last executing test programs:

2m0.91540254s ago: executing program 1 (id=267):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x1, 0x30}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x44090)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
keyctl$revoke(0x3, r2)
r3 = socket$inet6(0xa, 0x3, 0x8)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x3ff}, 0x1c)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x12, 0x0, 0x10001}]})
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)

1m57.825810194s ago: executing program 1 (id=281):
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0xfd00, 0x0)

1m57.824551437s ago: executing program 1 (id=283):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000080)={0x4, 0x8}) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r8, 0x40000) (async, rerun: 32)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (rerun: 32)
r9 = eventfd2(0x2, 0x0)
read$eventfd(r9, &(0x7f0000000000), 0x8)
ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440)
ioctl$MON_IOCQ_URB_LEN(r10, 0x9201)

1m57.614807694s ago: executing program 1 (id=290):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000440)=""/145)
r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r5, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES32=r3])
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1)
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00')
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m56.051720801s ago: executing program 1 (id=316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r5, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xa8, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x31}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) (async)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}}, 0xc00)

1m54.424355341s ago: executing program 1 (id=325):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0xae61)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x6, 0x2, 0x81, 0xe, "00000000020000000000002100", "00000001", "e851008f", "0000f807", ["fdd5c01000", "00e1ffffe0e124d008010100", "455c9bd255aaef05e77700", "00d700649f00ffff00f800"]})
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)

1m54.353201698s ago: executing program 32 (id=325):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0xae61)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x6, 0x2, 0x81, 0xe, "00000000020000000000002100", "00000001", "e851008f", "0000f807", ["fdd5c01000", "00e1ffffe0e124d008010100", "455c9bd255aaef05e77700", "00d700649f00ffff00f800"]})
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)

1m38.765875139s ago: executing program 2 (id=556):
socket$kcm(0xa, 0x8, 0x0) (async, rerun: 64)
r0 = socket(0x2, 0x80805, 0x0) (async, rerun: 64)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x130, r0, 0x94979000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x80) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r5=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', <r6=>0x0, 0x6, 0x4, 0x1, 0x10000, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x10, 0x2, 0x8001}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="00042abd7000ffdbdf25050000000500060003000000050002000f000000080009000e000000050006000300000048000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000140002006c6f0000000000000000000000000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000300000000000800051500070004000000eb4b44668f6cd5c196fe2b45185fd9343f7010622403155b874ec06187664b3618e6b6f1b0584298770b26260000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x890}, 0x20008080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) (async, rerun: 32)
r8 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
setsockopt$inet_buf(r8, 0x0, 0x28, &(0x7f0000005e40)="177e2c00020001000003d68c5ee17688a2003208020300ecff330200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async)
write(r7, &(0x7f0000000040)="3c5c583ecd2d036a2762bb626c65640a", 0x10) (async)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async)
r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r9, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$VIDIOC_DECODER_CMD(r9, 0xc0485660, &(0x7f0000000000)={0x0, 0x2, @start={0x9, 0x1}}) (async)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1m38.665158744s ago: executing program 2 (id=557):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020600000400000008000000010000008000000033616a72e09e38ba87d1a0b873569ff79aa4deef85d8bb7aaedd4b06e335f3451eb297abad002242ad0b06041eee6c770b2d350fb5c6c103dad243ec61ebbf079a6754182a757be9f7"], 0x96)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x88042, 0x0)
write$dsp(r3, &(0x7f0000000100)='\x00', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid_for_children\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
r5 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r6, &(0x7f0000009b40)="de98eeeefd02c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc301dbcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99372601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a00af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f7d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff297eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e04616f54f15b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea347b9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7ae66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1f69684ffb4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16e343ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d209708000000f0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca6197add1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c63f7871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x1, 0x8, 0x1, 0x0, [0x0]}}, 0x29)
close_range(r4, 0xffffffffffffffff, 0x0)

1m37.813975651s ago: executing program 2 (id=562):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000040)=0x700, 0x0}, 0x20)
syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x9, 0x200)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000019c0)={r0, &(0x7f0000000080)="37111eb6c3013a", 0x0, 0x4}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m37.58316359s ago: executing program 2 (id=563):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001640)={0x3, 0xa, "cf8734", 0x8, 0xc3})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48001)
signalfd(r3, &(0x7f0000000180)={[0x8]}, 0x8)
r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x7ff, 0x14080)
preadv(r5, 0x0, 0x0, 0x7, 0x0)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-256)\x00'}, 0x58)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
write(r7, &(0x7f00000000c0)="e0000000120005000000000000000000736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736861332d3235362d6c696200"/192, 0xe0)

1m36.705647655s ago: executing program 2 (id=566):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r5, r5, 0x6, 0x6fff, 0x3ffe})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d3309a1a0333ac3670c440013001000010425bd0000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300003f00028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800)
fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8})

1m36.64547324s ago: executing program 2 (id=567):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x20000004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)

1m21.656996672s ago: executing program 33 (id=567):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x20000004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)

1m20.245130167s ago: executing program 0 (id=620):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x9, 0x3, 0xfffffffe})
close_range(r0, 0xffffffffffffffff, 0x400000000000000)

1m17.214887593s ago: executing program 0 (id=639):
clock_gettime(0x3, &(0x7f0000000400))
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380))
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007866726d0000000004000280fbfff5ff7766726d3000"/48], 0x48}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000451000/0x3000)=nil, 0x3000, 0x2000006, 0x38011, r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m13.674598695s ago: executing program 0 (id=652):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d33610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfddbd5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8508002e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fab2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805018f661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928ff0100000000000095adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3806cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000180)={0x20, r3, 0x1, 0x0, &(0x7f0000000600)=[{}]})
r4 = dup(r1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000010c0)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2c1f3db0f07470f08442400410f01ca09000000442402e4000000654c0fc72ef3410fc777d365420f0ec7700000b8502466ef", 0x55}], 0x1, 0x11, 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0xa1)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m13.475181745s ago: executing program 0 (id=653):
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdir(&(0x7f0000000340)='config/usb_gadget/g1/configs/c.1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config/usb_gadget/g1/strings/0x409\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host, 0x3}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00')
mkdir(&(0x7f0000000040)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x141)

1m13.425436155s ago: executing program 0 (id=654):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14)

1m12.915323908s ago: executing program 0 (id=657):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x100000000000000)

1m12.850110429s ago: executing program 34 (id=657):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x100000000000000)

7.150666926s ago: executing program 5 (id=1186):
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) (async)
ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000080)={0x7, 0x88, 0x8, 0x9}) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)

7.002106039s ago: executing program 5 (id=1188):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x4890, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = accept(r0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x4038ae7a, 0x0)
shutdown(r3, 0x1)

6.790255529s ago: executing program 5 (id=1190):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRESHEX=r0, @ANYBLOB="00000000000000000000000000000000f504010007c01c000a"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000600)={{r0}, "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"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="28010000", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250c0000004400028005000d0001000000080006005c08000006000f005300000006000b000a0000000800080003000000060002004e2100000800030003000007000000004e230000080006"], 0x128}, 0x1, 0x0, 0x0, 0x40810}, 0x20000014)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r3, 0x1, 0x70bd2a, 0x6, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x48000)

6.740462011s ago: executing program 5 (id=1191):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36}, 0x94)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000400), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002180))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='0', 0x1)
write(r1, &(0x7f00000000c0)='/dev/loop0,', 0xb)

4.320607733s ago: executing program 6 (id=1215):
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x80088a02, &(0x7f0000000000)=0x100)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x24008050)

4.220193464s ago: executing program 6 (id=1216):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]})
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x15e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@upd={0xe8, 0x12, 0x201, 0x70bd2b, 0x25dfdbfc, {{'ctr-twofish-avx\x00'}, '\x00', '\x00', 0x400}, [{0x8, 0x1, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYRES8=r2], 0x2c}}, 0x800)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
syz_ublk_setup_queues(r0, 0x0, &(0x7f00000005c0)={0x0, 0x86a, 0x1, 0x3, 0x168}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c3a, 0x0, 0x1, 0x33}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ec5, 0xa040, 0x1, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4606, 0x800, 0x3, 0x83, 0x0, r5}, <r6=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x402a, 0x2, 0x3, 0x16d}}], 0x4, &(0x7f0000002880)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xc}, 0x0, 0x0, '\x00', {0x2, 0x777, 0x0, &(0x7f0000001880)=@buf_1k="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"}}, &(0x7f0000002900))
io_uring_enter(r6, 0x65a5, 0x2230, 0x30, &(0x7f0000002940)={[0x5]}, 0x8)
ioctl$DVD_READ_STRUCT(r5, 0x5390, &(0x7f0000001040)=@bca={0x3, 0xbc, "3672ace483bbb4982bff1297dc4ba5ffcca97ee574485edbce3b6d0a592f98cecd3b6e9ab371232b4bb37b2b0a8d877e2313dc7d3c404c4ed4ae604cbe7971007d9b140a9fe85827e62c852a1366bd322ba4d31cf3a82a4d19a635b3ad3b829618973d5667301251f418cd08478850a02517be3f03b3910dd7d82bbb1c78b369c69a41ccd8f11f36097f69c9a0e27eb6052dbf8dad8420a76a8060513300af859d09cd58b106860fa502d46076c1c6619e55e50e547dffb8f3fef351"})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r7=>r2})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000001c0))
sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030009020000000200000000000000"], 0x10}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', <r8=>0x0, 0x1, 0x10, 0x1, 0x1, {{0x15, 0x4, 0x1, 0x39, 0x54, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @private=0xa010100, {[@generic={0x7, 0x9, "c2ae0b99f230cd"}, @rr={0x7, 0x27, 0x49, [@empty, @remote, @multicast1, @private=0xa010100, @multicast2, @remote, @multicast1, @broadcast, @multicast1]}, @generic={0x88, 0xd, "249336f871afa471763684"}]}}}}})
setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000580)={0xffffffffffffffff, 0x4, 0x2, 0x3, @vifc_lcl_ifindex=r8, @rand_addr=0x64010102}, 0x10)

4.060781268s ago: executing program 6 (id=1218):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, 0x0, 0x14)

3.699031481s ago: executing program 5 (id=1222):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a5)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="000329bd7000ffdbd7250000000008000100", @ANYRES32=0x0, @ANYBLOB="06f705004e23000b70348e7a17772d006bc592ec4e844a9d682a484980d910e7539158652e761c85f7d41bdb3bc7b3f2ecb297b6c15d636e3aafdb804f61a0d44d7b987681f58b080bd5ab06f45785baabe334611ca0e3c644587e1837084d4bcbafa9beae8d8efbb621dbadbd25ab5822d03928b7048e5decc11797e5a3fb5edd11d962e9f5e67555c4fc755d46f22cba38f1c0876219f36baf3ac6fed95e31736c369527473bef4abcdd29e625efe325d94bc20128263bd01e9a765bb312b8008dbcc2b44b7162034a26a245ed06117f485a9d1c9906b679dbd6db35541eaccb5c842783661c01"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='100000', 0x6)
r3 = openat(0xffffffffffffff9c, 0x0, 0x8a202, 0xcd)
write(r3, &(0x7f0000000200)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r4, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r5 = socket$pppoe(0x18, 0x1, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)=0x1)
ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f0000000100)=0x2)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

2.262676169s ago: executing program 3 (id=1230):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=','])
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0)
read$watch_queue(r1, &(0x7f00000034c0)=""/4112, 0x1010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) (fail_nth: 11)

2.049012447s ago: executing program 3 (id=1231):
clock_gettime(0x3, &(0x7f0000000400))
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380))
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000451000/0x3000)=nil, 0x3000, 0x2000006, 0x38011, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.000157323s ago: executing program 6 (id=1233):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x634, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x1}], 0x1, 0x1, 0x0)

910.382125ms ago: executing program 5 (id=1235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x3080000, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0])
unlink(&(0x7f00000002c0)='./file0\x00')
socket$inet6(0x10, 0x2, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0xc000, 0x716e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000001040108000000000000e8678b7d00060500010004"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
r3 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0xf5}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000200)=0x6)
read$dsp(r4, &(0x7f00000000c0)=""/108, 0x6c)
write$dsp(r1, &(0x7f0000002000)='`', 0x88020)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12)
getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000400)={@remote, @dev, <r6=>0x0}, &(0x7f0000000440)=0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', r6, @fallback=0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0)
writev(r5, &(0x7f0000000540), 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f388152ea65d38aa6e67fa6420f0666b89d000f00d8c4820993a46b5c1e0000660f231cb8010000000f01d942c1d20d2e653ef623b805000000b9feffffff0f01d9", 0x48}], 0x1, 0x18, 0x0, 0x0)

770.664506ms ago: executing program 3 (id=1238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd02, &(0x7f0000000280)="04000000000000000000000038010000000000000000000000000000000000008f0000000000000000000000000000006df9e33b6c179c3bb2f4feaf311b84321a441ee0b8c5f7959e8a0a60dcd9e437b1ffd8354766edf8335906c9fe4724274e5d706067698b30b4f25f057f87d8c331f29269a1e8be60beb878a1cc0000de1f82624ac759f4493f087457ae5d358f198e0db18b04dffc33f1a7ea540d04bfa5c20301fed005122e45e3f809533688c7216404dbc20320224d726fd3754839888bd6b65ed8ff51015ba9f9d510593fbef8eb010000")
pwrite64(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35, 0x1000000)
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/42)

677.007945ms ago: executing program 3 (id=1240):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x60840, 0x5a)
fcntl$setlease(r2, 0x400, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040))
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=""/58, 0x0, &(0x7f0000001540)=""/4076, 0x1000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10)

540.594772ms ago: executing program 4 (id=1243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mysys/module/xhci_hcd/parameters/quirks\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600), 0x40)
syz_extract_tcp_res(&(0x7f0000000140)={<r3=>0x41424344}, 0x0, 0x0)
write$tun(r2, &(0x7f0000000540)={@void, @val={0x1, 0x0, 0x1, 0xff51, 0x200, 0x81}, @mpls={[{0x2, 0x0, 0x1}, {0x101}, {}, {0xf9}, {}, {0x0, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x6}], @ipv6=@tcp={0x1, 0x6, "ec6bea", 0x26d, 0x6, 0x0, @remote, @remote, {[@fragment={0x3c, 0x0, 0x7, 0x1, 0x0, 0x8, 0x65}, @srh={0x1, 0x8, 0x4, 0x4, 0x9, 0x0, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @loopback]}, @hopopts={0x3c, 0x1f, '\x00', [@pad1, @ra={0x5, 0x2, 0xd}, @hao={0xc9, 0x10, @remote}, @generic={0x4, 0xe1, "9dd20cd6996a58c8396674542a6abb600c753da3db0f50c8d6a3b00c1674b0a510acc433abc08c676322f3dea9bb0c0a3b3e6b068bdf1a689ae34b10eef57d6310ed4184f2fb4ba72e7c7058443f80ae58acc2868e536ef5a36ab08072d6645055b06bccc591a7f9746f229d51f189fb7fb64c513a4f89b83416555dcdc4e1d326aa89321f5440bd353ab446db762d541b3532df87f4b0d139d92a5b7e634a626c3d1a0530b1f44853ba7d2c398ac0a2648aa58f2cad4ed48c83b9970e3e0cca6a091658b81824dfe279845814e805a54bd6119f7e39dfdc68fa67e4876d3b4276"}, @enc_lim={0x4, 0x1, 0xd}]}, @routing={0x6, 0x4, 0x0, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x16}], {{0x4e20, 0x4e22, r3, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x40, 0x0, 0x3b6, {[@nop]}}, {"062ab07873d10cc1607c1e00857e014aab8d9538aa784111060057f4317aa328186b31cbc987bfdb8de7e3d421b86e36e44892eda485c8f5064d69233315e60d6d22adc9295f5bdcde62237d6c58c4423e2ca45ebe6d14d0b79128abcf6bc26dcb5e56cb5e413f5522341dfc148fa2c1684dd03ef69b9251d1ebd846701d4d284a504fbf7d018517f53eadebf2113f33dd6a9d4c9736aa7e2ec77dcf796ce6b02d46a11217edf10d9eeb28115a62a2a9f30da501677d57ed42e5ba6aa4a1b5d967cc3964edd0463d9138e4e131"}}}}}}, 0x2bf)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x624}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}}, 0x10)

458.084973ms ago: executing program 3 (id=1244):
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000061300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

457.839108ms ago: executing program 4 (id=1245):
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x1, 0x207, 0x6d, 0x7fff, 0xbb, 0x3, 0x8001}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

400.132613ms ago: executing program 3 (id=1246):
clock_gettime(0x3, &(0x7f0000000400))
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380))
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000451000/0x3000)=nil, 0x3000, 0x2000006, 0x38011, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

399.901539ms ago: executing program 4 (id=1247):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x61, "5687832fe1a695ce512b6053531cb9b2a311ebd09ce750fdd5c5e3d62f0c0f2c764888ea9337de97a4daa794bd33e511c537c5a8c864531a6a8699083da0d89316eb011c428f778161de1440bdb773fecfb361027b8587eb44fcaea3e2d160d013"}, &(0x7f00000003c0)=0x85)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)

271.060075ms ago: executing program 4 (id=1248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2068)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdir(&(0x7f0000000340)='config/usb_gadget/g1/configs/c.1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
r1 = socket$inet(0x2, 0x1, 0x8)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000001880)={0x1, r3, 0x8fff, 0x3ff, 0x4, 0x944})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x571f68543cec8180)
setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000000)=0xfffffffc, 0x4)
r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x4)
r8 = openat$cgroup(r7, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000001200)='cgroup.controllers\x00', 0x5000000, 0x0)
readv(r9, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/4077, 0xfed}], 0x1)
write(r1, &(0x7f0000000080)="08008edf773c8000", 0xfd)
recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x25, 0x0, 0x0, 0x0, 0x22}}], 0x3f, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00')

