last executing test programs:

1m22.200469665s ago: executing program 1 (id=230):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104"], 0x48}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x77)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m21.824643022s ago: executing program 1 (id=231):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x48780, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000200)="71156eeadb9e26bfe8d48f62910889a5892fe4225a4db8b227571c", 0x1b, 0x4})
pwritev(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)="f2477760d98ff9dad63e11e828c8a241524b2493e140b04401181097c3d9b776d3e1ca48f2f5e97acf2f2f0c6601f61e7737f0557e922f7d177f3b97710df66b4100b6dd324be0abc60eee9fd1e4445fd3a1d3d324ab7bc330168f04377fac7f327c87b16c6c6dc11b0ed9160ae33a857882cf3d36cbcda8d2389b52872fcd1bc35577e8cb7a8e498d259d330194d067", 0x90}, {&(0x7f0000000280)="8d18e13a733f6abdad67cc9104f01556f4bab5aab21abf8cf2862affdab81210464d9afd5f29a8efc7aa3be393782391e520a1f68cf2d87f2f09771067557f30c8f4a6017208865a96902afe25feff731995a977ae5945e35b7238442f552f9fda309147d7927793559c436d2d289ccc79f159d060e2e4cb8762ff35f35e0d389b50a76901f74259acc4b1db0e64175f0a", 0x91}, {&(0x7f0000000340)="70f155fc88ce7faf61a1587aae1fd9f181fb2012c6b36f7e7f3bb9bb19a367f48d629f26e34e156adb5ea13bd6a15f48cd33170a02317cf83918cc893fa75e67dae690b9b210ef2d58d8729c62a753f78848289e5d10585473091cd1e7f76971b27787f265df5ad230099809415980cc4e4d40dade004e4ea626020bb4f6e9f5a5e6be9db19c1263034062940a7d3329fab6d8831818811b1bd2", 0x9a}, {&(0x7f0000000400)="a20fc19c4d4086dc67e9189f7ff6f5afec16811f5ee9a8ac8ddd133a4c0b5191c43f0f2320148acf", 0x28}, {&(0x7f00000006c0)="0672e0d284164d9b72519806b65223e0ea78f67cd24eda6ee35e591c51a02c8f7faf8e173ea7e631d8503b3ecc4d8b8a7d1162ef1b680046d093785b083a2097be4f1f6f9eb5fa64f2c11bfb7d24e5fb7b529ce945f1a443b3fd45fa229410d8a41bdcec46c1ff5de0f429ecf4bfb5a55d22d60214669b391f0c440033cbd3bd4a853d606b8057a268f2f6287c8bc8660139a2bb8f5791cec6b77735045e0676cbabfa714f7927e78832b31f6373d6", 0xaf}, {&(0x7f0000000780)="c0763b8d3a2b925c3be0abc244ae2248fad6305f71ac26bc75c2d53048929580c8130076eaf445098fef8dfc5206939d", 0x30}], 0x6, 0x4, 0x7)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
read$dsp(r2, &(0x7f0000000480)=""/49, 0x31)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000540), 0xa0201, 0x0)
write$dsp(r3, &(0x7f00000005c0)="c7", 0x1)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000840))
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
write(r4, &(0x7f00000004c0)='transport=fc,traddr=nn-0x3333333333333333:pn-+x4444444444444444,host_traddr', 0x4b)
syz_open_dev$loop(&(0x7f0000000580), 0x5, 0x86100)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000090}, 0xc0d8)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000600)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x5, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, 0x0)
madvise(&(0x7f000050d000/0x2000)=nil, 0x2000, 0xa)

1m21.193250347s ago: executing program 1 (id=240):
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000240)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000200)="71156e", 0x3, 0x7fffffffffffffff})
madvise(&(0x7f0000581000/0x3000)=nil, 0x3000, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@gettaction={0x14, 0x5a, 0x1, 0x70bd2c, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x200004c0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000600)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x5, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

