][   T13] tipc: Left network mode
[   88.940482][ T7858] netlink: Unknown conntrack attr (0)
[   88.942641][ T7858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.166610][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7
[   89.169453][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.172160][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.175220][ T7819] bridge_slave_0: entered allmulticast mode
[   89.181366][ T7819] bridge_slave_0: entered promiscuous mode
[   89.192099][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.194962][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.200778][ T7819] bridge_slave_1: entered allmulticast mode
[   89.204544][ T7819] bridge_slave_1: entered promiscuous mode
[   89.273136][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.294423][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.307898][   T13] hsr_slave_0: left promiscuous mode
[   89.312679][   T13] hsr_slave_1: left promiscuous mode
[   89.326960][   T13] veth1_macvtap: left promiscuous mode
[   89.331355][   T13] veth0_macvtap: left promiscuous mode
[   89.333273][   T13] veth1_vlan: left promiscuous mode
[   89.336544][   T13] veth0_vlan: left promiscuous mode
[   89.555971][ T7896] binder: BC_ACQUIRE_RESULT not supported
[   89.558414][ T7896] binder: 7895:7896 ioctl c0306201 2000000003c0 returned -22
[   89.569485][ T7896] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   89.573047][ T7896] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   89.579778][ T7896] netlink: 'syz.0.609': attribute type 1 has an invalid length.
[   89.583685][ T7896] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.609'.
[   89.627687][ T7819] team0: Port device team_slave_0 added
[   89.630909][ T7819] team0: Port device team_slave_1 added
[   89.650990][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.653282][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.663061][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.667953][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.670373][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.680090][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.718843][ T7819] hsr_slave_0: entered promiscuous mode
[   89.721336][ T7819] hsr_slave_1: entered promiscuous mode
[   89.723685][ T7819] debugfs: 'hsr0' already exists in 'hsr'
[   89.725623][ T7819] Cannot create hsr debugfs directory
[   89.737418][ T7904] netlink: 64 bytes leftover after parsing attributes in process `syz.0.611'.
[   89.858448][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8
[   90.119192][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.125026][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.176122][ T7931] ocfs2: Unknown parameter 'aclj'
[   90.243263][   T13] IPVS: stop unused estimator thread 0...
[   90.308550][ T7938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.617'.
[   90.383636][ T7819] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.388534][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.395231][ T7819] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.400330][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.403425][ T7819] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.407999][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.410723][ T7819] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.414496][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.462340][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.471947][ T7819] 8021q: adding VLAN 0 to HW filter on device team0
[   90.477090][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.479407][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.487272][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.489570][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.513209][ T7819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.555514][ T5745] Bluetooth: hci2: command tx timeout
[   90.721935][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.761099][ T7819] veth0_vlan: entered promiscuous mode
[   90.773677][ T7819] veth1_vlan: entered promiscuous mode
[   90.791751][ T7819] veth0_macvtap: entered promiscuous mode
[   90.804267][ T7819] veth1_macvtap: entered promiscuous mode
[   90.816549][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.826925][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.855448][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.864109][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.892588][  T589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.895230][  T589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.922713][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.923516][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.925204][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.934033][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.939733][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.943042][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.005784][ T7992] usb usb7: usbfs: process 7992 (syz.2.622) did not claim interface 0 before use
[   91.011772][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[   91.098343][ T7995] netlink: 'syz.2.623': attribute type 1 has an invalid length.
[   91.257852][ T8000] bond0: Error: Cannot enslave bond to itself.
[   91.285890][ T8000] device-mapper: table: 248:0: : unknown target type
[   91.288119][ T8000] device-mapper: ioctl: error adding target to table
[   91.520878][ T8023] bridge_slave_0: left allmulticast mode
[   91.522860][ T8023] bridge_slave_0: left promiscuous mode
[   91.524836][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.530524][ T8023] bridge_slave_1: left allmulticast mode
[   91.532328][ T8023] bridge_slave_1: left promiscuous mode
[   91.534236][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.541206][ T8023] bond0: (slave bond_slave_0): Releasing backup interface
[   91.547436][ T8023] bond0: (slave bond_slave_1): Releasing backup interface
[   91.553925][ T8023] team0: Port device team_slave_0 removed
[   91.561066][ T8023] team0: Port device team_slave_1 removed
[   91.564333][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.567592][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.571255][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.573929][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.577864][ T8023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   91.593719][ T8024] team0: Port device xfrm0 added
[   92.160376][ T8032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'.
[   92.248737][   T42] kauditd_printk_skb: 49 callbacks suppressed
[   92.248751][   T42] audit: type=1400 audit(1785876644.834:885): avc:  denied  { ioctl } for  pid=8042 comm="syz.3.636" path="/6/my_configfs/usb_gadget/g1/functions/uac2.usb0/c_chmask" dev="configfs" ino=20077 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   92.280314][   T42] audit: type=1400 audit(1785876644.862:886): avc:  denied  { write } for  pid=8044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   92.293819][ T8049] overlayfs: missing 'lowerdir'
[   92.319867][   T42] audit: type=1400 audit(1785876644.909:887): avc:  denied  { write } for  pid=8050 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   92.420091][ T8056] FAULT_INJECTION: forcing a failure.
[   92.420091][ T8056] name failslab, interval 1, probability 0, space 0, times 0
[   92.425252][ T8056] CPU: 3 UID: 0 PID: 8056 Comm: syz.4.639 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   92.425269][ T8056] Tainted: [L]=SOFTLOCKUP
[   92.425273][ T8056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   92.425279][ T8056] Call Trace:
[   92.425300][ T8056]  <TASK>
[   92.425304][ T8056]  dump_stack_lvl+0x100/0x190
[   92.425378][ T8056]  should_fail_ex.cold+0x5/0xa
[   92.425399][ T8056]  should_failslab+0xc2/0x120
[   92.425424][ T8056]  __kvmalloc_node_noprof+0x116/0x970
[   92.425439][ T8056]  ? ctl_ioctl+0x94d/0xcd0
[   92.425480][ T8056]  ctl_ioctl+0x94d/0xcd0
[   92.425515][ T8056]  ? __pfx_table_load+0x10/0x10
[   92.425531][ T8056]  ? __pfx_ctl_ioctl+0x10/0x10
[   92.425559][ T8056]  ? selinux_file_ioctl+0x13b/0x290
[   92.425599][ T8056]  ? selinux_file_ioctl+0xb6/0x290
[   92.425617][ T8056]  dm_ctl_ioctl+0x22/0x30
[   92.425630][ T8056]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[   92.425644][ T8056]  __x64_sys_ioctl+0x18e/0x210
[   92.425662][ T8056]  do_syscall_64+0x115/0x870
[   92.425703][ T8056]  ? clear_bhb_loop+0x40/0x90
[   92.425717][ T8056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.425729][ T8056] RIP: 0033:0x7f808df9e019
[   92.425738][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.425749][ T8056] RSP: 002b:00007f808eedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   92.425766][ T8056] RAX: ffffffffffffffda RBX: 00007f808e225fa0 RCX: 00007f808df9e019
[   92.425773][ T8056] RDX: 0000200000002000 RSI: 00000000c138fd09 RDI: 0000000000000003
[   92.425780][ T8056] RBP: 00007f808eedf090 R08: 0000000000000000 R09: 0000000000000000
[   92.425786][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.425792][ T8056] R13: 00007f808e226038 R14: 00007f808e225fa0 R15: 00007fffbbb2df78
[   92.425805][ T8056]  </TASK>
[   92.506784][ T5845] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   92.650396][ T5845] usb 7-1: device descriptor read/64, error -71
[   92.726054][   T42] audit: type=1400 audit(1785876645.283:888): avc:  denied  { connect } for  pid=8069 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   92.776981][ T5745] Bluetooth: hci2: command tx timeout
[   92.888679][   T42] audit: type=1400 audit(1785876645.433:889): avc:  denied  { write } for  pid=8072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   92.905568][ T5845] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   92.939986][   T42] audit: type=1400 audit(1785876645.489:890): avc:  denied  { write } for  pid=8078 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   93.044385][ T5845] usb 7-1: device descriptor read/64, error -71
[   93.120446][ T7987] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   93.162487][ T5845] usb usb7-port1: attempt power cycle
[   93.253832][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.649'.
[   93.310639][ T5745] Bluetooth: hci2: Malformed HCI Event: 0x22
[   93.341413][   T42] audit: type=1400 audit(1785876645.854:891): avc:  denied  { setopt } for  pid=8098 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   93.352071][   T42] audit: type=1400 audit(1785876645.873:892): avc:  denied  { listen } for  pid=8098 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   93.361570][   T42] audit: type=1400 audit(1785876645.873:893): avc:  denied  { accept } for  pid=8098 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   93.481178][   T42] audit: type=1400 audit(1785876645.985:894): avc:  denied  { ioctl } for  pid=8106 comm="syz.4.652" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   93.489357][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7184 sclass=netlink_route_socket pid=8107 comm=syz.4.652
[   93.524911][ T5845] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   93.548907][ T5845] usb 7-1: device descriptor read/8, error -71
[   93.803057][ T5845] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   93.824700][ T5845] usb 7-1: device descriptor read/8, error -71
[   93.877505][ T5788] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.898956][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.904888][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.908480][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.943858][ T5845] usb usb7-port1: unable to enumerate USB device
[   94.093667][ T8147] 9p: Could not find request transport: virtlo
[   94.509437][ T8169] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[   95.006597][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[   95.009639][ T8176] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'.
[   95.012928][ T5745] Bluetooth: hci2: command tx timeout
[   95.184711][ T8185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'.
[   95.187739][ T8185] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[   95.219643][ T8188] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   95.255462][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.258949][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.833253][ T1361] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[   95.993274][ T1361] usb 7-1: Using ep0 maxpacket: 16
[   95.998721][ T1361] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   96.005027][ T1361] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   96.010659][ T1361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.013326][ T1361] usb 7-1: Product: syz
[   96.014822][ T1361] usb 7-1: Manufacturer: syz
[   96.016416][ T1361] usb 7-1: SerialNumber: syz
[   96.023338][ T1361] usb 7-1: config 0 descriptor??
[   96.031696][ T1361] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   96.035705][ T1361] em28xx 7-1:0.0: DVB interface 0 found: bulk
[   96.182601][ T8217] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   96.675231][ T1361] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[   96.758474][ T8236] syzkaller0: entered promiscuous mode
[   96.760405][ T8236] syzkaller0: entered allmulticast mode
[   97.020532][ T8242] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   97.166496][ T8252] MTD: Couldn't look up './dev/mtdblock0': -2
[   97.222341][ T5745] Bluetooth: hci2: command tx timeout
[   97.411998][ T8265] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð)
[   97.420672][ T1361] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[   97.424904][ T1361] em28xx 7-1:0.0: board has no eeprom
[   97.489440][ T1361] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   97.492131][ T1361] em28xx 7-1:0.0: dvb set to bulk mode.
[   97.498256][ T5845] em28xx 7-1:0.0: Binding DVB extension
[   97.508691][ T1361] usb 7-1: USB disconnect, device number 11
[   97.519180][ T1361] em28xx 7-1:0.0: Disconnecting em28xx
[   97.539949][ T5845] em28xx 7-1:0.0: Registering input extension
[   97.542228][ T1361] em28xx 7-1:0.0: Closing input extension
[   97.562066][ T1361] em28xx 7-1:0.0: Freeing device
[   97.591486][ T8275] FAULT_INJECTION: forcing a failure.
[   97.591486][ T8275] name failslab, interval 1, probability 0, space 0, times 0
[   97.596059][ T8275] CPU: 2 UID: 0 PID: 8275 Comm: syz.4.696 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   97.596076][ T8275] Tainted: [L]=SOFTLOCKUP
[   97.596080][ T8275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.596103][ T8275] Call Trace:
[   97.596109][ T8275]  <TASK>
[   97.596113][ T8275]  dump_stack_lvl+0x100/0x190
[   97.596135][ T8275]  should_fail_ex.cold+0x5/0xa
[   97.596152][ T8275]  should_failslab+0xc2/0x120
[   97.596167][ T8275]  __kmalloc_cache_noprof+0x91/0x6c0
[   97.596184][ T8275]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[   97.596217][ T8275]  ? v9fs_get_tree+0x9c/0xb50
[   97.596252][ T8275]  v9fs_get_tree+0x9c/0xb50
[   97.596267][ T8275]  ? rcu_is_watching+0x12/0xc0
[   97.596295][ T8275]  ? __pfx_v9fs_get_tree+0x10/0x10
[   97.596311][ T8275]  ? bpf_lsm_capable+0x9/0x10
[   97.596322][ T8275]  ? security_capable+0x80/0x260
[   97.596345][ T8275]  vfs_get_tree+0x92/0x320
[   97.596362][ T8275]  path_mount+0x7d0/0x23d0
[   97.596379][ T8275]  ? __pfx_path_mount+0x10/0x10
[   97.596391][ T8275]  ? lockdep_hardirqs_on+0x78/0x100
[   97.596408][ T8275]  ? putname+0xb1/0x110
[   97.596420][ T8275]  ? kmem_cache_free+0x127/0x6b0
[   97.596435][ T8275]  ? __x64_sys_mount+0x293/0x310
[   97.596448][ T8275]  __x64_sys_mount+0x293/0x310
[   97.596462][ T8275]  ? __pfx___x64_sys_mount+0x10/0x10
[   97.596479][ T8275]  do_syscall_64+0x115/0x870
[   97.596492][ T8275]  ? clear_bhb_loop+0x40/0x90
[   97.596507][ T8275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.596518][ T8275] RIP: 0033:0x7f808df9e019
[   97.596528][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.596538][ T8275] RSP: 002b:00007f808eedf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   97.596550][ T8275] RAX: ffffffffffffffda RBX: 00007f808e225fa0 RCX: 00007f808df9e019
[   97.596557][ T8275] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000
[   97.596564][ T8275] RBP: 00007f808eedf090 R08: 0000200000000100 R09: 0000000000000000
[   97.596570][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   97.596576][ T8275] R13: 00007f808e226038 R14: 00007f808e225fa0 R15: 00007fffbbb2df78
[   97.596590][ T8275]  </TASK>
[   97.685018][   T42] kauditd_printk_skb: 21 callbacks suppressed
[   97.685029][   T42] audit: type=1400 audit(1785876649.925:914): avc:  denied  { write } for  pid=8276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.744872][   T42] audit: type=1400 audit(1785876649.981:915): avc:  denied  { write } for  pid=8282 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.864893][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.869485][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.914902][ T8292] MTD: Couldn't look up './dev/mtdblock0': -2
[   98.303610][ T5745] Bluetooth: hci2: unexpected event for opcode 0x2035
[   98.425503][   T42] audit: type=1400 audit(1785876650.617:916): avc:  denied  { shutdown } for  pid=8317 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   98.800791][ T8337] syzkaller0: entered promiscuous mode
[   98.803268][ T8337] syzkaller0: entered allmulticast mode
[   98.899532][   T42] audit: type=1400 audit(1785876651.057:917): avc:  denied  { map } for  pid=8340 comm="syz.0.719" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   98.914292][   T42] audit: type=1400 audit(1785876651.057:918): avc:  denied  { execute } for  pid=8340 comm="syz.0.719" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  100.225541][   T42] audit: type=1400 audit(1785876652.311:919): avc:  denied  { read write } for  pid=8371 comm="syz.3.726" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  100.234361][   T42] audit: type=1400 audit(1785876652.311:920): avc:  denied  { open } for  pid=8371 comm="syz.3.726" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  100.248013][   T42] audit: type=1400 audit(1785876652.311:921): avc:  denied  { write } for  pid=8370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  100.256639][   T42] audit: type=1400 audit(1785876652.330:922): avc:  denied  { ioctl } for  pid=8371 comm="syz.3.726" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  100.279646][   T42] audit: type=1400 audit(1785876652.339:923): avc:  denied  { connect } for  pid=8371 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  100.318498][ T8376] capability: warning: `syz.4.727' uses 32-bit capabilities (legacy support in use)
[  100.343346][ T8384] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  100.345378][ T8384] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  100.347833][ T8384] vhci_hcd vhci_hcd.0: Device attached
[  100.351730][ T8385] vhci_hcd: unknown pdu 1
[  100.355672][   T12] vhci_hcd vhci_hcd.2: stop threads
[  100.368158][   T12] vhci_hcd vhci_hcd.2: release socket
[  100.371657][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  100.501752][ T8391] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  100.512978][ T8391] FAULT_INJECTION: forcing a failure.