149.031296ms ago: executing program 4 (id=1249):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80)
getdents64(r1, &(0x7f00000028c0)=""/4092, 0xffc)
getdents64(r1, 0x0, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c})

66.380066ms ago: executing program 4 (id=1250):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000105, 0x3}}], 0x20})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
close(r1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
close_range(r8, r9, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffff"], 0x34}], 0x1}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x6007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)

65.538153ms ago: executing program 6 (id=1251):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, <r0=>0x0}, 0x2020)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000002580))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003b40)={{{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x4e21, 0x9, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x2b}, {0x0, 0xfc00000000000000, 0x7, 0xffffffff, 0xad0a, 0xffffffff, 0x0, 0x8}, {0x2, 0x4, 0x2, 0x401}, 0x7fff, 0x6e6bb9, 0x2, 0x76464fa9d804edb4, 0x1}, {{@in=@broadcast, 0x4d2, 0x2b}, 0x2, @in=@multicast2, 0x3502, 0x1, 0x2, 0x8, 0xa, 0xfffffffb, 0x9}}, 0xe8)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x329400, 0x0)
inotify_add_watch(r2, &(0x7f0000000140)='./config\x00', 0x2)
lsetxattr$trusted_overlay_upper(&(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfb, 0x28, 0x2, 0x5, "7c2a7415f6a1cf2a510049e0c8691c70", "cf4402408ce65515130b4e428fcebb7089bbf5"}, 0x28, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0xa6fe, 0x1000, 0x3, 0x200404e}, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040)
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x1000)
setresuid(r10, 0xffffffffffffffff, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600884700000c0003"], 0x68}}, 0x0)
setreuid(r10, 0x0)
mount$nfs4(&(0x7f0000000180)='/dev/vcs\x00', &(0x7f00000001c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', &(0x7f0000000200), 0x20, &(0x7f0000000240)={[{'configfs\x00'}, {'configfs\x00'}, {'configfs\x00'}, {'{/'}, {'/dev/vcs\x00'}, {'&'}, {}, {'/dev/loop'}, {'/dev/vcs\x00'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0xc}}, {@fowner_lt={'fowner<', r10}}]})
socket$pppl2tp(0x18, 0x1, 0x1)

0s ago: executing program 6 (id=1252):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=','])
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0)
read$watch_queue(r1, &(0x7f00000034c0)=""/4112, 0x1010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)="00400000090209000101008001120100020000004000000000000000000001", 0x1f)

kernel console output (not intermixed with test programs):