1m21.122138361s ago: executing program 1 (id=241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000003600)='./mnt\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003640)='./tracing\x00', 0x123)
mount(0x0, &(0x7f0000003680)='./tracing\x00', &(0x7f00000036c0)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000003700)='./tracing/uprobe_events\x00', 0x401, 0x0)
recvfrom(r1, 0x0, 0x0, 0x20, &(0x7f0000003740)=@phonet={0x23, 0x2, 0x0, 0xd}, 0x80)
mkdir(&(0x7f00000037c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000003800)='./file0\x00', 0x0)
mkdir(&(0x7f0000003840)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000003880)='./bus\x00', &(0x7f00000038c0), 0x8, &(0x7f0000003900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r2 = open(&(0x7f0000003940)='./file0\x00', 0x400, 0x43)
mknodat$loop(r2, &(0x7f0000003980)='./file1\x00', 0x800, 0x1)
r3 = open(&(0x7f00000039c0)='./file0\x00', 0x0, 0x718bb647156ec3b7)
chdir(&(0x7f0000003a00)='./bus\x00')
linkat(r3, &(0x7f0000003a40)='./file1\x00', r3, &(0x7f0000003a80)='./file0\x00', 0x1000)
write(r1, &(0x7f0000003ac0)='r:s/p ./file0:0', 0xf)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x2fc8, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x2f60, 0x1, [@m_pedit={0x124c, 0x13, 0x0, 0x0, {{0xa}, {0x114c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2287c7d71631cc29}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x800, 0x3, 0x0, 0x5, 0x6}, 0x8e, 0x4, [{0x1, 0x5, 0x13, 0xfffffffd, 0xd2a, 0x3}, {0x200, 0x9, 0x1, 0x7, 0xd41, 0x51}, {0x0, 0xb, 0x6, 0x6, 0x93c0, 0x1ff}]}, [{0x2, 0x3, 0xbab, 0x3, 0x5, 0x45}, {0x0, 0x47, 0x3, 0x5, 0xffff}, {0x4, 0xd, 0x1, 0xfffffff7, 0xa4de, 0x15}, {0x7, 0x0, 0x2, 0xd785, 0x5, 0x1ff0000}, {0x80000001, 0x1ff, 0x3, 0x5, 0x0, 0x7}, {0x8f90232, 0x5, 0x1, 0x1000, 0x10, 0x5}, {0x4, 0xeb0, 0x0, 0xffffffe2, 0x9, 0x3}, {0x1, 0x101, 0xb, 0x8, 0x8000, 0x8}, {0xff, 0x1ff, 0x4, 0x4, 0xe, 0x9}, {0xc, 0x8, 0x9, 0x4, 0x2}, {0xbe3, 0x12, 0xe9d, 0x2, 0x53c4, 0x7}, {0x9, 0x4, 0x6, 0x6, 0x7f, 0x400}, {0xb, 0x2, 0x3, 0x3, 0xe667, 0x2}, {0x0, 0x1, 0x1, 0x1, 0xffff, 0x10000}, {0x7, 0x0, 0x2, 0x8001, 0xbc, 0x6}, {0x4, 0x2, 0x8, 0x0, 0x4, 0x6}, {0x8, 0x5, 0x800, 0x101, 0x72, 0xfff}, {0x9, 0x0, 0x10001, 0x0, 0x1, 0x1}, {0x9, 0x3, 0x4, 0x1ff, 0x9, 0x9}, {0xc7, 0x0, 0x1, 0x10, 0x14, 0xff}, {0x6, 0xf4, 0x2, 0x9, 0x3, 0xf3}, {0x9, 0x6, 0x8, 0x0, 0x8, 0x200000}, {0x24, 0x100, 0x4, 0xa, 0x80, 0x3}, {0x3, 0x5, 0x3, 0x8, 0x233, 0x2}, {0x8, 0x8, 0x7, 0xfffffff7, 0x3, 0x7}, {0x7f, 0x9, 0xba9, 0x8001, 0x8, 0xfffffffa}, {0xfff, 0x81, 0x14040bdc, 0x6, 0x8, 0xfffffff9}, {0x2, 0x2, 0x0, 0xd6d1, 0x100, 0xb}, {0x4, 0x4, 0x4, 0x80000000, 0x9, 0x6}, {0x6, 0x3, 0x8, 0x5c, 0x1, 0x3}, {0xf091, 0x3, 0x4, 0x0, 0x8, 0xe}, {0x4, 0x3, 0x3, 0x4, 0x7fff, 0x9}, {0x1, 0xe, 0x8, 0xfffffff8, 0xa1, 0x6}, {0x0, 0x2, 0x0, 0x3, 0x0, 0x1}, {0x4, 0x1, 0x6, 0x4, 0x80, 0x20000000}, {0xfffff3e3, 0x5, 0x3, 0x0, 0x3, 0x9}, {0x80000000, 0x1, 0x6, 0x401, 0x7, 0x5}, {0x3, 0x7ff, 0x10001, 0x2, 0x400, 0x1}, {0x2, 0x4, 0xad7, 0x977, 0x100, 0xec}, {0xe08b, 0xaa, 0x4, 0x1, 0x10000, 0x8000}, {0x3, 0x200, 0x1, 0x1000, 0x401, 0xbb}, {0xf, 0x0, 0x3, 0x80, 0x6, 0xfffffffe}, {0x4, 0x9, 0xc, 0x7, 0xff, 0x80}, {0x5, 0x401, 0x80, 0xada2, 0x4, 0xe3}, {0x4, 0xf96d, 0x3, 0x4, 0x1214, 0x3}, {0x6, 0x1ec51ccc, 0x4, 0x6, 0xfffffff6, 0xad576e6}, {0x2, 0x200, 0x7fff, 0x8, 0x1, 0x8}, {0x4, 0x7, 0x8ec, 0x7, 0x788, 0xce}, {0x1, 0x5, 0x3, 0x80000000, 0x4}, {0x1, 0x8, 0x6, 0x3, 0x10001, 0xbb}, {0x4, 0x8, 0x3, 0x6, 0x0, 0x7}, {0x5, 0x3, 0x4, 0x9, 0x7, 0x2}, {0x2eb9, 0x2, 0x0, 0x9, 0x1, 0x1}, {0x0, 0x4, 0x2, 0xac24, 0x3, 0x2}, {0x3, 0x1, 0x2, 0x7, 0x7, 0x80000001}, {0x7, 0x1, 0x3ebf, 0x100, 0x6, 0x100}, {0xdb2, 0xfffffffc, 0x5, 0x1, 0x42, 0xffffffff}, {0x3, 0x70000000, 0x9, 0x2, 0x10, 0x4}, {0x5, 0x4, 0x7, 0x30f95205, 0x9b77, 0xe651}, {0x8, 0x60000000, 0x1, 0x6, 0x24d, 0x7fffffff}, {0x4, 0xa8f, 0x3, 0x4, 0xcf7}, {0x3, 0x80, 0x8, 0x6, 0x8000, 0x80000001}, {0x5, 0x37aa, 0x9, 0x80, 0x2, 0x2}, {0x8, 0x2b, 0x2, 0xec, 0x28b, 0x3}, {0x200, 0x200, 0x5, 0x84, 0x100, 0x3}, {0x3, 0x5, 0x7ff, 0xffffffeb, 0x9}, {0x1, 0x100, 0x2, 0xeb9, 0x9c5, 0xfffffff9}, {0x7, 0x61, 0x8, 0xfffffffb, 0x1, 0x2}, {0x8, 0x8001, 0xfffffff8, 0x6, 0x8, 0x3}, {0xffffffff, 0xfffffff8, 0x5, 0xf7c, 0xfffffb74, 0x1}, {0x0, 0x7, 0x7, 0x1000, 0x5, 0xde3f}, {0xb, 0x400, 0x64, 0x8, 0x6, 0x3}, {0x6, 0x3, 0x0, 0x2, 0x1, 0x444}, {0xc, 0x3, 0x6, 0x7f, 0x6, 0x7}, {0x7fffffff, 0xf, 0x8, 0xca28, 0x1ff, 0x1}, {0x7, 0x0, 0x6, 0x9f55, 0x9, 0x5}, {0x7, 0x2, 0x9, 0x6, 0xc, 0x5}, {0x100, 0x6, 0x7, 0x6, 0x5, 0x200}, {0x5, 0x6, 0x6, 0xff, 0x18, 0x9e8}, {0x0, 0x2, 0x1ff, 0x7fffffff, 0x6, 0xb}, {0x6, 0x3, 0x3ff, 0x101, 0x6dc4, 0x8}, {0x5, 0x4, 0x80, 0x7, 0x10000, 0x7}, {0xa6d, 0x6, 0x3, 0x4, 0x10001, 0x87}, {0xf, 0x1, 0x4, 0x6, 0x6, 0x8}, {0x4, 0xb, 0x7fff, 0xa2, 0x200, 0x4}, {0x3, 0x7f, 0xb7c, 0x1, 0x47, 0x3ff}, {0x6, 0x9889, 0xffff7fff, 0x771, 0x8, 0x5}, {0x0, 0x4, 0x6, 0x3, 0x7f, 0xb}, {0x1200, 0x5, 0x10000, 0x1, 0x6, 0x80}, {0x2, 0xf, 0x6, 0x2, 0x43, 0x30}, {0x0, 0x5, 0x0, 0xf72a, 0xb8, 0x101}, {0x2, 0xccae, 0x9, 0x466, 0x8000, 0x7}, {0x10c, 0x200, 0x40, 0x3, 0x1, 0x1}, {0x800, 0xfffffffc, 0x0, 0x7, 0xd, 0xb}, {0x81, 0x18, 0x4, 0x8, 0x8, 0x3e3e}, {0x3fad, 0x289, 0x101, 0x80, 0x8, 0x7ff}, {0x5, 0x40, 0x2, 0xeca, 0xffffffcf, 0x4}, {0x8, 0x6, 0xdf5299b7, 0x10, 0x6}, {0x6, 0x4, 0x3448, 0xffff, 0x1, 0xe2c}, {0xc0, 0x5, 0x9, 0xe6, 0x4, 0xffff24c6}, {0x3, 0xfffff001, 0x7, 0x3, 0x6, 0x9}, {0x80, 0x7, 0x4, 0x7, 0x8, 0x5}, {0x5, 0x1, 0xf, 0x4, 0xfffffffb, 0x3}, {0x9, 0x6, 0x0, 0x7, 0x1244, 0xfffffff7}, {0x7, 0x7, 0x200, 0x9, 0x809d}, {0x5, 0xed, 0xef3, 0x9, 0x9, 0x3}, {0xf, 0xa7, 0x4, 0x88e, 0x4, 0xf6a6}, {0x3, 0xb1e, 0x3, 0x4, 0x6, 0x6}, {0x4, 0xffffffff, 0x7, 0x5, 0xfffffffd, 0xfff}, {0x7, 0x10001, 0xcca, 0x7f, 0x7, 0x2}, {0x6, 0x7, 0x3, 0x5, 0x6}, {0x2, 0x7fffffff, 0xffffff68, 0x81, 0x4, 0x5}, {0x4, 0x7, 0xc13, 0x7, 0x0, 0x6a8d}, {0x6800000, 0x0, 0x5, 0x4, 0x2}, {0x367b3d06, 0x4, 0x9, 0x7, 0x72, 0x8}, {0x0, 0x3dac, 0x2, 0x10000, 0x9, 0x4}, {0xffffffff, 0x7, 0x4, 0x7, 0x7, 0x1}, {0x5, 0x6, 0x2, 0x4, 0x80, 0x5}, {0x4d1, 0x3, 0x7, 0xc2, 0x9, 0x6}, {0x1, 0x3, 0x4, 0xd, 0x5, 0x8}, {0x3, 0x0, 0x3, 0x4, 0xb, 0x3}, {0x5, 0x7, 0x8, 0x800, 0xffff79d3, 0x3ff}, {0x800, 0x81, 0x7, 0x5, 0x3953, 0x1}, {0x1c, 0x0, 0x5, 0x40, 0xfffffffa, 0x5}, {0xa7c6, 0x0, 0x37, 0x40, 0xc5f, 0x5}, {0xa, 0x5, 0x1, 0x6, 0x7ff, 0x3}, {0x7, 0x6, 0xb8, 0x2, 0x6245, 0x3}, {0x5, 0x8, 0x8, 0x4, 0x1, 0x10001}], [{0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4a664df81e0bb314, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4, 0x54e6746108a1dac3}, {0x2}, {0x2}, {0x0, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x56c03280208b2893}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x7}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1ab5e81deb8154ca}, {0x4}, {0x6}, {}, {0x1}, {}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x6840d16a8b4da565}, {0x4}, {0x2}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xf4, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x15b1c5055d2b4556}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x1a4, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0xd8, 0x6, "10af38e79a3376c401e7e959bbb2eb282b38e448d96c9cdd06f8b895ad58e151115fba7a981918fcd56353e115fd78ae9f46a6668b20a39d8497769ee59c617c6f931665694e86129f3b38034f35fe7aacd205aed9e25c3840e276d185b475223a1dc33f3a2a0827388b075dca5c8c0b281b332a00e55ab25d4bf0a2f697d3a81c8a2b7ed774c219529f029f427fcb58d059f815948fba8fcfcf16369f34ed293e4430579400725ca6bf56abefa88d4172c089445fc1db00ab7a3b380c825014cc6deadb5319cee94ab1b6a8e6064c973be6189a"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x188, 0x10, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x2, 0x4, 0xe3, 0xf}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x81, 0x8, 0xffffff00, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0x4, 0x7, 0x400, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x5, 0x1, 0x10001, 0xee1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xf, 0x8, 0xffffffff, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b48, 0x4}}]}, {0xd5, 0x6, "dc5b31549ef511360702451a0233c1646237098e5a946f2aea2abc9185ff8e342ea2aef2f286e12818e7c5269f7a848ecbb48d0c8fa006fbaa13f2eee9bcdae576986da35f505a61d02eb8ed8d78757cbb9a472ce51b126af7ad0473b8033a300e268e020a55b7f1158722eda67a45eac6b03cfa89f1f8c0ca8af959e802d5f88c2eafae84a9b4704548c90942ebce20056cd2c941dab2e34060fb0ea1a73f0da18e591a2377e27e74cefcefe12f5359785f6ab8d0c4522fdcea24daefee8a52d5cd285b6860766d7f8463787418581cce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gate={0x24c, 0x5, 0x0, 0x0, {{0x9}, {0x1a4, 0x2, 0x0, 0x1, [{{0x18, 0x2, {0x8a09, 0xcfcc, 0xffffffffffffffff, 0x3c93, 0x180254e8}}, {0x4c, 0x5, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x201d90}, [@TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x80000000}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0xf8f2}]}}, {0x2c, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x5f1016}, [@TCA_GATE_ENTRY_IPV={0x8, 0x4, 0x6}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x8}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0x17c6}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0x9ed4}]}}]}, [@TCA_GATE_CLOCKID={0x8}, @TCA_GATE_PRIORITY={0x8}, @TCA_GATE_CYCLE_TIME_EXT={0xc, 0x8, 0xd}, @TCA_GATE_CLOCKID={0x8, 0xa, 0x1}]}, {{0x18, 0x2, {0x7fff, 0xffffff7f, 0x7, 0x6e8, 0xffff}}, {0xbc, 0x5, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x304a39}, [@TCA_GATE_ENTRY_IPV={0x8, 0x4, 0x10}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x3}]}}, {0x30, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x9312aa}, [@TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0x8c1c}, @TCA_GATE_ENTRY_IPV={0x8}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0xb2ca}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0xf9c2}, @TCA_GATE_ENTRY_GATE={0x4}]}}, {0x54, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x5f0ebb}, [@TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x1}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0xd}, @TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x4f}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x6}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0xa}, @TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x1}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0xb}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0x3}]}}, {0x18, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x168ddd}, [@TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0x9823}]}}]}, [@TCA_GATE_PRIORITY={0x8, 0x4, 0x9}, @TCA_GATE_CYCLE_TIME={0xc, 0x7, 0x21}, @TCA_GATE_BASE_TIME={0xc, 0x6, 0x3}, @TCA_GATE_CYCLE_TIME={0xc, 0x7, 0x1}, @TCA_GATE_PRIORITY={0x8, 0x4, 0x4}, @TCA_GATE_CLOCKID={0x8, 0xa, 0xb}, @TCA_GATE_PRIORITY={0x8, 0x4, 0x5621}]}]}, {0x7e, 0x6, "35cd8a54b1e3655086deb12f6cb36fbe1cf3483a71d255e0168af5d87e7fb8a0a1a1e58da97b303bed7947a2c68c29ef39c818bc263a87ade14d28274fbd0dcb025869deeeb93cc3438f8c26a476473fae8c18c84af5873cff700c2c236de02949992db48fbb51988fd55088a4ee8558d4bd63989aec3f03dbce"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x150, 0xa, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x10}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd6a44}, @TCA_MPLS_PROTO={0x6, 0x4, 0x11}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb0f3f}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd97d7}]}, {0xce, 0x6, "41984130badb1df7180459502b138b665a32282a96e1645869bf0eca9de0aa5daf3dd8532a0b7467f325b2faeeaad6d5bfbcb7fcfde2e77893d7c22b5c247c6413be8683d14f4ec81ff94f62e2d24b25c9f8a7bc19be1c0e455b14e846cbe815747c04d367f63ccb2960f0466df2bb89daacd8c077ae23af37cf3608b421d1f47a81775a448ff66977479bab301b3ed82953de72af91ceb9f47fd75298b95f686610bd4e07b323747f48fb263aea408b69378f839ab89dba53d51ff57f2f1ac6f5744b9e23958d108654"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x280, 0x4, 0x0, 0x0, {{0x7}, {0x190, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4e, 0x6, {0x1, 'raw\x00', 0x9, 0x4f37, "72e375363d52bf298e00d384245518531ad8fd14bd80b71d0a2278d56884515d5dd1bd8e"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x79, 0x6, {0xf03b, 'mangle\x00', 0x0, 0xfffe, "baf4d51179aacdcd80bf9af1476f7cc75504e52103bc84a8373594dc0102f2239d225e51fb8e45fad8f56249b04ce175c59def674c9e5299f6777dc3217c6bc67bb780e76770b3644aa09034d9e4ab"}}, @TCA_IPT_TARG={0xb6, 0x6, {0x101, 'nat\x00', 0x6, 0x3, "4b92f665b8cdf969bf9997536382d2b74eb4de28cb9d32c8f1fe8afe81e7f2a9fd63dfc1f22ae9aacae32e0c472533d54e63827a20ef17e0344415df62304999c103c21128344bfe50a0aeded4e8a6db7b901a2834685bbb46cb50062b4d7beea38b9bbcf7affa2f45862abeb7dbd00f05a64cae0f06441a1122dad34e6e738dba35df7135e8bc869e295682"}}]}, {0xca, 0x6, "9da857c84377892974d520428600b38f054886d37d5a61d8e8fc2590ec96a1e6d2d910c604d3d5d7f97e2f7c026814ed67450032bdab60a2607576885d70f5391f8bef50f38722a0317d9aed4a3417e671b9a2dae89de17f85023a5137b538d25e99027207250974f1d17ffd71de467b18533699619f47c8c8ab3d5382875e20c6a814675b7a2271003b434a65716316f802a5e6e9c3f3057ff8423639f4cc56088dd619c508bb585f2697e2671c1d77f9f742b09a94ac7bf0207f504de578425a245b85e891"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x13c, 0xb, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x48f}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7f1d, 0x2, 0x7, 0x7, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x287}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0xffffffffffffffff, 0x1}}]}, {0xc6, 0x6, "4aea16bbeea77b0b74934f415db07412491a99ceff38656f17727eec9b745b13b4fc0482b992f88a4ae284ed5f78d7f283b9f6867db0ad2f379c53c2e4ea27fc39e2c881361528f2c4b33cf0e80ff0a390e8b70b5a8d76c5c663558a6ebc00e0aaa7ec5917f799c2b0fe7002e41b43d95a1a9dd95bc54c8df8e1ede053e5dcaccae3434b300f538d1a1f80e48f9ae81abaf67342170b301d50da755f132e6d20ea0164f28e4cfa3baef25dedc844cdedf992c355d2be91c8602e2ac88253f55b5f25"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_connmark={0xcc, 0x1b, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xa73, 0x10000000, 0x2, 0x10}}}]}, {0x7d, 0x6, "1ee4b4dc5996ff434fec1c79b633d1b79949cd28d447be38ec71d456d49799ebff4b9deb5592a2be8f1db85be7dea753f4ebcde4eec3b0dfece3fcf6225960af59aad802a1c20479e54bd6dd2265aaddedc4ff9e7d133051ad6444d51070f752175fe0beb7b0f90ccad508e5f4b69a404b386019f1affbe6ee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x1070, 0x18, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0x1004, 0x6, "28286d72c14422b9444943b2f493ffff4c5f252af7050cace812f86b1b276c9a81f7a0ec99d260367fa9793c2706af47f6c3c325ec25620e9af5ba5d34f7724fd305a3ccb2100a7dd16ab3b8efe00273817cbc4d7cbf66642740c0cd5d91054bb2987ae1f170294b56a7660ee2671d8aadad1caa9a7066c6aa1dcd790d358d338e9778f3f78792fed6e28347c32c51e04a6b83ab4e1ce29951b03b44ee4ec3675ecba81df941bfdec99ede328242590d9fd0fc5d13f7d378793acbe86e25852b02d46e6f1a3837b417b1df777a5d9e3b37dfec1a4b4639e5b294ddd31272ba92d090c735cbf2ee0c009b57f9234fd42e8a964e9c2aec90ce703acc62839cda6a48a07afbd8abf338075f2572ceb82ad0b5954958742537b0063e85f2a45180c8431a4c1fbdbb5adf6b79db599945f0eeee77530011b85f7a235ddddeeabda9aa1c966759fb795615d1b44c248876a524d0a742b6524944c3dd74306537d0924bee7d32e7a8592e9131a746ff1ad5663a4e7ed6d1506e5c9db185e8a7963c6318338e263b8f4e4dbf5da9611d6629af43675f4e113cc5b06646951a6fb998822577e35783f6ec07372cf36fcb62a7a9aa46061e9d09c725ada17a7dcb157e387b6700805607ebf9753b7eb4b1344402a791acb25c341ad6b4c848028ddbbe32aeac2e31047a2b05f096aca0a7a81a57af486bd0136e2c0be0bbfc8145904d057d2eadc67def6c50a2a894f5b5f8c68ebe3526d3fa2632352d52b8772c869b3309dc2639a33743e032cb295286aa5207cdb61fcaa1346df7a9a96cbb3d4d74eaa991c0bdfc45af1946b96bc1f9d3c56a61095d789f0a1d75841df2a88eef44fdcd4d3d1a04fb7403890d212725f937cfdfab14a72aedb50516a32a1261268770e732ee6b70a3b1a4dc462ac10fae45845adbf6b31361f25ce8b417079614d97982480a2c0022474282d1f94d0950bc0b04a13431d3435d502f77ecc1cc5c67f35c42c0e7100d33127c55078960333309e62984ab1ac66db1a49308f8c1e7c178903e099fa9e3c718ad964b90c5b92c9f7d1a2fd980205cc556a1d2f08ff66b82b57af188c9542d0ad57e992e0387ea5aa54d2a0bd975c2e5c9dc737d64da7df19193a396ee335ee74ddf322ff18924d76ae8c94185e9702992c6a9fc65f865e5d75d7e559693237af8440165df8d22a37540df5de8e8d67e898185ce4496ad2fb2028358514afd567de4426477471a15b36396958f2a32250ac89213cb7679ff13faf73365e5489571907f83aca617765e5e85ee7d28022cc7392308accc57f0a0f04250af8cb7082e9c013c8f0cbafd492a8bc07e4a660a1ff6025f84d9e307fa81d41cda2d71ee82d6bdebdca2c3a241da1891387f6ad0c3013daf1f9d974c3d744fbf3b69142d0f4df4265eeb9604dff08d1adc6f942e5e42b1bb495d3c52176071b3d06c2893f24a119d52369f15c9bb998f92907adbac50fc654482c066c2a5ce8013c56e3820479025b1a9dd25823d4500ca080912af95e1bf0bb0bcd383991acdbbb1ee61bf3f6751a58050142e432e91c4c29f0335f4c647f62c939fd223075d4c543978261d773ac60b256c64d9d67e7f84802ba9355c6eea137a23f1d99d39cdd20b64f1331b19be1e7e47b632c49968d3ddf13edd4cbcd02191c1071f1c81342c4148e533fa1ddc7137b9fafe69e25acd023c252145902cd409884a864490bbf34eef18411d2758bca9c2b20e29fe098f338892ace91f126412abd430458835e9244617eec34d5d6521f127332863202dc6fde227558a3a3764194de91c8e3c24b116ff5890ba0b066940f44b9245f72dbd570ade0bdefaba29fb5889a3aa9cc6a3f631b4d95c98778ca78f4651e947807613cb293f510c72216e648cddefe49121b7a9fb26a778384f39edb3739aee17764403922ff6471103068f1fccf8e6f1cc7482cf22cacee08738edfc2ee1d20f3a0355999adb1544fcb600086fc4b1de6bcd0adb654ef80feae40cba1a23223dfb9d2b9a308012230356a534885b2d8b4dd53640422b4af3c50601e77c056a0aaacbc96b013fb48aa1eabb7e57ba2d58247f216885bdd746e9bcebe01cd4baee1858b8aa54e99ed2bbbcbcaa418ee45124a418112f95c52ada700a5a1ec2b13715eb803bf66f1ab555c2e16a83d8f0d736f49ae363e596f435ad43d9aa9bd8a32fd10d01b81494ee0e63c1c9686c72691b3f2ec8cae880bd5c6bd5701bdb29079667f86f63f8fa30c3c91cdf068c525cae8660bf4f9e3da377015ef1a6ba5e78bf80f95ab66f05b48b679a5f66430717aa688e1430822de727ccc128af5e8960cd79c57f34664c8f464adebc7d41a641485a4be6bf4c85f2697ff445083acdbbf01b63eb9a70ffb5e26d7d2688d6d4119fbbdc92ecd60062373199d3c64c1dcc8f82c9fc873958dd9397290844c95aa483d0e841a6c74adaf606c391fcd63ead83cdb57dd770d0516adb96891ae9a6c553098cd3c413071c1971ef8143a961c143638164ce00b756ebe28f27dc52eff280fb1f7b59d2e1516e4fc04b4ddea6f2135c15df7390b9a07c7f348869668f279347122a2911d03db1c071eac771fca5f1aeeb17e7dd4c9269319b1bf950c54d4dae55bbbcc15e1b21ebfc454226ba195990adb64a89d5a1bcc5ea7b7fe3de108ebfd98915c2766ef57fb22da45e71c46eb5479af22a3c57e27f5565d34b242c57fe2d9edccdded937d6912fa5c5c21d5413838a38cbbfa760ce0bd134ecccee739a16899213a94fefd020f0c176ed4a56a24d0c8934e70468c65165cbad3eea411251ebc75619df16809458e916d894a7d86a831cbb0c4791f70e3356aeb4aa7a8da81acbcf80ba367696b0ac3c27a2637ea4bc53d6360b72bea677dc7035af977aa3c49018f37c5decc90c2c475d99bd4a6720bb0d5d823b2ace17057a36ca7235c49b9d4bd6a35d6860515c2354a77f4bf26714c7e38cfa6d6bb379acc3214a09bf1badad072603738bbaddaa88db39cee94b2ad777b3dd0356801e32fef00ef373119be17e0a4fff9e951758860de19bc1919ea9b084d2b6481a9917c78d049d7d128273e899c2b8f07140fc52bb934f6d9197d6fda2a253b597bcf82270a3b5d3d229756f36a8bfbfb28c93658c6f6df5ccf998c834b6892f8734c88e98b3e5b77e8fb61b0ed02aef00c4540e0b630692865213e5602af53d11998f5820eef2be29cfa1ae75c7853c176e236aa5c5de79438acb846228b49c1f87804ec65d4011919254386e3d0b926dc4fa3dc53160772bfde8f6861486f50dd586ebe06aa68b0de806e85488ffbccaee4427b99727b29b0c6d9c407ff3f27a3a03e8a7b10c1eb67a1ce4fdfee9efaf5dda6e0784cb6e8d1b6503f208939a670ccc9d08d75849431e0c29e5039e4ea35fc425124c24d3e7a15482fb8a838807fba67f1a55f4c6eaa36fe7624543a1108c96bdb83befb565efce0652ca5ed3e9c10649a06ae80b2a53f5f21f8d9f99f7be76117b01516b1e5cfe162bfc933b3f956aa3f34b48f60a8f6f06bdb469b6d4e5a68dfd4efb7faaa9cb0dfe8e258fc24ce981650a91a46e5431ec1d36bb24e2d75cacac34717df6f58e490f43d25671043a11dd40dc670c57341a743349a55d9674cba469ab4c9ac57a58a1358f715d1a02e47ed7834c3e8117c80d07a8dede24ae1a93b9d42aa8c9f44d794b97331279a2efa24740427e6a8c28d3b615a49eb761a54c2656c8728cb12756bca461cb20928a05812890fea60fe161dfd29fc6ae6a665b533e7905507b8f6510d1b5541e958e974710c0703278f8df64ebd5e52b4f4eff65475bdbb287fbe1cfb0f71abd4fb707c2fa0b6312f6f509c55618b19449e1836e54343602caa9d022e41fb72abc66206f756206ffdb09652b9a2853971c78858f0dda95b440f3d874fc8350ebad33919acc0d021d9165d0b67e96d0be9ea514b578223c4551d38f70eb52e1dbf9cc50610843a66b64c5f1cf0385e20469c6804a35a960a42068d0fd63d1da26240d7f892029dc50e08928cb248f35b2280e488569099f516778f20245ba786e7ccf088678fef94a776a14fe87afa135e448b480c084cc49efef518753342b1f0528028c37e75bc7c52065624e1225c55d57bb65f8538ee79d96f6e7d4df754d9a4ad002df4b620b39cf1865cc9ca399464f26bffaacccdecfb978d356650fe814f7000b84fed6f79684f9cbbe6054f52b563cd3308826c816e9fe9d60bd257d3252b8dbb89752422bafac6e70877e7b4fcfb344425c035b81d794e9b4a224fa1737ce7956f77d059ca2391c150d10e6a9656f814f31fcd123e42f2e896858d6083f0ffdc0a375313770612e09e31057ed75cea1cc26a0a58290c2850a421b4da85d12c9414038cfabde1c39b438b780b3215b7a09cad2a75ede174e5be7dc1e338e18d929d85dd03e84aead272791d41b29047a046ef3889387aee755f9b3dc47c18890e8cddb006363239b2cb1cba0ebaa91add9d1acd5206655f4d3ac2c27aadb2f3eb236d5a6afaa9e9ec6b30424672e04a52c87155759b21ab098de154688e896660178165907a2708d78f51d718e601d56d4f78b881fed409e2c8a80e77f31d864632f2e36aa77c8d03d276c8fe38ea6f655bde8ced291c07e24c4a51409e717c404b38f7c53613b7fbe99cd7348179d15d531aa04017d71e9132fca609eb0286a8cb344f3c62da985473afda1b78bae6331f6a53fda0793454dc00dcdbe0de44303d2257bafe8bb5cad5eda38c62ded1fa3d7f578c3835219bd052464b444bc28870ce7640d2e9596e52ba67bc3484490fc651dafa3cdf49a0008028ba16c8a0cbeabda584e8456b16d38fe1da2c80cbe394871fb693461866c07d7efae6a34b2d6b5228d5e49317a83095f5535f261994851883c1ea1ace3583e2181f370b47ca326d18cc16eb0a25f3914fa8f3d6957eacec20648582ac3c2a315239a90ec553d2fbf50a884508fb05150dd3e3b97d0b8f216cbcca05f9db0b27407dab4908542b7c9219deaf68c1ac85eeb6330a71170d1925e35cb3492e5ce81e16b49232114ab284089fb4930496825f6b7da8359f2b37b5adcc4ca0a436cb82ff4706766fa8439d1ef877603cdcc3c5d9d7152279f072ea75243d16fffd158f26f94a7431721dc911afca06827cdeccdc923c50b5984dd0b483c5d1eff3d02aebad34505347197552005fbfe7e105fef006f0d57325e505de8100a61f48885a67bb5914efe72181cd9866e16be23878a100ae43d7ca95d806c76988c61602893e44dcc8a71a521c6c0cd4fd30aea133daaf8eab9eb97af65136f56069b13155bbc18cd5224c6cf266a6bf357748d4400cd2b3ec626ea05dfb6fe78243cdd78fbb96e7949078d98c5756a3e2650b4d7db35de5abd0d570e22d3b89a8e6b300ee6d4fa96a88a872a9901a559ac8802400f42899ff8199f34472eca9a75bbc94fa4288f3ee78821e926d2a5940731b0fb9cbe9a66bc24e2520b62b0059ac872e04644b43556db2f8482088ec39009cd45a1090caa7c74c126de0f8ce6b498f22e8a7df18e52bf9d77a338f2c2a459fddfba3a683677fbdab1725db34a49bf8bde1dfde5b2112a58da0045a46db8bfcec04cd468d43525f4eadba02c9f2b1be2873bcfcc326c49640d6aaf010d7db807dbebdb28dec8f08f55c594b5674fdc0d75b4a93504a964c6f0fdea6a21c33e9931b824c8d6079a96c1395accf25f5e4c7df26a02de157b49776428e878fc2d9b33aeed1a07c29b8fc9b767224e976572"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gate={0x2f4, 0x16, 0x0, 0x0, {{0x9}, {0x260, 0x2, 0x0, 0x1, [{{0x18, 0x2, {0x3, 0x7, 0x6, 0x9, 0x6}}, {0x78, 0x5, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x6b5c07}, [@TCA_GATE_ENTRY_IPV={0x8, 0x4, 0x2}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0x8}, @TCA_GATE_ENTRY_IPV={0x8}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x7}, @TCA_GATE_ENTRY_GATE={0x4}]}}, {0x28, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x61fcdb}, [@TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0xac6f}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0x893e}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0x6}]}}, {0x1c, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x33333}, [@TCA_GATE_ENTRY_IPV={0x8, 0x4, 0xc}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0xb}]}}]}, [@TCA_GATE_BASE_TIME={0xc, 0x6, 0xffffffff}, @TCA_GATE_BASE_TIME={0xc, 0x6, 0x3}, @TCA_GATE_CYCLE_TIME={0xc, 0x7, 0x5}, @TCA_GATE_CLOCKID={0x8, 0xa, 0x1}, @TCA_GATE_CYCLE_TIME={0xc, 0x7, 0x7ff}, @TCA_GATE_FLAGS={0x8}]}, {{0x18, 0x2, {0x3, 0x7, 0xffffffffffffffff, 0x5, 0x1}}, {0x74, 0x5, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x7c166e}, [@TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x5}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x2}, @TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0xfb55}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x7}]}}, {0x1c, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x65301b}, [@TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0x3bc4}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0x51e8}]}}, {0x1c, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x8b9f9}, [@TCA_GATE_ENTRY_IPV={0x8, 0x4, 0xa}, @TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_GATE={0x4}]}}]}, [@TCA_GATE_CYCLE_TIME_EXT={0xc, 0x8, 0xffffffffffffffff}, @TCA_GATE_CLOCKID={0x8, 0xa, 0xb}]}, {{0x18, 0x2, {0x8000, 0x7, 0x0, 0x7, 0x1ff}}, {0x4c, 0x5, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x5eb984}, [@TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x8}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0x7}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x6}]}}, {0x10, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x8782fd}, [@TCA_GATE_ENTRY_GATE={0x4}]}}, {0x14, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x8c7989}, [@TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_GATE={0x4}]}}]}, [@TCA_GATE_FLAGS={0x8, 0x9, 0x1}, @TCA_GATE_FLAGS={0x8}, @TCA_GATE_CYCLE_TIME={0xc, 0x7, 0xfffffffffffffffa}]}, {{0x18, 0x2, {0x6, 0x0, 0x6, 0x5, 0xb}}, {0x40, 0x5, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, {{0x8, 0x3, 0x40b705}, [@TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_IPV={0x8}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0x9}, @TCA_GATE_ENTRY_IPV={0x8, 0x4, 0xf}, @TCA_GATE_ENTRY_GATE={0x4}, @TCA_GATE_ENTRY_INDEX={0x8, 0x1, 0x6}, @TCA_GATE_ENTRY_MAX_OCTETS={0x8, 0x5, 0x10e0}]}}]}, [@TCA_GATE_CYCLE_TIME_EXT={0xc, 0x8, 0x6}, @TCA_GATE_FLAGS={0x8}]}]}, {0x6b, 0x6, "2ae10e900ff98091e836a3a53cf18fc22e413f4e6967955c26ee06435c803b33baacb02f21ea8505f5fae996cc002c6deebc1eee324c7bf3d2660e646e5210a2ffe8bd2f5e9e222e77f58eceeb05b5c66173dec1a43f96a782c8c600b58458353fb44a18226da1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2fc8}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@initdev, @empty}, &(0x7f0000000080)=0xc)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r8, &(0x7f00000035c0)="340000003e000500010000000000000003020000000000000c0001006f76732d647030000800020000000000080009000f000000", 0x34, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="3e2e6626260faa66ba2100ec2e0f01190f019dea0b0000c4e125df9e0f7e00000f7813260f01ca640f017593c4e1915c03650f32", 0x34}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mkdir(&(0x7f00000033c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000003400), &(0x7f0000003440)='./file0\x00', &(0x7f0000003480), 0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000003500)='./file0\x00')
unlink(&(0x7f0000003540)='./file0\x00')

1m20.774531248s ago: executing program 1 (id=245):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$setstatus(r0, 0x4, 0x800)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10)
getsockopt$inet_mptcp_MPTCP_INFO(r0, 0x11c, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, &(0x7f0000000340)=0x60)
sendto$inet(r0, &(0x7f0000000380)='EFGH', 0x4, 0x40, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x40, r2, 0x5, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x40}}, 0x0)

1m19.64493221s ago: executing program 1 (id=261):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000640)=0xa0000)

1m19.606704823s ago: executing program 32 (id=261):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000640)=0xa0000)

3.755432322s ago: executing program 0 (id=1537):
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)

3.687227731s ago: executing program 0 (id=1538):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000000240)=""/113, 0x71}], 0x1)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x22200, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000380)={{0x2, @addr=0x10000}, 0x8, 0x5, 0x6})
bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602840, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000140))
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x100, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x2001, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

1.539635863s ago: executing program 4 (id=1576):
r0 = userfaultfd(0x80801)
r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x0, 0x41)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000440)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000480)={0x6, {"77fe1801f805000000ffee0092000008", "000900000000000200", "000000000000161cdf2b7400"}, 0x7, 0x4})
close_range(r0, 0xffffffffffffffff, 0x700)

1.510788862s ago: executing program 3 (id=1578):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xcc}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)
shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r8, 0x101, 0x804, 0x0, &(0x7f0000000200))
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e4ce801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd600"/129, 0x81}, {&(0x7f0000000340)="54f6d4d87e06f140c5f0cc61f6ab659b0a3fabae55153b05509ba735eb7a985d8caeeac70478239588ef6fc9faf9f3787be64ab2656caec0675ebf087a0075984e4c9d9b070a0bf82bc087529f7de2b7a310faca4944ec", 0x57}], 0x2, 0x0, 0x0, 0x7400}, 0x10)
r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='cgroup\x00')
preadv(r10, &(0x7f0000000440)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x131, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="c738161746a33d38000000000000000000", 0x11}], 0x1}}], 0x1, 0x20008050)

1.46617869s ago: executing program 3 (id=1580):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1740, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0xc0000000, 0xa, 0x31237648, 0x6, 0x4, 0x80}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x72, 0x7fffeffffffffffc, 0x15, 0xc, 0x9, 0x9, 0x8001, 0x0, 0x4, 0x6, 0x1, 0x0, 0x3, 0x24, 0xfffffffffffffffe, 0xf]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
syz_emit_ethernet(0x237, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x201, 0x11, 0x0, @remote, @local, {[@srh={0x1, 0x14, 0x4, 0xa, 0x2, 0x0, 0xcfda}, @dstopts={0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x400, [0x1c00000, 0x2]}}, @ra={0x5, 0x2, 0x3d7}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private2}]}, @hopopts={0x3, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}]}, @routing={0x73, 0xc, 0x1, 0x2, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x3f}, @private2]}, @routing={0x3c, 0xa, 0x0, 0xf, 0x0, [@dev={0xfe, 0x80, '\x00', 0x30}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}], {0x0, 0x4e22, 0x9, 0x0, @opaque="03"}}}}}}, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
getgroups(0x3, &(0x7f0000000180)=[0xee01, 0x0, 0xffffffffffffffff])