[  100.512978][ T8391] name failslab, interval 1, probability 0, space 0, times 0
[  100.517960][ T8391] CPU: 0 UID: 0 PID: 8391 Comm: syz.3.732 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  100.517991][ T8391] Tainted: [L]=SOFTLOCKUP
[  100.517996][ T8391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.518002][ T8391] Call Trace:
[  100.518007][ T8391]  <TASK>
[  100.518011][ T8391]  dump_stack_lvl+0x100/0x190
[  100.518032][ T8391]  should_fail_ex.cold+0x5/0xa
[  100.518048][ T8391]  should_failslab+0xc2/0x120
[  100.518063][ T8391]  kmem_cache_alloc_noprof+0x91/0x6a0
[  100.518076][ T8391]  ? irqentry_exit+0x24d/0xa00
[  100.518090][ T8391]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  100.518107][ T8391]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  100.518124][ T8391]  mmu_topup_memory_caches+0x25/0x170
[  100.518141][ T8391]  kvm_mmu_load+0xe2/0x2570
[  100.518155][ T8391]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  100.518167][ T8391]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  100.518178][ T8391]  ? vmx_get_rflags+0x104/0x440
[  100.518189][ T8391]  ? kvm_apic_accept_pic_intr+0xdf/0x1b0
[  100.518200][ T8391]  ? __pfx_kvm_mmu_load+0x10/0x10
[  100.518214][ T8391]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  100.518227][ T8391]  ? kvm_check_and_inject_events+0x873/0x12a0
[  100.518243][ T8391]  ? record_steal_time+0x3a0/0xbb0
[  100.518256][ T8391]  vcpu_run+0x3aaa/0x5de0
[  100.518277][ T8391]  ? __pfx_vcpu_run+0x10/0x10
[  100.518297][ T8391]  ? rcu_is_watching+0x12/0xc0
[  100.518316][ T8391]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  100.518332][ T8391]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  100.518351][ T8391]  kvm_vcpu_ioctl+0x730/0x1700
[  100.518364][ T8391]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  100.518380][ T8391]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  100.518396][ T8391]  ? do_vfs_ioctl+0x226/0x13e0
[  100.518412][ T8391]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  100.518428][ T8391]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  100.518451][ T8391]  ? __fget_files+0x215/0x3d0
[  100.518462][ T8391]  ? hook_file_ioctl_common+0x140/0x440
[  100.518478][ T8391]  ? selinux_file_ioctl+0x13b/0x290
[  100.518494][ T8391]  ? selinux_file_ioctl+0xb6/0x290
[  100.518511][ T8391]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  100.518524][ T8391]  __x64_sys_ioctl+0x18e/0x210
[  100.518541][ T8391]  do_syscall_64+0x115/0x870
[  100.518553][ T8391]  ? clear_bhb_loop+0x40/0x90
[  100.518566][ T8391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.518578][ T8391] RIP: 0033:0x7f439ff9e019
[  100.518588][ T8391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.518599][ T8391] RSP: 002b:00007f43a0f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.518610][ T8391] RAX: ffffffffffffffda RBX: 00007f43a0225fa0 RCX: 00007f439ff9e019
[  100.518618][ T8391] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  100.518624][ T8391] RBP: 00007f43a0f07090 R08: 0000000000000000 R09: 0000000000000000
[  100.518630][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  100.518641][ T8391] R13: 00007f43a0226038 R14: 00007f43a0225fa0 R15: 00007ffda11cd348
[  100.518654][ T8391]  </TASK>
[  100.863648][ T8398] netlink: 'syz.3.736': attribute type 10 has an invalid length.
[  100.870786][ T8398] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  100.908704][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  100.916054][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  100.921188][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  100.926457][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  100.929983][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.301071][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'.
[  101.362256][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.364638][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.367158][ T8399] bridge_slave_0: entered allmulticast mode
[  101.373128][ T8399] bridge_slave_0: entered promiscuous mode
[  101.377702][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.380859][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.383919][ T8399] bridge_slave_1: entered allmulticast mode
[  101.388341][ T8399] bridge_slave_1: entered promiscuous mode
[  101.414717][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.421860][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.436706][ T8399] team0: Port device team_slave_0 added
[  101.439917][ T8399] team0: Port device team_slave_1 added
[  101.463802][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.467010][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.478102][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.483729][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.486687][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.496155][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.533609][ T8399] hsr_slave_0: entered promiscuous mode
[  101.536672][ T8399] hsr_slave_1: entered promiscuous mode
[  101.539034][ T8399] debugfs: 'hsr0' already exists in 'hsr'
[  101.540927][ T8399] Cannot create hsr debugfs directory
[  101.683855][ T8399] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  101.688391][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.691904][ T8399] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  101.695882][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.698536][ T8399] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  101.702538][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.705481][ T8399] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  101.710283][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.727084][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.729532][ T8399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.731952][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.734200][ T8399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.763225][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.770281][  T589] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.773046][  T589] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.784002][ T8399] 8021q: adding VLAN 0 to HW filter on device team0
[  101.789994][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.792490][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.799864][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.802495][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.934326][ T8449] jffs2: notice: (8449) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found.
[  101.989499][ T8455] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  102.079592][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.212022][ T8399] veth0_vlan: entered promiscuous mode
[  102.220164][ T8399] veth1_vlan: entered promiscuous mode
[  102.238385][ T8399] veth0_macvtap: entered promiscuous mode
[  102.243111][ T8399] veth1_macvtap: entered promiscuous mode
[  102.253977][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.261660][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.289107][ T5788] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.331941][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.338455][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.355555][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.358495][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.383587][ T8470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.386850][ T8470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.389794][ T8470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.554952][ T8477] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  102.601723][ T8477] jffs2: notice: (8477) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found.
[  102.664185][ T8490] netlink: 'syz.0.752': attribute type 16 has an invalid length.
[  102.666788][ T8490] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.752'.
[  103.121047][   T65] Bluetooth: hci0: command tx timeout
[  103.493874][ T8511] 9p: Could not find request transport: f–VïÄ}ÌÇ�逎îê¤*À’�É	ÎÑÌ$
[  103.508976][   T42] kauditd_printk_skb: 12 callbacks suppressed
[  103.508987][   T42] audit: type=1400 audit(1785876655.380:936): avc:  denied  { map } for  pid=8510 comm="syz.5.759" path="/proc/7/fdinfo/3" dev="proc" ino=23512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  103.751385][ T5890] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  103.891106][ T5890] usb 7-1: device descriptor read/64, error -71
[  104.146768][ T5890] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  104.165360][ T8525] FAULT_INJECTION: forcing a failure.
[  104.165360][ T8525] name failslab, interval 1, probability 0, space 0, times 0
[  104.169486][ T8525] CPU: 1 UID: 0 PID: 8525 Comm: syz.3.764 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  104.169504][ T8525] Tainted: [L]=SOFTLOCKUP
[  104.169508][ T8525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.169515][ T8525] Call Trace:
[  104.169519][ T8525]  <TASK>
[  104.169524][ T8525]  dump_stack_lvl+0x100/0x190
[  104.169543][ T8525]  should_fail_ex.cold+0x5/0xa
[  104.169559][ T8525]  should_failslab+0xc2/0x120
[  104.169574][ T8525]  __kmalloc_cache_noprof+0x91/0x6c0
[  104.169592][ T8525]  ? macvlan_hash_add_source+0x1b8/0x520
[  104.169640][ T8525]  macvlan_hash_add_source+0x1b8/0x520
[  104.169657][ T8525]  macvlan_changelink_sources+0x1fb/0x680
[  104.169674][ T8525]  macvlan_common_newlink+0xda2/0x18b0
[  104.169691][ T8525]  ? __pfx_macvlan_common_newlink+0x10/0x10
[  104.169708][ T8525]  ? rtnl_create_link+0xa4b/0xf80
[  104.169743][ T8525]  ? __pfx_macvlan_newlink+0x10/0x10
[  104.169758][ T8525]  rtnl_newlink+0x1499/0x2380
[  104.169778][ T8525]  ? __pfx_rtnl_newlink+0x10/0x10
[  104.169792][ T8525]  ? find_held_lock+0x2b/0x80
[  104.169802][ T8525]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  104.169816][ T8525]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  104.169831][ T8525]  ? avc_has_perm_noaudit+0x145/0x3b0
[  104.169855][ T8525]  ? find_held_lock+0x2b/0x80
[  104.169864][ T8525]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  104.169879][ T8525]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  104.169894][ T8525]  ? __pfx_rtnl_newlink+0x10/0x10
[  104.169909][ T8525]  rtnetlink_rcv_msg+0x95e/0xe90
[  104.169926][ T8525]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  104.169944][ T8525]  ? __lock_acquire+0x49f/0x1a40
[  104.169959][ T8525]  netlink_rcv_skb+0x159/0x420
[  104.169979][ T8525]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  104.169995][ T8525]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  104.170011][ T8525]  ? netlink_deliver_tap+0x1ae/0xcc0
[  104.170024][ T8525]  netlink_unicast+0x585/0x850
[  104.170038][ T8525]  ? __pfx_netlink_unicast+0x10/0x10
[  104.170054][ T8525]  netlink_sendmsg+0x8b0/0xda0
[  104.170067][ T8525]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.170080][ T8525]  ? selinux_socket_sendmsg+0x198/0x2f0
[  104.170099][ T8525]  ____sys_sendmsg+0xa4d/0xbe0
[  104.170116][ T8525]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.170128][ T8525]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.170151][ T8525]  ___sys_sendmsg+0x190/0x1e0
[  104.170163][ T8525]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.170173][ T8525]  ? __lock_acquire+0x49f/0x1a40
[  104.170186][ T8525]  ? get_pid_task+0x106/0x250
[  104.170212][ T8525]  __sys_sendmsg+0x160/0x210
[  104.170226][ T8525]  ? __pfx___sys_sendmsg+0x10/0x10
[  104.170248][ T8525]  do_syscall_64+0x115/0x870
[  104.170262][ T8525]  ? clear_bhb_loop+0x40/0x90
[  104.170275][ T8525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.170287][ T8525] RIP: 0033:0x7f439ff9e019
[  104.170297][ T8525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.170308][ T8525] RSP: 002b:00007f43a0f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.170319][ T8525] RAX: ffffffffffffffda RBX: 00007f43a0225fa0 RCX: 00007f439ff9e019
[  104.170326][ T8525] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000007
[  104.170332][ T8525] RBP: 00007f43a0f07090 R08: 0000000000000000 R09: 0000000000000000
[  104.170339][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  104.170345][ T8525] R13: 00007f43a0226038 R14: 00007f43a0225fa0 R15: 00007ffda11cd348
[  104.170359][ T8525]  </TASK>
[  104.360592][ T5890] usb 7-1: device descriptor read/64, error -71
[  104.383916][ T8529] jffs2: notice: (8529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found.
[  104.395334][   T42] audit: type=1400 audit(1785876656.204:937): avc:  denied  { write } for  pid=8528 comm="syz.5.766" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  104.406263][   T42] audit: type=1400 audit(1785876656.204:938): avc:  denied  { read write open } for  pid=8528 comm="syz.5.766" path="/2/mnt/test" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  104.478160][ T5890] usb usb7-port1: attempt power cycle
[  104.762341][ T8555] Failed to get privilege flags for destination (handle=0x2:0x3)
[  104.775593][   T42] audit: type=1400 audit(1785876656.559:939): avc:  denied  { wake_alarm } for  pid=8556 comm="syz.0.776" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  104.792269][ T8559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  104.852447][ T5890] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  104.875186][ T5890] usb 7-1: device descriptor read/8, error -71
[  104.994919][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'.
[  104.995503][   T42] audit: type=1400 audit(1785876656.765:940): avc:  denied  { ioctl } for  pid=8566 comm="syz.3.779" path="socket:[25677]" dev="sockfs" ino=25677 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  105.094248][ T8575] MTD: Couldn't look up './dev/mtdblock0': -2
[  105.130007][ T5890] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  105.137824][ T8580] FAULT_INJECTION: forcing a failure.