508010][ T9209] vivid-000: Fill Percentage of Frame: 100
[  168.509994][ T9209] vivid-000: Horizontal Movement: No Movement
[  168.512186][ T9209] vivid-000: Vertical Movement: No Movement
[  168.514396][ T9209] vivid-000: OSD Text Mode: All
[  168.516035][ T9209] vivid-000: Show Border: false
[  168.517546][ T9209] vivid-000: Show Square: true
[  168.519003][ T9209] vivid-000: Sensor Flipped Horizontally: false
[  168.522164][ T9209] vivid-000: Sensor Flipped Vertically: false
[  168.524888][ T9209] vivid-000: Insert SAV Code in Image: false
[  168.527538][ T9209] vivid-000: Insert EAV Code in Image: false
[  168.529592][ T9209] vivid-000: Insert Video Guard Band: false
[  168.532007][ T9209] vivid-000: Reduced Framerate: false
[  168.533923][ T9209] vivid-000: HDMI 000-0 Is Connected To: None
[  168.536044][ T9209] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  168.539262][ T9209] vivid-000: Enable Capture Cropping: true
[  168.546221][ T9209] vivid-000: Enable Capture Composing: true
[  168.552383][ T9209] vivid-000: Enable Capture Scaler: true
[  168.555861][ T9209] vivid-000: Timestamp Source: Start of Exposure
[  168.564930][ T9209] vivid-000: Colorspace: sRGB
[  168.576308][ T9209] vivid-000: Transfer Function: Default
[  168.579459][ T9209] vivid-000: Y'CbCr Encoding: Default
[  168.585192][ T9213] openvswitch: netlink: Missing key (keys=40, expected=100)
[  168.586624][ T9209] vivid-000: HSV Encoding: Hue 0-179
[  168.589368][ T9209] vivid-000: Quantization: Default
[  168.594103][ T9209] vivid-000: Apply Alpha To Red Only: false
[  168.599720][ T9209] vivid-000: Standard Aspect Ratio: 4x3
[  168.602154][ T9209] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  168.604535][    T9] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  168.604878][ T9209] vivid-000: DV Timings: 640x480p59 inactive
[  168.609743][ T9209] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  168.613248][   T50] usb 10-1: USB disconnect, device number 14
[  168.620282][ T9209] vivid-000: Maximum EDID Blocks: 2
[  168.626105][ T9209] vivid-000: Limited RGB Range (16-235): false
[  168.634653][ T9209] vivid-000: Rx RGB Quantization Range: Automatic
[  168.640678][ T9209] vivid-000: Power Present: 0x00000000
[  168.647408][ T9209] tpg source WxH: 320x180 (Y'CbCr)
[  168.652250][ T9209] tpg field: 1
[  168.653402][ T9209] tpg crop: (0,0)/320x180
[  168.660288][ T9209] tpg compose: (0,0)/320x180
[  168.666827][ T9209] tpg colorspace: 8
[  168.668500][ T9209] tpg transfer function: 0/2
[  168.670269][ T9209] tpg Y'CbCr encoding: 0/1
[  168.674063][ T9209] tpg quantization: 0/2
[  168.675928][ T9209] tpg RGB range: 0/2
[  168.677598][ T9209] vivid-000: ==================  END STATUS  ==================
[  168.776208][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  168.781165][    T9] usb 9-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  168.789614][    T9] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  168.793934][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.797434][    T9] usb 9-1: Product: syz
[  168.799196][    T9] usb 9-1: Manufacturer: syz
[  168.804581][    T9] usb 9-1: SerialNumber: syz
[  168.908546][ T9231] netlink: 44 bytes leftover after parsing attributes in process `syz.6.971'.
[  168.920766][ T5752] Bluetooth: hci3: command 0x041b tx timeout
[  168.923377][ T9208] Bluetooth: hci3: Opcode 0x0401 failed: -110
[  169.059504][    T9] usb 9-1: 1:1: cannot set freq 48000 to ep 0x1
[  169.185069][    T9] usb 9-1: USB disconnect, device number 29
[  169.218133][ T9242] jffs2: notice: (9242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 3 orphan) found.
[  169.293683][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.311356][ T5889] usb 8-1: new full-speed USB device number 33 using dummy_hcd
[  169.376701][ T9245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  169.493047][ T5889] usb 8-1: not running at top speed; connect to a high speed hub
[  169.497777][ T5889] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.501834][ T5889] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  169.504728][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.512694][ T5889] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  169.517582][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  169.523555][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  169.528461][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  169.531411][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  169.537732][ T5889] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  169.545687][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  169.553004][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  169.559541][ T5889] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  169.700532][ T6867] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  169.713750][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.973'.
[  169.730145][ T9255] jffs2: notice: (9255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 3 orphan) found.
[  169.743841][ T9239] MTD: Couldn't look up './dev/mtdblock0': -2
[  169.760194][ T5889] usb 8-1: USB disconnect, device number 33
[  169.785578][ T5889] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  169.797538][ T5889] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  169.805686][ T5889] keyspan 8-1:1.0: device disconnected
[  169.850499][ T6867] usb 10-1: Using ep0 maxpacket: 32
[  169.857849][ T6867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.864956][ T6867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.873239][ T6867] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  169.880517][ T6867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.888905][ T9260] binder: 9259:9260 ioctl 400454ca 200000000140 returned -22
[  169.894335][ T6867] usb 10-1: config 0 descriptor??
[  170.016728][ T9263] vivid-000: =================  START STATUS  =================
[  170.019345][ T9263] vivid-000: Test Pattern: 75% Colorbar
[  170.021292][ T9263] vivid-000: Fill Percentage of Frame: 100
[  170.023709][ T9263] vivid-000: Horizontal Movement: No Movement
[  170.026068][ T9263] vivid-000: Vertical Movement: No Movement
[  170.028001][ T9263] vivid-000: OSD Text Mode: All
[  170.029671][ T9263] vivid-000: Show Border: false
[  170.032916][ T9263] vivid-000: Show Square: true
[  170.034549][ T9263] vivid-000: Sensor Flipped Horizontally: false
[  170.036602][ T9263] vivid-000: Sensor Flipped Vertically: false
[  170.038612][ T9263] vivid-000: Insert SAV Code in Image: false
[  170.041799][   T10] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[  170.044236][ T9263] vivid-000: Insert EAV Code in Image: false
[  170.046258][ T9263] vivid-000: Insert Video Guard Band: false
[  170.048417][ T9263] vivid-000: Reduced Framerate: false
[  170.054076][ T9263] vivid-000: HDMI 000-0 Is Connected To: None
[  170.056631][ T9263] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  170.059147][ T9263] vivid-000: Enable Capture Cropping: true
[  170.061061][ T9263] vivid-000: Enable Capture Composing: true
[  170.062968][ T9263] vivid-000: Enable Capture Scaler: true
[  170.064884][ T9263] vivid-000: Timestamp Source: Start of Exposure
[  170.066920][ T9263] vivid-000: Colorspace: sRGB
[  170.068466][ T9263] vivid-000: Transfer Function: Default
[  170.070279][ T9263] vivid-000: Y'CbCr Encoding: Default
[  170.072170][ T9263] vivid-000: HSV Encoding: Hue 0-179
[  170.073954][ T9263] vivid-000: Quantization: Default
[  170.076144][ T9263] vivid-000: Apply Alpha To Red Only: false
[  170.078499][ T9263] vivid-000: Standard Aspect Ratio: 4x3
[  170.080879][ T9263] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  170.083466][ T9263] vivid-000: DV Timings: 640x480p59 inactive
[  170.085442][ T9263] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  170.087863][ T9263] vivid-000: Maximum EDID Blocks: 2
[  170.089577][ T9263] vivid-000: Limited RGB Range (16-235): false
[  170.091896][ T9263] vivid-000: Rx RGB Quantization Range: Automatic
[  170.094021][ T9263] vivid-000: Power Present: 0x00000000
[  170.095792][ T9263] tpg source WxH: 320x180 (Y'CbCr)
[  170.097461][ T9263] tpg field: 1
[  170.098701][ T9263] tpg crop: (0,0)/320x180
[  170.100191][ T9263] tpg compose: (0,0)/320x180
[  170.102268][ T9263] tpg colorspace: 8
[  170.103780][ T9263] tpg transfer function: 0/2
[  170.105362][ T9263] tpg Y'CbCr encoding: 0/1
[  170.106995][ T9263] tpg quantization: 0/2
[  170.108423][ T9263] tpg RGB range: 0/2
[  170.109949][ T9263] vivid-000: ==================  END STATUS  ==================
[  170.202227][   T10] usb 9-1: not running at top speed; connect to a high speed hub
[  170.206948][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.211712][   T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  170.215485][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.243765][   T10] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected
[  170.253760][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81
[  170.257074][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1
[  170.262171][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[  170.265342][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[  170.269449][   T10] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  170.273943][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88
[  170.277028][   T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[  170.282661][   T10] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  170.314838][ T6867] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  170.362155][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.982'.
[  170.499021][ T9269] overlayfs: statfs failed on './file0'
[  170.561713][ T6867] usb 10-1: USB disconnect, device number 15
[  170.738224][ T5750] usb 9-1: USB disconnect, device number 30
[  170.748337][ T5750] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  170.759145][ T5750] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  170.764770][ T9262] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  170.771657][ T5750] keyspan 9-1:1.0: device disconnected
[  170.906111][ T9284] jffs2: notice: (9284) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 3 orphan) found.
[  170.913034][   T43] kauditd_printk_skb: 4 callbacks suppressed
[  170.913062][   T43] audit: type=1400 audit(1786023121.076:1300): avc:  denied  { write } for  pid=9283 comm="syz.3.987" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  170.929681][ T9284] FAULT_INJECTION: forcing a failure.
[  170.929681][ T9284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  170.934821][ T9284] CPU: 2 UID: 0 PID: 9284 Comm: syz.3.987 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.934847][ T9284] Tainted: [L]=SOFTLOCKUP
[  170.934852][ T9284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  170.934861][ T9284] Call Trace:
[  170.934886][ T9284]  <TASK>
[  170.934892][ T9284]  dump_stack_lvl+0x100/0x190
[  170.935032][ T9284]  should_fail_ex.cold+0x5/0xa
[  170.935066][ T9284]  _copy_to_user+0x32/0xd0
[  170.935127][ T9284]  simple_read_from_buffer+0xcb/0x170
[  170.935171][ T9284]  proc_fail_nth_read+0x1af/0x230
[  170.935203][ T9284]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  170.935226][ T9284]  ? rw_verify_area+0xce/0x6d0
[  170.935259][ T9284]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  170.935280][ T9284]  vfs_read+0x1e4/0xb40
[  170.935304][ T9284]  ? __pfx_vfs_read+0x10/0x10
[  170.935325][ T9284]  ? __fget_files+0x215/0x3d0
[  170.935345][ T9284]  ? __fget_files+0x21f/0x3d0
[  170.935366][ T9284]  ksys_read+0x12a/0x250
[  170.935387][ T9284]  ? __pfx_ksys_read+0x10/0x10
[  170.935414][ T9284]  do_syscall_64+0x115/0x870
[  170.935501][ T9284]  ? clear_bhb_loop+0x40/0x90
[  170.935521][ T9284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.935536][ T9284] RIP: 0033:0x7f97b975e90e
[  170.935550][ T9284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  170.935565][ T9284] RSP: 002b:00007f97ba665fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  170.935593][ T9284] RAX: ffffffffffffffda RBX: 00007f97ba6666c0 RCX: 00007f97b975e90e
[  170.935603][ T9284] RDX: 000000000000000f RSI: 00007f97ba6660a0 RDI: 0000000000000004
[  170.935612][ T9284] RBP: 00007f97ba666090 R08: 0000000000000000 R09: 0000000000000000
[  170.935621][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.935630][ T9284] R13: 00007f97b9a26038 R14: 00007f97b9a25fa0 R15: 00007ffeb2239ef8
[  170.935650][ T9284]  </TASK>
[  171.009382][ T5752] Bluetooth: hci3: command 0x041b tx timeout
[  171.123177][ T5752] Bluetooth: hci2: unexpected event for opcode 0x200c
[  171.208363][   T43] audit: type=1400 audit(1786023121.366:1301): avc:  denied  { create } for  pid=9291 comm="syz.6.991" name="streaming_maxpacket" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[  171.218976][   T43] audit: type=1800 audit(1786023121.366:1302): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.991" name="streaming_maxpacket" dev="configfs" ino=30156 res=0 errno=0
[  171.232212][   T43] audit: type=1400 audit(1786023121.366:1303): avc:  denied  { ioctl } for  pid=9291 comm="syz.6.991" path="/89/config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket" dev="configfs" ino=30156 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  171.243377][   T43] audit: type=1400 audit(1786023121.386:1304): avc:  denied  { name_bind } for  pid=9294 comm="syz.3.992" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  171.303277][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.993'.
[  171.400453][ T9304] batman_adv: batadv0: Adding interface: dummy0
[  171.403295][ T9304] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.412780][ T9304] batman_adv: batadv0: Interface activated: dummy0
[  171.421400][ T5750] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  171.426634][   T43] audit: type=1400 audit(1786023121.586:1305): avc:  denied  { associate } for  pid=9303 comm="syz.4.994" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  171.434181][ T9304] batadv0: mtu less than device minimum
[  171.475768][ T9304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.481941][ T9304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.485937][   T43] audit: type=1400 audit(1786023121.646:1306): avc:  denied  { ioctl } for  pid=9303 comm="syz.4.994" path="socket:[30172]" dev="sockfs" ino=30172 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  171.486555][ T9304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.500452][ T9304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.507090][ T9304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.511598][ T9304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.516085][ T9304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.520580][ T9304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.568794][ T9311] jffs2: notice: (9311) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 3 orphan) found.
[  171.578364][   T43] audit: type=1400 audit(1786023121.746:1307): avc:  denied  { write } for  pid=9310 comm="syz.6.996" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  171.610560][ T5750] usb 10-1: Using ep0 maxpacket: 32
[  171.613491][   T43] audit: type=1400 audit(1786023121.776:1308): avc:  denied  { mounton } for  pid=9313 comm="syz.4.997" path="/166/file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  171.614100][ T5750] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.630310][ T5750] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.637955][ T5750] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  171.646504][ T5750] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.662940][ T5750] usb 10-1: config 0 descriptor??
[  171.882555][ T9324] kAFS: No cell specified
[  172.044910][ T9295] overlayfs: statfs failed on './file0'
[  172.056041][ T9328] binder: 9327:9328 ioctl c0306201 200000000480 returned -22
[  172.104380][ T5750] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  172.199385][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1003'.
[  172.277394][ T5750] usb 10-1: USB disconnect, device number 16
[  172.532176][   T43] audit: type=1400 audit(1786023122.696:1309): avc:  denied  { mount } for  pid=9342 comm="syz.3.1006" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  172.542231][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  172.547537][ T9347] program syz.4.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.561459][ T5752] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1
[  172.646847][ T9349] jffs2: notice: (9349) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 3 orphan) found.
[  172.653876][ T9351] FAULT_INJECTION: forcing a failure.
[  172.653876][ T9351] name failslab, interval 1, probability 0, space 0, times 0
[  172.661268][ T9351] CPU: 2 UID: 0 PID: 9351 Comm: syz.3.1009 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  172.661301][ T9351] Tainted: [L]=SOFTLOCKUP
[  172.661308][ T9351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  172.661321][ T9351] Call Trace:
[  172.661329][ T9351]  <TASK>
[  172.661338][ T9351]  dump_stack_lvl+0x100/0x190
[  172.661371][ T9351]  should_fail_ex.cold+0x5/0xa
[  172.661397][ T9351]  should_failslab+0xc2/0x120
[  172.661439][ T9351]  kmem_cache_alloc_noprof+0x91/0x6a0
[  172.661471][ T9351]  ? __pfx_map_id_range_down+0x10/0x10
[  172.661517][ T9351]  ? security_inode_alloc+0x3b/0x2c0
[  172.661578][ T9351]  security_inode_alloc+0x3b/0x2c0
[  172.661606][ T9351]  inode_init_always_gfp+0xc77/0xfb0
[  172.661643][ T9351]  alloc_inode+0x8e/0x250
[  172.661668][ T9351]  new_inode+0x22/0x1c0
[  172.661696][ T9351]  __debugfs_create_file+0x105/0x4f0
[  172.661738][ T9351]  debugfs_create_file_full+0x41/0x60
[  172.661761][ T9351]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  172.661800][ T9351]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  172.661852][ T9351]  ? lockdep_init_map_type+0x5c/0x250
[  172.661905][ T9351]  ? __pfx_geneve_setup+0x10/0x10
[  172.661995][ T9351]  alloc_netdev_mqs+0x314/0x15c0
[  172.662077][ T9351]  rtnl_create_link+0xc13/0xf80
[  172.662108][ T9351]  rtnl_newlink+0x13bd/0x2380
[  172.662143][ T9351]  ? __pfx_rtnl_newlink+0x10/0x10
[  172.662166][ T9351]  ? find_held_lock+0x2b/0x80
[  172.662183][ T9351]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  172.662217][ T9351]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  172.662244][ T9351]  ? avc_has_perm_noaudit+0x145/0x3b0
[  172.662288][ T9351]  ? find_held_lock+0x2b/0x80
[  172.662305][ T9351]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  172.662331][ T9351]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  172.662357][ T9351]  ? __pfx_rtnl_newlink+0x10/0x10
[  172.662382][ T9351]  rtnetlink_rcv_msg+0x95e/0xe90
[  172.662410][ T9351]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  172.662444][ T9351]  ? ref_tracker_free+0x37e/0x6c0
[  172.662474][ T9351]  netlink_rcv_skb+0x159/0x420
[  172.662507][ T9351]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  172.662535][ T9351]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  172.662564][ T9351]  ? netlink_deliver_tap+0x1ae/0xcc0
[  172.662588][ T9351]  netlink_unicast+0x585/0x850
[  172.662613][ T9351]  ? __pfx_netlink_unicast+0x10/0x10
[  172.662641][ T9351]  netlink_sendmsg+0x8b0/0xda0
[  172.662663][ T9351]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.662686][ T9351]  ? selinux_socket_sendmsg+0x198/0x2f0
[  172.662721][ T9351]  ____sys_sendmsg+0xa4d/0xbe0
[  172.662751][ T9351]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.662774][ T9351]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.662814][ T9351]  ___sys_sendmsg+0x190/0x1e0
[  172.662836][ T9351]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.662854][ T9351]  ? __lock_acquire+0x49f/0x1a40
[  172.662877][ T9351]  ? get_pid_task+0x106/0x250
[  172.662934][ T9351]  __sys_sendmsg+0x160/0x210
[  172.662960][ T9351]  ? __pfx___sys_sendmsg+0x10/0x10
[  172.662999][ T9351]  do_syscall_64+0x115/0x870
[  172.663021][ T9351]  ? clear_bhb_loop+0x40/0x90
[  172.663050][ T9351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.663069][ T9351] RIP: 0033:0x7f97b979e0d9
[  172.663087][ T9351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.663104][ T9351] RSP: 002b:00007f97ba666028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.663125][ T9351] RAX: ffffffffffffffda RBX: 00007f97b9a25fa0 RCX: 00007f97b979e0d9
[  172.663137][ T9351] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  172.663149][ T9351] RBP: 00007f97ba666090 R08: 0000000000000000 R09: 0000000000000000
[  172.663160][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  172.663172][ T9351] R13: 00007f97b9a26038 R14: 00007f97b9a25fa0 R15: 00007ffeb2239ef8
[  172.663198][ T9351]  </TASK>
[  172.663243][ T9351] debugfs: out of free dentries, can not create file 'netdev@ffff888056e32700'
[  172.973246][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'.
[  173.081858][ T5752] Bluetooth: hci3: command 0x041b tx timeout
[  173.144996][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'.
[  173.168102][ T9370] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  173.170426][ T9370] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  173.180492][ T9370] vhci_hcd vhci_hcd.0: Device attached
[  173.185139][ T9375] vhci_hcd: connection closed
[  173.185528][ T5818] vhci_hcd vhci_hcd.5: stop threads