1.427449856s ago: executing program 4 (id=1581):
socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/timer_list\x00', 0x0, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x600}}, 0x20)
socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x370581ce9cfe164b, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xa})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

1.408440461s ago: executing program 4 (id=1582):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901020301090212"], 0x0)
syz_usb_connect$uac3(0x4, 0xac, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x121, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x2, 0x80, 0x60, {0x8, 0xb, 0x1, 0x2, 0x1, 0x26}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x14, 0x576}, [@power_domain={0xa, 0x24, 0x10, 0x1, 0x2, 0xc, 0x4, ']'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x7, 0x5, {0xa, 0x25, 0x25, 0xffff, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1000, 0x7f, 0x5, "c61c"}, @as_header={0x17, 0x24, 0x1, 0xd, 0x2, 0x1, 0x5, 0xff, 0x5, 0x800, 0x45}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xed, 0x78, 0x7, {0xa, 0x25, 0x25, 0x81, 0x9, 0x9}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_audit(0x10, 0x3, 0x9)
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000a80)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000ac0)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000b00)={0x0, 0x3938700}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="380000001014d9ec26bd7020fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c00000b"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r2, &(0x7f00000007c0)='27', 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="280000005e00816b00000000000000b20c00a2eefaf1a47463ed00800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0)
mount$9p_unix(&(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='.\x00', &(0x7f0000000880), 0x800000, &(0x7f00000008c0))
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x84000, 0x0, 0x0, {<r4=>0x0, {'syz', 0x0, '1\x00'}}})
kexec_load(0xf5, 0x0, 0x0, 0x0)
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x4010, 0x0, 0x0, @by_dev={r4}, {0x0, @core='@stats_list'}})
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x28601, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@flakey={0x0, 0x1010, 0x0, 0x70, 'flakey\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '1'}, 0x20, 0x0, 0x20, 0x3, ' 1 drop_writes'}}]})

1.316427579s ago: executing program 3 (id=1583):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x7, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x20000002, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffd)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000740)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x33, 0x1, 0x8, 0x0, 0x1, 0x0, 0xd000, '\x00', 0x7ff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x6, 0x2, 0x3249, 0x3ff, 0x4caf, 0x2, 0x9, 0x200, 0x6, 0x9, 0x4, 0x1, 0xc, 0x3, 0x4248, 0x200, 0x22, 0x8ba6, 0x4, 0x6, 0x9, 0xffffffa3}})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.208661636s ago: executing program 2 (id=1584):
unshare(0x2c040480)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x8000)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x3, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_CLEAR(r1, 0xc138fd0a, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa00, 0x0, 0x0, @by_dev={r2}})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000028c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002900)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002940)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f0000002980)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}}, {0x0, 0x6558, 0x12, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x100, @void}, "aa8ff18d88a8"}}}}}}}, 0x38)
writev(r1, &(0x7f0000002840)=[{&(0x7f0000000500)="42f31c30ff31d92b7dc28242964989e975e983e6f60f20dfe9ae3e9e6167569e8786eec9e1300d16052fe318b19d25e813b5d875e9a4391d8a2811b3ed395ccd6c4540fa617d9a7d5be1c5039982551592c722ffa62638acf9dcade2cf1f07a6aba910ca42d5dfc0d20a25a176f29c55fc7362ab106e8dfcfd60a2de86eda7485b0de9ddaf3281b636645846f4eaff5c9ff4762d533efb229ee20dacbde74f150a33afb62cba39aaaeb2b11a4539367ed4be1be6e0b39bf75acf1663d4c93227f6954ffcbe", 0xc5}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="013c046ba7de994d8ff4091c439bd2bfaff54fc12533d6de2c2025d16d747e423a6cb0d1c84326992bf9cc3b0590deb153f0", 0x32}, {&(0x7f0000002640)="56a37f3729403f4407380babbd7f9a3afe159658a6c4c0fab85b2991289eb4e887c95182062fcec8285044782609b7390e7cc8c83320b919aff226fbb20a9586225a096c2950d6133b886bbc338b8d889aab7a57ba746f12466e22925c335c1d9a8f20fe4d5db8036741abcf3a946cf2396021cc5d87f06290aa7604cbdf1423bf528f17d004b5a49c14a233f080d50073a3aabb5f1c55494cb16d05f4fc529b640d4fb658aae75ad5d24d3b0e11c3f7a407bd01db64be7a6b369d735fc4af91dfd5c3287af8587e3c2d298b62da45da34c10f06", 0xd4}, {&(0x7f0000002740)="794cafbcdc4fa8ffeb0e19b977e366b256ebdf34d64b48069754c86eecd2211784452e582ab8645b254855accbb057", 0x2f}, {&(0x7f0000002780)="5d51a8fd3bc1d21aa62c6178f581b6b29e66caa4a6accf1c921b122e28e14a52a0610499b8cb5e1f3056deef86123bbc24e93240c6636e1b197467d4499ee3c25867517e9da9b79fcc892b91dc162a41f0ecf235adfc2a2f1e57a7ef6a2a61cbdf3c045992424b3f8e216ead0f011a5fd435bf2762b3e27f91f5a94a79e9cc5cec4ce60d95093126e52f1fd556ad5e71fa490d2c0423b1b82234a56ef7f879baa8511c9e129c9dd842e99b42b5dda2b4", 0xb0}], 0x7)
socket(0x18, 0x0, 0x0)
unshare(0x8000000)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
syz_emit_ethernet(0x2a, &(0x7f00000029c0)={@link_local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @empty, @rand_addr=0x64010100, @random="563d72128d97", @empty}}}}, &(0x7f0000002a00)={0x1, 0x4, [0x1fc, 0x166, 0x656, 0x1ed]})
r7 = socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r7, &(0x7f00000003c0)="007c903adc62d5805fdc6345222def5e31041c5556e03e349e505579992a27384c6425d9994001b703a4e17132961711f56b50f50b4301749b8f29b4c1e92875163a52340cedc7a3f1ac2eec3ccecd337d7ee2e487dee23f65be2445c1282cefc2e384780450b6cc5ade7ba1e1e831e4b9f0a293f7c88e849c6baa2edc0e929331dff44d5db122c099e053db42bfc181c431e7ce09b3f83f244e5d29bf2ccaf7014731ee7abc03c0050e3d57efa9964bec3ab3240264efcf4a73e05ab8e99e3dbb7c03fc", 0xc4, 0x4080, &(0x7f00000004c0)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c)
r8 = inotify_init()
ioctl$INOTIFY_IOC_SETNEXTWD(r8, 0x40044900, 0x2)
r9 = syz_pidfd_open(r6, 0x0)
r10 = openat$nsim_new_device(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ftruncate(r10, 0x4)
ioctl$EXT4_IOC_MIGRATE(r9, 0xff08)

1.208509584s ago: executing program 3 (id=1585):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10)
getsockopt$inet_mptcp_MPTCP_INFO(r0, 0x11c, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, &(0x7f0000000340)=0x60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r3, 0x5, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r1}]}, 0x1c}}, 0x0)

1.206762967s ago: executing program 2 (id=1586):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003380), 0x80082, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000033c0), 0x800, 0x0)
write$vga_arbiter(r1, &(0x7f0000003440)=ANY=[], 0xc)
write$vga_arbiter(r0, &(0x7f0000003400)=@unlock_all, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x99, &(0x7f0000000b00)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16)
r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000640)={0xb, 0x1, 0x4, 0x0, 0x7})
r4 = add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f0000000f80)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
keyctl$chown(0x4, r4, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000d00)=0x1)
write(r2, &(0x7f0000001000)="2da320d911a7dbdade865c9769945e43cc9c2ed55e5b24285ea8abeef488ca845736b9edebc73376b6d1e709cfa589e49f45a04cde7adbd1fb99305a31fa8a145f33a45859aad42b7f0e05f507e0632f7bd464bd6ebc23fd4e443f4dfdff6b8912a9c26901feef73b9cda2eeb1b0ede15774fb6995721aa03541f1ae013aa4f47dc7aed2c8d0149cf283bdba9b5eb8c90d924440ef0a87c2", 0x98)
ppoll(&(0x7f0000000ec0)=[{r3, 0x2103}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='devpts\x00', 0x8, &(0x7f0000001180)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb9\xe0f\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fS[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4v\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89Nq\x1b\x12\xc2\"\xf8&C\x93\xd4\x99\xf0x\xcb\x9a\x938\xe9\x81\x13\xbba\xca\xcfaQ\x9f;\"T\x85\xe4\a\xb8u\x82\x8c\x03&=M\xf3j\xb6\xde\xf2M\xd3\xad2\x91\x8a\xc7\xb1\xbe\xe0\r\xb4M+\xad\x01\x90=\xb2\xeb\xebY\xc7Q\b\xa9\xc1\xa9\x8d8}\xc7CV\xd5.T\xda$\fA\xf5\xfe\xdfV\x990\x93\xbf\xc5OX\x0e\fua\x8c\x1b\x92\xd5\xceWC\x96\n\xf15\b\xb2\xf0\xbb\x1d9\xed\xf5TYw&\xa85\xdes\x92\x1d\x88\xa5\xd0 \x1c^4\xf2o\xd2&>\xdff\xd6\x9f\xb2\x8ffT\x89w\xc7EW\xe7\x1f\xea;\xae\x1d0[\x1e\xa4\x00\v)\r\xedW\x13\x90\xd6\b\x95\x12\xd8N\x90\xf8\x9ad\xb6Bm\x80\xbfw\xd8!l\x97\x19\t\xcd\x97WP\x1d\xa6\x8d}!\x82\x18T\x04\xbe')
r5 = syz_open_procfs(0x0, &(0x7f0000001300)='mounts\x00')
read$FUSE(r5, &(0x7f0000001340)={0x2020}, 0x2020)
ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000003440))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x2, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x43}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff7fd}, 0x94)
syz_open_dev$loop(&(0x7f0000000340), 0x10, 0x80082)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x83, 0x0, &(0x7f0000000c40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x947, 0x0, 0x1b, 0x4b, &(0x7f0000000d00), &(0x7f0000000d40)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50)

1.165434723s ago: executing program 2 (id=1587):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e00000034004109080008000600000006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x77)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

973.098547ms ago: executing program 2 (id=1588):
r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000580)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x2000}]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r1, &(0x7f0000000700))
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000200)='./file0\x00')
r2 = open(&(0x7f0000000240)='.\x00', 0x8000, 0x112)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000b70000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f0000000740)=@filename='./file0\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='ubifs\x00', 0x121420, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000004c0)=r3, 0x4)
sendmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x80800)
r6 = socket(0x400000000010, 0x3, 0x0)
write(r6, &(0x7f0000000540)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c1100070080000900", 0x33a)
r7 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000000800)=[{0x200, 0x0, 0x81}]}, 0x10)
getdents(r2, &(0x7f0000000280)=""/177, 0xb1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000001040300000000000000008fa369ff050500010004"], 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x60c4)
socket$inet(0x2, 0x5, 0x1)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x3f, &(0x7f00000000c0)=0x2, 0x4)

825.815319ms ago: executing program 2 (id=1589):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)
shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r8, 0x101, 0x804, 0x0, &(0x7f0000000200))
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e4ce801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd600"/129, 0x81}, {&(0x7f0000000340)="54f6d4d87e06f140c5f0cc61f6ab659b0a3fabae55153b05509ba735eb7a985d8caeeac70478239588ef6fc9faf9f3787be64ab2656caec0675ebf087a0075984e4c9d9b070a0bf82bc087529f7de2b7a310faca4944ec", 0x57}], 0x2, 0x0, 0x0, 0x7400}, 0x10)
r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='cgroup\x00')
preadv(r10, &(0x7f0000000440)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x131, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="c738161746a33d38000000000000000000", 0x11}], 0x1}}], 0x1, 0x20008050)

657.064962ms ago: executing program 0 (id=1590):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2000000f}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}]}, 0x1d}}, 0x20004055)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400090000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f84e4272d2cc72d4e771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de457f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5bfc182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456cd7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b4"], &(0x7f0000000ec0)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r1, 0x2e0, 0x5ee, 0x60000004, &(0x7f0000000f80)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000001080)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f00000010c0)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

649.090647ms ago: executing program 0 (id=1591):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1740, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0xc0000000, 0xa, 0x31237648, 0x6, 0x4, 0x80}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x72, 0x7fffeffffffffffc, 0x15, 0xc, 0x9, 0x9, 0x8001, 0x0, 0x4, 0x6, 0x1, 0x0, 0x3, 0x24, 0xfffffffffffffffe, 0xf]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
syz_emit_ethernet(0x237, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x201, 0x11, 0x0, @remote, @local, {[@srh={0x1, 0x14, 0x4, 0xa, 0x2, 0x0, 0xcfda}, @dstopts={0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x400, [0x1c00000, 0x2]}}, @ra={0x5, 0x2, 0x3d7}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private2}]}, @hopopts={0x3, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}]}, @routing={0x73, 0xc, 0x1, 0x2, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x3f}, @private2]}, @routing={0x3c, 0xa, 0x0, 0xf, 0x0, [@dev={0xfe, 0x80, '\x00', 0x30}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}], {0x0, 0x4e22, 0x9, 0x0, @opaque="03"}}}}}}, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
getgroups(0x3, &(0x7f0000000180)=[0xee01, 0x0, 0xffffffffffffffff])

496.415776ms ago: executing program 0 (id=1592):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01010101", 0x4)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) (fail_nth: 10)

406.965261ms ago: executing program 0 (id=1593):
r0 = syz_open_dev$usbmon(&(0x7f0000000980), 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000a00)=ANY=[])
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{}, &(0x7f0000000a80), 0x0}, 0x20)
r2 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0x20000007c, 0x0)
r3 = dup3(r0, r2, 0x80000)
r4 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffffffe}, 0x1c)
connect$inet(r4, &(0x7f0000000a00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000000b00))
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/pppol2tp\x00', 0x80, 0x0)
read(r3, &(0x7f0000000b80)=""/19, 0x13)
read(r5, &(0x7f0000000340), 0x120)
ioctl$OCFS2_IOC_UNRESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0x63, 0x2, 0x10001, 0x9})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f00000003c0)=""/114, 0x72}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000600)=""/65, 0x41}], 0x6, 0x10, 0x8)
mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x180001, &(0x7f0000000b40)=ANY=[])
chdir(&(0x7f0000000180)='./file0\x00')
unlink(&(0x7f00000001c0)='./file0\x00')
read$dsp(r5, &(0x7f0000000700)=""/240, 0xf0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a882, 0x0)
r7 = dup(r6)
ioctl$BLKFLSBUF(r7, 0x1261, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x103)
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x10, 0x2)

349.061514ms ago: executing program 4 (id=1594):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f00000003c0)) (fail_nth: 4)

347.18239ms ago: executing program 3 (id=1595):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003380), 0x80082, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000033c0), 0x800, 0x0)
write$vga_arbiter(r1, &(0x7f0000003440)=ANY=[], 0xc)
write$vga_arbiter(r0, &(0x7f0000003400)=@unlock_all, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x99, &(0x7f0000000b00)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16)
r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000640)={0xb, 0x1, 0x4, 0x0, 0x7})
r4 = add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f0000000f80)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
keyctl$chown(0x4, r4, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000d00)=0x1)
write(r2, &(0x7f0000001000)="2da320d911a7dbdade865c9769945e43cc9c2ed55e5b24285ea8abeef488ca845736b9edebc73376b6d1e709cfa589e49f45a04cde7adbd1fb99305a31fa8a145f33a45859aad42b7f0e05f507e0632f7bd464bd6ebc23fd4e443f4dfdff6b8912a9c26901feef73b9cda2eeb1b0ede15774fb6995721aa03541f1ae013aa4f47dc7aed2c8d0149cf283bdba9b5eb8c90d924440ef0a87c2", 0x98)
ppoll(&(0x7f0000000ec0)=[{r3, 0x2103}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='devpts\x00', 0x8, &(0x7f0000001180)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb9\xe0f\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fS[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4v\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89Nq\x1b\x12\xc2\"\xf8&C\x93\xd4\x99\xf0x\xcb\x9a\x938\xe9\x81\x13\xbba\xca\xcfaQ\x9f;\"T\x85\xe4\a\xb8u\x82\x8c\x03&=M\xf3j\xb6\xde\xf2M\xd3\xad2\x91\x8a\xc7\xb1\xbe\xe0\r\xb4M+\xad\x01\x90=\xb2\xeb\xebY\xc7Q\b\xa9\xc1\xa9\x8d8}\xc7CV\xd5.T\xda$\fA\xf5\xfe\xdfV\x990\x93\xbf\xc5OX\x0e\fua\x8c\x1b\x92\xd5\xceWC\x96\n\xf15\b\xb2\xf0\xbb\x1d9\xed\xf5TYw&\xa85\xdes\x92\x1d\x88\xa5\xd0 \x1c^4\xf2o\xd2&>\xdff\xd6\x9f\xb2\x8ffT\x89w\xc7EW\xe7\x1f\xea;\xae\x1d0[\x1e\xa4\x00\v)\r\xedW\x13\x90\xd6\b\x95\x12\xd8N\x90\xf8\x9ad\xb6Bm\x80\xbfw\xd8!l\x97\x19\t\xcd\x97WP\x1d\xa6\x8d}!\x82\x18T\x04\xbe')
r5 = syz_open_procfs(0x0, &(0x7f0000001300)='mounts\x00')
read$FUSE(r5, &(0x7f0000001340)={0x2020}, 0x2020)
ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000003440))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x2, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x43}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff7fd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x83, 0x0, &(0x7f0000000c40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x947, 0x0, 0x1b, 0x4b, &(0x7f0000000d00), &(0x7f0000000d40)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50)

311.051538ms ago: executing program 4 (id=1596):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e00000034004109080008000600000006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x77)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

310.191067ms ago: executing program 3 (id=1597):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x101b43, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000440)=0xf)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000580)='27', 0x2)
ioctl$TCFLSH(r2, 0x400455c8, 0x4)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000005c0)=0x33)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22003, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000280))
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000340)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0xa, 0x3, 0x10000d, 0x8000000000000001, 0xb729, 0x8000040000000001, 0xb3, 0x8, 0x2, 0x2, 0xffffffffe, 0x2081, 0x7, 0x1fd, 0xe6, 0x4], 0x1000, 0x383fc2})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
dup(r11)

16.190362ms ago: executing program 4 (id=1598):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f00000000c0), 0x1000000, 0x0)

0s ago: executing program 2 (id=1599):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200002, 0x200003, 0x801, 0x4, 0x7})
fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xfffffffb)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x89, 0x89, 0x4, [@datasec={0x10, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x4, 0x9}, {0x4, 0x200, 0x7}, {0x1, 0x8, 0x4}, {0x5, 0x2, 0x4}, {0x1, 0x0, 0x3}], "cd"}, @int={0xf, 0x0, 0x0, 0x1, 0x4, 0x5b, 0x0, 0x5}, @enum64={0x7, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x8, 0x9, 0x4a50}, {0x3}, {0x9, 0x6}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000440)=""/245, 0xa8, 0xf5, 0x0, 0xffffffc4}, 0x28)
r2 = openat$sndseq(0xffffff9c, &(0x7f0000000280), 0x42)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a45321, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x100)

kernel console output (not intermixed with test programs):