[  105.137824][ T8580] name failslab, interval 1, probability 0, space 0, times 0
[  105.143981][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.5.784 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.143999][ T8580] Tainted: [L]=SOFTLOCKUP
[  105.144003][ T8580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.144010][ T8580] Call Trace:
[  105.144014][ T8580]  <TASK>
[  105.144018][ T8580]  dump_stack_lvl+0x100/0x190
[  105.144038][ T8580]  should_fail_ex.cold+0x5/0xa
[  105.144053][ T8580]  should_failslab+0xc2/0x120
[  105.144068][ T8580]  __kmalloc_noprof+0xfc/0x820
[  105.144079][ T8580]  ? find_held_lock+0x2b/0x80
[  105.144090][ T8580]  ? jffs2_do_fill_super+0x394/0xa60
[  105.144106][ T8580]  jffs2_do_fill_super+0x394/0xa60
[  105.144120][ T8580]  jffs2_fill_super+0x283/0x370
[  105.144131][ T8580]  ? __pfx_get_mtd_device+0x10/0x10
[  105.144146][ T8580]  ? __pfx_jffs2_fill_super+0x10/0x10
[  105.144158][ T8580]  mtd_get_sb+0x2f0/0x4c0
[  105.144171][ T8580]  ? __pfx_jffs2_fill_super+0x10/0x10
[  105.144183][ T8580]  get_tree_mtd+0x1e0/0x8a0
[  105.144197][ T8580]  ? __pfx_get_tree_mtd+0x10/0x10
[  105.144210][ T8580]  ? cap_capable+0x107/0x430
[  105.144230][ T8580]  ? bpf_lsm_capable+0x9/0x10
[  105.144242][ T8580]  ? security_capable+0x80/0x260
[  105.144257][ T8580]  vfs_get_tree+0x92/0x320
[  105.144273][ T8580]  path_mount+0x7d0/0x23d0
[  105.144289][ T8580]  ? __pfx_path_mount+0x10/0x10
[  105.144302][ T8580]  ? lockdep_hardirqs_on+0x78/0x100
[  105.144317][ T8580]  ? putname+0xb1/0x110
[  105.144328][ T8580]  ? kmem_cache_free+0x127/0x6b0
[  105.144343][ T8580]  ? __x64_sys_mount+0x293/0x310
[  105.144356][ T8580]  __x64_sys_mount+0x293/0x310
[  105.144370][ T8580]  ? __pfx___x64_sys_mount+0x10/0x10
[  105.144387][ T8580]  do_syscall_64+0x115/0x870
[  105.144400][ T8580]  ? clear_bhb_loop+0x40/0x90
[  105.144413][ T8580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.144424][ T8580] RIP: 0033:0x7fe7fb99e019
[  105.144434][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.144445][ T8580] RSP: 002b:00007fe7fc809028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  105.144456][ T8580] RAX: ffffffffffffffda RBX: 00007fe7fbc25fa0 RCX: 00007fe7fb99e019
[  105.144463][ T8580] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300
[  105.144470][ T8580] RBP: 00007fe7fc809090 R08: 0000000000000000 R09: 0000000000000000
[  105.144476][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  105.144482][ T8580] R13: 00007fe7fbc26038 R14: 00007fe7fbc25fa0 R15: 00007ffe229865c8
[  105.144495][ T8580]  </TASK>
[  105.151798][ T5890] usb 7-1: device descriptor read/8, error -71
[  105.277201][ T8591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.277754][ T8590] jffs2: notice: (8590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  105.283769][ T8591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.294569][   T42] audit: type=1400 audit(1785876657.037:941): avc:  denied  { write } for  pid=8588 comm="syz.5.786" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  105.305166][   T42] audit: type=1400 audit(1785876657.055:942): avc:  denied  { ioctl } for  pid=8588 comm="syz.5.786" path="/7/mnt/test" dev="jffs2" ino=5 ioctlcmd=0x582a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  105.343831][   T65] Bluetooth: hci0: command tx timeout
[  105.351767][ T8594] FAULT_INJECTION: forcing a failure.
[  105.351767][ T8594] name failslab, interval 1, probability 0, space 0, times 0
[  105.356066][ T8594] CPU: 3 UID: 0 PID: 8594 Comm: syz.5.790 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.356083][ T8594] Tainted: [L]=SOFTLOCKUP
[  105.356087][ T8594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.356094][ T8594] Call Trace:
[  105.356098][ T8594]  <TASK>
[  105.356102][ T8594]  dump_stack_lvl+0x100/0x190
[  105.356136][ T8594]  should_fail_ex.cold+0x5/0xa
[  105.356151][ T8594]  should_failslab+0xc2/0x120
[  105.356166][ T8594]  kmem_cache_alloc_noprof+0x91/0x6a0
[  105.356178][ T8594]  ? stack_trace_save+0x8e/0xc0
[  105.356191][ T8594]  ? alloc_empty_file+0x5b/0x1c0
[  105.356207][ T8594]  alloc_empty_file+0x5b/0x1c0
[  105.356221][ T8594]  path_openat+0xe7/0x4280
[  105.356231][ T8594]  ? __kasan_slab_alloc+0x89/0x90
[  105.356244][ T8594]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  105.356256][ T8594]  ? do_getname+0x35/0x390
[  105.356269][ T8594]  ? do_sys_openat2+0xc7/0x1e0
[  105.356282][ T8594]  ? __x64_sys_openat+0x12d/0x210
[  105.356294][ T8594]  ? do_syscall_64+0x115/0x870
[  105.356308][ T8594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.356323][ T8594]  ? __pfx_path_openat+0x10/0x10
[  105.356338][ T8594]  do_file_open+0x20e/0x430
[  105.356350][ T8594]  ? __pfx_do_file_open+0x10/0x10
[  105.356371][ T8594]  ? alloc_fd+0x471/0x7a0
[  105.356383][ T8594]  ? do_getname+0x191/0x390
[  105.356398][ T8594]  do_sys_openat2+0x10f/0x1e0
[  105.356411][ T8594]  ? __pfx_do_sys_openat2+0x10/0x10
[  105.356426][ T8594]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  105.356440][ T8594]  ? __fget_files+0x21f/0x3d0
[  105.356453][ T8594]  __x64_sys_openat+0x12d/0x210
[  105.356467][ T8594]  ? __pfx___x64_sys_openat+0x10/0x10
[  105.356480][ T8594]  ? ksys_write+0x1ac/0x250
[  105.356494][ T8594]  do_syscall_64+0x115/0x870
[  105.356506][ T8594]  ? clear_bhb_loop+0x40/0x90
[  105.356519][ T8594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.356530][ T8594] RIP: 0033:0x7fe7fb99e019
[  105.356540][ T8594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.356551][ T8594] RSP: 002b:00007fe7fc809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  105.356561][ T8594] RAX: ffffffffffffffda RBX: 00007fe7fbc25fa0 RCX: 00007fe7fb99e019
[  105.356568][ T8594] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  105.356574][ T8594] RBP: 00007fe7fc809090 R08: 0000000000000000 R09: 0000000000000000
[  105.356580][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.356586][ T8594] R13: 00007fe7fbc26038 R14: 00007fe7fbc25fa0 R15: 00007ffe229865c8
[  105.356599][ T8594]  </TASK>
[  105.367462][ T5890] usb usb7-port1: unable to enumerate USB device
[  105.685934][ T8599] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  105.693965][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.697702][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.063896][   T42] audit: type=1800 audit(1785876657.767:943): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.796" name="ipv4_port" dev="configfs" ino=25699 res=0 errno=0
[  106.326237][ T8621] netlink: 'syz.0.801': attribute type 1 has an invalid length.
[  106.457093][ T8628] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  106.608371][   T42] audit: type=1400 audit(1785876658.272:944): avc:  denied  { write } for  pid=8638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.674143][   T42] audit: type=1400 audit(1785876658.337:945): avc:  denied  { write } for  pid=8641 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.567213][   T65] Bluetooth: hci0: command tx timeout
[  107.768235][ T8677] jffs2: notice: (8677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  107.780042][ T8677] FAULT_INJECTION: forcing a failure.
[  107.780042][ T8677] name failslab, interval 1, probability 0, space 0, times 0
[  107.785228][ T8677] CPU: 0 UID: 0 PID: 8677 Comm: syz.5.819 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  107.785245][ T8677] Tainted: [L]=SOFTLOCKUP
[  107.785249][ T8677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  107.785256][ T8677] Call Trace:
[  107.785279][ T8677]  <TASK>
[  107.785284][ T8677]  dump_stack_lvl+0x100/0x190
[  107.785370][ T8677]  should_fail_ex.cold+0x5/0xa
[  107.785390][ T8677]  should_failslab+0xc2/0x120
[  107.785416][ T8677]  kmem_cache_alloc_noprof+0x91/0x6a0
[  107.785452][ T8677]  ? lockdep_hardirqs_on+0x78/0x100
[  107.785495][ T8677]  ? jffs2_do_read_inode_internal+0x1436/0x4ac0
[  107.785534][ T8677]  jffs2_do_read_inode_internal+0x1436/0x4ac0
[  107.785559][ T8677]  ? __pfx_jffs2_do_read_inode_internal+0x10/0x10
[  107.785582][ T8677]  ? jffs2_do_read_inode+0x173/0x520
[  107.785601][ T8677]  jffs2_do_read_inode+0x1b3/0x520
[  107.785619][ T8677]  ? __pfx_jffs2_do_read_inode+0x10/0x10
[  107.785637][ T8677]  ? __pfx_iget_locked+0x10/0x10
[  107.785654][ T8677]  ? __mutex_lock+0x26d/0x1bd0
[  107.785670][ T8677]  jffs2_iget+0x32b/0xe30
[  107.785683][ T8677]  ? __pfx_jffs2_iget+0x10/0x10
[  107.785701][ T8677]  jffs2_lookup+0x353/0x410
[  107.785715][ T8677]  ? __pfx_jffs2_lookup+0x10/0x10
[  107.785728][ T8677]  path_openat+0x241f/0x4280
[  107.785746][ T8677]  ? __pfx_path_openat+0x10/0x10
[  107.785762][ T8677]  do_file_open+0x20e/0x430
[  107.785774][ T8677]  ? __pfx_do_file_open+0x10/0x10
[  107.785807][ T8677]  ? alloc_fd+0x471/0x7a0
[  107.785822][ T8677]  ? do_getname+0x191/0x390
[  107.785837][ T8677]  do_sys_openat2+0x10f/0x1e0
[  107.785851][ T8677]  ? __pfx_do_sys_openat2+0x10/0x10
[  107.785865][ T8677]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  107.785880][ T8677]  ? __fget_files+0x21f/0x3d0
[  107.785893][ T8677]  __x64_sys_openat+0x12d/0x210
[  107.785907][ T8677]  ? __pfx___x64_sys_openat+0x10/0x10
[  107.785920][ T8677]  ? ksys_write+0x1ac/0x250
[  107.785934][ T8677]  do_syscall_64+0x115/0x870
[  107.785947][ T8677]  ? clear_bhb_loop+0x40/0x90
[  107.785961][ T8677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.785972][ T8677] RIP: 0033:0x7fe7fb99e019
[  107.785982][ T8677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.785993][ T8677] RSP: 002b:00007fe7fc809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  107.786014][ T8677] RAX: ffffffffffffffda RBX: 00007fe7fbc25fa0 RCX: 00007fe7fb99e019
[  107.786021][ T8677] RDX: 0000000000000042 RSI: 0000200000000500 RDI: ffffffffffffff9c
[  107.786028][ T8677] RBP: 00007fe7fc809090 R08: 0000000000000000 R09: 0000000000000000
[  107.786034][ T8677] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000002
[  107.786040][ T8677] R13: 00007fe7fbc26038 R14: 00007fe7fbc25fa0 R15: 00007ffe229865c8
[  107.786054][ T8677]  </TASK>
[  107.787118][ T8677] jffs2: error: (8677) read_dnode: failed to allocate tn (56 bytes).
[  107.895303][ T8677] jffs2: error: (8677) jffs2_do_read_inode_internal: cannot read nodes for ino 5, returned error is -12
[  107.900405][ T8677] jffs2: iget() failed for ino #5
[  107.967597][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.972924][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.218426][ T8706] /dev/sg0: Can't lookup blockdev
[  108.494550][ T8712] affs: No valid root block on device sr0
[  108.816592][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  108.880283][   T42] kauditd_printk_skb: 4 callbacks suppressed
[  108.880294][   T42] audit: type=1400 audit(1785876660.396:950): avc:  denied  { write } for  pid=8723 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  108.964431][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.972329][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.977839][ T8734] vivid-000: =================  START STATUS  =================
[  108.978480][   T10] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  108.980594][ T8734] vivid-000: Test Pattern: 100% Colorbar
[  108.984376][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.986317][ T8734] vivid-000: Fill Percentage of Frame: 100
[  108.992425][ T8734] vivid-000: Horizontal Movement: No Movement
[  108.994414][ T8734] vivid-000: Vertical Movement: No Movement
[  108.996215][ T8734] vivid-000: OSD Text Mode: All
[  108.997804][ T8734] vivid-000: Show Border: false
[  109.000025][   T10] spcp8x5 8-1:1.0: SPCP8x5 converter detected
[  109.000306][ T8734] vivid-000: Show Square: false
[  109.004457][ T8734] vivid-000: Sensor Flipped Horizontally: false
[  109.004530][   T10] usb 8-1: SPCP8x5 converter now attached to ttyUSB0
[  109.007205][ T8734] vivid-000: Sensor Flipped Vertically: false
[  109.007228][ T8734] vivid-000: Insert SAV Code in Image: false
[  109.007248][ T8734] vivid-000: Insert EAV Code in Image: false
[  109.007267][ T8734] vivid-000: Insert Video Guard Band: false
[  109.007286][ T8734] vivid-000: Reduced Framerate: false
[  109.023674][ T8734] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  109.031028][ T8734] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  109.035351][ T8734] vivid-000: Enable Capture Cropping: true
[  109.037822][ T8734] vivid-000: Enable Capture Composing: false
[  109.040041][ T8734] vivid-000: Enable Capture Scaler: true
[  109.043119][ T8734] vivid-000: Timestamp Source: End of Frame
[  109.045628][ T8734] vivid-000: Colorspace: sRGB
[  109.047119][ T8734] vivid-000: Transfer Function: Default
[  109.048909][ T8734] vivid-000: Y'CbCr Encoding: Default
[  109.050823][ T8734] vivid-000: HSV Encoding: Hue 0-179
[  109.052906][ T8734] vivid-000: Quantization: Default
[  109.054552][ T8734] vivid-000: Apply Alpha To Red Only: false
[  109.056432][ T8734] vivid-000: Standard Aspect Ratio: 4x3
[  109.058272][ T8734] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  109.060837][ T8734] vivid-000: DV Timings: 640x480p59 inactive
[  109.062958][ T8734] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  109.065447][ T8734] vivid-000: Maximum EDID Blocks: 2
[  109.067217][ T8734] vivid-000: Limited RGB Range (16-235): false
[  109.069156][ T8734] vivid-000: Rx RGB Quantization Range: Automatic
[  109.071486][ T8734] vivid-000: Power Present: 0x00000001
[  109.073539][ T8734] tpg source WxH: 320x240 (Y'CbCr)
[  109.075498][ T8734] tpg field: 1
[  109.077852][ T8734] tpg crop: (0,0)/320x240
[  109.079223][ T8734] tpg compose: (0,0)/320x240
[  109.080707][ T8734] tpg colorspace: 8
[  109.081968][ T8734] tpg transfer function: 0/2
[  109.083400][ T8734] tpg Y'CbCr encoding: 0/1
[  109.084903][ T8734] tpg quantization: 0/2
[  109.086230][ T8734] tpg RGB range: 0/2
[  109.087476][ T8734] vivid-000: ==================  END STATUS  ==================
[  109.356513][ T8714] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  109.372758][   T42] audit: type=1400 audit(1785876660.864:951): avc:  denied  { watch } for  pid=8757 comm="syz.2.844" path="/179/file1" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  109.391210][   T42] audit: type=1400 audit(1785876660.864:952): avc:  denied  { watch_sb watch_reads } for  pid=8757 comm="syz.2.844" path="/179/file1" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  109.393977][ T8753] kvm: kvm [8750]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  109.401945][   T42] audit: type=1400 audit(1785876660.864:953): avc:  denied  { append } for  pid=8757 comm="syz.2.844" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  109.408275][ T8753] kvm: kvm [8750]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  109.414449][   T42] audit: type=1400 audit(1785876660.864:954): avc:  denied  { map } for  pid=8757 comm="syz.2.844" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  109.425455][   T42] audit: type=1400 audit(1785876660.864:955): avc:  denied  { execute } for  pid=8757 comm="syz.2.844" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  109.714288][   T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  109.789110][   T65] Bluetooth: hci0: command tx timeout
[  109.871190][ T8777] FAULT_INJECTION: forcing a failure.