[  173.189153][ T5818] vhci_hcd vhci_hcd.5: release socket
[  173.200095][ T5818] vhci_hcd vhci_hcd.5: disconnect device
[  173.546492][ T9355] overlayfs: statfs failed on './file0'
[  174.459647][ T9393] jffs2: notice: (9393) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 3 orphan) found.
[  175.399924][ T9381] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  175.399953][ T5752] Bluetooth: hci2: command 0x0419 tx timeout
[  176.279245][ T9381] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  176.283785][ T9381] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  176.286516][ T9381] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  176.292212][ T9396] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  176.472333][ T9408] binder: BINDER_SET_CONTEXT_MGR already set
[  176.485988][ T9408] binder: 9406:9408 ioctl 4018620d 200000000080 returned -16
[  176.563001][ T9413] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1031'.
[  176.593320][ T9416] vivid-000: =================  START STATUS  =================
[  176.607202][ T9416] vivid-000: Test Pattern: 75% Colorbar
[  176.615007][ T9416] vivid-000: Fill Percentage of Frame: 100
[  176.617926][ T9416] vivid-000: Horizontal Movement: No Movement
[  176.621441][ T9416] vivid-000: Vertical Movement: No Movement
[  176.622113][ T9414] block2mtd: error: cannot open device /dev/loop0
[  176.624036][ T9416] vivid-000: OSD Text Mode: All
[  176.628196][ T9416] vivid-000: Show Border: false
[  176.628316][ T9417] FAULT_INJECTION: forcing a failure.
[  176.628316][ T9417] name failslab, interval 1, probability 0, space 0, times 0
[  176.630832][ T9416] vivid-000: Show Square: true
[  176.630859][ T9416] vivid-000: Sensor Flipped Horizontally: false
[  176.630883][ T9416] vivid-000: Sensor Flipped Vertically: false
[  176.630900][ T9416] vivid-000: Insert SAV Code in Image: false
[  176.630919][ T9416] vivid-000: Insert EAV Code in Image: false
[  176.630939][ T9416] vivid-000: Insert Video Guard Band: false
[  176.630959][ T9416] vivid-000: Reduced Framerate: false
[  176.630979][ T9416] vivid-000: HDMI 000-0 Is Connected To: None
[  176.630998][ T9416] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  176.631021][ T9416] vivid-000: Enable Capture Cropping: true
[  176.631038][ T9416] vivid-000: Enable Capture Composing: true
[  176.631059][ T9416] vivid-000: Enable Capture Scaler: true
[  176.631079][ T9416] vivid-000: Timestamp Source: Start of Exposure
[  176.631100][ T9416] vivid-000: Colorspace: sRGB
[  176.631120][ T9416] vivid-000: Transfer Function: Default
[  176.631140][ T9416] vivid-000: Y'CbCr Encoding: Default
[  176.631158][ T9416] vivid-000: HSV Encoding: Hue 0-179
[  176.631178][ T9416] vivid-000: Quantization: Default
[  176.631198][ T9416] vivid-000: Apply Alpha To Red Only: false
[  176.631218][ T9416] vivid-000: Standard Aspect Ratio: 4x3
[  176.631239][ T9416] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  176.631265][ T9416] vivid-000: DV Timings: 640x480p59 inactive
[  176.631287][ T9416] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  176.631308][ T9416] vivid-000: Maximum EDID Blocks: 2
[  176.631329][ T9416] vivid-000: Limited RGB Range (16-235): false
[  176.631349][ T9416] vivid-000: Rx RGB Quantization Range: Automatic
[  176.631369][ T9416] vivid-000: Power Present: 0x00000000
[  176.631392][ T9416] tpg source WxH: 320x180 (Y'CbCr)
[  176.631403][ T9416] tpg field: 1
[  176.631411][ T9416] tpg crop: (0,0)/320x180
[  176.631423][ T9416] tpg compose: (0,0)/320x180
[  176.631436][ T9416] tpg colorspace: 8
[  176.631444][ T9416] tpg transfer function: 0/2
[  176.631453][ T9416] tpg Y'CbCr encoding: 0/1
[  176.631462][ T9416] tpg quantization: 0/2
[  176.631471][ T9416] tpg RGB range: 0/2
[  176.631481][ T9416] vivid-000: ==================  END STATUS  ==================
[  176.652072][ T9413] smc: net device lo applied user defined pnetid SYZ0
[  176.656225][ T9417] CPU: 2 UID: 0 PID: 9417 Comm: syz.6.1032 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.656257][ T9417] Tainted: [L]=SOFTLOCKUP
[  176.656264][ T9417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  176.656276][ T9417] Call Trace:
[  176.656283][ T9417]  <TASK>
[  176.656290][ T9417]  dump_stack_lvl+0x100/0x190
[  176.656321][ T9417]  should_fail_ex.cold+0x5/0xa
[  176.656339][ T9417]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  176.656369][ T9417]  should_failslab+0xc2/0x120
[  176.656395][ T9417]  kmem_cache_alloc_noprof+0x91/0x6a0
[  176.656417][ T9417]  ? skb_clone+0x190/0x400
[  176.656445][ T9417]  skb_clone+0x190/0x400
[  176.656466][ T9417]  netlink_deliver_tap+0xaed/0xcc0
[  176.656493][ T9417]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  176.656518][ T9417]  netlink_dump+0x631/0xd00
[  176.656539][ T9417]  ? __pfx_netlink_dump+0x10/0x10
[  176.656554][ T9417]  ? __netlink_lookup+0x65c/0x900
[  176.656600][ T9417]  __netlink_dump_start+0x6d6/0x990
[  176.656623][ T9417]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  176.656643][ T9417]  rtnetlink_rcv_msg+0xb3e/0xe90
[  176.656670][ T9417]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  176.656692][ T9417]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  176.656714][ T9417]  ? __pfx_rtnl_dumpit+0x10/0x10
[  176.656732][ T9417]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  176.656757][ T9417]  ? ref_tracker_free+0x37e/0x6c0
[  176.656785][ T9417]  netlink_rcv_skb+0x159/0x420
[  176.656805][ T9417]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  176.656830][ T9417]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  176.656857][ T9417]  ? netlink_deliver_tap+0x1ae/0xcc0
[  176.656882][ T9417]  netlink_unicast+0x585/0x850
[  176.656905][ T9417]  ? __pfx_netlink_unicast+0x10/0x10
[  176.656932][ T9417]  netlink_sendmsg+0x8b0/0xda0
[  176.656954][ T9417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.656973][ T9417]  ? selinux_socket_sendmsg+0x198/0x2f0
[  176.657005][ T9417]  ____sys_sendmsg+0xa4d/0xbe0
[  176.657031][ T9417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.657052][ T9417]  ? __pfx_____sys_sendmsg+0x10/0x10
[  176.657106][ T9417]  ___sys_sendmsg+0x190/0x1e0
[  176.657126][ T9417]  ? __pfx____sys_sendmsg+0x10/0x10
[  176.657143][ T9417]  ? __lock_acquire+0x49f/0x1a40
[  176.657166][ T9417]  ? get_pid_task+0x106/0x250
[  176.657209][ T9417]  __sys_sendmsg+0x160/0x210
[  176.657232][ T9417]  ? __pfx___sys_sendmsg+0x10/0x10
[  176.657267][ T9417]  do_syscall_64+0x115/0x870
[  176.657290][ T9417]  ? clear_bhb_loop+0x40/0x90
[  176.657313][ T9417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.657331][ T9417] RIP: 0033:0x7f6cac59e0d9
[  176.657346][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.657363][ T9417] RSP: 002b:00007f6cad518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.657383][ T9417] RAX: ffffffffffffffda RBX: 00007f6cac825fa0 RCX: 00007f6cac59e0d9
[  176.657395][ T9417] RDX: 0000000000000000 RSI: 0000200000002580 RDI: 0000000000000003
[  176.657406][ T9417] RBP: 00007f6cad518090 R08: 0000000000000000 R09: 0000000000000000
[  176.657417][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  176.657427][ T9417] R13: 00007f6cac826038 R14: 00007f6cac825fa0 R15: 00007fff9b1d7c78
[  176.657451][ T9417]  </TASK>
[  176.695601][ T9414] FAULT_INJECTION: forcing a failure.
[  176.695601][ T9414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  176.755888][ T9413] smc: smcd device lo applied user defined pnetid SYZ0
[  176.778202][ T9414] CPU: 2 UID: 0 PID: 9414 Comm: syz.3.1030 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.778230][ T9414] Tainted: [L]=SOFTLOCKUP
[  176.778237][ T9414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  176.778249][ T9414] Call Trace:
[  176.778256][ T9414]  <TASK>
[  176.778263][ T9414]  dump_stack_lvl+0x100/0x190
[  176.778294][ T9414]  should_fail_ex.cold+0x5/0xa
[  176.778319][ T9414]  _copy_to_user+0x32/0xd0
[  176.778345][ T9414]  simple_read_from_buffer+0xcb/0x170
[  176.778368][ T9414]  proc_fail_nth_read+0x1af/0x230
[  176.778397][ T9414]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  176.778425][ T9414]  ? rw_verify_area+0xce/0x6d0
[  176.778449][ T9414]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  176.778473][ T9414]  vfs_read+0x1e4/0xb40
[  176.778509][ T9414]  ? __pfx_vfs_read+0x10/0x10
[  176.778535][ T9414]  ? __fget_files+0x215/0x3d0
[  176.778559][ T9414]  ? __fget_files+0x21f/0x3d0
[  176.778581][ T9414]  ksys_read+0x12a/0x250
[  176.778606][ T9414]  ? __pfx_ksys_read+0x10/0x10
[  176.778661][ T9414]  do_syscall_64+0x115/0x870
[  176.778685][ T9414]  ? clear_bhb_loop+0x40/0x90
[  176.778705][ T9414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.778722][ T9414] RIP: 0033:0x7f97b975e90e
[  176.778738][ T9414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  176.778755][ T9414] RSP: 002b:00007f97ba665fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  176.778774][ T9414] RAX: ffffffffffffffda RBX: 00007f97ba6666c0 RCX: 00007f97b975e90e
[  176.778786][ T9414] RDX: 000000000000000f RSI: 00007f97ba6660a0 RDI: 0000000000000006
[  176.778796][ T9414] RBP: 00007f97ba666090 R08: 0000000000000000 R09: 0000000000000000
[  176.778807][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  176.778818][ T9414] R13: 00007f97b9a26038 R14: 00007f97b9a25fa0 R15: 00007ffeb2239ef8
[  176.778839][ T9414]  </TASK>
[  177.027997][   T43] kauditd_printk_skb: 4 callbacks suppressed
[  177.028010][   T43] audit: type=1400 audit(1786023127.187:1314): avc:  denied  { bind } for  pid=9412 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  177.048655][   T43] audit: type=1400 audit(1786023127.207:1315): avc:  denied  { listen } for  pid=9412 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  177.101669][   T43] audit: type=1400 audit(1786023127.257:1316): avc:  denied  { accept } for  pid=9412 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  177.121384][   T43] audit: type=1400 audit(1786023127.277:1317): avc:  denied  { mounton } for  pid=9412 comm="syz.5.1031" path="/95/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  177.230991][ T9435] rdma_op ffff888026e631f0 conn xmit_rdma 0000000000000000
[  177.235159][   T43] audit: type=1400 audit(1786023127.397:1318): avc:  denied  { create } for  pid=9434 comm="syz.5.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  177.252311][   T43] audit: type=1400 audit(1786023127.397:1319): avc:  denied  { setopt } for  pid=9434 comm="syz.5.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  177.260617][ T5750] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  177.264788][   T43] audit: type=1400 audit(1786023127.397:1320): avc:  denied  { map } for  pid=9434 comm="syz.5.1037" path="socket:[30434]" dev="sockfs" ino=30434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  177.277056][   T43] audit: type=1400 audit(1786023127.397:1321): avc:  denied  { read } for  pid=9434 comm="syz.5.1037" path="socket:[30434]" dev="sockfs" ino=30434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  177.303560][ T9409] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  177.420440][ T5750] usb 11-1: Using ep0 maxpacket: 32
[  177.426071][ T5750] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.437465][ T9443] FAULT_INJECTION: forcing a failure.
[  177.437465][ T9443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.440677][ T5750] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.444913][ T9443] CPU: 2 UID: 0 PID: 9443 Comm: syz.5.1041 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  177.444944][ T9443] Tainted: [L]=SOFTLOCKUP
[  177.444951][ T9443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  177.444964][ T9443] Call Trace:
[  177.444972][ T9443]  <TASK>
[  177.444979][ T9443]  dump_stack_lvl+0x100/0x190
[  177.445011][ T9443]  should_fail_ex.cold+0x5/0xa
[  177.445035][ T9443]  _copy_to_user+0x32/0xd0
[  177.445065][ T9443]  simple_read_from_buffer+0xcb/0x170
[  177.445089][ T9443]  proc_fail_nth_read+0x1af/0x230
[  177.445120][ T9443]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.445146][ T9443]  ? rw_verify_area+0xce/0x6d0
[  177.445172][ T9443]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.445200][ T9443]  vfs_read+0x1e4/0xb40
[  177.445248][ T9443]  ? __pfx_vfs_read+0x10/0x10
[  177.445277][ T9443]  ? __fget_files+0x215/0x3d0
[  177.445306][ T9443]  ? __fget_files+0x21f/0x3d0
[  177.445336][ T9443]  ksys_read+0x12a/0x250
[  177.445369][ T9443]  ? __pfx_ksys_read+0x10/0x10
[  177.445409][ T9443]  do_syscall_64+0x115/0x870
[  177.445431][ T9443]  ? clear_bhb_loop+0x40/0x90
[  177.445455][ T9443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.445477][ T9443] RIP: 0033:0x7f08b855e90e
[  177.445503][ T9443] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  177.445524][ T9443] RSP: 002b:00007f08b94d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.445547][ T9443] RAX: ffffffffffffffda RBX: 00007f08b94d16c0 RCX: 00007f08b855e90e
[  177.445562][ T9443] RDX: 000000000000000f RSI: 00007f08b94d10a0 RDI: 0000000000000004
[  177.445575][ T9443] RBP: 00007f08b94d1090 R08: 0000000000000000 R09: 0000000000000000
[  177.445585][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  177.445594][ T9443] R13: 00007f08b8826038 R14: 00007f08b8825fa0 R15: 00007ffe38c90a88
[  177.445625][ T9443]  </TASK>
[  177.494062][ T5752] Bluetooth: hci3: command 0x041b tx timeout
[  177.582309][ T5750] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  177.597285][ T5750] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.619121][ T5750] usb 11-1: config 0 descriptor??
[  177.732782][ T9455] binder: 9453:9455 ioctl c0306201 2000000001c0 returned -14
[  178.064749][ T5750] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  178.112490][ T9462] vivid-000: =================  START STATUS  =================
[  178.118854][ T9462] vivid-000: Test Pattern: 75% Colorbar
[  178.128962][ T9462] vivid-000: Fill Percentage of Frame: 100
[  178.134354][ T9462] vivid-000: Horizontal Movement: No Movement
[  178.139875][ T9462] vivid-000: Vertical Movement: No Movement
[  178.145868][ T9462] vivid-000: OSD Text Mode: All
[  178.150291][ T9462] vivid-000: Show Border: false
[  178.155249][ T9462] vivid-000: Show Square: true
[  178.160045][ T9462] vivid-000: Sensor Flipped Horizontally: false
[  178.167896][ T9462] vivid-000: Sensor Flipped Vertically: false
[  178.174544][ T9462] vivid-000: Insert SAV Code in Image: false
[  178.178819][ T9462] vivid-000: Insert EAV Code in Image: false
[  178.184348][ T9462] vivid-000: Insert Video Guard Band: false
[  178.189958][ T9462] vivid-000: Reduced Framerate: false
[  178.193578][ T9462] vivid-000: HDMI 000-0 Is Connected To: None
[  178.199273][ T9462] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  178.206639][ T9462] vivid-000: Enable Capture Cropping: true
[  178.210541][ T9462] vivid-000: Enable Capture Composing: true
[  178.213516][ T9462] vivid-000: Enable Capture Scaler: true
[  178.216784][ T9462] vivid-000: Timestamp Source: Start of Exposure
[  178.224974][ T9462] vivid-000: Colorspace: sRGB
[  178.230109][ T9462] vivid-000: Transfer Function: Default
[  178.233524][ T9462] vivid-000: Y'CbCr Encoding: Default
[  178.236981][ T9462] vivid-000: HSV Encoding: Hue 0-179
[  178.240839][ T9462] vivid-000: Quantization: Default
[  178.244588][ T9462] vivid-000: Apply Alpha To Red Only: false
[  178.252833][ T9475] FAULT_INJECTION: forcing a failure.
[  178.252833][ T9475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.255392][ T5750] usb 11-1: USB disconnect, device number 12
[  178.258557][ T9475] CPU: 2 UID: 0 PID: 9475 Comm: syz.4.1053 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  178.258584][ T9475] Tainted: [L]=SOFTLOCKUP
[  178.258590][ T9475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  178.258600][ T9475] Call Trace:
[  178.258607][ T9475]  <TASK>
[  178.258614][ T9475]  dump_stack_lvl+0x100/0x190
[  178.258645][ T9475]  should_fail_ex.cold+0x5/0xa
[  178.258668][ T9475]  _copy_from_user+0x2e/0xd0
[  178.258695][ T9475]  input_event_from_user+0x123/0x310
[  178.258761][ T9475]  ? __pfx_input_event_from_user+0x10/0x10
[  178.258787][ T9475]  ? __pfx___might_resched+0x10/0x10
[  178.258811][ T9475]  ? input_inject_event+0x198/0x380
[  178.258837][ T9475]  evdev_write+0x342/0x610
[  178.258866][ T9475]  ? __pfx_evdev_write+0x10/0x10
[  178.258893][ T9475]  ? bpf_lsm_file_permission+0x9/0x10
[  178.258929][ T9475]  ? security_file_permission+0x76/0x210
[  178.258949][ T9475]  ? rw_verify_area+0xce/0x6d0
[  178.258975][ T9475]  vfs_write+0x2aa/0x1050
[  178.259000][ T9475]  ? __pfx_evdev_write+0x10/0x10
[  178.259033][ T9475]  ? __pfx_vfs_write+0x10/0x10
[  178.259057][ T9475]  ? find_held_lock+0x2b/0x80
[  178.259073][ T9475]  ? __fget_files+0x215/0x3d0
[  178.259092][ T9475]  ? __fget_files+0x215/0x3d0
[  178.259113][ T9475]  ? __fget_files+0x21f/0x3d0
[  178.259137][ T9475]  ksys_write+0x1f8/0x250
[  178.259153][ T9475]  ? __pfx_ksys_write+0x10/0x10
[  178.259177][ T9475]  do_syscall_64+0x115/0x870
[  178.259199][ T9475]  ? clear_bhb_loop+0x40/0x90
[  178.259221][ T9475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.259239][ T9475] RIP: 0033:0x7f88ab19e0d9
[  178.259253][ T9475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.259269][ T9475] RSP: 002b:00007f88ac076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  178.259288][ T9475] RAX: ffffffffffffffda RBX: 00007f88ab425fa0 RCX: 00007f88ab19e0d9
[  178.259300][ T9475] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003
[  178.259331][ T9475] RBP: 00007f88ac076090 R08: 0000000000000000 R09: 0000000000000000
[  178.259342][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.259353][ T9475] R13: 00007f88ab426038 R14: 00007f88ab425fa0 R15: 00007ffdcbeda838
[  178.259378][ T9475]  </TASK>
[  178.262190][ T9462] vivid-000: Standard Aspect Ratio: 4x3
[  178.357027][ T9462] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  178.365493][ T9462] vivid-000: DV Timings: 640x480p59 inactive
[  178.367012][ T5752] Bluetooth: hci0: command 0x0c1a tx timeout
[  178.367966][ T5757] Bluetooth: hci4: command 0x0c1a tx timeout
[  178.378516][ T9462] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  178.381928][ T9462] vivid-000: Maximum EDID Blocks: 2
[  178.384296][ T9462] vivid-000: Limited RGB Range (16-235): false
[  178.386947][ T9462] vivid-000: Rx RGB Quantization Range: Automatic
[  178.389870][ T9462] vivid-000: Power Present: 0x00000000
[  178.392151][ T9462] tpg source WxH: 320x180 (Y'CbCr)
[  178.394282][ T9462] tpg field: 1
[  178.395754][ T9462] tpg crop: (0,0)/320x180
[  178.397592][ T9462] tpg compose: (0,0)/320x180
[  178.402564][ T9462] tpg colorspace: 8
[  178.409595][ T9462] tpg transfer function: 0/2
[  178.413338][ T9462] tpg Y'CbCr encoding: 0/1
[  178.419418][ T9462] tpg quantization: 0/2
[  178.422772][ T9462] tpg RGB range: 0/2
[  178.424085][ T9482] overlayfs: overlapping lowerdir path
[  178.426796][ T9462] vivid-000: ==================  END STATUS  ==================
[  178.486208][ T9485] syzkaller0: entered promiscuous mode
[  178.488646][ T9485] syzkaller0: entered allmulticast mode
[  178.598817][ T9489] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  178.603127][ T9489] net_ratelimit: 11 callbacks suppressed
[  178.603144][ T9489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.762835][ T6867] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  178.797319][ T9465] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  178.863803][ T9500] FAULT_INJECTION: forcing a failure.
[  178.863803][ T9500] name failslab, interval 1, probability 0, space 0, times 0
[  178.876812][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.5.1062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  178.876841][ T9500] Tainted: [L]=SOFTLOCKUP
[  178.876847][ T9500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  178.876856][ T9500] Call Trace:
[  178.876863][ T9500]  <TASK>
[  178.876870][ T9500]  dump_stack_lvl+0x100/0x190
[  178.876898][ T9500]  should_fail_ex.cold+0x5/0xa
[  178.876918][ T9500]  should_failslab+0xc2/0x120
[  178.876938][ T9500]  __kmalloc_noprof+0xfc/0x820
[  178.876957][ T9500]  ? software_key_query+0x1b8/0xe30
[  178.876996][ T9500]  software_key_query+0x1b8/0xe30
[  178.877017][ T9500]  ? __pfx_software_key_query+0x10/0x10
[  178.877047][ T9500]  ? __pfx_software_key_query+0x10/0x10
[  178.877067][ T9500]  query_asymmetric_key+0x104/0x160
[  178.877087][ T9500]  keyctl_pkey_params_get_2+0x1c6/0x3f0
[  178.877106][ T9500]  ? __pfx_keyctl_pkey_params_get_2+0x10/0x10
[  178.877121][ T9500]  ? find_held_lock+0x2b/0x80
[  178.877135][ T9500]  ? ksys_write+0x190/0x250
[  178.877153][ T9500]  ? __mutex_unlock_slowpath+0x35d/0x930
[  178.877177][ T9500]  keyctl_pkey_e_d_s+0xac/0x360
[  178.877194][ T9500]  ? __pfx_keyctl_pkey_e_d_s+0x10/0x10
[  178.877213][ T9500]  ? ksys_write+0x1ac/0x250
[  178.877226][ T9500]  ? __pfx_ksys_write+0x10/0x10
[  178.877242][ T9500]  __do_sys_keyctl+0x336/0x5a0
[  178.877263][ T9500]  do_syscall_64+0x115/0x870
[  178.877281][ T9500]  ? clear_bhb_loop+0x40/0x90
[  178.877299][ T9500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.877314][ T9500] RIP: 0033:0x7f08b859e0d9
[  178.877328][ T9500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.877342][ T9500] RSP: 002b:00007f08b94d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  178.877359][ T9500] RAX: ffffffffffffffda RBX: 00007f08b8825fa0 RCX: 00007f08b859e0d9