[ T8802]  __x64_sys_execveat+0xdf/0x130
[   98.795239][ T8802]  do_syscall_64+0x123/0x7b0
[   98.795253][ T8802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.795264][ T8802] RIP: 0033:0x7f42d49a8f19
[   98.795272][ T8802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.795282][ T8802] RSP: 002b:00007f42d5857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   98.795293][ T8802] RAX: ffffffffffffffda RBX: 00007f42d4c25fa0 RCX: 00007f42d49a8f19
[   98.795299][ T8802] RDX: 0000200000000340 RSI: 0000200000000040 RDI: ffffffffffffff9c
[   98.795305][ T8802] RBP: 00007f42d5857090 R08: 0000000000000000 R09: 0000000000000000
[   98.795311][ T8802] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[   98.795317][ T8802] R13: 00007f42d4c26038 R14: 00007f42d4c25fa0 R15: 00007fff0b1ee9a8
[   98.795330][ T8802]  </TASK>
[   98.891206][ T8811] FAULT_INJECTION: forcing a failure.
[   98.891206][ T8811] name failslab, interval 1, probability 0, space 0, times 0
[   98.891234][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.3.928 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.891255][ T8811] Tainted: [L]=SOFTLOCKUP
[   98.891261][ T8811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   98.891270][ T8811] Call Trace:
[   98.891275][ T8811]  <TASK>
[   98.891282][ T8811]  dump_stack_lvl+0x100/0x190
[   98.891330][ T8811]  should_fail_ex.cold+0x5/0xa
[   98.891355][ T8811]  should_failslab+0xc2/0x120
[   98.891375][ T8811]  kmem_cache_alloc_noprof+0x92/0x6a0
[   98.891399][ T8811]  ? netlink_deliver_tap+0x103/0xb50
[   98.891418][ T8811]  ? skb_clone+0x187/0x3f0
[   98.891452][ T8811]  skb_clone+0x187/0x3f0
[   98.891471][ T8811]  netlink_deliver_tap+0x82f/0xb50
[   98.891495][ T8811]  netlink_unicast+0x708/0x950
[   98.891519][ T8811]  ? __pfx_netlink_unicast+0x10/0x10
[   98.891544][ T8811]  netlink_sendmsg+0x9ac/0x10c0
[   98.891568][ T8811]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.891593][ T8811]  ? selinux_socket_sendmsg+0x198/0x2f0
[   98.891618][ T8811]  ? ____sys_sendmsg+0xa99/0xc30
[   98.891638][ T8811]  ____sys_sendmsg+0xa99/0xc30
[   98.891659][ T8811]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.891680][ T8811]  ? __pfx_____sys_sendmsg+0x10/0x10
[   98.891707][ T8811]  ? lock_acquire+0x1d1/0x380
[   98.891727][ T8811]  ? get_pid_task+0x2a/0x250
[   98.891744][ T8811]  ___sys_sendmsg+0x190/0x1e0
[   98.891761][ T8811]  ? __pfx____sys_sendmsg+0x10/0x10
[   98.891775][ T8811]  ? get_pid_task+0x106/0x250
[   98.891799][ T8811]  ? find_held_lock+0x2b/0x80
[   98.891831][ T8811]  __sys_sendmsg+0x160/0x210
[   98.891850][ T8811]  ? __pfx___sys_sendmsg+0x10/0x10
[   98.891880][ T8811]  do_syscall_64+0x123/0x7b0
[   98.891901][ T8811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.891923][ T8811] RIP: 0033:0x7f05651a8f19
[   98.891936][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.891951][ T8811] RSP: 002b:00007f0566117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.891967][ T8811] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651a8f19
[   98.891977][ T8811] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005
[   98.891987][ T8811] RBP: 00007f0566117090 R08: 0000000000000000 R09: 0000000000000000
[   98.891996][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.892005][ T8811] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[   98.892027][ T8811]  </TASK>
[   98.947839][ T8816] netlink: 56 bytes leftover after parsing attributes in process `syz.0.930'.
[   98.961566][ T8817] random: crng reseeded on system resumption
[   99.088697][ T8840] netlink: 'syz.2.941': attribute type 1 has an invalid length.
[   99.100187][ T8840] 8021q: adding VLAN 0 to HW filter on device bond1
[   99.128630][ T8840] bond1: (slave geneve2): making interface the new active one
[   99.130321][ T8840] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   99.142710][ T8848] netlink: 56 bytes leftover after parsing attributes in process `syz.0.943'.
[   99.531013][ T8892] FAULT_INJECTION: forcing a failure.
[   99.531013][ T8892] name failslab, interval 1, probability 0, space 0, times 0
[   99.531034][ T8892] CPU: 2 UID: 0 PID: 8892 Comm: syz.2.958 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   99.531048][ T8892] Tainted: [L]=SOFTLOCKUP
[   99.531051][ T8892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   99.531057][ T8892] Call Trace:
[   99.531061][ T8892]  <TASK>
[   99.531065][ T8892]  dump_stack_lvl+0x100/0x190
[   99.531099][ T8892]  should_fail_ex.cold+0x5/0xa
[   99.531115][ T8892]  should_failslab+0xc2/0x120
[   99.531129][ T8892]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[   99.531140][ T8892]  ? __d_alloc+0x34/0xad0
[   99.531157][ T8892]  __d_alloc+0x34/0xad0
[   99.531174][ T8892]  d_alloc_pseudo+0x1c/0xc0
[   99.531185][ T8892]  alloc_file_pseudo+0x118/0x290
[   99.531201][ T8892]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   99.531216][ T8892]  ? alloc_fd+0x471/0x7a0
[   99.531232][ T8892]  sock_alloc_file+0x50/0x210
[   99.531246][ T8892]  __sys_socket+0x1c0/0x260
[   99.531257][ T8892]  ? __pfx___sys_socket+0x10/0x10
[   99.531270][ T8892]  __x64_sys_socket+0x72/0xb0
[   99.531279][ T8892]  ? lockdep_hardirqs_on+0x7d/0x110
[   99.531293][ T8892]  do_syscall_64+0x123/0x7b0
[   99.531307][ T8892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.531322][ T8892] RIP: 0033:0x7f57cedaa787
[   99.531331][ T8892] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.531341][ T8892] RSP: 002b:00007f57cfcedf38 EFLAGS: 00000293 ORIG_RAX: 0000000000000029
[   99.531351][ T8892] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57cedaa787
[   99.531357][ T8892] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   99.531363][ T8892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   99.531369][ T8892] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006
[   99.531374][ T8892] R13: 00007f57cf026038 R14: 0000200000000040 R15: 0000200000000080
[   99.531388][ T8892]  </TASK>
[   99.535873][ T8892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.477402][ T8939] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  101.493472][   T43] kauditd_printk_skb: 21 callbacks suppressed
[  101.493485][   T43] audit: type=1400 audit(2000000004.080:612): avc:  denied  { setopt } for  pid=8981 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  101.509408][   T43] audit: type=1400 audit(2000000004.090:613): avc:  denied  { read } for  pid=8981 comm="syz.0.995" path="socket:[48271]" dev="sockfs" ino=48271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  101.702397][   T66] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  101.852676][   T66] usb 8-1: Using ep0 maxpacket: 32
[  101.853123][   T66] usb 8-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  101.853943][   T66] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  101.855557][   T66] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  101.855575][   T66] usb 8-1: Product: syz
[  101.855584][   T66] usb 8-1: Manufacturer: syz
[  101.855593][   T66] usb 8-1: SerialNumber: syz
[  101.859083][   T66] usb 8-1: config 0 descriptor??
[  101.873146][ T8980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  101.873883][   T66] hub 8-1:0.0: bad descriptor, ignoring hub
[  101.873897][   T66] hub 8-1:0.0: probe with driver hub failed with error -5
[  102.242613][   T66] usb 8-1: USB disconnect, device number 5
[  102.715215][   T50] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  102.758091][ T9037] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  102.758108][ T9037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  102.758150][ T9037] vhci_hcd vhci_hcd.0: Device attached
[  102.760271][ T9038] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0
[  102.761340][ T5855] vhci_hcd vhci_hcd.4: stop threads
[  102.761350][ T5855] vhci_hcd vhci_hcd.4: release socket
[  102.761358][ T5855] vhci_hcd vhci_hcd.4: disconnect device
[  102.774188][ T9037] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  102.829580][ T9037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  102.866487][   T50] usb 7-1: New USB device found: idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  102.868537][   T50] usb 7-1: config 0 has an invalid interface number: 148 but max is 0
[  102.868551][   T50] usb 7-1: config 0 has no interface number 0
[  102.868568][   T50] usb 7-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  102.868580][   T50] usb 7-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  102.871000][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.871012][   T50] usb 7-1: Product: syz
[  102.871060][   T50] usb 7-1: Manufacturer: syz
[  102.871115][   T50] usb 7-1: SerialNumber: syz
[  102.873112][   T50] usb 7-1: config 0 descriptor??
[  102.877503][   T50] kobil_sct 7-1:0.148: KOBIL USB smart card terminal converter detected
[  102.879701][   T50] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  103.045885][ T9054] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  103.144501][ T9064] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1011'.
[  103.144516][ T9064] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1011'.
[  103.534914][ T9097] CUSE: info not properly terminated
[  103.610540][ T5892] usb 7-1: USB disconnect, device number 7
[  103.621721][ T5892] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  103.621973][ T5892] kobil_sct 7-1:0.148: device disconnected
[  103.790712][ T9113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.791102][ T9113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.795789][   T43] audit: type=1326 audit(2000000006.380:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9112 comm="syz.0.1047" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc253a8f19 code=0x0
[  103.972531][ T9119] netlink: 'syz.3.1048': attribute type 64 has an invalid length.
[  103.980709][ T9119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  104.189201][ T9132] FAULT_INJECTION: forcing a failure.
[  104.189201][ T9132] name failslab, interval 1, probability 0, space 0, times 0
[  104.189240][ T9132] CPU: 0 UID: 0 PID: 9132 Comm: syz.2.1052 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  104.189254][ T9132] Tainted: [L]=SOFTLOCKUP
[  104.189258][ T9132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  104.189276][ T9132] Call Trace:
[  104.189284][ T9132]  <TASK>
[  104.189289][ T9132]  dump_stack_lvl+0x100/0x190
[  104.189339][ T9132]  should_fail_ex.cold+0x5/0xa
[  104.189355][ T9132]  should_failslab+0xc2/0x120
[  104.189384][ T9132]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  104.189397][ T9132]  ? copy_process+0x6aa/0x88e0
[  104.189413][ T9132]  copy_process+0x6aa/0x88e0
[  104.189434][ T9132]  ? __pfx_copy_process+0x10/0x10
[  104.189446][ T9132]  ? kasan_save_track+0x14/0x30
[  104.189457][ T9132]  ? __kasan_kmalloc+0xaa/0xb0
[  104.189481][ T9132]  ? lockdep_init_map_type+0x5c/0x250
[  104.189497][ T9132]  ? lockdep_init_map_type+0x5c/0x250
[  104.189513][ T9132]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  104.189526][ T9132]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  104.189543][ T9132]  vhost_task_create+0x1db/0x370
[  104.189555][ T9132]  ? __pfx_vhost_task_create+0x10/0x10
[  104.189572][ T9132]  ? __pfx_vhost_task_fn+0x10/0x10
[  104.189585][ T9132]  ? register_lock_class+0x3f/0x7b0
[  104.189599][ T9132]  ? rcu_is_watching+0x13/0xc0
[  104.189611][ T9132]  ? trace_contention_end+0x126/0x160
[  104.189635][ T9132]  kvm_mmu_post_init_vm+0x1b3/0x360
[  104.189650][ T9132]  kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  104.189666][ T9132]  ? __pfx___mutex_lock+0x10/0x10
[  104.189713][ T9132]  ? kasan_quarantine_put+0x104/0x240
[  104.189725][ T9132]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  104.189763][ T9132]  ? lock_acquire+0x1d1/0x380
[  104.189779][ T9132]  ? do_raw_write_lock+0x11e/0x260
[  104.189788][ T9132]  ? find_held_lock+0x2b/0x80
[  104.189799][ T9132]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  104.189819][ T9132]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  104.189837][ T9132]  kvm_vcpu_ioctl+0x735/0x17b0
[  104.189854][ T9132]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  104.189870][ T9132]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  104.189888][ T9132]  ? do_vfs_ioctl+0x241/0x13f0
[  104.189900][ T9132]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  104.189910][ T9132]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  104.189945][ T9132]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  104.189958][ T9132]  ? __fget_files+0x34/0x3d0
[  104.189977][ T9132]  ? selinux_file_ioctl+0x1e0/0x290
[  104.189987][ T9132]  ? selinux_file_ioctl+0x1e7/0x290
[  104.189998][ T9132]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  104.190014][ T9132]  __x64_sys_ioctl+0x18e/0x210
[  104.190026][ T9132]  do_syscall_64+0x123/0x7b0
[  104.190041][ T9132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.190052][ T9132] RIP: 0033:0x7f57ceda8f19
[  104.190061][ T9132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.190071][ T9132] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.190081][ T9132] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  104.190087][ T9132] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[  104.190093][ T9132] RBP: 00007f57cfcef090 R08: 0000000000000000 R09: 0000000000000000
[  104.190099][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.190105][ T9132] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  104.190119][ T9132]  </TASK>
[  104.601574][   T43] audit: type=1400 audit(2000000007.180:615): avc:  denied  { associate } for  pid=9163 comm="syz.3.1066" name="file0" dev="tmpfs" ino=1558 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modem_device_t:s0"
[  106.075316][ T9223] xt_TCPMSS: Only works on TCP SYN packets
[  106.079151][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'.
[  106.832008][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  106.982419][ T5892] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  106.983236][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.983250][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.983260][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  106.983279][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.985353][ T5892] usb 7-1: config 0 descriptor??
[  107.354785][ T9275] e1000e 0000:00:02.0: Interrupt Throttle Rate off
[  107.369563][   T43] audit: type=1400 audit(2000000009.950:616): avc:  denied  { write } for  pid=9277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.369752][   T43] audit: type=1400 audit(2000000009.950:617): avc:  denied  { create } for  pid=9277 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.370137][   T43] audit: type=1400 audit(2000000009.950:618): avc:  denied  { write open } for  pid=9277 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.link" dev="tmpfs" ino=4250 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.370583][   T43] audit: type=1400 audit(2000000009.950:619): avc:  denied  { append } for  pid=9277 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" dev="tmpfs" ino=4250 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.372728][   T43] audit: type=1400 audit(2000000009.960:620): avc:  denied  { getattr } for  pid=9277 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.395969][ T5892] hid_parser_main: 28 callbacks suppressed
[  107.395990][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396004][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396015][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396026][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396037][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396048][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396059][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396070][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396081][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.396092][ T5892] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  107.401802][   T43] audit: type=1400 audit(2000000009.980:621): avc:  denied  { read } for  pid=9279 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.412129][ T9283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1111'.
[  107.431323][   T43] audit: type=1400 audit(2000000010.010:622): avc:  denied  { write } for  pid=9284 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.431483][   T43] audit: type=1400 audit(2000000010.010:623): avc:  denied  { unlink } for  pid=9284 comm="rm" name="resolv.conf.eth0.link" dev="tmpfs" ino=4250 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  107.472807][ T5892] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  107.595731][ T3303] usb 7-1: USB disconnect, device number 8
[  108.277318][ T9300] netlink: 'syz.2.1114': attribute type 64 has an invalid length.
[  109.443281][  T856] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  110.318688][ T9275] e1000e 0000:00:02.0 eth1: Hardware Error
[  110.505995][ T9275] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[  110.572736][   T43] audit: type=1400 audit(2000000013.160:624): avc:  denied  { write } for  pid=9302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.597160][ T9308] ip_tables: iptables: counters copy to user failed while replacing table
[  110.609799][   T43] audit: type=1400 audit(2000000013.190:625): avc:  denied  { create } for  pid=9307 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  110.640064][ T9308] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  110.792207][ T9333] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1122'.
[  114.193221][   T43] kauditd_printk_skb: 9 callbacks suppressed
[  114.193240][   T43] audit: type=1400 audit(2000000016.780:635): avc:  denied  { write } for  pid=9352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.239871][   T43] audit: type=1400 audit(2000000016.820:636): avc:  denied  { write } for  pid=9355 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.786158][ T9360] iommufd_mock iommufd_mock0: Adding to iommu group 10
[  117.788343][   T43] audit: type=1400 audit(2000000020.371:637): avc:  denied  { write } for  pid=9357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.830761][ T9371] netlink: 'syz.4.1127': attribute type 64 has an invalid length.
[  117.866487][   T43] audit: type=1400 audit(2000000020.451:638): avc:  denied  { write } for  pid=9372 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.878235][ T9377] FAULT_INJECTION: forcing a failure.
[  117.878235][ T9377] name failslab, interval 1, probability 0, space 0, times 0
[  117.878276][ T9377] CPU: 3 UID: 0 PID: 9377 Comm: syz.2.1129 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  117.878300][ T9377] Tainted: [L]=SOFTLOCKUP
[  117.878306][ T9377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.878316][ T9377] Call Trace:
[  117.878339][ T9377]  <TASK>
[  117.878348][ T9377]  dump_stack_lvl+0x100/0x190
[  117.878409][ T9377]  should_fail_ex.cold+0x5/0xa
[  117.878438][ T9377]  should_failslab+0xc2/0x120
[  117.878478][ T9377]  __kmalloc_noprof+0xfc/0x840
[  117.878498][ T9377]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  117.878566][ T9377]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  117.878600][ T9377]  genl_family_rcv_msg_doit+0xc7/0x300
[  117.878630][ T9377]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  117.878667][ T9377]  ? bpf_lsm_capable+0x9/0x10
[  117.878686][ T9377]  ? security_capable+0x80/0x260
[  117.878736][ T9377]  ? ns_capable+0xcd/0xf0
[  117.878759][ T9377]  genl_rcv_msg+0x560/0x800
[  117.878789][ T9377]  ? __pfx_genl_rcv_msg+0x10/0x10
[  117.878820][ T9377]  ? __lock_acquire+0x5c0/0x1f40
[  117.878845][ T9377]  ? __pfx_mptcp_pm_nl_announce_doit+0x10/0x10
[  117.878917][ T9377]  netlink_rcv_skb+0x159/0x420
[  117.878941][ T9377]  ? __pfx_genl_rcv_msg+0x10/0x10
[  117.878970][ T9377]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  117.879006][ T9377]  ? netlink_deliver_tap+0x1ae/0xb50
[  117.879034][ T9377]  genl_rcv+0x28/0x40
[  117.879059][ T9377]  netlink_unicast+0x668/0x950
[  117.879088][ T9377]  ? __pfx_netlink_unicast+0x10/0x10
[  117.879121][ T9377]  netlink_sendmsg+0x9ac/0x10c0
[  117.879150][ T9377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.879181][ T9377]  ? selinux_socket_sendmsg+0x198/0x2f0
[  117.879212][ T9377]  ? ____sys_sendmsg+0xa99/0xc30
[  117.879240][ T9377]  ____sys_sendmsg+0xa99/0xc30
[  117.879285][ T9377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.879311][ T9377]  ? __pfx_____sys_sendmsg+0x10/0x10
[  117.879345][ T9377]  ? lock_acquire+0x1d1/0x380
[  117.879368][ T9377]  ? get_pid_task+0x2a/0x250
[  117.879388][ T9377]  ___sys_sendmsg+0x190/0x1e0
[  117.879412][ T9377]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.879429][ T9377]  ? get_pid_task+0x106/0x250
[  117.879457][ T9377]  ? find_held_lock+0x2b/0x80
[  117.879494][ T9377]  __sys_sendmsg+0x160/0x210
[  117.879517][ T9377]  ? __pfx___sys_sendmsg+0x10/0x10
[  117.879556][ T9377]  do_syscall_64+0x123/0x7b0
[  117.879580][ T9377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.879598][ T9377] RIP: 0033:0x7f57ceda8f19
[  117.879615][ T9377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.879631][ T9377] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.879649][ T9377] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  117.879660][ T9377] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005
[  117.879711][ T9377] RBP: 00007f57cfcef090 R08: 0000000000000000 R09: 0000000000000000
[  117.879725][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.879738][ T9377] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  117.879765][ T9377]  </TASK>
[  117.952861][ T9385] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1132'.
[  118.100874][   T43] audit: type=1400 audit(2000000020.681:639): avc:  denied  { connect } for  pid=9389 comm="syz.3.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  118.118601][ T9400] netlink: 'syz.0.1139': attribute type 64 has an invalid length.
[  118.179901][ T9408] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1142'.
[  118.417018][ T9424] netlink: 'syz.3.1148': attribute type 64 has an invalid length.
[  119.172994][ T9445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1157'.
[  119.449607][ T9452] netlink: 'syz.4.1160': attribute type 64 has an invalid length.
[  119.634455][ T9470] sctp: Trying to GSO but underlying device doesn't support it.
[  119.636320][ T9470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  119.881792][ T9477] netlink: 'syz.2.1170': attribute type 64 has an invalid length.
[  120.337253][ T9495] lo: entered promiscuous mode
[  120.337929][ T9495] bond0: entered promiscuous mode
[  120.338524][ T9495] dummy0: entered promiscuous mode
[  120.338896][ T9495] eql: entered promiscuous mode
[  120.339258][ T9495] ifb0: entered promiscuous mode
[  120.339665][ T9495] ifb1: entered promiscuous mode
[  120.344118][ T9495] e1000 0000:00:07.0 eth0: entered promiscuous mode
[  120.354220][ T9495] e1000e 0000:00:02.0 eth1: entered promiscuous mode
[  120.356630][ T9495] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[  120.356977][ T9495] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[  120.357594][ T9495] hwsim0: entered promiscuous mode
[  120.358164][ T9495] ieee802154 phy0 wpan0: entered promiscuous mode
[  120.358342][ T9495] ieee802154 phy1 wpan1: entered promiscuous mode
[  120.358501][ T9495] teql0: entered promiscuous mode
[  120.358514][ T9495] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  120.436354][   T43] audit: type=1400 audit(2000000023.021:640): avc:  denied  { ioctl } for  pid=9497 comm="syz.0.1177" path="socket:[53818]" dev="sockfs" ino=53818 ioctlcmd=0x8949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  120.510264][ T9504] netlink: 'syz.0.1179': attribute type 64 has an invalid length.