[  109.871190][ T8777] name failslab, interval 1, probability 0, space 0, times 0
[  109.874599][   T10] usb 7-1: Using ep0 maxpacket: 8
[  109.876495][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.5.850 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  109.876521][ T8777] Tainted: [L]=SOFTLOCKUP
[  109.876527][ T8777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  109.876537][ T8777] Call Trace:
[  109.876553][ T8777]  <TASK>
[  109.876559][ T8777]  dump_stack_lvl+0x100/0x190
[  109.876593][ T8777]  should_fail_ex.cold+0x5/0xa
[  109.876615][ T8777]  should_failslab+0xc2/0x120
[  109.876637][ T8777]  __kmalloc_cache_noprof+0x91/0x6c0
[  109.876665][ T8777]  ? nf_nat_masq_schedule.part.0+0x3bb/0x7a0
[  109.876725][ T8777]  nf_nat_masq_schedule.part.0+0x3bb/0x7a0
[  109.876751][ T8777]  ? __pfx_inet_cmp+0x10/0x10
[  109.876782][ T8777]  ? __pfx_nf_nat_masq_schedule.part.0+0x10/0x10
[  109.876810][ T8777]  ? addr_event.isra.0+0x396/0x560
[  109.876855][ T8777]  masq_inet6_event+0x205/0x250
[  109.876880][ T8777]  ? __pfx_masq_inet6_event+0x10/0x10
[  109.876908][ T8777]  ? ieee80211_ifa6_changed+0xe9/0x440
[  109.876942][ T8777]  notifier_call_chain+0x99/0x3f0
[  109.876980][ T8777]  atomic_notifier_call_chain+0x71/0x1c0
[  109.877000][ T8777]  addrconf_ifdown.isra.0+0xe85/0x1b70
[  109.877021][ T8777]  ? trace_contention_end+0x126/0x160
[  109.877051][ T8777]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  109.877080][ T8777]  addrconf_notify+0x4a3/0x1ba0
[  109.877104][ T8777]  ? __pfx_tls_dev_event+0x10/0x10
[  109.877129][ T8777]  ? __pfx_addrconf_notify+0x10/0x10
[  109.877153][ T8777]  ? ip6mr_device_event+0x1c4/0x230
[  109.877178][ T8777]  notifier_call_chain+0x99/0x3f0
[  109.877198][ T8777]  call_netdevice_notifiers_info+0xbe/0x110
[  109.877239][ T8777]  __dev_notify_flags+0x1f7/0x2e0
[  109.877259][ T8777]  ? __pfx___dev_notify_flags+0x10/0x10
[  109.877281][ T8777]  ? __pfx___dev_change_flags+0x10/0x10
[  109.877308][ T8777]  netif_change_flags+0x108/0x160
[  109.877331][ T8777]  do_setlink.isra.0+0x1ac4/0x3e60
[  109.877355][ T8777]  ? stack_trace_save+0x8e/0xc0
[  109.877377][ T8777]  ? __pfx_do_setlink.isra.0+0x10/0x10
[  109.877403][ T8777]  ? __lock_acquire+0x49f/0x1a40
[  109.877458][ T8777]  ? lock_acquire+0x1b9/0x370
[  109.877483][ T8777]  ? rcu_is_watching+0x12/0xc0
[  109.877507][ T8777]  ? trace_contention_end+0x126/0x160
[  109.877529][ T8777]  ? __mutex_lock+0x26d/0x1bd0
[  109.877550][ T8777]  ? rtnl_newlink+0x8bb/0x2380
[  109.877576][ T8777]  ? __pfx___mutex_lock+0x10/0x10
[  109.877597][ T8777]  ? rcu_is_watching+0x12/0xc0
[  109.877619][ T8777]  ? cap_capable+0x107/0x430
[  109.877662][ T8777]  ? full_name_hash+0xbc/0x100
[  109.877685][ T8777]  ? netdev_name_node_lookup+0x107/0x150
[  109.877707][ T8777]  rtnl_newlink+0x11c2/0x2380
[  109.877737][ T8777]  ? __pfx_rtnl_newlink+0x10/0x10
[  109.877758][ T8777]  ? find_held_lock+0x2b/0x80
[  109.877780][ T8777]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  109.877814][ T8777]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  109.877838][ T8777]  ? avc_has_perm_noaudit+0x145/0x3b0
[  109.877863][ T8777]  ? __lock_acquire+0x49f/0x1a40
[  109.877895][ T8777]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  109.877917][ T8777]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  109.877940][ T8777]  ? __pfx_rtnl_newlink+0x10/0x10
[  109.877963][ T8777]  rtnetlink_rcv_msg+0x95e/0xe90
[  109.877988][ T8777]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  109.878018][ T8777]  ? ref_tracker_free+0x37e/0x6c0
[  109.878047][ T8777]  netlink_rcv_skb+0x159/0x420
[  109.878066][ T8777]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  109.878091][ T8777]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  109.878125][ T8777]  ? netlink_deliver_tap+0x1ae/0xcc0
[  109.878147][ T8777]  netlink_unicast+0x585/0x850
[  109.878168][ T8777]  ? __pfx_netlink_unicast+0x10/0x10
[  109.878190][ T8777]  netlink_sendmsg+0x8b0/0xda0
[  109.878212][ T8777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.878232][ T8777]  ? selinux_socket_sendmsg+0x198/0x2f0
[  109.878260][ T8777]  ____sys_sendmsg+0xa4d/0xbe0
[  109.878286][ T8777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.878306][ T8777]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.878342][ T8777]  ___sys_sendmsg+0x190/0x1e0
[  109.878362][ T8777]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.878377][ T8777]  ? __lock_acquire+0x49f/0x1a40
[  109.878397][ T8777]  ? get_pid_task+0x106/0x250
[  109.878438][ T8777]  __sys_sendmsg+0x160/0x210
[  109.878461][ T8777]  ? __pfx___sys_sendmsg+0x10/0x10
[  109.878513][ T8777]  do_syscall_64+0x115/0x870
[  109.878533][ T8777]  ? clear_bhb_loop+0x40/0x90
[  109.878554][ T8777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.878571][ T8777] RIP: 0033:0x7fe7fb99e019
[  109.878586][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.878602][ T8777] RSP: 002b:00007fe7fc809028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.878628][ T8777] RAX: ffffffffffffffda RBX: 00007fe7fbc25fa0 RCX: 00007fe7fb99e019
[  109.878639][ T8777] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  109.878649][ T8777] RBP: 00007fe7fc809090 R08: 0000000000000000 R09: 0000000000000000
[  109.878659][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  109.878670][ T8777] R13: 00007fe7fbc26038 R14: 00007fe7fbc25fa0 R15: 00007ffe229865c8
[  109.878692][ T8777]  </TASK>
[  109.881074][ T8777] team0: Device xfrm0 is of different type
[  109.889690][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.053975][   T10] usb 7-1: config 0 has no interfaces?
[  110.058900][   T10] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  110.061891][   T10] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  110.064169][   T10] usb 7-1: Manufacturer: syz
[  110.068190][   T10] usb 7-1: config 0 descriptor??
[  110.086297][   T42] audit: type=1400 audit(1785876661.528:956): avc:  denied  { audit_write } for  pid=8778 comm="syz.5.852" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  110.237636][ T8796] qnx6: unable to set blocksize
[  110.247614][ T8796] cgroup2: Unknown parameter 'pcr'
[  110.402629][   T10] usb 7-1: USB disconnect, device number 16
[  110.887050][ T8808] ip_tables: iptables: counters copy to user failed while replacing table
[  110.999616][ T8813] loop5: detected capacity change from 0 to 7
[  111.222421][ T8813] Dev loop5: unable to read RDB block 7
[  111.225154][ T8813]  loop5: unable to read partition table
[  111.225472][ T8818] support for cryptoloop has been removed.  Use dm-crypt instead.
[  111.227376][ T8813] loop5: partition table beyond EOD, truncated
[  111.232428][ T8813] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  111.267704][   T42] audit: type=1400 audit(1785876662.633:957): avc:  denied  { read } for  pid=8824 comm="syz.5.867" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  111.290852][   T42] audit: type=1400 audit(1785876662.633:958): avc:  denied  { open } for  pid=8824 comm="syz.5.867" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  111.333309][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.335617][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.339176][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.342537][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.344843][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.345789][   T42] audit: type=1400 audit(1785876662.708:959): avc:  denied  { read } for  pid=8833 comm="syz.2.870" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  111.347845][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.358984][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.361940][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.364956][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.367203][   T56] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[  111.374440][   T56] hid-generic 0000:0000:0004.0004: hidraw1: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  111.406956][ T8837] fido_id[8837]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  111.538495][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.543606][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.547809][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.550808][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.624667][ T8861] device-mapper: ioctl: only supply one of name or uuid, cmd(9)
[  111.676538][ T8865] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  111.688464][ T8869] FAULT_INJECTION: forcing a failure.
[  111.688464][ T8869] name failslab, interval 1, probability 0, space 0, times 0
[  111.693170][ T8869] CPU: 3 UID: 0 PID: 8869 Comm: syz.2.882 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.693188][ T8869] Tainted: [L]=SOFTLOCKUP
[  111.693192][ T8869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  111.693202][ T8869] Call Trace:
[  111.693207][ T8869]  <TASK>
[  111.693212][ T8869]  dump_stack_lvl+0x100/0x190
[  111.693231][ T8869]  should_fail_ex.cold+0x5/0xa
[  111.693247][ T8869]  should_failslab+0xc2/0x120
[  111.693262][ T8869]  __kmalloc_cache_noprof+0x91/0x6c0
[  111.693280][ T8869]  ? device_add+0xd3f/0x1970
[  111.693322][ T8869]  device_add+0xd3f/0x1970
[  111.693337][ T8869]  ? dev_set_name+0xc7/0x100
[  111.693347][ T8869]  ? __pfx_dev_set_name+0x10/0x10
[  111.693356][ T8869]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  111.693370][ T8869]  ? __pfx_device_add+0x10/0x10
[  111.693386][ T8869]  ? lockdep_init_map_type+0x5c/0x250
[  111.693421][ T8869]  ? __init_waitqueue_head+0xca/0x150
[  111.693441][ T8869]  netdev_register_kobject+0x1a9/0x3d0
[  111.693455][ T8869]  register_netdevice+0x15b6/0x25a0
[  111.693474][ T8869]  ? __pfx_register_netdevice+0x10/0x10
[  111.693492][ T8869]  register_vlan_dev+0x36c/0x910
[  111.693511][ T8869]  ? vlan_changelink+0x2c3/0x5e0
[  111.693524][ T8869]  vlan_newlink+0x48c/0x750
[  111.693537][ T8869]  ? __pfx_vlan_newlink+0x10/0x10
[  111.693549][ T8869]  rtnl_newlink+0x1499/0x2380
[  111.693568][ T8869]  ? __pfx_rtnl_newlink+0x10/0x10
[  111.693582][ T8869]  ? find_held_lock+0x2b/0x80
[  111.693591][ T8869]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  111.693605][ T8869]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  111.693620][ T8869]  ? avc_has_perm_noaudit+0x145/0x3b0
[  111.693644][ T8869]  ? find_held_lock+0x2b/0x80
[  111.693653][ T8869]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  111.693667][ T8869]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  111.693683][ T8869]  ? __pfx_rtnl_newlink+0x10/0x10
[  111.693698][ T8869]  rtnetlink_rcv_msg+0x95e/0xe90
[  111.693714][ T8869]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.693733][ T8869]  ? ref_tracker_free+0x37e/0x6c0
[  111.693752][ T8869]  netlink_rcv_skb+0x159/0x420
[  111.693764][ T8869]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.693779][ T8869]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  111.693796][ T8869]  ? netlink_deliver_tap+0x1ae/0xcc0
[  111.693809][ T8869]  netlink_unicast+0x585/0x850
[  111.693822][ T8869]  ? __pfx_netlink_unicast+0x10/0x10
[  111.693838][ T8869]  netlink_sendmsg+0x8b0/0xda0
[  111.693851][ T8869]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.693864][ T8869]  ? selinux_socket_sendmsg+0x198/0x2f0
[  111.693882][ T8869]  ____sys_sendmsg+0xa4d/0xbe0
[  111.693899][ T8869]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.693911][ T8869]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.693934][ T8869]  ___sys_sendmsg+0x190/0x1e0
[  111.693946][ T8869]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.693956][ T8869]  ? __lock_acquire+0x49f/0x1a40
[  111.693969][ T8869]  ? get_pid_task+0x106/0x250
[  111.693994][ T8869]  __sys_sendmsg+0x160/0x210
[  111.694009][ T8869]  ? __pfx___sys_sendmsg+0x10/0x10
[  111.694030][ T8869]  do_syscall_64+0x115/0x870
[  111.694044][ T8869]  ? clear_bhb_loop+0x40/0x90
[  111.694057][ T8869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.694068][ T8869] RIP: 0033:0x7f4863b9e019
[  111.694077][ T8869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.694088][ T8869] RSP: 002b:00007f4864a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.694099][ T8869] RAX: ffffffffffffffda RBX: 00007f4863e25fa0 RCX: 00007f4863b9e019
[  111.694106][ T8869] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000006
[  111.694112][ T8869] RBP: 00007f4864a82090 R08: 0000000000000000 R09: 0000000000000000
[  111.694118][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  111.694125][ T8869] R13: 00007f4863e26038 R14: 00007f4863e25fa0 R15: 00007fffca7c4748
[  111.694138][ T8869]  </TASK>
[  111.773764][ T8873] trusted_key: encrypted_key: keylen parameter is missing
[  112.099041][ T8891] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  112.297112][ T8899] netlink: 'syz.0.895': attribute type 1 has an invalid length.