[  178.877369][ T9500] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000019
[  178.877378][ T9500] RBP: 00007f08b94d1090 R08: 0000000000000000 R09: 0000000000000000
[  178.877387][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.877395][ T9500] R13: 00007f08b8826038 R14: 00007f08b8825fa0 R15: 00007ffe38c90a88
[  178.877414][ T9500]  </TASK>
[  179.009785][ T6867] usb 8-1: Using ep0 maxpacket: 8
[  179.014167][ T6867] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  179.017164][ T6867] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  179.020968][ T6867] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  179.024398][ T6867] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  179.027706][ T6867] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  179.032404][ T6867] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  179.035709][ T6867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.040854][   T43] audit: type=1400 audit(1786023129.197:1322): avc:  denied  { append } for  pid=9502 comm="syz.6.1063" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  179.052236][ T6867] usbtmc 8-1:16.0: bulk endpoints not found
[  179.116321][ T9509] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  179.177248][ T9511] fuse: Unknown parameter '{cŒDº ¸™·ñÆjK5wL¨QôÊÒ–>Âp°.WñéçoAÎ÷'
[  179.183634][ T9511] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  179.300191][ T5819] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  179.358177][ T9520] overlayfs: overlapping lowerdir path
[  179.470276][ T5819] usb 11-1: Using ep0 maxpacket: 8
[  179.556450][ T5819] usb 11-1: unable to get BOS descriptor or descriptor too short
[  179.561504][ T5757] Bluetooth: hci3: command 0x041b tx timeout
[  179.564341][ T5819] usb 11-1: unable to read config index 0 descriptor/start: -71
[  179.568719][ T5819] usb 11-1: can't read configurations, error -71
[  179.599380][ T5750] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  179.750093][ T5750] usb 9-1: Using ep0 maxpacket: 32
[  179.756608][ T5750] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.764625][ T5750] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.768585][ T5750] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  179.775192][ T5750] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.785653][ T5750] usb 9-1: config 0 descriptor??
[  180.195706][ T5750] usbhid 9-1:0.0: can't add hid device: -71
[  180.205262][ T5750] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  180.218833][ T5750] usb 9-1: USB disconnect, device number 31
[  180.261749][ T9544] fuse: Bad value for 'fd'
[  180.265368][ T9544] overlayfs: overlapping lowerdir path
[  180.592239][ T9562] jffs2: notice: (9562) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 3 orphan) found.
[  180.600108][ T9562] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[  180.721987][   T50] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[  180.780010][ T9572] FAULT_INJECTION: forcing a failure.
[  180.780010][ T9572] name failslab, interval 1, probability 0, space 0, times 0
[  180.786149][ T9572] CPU: 0 UID: 0 PID: 9572 Comm: syz.4.1086 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.786180][ T9572] Tainted: [L]=SOFTLOCKUP
[  180.786186][ T9572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  180.786197][ T9572] Call Trace:
[  180.786203][ T9572]  <TASK>
[  180.786213][ T9572]  dump_stack_lvl+0x100/0x190
[  180.786246][ T9572]  should_fail_ex.cold+0x5/0xa
[  180.786272][ T9572]  should_failslab+0xc2/0x120
[  180.786299][ T9572]  __kvmalloc_node_noprof+0x116/0x970
[  180.786326][ T9572]  ? page_pool_create_percpu+0x2e0/0xd50
[  180.786355][ T9572]  page_pool_create_percpu+0x2e0/0xd50
[  180.786381][ T9572]  bpf_test_run_xdp_live+0x192/0x760
[  180.786411][ T9572]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  180.786457][ T9572]  ? synchronize_rcu_normal+0xf5/0x260
[  180.786503][ T9572]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  180.786530][ T9572]  ? bpf_dispatcher_change_prog+0x2d9/0xa50
[  180.786576][ T9572]  ? 0xffffffffa0205f80
[  180.786590][ T9572]  ? 0xffffffffa0205f80
[  180.786600][ T9572]  ? 0xffffffffa0205f80
[  180.786609][ T9572]  ? 0xffffffffa0205f80
[  180.786616][ T9572]  ? bpf_dispatcher_change_prog+0x2de/0xa50
[  180.786632][ T9572]  bpf_prog_test_run_xdp+0xd7d/0x1670
[  180.786649][ T9572]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  180.786664][ T9572]  ? fput+0x79/0x100
[  180.786678][ T9572]  ? __bpf_prog_get+0x97/0x2a0
[  180.786705][ T9572]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  180.786717][ T9572]  __sys_bpf+0x2a12/0x4e80
[  180.786732][ T9572]  ? __pfx___sys_bpf+0x10/0x10
[  180.786743][ T9572]  ? find_held_lock+0x2b/0x80
[  180.786754][ T9572]  ? get_pid_task+0xfc/0x250
[  180.786765][ T9572]  ? get_pid_task+0xfc/0x250
[  180.786779][ T9572]  ? find_held_lock+0x2b/0x80
[  180.786792][ T9572]  ? rcu_read_lock_any_held+0x6a/0xa0
[  180.786803][ T9572]  ? find_held_lock+0x2b/0x80
[  180.786813][ T9572]  ? ksys_write+0x190/0x250
[  180.786822][ T9572]  ? ksys_write+0x190/0x250
[  180.786841][ T9572]  ? fput+0x79/0x100
[  180.786856][ T9572]  ? __x64_sys_bpf+0xce/0x140
[  180.786867][ T9572]  __x64_sys_bpf+0xce/0x140
[  180.786878][ T9572]  ? do_syscall_64+0x90/0x870
[  180.786894][ T9572]  do_syscall_64+0x115/0x870
[  180.786907][ T9572]  ? clear_bhb_loop+0x40/0x90
[  180.786922][ T9572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.786933][ T9572] RIP: 0033:0x7f88ab19e0d9
[  180.786943][ T9572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.786954][ T9572] RSP: 002b:00007f88ac076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  180.786967][ T9572] RAX: ffffffffffffffda RBX: 00007f88ab425fa0 RCX: 00007f88ab19e0d9
[  180.786978][ T9572] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  180.786984][ T9572] RBP: 00007f88ac076090 R08: 0000000000000000 R09: 0000000000000000
[  180.786991][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.786997][ T9572] R13: 00007f88ab426038 R14: 00007f88ab425fa0 R15: 00007ffdcbeda838
[  180.787011][ T9572]  </TASK>
[  180.787053][ T9572] page_pool_create_percpu() gave up with errno -12
[  180.873632][   T50] usb 10-1: not running at top speed; connect to a high speed hub
[  180.910418][   T50] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.914205][   T50] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  180.921837][   T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.937747][   T50] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected
[  180.940537][   T50] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81
[  180.943341][   T50] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1
[  180.956729][   T50] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84
[  180.963573][   T50] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2
[  180.971986][ T9579] fuse: Bad value for 'fd'
[  180.974454][   T50] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  180.975327][ T9579] overlayfs: overlapping lowerdir path
[  180.985449][   T50] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88
[  180.990364][   T50] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6
[  181.009157][   T50] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  181.137970][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1082'.
[  181.153862][ T9557] jffs2: notice: (9557) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 5 of xref (0 dead, 3 orphan) found.
[  181.163834][   T43] audit: type=1400 audit(1786023131.327:1323): avc:  denied  { write } for  pid=9556 comm="syz.5.1082" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  181.174324][ T5819] usb 10-1: USB disconnect, device number 17
[  181.186627][ T5819] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  181.208262][ T5819] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  181.213872][ T5819] keyspan 10-1:1.0: device disconnected
[  181.399322][    T9] usb 11-1: new high-speed USB device number 15 using dummy_hcd
[  181.509088][ T5750] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[  181.524908][   T10] usb 8-1: USB disconnect, device number 34
[  181.562622][    T9] usb 11-1: Using ep0 maxpacket: 32
[  181.567935][    T9] usb 11-1: unable to get BOS descriptor or descriptor too short
[  181.576907][    T9] usb 11-1: config 14 has an invalid interface number: 57 but max is 1
[  181.584593][    T9] usb 11-1: config 14 has an invalid interface number: 228 but max is 1
[  181.590438][    T9] usb 11-1: config 14 has no interface number 0
[  181.592779][    T9] usb 11-1: config 14 has no interface number 1
[  181.595019][    T9] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  181.598524][    T9] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  181.605090][    T9] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  181.609942][    T9] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  181.620936][    T9] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  181.632469][    T9] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  181.639139][ T5757] Bluetooth: hci3: command 0x041b tx timeout
[  181.646117][    T9] usb 11-1: config 14 interface 57 has no altsetting 0
[  181.649251][    T9] usb 11-1: config 14 interface 228 has no altsetting 0
[  181.654139][    T9] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  181.657450][    T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.662119][    T9] usb 11-1: Product: syz
[  181.663874][    T9] usb 11-1: Manufacturer: syz
[  181.666169][    T9] usb 11-1: SerialNumber: syz
[  181.668307][ T5750] usb 9-1: not running at top speed; connect to a high speed hub
[  181.674838][ T5750] usb 9-1: config 1 has an invalid interface number: 160 but max is 0
[  181.678558][ T5750] usb 9-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config
[  181.682755][ T5750] usb 9-1: config 1 has no interface number 0
[  181.685685][ T5750] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  181.689534][ T5750] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.912450][ T5750] usb 9-1: string descriptor 0 read error: -71
[  181.918223][ T5750] keyspan 9-1:1.160: Keyspan 2 port adapter converter detected
[  181.922021][ T5750] keyspan 9-1:1.160: found no endpoint descriptor for endpoint 81
[  181.926661][ T5750] keyspan 9-1:1.160: found no endpoint descriptor for endpoint 1
[  181.931634][ T5750] keyspan 9-1:1.160: found no endpoint descriptor for endpoint 84
[  181.934668][ T5750] keyspan 9-1:1.160: found no endpoint descriptor for endpoint 2
[  181.945672][ T5750] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  181.950169][ T5750] keyspan 9-1:1.160: found no endpoint descriptor for endpoint 88
[  181.954947][ T5750] keyspan 9-1:1.160: found no endpoint descriptor for endpoint 6
[  181.959094][   T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  181.966018][ T5750] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  181.973218][ T5750] usb 9-1: USB disconnect, device number 32
[  181.978759][ T5750] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  181.988318][ T5750] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  181.993406][ T5750] keyspan 9-1:1.160: device disconnected
[  182.099689][   T50] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  182.129667][   T10] usb 8-1: Using ep0 maxpacket: 32
[  182.134972][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.141427][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.146390][   T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  182.149865][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.155693][   T10] usb 8-1: config 0 descriptor??
[  182.250825][   T50] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  182.255038][   T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  182.259162][   T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  182.264882][   T50] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  182.268159][   T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.271181][   T50] usb 10-1: Product: syz
[  182.272796][   T50] usb 10-1: Manufacturer: syz
[  182.274508][   T50] usb 10-1: SerialNumber: syz
[  182.278185][   T50] usb 10-1: config 0 descriptor??
[  182.281504][ T9602] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  182.340158][   T50] rc_core: IR keymap rc-streamzap not found
[  182.342742][   T50] Registered IR keymap rc-empty
[  182.345648][   T50] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0
[  182.352891][   T50] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input11
[  182.354627][    T9] legousbtower 11-1:14.57: interrupt endpoints not found
[  182.531868][ T5889] usb 10-1: USB disconnect, device number 18
[  182.573940][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  182.576504][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  182.584789][   T10] usb 8-1: USB disconnect, device number 35
[  182.627649][ T9609] fuse: Bad value for 'fd'
[  182.630614][ T9609] overlayfs: overlapping lowerdir path
[  183.265167][ T9626] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1105'.
[  183.419430][   T50] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  183.480405][ T5889] usb 8-1: new full-speed USB device number 36 using dummy_hcd
[  183.569367][   T50] usb 9-1: Using ep0 maxpacket: 8
[  183.573056][   T50] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  183.575735][   T50] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  183.578729][   T50] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  183.582183][   T50] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  183.585478][   T50] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.589500][   T50] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  183.592409][   T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.601719][   T50] usbtmc 9-1:16.0: bulk endpoints not found
[  183.630166][ T5889] usb 8-1: not running at top speed; connect to a high speed hub
[  183.633589][ T5889] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.636999][ T5889] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  183.639086][    T9] legousbtower 11-1:14.228: get version request failed: -110
[  183.640778][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.643842][    T9] legousbtower 11-1:14.228: probe with driver legousbtower failed with error -110
[  183.648277][ T5889] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  183.653094][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  183.655627][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  183.659363][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  183.661860][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  183.665021][ T5889] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  183.668413][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  183.671352][ T5819] usb 10-1: new full-speed USB device number 19 using dummy_hcd
[  183.676373][ T5889] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  183.683887][ T5889] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  183.830887][ T5819] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  183.834960][ T5819] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  183.838951][ T5819] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30065, setting to 64
[  183.843005][ T5819] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  183.850079][ T5819] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  183.854807][ T9624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1104'.
[  183.858467][ T5819] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3
[  183.862469][ T5819] usb 10-1: Manufacturer: syz
[  183.864404][ T5819] usb 10-1: SerialNumber: syz
[  183.866033][ T9624] jffs2: notice: (9624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (1 unchecked, 4 orphan) and 6 of xref (0 dead, 4 orphan) found.
[  183.868392][ T5819] usb 10-1: config 0 descriptor??
[  183.875967][ T9629] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  183.884047][   T43] kauditd_printk_skb: 2 callbacks suppressed
[  183.884063][   T43] audit: type=1400 audit(1786023134.047:1326): avc:  denied  { write } for  pid=9623 comm="syz.3.1104" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  183.895945][ T5819] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input12
[  183.899605][   T43] audit: type=1400 audit(1786023134.067:1327): avc:  denied  { write } for  pid=9623 comm="syz.3.1104" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  183.910511][ T5819] usb 8-1: USB disconnect, device number 36
[  183.929799][ T5819] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  183.953363][ T5819] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  183.965731][ T5819] keyspan 8-1:1.0: device disconnected
[  184.179907][ T5819] usb 11-1: USB disconnect, device number 15
[  184.329668][ T5750] usb 10-1: USB disconnect, device number 19
[  184.630802][ T5889] hid-generic 0362:07FF:7FFFFFFF.001A: item fetching failed at offset 0/1
[  184.636674][ T5889] hid-generic 0362:07FF:7FFFFFFF.001A: probe with driver hid-generic failed with error -22
[  185.453473][ T9654] xt_hashlimit: size too large, truncated to 1048576
[  185.888510][ T5819] usb 8-1: new full-speed USB device number 37 using dummy_hcd
[  186.002486][ T9661] overlayfs: statfs failed on './file0'
[  186.045313][ T5819] usb 8-1: not running at top speed; connect to a high speed hub
[  186.055677][ T5819] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.062882][ T5819] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  186.067020][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.082584][ T5819] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  186.088042][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  186.095170][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  186.103425][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  186.108094][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  186.117362][ T5819] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  186.127630][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  186.135465][ T1046] usb 9-1: USB disconnect, device number 33
[  186.142108][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  186.157132][ T5819] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  186.279119][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1116'.
[  186.318116][ T9659] jffs2: notice: (9659) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 5 orphan) and 7 of xref (0 dead, 5 orphan) found.
[  186.357034][   T43] audit: type=1400 audit(1786023136.518:1328): avc:  denied  { write } for  pid=9658 comm="syz.3.1116" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  186.387768][ T5819] usb 8-1: USB disconnect, device number 37
[  186.390122][   T43] audit: type=1400 audit(1786023136.538:1329): avc:  denied  { write } for  pid=9658 comm="syz.3.1116" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  186.407684][ T5819] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  186.428173][ T9674] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1120'.
[  186.437804][ T5819] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  186.459462][ T5819] keyspan 8-1:1.0: device disconnected
[  186.470980][ T9674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1120'.
[  186.717000][ T9680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9680 comm=syz.4.1123
[  187.145150][ T9689] overlayfs: statfs failed on './file0'
[  187.292716][ T9699] binder: 9698:9699 unknown command 0
[  187.295131][ T9699] binder: 9698:9699 ioctl c0306201 200000000480 returned -22
[  187.348633][ T5819] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  187.503268][ T5819] usb 10-1: Using ep0 maxpacket: 8
[  187.514911][ T5819] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  187.526993][ T5819] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  187.536239][ T5819] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  187.541739][ T5819] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  187.546517][ T5819] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  187.553506][ T5819] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  187.556524][ T9706] jffs2: notice: (9706) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 4 orphan) and 6 of xref (0 dead, 4 orphan) found.
[  187.557502][ T5819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.582563][ T5819] usbtmc 10-1:16.0: bulk endpoints not found
[  187.596411][ T9702] kvm: pic: non byte write
[  187.604268][   T43] audit: type=1400 audit(1786023137.768:1330): avc:  denied  { write } for  pid=9708 comm="syz.3.1132" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  187.959967][ T5826] usb 8-1: new full-speed USB device number 38 using dummy_hcd
[  188.110665][ T5826] usb 8-1: not running at top speed; connect to a high speed hub
[  188.120578][ T5826] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.126972][ T5826] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  188.137078][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.156001][ T5826] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  188.159461][ T5826] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  188.162705][ T5826] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  188.172600][ T5826] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  188.183812][ T5826] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  188.193382][ T5826] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  188.213377][ T5826] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  188.216641][ T5826] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  188.225947][ T5826] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  188.275307][ T9719] overlayfs: statfs failed on './file0'