[  120.603104][   T43] audit: type=1400 audit(2000000023.191:641): avc:  denied  { ioctl } for  pid=9507 comm="syz.0.1181" path="socket:[52834]" dev="sockfs" ino=52834 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  120.716596][   T43] audit: type=1400 audit(2000000023.301:642): avc:  denied  { mounton } for  pid=9515 comm="syz.4.1184" path="/proc/534/task" dev="proc" ino=51937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  121.384247][   T43] audit: type=1400 audit(2000000023.971:643): avc:  denied  { connect } for  pid=9521 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  121.387169][ T9525] FAULT_INJECTION: forcing a failure.
[  121.387169][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.387205][ T9525] CPU: 1 UID: 0 PID: 9525 Comm: syz.3.1188 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  121.387220][ T9525] Tainted: [L]=SOFTLOCKUP
[  121.387224][ T9525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  121.387231][ T9525] Call Trace:
[  121.387247][ T9525]  <TASK>
[  121.387253][ T9525]  dump_stack_lvl+0x100/0x190
[  121.387298][ T9525]  should_fail_ex.cold+0x5/0xa
[  121.387315][ T9525]  _copy_to_user+0x32/0xd0
[  121.387353][ T9525]  simple_read_from_buffer+0xcb/0x170
[  121.387380][ T9525]  proc_fail_nth_read+0x1af/0x230
[  121.387407][ T9525]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  121.387423][ T9525]  ? rw_verify_area+0xce/0x6d0
[  121.387439][ T9525]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  121.387453][ T9525]  vfs_read+0x1e4/0xb30
[  121.387464][ T9525]  ? lock_acquire+0x1d1/0x380
[  121.387478][ T9525]  ? __fget_files+0x34/0x3d0
[  121.387491][ T9525]  ? __pfx_vfs_read+0x10/0x10
[  121.387501][ T9525]  ? find_held_lock+0x2b/0x80
[  121.387512][ T9525]  ? __fget_files+0x215/0x3d0
[  121.387528][ T9525]  ? __fget_files+0x21f/0x3d0
[  121.387544][ T9525]  ksys_read+0x12a/0x250
[  121.387555][ T9525]  ? __pfx_ksys_read+0x10/0x10
[  121.387569][ T9525]  do_syscall_64+0x123/0x7b0
[  121.387617][ T9525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.387627][ T9525] RIP: 0033:0x7f056516974e
[  121.387636][ T9525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  121.387646][ T9525] RSP: 002b:00007f0566116fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  121.387657][ T9525] RAX: ffffffffffffffda RBX: 00007f05661176c0 RCX: 00007f056516974e
[  121.387663][ T9525] RDX: 000000000000000f RSI: 00007f05661170a0 RDI: 0000000000000003
[  121.387669][ T9525] RBP: 00007f0566117090 R08: 0000000000000000 R09: 0000000000000000
[  121.387675][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.387681][ T9525] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[  121.387694][ T9525]  </TASK>
[  121.435251][ T9529] netlink: 'syz.3.1190': attribute type 64 has an invalid length.
[  121.461058][   T43] audit: type=1400 audit(2000000024.041:644): avc:  denied  { ioctl } for  pid=9532 comm="syz.3.1191" path="socket:[54610]" dev="sockfs" ino=54610 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  121.524088][ T9523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12
[  121.541411][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'.
[  122.279877][ T9566] netlink: 'syz.2.1199': attribute type 64 has an invalid length.
[  122.281965][ T9562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.282168][ T9562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.591205][ T5892] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  122.724944][   T43] audit: type=1400 audit(2000000025.311:645): avc:  denied  { load_policy } for  pid=9575 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  122.726228][ T9576] SELinux:  policydb magic number 0x10000 does not match expected magic number 0xf97cff8c
[  122.727460][ T9576] SELinux: failed to load policy
[  122.747613][ T9576] kvm [9575]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffffff
[  122.752026][ T5892] usb 7-1: Using ep0 maxpacket: 8
[  122.756808][ T5892] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  122.758129][ T5892] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  122.758151][ T5892] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  122.758171][ T5892] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 1032, setting to 1024
[  122.758190][ T5892] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024
[  122.758207][ T5892] usb 7-1: config 1 interface 0 has no altsetting 0
[  122.760240][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.760256][ T5892] usb 7-1: Product: syz
[  122.760266][ T5892] usb 7-1: Manufacturer: syz
[  122.760275][ T5892] usb 7-1: SerialNumber: syz
[  122.767374][ T9570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  122.771114][ T5892] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  122.973338][   T50] usb 7-1: USB disconnect, device number 9
[  123.017967][ T9580] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1204'.
[  123.166610][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'.
[  123.221282][ T9593] netlink: 'syz.4.1208': attribute type 64 has an invalid length.
[  123.282757][   T43] audit: type=1400 audit(2000000025.871:646): avc:  denied  { bind } for  pid=9594 comm="syz.4.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  123.728390][ T9618] netlink: 'syz.4.1217': attribute type 64 has an invalid length.
[  123.804268][ T9627] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1221'.
[  123.949108][ T9642] netlink: 'syz.2.1227': attribute type 64 has an invalid length.
[  124.026035][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'.
[  124.026049][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'.
[  124.034834][   T43] audit: type=1400 audit(2000000026.621:647): avc:  denied  { bind } for  pid=9653 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.061446][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'.
[  124.061473][ T9654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.061484][ T9654] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.067024][ T9654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.067038][ T9654] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.112694][ T9661] FAULT_INJECTION: forcing a failure.
[  124.112694][ T9661] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.112733][ T9661] CPU: 2 UID: 0 PID: 9661 Comm: syz.4.1234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  124.112749][ T9661] Tainted: [L]=SOFTLOCKUP
[  124.112752][ T9661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  124.112766][ T9661] Call Trace:
[  124.112805][ T9661]  <TASK>
[  124.112811][ T9661]  dump_stack_lvl+0x100/0x190
[  124.112868][ T9661]  should_fail_ex.cold+0x5/0xa
[  124.112886][ T9661]  _copy_from_user+0x2e/0xd0
[  124.112931][ T9661]  move_addr_to_kernel+0x65/0x170
[  124.112985][ T9661]  __sys_sendto+0x1b8/0x4e0
[  124.112998][ T9661]  ? __pfx___sys_sendto+0x10/0x10
[  124.113015][ T9661]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  124.113068][ T9661]  ? ksys_write+0x1ac/0x250
[  124.113090][ T9661]  ? __pfx_ksys_write+0x10/0x10
[  124.113104][ T9661]  __x64_sys_sendto+0xe0/0x1c0
[  124.113116][ T9661]  ? do_syscall_64+0xae/0x7b0
[  124.113129][ T9661]  ? lockdep_hardirqs_on+0x7d/0x110
[  124.113142][ T9661]  do_syscall_64+0x123/0x7b0
[  124.113156][ T9661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.113168][ T9661] RIP: 0033:0x7f42d49a8f19
[  124.113177][ T9661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.113188][ T9661] RSP: 002b:00007f42d5857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  124.113205][ T9661] RAX: ffffffffffffffda RBX: 00007f42d4c25fa0 RCX: 00007f42d49a8f19
[  124.113212][ T9661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  124.113218][ T9661] RBP: 00007f42d5857090 R08: 0000200000000c80 R09: 0000000000000014
[  124.113224][ T9661] R10: 0000000000040080 R11: 0000000000000246 R12: 0000000000000001
[  124.113231][ T9661] R13: 00007f42d4c26038 R14: 00007f42d4c25fa0 R15: 00007fff0b1ee9a8
[  124.113246][ T9661]  </TASK>
[  124.143499][ T9666] netlink: 'syz.4.1237': attribute type 64 has an invalid length.
[  124.216882][   T43] audit: type=1400 audit(2000000026.801:648): avc:  denied  { setopt } for  pid=9669 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  124.217426][   T43] audit: type=1400 audit(2000000026.801:649): avc:  denied  { write } for  pid=9669 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  124.328908][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'.
[  124.328929][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'.
[  124.358412][ T9684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.511167][   T59] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  124.661534][   T59] usb 7-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  124.662473][   T59] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  124.662485][   T59] usb 7-1: config 0 has no interface number 0
[  124.664859][   T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.664871][   T59] usb 7-1: Product: syz
[  124.664877][   T59] usb 7-1: Manufacturer: syz
[  124.664884][   T59] usb 7-1: SerialNumber: syz
[  124.666746][   T59] usb 7-1: config 0 descriptor??
[  124.670724][   T59] usb 7-1: selecting invalid altsetting 1
[  124.671225][   T59] dvb_ttusb_budget: ttusb_init_controller: error
[  124.671241][   T59] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  124.698690][   T59] DVB: Unable to find symbol stv0299_attach()
[  124.720097][   T59] DVB: Unable to find symbol tda8083_attach()
[  124.720112][   T59] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  124.873667][   T59] usb 7-1: USB disconnect, device number 10
[  125.220998][ T3303] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  125.371648][ T3303] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  125.372770][ T3303] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.372785][ T3303] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.372795][ T3303] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.372814][ T3303] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.375299][ T3303] usb 8-1: config 0 descriptor??
[  125.653572][ T9736] kvm [9735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  125.783381][ T3303] hid_parser_main: 28 callbacks suppressed
[  125.783404][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783418][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783429][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783440][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783453][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783515][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783528][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783539][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783550][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.783561][ T3303] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  125.789763][ T3303] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  125.982427][   T59] usb 8-1: USB disconnect, device number 6
[  126.618495][ T9765] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1273'.
[  126.796322][ T9772] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147483647 (2147483647 ns) > initial count (1995082443 ns). Using initial count to start timer.
[  126.797586][   T43] kauditd_printk_skb: 4 callbacks suppressed
[  126.797596][   T43] audit: type=1400 audit(2000000000.450:654): avc:  denied  { write } for  pid=9771 comm="syz.4.1276" name="mouse0" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  127.038798][ T9786] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1282'.
[  127.299630][ T9802] FAULT_INJECTION: forcing a failure.
[  127.299630][ T9802] name failslab, interval 1, probability 0, space 0, times 0
[  127.299658][ T9802] CPU: 3 UID: 0 PID: 9802 Comm: syz.2.1287 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.299682][ T9802] Tainted: [L]=SOFTLOCKUP
[  127.299688][ T9802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  127.299698][ T9802] Call Trace:
[  127.299704][ T9802]  <TASK>
[  127.299711][ T9802]  dump_stack_lvl+0x100/0x190
[  127.299751][ T9802]  should_fail_ex.cold+0x5/0xa
[  127.299779][ T9802]  should_failslab+0xc2/0x120
[  127.299800][ T9802]  __kmalloc_cache_noprof+0x91/0x6d0
[  127.299827][ T9802]  ? mm_init_sched+0x4d/0x4b0
[  127.299854][ T9802]  mm_init_sched+0x4d/0x4b0
[  127.299879][ T9802]  mm_init+0x9f6/0xeb0
[  127.299901][ T9802]  mm_alloc+0x47/0x60
[  127.299919][ T9802]  alloc_bprm+0x2c0/0x9d0
[  127.299941][ T9802]  do_execveat_common.isra.0+0x194/0x580
[  127.299962][ T9802]  ? do_getname+0x191/0x390
[  127.299989][ T9802]  __x64_sys_execveat+0xdf/0x130
[  127.300011][ T9802]  do_syscall_64+0x123/0x7b0
[  127.300036][ T9802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.300054][ T9802] RIP: 0033:0x7f57ceda8f19
[  127.300069][ T9802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.300086][ T9802] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  127.300104][ T9802] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  127.300115][ T9802] RDX: 0000200000000340 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  127.300126][ T9802] RBP: 00007f57cfcef090 R08: 0000000000000000 R09: 0000000000000000
[  127.300136][ T9802] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  127.300147][ T9802] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  127.300171][ T9802]  </TASK>
[  127.577310][ T9818] FAULT_INJECTION: forcing a failure.
[  127.577310][ T9818] name failslab, interval 1, probability 0, space 0, times 0
[  127.577331][ T9818] CPU: 2 UID: 0 PID: 9818 Comm: syz.3.1295 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  127.577346][ T9818] Tainted: [L]=SOFTLOCKUP
[  127.577349][ T9818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  127.577355][ T9818] Call Trace:
[  127.577359][ T9818]  <TASK>
[  127.577363][ T9818]  dump_stack_lvl+0x100/0x190
[  127.577398][ T9818]  should_fail_ex.cold+0x5/0xa
[  127.577414][ T9818]  should_failslab+0xc2/0x120
[  127.577428][ T9818]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  127.577438][ T9818]  ? __alloc_skb+0x5b7/0x710
[  127.577451][ T9818]  ? __alloc_skb+0x140/0x710
[  127.577464][ T9818]  __alloc_skb+0x140/0x710
[  127.577476][ T9818]  ? __alloc_skb+0x5b7/0x710
[  127.577502][ T9818]  ? __pfx___alloc_skb+0x10/0x10
[  127.577513][ T9818]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  127.577530][ T9818]  netlink_alloc_large_skb+0x69/0x150
[  127.577547][ T9818]  netlink_sendmsg+0x755/0x10c0
[  127.577564][ T9818]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.577581][ T9818]  ? selinux_socket_sendmsg+0x198/0x2f0
[  127.577597][ T9818]  ? ____sys_sendmsg+0xa99/0xc30
[  127.577612][ T9818]  ____sys_sendmsg+0xa99/0xc30
[  127.577647][ T9818]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.577665][ T9818]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.577684][ T9818]  ? lock_acquire+0x1d1/0x380
[  127.577698][ T9818]  ? get_pid_task+0x2a/0x250
[  127.577710][ T9818]  ___sys_sendmsg+0x190/0x1e0
[  127.577720][ T9818]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.577730][ T9818]  ? get_pid_task+0x106/0x250
[  127.577745][ T9818]  ? find_held_lock+0x2b/0x80
[  127.577773][ T9818]  __sys_sendmsg+0x160/0x210
[  127.577786][ T9818]  ? __pfx___sys_sendmsg+0x10/0x10
[  127.577810][ T9818]  do_syscall_64+0x123/0x7b0
[  127.577825][ T9818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.577835][ T9818] RIP: 0033:0x7f05651a8f19
[  127.577848][ T9818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.577857][ T9818] RSP: 002b:00007f0566117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.577868][ T9818] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651a8f19
[  127.577875][ T9818] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004
[  127.577881][ T9818] RBP: 00007f0566117090 R08: 0000000000000000 R09: 0000000000000000
[  127.577887][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.577892][ T9818] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[  127.577906][ T9818]  </TASK>
[  127.637566][ T9826] netlink: 'syz.3.1298': attribute type 5 has an invalid length.
[  127.650928][ T9826] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  127.694821][   T57] IPVS: starting estimator thread 0...
[  127.780932][ T9832] IPVS: using max 45 ests per chain, 108000 per kthread
[  128.547550][ T9843] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  128.568188][ T9845] FAULT_INJECTION: forcing a failure.
[  128.568188][ T9845] name failslab, interval 1, probability 0, space 0, times 0
[  128.568217][ T9845] CPU: 1 UID: 0 PID: 9845 Comm: syz.3.1305 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  128.568239][ T9845] Tainted: [L]=SOFTLOCKUP
[  128.568245][ T9845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  128.568255][ T9845] Call Trace:
[  128.568261][ T9845]  <TASK>
[  128.568268][ T9845]  dump_stack_lvl+0x100/0x190
[  128.568299][ T9845]  should_fail_ex.cold+0x5/0xa
[  128.568325][ T9845]  should_failslab+0xc2/0x120
[  128.568347][ T9845]  kmem_cache_alloc_noprof+0x92/0x6a0
[  128.568375][ T9845]  ? security_file_alloc+0x34/0x2c0
[  128.568406][ T9845]  security_file_alloc+0x34/0x2c0
[  128.568425][ T9845]  init_file+0x95/0x480
[  128.568447][ T9845]  alloc_empty_file+0x79/0x1c0
[  128.568470][ T9845]  alloc_file_pseudo+0x17e/0x290
[  128.568493][ T9845]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  128.568518][ T9845]  ? alloc_fd+0x471/0x7a0
[  128.568543][ T9845]  sock_alloc_file+0x50/0x210
[  128.568566][ T9845]  __sys_socket+0x1c0/0x260
[  128.568584][ T9845]  ? __pfx___sys_socket+0x10/0x10
[  128.568630][ T9845]  __x64_sys_socket+0x72/0xb0
[  128.568647][ T9845]  ? lockdep_hardirqs_on+0x7d/0x110
[  128.568668][ T9845]  do_syscall_64+0x123/0x7b0
[  128.568690][ T9845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.568707][ T9845] RIP: 0033:0x7f05651aa787
[  128.568722][ T9845] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.568738][ T9845] RSP: 002b:00007f0566115f38 EFLAGS: 00000293 ORIG_RAX: 0000000000000029
[  128.568754][ T9845] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651aa787
[  128.568766][ T9845] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  128.568776][ T9845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  128.568786][ T9845] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006
[  128.568797][ T9845] R13: 00007f0565426038 R14: 0000200000000040 R15: 0000200000000080
[  128.568818][ T9845]  </TASK>
[  128.571268][ T9845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.785737][ T9855] fuse: fd is not a fuse device
[  128.786089][ T9859] syzkaller0: left promiscuous mode
[  128.786100][ T9859] syzkaller0: left allmulticast mode
[  128.787361][   T43] audit: type=1400 audit(2000000002.440:655): avc:  denied  { shutdown } for  pid=9858 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  129.101857][ T9875] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  129.102187][ T9875] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  129.316569][ T9884] FAULT_INJECTION: forcing a failure.
[  129.316569][ T9884] name failslab, interval 1, probability 0, space 0, times 0
[  129.316590][ T9884] CPU: 0 UID: 0 PID: 9884 Comm: syz.4.1319 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.316604][ T9884] Tainted: [L]=SOFTLOCKUP
[  129.316608][ T9884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  129.316613][ T9884] Call Trace:
[  129.316617][ T9884]  <TASK>
[  129.316621][ T9884]  dump_stack_lvl+0x100/0x190
[  129.316642][ T9884]  should_fail_ex.cold+0x5/0xa
[  129.316659][ T9884]  should_failslab+0xc2/0x120
[  129.316673][ T9884]  __kmalloc_noprof+0xfc/0x840
[  129.316682][ T9884]  ? __pfx_dynamic_dname+0x10/0x10
[  129.316694][ T9884]  ? tomoyo_encode2+0xfb/0x3c0
[  129.316708][ T9884]  tomoyo_encode2+0xfb/0x3c0
[  129.316721][ T9884]  tomoyo_encode+0x29/0x50
[  129.316731][ T9884]  tomoyo_realpath_from_path+0x18c/0x690
[  129.316746][ T9884]  tomoyo_path_number_perm+0x23c/0x580
[  129.316761][ T9884]  ? tomoyo_path_number_perm+0x22e/0x580
[  129.316778][ T9884]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  129.316799][ T9884]  ? __lock_acquire+0x5c0/0x1f40
[  129.316820][ T9884]  ? __fget_files+0x34/0x3d0
[  129.316833][ T9884]  ? find_held_lock+0x2b/0x80
[  129.316844][ T9884]  ? hook_file_ioctl_common+0x140/0x440
[  129.316860][ T9884]  ? __fget_files+0x21f/0x3d0
[  129.316875][ T9884]  security_file_ioctl+0xd3/0x230
[  129.316892][ T9884]  __x64_sys_ioctl+0xb7/0x210
[  129.316904][ T9884]  do_syscall_64+0x123/0x7b0
[  129.316919][ T9884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.316930][ T9884] RIP: 0033:0x7f42d49a8f19
[  129.316939][ T9884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.316949][ T9884] RSP: 002b:00007f42d5857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  129.316960][ T9884] RAX: ffffffffffffffda RBX: 00007f42d4c25fa0 RCX: 00007f42d49a8f19
[  129.316967][ T9884] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[  129.316973][ T9884] RBP: 00007f42d5857090 R08: 0000000000000000 R09: 0000000000000000
[  129.316978][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.316984][ T9884] R13: 00007f42d4c26038 R14: 00007f42d4c25fa0 R15: 00007fff0b1ee9a8
[  129.316998][ T9884]  </TASK>
[  129.317007][ T9884] ERROR: Out of memory at tomoyo_realpath_from_path.
[  129.669195][ T9861] ALSA: mixer_oss: invalid OSS volume ';Ê'
[  129.710946][   T43] audit: type=1400 audit(2000000003.370:656): avc:  denied  { mount } for  pid=9893 comm="syz.2.1322" name="/" dev="rpc_pipefs" ino=57615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  129.834036][   T43] audit: type=1400 audit(2000000003.490:657): avc:  denied  { unmount } for  pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  130.393716][   T43] audit: type=1400 audit(2000000004.050:658): avc:  denied  { create } for  pid=9914 comm="syz.0.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.394619][   T43] audit: type=1400 audit(2000000004.050:659): avc:  denied  { setopt } for  pid=9914 comm="syz.0.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.442752][   T43] audit: type=1400 audit(2000000004.100:660): avc:  denied  { write } for  pid=9922 comm="syz.3.1333" name="functions" dev="configfs" ino=13946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.443666][   T43] audit: type=1400 audit(2000000004.100:661): avc:  denied  { write } for  pid=9922 comm="syz.3.1333" name="c.1" dev="configfs" ino=13951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.443710][   T43] audit: type=1400 audit(2000000004.100:662): avc:  denied  { write } for  pid=9922 comm="syz.3.1333" name="c.1" dev="configfs" ino=13951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.450005][   T66] usb 5-1: USB disconnect, device number 3
[  130.487389][   T43] audit: type=1400 audit(2000000004.140:663): avc:  denied  { listen } for  pid=9923 comm="syz.0.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  130.527172][ T9930] __nla_validate_parse: 5 callbacks suppressed
[  130.527190][ T9930] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1332'.
[  130.924545][ T5788] Bluetooth: hci0: Zero size dump init pkt
[  131.155415][ T9954] FAULT_INJECTION: forcing a failure.
[  131.155415][ T9954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.155446][ T9954] CPU: 2 UID: 0 PID: 9954 Comm: syz.2.1342 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.155461][ T9954] Tainted: [L]=SOFTLOCKUP
[  131.155464][ T9954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  131.155471][ T9954] Call Trace:
[  131.155485][ T9954]  <TASK>
[  131.155490][ T9954]  dump_stack_lvl+0x100/0x190
[  131.155538][ T9954]  should_fail_ex.cold+0x5/0xa
[  131.155555][ T9954]  _copy_from_iter+0x1f4/0x16c0