[  112.316004][ T8899] 8021q: adding VLAN 0 to HW filter on device bond13
[  112.320123][ T8901] netlink: 'syz.2.896': attribute type 1 has an invalid length.
[  112.347001][ T8901] 8021q: adding VLAN 0 to HW filter on device bond8
[  112.355612][ T8899] bond10: (slave veth0_to_bond): Releasing backup interface
[  112.364117][ T8899] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  112.375439][ T8901] bond0: (slave veth0_to_bond): Releasing backup interface
[  112.381169][ T8901] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  112.382413][ T5785] usb 8-1: USB disconnect, device number 4
[  112.406303][ T5785] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  112.423220][ T5785] spcp8x5 8-1:1.0: device disconnected
[  112.490726][ T8905] hpfs: Bad magic ... probably not HPFS
[  112.532017][ T8905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  112.648423][ T8913] netlink: 'syz.2.900': attribute type 10 has an invalid length.
[  112.916682][ T8925] syzkaller0: entered promiscuous mode
[  112.918738][ T8925] syzkaller0: entered allmulticast mode
[  112.941505][ T8928] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  113.111751][ T8943] netlink: 232 bytes leftover after parsing attributes in process `syz.0.906'.
[  113.191895][ T8945] Attempt to restore checkpoint with obsolete wellknown handles
[  113.288435][ T8951] --map-set only usable from mangle table
[  113.435570][ T8957] ufs: You didn't specify the type of your ufs filesystem
[  113.435570][ T8957] 
[  113.435570][ T8957] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  113.435570][ T8957] 
[  113.435570][ T8957] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  113.448316][ T8960] netlink: 'syz.3.913': attribute type 1 has an invalid length.
[  113.452143][ T8957] ufs: failed to set blocksize
[  113.461189][ T8960] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.469594][ T8960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8960 comm=syz.3.913
[  113.475285][ T8960] netlink: 'syz.3.913': attribute type 10 has an invalid length.
[  113.478612][ T8960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.913'.
[  113.518655][ T8957] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.911'.
[  113.685760][ T8977] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[  113.734844][ T5785] dummy0: entered promiscuous mode
[  114.007467][ T9002] FAULT_INJECTION: forcing a failure.
[  114.007467][ T9002] name failslab, interval 1, probability 0, space 0, times 0
[  114.012627][ T9002] CPU: 3 UID: 0 PID: 9002 Comm: syz.5.927 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  114.012660][ T9002] Tainted: [L]=SOFTLOCKUP
[  114.012664][ T9002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  114.012671][ T9002] Call Trace:
[  114.012690][ T9002]  <TASK>
[  114.012695][ T9002]  dump_stack_lvl+0x100/0x190
[  114.012767][ T9002]  should_fail_ex.cold+0x5/0xa
[  114.012800][ T9002]  should_failslab+0xc2/0x120
[  114.012825][ T9002]  __kvmalloc_node_noprof+0x116/0x970
[  114.012839][ T9002]  ? __lock_acquire+0x49f/0x1a40
[  114.012863][ T9002]  ? __kvm_mmu_topup_memory_cache+0x455/0x5f0
[  114.012880][ T9002]  __kvm_mmu_topup_memory_cache+0x455/0x5f0
[  114.012897][ T9002]  mmu_topup_memory_caches+0x25/0x170
[  114.012914][ T9002]  kvm_mmu_load+0xe2/0x2570
[  114.012929][ T9002]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  114.012941][ T9002]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  114.012954][ T9002]  ? __pfx_kvm_mmu_load+0x10/0x10
[  114.012967][ T9002]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  114.012980][ T9002]  ? kvm_check_and_inject_events+0x873/0x12a0
[  114.012995][ T9002]  ? record_steal_time+0x3a0/0xbb0
[  114.013009][ T9002]  vcpu_run+0x3aaa/0x5de0
[  114.013030][ T9002]  ? __pfx_vcpu_run+0x10/0x10
[  114.013050][ T9002]  ? rcu_is_watching+0x12/0xc0
[  114.013069][ T9002]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  114.013085][ T9002]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  114.013105][ T9002]  kvm_vcpu_ioctl+0x730/0x1700
[  114.013118][ T9002]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  114.013130][ T9002]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  114.013148][ T9002]  ? do_vfs_ioctl+0x226/0x13e0
[  114.013168][ T9002]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  114.013184][ T9002]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  114.013224][ T9002]  ? __fget_files+0x215/0x3d0
[  114.013235][ T9002]  ? hook_file_ioctl_common+0x140/0x440
[  114.013252][ T9002]  ? selinux_file_ioctl+0x13b/0x290
[  114.013268][ T9002]  ? selinux_file_ioctl+0xb6/0x290
[  114.013285][ T9002]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  114.013298][ T9002]  __x64_sys_ioctl+0x18e/0x210
[  114.013314][ T9002]  do_syscall_64+0x115/0x870
[  114.013355][ T9002]  ? clear_bhb_loop+0x40/0x90
[  114.013374][ T9002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.013390][ T9002] RIP: 0033:0x7fe7fb99e019
[  114.013424][ T9002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.013435][ T9002] RSP: 002b:00007fe7fc809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  114.013456][ T9002] RAX: ffffffffffffffda RBX: 00007fe7fbc25fa0 RCX: 00007fe7fb99e019
[  114.013463][ T9002] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  114.013469][ T9002] RBP: 00007fe7fc809090 R08: 0000000000000000 R09: 0000000000000000
[  114.013475][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.013482][ T9002] R13: 00007fe7fbc26038 R14: 00007fe7fbc25fa0 R15: 00007ffe229865c8
[  114.013496][ T9002]  </TASK>
[  114.122717][ T8945] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  114.248554][ T9018] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  114.256556][ T9018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.296871][   T42] kauditd_printk_skb: 29 callbacks suppressed
[  114.296889][   T42] audit: type=1400 audit(1785876665.468:989): avc:  denied  { write } for  pid=9021 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.423001][ T9032] FAULT_INJECTION: forcing a failure.
[  114.423001][ T9032] name failslab, interval 1, probability 0, space 0, times 0
[  114.428459][ T9032] CPU: 2 UID: 0 PID: 9032 Comm: syz.2.932 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  114.428486][ T9032] Tainted: [L]=SOFTLOCKUP
[  114.428492][ T9032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  114.428502][ T9032] Call Trace:
[  114.428533][ T9032]  <TASK>
[  114.428540][ T9032]  dump_stack_lvl+0x100/0x190
[  114.428639][ T9032]  should_fail_ex.cold+0x5/0xa
[  114.428681][ T9032]  should_failslab+0xc2/0x120
[  114.428721][ T9032]  __kmalloc_cache_noprof+0x91/0x6c0
[  114.428750][ T9032]  ? sctp_add_bind_addr+0xae/0x3e0
[  114.428810][ T9032]  sctp_add_bind_addr+0xae/0x3e0
[  114.428835][ T9032]  sctp_copy_local_addr_list+0x349/0x550
[  114.428863][ T9032]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  114.428888][ T9032]  ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360
[  114.428915][ T9032]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  114.428946][ T9032]  sctp_bind_addr_copy+0xe0/0x530
[  114.428972][ T9032]  sctp_connect_new_asoc+0x1c9/0x770
[  114.428992][ T9032]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  114.429013][ T9032]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  114.429037][ T9032]  __sctp_connect+0x3e7/0xc70
[  114.429060][ T9032]  ? __pfx___sctp_connect+0x10/0x10
[  114.429079][ T9032]  ? __pfx_sctp_inet_connect+0x10/0x10
[  114.429098][ T9032]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  114.429120][ T9032]  ? __pfx_sctp_inet_connect+0x10/0x10
[  114.429141][ T9032]  sctp_inet_connect+0x15f/0x220
[  114.429161][ T9032]  __sys_connect_file+0x141/0x1a0
[  114.429215][ T9032]  __sys_connect+0x141/0x170
[  114.429234][ T9032]  ? __pfx___sys_connect+0x10/0x10
[  114.429252][ T9032]  ? __fget_files+0x21f/0x3d0
[  114.429284][ T9032]  ? __pfx_ksys_write+0x10/0x10
[  114.429306][ T9032]  __x64_sys_connect+0x72/0xb0
[  114.429324][ T9032]  ? lockdep_hardirqs_on+0x78/0x100
[  114.429353][ T9032]  do_syscall_64+0x115/0x870
[  114.429373][ T9032]  ? clear_bhb_loop+0x40/0x90
[  114.429421][ T9032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.429440][ T9032] RIP: 0033:0x7f4863b9e019
[  114.429456][ T9032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.429472][ T9032] RSP: 002b:00007f4864a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  114.429503][ T9032] RAX: ffffffffffffffda RBX: 00007f4863e25fa0 RCX: 00007f4863b9e019
[  114.429514][ T9032] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000003
[  114.429524][ T9032] RBP: 00007f4864a82090 R08: 0000000000000000 R09: 0000000000000000
[  114.429534][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.429560][ T9032] R13: 00007f4863e26038 R14: 00007f4863e25fa0 R15: 00007fffca7c4748
[  114.429584][ T9032]  </TASK>
[  114.610687][ T9037] netlink: 92 bytes leftover after parsing attributes in process `syz.2.935'.
[  114.678992][   T65] Bluetooth: unknown link type 18
[  114.681729][   T65] Bluetooth: hci2: connection err: -111
[  114.715816][   T42] audit: type=1400 audit(1785876665.871:990): avc:  denied  { read } for  pid=9046 comm="syz.3.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  114.814672][ T9051] kvm: pic: non byte write
[  114.818412][ T9051] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer.
[  114.929114][   T65] Bluetooth: hci3: command 0x2016 tx timeout
[  114.959213][ T9061] FAULT_INJECTION: forcing a failure.
[  114.959213][ T9061] name failslab, interval 1, probability 0, space 0, times 0
[  114.969325][ T9061] CPU: 2 UID: 0 PID: 9061 Comm: syz.0.943 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  114.969359][ T9061] Tainted: [L]=SOFTLOCKUP
[  114.969365][ T9061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  114.969377][ T9061] Call Trace:
[  114.969417][ T9061]  <TASK>
[  114.969426][ T9061]  dump_stack_lvl+0x100/0x190
[  114.969457][ T9061]  should_fail_ex.cold+0x5/0xa
[  114.969481][ T9061]  should_failslab+0xc2/0x120
[  114.969506][ T9061]  __kmalloc_cache_noprof+0x91/0x6c0
[  114.969538][ T9061]  ? sctp_auth_shkey_create+0x9e/0x210
[  114.969570][ T9061]  sctp_auth_shkey_create+0x9e/0x210
[  114.969599][ T9061]  sctp_auth_asoc_copy_shkeys+0x1f2/0x360
[  114.969631][ T9061]  sctp_association_new+0x19ab/0x2990
[  114.969656][ T9061]  sctp_connect_new_asoc+0x1a8/0x770
[  114.969678][ T9061]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  114.969707][ T9061]  sctp_sendmsg+0x1743/0x22e0
[  114.969733][ T9061]  ? __pfx_sctp_sendmsg+0x10/0x10
[  114.969750][ T9061]  ? sock_has_perm+0x25a/0x2f0
[  114.969806][ T9061]  ? __pfx_sock_has_perm+0x10/0x10
[  114.969845][ T9061]  ? __pfx_sctp_sendmsg+0x10/0x10
[  114.969865][ T9061]  inet_sendmsg+0x11c/0x140
[  114.969902][ T9061]  ____sys_sendmsg+0x9c9/0xbe0
[  114.969930][ T9061]  ? __pfx_inet_sendmsg+0x10/0x10
[  114.969956][ T9061]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.969989][ T9061]  ? __pfx__kstrtoull+0x10/0x10
[  114.970016][ T9061]  ___sys_sendmsg+0x190/0x1e0
[  114.970037][ T9061]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.970068][ T9061]  ? find_held_lock+0x2b/0x80
[  114.970108][ T9061]  __sys_sendmmsg+0x20c/0x440
[  114.970136][ T9061]  ? __pfx___sys_sendmmsg+0x10/0x10
[  114.970164][ T9061]  ? ksys_write+0x190/0x250
[  114.970199][ T9061]  ? fput+0x79/0x100
[  114.970221][ T9061]  ? ksys_write+0x1ac/0x250
[  114.970237][ T9061]  ? __pfx_ksys_write+0x10/0x10
[  114.970257][ T9061]  __x64_sys_sendmmsg+0x9c/0x100
[  114.970280][ T9061]  ? lockdep_hardirqs_on+0x78/0x100
[  114.970304][ T9061]  do_syscall_64+0x115/0x870
[  114.970326][ T9061]  ? clear_bhb_loop+0x40/0x90
[  114.970349][ T9061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.970367][ T9061] RIP: 0033:0x7f74cb99e019
[  114.970383][ T9061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.970401][ T9061] RSP: 002b:00007f74cc806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  114.970429][ T9061] RAX: ffffffffffffffda RBX: 00007f74cbc25fa0 RCX: 00007f74cb99e019
[  114.970440][ T9061] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003
[  114.970451][ T9061] RBP: 00007f74cc806090 R08: 0000000000000000 R09: 0000000000000000
[  114.970463][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.970473][ T9061] R13: 00007f74cbc26038 R14: 00007f74cbc25fa0 R15: 00007ffdc5faf018
[  114.970499][ T9061]  </TASK>
[  115.159147][   T42] audit: type=1400 audit(1785876666.273:991): avc:  denied  { write } for  pid=9071 comm="syz.0.946" name="/" dev="9p" ino=76043861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  115.356441][   T65] Bluetooth: hci0: command 0x0401 tx timeout
[  115.463890][ T9079] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20004
[  115.519549][ T9079] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  115.551741][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.554976][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.720092][ T9082] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  115.774566][ T9079] netlink: 'syz.0.949': attribute type 64 has an invalid length.
[  115.776992][ T9079] netlink: 'syz.0.949': attribute type 4 has an invalid length.
[  115.779313][ T9079] netlink: 152 bytes leftover after parsing attributes in process `syz.0.949'.
[  116.027084][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'.