[  188.348006][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1134'.
[  188.355981][ T9713] jffs2: notice: (9713) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 4 orphan) and 6 of xref (0 dead, 4 orphan) found.
[  188.368843][   T43] audit: type=1400 audit(1786023138.538:1331): avc:  denied  { write } for  pid=9712 comm="syz.3.1134" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  188.388479][    T9] usb 8-1: USB disconnect, device number 38
[  188.398527][   T43] audit: type=1400 audit(1786023138.548:1332): avc:  denied  { write } for  pid=9712 comm="syz.3.1134" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  188.415068][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  188.426676][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  188.434546][    T9] keyspan 8-1:1.0: device disconnected
[  188.538788][ T5826] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[  188.556697][   T43] audit: type=1400 audit(1786023138.718:1333): avc:  denied  { connect } for  pid=9729 comm="syz.6.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  188.564928][   T43] audit: type=1400 audit(1786023138.718:1334): avc:  denied  { getopt } for  pid=9729 comm="syz.6.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  188.689036][ T5826] usb 9-1: Using ep0 maxpacket: 32
[  188.693139][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.697766][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.702018][ T5826] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  188.705766][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.713919][ T5826] usb 9-1: config 0 descriptor??
[  189.125678][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.130607][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.135745][ T9722] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  189.253473][ T5826] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  189.382975][ T9746] jffs2: notice: (9746) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 5 orphan) and 7 of xref (0 dead, 5 orphan) found.
[  189.430797][ T9746] netlink: 'syz.6.1144': attribute type 10 has an invalid length.
[  189.430864][   T43] audit: type=1400 audit(1786023139.598:1335): avc:  denied  { ioctl } for  pid=9745 comm="syz.6.1144" path="socket:[33083]" dev="sockfs" ino=33083 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  189.459826][ T9746] syz_tun: entered promiscuous mode
[  189.487565][ T9746] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  190.058464][    T9] usb 11-1: new full-speed USB device number 16 using dummy_hcd
[  190.103717][ T6867] usb 10-1: USB disconnect, device number 20
[  190.220291][    T9] usb 11-1: not running at top speed; connect to a high speed hub
[  190.227767][    T9] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.232311][ T5757] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  190.235789][    T9] usb 11-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  190.238242][ T5819] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  190.241482][    T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.252764][    T9] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected
[  190.256197][    T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81
[  190.260066][    T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1
[  190.264377][    T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84
[  190.267698][    T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2
[  190.272972][    T9] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  190.280517][    T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88
[  190.285403][    T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6
[  190.294085][    T9] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  190.398316][ T5819] usb 8-1: Using ep0 maxpacket: 32
[  190.402118][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.408627][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.415846][ T5819] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  190.419840][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.427392][ T5819] usb 8-1: config 0 descriptor??
[  190.453156][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1148'.
[  190.467249][ T9762] jffs2: notice: (9762) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 5 orphan) and 7 of xref (0 dead, 5 orphan) found.
[  190.484749][   T43] audit: type=1400 audit(1786023140.648:1336): avc:  denied  { write } for  pid=9761 comm="syz.6.1148" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  190.540192][   T43] audit: type=1400 audit(1786023140.698:1337): avc:  denied  { write } for  pid=9761 comm="syz.6.1148" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  190.551143][ T5750] usb 11-1: USB disconnect, device number 16
[  190.557997][    T9] usb 9-1: reset high-speed USB device number 34 using dummy_hcd
[  190.579058][ T5750] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  190.595751][ T5750] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  190.605446][ T5750] keyspan 11-1:1.0: device disconnected
[  190.846576][ T5819] usbhid 8-1:0.0: can't add hid device: -71
[  190.855239][ T5819] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  190.870817][ T5819] usb 8-1: USB disconnect, device number 39
[  191.473390][   T43] audit: type=1400 audit(1786023141.638:1338): avc:  denied  { getopt } for  pid=9782 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  191.590658][ T9785] binder_alloc: 9784: binder_alloc_buf, no vma
[  191.645476][ T9786] binder_alloc: 9784: binder_alloc_buf, no vma
[  192.542006][ T9788] FAULT_INJECTION: forcing a failure.
[  192.542006][ T9788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  192.566449][ T9788] CPU: 2 UID: 0 PID: 9788 Comm: syz.3.1157 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  192.566484][ T9788] Tainted: [L]=SOFTLOCKUP
[  192.566492][ T9788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  192.566513][ T9788] Call Trace:
[  192.566541][ T9788]  <TASK>
[  192.566550][ T9788]  dump_stack_lvl+0x100/0x190
[  192.566714][ T9788]  should_fail_ex.cold+0x5/0xa
[  192.566758][ T9788]  _copy_from_user+0x2e/0xd0
[  192.566828][ T9788]  kstrtouint_from_user+0xd6/0x1d0
[  192.566856][ T9788]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  192.566876][ T9788]  ? __lock_acquire+0x49f/0x1a40
[  192.566937][ T9788]  proc_fail_nth_write+0x83/0x220
[  192.566975][ T9788]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  192.566995][ T9788]  vfs_write+0x2aa/0x1050
[  192.567024][ T9788]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  192.567043][ T9788]  ? __pfx_vfs_write+0x10/0x10
[  192.567059][ T9788]  ? __fget_files+0x215/0x3d0
[  192.567081][ T9788]  ? __fget_files+0x21f/0x3d0
[  192.567096][ T9788]  ksys_write+0x12a/0x250
[  192.567106][ T9788]  ? __pfx_ksys_write+0x10/0x10
[  192.567120][ T9788]  do_syscall_64+0x115/0x870
[  192.567180][ T9788]  ? clear_bhb_loop+0x40/0x90
[  192.567196][ T9788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.567207][ T9788] RIP: 0033:0x7f97b975e90e
[  192.567218][ T9788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  192.567229][ T9788] RSP: 002b:00007f97ba665fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  192.567246][ T9788] RAX: ffffffffffffffda RBX: 00007f97ba6666c0 RCX: 00007f97b975e90e
[  192.567253][ T9788] RDX: 0000000000000001 RSI: 00007f97ba6660a0 RDI: 0000000000000004
[  192.567259][ T9788] RBP: 00007f97ba666090 R08: 0000000000000000 R09: 0000000000000000
[  192.567265][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  192.567272][ T9788] R13: 00007f97b9a26038 R14: 00007f97b9a25fa0 R15: 00007ffeb2239ef8
[  192.567285][ T9788]  </TASK>
[  193.096543][ T1444] ieee802154 phy0 wpan0: encryption failed: -22
[  193.099450][ T1444] ieee802154 phy1 wpan1: encryption failed: -22
[  193.320359][ T9780] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  193.329813][ T5757] Bluetooth: hci2: command 0x0419 tx timeout
[  193.706197][ T9793] syz.5.1159 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  193.710413][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.5.1159 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  193.710461][ T9793] Tainted: [L]=SOFTLOCKUP
[  193.710469][ T9793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  193.710481][ T9793] Call Trace:
[  193.710491][ T9793]  <TASK>
[  193.710500][ T9793]  dump_stack_lvl+0x100/0x190
[  193.710531][ T9793]  dump_header+0xfb/0x606
[  193.710569][ T9793]  oom_kill_process.cold+0xd/0x330
[  193.710590][ T9793]  out_of_memory+0x340/0x14f0
[  193.710641][ T9793]  ? __pfx_out_of_memory+0x10/0x10
[  193.710678][ T9793]  mem_cgroup_out_of_memory+0xc6/0x130
[  193.710701][ T9793]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  193.710717][ T9793]  ? find_held_lock+0x2b/0x80
[  193.710740][ T9793]  ? do_raw_spin_unlock+0x145/0x1e0
[  193.710767][ T9793]  ? _raw_spin_unlock+0x28/0x50
[  193.710790][ T9793]  try_charge_memcg+0x6e5/0xdf0
[  193.710820][ T9793]  ? __pfx_try_charge_memcg+0x10/0x10
[  193.710849][ T9793]  ? find_held_lock+0x2b/0x80
[  193.710866][ T9793]  ? rcu_read_unlock+0x17/0x60
[  193.710894][ T9793]  ? rcu_read_unlock+0x17/0x60
[  193.710922][ T9793]  ? find_held_lock+0x2b/0x80
[  193.710940][ T9793]  ? rcu_read_unlock+0x17/0x60
[  193.710968][ T9793]  charge_memcg+0x187/0x1e0
[  193.710995][ T9793]  __mem_cgroup_charge+0x2b/0x1c0
[  193.711025][ T9793]  do_wp_page+0xda4/0x4350
[  193.711066][ T9793]  ? __pfx_do_wp_page+0x10/0x10
[  193.711092][ T9793]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  193.711124][ T9793]  __handle_mm_fault+0x1ab6/0x2a00
[  193.711158][ T9793]  ? reacquire_held_locks+0xce/0x1e0
[  193.711183][ T9793]  ? __pfx___handle_mm_fault+0x10/0x10
[  193.711211][ T9793]  ? lock_vma_under_rcu+0x17c/0x590
[  193.711255][ T9793]  handle_mm_fault+0x37b/0xa30
[  193.711289][ T9793]  do_user_addr_fault+0x5a3/0x12f0
[  193.711335][ T9793]  exc_page_fault+0x6f/0xd0
[  193.711358][ T9793]  asm_exc_page_fault+0x26/0x30
[  193.711377][ T9793] RIP: 0033:0x7f08b855dec5
[  193.711394][ T9793] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 <f0> 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00
[  193.711412][ T9793] RSP: 002b:00007f08b94cfde0 EFLAGS: 00010293
[  193.711430][ T9793] RAX: 0000000000000008 RBX: 00007f08b9357e20 RCX: 0000000000000000
[  193.711447][ T9793] RDX: 0000000000000000 RSI: 00007f08b8632748 RDI: 00007f08b9357e20
[  193.711458][ T9793] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005
[  193.711468][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f08b86523ef
[  193.711478][ T9793] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007f08b8632748
[  193.711503][ T9793]  </TASK>
[  193.711783][ T9793] memory: usage 0kB, limit 0kB, failcnt 19
[  193.827869][ T9793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  193.831466][ T9793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  193.834434][ T9793] Memory cgroup stats for /syz5/test:
[  193.834588][ T9793] cache 0
[  193.841160][ T9793] rss 0
[  193.842387][ T9793] rss_huge 0
[  193.844653][ T9793] shmem 0
[  193.845994][ T9793] mapped_file 0
[  193.847895][ T9793] dirty 0
[  193.849158][ T9793] writeback 0
[  193.851395][ T9793] workingset_refault_anon 0
[  193.853325][ T9793] workingset_refault_file 0
[  193.855307][ T9793] swap 0
[  193.856556][ T9793] swapcached 0
[  193.865429][ T9793] pgpgin 0
[  193.866883][ T9793] pgpgout 0
[  193.868698][ T9793] pgfault 0
[  193.870117][ T9793] pgmajfault 0
[  193.871553][ T9793] inactive_anon 0
[  193.873137][ T9793] active_anon 0
[  193.874571][ T9793] inactive_file 0
[  193.876119][ T9793] active_file 0
[  193.879543][ T9793] unevictable 0
[  193.881102][ T9793] hierarchical_memory_limit 0
[  193.883028][ T9793] hierarchical_memsw_limit 9223372036854771712
[  193.885512][ T9793] total_cache 0
[  193.887067][ T9793] total_rss 0
[  193.890614][ T9793] total_rss_huge 0
[  193.892272][ T9793] total_shmem 0
[  193.893797][ T9793] total_mapped_file 0
[  193.895468][ T9793] total_dirty 0
[  193.897081][ T9793] total_writeback 0
[  193.900043][ T9793] total_workingset_refault_anon 0
[  193.902187][ T9793] total_workingset_refault_file 0
[  193.904310][ T9793] total_swap 0
[  193.905773][ T9793] total_swapcached 0
[  193.908123][ T9793] total_pgpgin 0
[  193.909781][ T9793] total_pgpgout 0
[  193.911393][ T9793] total_pgfault 0
[  193.913092][ T9793] total_pgmajfault 0
[  193.914836][ T9793] total_inactive_anon 0
[  193.916660][ T9793] total_active_anon 0
[  193.919178][ T9793] total_inactive_file 0
[  193.921912][ T9793] total_active_file 0
[  193.923749][ T9793] total_unevictable 0
[  193.925500][ T9793] anon_cost 0
[  193.926989][ T9793] file_cost 0
[  193.929659][ T9793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1159,pid=9792,uid=0
[  193.938698][ T9793] Memory cgroup out of memory: Killed process 9792 (syz.5.1159) total-vm:104432kB, anon-rss:1436kB, file-rss:23652kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  194.145441][ T9780] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  194.147627][ T9780] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  194.182899][ T9790] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  194.539545][ T5750] usb 8-1: new full-speed USB device number 40 using dummy_hcd
[  194.614205][ T9816] netdevsim netdevsim4 ÿÿÿÿÿÿëÓé”Îo¤¦|: renamed from netdevsim0 (while UP)
[  194.621299][ T9814] overlayfs: statfs failed on './file0'
[  194.719030][ T5750] usb 8-1: not running at top speed; connect to a high speed hub
[  194.723420][ T5750] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.732650][ T5750] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  194.743390][ T5750] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.784117][ T5750] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  194.819689][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  194.826125][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  194.852343][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  194.862519][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  194.880816][ T5750] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  194.906674][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  194.928973][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  194.940068][ T5750] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  194.968763][ T9820] vivid-000: =================  START STATUS  =================
[  194.982745][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1162'.
[  194.983662][ T9820] vivid-000: Test Pattern: 
[  194.991995][ T9832] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  194.996121][ T9820] 75% Colorbar
[  195.000498][ T9820] vivid-000: Fill Percentage of Frame: 100
[  195.006884][ T9820] vivid-000: Horizontal Movement: No Movement
[  195.014132][ T9820] vivid-000: Vertical Movement: No Movement
[  195.022813][ T9800] jffs2: notice: (9800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 6 orphan) and 8 of xref (0 dead, 6 orphan) found.
[  195.033700][ T6867] usb 9-1: USB disconnect, device number 34
[  195.047419][ T9820] vivid-000: OSD Text Mode: All
[  195.052706][ T9820] vivid-000: Show Border: false
[  195.056028][ T9834] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1173'.
[  195.062672][   T43] audit: type=1400 audit(1786023145.219:1339): avc:  denied  { write } for  pid=9799 comm="syz.3.1162" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  195.075634][ T9820] vivid-000: Show Square: true
[  195.084509][ T9820] vivid-000: Sensor Flipped Horizontally: false
[  195.098779][   T43] audit: type=1400 audit(1786023145.229:1340): avc:  denied  { write } for  pid=9799 comm="syz.3.1162" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  195.113493][ T9820] vivid-000: Sensor Flipped Vertically: false
[  195.121411][ T5750] usb 8-1: USB disconnect, device number 40
[  195.141265][ T9820] vivid-000: Insert SAV Code in Image: false
[  195.146543][ T5750] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  195.155592][ T9820] vivid-000: Insert EAV Code in Image: true
[  195.175990][ T9820] vivid-000: Insert Video Guard Band: false
[  195.188789][ T9820] vivid-000: Reduced Framerate: false
[  195.194010][ T5750] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  195.201872][ T9820] vivid-000: HDMI 000-0 Is Connected To: None
[  195.211972][ T9820] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  195.215810][ T5750] keyspan 8-1:1.0: device disconnected
[  195.224866][ T9820] vivid-000: Enable Capture Cropping: true
[  195.241088][ T9820] vivid-000: Enable Capture Composing: true
[  195.249599][ T9820] vivid-000: Enable Capture Scaler: true
[  195.259309][ T9820] vivid-000: Timestamp Source: Start of Exposure
[  195.272159][ T9820] vivid-000: Colorspace: sRGB
[  195.278607][ T9820] vivid-000: Transfer Function: Default
[  195.286330][ T9820] vivid-000: Y'CbCr Encoding: Default
[  195.297988][ T9820] vivid-000: HSV Encoding: Hue 0-179
[  195.304920][ T9820] vivid-000: Quantization: Default
[  195.310901][ T9820] vivid-000: Apply Alpha To Red Only: false
[  195.318609][ T9820] vivid-000: Standard Aspect Ratio: 4x3
[  195.322242][ T9820] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  195.329040][ T9820] vivid-000: DV Timings: 640x480p59 inactive
[  195.332952][   T43] audit: type=1400 audit(1786023145.499:1341): avc:  denied  { audit_write } for  pid=9838 comm="syz.4.1175" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  195.341403][ T5757] Bluetooth: hci3: unexpected event for opcode 0x2041
[  195.342343][ T9820] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  195.354393][ T9820] vivid-000: Maximum EDID Blocks: 2
[  195.358579][ T9820] vivid-000: Limited RGB Range (16-235): false
[  195.364515][ T9820] vivid-000: Rx RGB Quantization Range: Automatic
[  195.369218][ T9820] vivid-000: Power Present: 0x00000000
[  195.374636][ T9820] tpg source WxH: 320x180 (Y'CbCr)
[  195.377510][ T9820] tpg field: 1
[  195.378720][ T9820] tpg crop: (0,0)/320x180
[  195.384912][ T9820] tpg compose: (0,0)/320x180
[  195.388755][ T9820] tpg colorspace: 8
[  195.390179][ T9820] tpg transfer function: 0/2
[  195.398591][ T9820] tpg Y'CbCr encoding: 0/1
[  195.405586][ T9820] tpg quantization: 0/2
[  195.411311][ T9820] tpg RGB range: 0/2
[  195.414857][ T9820] vivid-000: ==================  END STATUS  ==================
[  195.438407][ T9840] netlink: 'syz.4.1175': attribute type 3 has an invalid length.
[  195.445422][ T9840] netlink: 'syz.4.1175': attribute type 1 has an invalid length.
[  195.450277][ T9840] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1175'.
[  195.469045][ T9823] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  195.590516][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'.
[  195.643424][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'.
[  195.651400][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'.
[  195.661513][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'.
[  195.669148][ T9842] FAULT_INJECTION: forcing a failure.
[  195.669148][ T9842] name failslab, interval 1, probability 0, space 0, times 0
[  195.680795][ T9842] CPU: 2 UID: 0 PID: 9842 Comm: syz.4.1176 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  195.680816][ T9842] Tainted: [L]=SOFTLOCKUP
[  195.680820][ T9842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  195.680828][ T9842] Call Trace:
[  195.680833][ T9842]  <TASK>
[  195.680839][ T9842]  dump_stack_lvl+0x100/0x190
[  195.680873][ T9842]  should_fail_ex.cold+0x5/0xa
[  195.680887][ T9842]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  195.680918][ T9842]  should_failslab+0xc2/0x120
[  195.680942][ T9842]  kmem_cache_alloc_noprof+0x91/0x6a0
[  195.680957][ T9842]  ? skb_clone+0x190/0x400
[  195.681021][ T9842]  skb_clone+0x190/0x400
[  195.681036][ T9842]  netlink_deliver_tap+0xaed/0xcc0
[  195.681057][ T9842]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  195.681073][ T9842]  netlink_dump+0x631/0xd00
[  195.681085][ T9842]  ? __pfx_netlink_dump+0x10/0x10
[  195.681095][ T9842]  ? kasan_quarantine_put+0x104/0x240
[  195.681114][ T9842]  ? kfree_skbmem+0x19f/0x210
[  195.681126][ T9842]  netlink_recvmsg+0x7dc/0xa90
[  195.681150][ T9842]  ? __pfx_netlink_recvmsg+0x10/0x10
[  195.681166][ T9842]  ? __import_iovec+0x1d2/0x640
[  195.681183][ T9842]  ? __pfx_netlink_recvmsg+0x10/0x10
[  195.681193][ T9842]  ____sys_recvmsg+0x5eb/0x670
[  195.681214][ T9842]  ? __pfx_____sys_recvmsg+0x10/0x10
[  195.681236][ T9842]  ? rcu_is_watching+0x12/0xc0
[  195.681262][ T9842]  ? ___sys_recvmsg+0x177/0x1a0
[  195.681272][ T9842]  ? kfree+0x1e5/0x6c0
[  195.681291][ T9842]  ___sys_recvmsg+0x16a/0x1a0
[  195.681303][ T9842]  ? __pfx____sys_recvmsg+0x10/0x10
[  195.681321][ T9842]  ? __pfx___might_resched+0x10/0x10
[  195.681345][ T9842]  do_recvmmsg+0x2f3/0x740
[  195.681358][ T9842]  ? __pfx_do_recvmmsg+0x10/0x10
[  195.681372][ T9842]  ? __mutex_unlock_slowpath+0x35d/0x930
[  195.681391][ T9842]  ? __fget_files+0x21f/0x3d0
[  195.681406][ T9842]  __x64_sys_recvmmsg+0x22a/0x280