[  131.155596][ T9954]  ? __pfx__copy_from_iter+0x10/0x10
[  131.155609][ T9954]  ? trace_kmalloc+0xeb/0x110
[  131.155633][ T9954]  ? __kasan_kmalloc+0xaa/0xb0
[  131.155646][ T9954]  ? __kmalloc_noprof+0x350/0x840
[  131.155656][ T9954]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  131.155685][ T9954]  kernfs_fop_write_iter+0x186/0x5f0
[  131.155699][ T9954]  vfs_write+0x6af/0x1040
[  131.155711][ T9954]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  131.155725][ T9954]  ? __pfx_vfs_write+0x10/0x10
[  131.155735][ T9954]  ? find_held_lock+0x2b/0x80
[  131.155755][ T9954]  ksys_write+0x12a/0x250
[  131.155766][ T9954]  ? __pfx_ksys_write+0x10/0x10
[  131.155781][ T9954]  do_syscall_64+0x123/0x7b0
[  131.155849][ T9954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.155860][ T9954] RIP: 0033:0x7f57ceda8f19
[  131.155869][ T9954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.155879][ T9954] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.155890][ T9954] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  131.155897][ T9954] RDX: 000000000000000c RSI: 0000200000000440 RDI: 0000000000000004
[  131.155903][ T9954] RBP: 00007f57cfcef090 R08: 0000000000000000 R09: 0000000000000000
[  131.155908][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.155914][ T9954] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  131.155928][ T9954]  </TASK>
[  131.314532][ T9960] netlink: 'syz.2.1345': attribute type 49 has an invalid length.
[  131.412767][ T9977] syzkaller0: entered promiscuous mode
[  131.412788][ T9977] syzkaller0: entered allmulticast mode
[  131.539126][ T9982] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  131.569745][ T9982] bridge_slave_0: left allmulticast mode
[  131.569762][ T9982] bridge_slave_0: left promiscuous mode
[  131.569887][ T9982] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.575174][ T9982] bond0: (slave bond_slave_1): Releasing backup interface
[  131.583434][ T9982] team0: Port device team_slave_0 removed
[  131.588678][ T9982] team0: Port device team_slave_1 removed
[  131.595101][ T9982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.662149][ T9987] FAULT_INJECTION: forcing a failure.
[  131.662149][ T9987] name failslab, interval 1, probability 0, space 0, times 0
[  131.662175][ T9987] CPU: 3 UID: 0 PID: 9987 Comm: syz.4.1353 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.662190][ T9987] Tainted: [L]=SOFTLOCKUP
[  131.662194][ T9987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  131.662200][ T9987] Call Trace:
[  131.662204][ T9987]  <TASK>
[  131.662208][ T9987]  dump_stack_lvl+0x100/0x190
[  131.662229][ T9987]  should_fail_ex.cold+0x5/0xa
[  131.662246][ T9987]  should_failslab+0xc2/0x120
[  131.662260][ T9987]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  131.662271][ T9987]  ? __alloc_skb+0x5b7/0x710
[  131.662322][ T9987]  ? __alloc_skb+0x140/0x710
[  131.662336][ T9987]  __alloc_skb+0x140/0x710
[  131.662347][ T9987]  ? __alloc_skb+0x5b7/0x710
[  131.662359][ T9987]  ? __pfx___alloc_skb+0x10/0x10
[  131.662375][ T9987]  ? is_bpf_text_address+0x8a/0x1a0
[  131.662389][ T9987]  ? bpf_ksym_find+0x128/0x1c0
[  131.662405][ T9987]  alloc_skb_with_frags+0xdb/0x750
[  131.662422][ T9987]  ? __lock_acquire+0x5c0/0x1f40
[  131.662437][ T9987]  sock_alloc_send_pskb+0x86a/0x9e0
[  131.662453][ T9987]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  131.662465][ T9987]  ? find_held_lock+0x2b/0x80
[  131.662476][ T9987]  ? dev_get_by_index+0x180/0x380
[  131.662490][ T9987]  ? dev_get_by_index+0x180/0x380
[  131.662507][ T9987]  packet_sendmsg+0x1d94/0x4f80
[  131.662550][ T9987]  ? sock_has_perm+0x254/0x320
[  131.662566][ T9987]  ? __pfx_sock_has_perm+0x10/0x10
[  131.662585][ T9987]  ? __pfx_packet_sendmsg+0x10/0x10
[  131.662596][ T9987]  ? __might_fault+0xc5/0x140
[  131.662612][ T9987]  ? selinux_socket_sendmsg+0x198/0x2f0
[  131.662629][ T9987]  __sys_sendto+0x492/0x4e0
[  131.662640][ T9987]  ? __pfx_packet_sendmsg+0x10/0x10
[  131.662652][ T9987]  ? __pfx___sys_sendto+0x10/0x10
[  131.662667][ T9987]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  131.662687][ T9987]  ? ksys_write+0x1ac/0x250
[  131.662698][ T9987]  ? __pfx_ksys_write+0x10/0x10
[  131.662710][ T9987]  __x64_sys_sendto+0xe0/0x1c0
[  131.662721][ T9987]  ? do_syscall_64+0xae/0x7b0
[  131.662733][ T9987]  ? lockdep_hardirqs_on+0x7d/0x110
[  131.662745][ T9987]  do_syscall_64+0x123/0x7b0
[  131.662759][ T9987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.662770][ T9987] RIP: 0033:0x7f42d49a8f19
[  131.662779][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.662789][ T9987] RSP: 002b:00007f42d5857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  131.662799][ T9987] RAX: ffffffffffffffda RBX: 00007f42d4c25fa0 RCX: 00007f42d49a8f19
[  131.662806][ T9987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  131.662812][ T9987] RBP: 00007f42d5857090 R08: 0000200000000c80 R09: 0000000000000014
[  131.662818][ T9987] R10: 0000000000040080 R11: 0000000000000246 R12: 0000000000000001
[  131.662826][ T9987] R13: 00007f42d4c26038 R14: 00007f42d4c25fa0 R15: 00007fff0b1ee9a8
[  131.662840][ T9987]  </TASK>
[  131.976639][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1357'.
[  132.048186][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'.
[  132.048200][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'.
[  132.223009][   T43] kauditd_printk_skb: 4 callbacks suppressed
[  132.223023][   T43] audit: type=1400 audit(2000000005.880:668): avc:  denied  { write } for  pid=10016 comm="syz.0.1364" path="socket:[59701]" dev="sockfs" ino=59701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  132.467901][T10027] netlink: 'syz.0.1367': attribute type 3 has an invalid length.
[  132.467915][T10027] netlink: 'syz.0.1367': attribute type 1 has an invalid length.
[  132.467921][T10027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1367'.
[  132.467930][T10027] NCSI netlink: No device for ifindex 0
[  132.536184][T10033] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  132.536371][T10033] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  132.539859][ T9991] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  132.539874][ T9991] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  132.711734][ T1446] ieee802154 phy0 wpan0: encryption failed: -22
[  132.711764][ T1446] ieee802154 phy1 wpan1: encryption failed: -22
[  132.958782][T10050] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  133.022506][T10050] FAULT_INJECTION: forcing a failure.
[  133.022506][T10050] name failslab, interval 1, probability 0, space 0, times 0
[  133.022525][T10050] CPU: 0 UID: 0 PID: 10050 Comm: syz.2.1376 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.022539][T10050] Tainted: [L]=SOFTLOCKUP
[  133.022543][T10050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  133.022549][T10050] Call Trace:
[  133.022553][T10050]  <TASK>
[  133.022557][T10050]  dump_stack_lvl+0x100/0x190
[  133.022578][T10050]  should_fail_ex.cold+0x5/0xa
[  133.022594][T10050]  should_failslab+0xc2/0x120
[  133.022608][T10050]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  133.022619][T10050]  ? __d_alloc+0x34/0xad0
[  133.022637][T10050]  __d_alloc+0x34/0xad0
[  133.022653][T10050]  d_alloc_pseudo+0x1c/0xc0
[  133.022671][T10050]  alloc_file_pseudo+0x118/0x290
[  133.022689][T10050]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  133.022705][T10050]  ? _raw_spin_unlock+0x28/0x50
[  133.022717][T10050]  ? alloc_fd+0x471/0x7a0
[  133.022733][T10050]  __anon_inode_getfile+0xe8/0x280
[  133.022748][T10050]  anon_inode_getfd+0x68/0xc0
[  133.022761][T10050]  do_inotify_init+0x454/0x5a0
[  133.022774][T10050]  __do_sys_inotify_init+0x10/0x20
[  133.022787][T10050]  do_syscall_64+0x123/0x7b0
[  133.022801][T10050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.022812][T10050] RIP: 0033:0x7f57ceda8f19
[  133.022822][T10050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.022831][T10050] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd
[  133.022842][T10050] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  133.022849][T10050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  133.022854][T10050] RBP: 00007f57cf025fa0 R08: 0000000000000000 R09: 0000000000000000
[  133.022877][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.022884][T10050] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  133.022899][T10050]  </TASK>
[  133.107774][T10052] md/raid1:md2: active with 1 out of 4 mirrors
[  133.108757][T10052] md2: detected capacity change from 0 to 8064
[  133.114345][T10050] md: invalid raid superblock magic on ram5
[  133.114354][T10050] md: ram5 does not have a valid v0.90 superblock, not importing!
[  133.125144][T10052] md2: detected capacity change from 8064 to 0
[  133.125156][T10052] md: md2 stopped.
[  133.129727][   T43] audit: type=1400 audit(2000000000.170:669): avc:  denied  { create } for  pid=10049 comm="syz.4.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  133.129889][   T43] audit: type=1400 audit(2000000000.170:670): avc:  denied  { bind } for  pid=10049 comm="syz.4.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  133.210053][T10067] FAULT_INJECTION: forcing a failure.
[  133.210053][T10067] name failslab, interval 1, probability 0, space 0, times 0
[  133.210072][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.3.1382 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.210086][T10067] Tainted: [L]=SOFTLOCKUP
[  133.210090][T10067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  133.210096][T10067] Call Trace:
[  133.210100][T10067]  <TASK>
[  133.210104][T10067]  dump_stack_lvl+0x100/0x190
[  133.210127][T10067]  should_fail_ex.cold+0x5/0xa
[  133.210144][T10067]  should_failslab+0xc2/0x120
[  133.210157][T10067]  __kmalloc_cache_noprof+0x91/0x6d0
[  133.210172][T10067]  ? rcu_is_watching+0x13/0xc0
[  133.210184][T10067]  ? vhost_task_create+0xee/0x370
[  133.210198][T10067]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  133.210215][T10067]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  133.210227][T10067]  vhost_task_create+0xee/0x370
[  133.210240][T10067]  ? __pfx_vhost_task_create+0x10/0x10
[  133.210256][T10067]  ? __pfx_vhost_task_fn+0x10/0x10
[  133.210270][T10067]  ? register_lock_class+0x3f/0x7b0
[  133.210284][T10067]  ? rcu_is_watching+0x13/0xc0
[  133.210295][T10067]  ? trace_contention_end+0x126/0x160
[  133.210313][T10067]  kvm_mmu_post_init_vm+0x1b3/0x360
[  133.210328][T10067]  kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  133.210345][T10067]  ? __pfx___mutex_lock+0x10/0x10
[  133.210362][T10067]  ? kasan_quarantine_put+0x104/0x240
[  133.210375][T10067]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  133.210389][T10067]  ? lock_acquire+0x1d1/0x380
[  133.210403][T10067]  ? do_raw_write_lock+0x11e/0x260
[  133.210413][T10067]  ? find_held_lock+0x2b/0x80
[  133.210423][T10067]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  133.210425][   T43] audit: type=1400 audit(2000000000.240:671): avc:  denied  { write } for  pid=10068 comm="syz.2.1383" path="socket:[60051]" dev="sockfs" ino=60051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  133.210439][T10067]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  133.210458][T10067]  kvm_vcpu_ioctl+0x735/0x17b0
[  133.210489][T10067]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  133.210506][T10067]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  133.210524][T10067]  ? do_vfs_ioctl+0x241/0x13f0
[  133.210535][T10067]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  133.210545][T10067]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  133.210558][T10067]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  133.210571][T10067]  ? __fget_files+0x34/0x3d0
[  133.210590][T10067]  ? selinux_file_ioctl+0x1e0/0x290
[  133.210600][T10067]  ? selinux_file_ioctl+0x1e7/0x290
[  133.210611][T10067]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  133.210628][T10067]  __x64_sys_ioctl+0x18e/0x210
[  133.210640][T10067]  do_syscall_64+0x123/0x7b0
[  133.210653][T10067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.210664][T10067] RIP: 0033:0x7f05651a8f19
[  133.210674][T10067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.210684][T10067] RSP: 002b:00007f0566117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  133.210694][T10067] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651a8f19
[  133.210701][T10067] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000008e
[  133.210707][T10067] RBP: 00007f0566117090 R08: 0000000000000000 R09: 0000000000000000
[  133.210713][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.210719][T10067] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[  133.210733][T10067]  </TASK>
[  133.596331][   T43] audit: type=1400 audit(2000000000.630:672): avc:  denied  { mount } for  pid=10099 comm="syz.3.1394" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  133.599768][   T43] audit: type=1807 audit(2000000000.630:673): UNKNOWN=00000000000000000000003 res=0
[  133.599968][   T43] audit: type=1802 audit(2000000000.630:674): pid=10100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.1394" res=0 errno=-22
[  133.603108][T10100] FAULT_INJECTION: forcing a failure.
[  133.603108][T10100] name failslab, interval 1, probability 0, space 0, times 0
[  133.603127][T10100] CPU: 3 UID: 0 PID: 10100 Comm: syz.3.1394 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.603141][T10100] Tainted: [L]=SOFTLOCKUP
[  133.603144][T10100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  133.603150][T10100] Call Trace:
[  133.603154][T10100]  <TASK>
[  133.603158][T10100]  dump_stack_lvl+0x100/0x190
[  133.603179][T10100]  should_fail_ex.cold+0x5/0xa
[  133.603196][T10100]  should_failslab+0xc2/0x120
[  133.603210][T10100]  __kmalloc_cache_noprof+0x91/0x6d0
[  133.603225][T10100]  ? __genradix_ptr_alloc+0x215/0x610
[  133.603242][T10100]  __genradix_ptr_alloc+0x215/0x610
[  133.603259][T10100]  proc_map_files_readdir+0x356/0xb10
[  133.603274][T10100]  ? __pfx_proc_map_files_readdir+0x10/0x10
[  133.603290][T10100]  ? lock_acquire+0x1d1/0x380
[  133.603311][T10100]  ? down_read_killable+0x358/0x520
[  133.603327][T10100]  ? __pfx_down_read_killable+0x10/0x10
[  133.603341][T10100]  ? selinux_file_permission+0x30/0x6a0
[  133.603357][T10100]  iterate_dir+0x2ba/0xc10
[  133.603373][T10100]  __x64_sys_getdents+0x13b/0x2b0
[  133.603386][T10100]  ? __pfx___x64_sys_getdents+0x10/0x10
[  133.603398][T10100]  ? __pfx_filldir+0x10/0x10
[  133.603415][T10100]  do_syscall_64+0x123/0x7b0
[  133.603429][T10100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.603441][T10100] RIP: 0033:0x7f05651a8f19
[  133.603450][T10100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.603460][T10100] RSP: 002b:00007f0566117028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  133.603470][T10100] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651a8f19
[  133.603477][T10100] RDX: 0000000000001012 RSI: 0000200000000f00 RDI: 0000000000000006
[  133.603483][T10100] RBP: 00007f0565237f6d R08: 0000000000000000 R09: 0000000000000000
[  133.603489][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.603495][T10100] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[  133.603508][T10100]  </TASK>
[  133.609679][T10099] ima: policy update failed
[  133.609755][   T43] audit: type=1802 audit(2000000000.640:675): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.1394" res=0 errno=-22
[  133.627612][   T43] audit: type=1400 audit(2000000000.660:676): avc:  denied  { unmount } for  pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  133.700682][T10108] FAULT_INJECTION: forcing a failure.
[  133.700682][T10108] name failslab, interval 1, probability 0, space 0, times 0
[  133.700708][T10108] CPU: 1 UID: 0 PID: 10108 Comm: syz.3.1397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.700723][T10108] Tainted: [L]=SOFTLOCKUP
[  133.700727][T10108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  133.700733][T10108] Call Trace:
[  133.700736][T10108]  <TASK>
[  133.700753][T10108]  dump_stack_lvl+0x100/0x190
[  133.700775][T10108]  should_fail_ex.cold+0x5/0xa
[  133.700792][T10108]  should_failslab+0xc2/0x120
[  133.700806][T10108]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  133.700816][T10108]  ? __alloc_skb+0x5b7/0x710
[  133.700829][T10108]  ? __alloc_skb+0x140/0x710
[  133.700843][T10108]  __alloc_skb+0x140/0x710
[  133.700854][T10108]  ? __alloc_skb+0x5b7/0x710
[  133.700867][T10108]  ? __pfx___alloc_skb+0x10/0x10
[  133.700878][T10108]  ? find_held_lock+0x2b/0x80
[  133.700890][T10108]  ? avc_has_perm_noaudit+0x11e/0x470
[  133.700903][T10108]  ? avc_has_perm_noaudit+0x11e/0x470
[  133.700918][T10108]  alloc_skb_with_frags+0xdb/0x750
[  133.700934][T10108]  ? avc_has_perm+0x135/0x1e0
[  133.700948][T10108]  sock_alloc_send_pskb+0x86a/0x9e0
[  133.700964][T10108]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  133.700975][T10108]  ? sock_has_perm+0x254/0x320
[  133.700990][T10108]  ? __pfx_sock_has_perm+0x10/0x10
[  133.701004][T10108]  ? __pfx_avc_has_perm+0x10/0x10
[  133.701020][T10108]  hci_sock_sendmsg+0x1c7/0x26f0
[  133.701039][T10108]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  133.701053][T10108]  ? selinux_socket_sendmsg+0x198/0x2f0
[  133.701070][T10108]  sock_write_iter+0x560/0x5d0
[  133.701085][T10108]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  133.701099][T10108]  ? __pfx_sock_write_iter+0x10/0x10
[  133.701118][T10108]  ? bpf_lsm_file_permission+0x9/0x10
[  133.701148][T10108]  ? security_file_permission+0x76/0x210
[  133.701162][T10108]  ? rw_verify_area+0xce/0x6d0
[  133.701180][T10108]  vfs_write+0x6af/0x1040
[  133.701192][T10108]  ? __pfx_sock_write_iter+0x10/0x10
[  133.701208][T10108]  ? __pfx_vfs_write+0x10/0x10
[  133.701217][T10108]  ? find_held_lock+0x2b/0x80
[  133.701237][T10108]  ksys_write+0x1f8/0x250
[  133.701248][T10108]  ? __pfx_ksys_write+0x10/0x10
[  133.701262][T10108]  do_syscall_64+0x123/0x7b0
[  133.701276][T10108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.701287][T10108] RIP: 0033:0x7f05651a8f19
[  133.701296][T10108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.701307][T10108] RSP: 002b:00007f0566117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  133.701317][T10108] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651a8f19
[  133.701324][T10108] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000000f
[  133.701329][T10108] RBP: 00007f0566117090 R08: 0000000000000000 R09: 0000000000000000
[  133.701335][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.701341][T10108] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[  133.701355][T10108]  </TASK>
[  133.702725][T10109] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes
[  133.703894][   T43] audit: type=1400 audit(2000000000.740:677): avc:  denied  { connect } for  pid=10107 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  133.786044][T10121] FAULT_INJECTION: forcing a failure.
[  133.786044][T10121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.786063][T10121] CPU: 3 UID: 0 PID: 10121 Comm: syz.3.1404 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.786078][T10121] Tainted: [L]=SOFTLOCKUP
[  133.786082][T10121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  133.786087][T10121] Call Trace:
[  133.786091][T10121]  <TASK>
[  133.786096][T10121]  dump_stack_lvl+0x100/0x190
[  133.786116][T10121]  should_fail_ex.cold+0x5/0xa
[  133.786133][T10121]  _copy_to_user+0x32/0xd0
[  133.786148][T10121]  do_sock_getsockopt+0x4d3/0x570
[  133.786164][T10121]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  133.786179][T10121]  ? __fget_files+0x34/0x3d0
[  133.786196][T10121]  ? find_held_lock+0x2b/0x80
[  133.786211][T10121]  ? __fget_files+0x21f/0x3d0
[  133.786228][T10121]  __sys_getsockopt+0x148/0x260
[  133.786244][T10121]  ? __x64_sys_getsockopt+0xbd/0x160
[  133.786256][T10121]  __x64_sys_getsockopt+0xbd/0x160
[  133.786268][T10121]  ? do_syscall_64+0xae/0x7b0
[  133.786280][T10121]  ? lockdep_hardirqs_on+0x7d/0x110
[  133.786292][T10121]  do_syscall_64+0x123/0x7b0
[  133.786306][T10121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.786316][T10121] RIP: 0033:0x7f05651a8f19
[  133.786325][T10121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.786335][T10121] RSP: 002b:00007f0566117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  133.786345][T10121] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651a8f19
[  133.786352][T10121] RDX: 0000000000000003 RSI: 0000000000000065 RDI: 0000000000000003
[  133.786358][T10121] RBP: 00007f0566117090 R08: 00002000000003c0 R09: 0000000000000000
[  133.786363][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.786369][T10121] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[  133.786383][T10121]  </TASK>
[  133.831746][T10128] fuse: Bad value for 'group_id'
[  133.831758][T10128] fuse: Bad value for 'group_id'
[  133.864232][T10132] warning: `syz.2.1408' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  133.871918][T10132] wg2: Caught tx_queue_len zero misconfig
[  134.040590][   T66] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  134.195113][T10140] syzkaller0: left promiscuous mode
[  134.195128][T10140] syzkaller0: left allmulticast mode
[  134.211436][ T5855] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.211455][ T5855] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.211474][ T5855] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.211486][ T5855] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.211502][ T5855] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.211515][ T5855] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.211772][   T66] usb 8-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00
[  134.212754][   T66] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.212776][   T66] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.212787][   T66] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  134.212797][   T66] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14
[  134.215384][   T66] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.215404][   T66] usb 8-1: Product: syz
[  134.215414][   T66] usb 8-1: Manufacturer: syz
[  134.215427][   T66] usb 8-1: SerialNumber: syz
[  134.218251][T10153] xt_hashlimit: size too large, truncated to 1048576
[  134.241026][   T66] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  134.241210][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 87
[  134.241262][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7
[  134.241943][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82
[  134.241976][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  134.242005][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  134.242036][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 85
[  134.242066][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 5
[  134.243529][   T66] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  134.244960][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83
[  134.245021][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  134.245075][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3
[  134.245112][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4
[  134.245145][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 86
[  134.245177][   T66] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  134.246041][   T66] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  134.269149][T10159] netlink: 'syz.4.1415': attribute type 2 has an invalid length.
[  134.269163][T10159] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1415'.
[  134.444173][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'.