[  116.067133][ T9093] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.955'.
[  116.068975][ T9094] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.955'.
[  116.074021][ T9093] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.955'.
[  116.139077][ T9099] device-mapper: table: 248:0: zero-length target
[  116.141222][ T9099] device-mapper: ioctl: error adding target to table
[  116.198930][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'.
[  116.414611][ T1361] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  116.440455][   T42] audit: type=1400 audit(1785876667.480:992): avc:  denied  { create } for  pid=9109 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  116.518830][   T42] audit: type=1400 audit(1785876667.546:993): avc:  denied  { rename } for  pid=9111 comm="syz.0.961" name="file0" dev="tmpfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  116.564945][ T1361] usb 7-1: device descriptor read/64, error -71
[  116.631002][ T9116] 8021q: VLANs not supported on ip_vti0
[  116.689601][ T9118] bond0: entered promiscuous mode
[  116.691416][ T9118] bond_slave_0: entered promiscuous mode
[  116.693599][ T9118] bond_slave_1: entered promiscuous mode
[  116.699456][ T9118] gretap0: entered promiscuous mode
[  116.701897][ T9118] debugfs: 'hsr0' already exists in 'hsr'
[  116.704851][ T9118] Cannot create hsr debugfs directory
[  116.708374][ T9118] hsr0: entered promiscuous mode
[  116.716190][ T9118] nbd: must specify a device to reconfigure
[  116.726028][ T9118] team0: Port device team_slave_0 removed
[  116.811287][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.814594][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.852630][ T1361] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  117.012937][ T1361] usb 7-1: device descriptor read/64, error -71
[  117.033093][ T9129] PID 9129 killed due to inadequate hugepage pool
[  117.100352][ T9135] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  117.130784][ T1361] usb usb7-port1: attempt power cycle
[  117.144231][   T65] Bluetooth: hci3: command 0x2016 tx timeout
[  117.365432][   T42] audit: type=1400 audit(1785876668.341:994): avc:  denied  { load_policy } for  pid=9147 comm="syz.5.974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  117.370987][ T9148] SELinux:  unknown common 
[  117.373132][ T9148] SELinux:  invalid class
[  117.376682][ T9148] SELinux: failed to load policy
[  117.476084][   T56] IPVS: starting estimator thread 0...
[  117.526474][ T1361] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  117.559010][ T1361] usb 7-1: device descriptor read/8, error -71
[  117.580623][ T9154] IPVS: using max 30 ests per chain, 72000 per kthread
[  117.625813][   T42] audit: type=1400 audit(1785876668.584:995): avc:  denied  { write } for  pid=9161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.669902][   T42] audit: type=1400 audit(1785876668.622:996): avc:  denied  { connect } for  pid=9162 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  117.706133][   T42] audit: type=1400 audit(1785876668.659:997): avc:  denied  { write } for  pid=9169 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.720928][ T9167] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  117.814207][ T1361] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  117.836431][ T1361] usb 7-1: device descriptor read/8, error -71
[  117.879354][   T42] audit: type=1400 audit(1785876668.828:998): avc:  denied  { write } for  pid=9178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.955255][ T1361] usb usb7-port1: unable to enumerate USB device
[  118.357951][ T9189] netlink: Unknown conntrack attr (0)
[  118.370125][ T9189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.549735][ T9199] netlink: 'syz.5.984': attribute type 1 has an invalid length.
[  118.568714][ T9199] gretap1: entered allmulticast mode
[  118.574236][ T9199] bond1: (slave gretap1): making interface the new active one
[  118.578057][ T9199] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  118.657517][ T9209] __nla_validate_parse: 2 callbacks suppressed
[  118.657530][ T9209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.988'.
[  118.814282][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.821133][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.022116][ T1361] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  119.171461][ T1361] usb 7-1: device descriptor read/64, error -71
[  119.419895][ T9240] device-mapper: table: 248:0: : unknown target type
[  119.422181][ T9240] device-mapper: ioctl: error adding target to table
[  119.529760][ T9252] bridge_slave_0: left allmulticast mode
[  119.531685][ T9252] bridge_slave_0: left promiscuous mode
[  119.533633][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.535163][ T9255] Cannot find del_set index 0 as target
[  119.554552][ T9252] bridge_slave_1: left promiscuous mode
[  119.561770][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.570379][ T9252] bond8: (slave veth0_to_bond): Releasing backup interface
[  119.581693][ T9252] bond0: (slave bond_slave_0): Releasing backup interface
[  119.589237][ T9252] bond0: (slave bond_slave_1): Releasing backup interface
[  119.615291][ T9252] team0: Port device team_slave_0 removed
[  119.626087][ T9252] team0: Port device team_slave_1 removed
[  119.631675][ T9252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.635539][ T9252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.640666][ T9252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.645158][ T9252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.650337][ T9252] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  119.668340][ T9259] team0: Port device xfrm0 added
[  119.670106][ T9262] tipc: Started in network mode
[  119.671863][ T9262] tipc: Node identity 36a86472bd09, cluster identity 4711
[  119.676691][ T9262] tipc: Enabled bearer <eth:team0>, priority 0
[  119.681555][ T9264] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1002'.
[  119.699857][ T9266] FAULT_INJECTION: forcing a failure.
[  119.699857][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.704279][ T9266] CPU: 1 UID: 0 PID: 9266 Comm: syz.5.1003 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  119.704305][ T9266] Tainted: [L]=SOFTLOCKUP
[  119.704310][ T9266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  119.704320][ T9266] Call Trace:
[  119.704345][ T9266]  <TASK>
[  119.704352][ T9266]  dump_stack_lvl+0x100/0x190
[  119.704421][ T9266]  should_fail_ex.cold+0x5/0xa
[  119.704441][ T9266]  _copy_from_user+0x2e/0xd0
[  119.704475][ T9266]  ctl_ioctl+0x89f/0xcd0
[  119.704514][ T9266]  ? __pfx_table_load+0x10/0x10
[  119.704530][ T9266]  ? __pfx_ctl_ioctl+0x10/0x10
[  119.704557][ T9266]  ? selinux_file_ioctl+0x13b/0x290
[  119.704579][ T9266]  ? selinux_file_ioctl+0xb6/0x290
[  119.704597][ T9266]  dm_ctl_ioctl+0x22/0x30
[  119.704610][ T9266]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  119.704623][ T9266]  __x64_sys_ioctl+0x18e/0x210
[  119.704652][ T9266]  do_syscall_64+0x115/0x870
[  119.704690][ T9266]  ? clear_bhb_loop+0x40/0x90
[  119.704704][ T9266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.704717][ T9266] RIP: 0033:0x7fe7fb99e019
[  119.704727][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.704738][ T9266] RSP: 002b:00007fe7fc809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  119.704755][ T9266] RAX: ffffffffffffffda RBX: 00007fe7fbc25fa0 RCX: 00007fe7fb99e019
[  119.704762][ T9266] RDX: 0000200000002000 RSI: 00000000c138fd09 RDI: 0000000000000003
[  119.704768][ T9266] RBP: 00007fe7fc809090 R08: 0000000000000000 R09: 0000000000000000
[  119.704775][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.704781][ T9266] R13: 00007fe7fbc26038 R14: 00007fe7fbc25fa0 R15: 00007ffe229865c8
[  119.704794][ T9266]  </TASK>
[  119.803924][ T9276] syzkaller1: entered promiscuous mode
[  119.805711][ T9276] syzkaller1: entered allmulticast mode
[  119.841066][   T65] Bluetooth: hci1: Malformed HCI Event: 0x22
[  119.897463][   T42] kauditd_printk_skb: 6 callbacks suppressed
[  119.897475][   T42] audit: type=1400 audit(1785876670.709:1005): avc:  denied  { map } for  pid=9280 comm="syz.0.1010" path="socket:[29150]" dev="sockfs" ino=29150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  120.040674][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.043597][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.046771][ T9283] kvm: pic: non byte write
[  120.053290][ T9283] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer.
[  120.106857][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'.
[  120.308112][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.314282][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.441694][   T42] audit: type=1400 audit(1785876671.214:1006): avc:  denied  { write } for  pid=9296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.476765][ T5816] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.481061][ T5816] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.484627][ T5816] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.488739][ T5816] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.498672][   T42] audit: type=1400 audit(1785876671.279:1007): avc:  denied  { write } for  pid=9300 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.561384][   T42] audit: type=1400 audit(1785876671.336:1008): avc:  denied  { read write } for  pid=9301 comm="syz.5.1017" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  120.574682][   T42] audit: type=1400 audit(1785876671.336:1009): avc:  denied  { open } for  pid=9301 comm="syz.5.1017" path="/86/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  120.613993][   T42] audit: type=1400 audit(1785876671.373:1010): avc:  denied  { write } for  pid=9306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.686036][   T42] audit: type=1400 audit(1785876671.448:1011): avc:  denied  { write } for  pid=9314 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  120.764693][ T9321] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  120.798845][ T9317] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[  120.808506][ T9317] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref]
[  120.811767][ T9317] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]
[  120.815553][ T9317] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff]
[  120.819369][ T9317] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  120.821559][ T9326] trusted_key: encrypted_key: insufficient parameters specified
[  120.844721][ T9317] pci 0000:00:01.0: Adding to iommu group 1
[  120.866940][ T9317] pci 0000:00:01.0: vgaarb: bridge control possible
[  120.870043][ T9317] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
[  120.882027][ T9317] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned
[  120.889200][ T9317] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref]: assigned
[  120.892985][ T9317] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned
[  120.898474][ T9317] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff]: assigned
[  120.908371][ T9317] virtio-pci 0000:00:01.0: enabling device (0100 -> 0102)
[  120.911548][ T5845] tipc: Node number set to 2342610034
[  120.983239][ T9317] [drm] pci: virtio-vga detected at 0000:00:01.0
[  120.989348][ T9317] [drm] features: -virgl +edid -resource_blob -host_visible
[  120.989392][ T9317] [drm] features: -context_init -blob_alignment
[  121.006878][ T9317] [drm] number of scanouts: 1
[  121.008588][ T9317] [drm] number of cap sets: 0
[  121.035600][ T9317] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2
[  121.095945][ T9317] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device
[  121.142848][   T42] audit: type=1400 audit(1785876671.878:1012): avc:  denied  { write } for  pid=9335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.191689][   T42] audit: type=1400 audit(1785876671.925:1013): avc:  denied  { write } for  pid=9338 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.649169][   T42] audit: type=1400 audit(1785876672.346:1014): avc:  denied  { write } for  pid=9348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.679438][ T9357] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  121.736532][ T5785] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  121.816109][ T9368] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  121.889026][ T9372] netlink: 'syz.3.1032': attribute type 1 has an invalid length.
[  121.897069][ T5785] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  121.901188][ T5785] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  121.904121][ T5785] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  121.907691][ T5785] usb 10-1: config 0 interface 0 has no altsetting 0
[  121.910728][ T5785] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  121.913632][ T5785] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  121.917944][ T5785] usb 10-1: config 0 interface 0 has no altsetting 0
[  121.920960][ T5785] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  121.923861][ T5785] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  121.927265][ T5785] usb 10-1: config 0 interface 0 has no altsetting 0
[  121.931808][ T5785] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  121.935486][ T5785] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  121.940215][ T5785] usb 10-1: config 0 interface 0 has no altsetting 0
[  121.943930][ T5785] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  121.946828][ T5785] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  121.950344][ T5785] usb 10-1: config 0 interface 0 has no altsetting 0
[  121.953398][ T5785] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  121.956213][ T5785] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  121.959546][ T5785] usb 10-1: config 0 interface 0 has no altsetting 0
[  121.962875][ T5785] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  121.966996][ T5785] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  121.970680][ T5785] usb 10-1: config 0 interface 0 has no altsetting 0
[  121.973987][ T5785] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  121.976901][ T5785] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  121.980337][ T5785] usb 10-1: config 0 interface 0 has no altsetting 0
[  121.986137][ T5785] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  121.989138][ T5785] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  121.994344][ T5785] usb 10-1: Product: syz
[  121.998138][ T5785] usb 10-1: Manufacturer: syz
[  121.999642][ T5785] usb 10-1: SerialNumber: syz
[  122.005690][ T5785] usb 10-1: config 0 descriptor??
[  122.016365][ T5785] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[  122.060022][ T9377] zram0: detected capacity change from 0 to 8
[  122.065778][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1036'.
[  122.078633][ T9376] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  122.129180][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'.
[  122.156416][ T9380] jffs2: notice: (9380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  122.226207][ T5785] usb 10-1: USB disconnect, device number 2
[  122.236187][ T5785] yurex 10-1:0.0: USB YUREX #0 now disconnected
[  122.272997][ T9286] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  122.462643][   T41] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  122.601574][   T41] usb 7-1: device descriptor read/64, error -71
[  122.844545][ T9392] netlink: 'syz.5.1041': attribute type 1 has an invalid length.
[  122.858036][   T41] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  122.890227][ T9394] 9p: Bad value for 'wfdno'
[  122.931912][ T9398] bridge_slave_0: left allmulticast mode
[  122.935002][ T9398] bridge_slave_0: left promiscuous mode
[  122.937836][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.943722][ T9386] FAULT_INJECTION: forcing a failure.