[  195.681423][ T9842]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  195.681442][ T9842]  do_syscall_64+0x115/0x870
[  195.681456][ T9842]  ? clear_bhb_loop+0x40/0x90
[  195.681470][ T9842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.681482][ T9842] RIP: 0033:0x7f88ab19e0d9
[  195.681495][ T9842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.681506][ T9842] RSP: 002b:00007f88ac076028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  195.681531][ T9842] RAX: ffffffffffffffda RBX: 00007f88ab425fa0 RCX: 00007f88ab19e0d9
[  195.681538][ T9842] RDX: 0000000000000318 RSI: 0000200000007700 RDI: 0000000000000003
[  195.681544][ T9842] RBP: 00007f88ac076090 R08: 0000000000000000 R09: 0000000000000000
[  195.681551][ T9842] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000002
[  195.681557][ T9842] R13: 00007f88ab426038 R14: 00007f88ab425fa0 R15: 00007ffdcbeda838
[  195.681571][ T9842]  </TASK>
[  195.788337][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'.
[  195.920891][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'.
[  195.957899][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'.
[  196.008471][ T5550] netdevsim netdevsim4 ÿÿÿÿÿÿëÓé”Îo¤¦|: set [0, 0] type 1 family 0 port 8472 - 0
[  196.015914][ T5550] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.022055][ T9849] overlayfs: statfs failed on './file0'
[  196.036927][ T5550] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.055844][ T5550] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.070367][ T9856] FAULT_INJECTION: forcing a failure.
[  196.070367][ T9856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.075589][ T9856] CPU: 2 UID: 0 PID: 9856 Comm: syz.3.1181 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.075628][ T9856] Tainted: [L]=SOFTLOCKUP
[  196.075633][ T9856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  196.075639][ T9856] Call Trace:
[  196.075644][ T9856]  <TASK>
[  196.075650][ T9856]  dump_stack_lvl+0x100/0x190
[  196.075672][ T9856]  should_fail_ex.cold+0x5/0xa
[  196.075688][ T9856]  _copy_from_user+0x2e/0xd0
[  196.075705][ T9856]  kstrtouint_from_user+0xd6/0x1d0
[  196.075718][ T9856]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  196.075730][ T9856]  ? __lock_acquire+0x49f/0x1a40
[  196.075750][ T9856]  proc_fail_nth_write+0x83/0x220
[  196.075769][ T9856]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  196.075790][ T9856]  vfs_write+0x2aa/0x1050
[  196.075808][ T9856]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  196.075826][ T9856]  ? __pfx_vfs_write+0x10/0x10
[  196.075842][ T9856]  ? __fget_files+0x215/0x3d0
[  196.075858][ T9856]  ? __fget_files+0x21f/0x3d0
[  196.075872][ T9856]  ksys_write+0x12a/0x250
[  196.075882][ T9856]  ? __pfx_ksys_write+0x10/0x10
[  196.075896][ T9856]  do_syscall_64+0x115/0x870
[  196.075911][ T9856]  ? clear_bhb_loop+0x40/0x90
[  196.075925][ T9856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.075937][ T9856] RIP: 0033:0x7f97b975e90e
[  196.075947][ T9856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  196.075958][ T9856] RSP: 002b:00007f97ba665fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  196.075970][ T9856] RAX: ffffffffffffffda RBX: 00007f97ba6666c0 RCX: 00007f97b975e90e
[  196.075977][ T9856] RDX: 0000000000000001 RSI: 00007f97ba6660a0 RDI: 0000000000000003
[  196.075983][ T9856] RBP: 00007f97ba666090 R08: 0000000000000000 R09: 0000000000000000
[  196.075989][ T9856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  196.075996][ T9856] R13: 00007f97b9a26038 R14: 00007f97b9a25fa0 R15: 00007ffeb2239ef8
[  196.076014][ T9856]  </TASK>
[  196.203040][ T5757] Bluetooth: hci4: command 0x0c1a tx timeout
[  196.648160][ T9884] block2mtd: error: cannot open device /dev/loop0
[  196.798185][ T9890] overlayfs: statfs failed on './file0'
[  196.847212][ T5750] usb 8-1: new full-speed USB device number 41 using dummy_hcd
[  197.008642][ T5750] usb 8-1: not running at top speed; connect to a high speed hub
[  197.019665][ T5750] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.026694][ T5750] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  197.033459][ T5750] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.074239][ T5750] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  197.088557][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  197.101051][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  197.105700][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  197.109563][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  197.118762][ T5750] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  197.123068][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  197.125727][ T5750] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  197.129760][ T5750] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  197.288916][ T9895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9895 comm=syz.6.1196
[  197.292984][ T9882] jffs2: notice: (9882) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 7 orphan) and 9 of xref (0 dead, 7 orphan) found.
[  197.313814][   T43] audit: type=1400 audit(1786023147.479:1342): avc:  denied  { write } for  pid=9881 comm="syz.3.1189" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  197.320748][ T5750] usb 8-1: USB disconnect, device number 41
[  197.326493][ T5750] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  197.337451][   T43] audit: type=1400 audit(1786023147.479:1343): avc:  denied  { write } for  pid=9881 comm="syz.3.1189" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  197.360590][ T5750] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  197.392310][ T5750] keyspan 8-1:1.0: device disconnected
[  197.615878][ T9914] CIFS mount error: No usable UNC path provided in device string!
[  197.615878][ T9914] 
[  197.620349][ T9914] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  197.624593][ T9915] CIFS: Attempting to mount //127.0.0.1/share
[  197.635139][ T9916] CIFS mount error: No usable UNC path provided in device string!
[  197.635139][ T9916] 
[  197.645924][ T9916] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  197.778377][ T9923] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  197.784975][   T43] audit: type=1400 audit(1786023147.949:1344): avc:  denied  { write } for  pid=9922 comm="syz.4.1204" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  198.190889][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.202447][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.385710][   T43] audit: type=1400 audit(1786023148.549:1345): avc:  denied  { bind } for  pid=9934 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  198.389409][ T9935] bridge1: the hash_elasticity option has been deprecated and is always 16
[  198.401846][ T9936] vivid-000: =================  START STATUS  =================
[  198.406080][ T9936] vivid-000: Test Pattern: 75% Colorbar
[  198.412227][ T9936] vivid-000: Fill Percentage of Frame: 100
[  198.416679][ T9936] vivid-000: Horizontal Movement: No Movement
[  198.419785][ T9936] vivid-000: Vertical Movement: No Movement
[  198.424216][ T9936] vivid-000: OSD Text Mode: All
[  198.427911][ T9936] vivid-000: Show Border: false
[  198.435718][ T9936] vivid-000: Show Square: true
[  198.442680][ T9936] vivid-000: Sensor Flipped Horizontally: false
[  198.453656][ T9936] vivid-000: Sensor Flipped Vertically: false
[  198.460138][ T9915] CIFS: VFS: cifs_mount failed w/return code = -512
[  198.460777][ T9936] vivid-000: Insert SAV Code in Image: false
[  198.475541][ T9936] vivid-000: Insert EAV Code in Image: true
[  198.489602][ T9936] vivid-000: Insert Video Guard Band: false
[  198.506132][ T9936] vivid-000: Reduced Framerate: false
[  198.514932][ T9933] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  198.515951][ T9936] vivid-000: HDMI 000-0 Is Connected To: None
[  198.523549][ T9936] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  198.526154][ T9936] vivid-000: Enable Capture Cropping: true
[  198.538290][ T9936] vivid-000: Enable Capture Composing: true
[  198.540972][ T9936] vivid-000: Enable Capture Scaler: true
[  198.542911][ T9936] vivid-000: Timestamp Source: Start of Exposure
[  198.544956][ T9936] vivid-000: Colorspace: sRGB
[  198.546475][ T9936] vivid-000: Transfer Function: Default
[  198.557114][ T9936] vivid-000: Y'CbCr Encoding: Default
[  198.560286][ T9936] vivid-000: HSV Encoding: Hue 0-179
[  198.562710][ T9936] vivid-000: Quantization: Default
[  198.564816][ T9936] vivid-000: Apply Alpha To Red Only: false
[  198.566687][ T9936] vivid-000: Standard Aspect Ratio: 4x3
[  198.574177][ T9936] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  198.583733][ T9936] vivid-000: DV Timings: 640x480p59 inactive
[  198.586626][ T9936] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  198.594728][ T9936] vivid-000: Maximum EDID Blocks: 2
[  198.598829][ T9936] vivid-000: Limited RGB Range (16-235): false
[  198.604807][ T9936] vivid-000: Rx RGB Quantization Range: Automatic
[  198.613538][ T9936] vivid-000: Power Present: 0x00000000
[  198.619810][ T9936] tpg source WxH: 320x180 (Y'CbCr)
[  198.623074][ T9936] tpg field: 1
[  198.629283][ T9936] tpg crop: (0,0)/320x180
[  198.634793][ T9936] tpg compose: (0,0)/320x180
[  198.638050][ T9936] tpg colorspace: 8
[  198.639306][ T9936] tpg transfer function: 0/2
[  198.646502][ T9936] tpg Y'CbCr encoding: 0/1
[  198.648164][ T9936] tpg quantization: 0/2
[  198.649510][ T9936] tpg RGB range: 0/2
[  198.654156][ T9936] vivid-000: ==================  END STATUS  ==================
[  198.892114][ T9945] qnx4: no qnx4 filesystem (no root dir).
[  198.932149][   T43] audit: type=1400 audit(1786023149.099:1346): avc:  denied  { bind } for  pid=9944 comm="syz.4.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  198.943047][ T9945] ./mnt: Can't lookup blockdev
[  198.968359][    T9] usb 8-1: new full-speed USB device number 42 using dummy_hcd
[  199.134144][    T9] usb 8-1: not running at top speed; connect to a high speed hub
[  199.139575][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.142861][    T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  199.145830][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.156252][    T9] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  199.160688][    T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  199.166375][    T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  199.171666][    T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  199.174112][    T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  199.180005][    T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  199.188592][    T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  199.194899][    T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  199.202740][    T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  199.341091][ T9129] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  199.357731][ T9129] (NULL device *): queue 0 connect admin queue failed (-111).
[  199.362503][ T9129] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  199.365631][ T9129] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  199.369898][ T9949] jffs2: notice: (9949) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 7 orphan) and 11 of xref (0 dead, 8 orphan) found.
[  199.372133][ T9957] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nq", hostnqn: nqn.2014-08.org.nvmexpress:uuid:e481356e-1221-4a51-a41e-eebbaac77487
[  199.389821][   T43] audit: type=1400 audit(1786023149.559:1347): avc:  denied  { write } for  pid=9948 comm="syz.3.1214" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  199.393299][ T5750] usb 8-1: USB disconnect, device number 42
[  199.403106][ T5750] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  199.408618][   T43] audit: type=1400 audit(1786023149.559:1348): avc:  denied  { write } for  pid=9948 comm="syz.3.1214" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  199.418932][ T5750] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  199.423290][ T5750] keyspan 8-1:1.0: device disconnected
[  199.544625][ T9969] overlayfs: statfs failed on './file0'
[  199.701122][ T9977] overlayfs: overlapping lowerdir path
[  199.777909][ T9978] syz.5.1222: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  199.784963][ T9978] CPU: 0 UID: 0 PID: 9978 Comm: syz.5.1222 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  199.785000][ T9978] Tainted: [L]=SOFTLOCKUP
[  199.785008][ T9978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  199.785023][ T9978] Call Trace:
[  199.785033][ T9978]  <TASK>
[  199.785044][ T9978]  dump_stack_lvl+0x100/0x190
[  199.785079][ T9978]  warn_alloc.cold+0x94/0xa8
[  199.785101][ T9978]  ? __pfx_warn_alloc+0x10/0x10
[  199.785124][ T9978]  ? policy_nodemask+0xed/0x4f0
[  199.785155][ T9978]  ? alloc_pages_mpol+0x25a/0x540
[  199.785183][ T9978]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  199.785210][ T9978]  ? find_held_lock+0x2b/0x80
[  199.785231][ T9978]  ? rcu_read_unlock+0x17/0x60
[  199.785265][ T9978]  __vmalloc_node_range_noprof+0x13f6/0x1630
[  199.785304][ T9978]  ? kvm_dev_ioctl+0x154/0x1b50
[  199.785366][ T9978]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  199.785398][ T9978]  ? __pfx_vsnprintf+0x10/0x10
[  199.785427][ T9978]  ? rcu_is_watching+0x12/0xc0
[  199.785471][ T9978]  __kvmalloc_node_noprof+0x3d3/0x970
[  199.785496][ T9978]  ? kvm_dev_ioctl+0x154/0x1b50
[  199.785525][ T9978]  ? alloc_fd+0x471/0x7a0
[  199.785547][ T9978]  ? kvm_dev_ioctl+0x154/0x1b50
[  199.785584][ T9978]  kvm_dev_ioctl+0x154/0x1b50
[  199.785618][ T9978]  ? hook_file_ioctl_common+0x140/0x440
[  199.785676][ T9978]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  199.785714][ T9978]  ? selinux_file_ioctl+0x13b/0x290
[  199.785756][ T9978]  ? selinux_file_ioctl+0xb6/0x290
[  199.785789][ T9978]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  199.785825][ T9978]  __x64_sys_ioctl+0x18e/0x210
[  199.785860][ T9978]  do_syscall_64+0x115/0x870
[  199.785885][ T9978]  ? clear_bhb_loop+0x40/0x90
[  199.785934][ T9978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.785959][ T9978] RIP: 0033:0x7f08b859e0d9
[  199.785977][ T9978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.785996][ T9978] RSP: 002b:00007f08b94b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.786016][ T9978] RAX: ffffffffffffffda RBX: 00007f08b8826090 RCX: 00007f08b859e0d9
[  199.786029][ T9978] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000c
[  199.786041][ T9978] RBP: 00007f08b8635024 R08: 0000000000000000 R09: 0000000000000000
[  199.786055][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.786069][ T9978] R13: 00007f08b8826128 R14: 00007f08b8826090 R15: 00007ffe38c90a88
[  199.786097][ T9978]  </TASK>
[  199.786218][ T9978] Mem-Info:
[  199.883690][ T9978] active_anon:12800 inactive_anon:11287 isolated_anon:0
[  199.883690][ T9978]  active_file:4490 inactive_file:24142 isolated_file:0
[  199.883690][ T9978]  unevictable:768 dirty:204 writeback:0
[  199.883690][ T9978]  slab_reclaimable:8025 slab_unreclaimable:73860
[  199.883690][ T9978]  mapped:25733 shmem:11685 pagetables:3932
[  199.883690][ T9978]  sec_pagetables:293 bounce:0
[  199.883690][ T9978]  kernel_misc_reclaimable:0
[  199.883690][ T9978]  free:450002 free_pcp:24659 free_cma:0
[  199.901000][ T9978] Node 0 active_anon:51196kB inactive_anon:36524kB active_file:17960kB inactive_file:96312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82404kB dirty:812kB writeback:0kB shmem:36580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:14752kB pagetables:14988kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  199.913495][ T9978] Node 1 active_anon:4kB inactive_anon:8624kB active_file:0kB inactive_file:256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20528kB dirty:4kB writeback:0kB shmem:10160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  199.924073][ T9978] Node 0 DMA free:5812kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1264kB inactive_anon:5768kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  199.934456][ T9978] lowmem_reserve[]: 0 1225 1225 1225 1225
[  199.936457][ T9978] Node 0 DMA32 free:251096kB boost:0kB min:27788kB low:34732kB high:41676kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49932kB inactive_anon:30756kB active_file:17960kB inactive_file:96308kB unevictable:1536kB writepending:812kB zspages:1880kB present:2080628kB managed:1255220kB mlocked:0kB bounce:0kB free_pcp:50752kB local_pcp:14328kB free_cma:0kB
[  199.947462][ T9978] lowmem_reserve[]: 0 0 0 0 0
[  199.949054][ T9978] Node 1 Normal free:1543352kB boost:0kB min:39452kB low:49312kB high:59172kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8624kB active_file:0kB inactive_file:256kB unevictable:1536kB writepending:4kB zspages:324kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:47624kB local_pcp:9252kB free_cma:0kB
[  199.959776][ T9978] lowmem_reserve[]: 0 0 0 0 0
[  199.961379][ T9978] Node 0 DMA: 5*4kB (UM) 2*8kB (U) 7*16kB (UME) 3*32kB (UME) 3*64kB (UME) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 5812kB
[  199.966558][ T9978] Node 0 DMA32: 1810*4kB (UME) 1282*8kB (UME) 538*16kB (UME) 635*32kB (UME) 276*64kB (UME) 215*128kB (UME) 153*256kB (UM) 115*512kB (UM) 60*1024kB (UM) 0*2048kB 0*4096kB = 251096kB
[  199.981984][ T9978] Node 1 Normal: 149*4kB (U) 146*8kB (UM) 208*16kB (UME) 195*32kB (UM) 160*64kB (UME) 153*128kB (UME) 140*256kB (UME) 122*512kB (U) 115*1024kB (UE) 6*2048kB (UME) 311*4096kB (UM) = 1543364kB
[  199.991077][ T9978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  199.994587][ T9978] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB
[  199.998137][ T9978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  200.001122][ T9978] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB
[  200.004013][ T9978] 40318 total pagecache pages
[  200.005543][ T9978] 5 pages in swap cache
[  200.007288][ T9978] Free swap  = 84468kB
[  200.008585][ T9978] Total swap = 124996kB
[  200.009899][ T9978] 1048443 pages RAM
[  200.011123][ T9978] 0 pages HighMem/MovableOnly
[  200.012771][ T9978] 285327 pages reserved
[  200.014178][ T9978] 0 pages cma reserved
[  200.076418][ T9982] jffs2: notice: (9982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (1 unchecked, 8 orphan) and 12 of xref (0 dead, 9 orphan) found.
[  200.085533][ T9982] /dev/sg0: Can't lookup blockdev
[  200.089053][ T9982] gadgetfs: bound to dummy_udc driver
[  200.245745][ T9987] nvme nvme1: failed to connect socket: -111
[  200.357205][ T5757] Bluetooth: hci3: command 0x041b tx timeout
[  200.867000][ T9992] jffs2: notice: (9992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (1 unchecked, 8 orphan) and 12 of xref (0 dead, 9 orphan) found.
[  200.873658][   T43] audit: type=1400 audit(1786023151.040:1349): avc:  denied  { write } for  pid=9991 comm="syz.3.1227" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  200.966029][ T9995] overlayfs: statfs failed on './file0'
[  201.069030][T10000] jffs2: notice: (10000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (1 unchecked, 8 orphan) and 12 of xref (0 dead, 9 orphan) found.
[  201.077863][T10000] FAULT_INJECTION: forcing a failure.
[  201.077863][T10000] name failslab, interval 1, probability 0, space 0, times 0
[  201.082219][T10000] CPU: 2 UID: 0 PID: 10000 Comm: syz.3.1230 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  201.082249][T10000] Tainted: [L]=SOFTLOCKUP
[  201.082257][T10000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  201.082268][T10000] Call Trace:
[  201.082275][T10000]  <TASK>
[  201.082290][T10000]  dump_stack_lvl+0x100/0x190
[  201.082321][T10000]  should_fail_ex.cold+0x5/0xa
[  201.082345][T10000]  should_failslab+0xc2/0x120
[  201.082370][T10000]  __kmalloc_cache_noprof+0x91/0x6c0
[  201.082402][T10000]  ? gadgetfs_bind+0x582/0x890
[  201.082479][T10000]  gadgetfs_bind+0x582/0x890
[  201.082513][T10000]  gadget_bind_driver+0x28c/0xbf0
[  201.082535][T10000]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  201.082563][T10000]  ? __pfx_gadget_bind_driver+0x10/0x10
[  201.082584][T10000]  really_probe+0x241/0xa60
[  201.082654][T10000]  __driver_probe_device+0x20e/0x450
[  201.082678][T10000]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  201.082715][T10000]  driver_probe_device+0x4a/0x140
[  201.082740][T10000]  __driver_attach+0x21f/0x5b0
[  201.082764][T10000]  ? __pfx___driver_attach+0x10/0x10
[  201.082787][T10000]  bus_for_each_dev+0x13e/0x1d0
[  201.082808][T10000]  ? __pfx_bus_for_each_dev+0x10/0x10
[  201.082825][T10000]  ? bus_add_driver+0x2b5/0x5b0
[  201.082852][T10000]  bus_add_driver+0x305/0x5b0
[  201.082876][T10000]  driver_register+0x1e2/0x360
[  201.082904][T10000]  usb_gadget_register_driver_owner+0x132/0x210
[  201.082926][T10000]  dev_config+0xdce/0x1610
[  201.082956][T10000]  ? __pfx_dev_config+0x10/0x10
[  201.082989][T10000]  vfs_write+0x2aa/0x1050
[  201.083020][T10000]  ? __pfx_dev_config+0x10/0x10
[  201.083048][T10000]  ? __pfx_vfs_write+0x10/0x10
[  201.083076][T10000]  ? __fget_files+0x215/0x3d0
[  201.083102][T10000]  ? __fget_files+0x21f/0x3d0
[  201.083129][T10000]  ksys_write+0x12a/0x250
[  201.083147][T10000]  ? __pfx_ksys_write+0x10/0x10
[  201.083172][T10000]  do_syscall_64+0x115/0x870
[  201.083196][T10000]  ? clear_bhb_loop+0x40/0x90
[  201.083220][T10000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.083240][T10000] RIP: 0033:0x7f97b979e0d9