[  134.526833][   T35] usb 8-1: USB disconnect, device number 7
[  134.537360][   T35] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  134.543653][   T35] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  134.544197][   T35] keyspan 8-1:1.0: device disconnected
[  135.082077][T10181] FAULT_INJECTION: forcing a failure.
[  135.082077][T10181] name failslab, interval 1, probability 0, space 0, times 0
[  135.082097][T10181] CPU: 1 UID: 0 PID: 10181 Comm: syz.3.1426 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.082111][T10181] Tainted: [L]=SOFTLOCKUP
[  135.082115][T10181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  135.082121][T10181] Call Trace:
[  135.082125][T10181]  <TASK>
[  135.082129][T10181]  dump_stack_lvl+0x100/0x190
[  135.082151][T10181]  should_fail_ex.cold+0x5/0xa
[  135.082167][T10181]  should_failslab+0xc2/0x120
[  135.082181][T10181]  __kmalloc_cache_noprof+0x91/0x6d0
[  135.082196][T10181]  ? bpf_prog_stream_init+0x121/0x390
[  135.082213][T10181]  bpf_prog_stream_init+0x121/0x390
[  135.082229][T10181]  bpf_prog_load+0xa27/0x2b20
[  135.082245][T10181]  ? avc_has_perm_noaudit+0x11e/0x470
[  135.082262][T10181]  ? __pfx_bpf_prog_load+0x10/0x10
[  135.082295][T10181]  __sys_bpf+0x146f/0x4b60
[  135.082308][T10181]  ? __pfx___sys_bpf+0x10/0x10
[  135.082317][T10181]  ? find_held_lock+0x2b/0x80
[  135.082329][T10181]  ? get_pid_task+0xfc/0x250
[  135.082338][T10181]  ? get_pid_task+0xfc/0x250
[  135.082352][T10181]  ? find_held_lock+0x2b/0x80
[  135.082366][T10181]  ? rcu_read_lock_any_held+0x6a/0x90
[  135.082378][T10181]  ? find_held_lock+0x2b/0x80
[  135.082389][T10181]  ? ksys_write+0x190/0x250
[  135.082399][T10181]  ? ksys_write+0x190/0x250
[  135.082410][T10181]  ? lock_acquire+0x1d1/0x380
[  135.082432][T10181]  ? fput+0x7c/0x100
[  135.082445][T10181]  ? ksys_write+0x1ac/0x250
[  135.082458][T10181]  ? __x64_sys_bpf+0xce/0x140
[  135.082467][T10181]  __x64_sys_bpf+0xce/0x140
[  135.082477][T10181]  ? do_syscall_64+0xae/0x7b0
[  135.082491][T10181]  do_syscall_64+0x123/0x7b0
[  135.082504][T10181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.082515][T10181] RIP: 0033:0x7f05651a8f19
[  135.082524][T10181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.082534][T10181] RSP: 002b:00007f0566117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  135.082544][T10181] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651a8f19
[  135.082551][T10181] RDX: 0000000000000090 RSI: 0000200000000300 RDI: 0000000000000005
[  135.082556][T10181] RBP: 00007f0566117090 R08: 0000000000000000 R09: 0000000000000000
[  135.082562][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  135.082568][T10181] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[  135.082581][T10181]  </TASK>
[  135.397086][T10205] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1435'.
[  135.424982][T10207] FAULT_INJECTION: forcing a failure.
[  135.424982][T10207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.425002][T10207] CPU: 1 UID: 0 PID: 10207 Comm: syz.4.1436 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.425017][T10207] Tainted: [L]=SOFTLOCKUP
[  135.425020][T10207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  135.425026][T10207] Call Trace:
[  135.425030][T10207]  <TASK>
[  135.425034][T10207]  dump_stack_lvl+0x100/0x190
[  135.425056][T10207]  should_fail_ex.cold+0x5/0xa
[  135.425073][T10207]  _copy_from_user+0x2e/0xd0
[  135.425087][T10207]  copy_msghdr_from_user+0x9f/0x4c0
[  135.425105][T10207]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  135.425125][T10207]  ? lock_acquire+0x1d1/0x380
[  135.425139][T10207]  ? get_pid_task+0x2a/0x250
[  135.425150][T10207]  ___sys_sendmsg+0x106/0x1e0
[  135.425160][T10207]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.425170][T10207]  ? get_pid_task+0x106/0x250
[  135.425184][T10207]  ? find_held_lock+0x2b/0x80
[  135.425204][T10207]  __sys_sendmsg+0x160/0x210
[  135.425218][T10207]  ? __pfx___sys_sendmsg+0x10/0x10
[  135.425238][T10207]  do_syscall_64+0x123/0x7b0
[  135.425253][T10207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.425264][T10207] RIP: 0033:0x7f42d49a8f19
[  135.425273][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.425283][T10207] RSP: 002b:00007f42d5857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.425294][T10207] RAX: ffffffffffffffda RBX: 00007f42d4c25fa0 RCX: 00007f42d49a8f19
[  135.425301][T10207] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  135.425306][T10207] RBP: 00007f42d5857090 R08: 0000000000000000 R09: 0000000000000000
[  135.425312][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.425318][T10207] R13: 00007f42d4c26038 R14: 00007f42d4c25fa0 R15: 00007fff0b1ee9a8
[  135.425331][T10207]  </TASK>
[  135.513137][T10219] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1440'.
[  135.613025][T10229] netlink: 'syz.2.1445': attribute type 1 has an invalid length.
[  135.646881][T10232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.775739][T10240] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  135.776023][T10240] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  135.830875][T10244] can0: slcan on ttynull.
[  135.900587][T10243] can0 (unregistered): slcan off ttynull.
[  136.177266][T10250] FAULT_INJECTION: forcing a failure.
[  136.177266][T10250] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.177286][T10250] CPU: 2 UID: 0 PID: 10250 Comm: syz.2.1454 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  136.177301][T10250] Tainted: [L]=SOFTLOCKUP
[  136.177304][T10250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  136.177310][T10250] Call Trace:
[  136.177314][T10250]  <TASK>
[  136.177319][T10250]  dump_stack_lvl+0x100/0x190
[  136.177340][T10250]  should_fail_ex.cold+0x5/0xa
[  136.177357][T10250]  _copy_from_user+0x2e/0xd0
[  136.177372][T10250]  move_addr_to_kernel+0x65/0x170
[  136.177390][T10250]  __sys_sendto+0x1b8/0x4e0
[  136.177402][T10250]  ? __pfx___sys_sendto+0x10/0x10
[  136.177417][T10250]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  136.177442][T10250]  __x64_sys_sendto+0xe0/0x1c0
[  136.177453][T10250]  ? do_syscall_64+0xae/0x7b0
[  136.177466][T10250]  ? lockdep_hardirqs_on+0x7d/0x110
[  136.177479][T10250]  do_syscall_64+0x123/0x7b0
[  136.177492][T10250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.177503][T10250] RIP: 0033:0x7f57ced6974e
[  136.177512][T10250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  136.177522][T10250] RSP: 002b:00007f57cfcede28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  136.177533][T10250] RAX: ffffffffffffffda RBX: 00007f57cfcef6c0 RCX: 00007f57ced6974e
[  136.177540][T10250] RDX: 0000000000000020 RSI: 00007f57cfcedfe0 RDI: 0000000000000004
[  136.177546][T10250] RBP: 0000000000000000 R08: 00007f57cfcedea4 R09: 000000000000000c
[  136.177552][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  136.177573][T10250] R13: 00007f57cfcedef8 R14: 00007f57cfcedfe0 R15: 0000000000000000
[  136.177612][T10250]  </TASK>
[  136.179140][T10250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.768313][T10261] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  136.768620][T10261] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  136.829404][T10267] device-mapper: table: 248:3: multipath: not enough priority group arguments (-EINVAL)
[  136.829454][T10267] device-mapper: ioctl: error adding target to table
[  136.831656][T10271] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0
[  136.876144][T10274] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 50594050 (only 8 groups)
[  136.948557][T10284] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  136.948791][T10284] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  136.956746][T10286] FAULT_INJECTION: forcing a failure.
[  136.956746][T10286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.956775][T10286] CPU: 3 UID: 0 PID: 10286 Comm: syz.2.1470 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  136.956790][T10286] Tainted: [L]=SOFTLOCKUP
[  136.956793][T10286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  136.956800][T10286] Call Trace:
[  136.956807][T10286]  <TASK>
[  136.956812][T10286]  dump_stack_lvl+0x100/0x190
[  136.956862][T10286]  should_fail_ex.cold+0x5/0xa
[  136.956879][T10286]  _copy_from_user+0x2e/0xd0
[  136.956916][T10286]  drm_ioctl+0x520/0xc60
[  136.956961][T10286]  ? __pfx_drm_mode_getfb2_ioctl+0x10/0x10
[  136.956977][T10286]  ? __pfx_drm_ioctl+0x10/0x10
[  136.956987][T10286]  ? __fget_files+0x34/0x3d0
[  136.957019][T10286]  ? selinux_file_ioctl+0x1e0/0x290
[  136.957031][T10286]  ? selinux_file_ioctl+0x1e7/0x290
[  136.957042][T10286]  ? __pfx_drm_ioctl+0x10/0x10
[  136.957054][T10286]  __x64_sys_ioctl+0x18e/0x210
[  136.957067][T10286]  do_syscall_64+0x123/0x7b0
[  136.957128][T10286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.957145][T10286] RIP: 0033:0x7f57ceda8f19
[  136.957154][T10286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.957165][T10286] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  136.957176][T10286] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  136.957182][T10286] RDX: 00002000000006c0 RSI: 00000000c06864ce RDI: 0000000000000004
[  136.957188][T10286] RBP: 00007f57cfcef090 R08: 0000000000000000 R09: 0000000000000000
[  136.957194][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.957199][T10286] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  136.957213][T10286]  </TASK>
[  137.068259][T10293] FAULT_INJECTION: forcing a failure.
[  137.068259][T10293] name failslab, interval 1, probability 0, space 0, times 0
[  137.068279][T10293] CPU: 0 UID: 0 PID: 10293 Comm: syz.2.1473 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  137.068294][T10293] Tainted: [L]=SOFTLOCKUP
[  137.068298][T10293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  137.068304][T10293] Call Trace:
[  137.068308][T10293]  <TASK>
[  137.068312][T10293]  dump_stack_lvl+0x100/0x190
[  137.068333][T10293]  should_fail_ex.cold+0x5/0xa
[  137.068350][T10293]  should_failslab+0xc2/0x120
[  137.068363][T10293]  __kvmalloc_node_noprof+0x113/0x9b0
[  137.068376][T10293]  ? __kvm_mmu_topup_memory_cache+0x455/0x5f0
[  137.068390][T10293]  __kvm_mmu_topup_memory_cache+0x455/0x5f0
[  137.068401][T10293]  ? find_held_lock+0x2b/0x80
[  137.068413][T10293]  ? kvm_msr_allowed+0x2d0/0x450
[  137.068428][T10293]  kvm_mmu_load+0xe3/0x25b0
[  137.068443][T10293]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  137.068454][T10293]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  137.068467][T10293]  ? __pfx_kvm_mmu_load+0x10/0x10
[  137.068480][T10293]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  137.068493][T10293]  ? kvm_check_and_inject_events+0x896/0x1050
[  137.068509][T10293]  vcpu_run+0x4009/0x60d0
[  137.068529][T10293]  ? __pfx___schedule+0x10/0x10
[  137.068541][T10293]  ? __pfx_vcpu_run+0x10/0x10
[  137.068554][T10293]  ? kvm_arch_vcpu_load+0x15e/0xcf0
[  137.068566][T10293]  ? lock_acquire+0x1d1/0x380
[  137.068580][T10293]  ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0
[  137.068596][T10293]  ? fpu_swap_kvm_fpstate+0x25e/0x4b0
[  137.068606][T10293]  ? __local_bh_enable_ip+0xa5/0x120
[  137.068621][T10293]  ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0
[  137.068635][T10293]  kvm_arch_vcpu_ioctl_run+0x1355/0x1de0
[  137.068654][T10293]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  137.068668][T10293]  ? lock_acquire+0x1d1/0x380
[  137.068682][T10293]  ? do_raw_write_lock+0x11e/0x260
[  137.068692][T10293]  ? find_held_lock+0x2b/0x80
[  137.068708][T10293]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  137.068723][T10293]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  137.068742][T10293]  kvm_vcpu_ioctl+0x735/0x17b0
[  137.068759][T10293]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  137.068775][T10293]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  137.068794][T10293]  ? do_vfs_ioctl+0x241/0x13f0
[  137.068805][T10293]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  137.068815][T10293]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  137.068828][T10293]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  137.068841][T10293]  ? __fget_files+0x34/0x3d0
[  137.068860][T10293]  ? selinux_file_ioctl+0x1e0/0x290
[  137.068870][T10293]  ? selinux_file_ioctl+0x1e7/0x290
[  137.068881][T10293]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  137.068897][T10293]  __x64_sys_ioctl+0x18e/0x210
[  137.068909][T10293]  do_syscall_64+0x123/0x7b0
[  137.068923][T10293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.068934][T10293] RIP: 0033:0x7f57ceda8f19
[  137.068943][T10293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.068952][T10293] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  137.068963][T10293] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  137.068969][T10293] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[  137.068975][T10293] RBP: 00007f57cfcef090 R08: 0000000000000000 R09: 0000000000000000
[  137.068981][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.068987][T10293] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  137.069001][T10293]  </TASK>
[  137.291764][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'.
[  137.310600][T10301] xt_CT: No such helper "netbios-ns"
[  137.360622][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'.
[  137.400166][T10314] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  137.400329][T10314] IPVS: sh: UDP 0.0.0.0:0 - no destination available
[  137.445357][T10319] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt
[  137.460161][T10319] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD
[  137.511482][   T43] kauditd_printk_skb: 14 callbacks suppressed
[  137.511494][   T43] audit: type=1400 audit(2000000004.550:692): avc:  denied  { getopt } for  pid=10321 comm="syz.3.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  137.511516][   T43] audit: type=1400 audit(2000000004.550:693): avc:  denied  { getopt } for  pid=10321 comm="syz.3.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  137.550187][   T43] audit: type=1400 audit(2000000004.580:694): avc:  granted  { setsecparam } for  pid=10324 comm="syz.3.1485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  137.568005][T10325] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  137.637000][T10329] netlink: 'syz.3.1486': attribute type 12 has an invalid length.
[  137.798819][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'.
[  137.871240][  T856] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  137.913140][   T43] audit: type=1804 audit(2000000004.950:695): pid=10342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1492" name="/newroot/277/mnt/file1" dev="tmpfs" ino=1513 res=1 errno=0
[  138.020629][  T856] usb 8-1: Using ep0 maxpacket: 32
[  138.021107][  T856] usb 8-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  138.021550][  T856] usb 8-1: config 0 has no interfaces?
[  138.023071][  T856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.023082][  T856] usb 8-1: Product: syz
[  138.023089][  T856] usb 8-1: Manufacturer: syz
[  138.023096][  T856] usb 8-1: SerialNumber: syz
[  138.024575][  T856] usb 8-1: config 0 descriptor??
[  138.226933][T10329] team0: entered allmulticast mode
[  138.226955][T10329] team_slave_0: entered allmulticast mode
[  138.226975][T10329] team_slave_1: entered allmulticast mode
[  138.227500][T10329] team0: Cannot enslave team device to itself
[  138.228702][  T856] usb 8-1: USB disconnect, device number 8
[  138.381435][T10350] FAULT_INJECTION: forcing a failure.
[  138.381435][T10350] name failslab, interval 1, probability 0, space 0, times 0
[  138.381470][T10350] CPU: 3 UID: 0 PID: 10350 Comm: syz.0.1495 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  138.381486][T10350] Tainted: [L]=SOFTLOCKUP
[  138.381490][T10350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  138.381504][T10350] Call Trace:
[  138.381517][T10350]  <TASK>
[  138.381522][T10350]  dump_stack_lvl+0x100/0x190
[  138.381573][T10350]  should_fail_ex.cold+0x5/0xa
[  138.381618][T10350]  should_failslab+0xc2/0x120
[  138.381648][T10350]  __kmalloc_cache_node_noprof+0x94/0x710
[  138.381662][T10350]  ? __kmalloc_noprof+0x350/0x840
[  138.381672][T10350]  ? __alloc_workqueue+0x84e/0x1900
[  138.381691][T10350]  __alloc_workqueue+0x84e/0x1900
[  138.381712][T10350]  alloc_workqueue_noprof+0xc7/0x130
[  138.381729][T10350]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  138.381751][T10350]  ? __pfx_dev_set_name+0x10/0x10
[  138.381793][T10350]  ? __kasan_kmalloc+0xaa/0xb0
[  138.381813][T10350]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  138.381829][T10350]  hci_register_dev+0x240/0xcc0
[  138.381873][T10350]  hci_uart_tty_ioctl+0x8fd/0xcb0
[  138.381917][T10350]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[  138.381931][T10350]  tty_ioctl+0x12f4/0x1870
[  138.381952][T10350]  ? __pfx_tty_ioctl+0x10/0x10
[  138.381962][T10350]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  138.381996][T10350]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  138.382009][T10350]  ? __fget_files+0x34/0x3d0
[  138.382030][T10350]  ? selinux_file_ioctl+0x1e0/0x290
[  138.382041][T10350]  ? selinux_file_ioctl+0x1e7/0x290
[  138.382054][T10350]  ? __pfx_tty_ioctl+0x10/0x10
[  138.382067][T10350]  __x64_sys_ioctl+0x18e/0x210
[  138.382082][T10350]  do_syscall_64+0x123/0x7b0
[  138.382113][T10350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.382124][T10350] RIP: 0033:0x7fbc253a8f19
[  138.382135][T10350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.382146][T10350] RSP: 002b:00007fbc26204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.382157][T10350] RAX: ffffffffffffffda RBX: 00007fbc25625fa0 RCX: 00007fbc253a8f19
[  138.382165][T10350] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003
[  138.382172][T10350] RBP: 00007fbc25437f6d R08: 0000000000000000 R09: 0000000000000000
[  138.382178][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.382185][T10350] R13: 00007fbc25626038 R14: 00007fbc25625fa0 R15: 00007ffe36e70b88
[  138.382199][T10350]  </TASK>
[  138.383933][T10350] Bluetooth: Can't register HCI device
[  138.481030][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'.
[  138.668938][T10380] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10380 comm=syz.4.1508
[  138.855284][   T43] audit: type=1326 audit(2000000005.890:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.3.1512" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05651a8f19 code=0xffff0000
[  139.258291][T10391] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1513'.
[  139.336095][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'.
[  139.341730][   T43] audit: type=1400 audit(2000000006.380:697): avc:  denied  { listen } for  pid=10392 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  139.465266][T10403] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10403 comm=syz.4.1518
[  139.468057][T10398] syzkaller0: entered promiscuous mode
[  139.468069][T10398] syzkaller0: entered allmulticast mode
[  139.476909][   T43] audit: type=1400 audit(2000000006.510:698): avc:  denied  { execstack } for  pid=10395 comm="syz.2.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  139.495661][T10398] input: syz0 as /devices/virtual/input/input14
[  139.611013][T10413] bond0: entered promiscuous mode
[  139.611028][T10413] bond_slave_0: entered promiscuous mode
[  139.611137][T10413] bond_slave_1: entered promiscuous mode
[  139.612404][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'.
[  139.612420][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'.
[  139.799366][T10429] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10429 comm=syz.3.1527
[  140.570009][T10457] xt_policy: output policy not valid in PREROUTING and INPUT
[  140.576033][   T43] audit: type=1400 audit(2000000007.610:699): avc:  denied  { setattr } for  pid=10448 comm="syz.3.1535" name="/" dev="9p" ino=72095591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.820587][ T4703] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  140.866590][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'.
[  140.866605][T10471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1543'.
[  140.950553][ T4703] usb 5-1: device descriptor read/64, error -71
[  141.200553][ T4703] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  141.350515][ T4703] usb 5-1: device descriptor read/64, error -71
[  141.460635][ T4703] usb usb5-port1: attempt power cycle
[  141.820497][ T4703] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  141.845773][ T4703] usb 5-1: device descriptor read/8, error -71
[  142.090554][ T4703] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  142.111162][ T4703] usb 5-1: device descriptor read/8, error -71
[  142.146794][T10512] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes
[  142.146812][T10512] Error validating options; rc = [-22]
[  142.224364][ T4703] usb usb5-port1: unable to enumerate USB device
[  142.300582][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.300610][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.300627][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.300643][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.316372][T10523] FAULT_INJECTION: forcing a failure.
[  142.316372][T10523] name failslab, interval 1, probability 0, space 0, times 0
[  142.316392][T10523] CPU: 3 UID: 0 PID: 10523 Comm: syz.4.1563 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  142.316406][T10523] Tainted: [L]=SOFTLOCKUP
[  142.316410][T10523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  142.316415][T10523] Call Trace:
[  142.316419][T10523]  <TASK>
[  142.316424][T10523]  dump_stack_lvl+0x100/0x190
[  142.316445][T10523]  should_fail_ex.cold+0x5/0xa
[  142.316461][T10523]  should_failslab+0xc2/0x120
[  142.316475][T10523]  __kmalloc_noprof+0xfc/0x840
[  142.316484][T10523]  ? rcu_is_watching+0x13/0xc0
[  142.316496][T10523]  ? tomoyo_realpath_from_path+0xb6/0x690
[  142.316512][T10523]  tomoyo_realpath_from_path+0xb6/0x690
[  142.316526][T10523]  tomoyo_path_number_perm+0x23c/0x580
[  142.316541][T10523]  ? tomoyo_path_number_perm+0x22e/0x580
[  142.316557][T10523]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  142.316579][T10523]  ? __lock_acquire+0x5c0/0x1f40
[  142.316618][T10523]  ? __fget_files+0x34/0x3d0
[  142.316634][T10523]  ? find_held_lock+0x2b/0x80
[  142.316653][T10523]  ? hook_file_ioctl_common+0x140/0x440
[  142.316669][T10523]  ? __fget_files+0x21f/0x3d0
[  142.316684][T10523]  security_file_ioctl+0xd3/0x230
[  142.316703][T10523]  __x64_sys_ioctl+0xb7/0x210
[  142.316715][T10523]  do_syscall_64+0x123/0x7b0
[  142.316730][T10523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.316741][T10523] RIP: 0033:0x7f42d49a8f19
[  142.316751][T10523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.316760][T10523] RSP: 002b:00007f42d5857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  142.316771][T10523] RAX: ffffffffffffffda RBX: 00007f42d4c25fa0 RCX: 00007f42d49a8f19
[  142.316778][T10523] RDX: 0000000000000000 RSI: 0000000040081271 RDI: 0000000000000003
[  142.316784][T10523] RBP: 00007f42d5857090 R08: 0000000000000000 R09: 0000000000000000
[  142.316790][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.316796][T10523] R13: 00007f42d4c26038 R14: 00007f42d4c25fa0 R15: 00007fff0b1ee9a8
[  142.316810][T10523]  </TASK>
[  142.316837][T10523] ERROR: Out of memory at tomoyo_realpath_from_path.
[  142.338713][T10525] __nla_validate_parse: 4 callbacks suppressed
[  142.338725][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'.
[  142.368188][   T43] audit: type=1400 audit(2000000009.400:700): avc:  denied  { name_bind } for  pid=10526 comm="syz.4.1566" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  142.583725][T10542] FAULT_INJECTION: forcing a failure.