[  122.943722][ T9386] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.946517][ T9398] bridge_slave_1: left allmulticast mode
[  122.949377][ T9386] CPU: 1 UID: 0 PID: 9386 Comm: syz.3.1039 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  122.949402][ T9386] Tainted: [L]=SOFTLOCKUP
[  122.949408][ T9386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  122.949419][ T9386] Call Trace:
[  122.949445][ T9386]  <TASK>
[  122.949452][ T9386]  dump_stack_lvl+0x100/0x190
[  122.949589][ T9386]  should_fail_ex.cold+0x5/0xa
[  122.949620][ T9386]  _copy_to_user+0x32/0xd0
[  122.949689][ T9386]  simple_read_from_buffer+0xcb/0x170
[  122.949726][ T9386]  proc_fail_nth_read+0x1af/0x230
[  122.949752][ T9386]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  122.949779][ T9386]  ? rw_verify_area+0xce/0x6d0
[  122.949804][ T9386]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  122.949830][ T9386]  vfs_read+0x1e4/0xb40
[  122.949859][ T9386]  ? __pfx_vfs_read+0x10/0x10
[  122.949882][ T9386]  ? __fget_files+0x215/0x3d0
[  122.949906][ T9386]  ? __fget_files+0x21f/0x3d0
[  122.949930][ T9386]  ksys_read+0x12a/0x250
[  122.949956][ T9386]  ? __pfx_ksys_read+0x10/0x10
[  122.949987][ T9386]  do_syscall_64+0x115/0x870
[  122.950066][ T9386]  ? clear_bhb_loop+0x40/0x90
[  122.950094][ T9386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.950110][ T9386] RIP: 0033:0x7f439ff5e84e
[  122.950124][ T9386] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  122.950140][ T9386] RSP: 002b:00007f43a0f06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  122.950166][ T9386] RAX: ffffffffffffffda RBX: 00007f43a0f076c0 RCX: 00007f439ff5e84e
[  122.950177][ T9386] RDX: 000000000000000f RSI: 00007f43a0f070a0 RDI: 0000000000000003
[  122.950188][ T9386] RBP: 00007f43a0f07090 R08: 0000000000000000 R09: 0000000000000000
[  122.950198][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  122.950208][ T9386] R13: 00007f43a0226038 R14: 00007f43a0225fa0 R15: 00007ffda11cd348
[  122.950231][ T9386]  </TASK>
[  122.997797][   T41] usb 7-1: device descriptor read/64, error -71
[  122.998563][ T9398] bridge_slave_1: left promiscuous mode
[  123.031061][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.038963][ T9398] bond0: (slave bond_slave_0): Releasing backup interface
[  123.049689][ T9398] bond0: (slave bond_slave_1): Releasing backup interface
[  123.056502][ T9398] team0: Port device team_slave_0 removed
[  123.060511][ T9398] team0: Port device team_slave_1 removed
[  123.063269][ T9398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.066970][ T9398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.070551][ T9398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  123.116573][   T41] usb usb7-port1: attempt power cycle
[  123.249078][   T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  123.435062][   T34] usb 8-1: Using ep0 maxpacket: 16
[  123.438401][   T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  123.443710][   T34] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  123.446862][   T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.449450][   T34] usb 8-1: Product: syz
[  123.450807][   T34] usb 8-1: Manufacturer: syz
[  123.452316][   T34] usb 8-1: SerialNumber: syz
[  123.458728][   T34] usb 8-1: config 0 descriptor??
[  123.463207][   T34] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  123.466207][   T34] em28xx 8-1:0.0: DVB interface 0 found: bulk
[  123.477893][   T41] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  123.500061][   T41] usb 7-1: device descriptor read/8, error -71
[  123.683830][ T5849] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  123.759172][   T41] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  123.777920][   T41] usb 7-1: device descriptor read/8, error -71
[  123.809446][   T65] Bluetooth: hci2: command 0x0406 tx timeout
[  123.856290][ T5849] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  123.860104][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.863539][ T5849] usb 10-1: Product: syz
[  123.865373][ T5849] usb 10-1: Manufacturer: syz
[  123.867373][ T5849] usb 10-1: SerialNumber: syz
[  123.895246][   T41] usb usb7-port1: unable to enumerate USB device
[  123.952712][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'.
[  123.975865][ T9433] tipc: Enabling of bearer <ud#:s> rejected, media not registered
[  124.106690][   T34] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  124.573361][ T9451] pci_bus 0000:01: busn_res: [bus 01] is released
[  124.765504][   T34] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  124.769872][   T34] em28xx 8-1:0.0: board has no eeprom
[  124.820720][ T9472] VFS: file-max limit 0 reached
[  124.835650][   T34] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  124.840454][   T34] em28xx 8-1:0.0: dvb set to bulk mode.
[  124.846216][ T5845] em28xx 8-1:0.0: Binding DVB extension
[  124.848273][   T34] usb 8-1: USB disconnect, device number 5
[  124.857551][   T34] em28xx 8-1:0.0: Disconnecting em28xx
[  124.881214][ T5845] em28xx 8-1:0.0: Registering input extension
[  124.885480][   T34] em28xx 8-1:0.0: Closing input extension
[  124.897279][   T34] em28xx 8-1:0.0: Freeing device
[  124.947495][ T9476] netlink: 'syz.0.1066': attribute type 1 has an invalid length.
[  124.964687][ T9476] bond14: entered allmulticast mode
[  125.163376][ T5849] usb 10-1: USB disconnect, device number 3
[  125.325104][ T9484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1068'.
[  125.325135][   T42] kauditd_printk_skb: 20 callbacks suppressed
[  125.325146][   T42] audit: type=1400 audit(1785876675.790:1035): avc:  denied  { write } for  pid=9482 comm="syz.0.1068" name="functions" dev="configfs" ino=10664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  125.334240][  T848] usb 5-1: USB disconnect, device number 5
[  125.340551][   T42] audit: type=1400 audit(1785876675.790:1036): avc:  denied  { write } for  pid=9482 comm="syz.0.1068" name="c.1" dev="configfs" ino=10081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  125.347435][   T42] audit: type=1400 audit(1785876675.790:1037): avc:  denied  { write } for  pid=9482 comm="syz.0.1068" name="c.1" dev="configfs" ino=10081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  125.394643][ T9486] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  125.401529][ T9486] FAULT_INJECTION: forcing a failure.
[  125.401529][ T9486] name failslab, interval 1, probability 0, space 0, times 0
[  125.406260][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.3.1069 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  125.406286][ T9486] Tainted: [L]=SOFTLOCKUP
[  125.406305][ T9486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  125.406317][ T9486] Call Trace:
[  125.406336][ T9486]  <TASK>
[  125.406343][ T9486]  dump_stack_lvl+0x100/0x190
[  125.406430][ T9486]  should_fail_ex.cold+0x5/0xa
[  125.406460][ T9486]  should_failslab+0xc2/0x120
[  125.406497][ T9486]  kmem_cache_alloc_noprof+0x91/0x6a0
[  125.406519][ T9486]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  125.406546][ T9486]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  125.406573][ T9486]  mmu_topup_memory_caches+0x25/0x170
[  125.406599][ T9486]  kvm_mmu_load+0xe2/0x2570
[  125.406621][ T9486]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  125.406639][ T9486]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  125.406657][ T9486]  ? vmx_get_rflags+0x104/0x440
[  125.406674][ T9486]  ? kvm_apic_accept_pic_intr+0xdf/0x1b0
[  125.406690][ T9486]  ? __pfx_kvm_mmu_load+0x10/0x10
[  125.406716][ T9486]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  125.406736][ T9486]  ? kvm_check_and_inject_events+0x873/0x12a0
[  125.406759][ T9486]  ? record_steal_time+0x3a0/0xbb0
[  125.406781][ T9486]  vcpu_run+0x3aaa/0x5de0
[  125.406811][ T9486]  ? __pfx_vcpu_run+0x10/0x10
[  125.406842][ T9486]  ? rcu_is_watching+0x12/0xc0
[  125.406882][ T9486]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  125.406905][ T9486]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  125.406934][ T9486]  kvm_vcpu_ioctl+0x730/0x1700
[  125.406955][ T9486]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  125.406973][ T9486]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  125.406996][ T9486]  ? do_vfs_ioctl+0x226/0x13e0
[  125.407026][ T9486]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  125.407050][ T9486]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  125.407110][ T9486]  ? __fget_files+0x215/0x3d0
[  125.407127][ T9486]  ? hook_file_ioctl_common+0x140/0x440
[  125.407152][ T9486]  ? selinux_file_ioctl+0x13b/0x290
[  125.407176][ T9486]  ? selinux_file_ioctl+0xb6/0x290
[  125.407201][ T9486]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  125.407220][ T9486]  __x64_sys_ioctl+0x18e/0x210
[  125.407246][ T9486]  do_syscall_64+0x115/0x870
[  125.407304][ T9486]  ? clear_bhb_loop+0x40/0x90
[  125.407326][ T9486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.407342][ T9486] RIP: 0033:0x7f439ff9e019
[  125.407357][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.407373][ T9486] RSP: 002b:00007f43a0f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  125.407391][ T9486] RAX: ffffffffffffffda RBX: 00007f43a0225fa0 RCX: 00007f439ff9e019
[  125.407401][ T9486] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  125.407412][ T9486] RBP: 00007f43a0f07090 R08: 0000000000000000 R09: 0000000000000000
[  125.407422][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.407432][ T9486] R13: 00007f43a0226038 R14: 00007f43a0225fa0 R15: 00007ffda11cd348
[  125.407455][ T9486]  </TASK>
[  125.458498][  T848] ==================================================================
[  125.514056][  T848] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670
[  125.516638][  T848] Write of size 8 at addr ffff88805a930350 by task kworker/0:2/848
[  125.520242][  T848] 
[  125.521269][  T848] CPU: 0 UID: 0 PID: 848 Comm: kworker/0:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  125.521286][  T848] Tainted: [L]=SOFTLOCKUP
[  125.521290][  T848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  125.521298][  T848] Workqueue: usb_hub_wq hub_event
[  125.521355][  T848] Call Trace:
[  125.521363][  T848]  <TASK>
[  125.521370][  T848]  dump_stack_lvl+0x100/0x190
[  125.521391][  T848]  print_report+0x13d/0x4b0
[  125.521411][  T848]  ? __virt_addr_valid+0x239/0x430
[  125.521427][  T848]  ? snd_usb_midi_v2_free+0x52d/0x670
[  125.521438][  T848]  kasan_report+0xdf/0x1c0
[  125.521453][  T848]  ? snd_usb_midi_v2_free+0x52d/0x670
[  125.521466][  T848]  snd_usb_midi_v2_free+0x52d/0x670
[  125.521478][  T848]  ? __pfx_snd_ctl_dev_free+0x10/0x10
[  125.521494][  T848]  snd_usb_midi_v2_free_all+0x85/0xe0
[  125.521507][  T848]  snd_usb_audio_free+0x4e/0x120
[  125.521522][  T848]  ? __pfx_snd_usb_audio_free+0x10/0x10
[  125.521536][  T848]  release_card_device+0xb2/0x1a0
[  125.521547][  T848]  ? __pfx_release_card_device+0x10/0x10
[  125.521557][  T848]  device_release+0xd2/0x270
[  125.521585][  T848]  kobject_put+0x1f7/0x640
[  125.521601][  T848]  ? snd_card_disconnect.part.0+0x443/0x5b0
[  125.521613][  T848]  put_device+0x1f/0x30
[  125.521623][  T848]  snd_card_free_when_closed+0x2b/0x40
[  125.521633][  T848]  usb_audio_disconnect+0x210/0x680
[  125.521649][  T848]  usb_unbind_interface+0x1dd/0x9e0
[  125.521666][  T848]  ? __pfx_usb_unbind_interface+0x10/0x10
[  125.521681][  T848]  device_remove+0x12a/0x180
[  125.521694][  T848]  device_release_driver_internal+0x44e/0x620
[  125.521710][  T848]  bus_remove_device+0x2bc/0x560
[  125.521723][  T848]  ? __pfx_bus_remove_device+0x10/0x10
[  125.521735][  T848]  ? __pfx_device_remove_attrs+0x10/0x10
[  125.521749][  T848]  device_del+0x376/0x9b0
[  125.521762][  T848]  ? __pfx_device_del+0x10/0x10
[  125.521774][  T848]  ? __pfx___pm_runtime_barrier+0x10/0x10
[  125.521790][  T848]  usb_disable_device+0x367/0x810
[  125.521803][  T848]  ? mark_held_locks+0x40/0x70
[  125.521818][  T848]  usb_disconnect+0x2e2/0x9a0
[  125.521833][  T848]  hub_event+0x1c4f/0x4a60
[  125.521850][  T848]  ? __lock_acquire+0x49f/0x1a40
[  125.521862][  T848]  ? do_raw_spin_unlock+0x145/0x1e0
[  125.521878][  T848]  ? __pfx_hub_event+0x10/0x10
[  125.521890][  T848]  ? debug_object_deactivate+0x2e4/0x3b0
[  125.521909][  T848]  ? rcu_is_watching+0x12/0xc0
[  125.521926][  T848]  process_one_work+0xa23/0x1940
[  125.521940][  T848]  ? __pfx_process_one_work+0x10/0x10
[  125.521953][  T848]  ? __pfx_hub_event+0x10/0x10
[  125.521967][  T848]  worker_thread+0x5ef/0xe50
[  125.521979][  T848]  ? __pfx_worker_thread+0x10/0x10
[  125.521990][  T848]  ? kthread+0x13a/0x450
[  125.522000][  T848]  ? __pfx_worker_thread+0x10/0x10
[  125.522011][  T848]  kthread+0x370/0x450
[  125.522020][  T848]  ? __pfx_kthread+0x10/0x10
[  125.522030][  T848]  ret_from_fork+0x72b/0xd50
[  125.522046][  T848]  ? __pfx_ret_from_fork+0x10/0x10
[  125.522061][  T848]  ? __switch_to+0x800/0x10f0
[  125.522071][  T848]  ? __pfx_kthread+0x10/0x10
[  125.522081][  T848]  ret_from_fork_asm+0x1a/0x30
[  125.522099][  T848]  </TASK>
[  125.522103][  T848] 
[  125.634137][  T848] Allocated by task 1361:
[  125.635856][  T848]  kasan_save_stack+0x30/0x50
[  125.637671][  T848]  kasan_save_track+0x14/0x30
[  125.639470][  T848]  __kasan_kmalloc+0xaa/0xb0
[  125.641252][  T848]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  125.643336][  T848]  snd_ump_endpoint_new+0x93/0x470
[  125.645330][  T848]  create_midi2_ump+0x2dd/0x920
[  125.647220][  T848]  snd_usb_midi_v2_create+0x11fa/0x4070
[  125.649319][  T848]  snd_usb_create_stream.isra.0+0x386/0x4d0
[  125.651693][  T848]  usb_audio_probe+0xf05/0x3b10
[  125.653624][  T848]  usb_probe_interface+0x303/0x8f0
[  125.655667][  T848]  really_probe+0x241/0xa60
[  125.657436][  T848]  __driver_probe_device+0x20e/0x450
[  125.659534][  T848]  driver_probe_device+0x4a/0x140
[  125.661359][  T848]  __device_attach_driver+0x1df/0x320
[  125.663327][  T848]  bus_for_each_drv+0x159/0x1e0
[  125.665259][  T848]  __device_attach+0x1e4/0x4d0
[  125.667219][  T848]  device_initial_probe+0xaf/0xd0
[  125.669231][  T848]  bus_probe_device+0x64/0x160
[  125.671141][  T848]  device_add+0x121d/0x1970
[  125.672956][  T848]  usb_set_configuration+0xd97/0x1c60
[  125.675070][  T848]  usb_generic_driver_probe+0xa1/0xe0
[  125.677150][  T848]  usb_probe_device+0xef/0x400
[  125.679052][  T848]  really_probe+0x241/0xa60
[  125.680835][  T848]  __driver_probe_device+0x20e/0x450
[  125.682915][  T848]  driver_probe_device+0x4a/0x140