[  201.083257][T10000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.083274][T10000] RSP: 002b:00007f97ba666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  201.083304][T10000] RAX: ffffffffffffffda RBX: 00007f97b9a25fa0 RCX: 00007f97b979e0d9
[  201.083315][T10000] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000006
[  201.083326][T10000] RBP: 00007f97ba666090 R08: 0000000000000000 R09: 0000000000000000
[  201.083336][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  201.083349][T10000] R13: 00007f97b9a26038 R14: 00007f97b9a25fa0 R15: 00007ffeb2239ef8
[  201.083374][T10000]  </TASK>
[  201.083410][T10000] udc dummy_udc.0: failed to start USB Gadget filesystem: -12
[  201.169727][   T43] audit: type=1400 audit(1786023151.320:1350): avc:  denied  { write } for  pid=10002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.175429][T10000] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12
[  201.222715][T10000] gadgetfs: bound to dummy_udc driver
[  201.275401][   T43] audit: type=1400 audit(1786023151.440:1351): avc:  denied  { write } for  pid=10005 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.399883][ T9129] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  201.407271][ T9129] (NULL device *): queue 0 connect admin queue failed (-111).
[  201.410378][ T9129] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  201.413498][ T9129] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  201.597137][ T5819] usb 8-1: new full-speed USB device number 43 using dummy_hcd
[  201.750274][ T5819] usb 8-1: not running at top speed; connect to a high speed hub
[  201.753792][ T5819] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.757134][ T5819] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  201.760141][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.766193][ T5819] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  201.768992][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  201.772520][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  201.776402][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  201.780147][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  201.784663][ T5819] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  201.795261][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  201.799151][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  201.805359][ T5819] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  201.971911][T10008] jffs2: notice: (10008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (1 unchecked, 8 orphan) and 12 of xref (0 dead, 9 orphan) found.
[  201.986095][   T43] audit: type=1400 audit(1786023152.150:1352): avc:  denied  { write } for  pid=10007 comm="syz.3.1231" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  201.989324][ T5819] usb 8-1: USB disconnect, device number 43
[  201.996300][   T43] audit: type=1400 audit(1786023152.150:1353): avc:  denied  { write } for  pid=10007 comm="syz.3.1231" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  202.017102][ T5819] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  202.026939][ T5819] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  202.032619][ T5819] keyspan 8-1:1.0: device disconnected
[  202.292100][ T9962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.436588][ T5757] Bluetooth: hci3: command 0x041b tx timeout
[  202.444330][ T5757] Bluetooth: hci3: unexpected event for opcode 0x200c
[  202.484881][T10020] tmpfs: Bad value for 'mpol'
[  202.495163][   T43] audit: type=1400 audit(1786023152.660:1354): avc:  denied  { create } for  pid=10017 comm="syz.5.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  202.511478][   T43] audit: type=1400 audit(1786023152.670:1355): avc:  denied  { write } for  pid=10017 comm="syz.5.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  202.589508][T10025] overlayfs: statfs failed on './file0'
[  202.767160][T10036] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(234881028.50.0), cmd(1)
[  202.797938][T10039] __nla_validate_parse: 5 callbacks suppressed
[  202.797953][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'.
[  203.032756][T10050] overlayfs: statfs failed on './file0'
[  203.134490][T10053] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1248'.
[  203.186990][ T6867] usb 8-1: new full-speed USB device number 44 using dummy_hcd
[  203.272878][   T43] audit: type=1400 audit(1786023153.440:1356): avc:  denied  { setattr } for  pid=10060 comm="syz.6.1251" name="direction" dev="configfs" ino=34860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  203.286130][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1251'.
[  203.290171][T10061] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1251'.
[  203.293611][   T43] audit: type=1800 audit(1786023153.440:1357): pid=10061 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1251" name="direction" dev="configfs" ino=34861 res=0 errno=0
[  203.302556][   T43] audit: type=1400 audit(1786023153.460:1358): avc:  denied  { remount } for  pid=10060 comm="syz.6.1251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  203.347807][ T6867] usb 8-1: not running at top speed; connect to a high speed hub
[  203.354946][ T6867] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.360342][ T6867] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  203.364865][ T6867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.373699][T10065] jffs2: notice: (10065) jffs2_build_xattr_subsystem: complete building xattr subsystem, 10 of xdatum (1 unchecked, 9 orphan) and 13 of xref (0 dead, 10 orphan) found.
[  203.373775][ T6867] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  203.386858][ T6867] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  203.389387][ T6867] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  203.399929][T10065] ==================================================================
[  203.402512][T10065] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x36/0x50
[  203.404872][ T6867] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  203.405071][T10065] Read of size 1 at addr ffff888059908018 by task syz.6.1252/10065
[  203.412030][T10065] 
[  203.412503][ T6867] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  203.412819][T10065] CPU: 2 UID: 0 PID: 10065 Comm: syz.6.1252 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  203.412840][T10065] Tainted: [L]=SOFTLOCKUP
[  203.412845][T10065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  203.412853][T10065] Call Trace:
[  203.412859][T10065]  <TASK>
[  203.412864][T10065]  dump_stack_lvl+0x100/0x190
[  203.412883][T10065]  print_report+0x13d/0x4b0
[  203.412903][T10065]  ? __virt_addr_valid+0x239/0x430
[  203.412921][T10065]  ? _raw_spin_lock_irq+0x36/0x50
[  203.412935][T10065]  kasan_report+0xdf/0x1c0
[  203.412951][T10065]  ? _raw_spin_lock_irq+0x36/0x50
[  203.412965][T10065]  ? _raw_spin_lock_irq+0x36/0x50
[  203.412978][T10065]  __kasan_check_byte+0x36/0x50
[  203.412995][T10065]  lock_acquire+0x132/0x370
[  203.413012][T10065]  ? _raw_spin_lock_irq+0x45/0x50
[  203.413025][T10065]  _raw_spin_lock_irq+0x36/0x50
[  203.413036][T10065]  ? gadget_dev_open+0x44/0x1b0
[  203.413053][T10065]  gadget_dev_open+0x44/0x1b0
[  203.413069][T10065]  do_dentry_open+0x6ab/0x14d0
[  203.413080][T10065]  ? __pfx_gadget_dev_open+0x10/0x10
[  203.413097][T10065]  vfs_open+0x82/0x3f0
[  203.413111][T10065]  path_openat+0x2873/0x4280
[  203.413129][T10065]  ? __pfx_path_openat+0x10/0x10
[  203.413146][T10065]  do_file_open+0x20e/0x430
[  203.413159][T10065]  ? __pfx_do_file_open+0x10/0x10
[  203.413175][T10065]  ? alloc_fd+0x471/0x7a0
[  203.413187][T10065]  ? do_getname+0x191/0x390
[  203.413203][T10065]  do_sys_openat2+0x10f/0x1e0
[  203.413216][T10065]  ? __pfx_do_sys_openat2+0x10/0x10
[  203.413233][T10065]  __x64_sys_openat+0x12d/0x210
[  203.413247][T10065]  ? __pfx___x64_sys_openat+0x10/0x10
[  203.413264][T10065]  do_syscall_64+0x115/0x870
[  203.413280][T10065]  ? clear_bhb_loop+0x40/0x90
[  203.413295][T10065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.413307][T10065] RIP: 0033:0x7f6cac59e0d9
[  203.413319][T10065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.413330][T10065] RSP: 002b:00007f6cad518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  203.413342][T10065] RAX: ffffffffffffffda RBX: 00007f6cac825fa0 RCX: 00007f6cac59e0d9
[  203.413352][T10065] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  203.413363][T10065] RBP: 00007f6cac635024 R08: 0000000000000000 R09: 0000000000000000
[  203.413372][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.413382][T10065] R13: 00007f6cac826038 R14: 00007f6cac825fa0 R15: 00007fff9b1d7c78
[  203.413399][T10065]  </TASK>
[  203.413404][T10065] 
[  203.422538][ T6867] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  203.423203][T10065] Allocated by task 5740:
[  203.428807][ T6867] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  203.429967][T10065]  kasan_save_stack+0x30/0x50
[  203.429992][T10065]  kasan_save_track+0x14/0x30
[  203.432828][ T6867] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  203.433188][T10065]  __kasan_kmalloc+0xaa/0xb0
[  203.433209][T10065]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  203.440467][ T6867] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  203.441383][T10065]  gadgetfs_fill_super+0x1e2/0x440
[  203.441406][T10065]  get_tree_single+0xe2/0x190
[  203.441424][T10065]  vfs_get_tree+0x92/0x320
[  203.477780][ T9129] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nq"
[  203.479047][T10065]  path_mount+0x7d0/0x23d0
[  203.479070][T10065]  __x64_sys_mount+0x293/0x310
[  203.479083][T10065]  do_syscall_64+0x115/0x870
[  203.479098][T10065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.492435][ T9129] (NULL device *): queue 0 connect admin queue failed (-111).
[  203.494304][T10065] 
[  203.494310][T10065] Freed by task 9999:
[  203.494317][T10065]  kasan_save_stack+0x30/0x50
[  203.494336][T10065]  kasan_save_track+0x14/0x30
[  203.494348][T10065]  kasan_save_free_info+0x3b/0x70
[  203.547908][T10065]  __kasan_slab_free+0x5f/0x80
[  203.549946][T10065]  kfree+0x22b/0x6c0
[  203.551637][T10065]  put_dev+0xb4/0xd0
[  203.553276][T10065]  dev_release+0x116/0x1b0
[  203.554733][T10065]  __fput+0x3ff/0xb50
[  203.556036][T10065]  task_work_run+0x150/0x240
[  203.557698][T10065]  exit_to_user_mode_loop+0x1d8/0x6f0
[  203.559824][T10065]  do_syscall_64+0x666/0x870
[  203.561775][T10065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.564210][T10065] 
[  203.565138][T10065] The buggy address belongs to the object at ffff888059908000
[  203.565138][T10065]  which belongs to the cache kmalloc-1k of size 1024
[  203.570592][T10065] The buggy address is located 24 bytes inside of
[  203.570592][T10065]  freed 1024-byte region [ffff888059908000, ffff888059908400)
[  203.575468][T10065] 
[  203.576360][T10065] The buggy address belongs to the physical page:
[  203.578350][T10065] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805990c000 pfn:0x59908
[  203.581803][T10065] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  203.585211][T10065] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  203.588491][T10065] page_type: f5(slab)
[  203.590110][T10065] raw: 00fff00000000240 ffff88801bc42dc0 ffffea00016d8010 ffffea0001603210
[  203.593543][T10065] raw: ffff88805990c000 000000080010000a 00000000f5000000 0000000000000000
[  203.596865][T10065] head: 00fff00000000240 ffff88801bc42dc0 ffffea00016d8010 ffffea0001603210
[  203.600249][T10065] head: ffff88805990c000 000000080010000a 00000000f5000000 0000000000000000
[  203.603718][T10065] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  203.607167][T10065] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  203.610616][T10065] page dumped because: kasan: bad access detected
[  203.613041][T10065] page_owner tracks the page as allocated
[  203.614927][T10065] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5740, tgid 5740 (syz-executor), ts 56300747309, free_ts 0
[  203.621365][T10065]  post_alloc_hook+0xfd/0x120
[  203.623068][T10065]  get_page_from_freelist+0xf48/0x3530
[  203.625186][T10065]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  203.627158][T10065]  new_slab+0xa2/0x640
[  203.628456][T10065]  refill_objects+0xe3/0x410
[  203.630024][T10065]  __pcs_replace_empty_main+0x376/0x680
[  203.631934][T10065]  __kmalloc_noprof+0x66d/0x820
[  203.633537][T10065]  tomoyo_init_log+0x1224/0x20c0
[  203.635169][T10065]  tomoyo_supervisor+0x506/0x1340
[  203.636829][T10065]  tomoyo_mount_acl+0x580/0x8b0
[  203.638491][T10065]  tomoyo_mount_permission+0x214/0x460
[  203.640380][T10065]  security_sb_mount+0xdd/0x270
[  203.642111][T10065]  path_mount+0x158/0x23d0
[  203.643631][T10065]  __x64_sys_mount+0x293/0x310
[  203.645178][T10065]  do_syscall_64+0x115/0x870
[  203.646814][T10065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.648688][T10065] page_owner free stack trace missing
[  203.650389][T10065] 
[  203.651158][T10065] Memory state around the buggy address:
[  203.652949][T10065]  ffff888059907f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  203.655434][T10065]  ffff888059907f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  203.657879][T10065] >ffff888059908000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.660371][T10065]                             ^
[  203.661912][T10065]  ffff888059908080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.664424][T10065]  ffff888059908100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.666923][T10065] ==================================================================
[  203.669429][T10065] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  203.671693][T10065] CPU: 2 UID: 0 PID: 10065 Comm: syz.6.1252 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  203.675220][T10065] Tainted: [L]=SOFTLOCKUP
[  203.676997][T10065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  203.680500][T10065] Call Trace:
[  203.681603][T10065]  <TASK>
[  203.682575][T10065]  dump_stack_lvl+0x100/0x190
[  203.684166][T10065]  vpanic+0x552/0x970
[  203.685454][T10065]  ? __pfx_vpanic+0x10/0x10
[  203.686801][T10065]  ? __pfx_vprintk_emit+0x10/0x10
[  203.688443][T10065]  ? _raw_spin_lock_irq+0x36/0x50
[  203.690095][T10065]  panic+0xd1/0xe0
[  203.691289][T10065]  ? __pfx_panic+0x10/0x10
[  203.692735][T10065]  ? end_report.part.0+0x23/0x90
[  203.694353][T10065]  ? rcu_is_watching+0x12/0xc0
[  203.695911][T10065]  ? end_report.part.0+0x23/0x90
[  203.697370][T10065]  check_panic_on_warn.cold+0x19/0x34
[  203.699103][T10065]  end_report.part.0+0x3a/0x90
[  203.700679][T10065]  kasan_report.cold+0xe/0x18
[  203.702236][T10065]  ? _raw_spin_lock_irq+0x36/0x50
[  203.703865][T10065]  ? _raw_spin_lock_irq+0x36/0x50
[  203.705505][T10065]  __kasan_check_byte+0x36/0x50
[  203.707102][T10065]  lock_acquire+0x132/0x370
[  203.708593][T10065]  ? _raw_spin_lock_irq+0x45/0x50
[  203.710233][T10065]  _raw_spin_lock_irq+0x36/0x50
[  203.711801][T10065]  ? gadget_dev_open+0x44/0x1b0
[  203.713415][T10065]  gadget_dev_open+0x44/0x1b0
[  203.714925][T10065]  do_dentry_open+0x6ab/0x14d0
[  203.716533][T10065]  ? __pfx_gadget_dev_open+0x10/0x10
[  203.718237][T10065]  vfs_open+0x82/0x3f0
[  203.719596][T10065]  path_openat+0x2873/0x4280
[  203.721116][T10065]  ? __pfx_path_openat+0x10/0x10
[  203.722707][T10065]  do_file_open+0x20e/0x430
[  203.724208][T10065]  ? __pfx_do_file_open+0x10/0x10
[  203.725850][T10065]  ? alloc_fd+0x471/0x7a0
[  203.727236][T10065]  ? do_getname+0x191/0x390
[  203.728752][T10065]  do_sys_openat2+0x10f/0x1e0
[  203.730293][T10065]  ? __pfx_do_sys_openat2+0x10/0x10
[  203.732003][T10065]  __x64_sys_openat+0x12d/0x210
[  203.733624][T10065]  ? __pfx___x64_sys_openat+0x10/0x10
[  203.735457][T10065]  do_syscall_64+0x115/0x870
[  203.737005][T10065]  ? clear_bhb_loop+0x40/0x90
[  203.738560][T10065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.740598][T10065] RIP: 0033:0x7f6cac59e0d9
[  203.741928][T10065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.748066][T10065] RSP: 002b:00007f6cad518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  203.750771][T10065] RAX: ffffffffffffffda RBX: 00007f6cac825fa0 RCX: 00007f6cac59e0d9
[  203.753286][T10065] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  203.755805][T10065] RBP: 00007f6cac635024 R08: 0000000000000000 R09: 0000000000000000
[  203.758798][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.761897][T10065] R13: 00007f6cac826038 R14: 00007f6cac825fa0 R15: 00007fff9b1d7c78
[  203.764780][T10065]  </TASK>
[  203.766603][T10065] Kernel Offset: disabled
[  203.768315][T10065] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:24:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a306b5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90021fd63a8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b6fe225 R15=ffffffff85a30650
RIP=ffffffff85a306df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5dd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f97b97eb7c0 CR3=00000000585c9000 CR4=00352ef0
DR0=0000000000000004 DR1=0000000000000003 DR2=000000007fffdfff DR3=0000800000000005 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 736d656d5f657669 7463656666652e74
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe38c90f76
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe38c90f76 00007ffe38c90f7c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08b8635607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08b8635647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08b86357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08b8635639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000140
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801ee92540
RSI=ffffffff81b57ece RDI=ffff88801ee92540 RBP=0000000000000001 RSP=ffffc90000177df8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000
RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ed8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f23014e7f17 CR3=000000000e994000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f656369 767265735f6f692e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcbedad26
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcbedad26 00007ffdcbedad2c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ab235607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ab235647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ab2357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88ab235639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a306b5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90003377310
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666
R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b6fe1e9 R15=ffffffff85a30650
RIP=ffffffff85a306df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6cad5186c0 ffffffff 00c00000
GS =0000 ffff8880d5fd8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f88ac054ff8 CR3=00000000343c6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9b1d8166
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9b1d8166 00007fff9b1d816c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cac635607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cac635647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cac6357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cac635639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cac7f25f8 00007f6cac7f25c8 00007f6cac7f2600 00007f6cac7f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801f2b2540
RSI=ffffffff81b57ece RDI=ffff88801f2b2540 RBP=0000000000000003 RSP=ffffc90000197df8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=0000000000000000
RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d60d8000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f87651f2e9c CR3=000000000e994000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000090000000 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000020400004
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379732f73656369 7665642f7379732f
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00317570632f7570 632f6d6574737973
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561d19f08050
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561d19f0f020
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373256e6a9c5483 7373256b0b694659
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd84a670de18547e 7373737612a2ed8e
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6568007365747962 20756c3825202020 20202020203a657a 697320656c696600
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 404d005640515c47 0550491d00050505 05050505051f405f 4c560540494c4300
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432302c36313230 2c453032302c4330 32302c423032302c 413032302c393032
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c323832302c4635 32302c443532302c 423532302c413532 302c413432302c34
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a414132302c38 4132302c34413230 2c314132302c3238 32302c463532302c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 443532302c423532 302c413532302c41 3432302c34343230 2c363132302c4530
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32302c433032302c 423032302c413032 302c393032302c38 3032302c36303230
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c323032302c3130 32302c394631302c 324331302c384231 302c464131302c45
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000