[  125.684886][  T848]  __device_attach_driver+0x1df/0x320
[  125.687043][  T848]  bus_for_each_drv+0x159/0x1e0
[  125.688957][  T848]  __device_attach+0x1e4/0x4d0
[  125.690877][  T848]  device_initial_probe+0xaf/0xd0
[  125.692852][  T848]  bus_probe_device+0x64/0x160
[  125.694730][  T848]  device_add+0x121d/0x1970
[  125.696525][  T848]  usb_new_device.cold+0x685/0x115c
[  125.698530][  T848]  hub_event+0x30a3/0x4a60
[  125.700316][  T848]  process_one_work+0xa23/0x1940
[  125.702294][  T848]  worker_thread+0x5ef/0xe50
[  125.704086][  T848]  kthread+0x370/0x450
[  125.705713][  T848]  ret_from_fork+0x72b/0xd50
[  125.707550][  T848]  ret_from_fork_asm+0x1a/0x30
[  125.709446][  T848] 
[  125.710413][  T848] Freed by task 848:
[  125.711938][  T848]  kasan_save_stack+0x30/0x50
[  125.713779][  T848]  kasan_save_track+0x14/0x30
[  125.715631][  T848]  kasan_save_free_info+0x3b/0x70
[  125.717613][  T848]  __kasan_slab_free+0x5f/0x80
[  125.719487][  T848]  kfree+0x22b/0x6c0
[  125.721028][  T848]  snd_rawmidi_dev_free+0x3e/0x60
[  125.723001][  T848]  __snd_device_free+0x1a3/0x300
[  125.724968][  T848]  snd_device_free_all+0xf3/0x220
[  125.726960][  T848]  release_card_device+0x77/0x1a0
[  125.728948][  T848]  device_release+0xd2/0x270
[  125.730748][  T848]  kobject_put+0x1f7/0x640
[  125.732502][  T848]  put_device+0x1f/0x30
[  125.734155][  T848]  snd_card_free_when_closed+0x2b/0x40
[  125.736322][  T848]  usb_audio_disconnect+0x210/0x680
[  125.738349][  T848]  usb_unbind_interface+0x1dd/0x9e0
[  125.740400][  T848]  device_remove+0x12a/0x180
[  125.742208][  T848]  device_release_driver_internal+0x44e/0x620
[  125.744597][  T848]  bus_remove_device+0x2bc/0x560
[  125.746559][  T848]  device_del+0x376/0x9b0
[  125.748282][  T848]  usb_disable_device+0x367/0x810
[  125.750270][  T848]  usb_disconnect+0x2e2/0x9a0
[  125.752133][  T848]  hub_event+0x1c4f/0x4a60
[  125.753898][  T848]  process_one_work+0xa23/0x1940
[  125.755846][  T848]  worker_thread+0x5ef/0xe50
[  125.757655][  T848]  kthread+0x370/0x450
[  125.759258][  T848]  ret_from_fork+0x72b/0xd50
[  125.761080][  T848]  ret_from_fork_asm+0x1a/0x30
[  125.762987][  T848] 
[  125.763931][  T848] The buggy address belongs to the object at ffff88805a930000
[  125.763931][  T848]  which belongs to the cache kmalloc-4k of size 4096
[  125.769297][  T848] The buggy address is located 848 bytes inside of
[  125.769297][  T848]  freed 4096-byte region [ffff88805a930000, ffff88805a931000)
[  125.774629][  T848] 
[  125.775606][  T848] The buggy address belongs to the physical page:
[  125.778104][  T848] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a930
[  125.781532][  T848] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  125.784803][  T848] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  125.787643][  T848] page_type: f5(slab)
[  125.789163][  T848] raw: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122
[  125.792481][  T848] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  125.795854][  T848] head: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122
[  125.799230][  T848] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  125.802505][  T848] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  125.805699][  T848] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  125.808890][  T848] page dumped because: kasan: bad access detected
[  125.811383][  T848] page_owner tracks the page as allocated
[  125.813636][  T848] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 82, tgid 82 (kworker/u33:4), ts 69723481557, free_ts 68250706310
[  125.821432][  T848]  post_alloc_hook+0xfd/0x120
[  125.823273][  T848]  get_page_from_freelist+0xf48/0x3530
[  125.825407][  T848]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  125.827706][  T848]  new_slab+0xa2/0x640
[  125.829309][  T848]  refill_objects+0xe3/0x410
[  125.831158][  T848]  __pcs_replace_empty_main+0x376/0x680
[  125.833301][  T848]  __kmalloc_node_track_caller_noprof+0x679/0x830
[  125.835847][  T848]  kmalloc_reserve+0xe8/0x350
[  125.837725][  T848]  __alloc_skb+0x185/0x710
[  125.839456][  T848]  nsim_dev_trap_report_work+0x2af/0xd20
[  125.841648][  T848]  process_one_work+0xa23/0x1940
[  125.843592][  T848]  worker_thread+0x5ef/0xe50
[  125.845412][  T848]  kthread+0x370/0x450
[  125.847022][  T848]  ret_from_fork+0x72b/0xd50
[  125.848860][  T848]  ret_from_fork_asm+0x1a/0x30
[  125.850142][   T42] audit: type=1400 audit(1785876676.249:1038): avc:  denied  { write } for  pid=9489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.850760][  T848] page last free pid 6543 tgid 6543 stack trace:
[  125.860949][  T848]  __free_frozen_pages+0x79f/0x1090
[  125.863025][  T848]  qlist_free_all+0x47/0xf0
[  125.864826][  T848]  kasan_quarantine_reduce+0x1a0/0x1f0
[  125.866976][  T848]  __kasan_slab_alloc+0x69/0x90
[  125.868895][  T848]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  125.871028][  T848]  do_getname+0x35/0x390
[  125.872717][  T848]  do_sys_openat2+0xc7/0x1e0
[  125.874532][  T848]  __x64_sys_openat+0x12d/0x210
[  125.876459][  T848]  do_syscall_64+0x115/0x870
[  125.878284][  T848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.880613][  T848] 
[  125.881590][  T848] Memory state around the buggy address:
[  125.883779][  T848]  ffff88805a930200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.886895][  T848]  ffff88805a930280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.889986][  T848] >ffff88805a930300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.893049][  T848]                                                  ^
[  125.895702][  T848]  ffff88805a930380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.898807][  T848]  ffff88805a930400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.899721][   T42] audit: type=1400 audit(1785876676.323:1039): avc:  denied  { write } for  pid=9492 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.901776][  T848] ==================================================================
[  125.905620][  T848] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  125.905639][  T848] CPU: 0 UID: 0 PID: 848 Comm: kworker/0:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  125.905662][  T848] Tainted: [L]=SOFTLOCKUP
[  125.905668][  T848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  125.905680][  T848] Workqueue: usb_hub_wq hub_event
[  125.905708][  T848] Call Trace:
[  125.905714][  T848]  <TASK>
[  125.905721][  T848]  dump_stack_lvl+0x100/0x190
[  125.905743][  T848]  vpanic+0x552/0x970
[  125.905760][  T848]  ? __pfx_vpanic+0x10/0x10
[  125.905770][  T848]  ? mark_held_locks+0x40/0x70
[  125.905794][  T848]  ? snd_usb_midi_v2_free+0x52d/0x670
[  125.905812][  T848]  panic+0xd1/0xe0
[  125.905827][  T848]  ? __pfx_panic+0x10/0x10
[  125.905842][  T848]  ? snd_usb_midi_v2_free+0x52d/0x670
[  125.905859][  T848]  ? preempt_schedule_common+0x42/0xc0
[  125.905876][  T848]  ? check_panic_on_warn+0x1f/0x90
[  125.905894][  T848]  check_panic_on_warn.cold+0x19/0x34
[  125.905911][  T848]  end_report.part.0+0x3a/0x90
[  125.905935][  T848]  kasan_report.cold+0xe/0x18
[  125.905958][  T848]  ? snd_usb_midi_v2_free+0x52d/0x670
[  125.905974][  T848]  snd_usb_midi_v2_free+0x52d/0x670
[  125.905992][  T848]  ? __pfx_snd_ctl_dev_free+0x10/0x10
[  125.906016][  T848]  snd_usb_midi_v2_free_all+0x85/0xe0
[  125.906035][  T848]  snd_usb_audio_free+0x4e/0x120
[  125.906057][  T848]  ? __pfx_snd_usb_audio_free+0x10/0x10
[  125.906074][  T848]  release_card_device+0xb2/0x1a0
[  125.906090][  T848]  ? __pfx_release_card_device+0x10/0x10
[  125.906106][  T848]  device_release+0xd2/0x270
[  125.906123][  T848]  kobject_put+0x1f7/0x640
[  125.906146][  T848]  ? snd_card_disconnect.part.0+0x443/0x5b0
[  125.906161][  T848]  put_device+0x1f/0x30
[  125.906173][  T848]  snd_card_free_when_closed+0x2b/0x40
[  125.906191][  T848]  usb_audio_disconnect+0x210/0x680
[  125.906218][  T848]  usb_unbind_interface+0x1dd/0x9e0
[  125.906245][  T848]  ? __pfx_usb_unbind_interface+0x10/0x10
[  125.906265][  T848]  device_remove+0x12a/0x180
[  125.906283][  T848]  device_release_driver_internal+0x44e/0x620
[  125.906308][  T848]  bus_remove_device+0x2bc/0x560
[  125.906326][  T848]  ? __pfx_bus_remove_device+0x10/0x10
[  125.906344][  T848]  ? __pfx_device_remove_attrs+0x10/0x10
[  125.906360][  T848]  device_del+0x376/0x9b0
[  125.906380][  T848]  ? __pfx_device_del+0x10/0x10
[  125.906398][  T848]  ? __pfx___pm_runtime_barrier+0x10/0x10
[  125.906422][  T848]  usb_disable_device+0x367/0x810
[  125.906442][  T848]  ? mark_held_locks+0x40/0x70
[  125.906459][  T848]  usb_disconnect+0x2e2/0x9a0
[  125.906479][  T848]  hub_event+0x1c4f/0x4a60
[  125.906506][  T848]  ? __lock_acquire+0x49f/0x1a40
[  125.906541][  T848]  ? do_raw_spin_unlock+0x145/0x1e0
[  125.906560][  T848]  ? __pfx_hub_event+0x10/0x10
[  125.906579][  T848]  ? debug_object_deactivate+0x2e4/0x3b0
[  125.906605][  T848]  ? rcu_is_watching+0x12/0xc0
[  125.906631][  T848]  process_one_work+0xa23/0x1940
[  125.906651][  T848]  ? __pfx_process_one_work+0x10/0x10
[  125.906668][  T848]  ? __pfx_hub_event+0x10/0x10
[  125.906688][  T848]  worker_thread+0x5ef/0xe50
[  125.906707][  T848]  ? __pfx_worker_thread+0x10/0x10
[  125.906725][  T848]  ? kthread+0x13a/0x450
[  125.906740][  T848]  ? __pfx_worker_thread+0x10/0x10
[  125.906753][  T848]  kthread+0x370/0x450
[  125.906766][  T848]  ? __pfx_kthread+0x10/0x10
[  125.906782][  T848]  ret_from_fork+0x72b/0xd50
[  125.906805][  T848]  ? __pfx_ret_from_fork+0x10/0x10
[  125.906827][  T848]  ? __switch_to+0x800/0x10f0
[  125.906843][  T848]  ? __pfx_kthread+0x10/0x10
[  125.906859][  T848]  ret_from_fork_asm+0x1a/0x30
[  125.906882][  T848]  </TASK>
[  125.911131][  T848] Kernel Offset: disabled

VM DIAGNOSIS:
20:51:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a307b5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc9000506ef28
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3038383866666666
R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b6fe217 R15=ffffffff85a30750
RIP=ffffffff85a307df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5dd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f74cc7e4ff8 CR3=0000000027e63000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f656c64 692e7166622e6f69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe22986ab6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe22986ab6 00007ffe22986abc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7fba355ef
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7fba3562f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7fba35793
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7fba35621
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88806a53c800 RCX=ffffffff81fdee14 RDX=ffff88801eea0000
RSI=ffffffff81fdedee RDI=ffff88801eea0000 RBP=ffffc90000157cd8 RSP=ffffc90000157b60
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733c60
R12=0000000000000003 R13=ffffed100d4a7901 R14=ffff88806a53c808 R15=0000000000000001
RIP=ffffffff81fdedf0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ed8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555576559a28 CR3=0000000051cc0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca7c39c0 0000003000000018
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca7c4c36
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca7c4c36 00007fffca7c4c3c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4863c355ef
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4863c3562f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4863c35793
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4863c35621
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff91c00862 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc90006c8f930 RSP=ffffc90006c8f878
R8 =ffffffff91c00866 R9 =0000000000000007 R10=0000000000000200 R11=00000000000081eb
R12=ffffc90006c8f938 R13=ffffc90006c8f8e8 R14=ffffc90006c8fd98 R15=ffffc90006c8f91c
RIP=ffffffff81b870e9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558ff49500 ffffffff 00c00000
GS =0000 ffff8880d5fd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffdc5fadc30 CR3=0000000057002000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda11cd836
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda11cd836 00007ffda11cd83c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43a00355ef
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43a003562f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43a0035793
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43a0035621
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fdc942 RDX=ffff888027634a80
RSI=ffffffff81fdc91c RDI=ffff888027634a80 RBP=ffff88806a443540 RSP=ffffc9000423f858
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000003 R13=ffffed100d4886a9 R14=0000000000000001 R15=ffff88806a73c880
RIP=ffffffff81fdc91e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d60d8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f43a0d5da08 CR3=000000000e994000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000104080 Opmask01=00000000fffffffe Opmask02=00000000ffffffff Opmask03=0000000000004104
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fb1ff06480
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fb1ff0bea0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81125f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326886c9cd483 7373268d330ea659
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2fcfa122a96ddca0 737373762cc28c76
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31672e7465676461 672d73666769666e 6f632f7372657669 72642f7465676461
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6461672d73666769 666e6f632f737265 766972642f746567 6461672f7375622f
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 160f171716547e0d 3407392a236a206e 4e79497f62737131 790400181401533d
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4400656361667265 746e695f6273753d 4550595456003735 0038353635313d4d
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b6c074c6149011c 0741692c475c0618 4514151b09457474 466a70627b783d08
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f7f7f7f7f5d7f5f 774f7f7f777f777f 6f7f7f7f7f7f7f7d 7f7e7d7e7f797f3d
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554e513d45003044 34434400322f323d 523d003834003531 3635313d4d454e00
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 440051003200302f 312f4400322f323d 433d003834000031 0035313635313d00
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000