[  142.583725][T10542] name failslab, interval 1, probability 0, space 0, times 0
[  142.583744][T10542] CPU: 3 UID: 0 PID: 10542 Comm: syz.2.1571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  142.583758][T10542] Tainted: [L]=SOFTLOCKUP
[  142.583767][T10542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  142.583773][T10542] Call Trace:
[  142.583777][T10542]  <TASK>
[  142.583781][T10542]  dump_stack_lvl+0x100/0x190
[  142.583802][T10542]  should_fail_ex.cold+0x5/0xa
[  142.583819][T10542]  should_failslab+0xc2/0x120
[  142.583832][T10542]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  142.583843][T10542]  ? copy_process+0x6aa/0x88e0
[  142.583859][T10542]  copy_process+0x6aa/0x88e0
[  142.583881][T10542]  ? __pfx_copy_process+0x10/0x10
[  142.583893][T10542]  ? kasan_save_track+0x14/0x30
[  142.583904][T10542]  ? __kasan_kmalloc+0xaa/0xb0
[  142.583915][T10542]  ? lockdep_init_map_type+0x5c/0x250
[  142.583932][T10542]  ? lockdep_init_map_type+0x5c/0x250
[  142.583947][T10542]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  142.583960][T10542]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  142.583976][T10542]  vhost_task_create+0x1db/0x370
[  142.583989][T10542]  ? __pfx_vhost_task_create+0x10/0x10
[  142.584005][T10542]  ? __pfx_vhost_task_fn+0x10/0x10
[  142.584018][T10542]  ? register_lock_class+0x3f/0x7b0
[  142.584032][T10542]  ? rcu_is_watching+0x13/0xc0
[  142.584045][T10542]  ? trace_contention_end+0x126/0x160
[  142.584062][T10542]  kvm_mmu_post_init_vm+0x1b3/0x360
[  142.584077][T10542]  kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  142.584093][T10542]  ? __pfx___mutex_lock+0x10/0x10
[  142.584106][T10542]  ? kasan_quarantine_put+0x104/0x240
[  142.584118][T10542]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  142.584133][T10542]  ? lock_acquire+0x1d1/0x380
[  142.584147][T10542]  ? do_raw_write_lock+0x11e/0x260
[  142.584156][T10542]  ? find_held_lock+0x2b/0x80
[  142.584167][T10542]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  142.584182][T10542]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  142.584201][T10542]  kvm_vcpu_ioctl+0x735/0x17b0
[  142.584218][T10542]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  142.584234][T10542]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  142.584252][T10542]  ? do_vfs_ioctl+0x241/0x13f0
[  142.584263][T10542]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  142.584272][T10542]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  142.584285][T10542]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  142.584298][T10542]  ? __fget_files+0x34/0x3d0
[  142.584317][T10542]  ? selinux_file_ioctl+0x1e0/0x290
[  142.584326][T10542]  ? selinux_file_ioctl+0x1e7/0x290
[  142.584337][T10542]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  142.584353][T10542]  __x64_sys_ioctl+0x18e/0x210
[  142.584365][T10542]  do_syscall_64+0x123/0x7b0
[  142.584379][T10542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.584389][T10542] RIP: 0033:0x7f57ceda8f19
[  142.584398][T10542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.584408][T10542] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  142.584418][T10542] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  142.584424][T10542] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000008e
[  142.584430][T10542] RBP: 00007f57cfcef090 R08: 0000000000000000 R09: 0000000000000000
[  142.584436][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.584442][T10542] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  142.584456][T10542]  </TASK>
[  142.690054][  T856] hid_parser_main: 28 callbacks suppressed
[  142.690083][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690100][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690111][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690123][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690134][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690146][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690157][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690173][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690184][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.690195][  T856] logitech-hidpp-device 0003:046D:C082.0007: unknown main item tag 0x0
[  142.693949][  T856] logitech-hidpp-device 0003:046D:C082.0007: hidraw1: USB HID v0.00 Device [syz0] on syz0
[  142.743051][T10545] fido_id[10545]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  142.857125][T10562] FAULT_INJECTION: forcing a failure.
[  142.857125][T10562] name failslab, interval 1, probability 0, space 0, times 0
[  142.857144][T10562] CPU: 3 UID: 0 PID: 10562 Comm: syz.2.1579 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  142.857158][T10562] Tainted: [L]=SOFTLOCKUP
[  142.857162][T10562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  142.857168][T10562] Call Trace:
[  142.857172][T10562]  <TASK>
[  142.857176][T10562]  dump_stack_lvl+0x100/0x190
[  142.857204][T10562]  should_fail_ex.cold+0x5/0xa
[  142.857220][T10562]  should_failslab+0xc2/0x120
[  142.857234][T10562]  __kmalloc_cache_noprof+0x91/0x6d0
[  142.857253][T10562]  ? rcu_is_watching+0x13/0xc0
[  142.857271][T10562]  ? vhost_task_create+0xee/0x370
[  142.857292][T10562]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  142.857318][T10562]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  142.857335][T10562]  vhost_task_create+0xee/0x370
[  142.857348][T10562]  ? __pfx_vhost_task_create+0x10/0x10
[  142.857365][T10562]  ? __pfx_vhost_task_fn+0x10/0x10
[  142.857378][T10562]  ? register_lock_class+0x3f/0x7b0
[  142.857393][T10562]  ? rcu_is_watching+0x13/0xc0
[  142.857404][T10562]  ? trace_contention_end+0x126/0x160
[  142.857422][T10562]  kvm_mmu_post_init_vm+0x1b3/0x360
[  142.857437][T10562]  kvm_arch_vcpu_ioctl_run+0xb5/0x1de0
[  142.857454][T10562]  ? __pfx___mutex_lock+0x10/0x10
[  142.857467][T10562]  ? kasan_quarantine_put+0x104/0x240
[  142.857480][T10562]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  142.857494][T10562]  ? lock_acquire+0x1d1/0x380
[  142.857508][T10562]  ? do_raw_write_lock+0x11e/0x260
[  142.857518][T10562]  ? find_held_lock+0x2b/0x80
[  142.857529][T10562]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  142.857583][T10562]  ? kvm_vcpu_ioctl+0x15c6/0x17b0
[  142.857611][T10562]  kvm_vcpu_ioctl+0x735/0x17b0
[  142.857638][T10562]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  142.857664][T10562]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  142.857689][T10562]  ? do_vfs_ioctl+0x241/0x13f0
[  142.857701][T10562]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  142.857710][T10562]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  142.857724][T10562]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  142.857736][T10562]  ? __fget_files+0x34/0x3d0
[  142.857756][T10562]  ? selinux_file_ioctl+0x1e0/0x290
[  142.857771][T10562]  ? selinux_file_ioctl+0x1e7/0x290
[  142.857782][T10562]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  142.857798][T10562]  __x64_sys_ioctl+0x18e/0x210
[  142.857810][T10562]  do_syscall_64+0x123/0x7b0
[  142.857825][T10562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.857837][T10562] RIP: 0033:0x7f57ceda8f19
[  142.857846][T10562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.857856][T10562] RSP: 002b:00007f57cfcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  142.857867][T10562] RAX: ffffffffffffffda RBX: 00007f57cf025fa0 RCX: 00007f57ceda8f19
[  142.857873][T10562] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  142.857879][T10562] RBP: 00007f57cfcef090 R08: 0000000000000000 R09: 0000000000000000
[  142.857885][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.857891][T10562] R13: 00007f57cf026038 R14: 00007f57cf025fa0 R15: 00007ffdc2e39308
[  142.857905][T10562]  </TASK>
[  143.140521][   T66] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  143.320518][   T66] usb 9-1: Using ep0 maxpacket: 32
[  143.339632][T10589] netlink: 778 bytes leftover after parsing attributes in process `syz.2.1588'.
[  143.340895][   T43] audit: type=1400 audit(2000000000.879:701): avc:  denied  { setopt } for  pid=10588 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  143.378943][T10592] FAULT_INJECTION: forcing a failure.
[  143.378943][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.378970][T10592] CPU: 2 UID: 0 PID: 10592 Comm: syz.4.1582 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  143.378991][T10592] Tainted: [L]=SOFTLOCKUP
[  143.378996][T10592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.379004][T10592] Call Trace:
[  143.379010][T10592]  <TASK>
[  143.379016][T10592]  dump_stack_lvl+0x100/0x190
[  143.379048][T10592]  should_fail_ex.cold+0x5/0xa
[  143.379071][T10592]  strncpy_from_user+0x3b/0x2d0
[  143.379098][T10592]  do_getname+0x78/0x390
[  143.379122][T10592]  user_path_at+0x26/0x60
[  143.379138][T10592]  __x64_sys_mount+0x1fb/0x310
[  143.379159][T10592]  ? __pfx___x64_sys_mount+0x10/0x10
[  143.379186][T10592]  do_syscall_64+0x123/0x7b0
[  143.379205][T10592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.379222][T10592] RIP: 0033:0x7f42d49a8f19
[  143.379233][T10592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.379248][T10592] RSP: 002b:00007f42d5836028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  143.379264][T10592] RAX: ffffffffffffffda RBX: 00007f42d4c26090 RCX: 00007f42d49a8f19
[  143.379273][T10592] RDX: 0000200000000880 RSI: 0000200000000840 RDI: 0000200000000800
[  143.379282][T10592] RBP: 00007f42d4a37f6d R08: 00002000000008c0 R09: 0000000000000000
[  143.379290][T10592] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[  143.379298][T10592] R13: 00007f42d4c26128 R14: 00007f42d4c26090 R15: 00007fff0b1ee9a8
[  143.379318][T10592]  </TASK>
[  143.412440][   T43] audit: type=1400 audit(2000000000.949:702): avc:  denied  { unmount } for  pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  143.442335][   T66] usb 9-1: unable to get BOS descriptor or descriptor too short
[  143.442362][   T66] usb 9-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  143.442952][   T66] usb 9-1: unable to read config index 0 descriptor/start: -71
[  143.442969][   T66] usb 9-1: can't read configurations, error -71
[  143.618707][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'.
[  143.618728][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'.
[  143.813397][T10603] FAULT_INJECTION: forcing a failure.
[  143.813397][T10603] name failslab, interval 1, probability 0, space 0, times 0
[  143.813417][T10603] CPU: 2 UID: 0 PID: 10603 Comm: syz.0.1592 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  143.813431][T10603] Tainted: [L]=SOFTLOCKUP
[  143.813434][T10603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.813440][T10603] Call Trace:
[  143.813444][T10603]  <TASK>
[  143.813449][T10603]  dump_stack_lvl+0x100/0x190
[  143.813469][T10603]  should_fail_ex.cold+0x5/0xa
[  143.813486][T10603]  should_failslab+0xc2/0x120
[  143.813499][T10603]  kmem_cache_alloc_noprof+0x92/0x6a0
[  143.813516][T10603]  ? mas_preallocate+0xc22/0xee0
[  143.813535][T10603]  mas_preallocate+0xc22/0xee0
[  143.813576][T10603]  ? __pfx_mas_preallocate+0x10/0x10
[  143.813592][T10603]  ? mt_find+0x136/0x9b0
[  143.813609][T10603]  ? lock_acquire+0x1d1/0x380
[  143.813624][T10603]  ? avc_has_perm_noaudit+0x56/0x470
[  143.813640][T10603]  vma_link+0x14a/0x8c0
[  143.813655][T10603]  ? __pfx_vma_link+0x10/0x10
[  143.813672][T10603]  ? __pfx_selinux_vm_enough_memory+0x10/0x10
[  143.813685][T10603]  ? mmap_validate_vma_flags+0x1bd/0x240
[  143.813698][T10603]  ? rcu_is_watching+0x13/0xc0
[  143.813709][T10603]  ? percpu_counter_add_batch+0xb9/0x230
[  143.813730][T10603]  insert_vm_struct+0x21a/0xe10
[  143.813747][T10603]  create_init_stack_vma+0x830/0xd60
[  143.813766][T10603]  ? __pfx_create_init_stack_vma+0x10/0x10
[  143.813783][T10603]  ? lock_acquire+0x1d1/0x380
[  143.813797][T10603]  ? do_raw_spin_lock+0x128/0x260
[  143.813807][T10603]  ? alloc_bprm+0x549/0x9d0
[  143.813818][T10603]  ? alloc_bprm+0x549/0x9d0
[  143.813831][T10603]  alloc_bprm+0x576/0x9d0
[  143.813844][T10603]  do_execveat_common.isra.0+0x194/0x580
[  143.813856][T10603]  ? do_getname+0x191/0x390
[  143.813872][T10603]  __x64_sys_execveat+0xdf/0x130
[  143.813885][T10603]  do_syscall_64+0x123/0x7b0
[  143.813899][T10603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.813910][T10603] RIP: 0033:0x7fbc253a8f19
[  143.813919][T10603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.813929][T10603] RSP: 002b:00007fbc26204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  143.813940][T10603] RAX: ffffffffffffffda RBX: 00007fbc25625fa0 RCX: 00007fbc253a8f19
[  143.813946][T10603] RDX: 0000200000000340 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  143.813952][T10603] RBP: 00007fbc26204090 R08: 0000000000000000 R09: 0000000000000000
[  143.813958][T10603] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002
[  143.813964][T10603] R13: 00007fbc25626038 R14: 00007fbc25625fa0 R15: 00007ffe36e70b88
[  143.813978][T10603]  </TASK>
[  143.854258][   T43] audit: type=1400 audit(2000000001.389:703): avc:  denied  { read } for  pid=10604 comm="syz.0.1593" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  143.854551][   T43] audit: type=1400 audit(2000000001.389:704): avc:  denied  { open } for  pid=10604 comm="syz.0.1593" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  143.938262][T10607] FAULT_INJECTION: forcing a failure.
[  143.938262][T10607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.938291][T10607] CPU: 1 UID: 0 PID: 10607 Comm: syz.4.1594 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  143.938313][T10607] Tainted: [L]=SOFTLOCKUP
[  143.938319][T10607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.938329][T10607] Call Trace:
[  143.938335][T10607]  <TASK>
[  143.938342][T10607]  dump_stack_lvl+0x100/0x190
[  143.938372][T10607]  should_fail_ex.cold+0x5/0xa
[  143.938397][T10607]  _copy_to_user+0x32/0xd0
[  143.938420][T10607]  simple_read_from_buffer+0xcb/0x170
[  143.938443][T10607]  proc_fail_nth_read+0x1af/0x230
[  143.938488][T10607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  143.938512][T10607]  ? rw_verify_area+0xce/0x6d0
[  143.938535][T10607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  143.938557][T10607]  vfs_read+0x1e4/0xb30
[  143.938574][T10607]  ? lock_acquire+0x1d1/0x380
[  143.938600][T10607]  ? __fget_files+0x34/0x3d0
[  143.938620][T10607]  ? __pfx_vfs_read+0x10/0x10
[  143.938635][T10607]  ? find_held_lock+0x2b/0x80
[  143.938652][T10607]  ? __fget_files+0x215/0x3d0
[  143.938676][T10607]  ? __fget_files+0x21f/0x3d0
[  143.938702][T10607]  ksys_read+0x12a/0x250
[  143.938719][T10607]  ? __pfx_ksys_read+0x10/0x10
[  143.938743][T10607]  do_syscall_64+0x123/0x7b0
[  143.938766][T10607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.938782][T10607] RIP: 0033:0x7f42d496974e
[  143.938796][T10607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  143.938811][T10607] RSP: 002b:00007f42d5856fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  143.938827][T10607] RAX: ffffffffffffffda RBX: 00007f42d58576c0 RCX: 00007f42d496974e
[  143.938837][T10607] RDX: 000000000000000f RSI: 00007f42d58570a0 RDI: 0000000000000004
[  143.938847][T10607] RBP: 00007f42d5857090 R08: 0000000000000000 R09: 0000000000000000
[  143.938856][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.938865][T10607] R13: 00007f42d4c26038 R14: 00007f42d4c25fa0 R15: 00007fff0b1ee9a8
[  143.938888][T10607]  </TASK>
[  144.019361][T10614] FAULT_INJECTION: forcing a failure.
[  144.019361][T10614] name failslab, interval 1, probability 0, space 0, times 0
[  144.019389][T10614] CPU: 2 UID: 0 PID: 10614 Comm: syz.3.1597 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.019412][T10614] Tainted: [L]=SOFTLOCKUP
[  144.019418][T10614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  144.019429][T10614] Call Trace:
[  144.019435][T10614]  <TASK>
[  144.019442][T10614]  dump_stack_lvl+0x100/0x190
[  144.019476][T10614]  should_fail_ex.cold+0x5/0xa
[  144.019501][T10614]  should_failslab+0xc2/0x120
[  144.019522][T10614]  __kmalloc_cache_node_noprof+0x94/0x710
[  144.019542][T10614]  ? __alloc_workqueue+0x84e/0x1900
[  144.019571][T10614]  __alloc_workqueue+0x84e/0x1900
[  144.019603][T10614]  alloc_workqueue_noprof+0xc7/0x130
[  144.019627][T10614]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  144.019650][T10614]  ? __pfx_dev_set_name+0x10/0x10
[  144.019670][T10614]  ? __kasan_kmalloc+0xaa/0xb0
[  144.019689][T10614]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  144.019722][T10614]  hci_register_dev+0x240/0xcc0
[  144.019747][T10614]  hci_uart_tty_ioctl+0x8fd/0xcb0
[  144.019774][T10614]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[  144.019796][T10614]  tty_ioctl+0x12f4/0x1870
[  144.019816][T10614]  ? __pfx_tty_ioctl+0x10/0x10
[  144.019832][T10614]  ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530
[  144.019853][T10614]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  144.019875][T10614]  ? __fget_files+0x34/0x3d0
[  144.019906][T10614]  ? selinux_file_ioctl+0x1e0/0x290
[  144.019922][T10614]  ? selinux_file_ioctl+0x1e7/0x290
[  144.019940][T10614]  ? __pfx_tty_ioctl+0x10/0x10
[  144.019959][T10614]  __x64_sys_ioctl+0x18e/0x210
[  144.019979][T10614]  do_syscall_64+0x123/0x7b0
[  144.020003][T10614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.020021][T10614] RIP: 0033:0x7f05651a8f19
[  144.020035][T10614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.020051][T10614] RSP: 002b:00007f0566117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.020069][T10614] RAX: ffffffffffffffda RBX: 00007f0565425fa0 RCX: 00007f05651a8f19
[  144.020081][T10614] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000005
[  144.020090][T10614] RBP: 00007f0565237f6d R08: 0000000000000000 R09: 0000000000000000
[  144.020100][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.020109][T10614] R13: 00007f0565426038 R14: 00007f0565425fa0 R15: 00007ffed9113e78
[  144.020133][T10614]  </TASK>
[  144.020589][T10614] Bluetooth: Can't register HCI device
[  144.110585][   T35] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  144.280498][   T35] usb 5-1: Using ep0 maxpacket: 8
[  144.281036][   T35] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  144.281923][   T35] usb 5-1: config 179 has an invalid interface number: 65 bu
** replaying previous printk message **
[  144.281923][   T35] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  144.281937][   T35] usb 5-1: config 179 has no interface number 0
[  144.281955][   T35] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  144.281968][   T35] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  144.281981][   T35] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  144.281994][   T35] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  144.282007][   T35] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  144.282031][   T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.289872][T10605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.294700][    C3] ==================================================================
[  144.294709][    C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[  144.294738][    C3] Read of size 1 at addr ffff88805881c8e8 by task kworker/3:0/35
[  144.294747][    C3] 
[  144.294754][    C3] CPU: 3 UID: 0 PID: 35 Comm: kworker/3:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.294769][    C3] Tainted: [L]=SOFTLOCKUP
[  144.294772][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  144.294779][    C3] Workqueue: usb_hub_wq hub_event
[  144.294814][    C3] Call Trace:
[  144.294818][    C3]  <IRQ>
[  144.294823][    C3]  dump_stack_lvl+0x100/0x190
[  144.294841][    C3]  print_report+0x13d/0x4b0
[  144.294857][    C3]  ? __virt_addr_valid+0x239/0x430
[  144.294871][    C3]  ? find_endpoint+0x2a3/0x2c0
[  144.294885][    C3]  kasan_report+0xdf/0x1c0
[  144.294897][    C3]  ? find_endpoint+0x2a3/0x2c0
[  144.294913][    C3]  find_endpoint+0x2a3/0x2c0
[  144.294928][    C3]  dummy_timer+0x506/0x3840
[  144.294939][    C3]  ? do_raw_spin_lock+0x128/0x260
[  144.294949][    C3]  ? find_held_lock+0x2b/0x80
[  144.294960][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  144.294976][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  144.294993][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  144.295006][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  144.295022][    C3]  ? __pfx_debug_object_deactivate+0x10/0x10
[  144.295039][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  144.295048][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  144.295058][    C3]  ? mark_held_locks+0x40/0x70
[  144.295072][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  144.295084][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  144.295093][    C3]  __hrtimer_run_queues+0x448/0x9a0
[  144.295109][    C3]  hrtimer_run_softirq+0x1ca/0x360
[  144.295123][    C3]  handle_softirqs+0x216/0xa20
[  144.295137][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  144.295149][    C3]  ? _raw_spin_unlock+0x28/0x50
[  144.295159][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  144.295173][    C3]  __irq_exit_rcu+0x178/0x220
[  144.295185][    C3]  irq_exit_rcu+0x9/0x30
[  144.295197][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  144.295209][    C3]  </IRQ>
[  144.295213][    C3]  <TASK>
[  144.295217][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  144.295228][    C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  144.295240][    C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 0c f7 f5 48 89 df e8 3e 63 f7 f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 85 29 e6 f5 65 48 83 3d f4 70 c8 09 00 74 16 5b
[  144.295251][    C3] RSP: 0018:ffffc900006eef18 EFLAGS: 00000246
[  144.295259][    C3] RAX: 0000000000000002 RBX: ffff88802998a108 RCX: 0000000000000040
[  144.295266][    C3] RDX: 0000000000000001 RSI: ffffffff8e628f58 RDI: ffffffff8c835280
[  144.295273][    C3] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000
[  144.295280][    C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000283
[  144.295286][    C3] R13: ffff88802998a028 R14: ffff88802998a108 R15: ffff88802fd3d900
[  144.295297][    C3]  xpad360w_start_input+0x394/0x4b0
[  144.295314][    C3]  xpad_probe+0x178e/0x1f60
[  144.295327][    C3]  usb_probe_interface+0x386/0x980
[  144.295343][    C3]  ? __pfx_usb_probe_interface+0x10/0x10
[  144.295357][    C3]  ? kernfs_put+0x3f/0x60
[  144.295367][    C3]  ? sysfs_create_link+0x68/0xc0
[  144.295382][    C3]  ? __pfx_usb_probe_interface+0x10/0x10
[  144.295396][    C3]  really_probe+0x241/0xa60
[  144.295410][    C3]  __driver_probe_device+0x210/0x460
[  144.295422][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  144.295433][    C3]  driver_probe_device+0x4a/0x140
[  144.295446][    C3]  __device_attach_driver+0x1df/0x320
[  144.295459][    C3]  ? __pfx___device_attach_driver+0x10/0x10
[  144.295472][    C3]  bus_for_each_drv+0x159/0x1e0
[  144.295482][    C3]  ? __pfx_bus_for_each_drv+0x10/0x10
[  144.295492][    C3]  ? lockdep_hardirqs_on+0x7d/0x110
[  144.295504][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  144.295515][    C3]  __device_attach+0x1e4/0x4c0
[  144.295528][    C3]  ? __pfx___device_attach+0x10/0x10
[  144.295540][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  144.295551][    C3]  device_initial_probe+0xaf/0xf0
[  144.295564][    C3]  __bus_probe_device+0x60/0x160
[  144.295575][    C3]  device_add+0x121d/0x1970
[  144.295589][    C3]  ? __pfx_device_add+0x10/0x10
[  144.295604][    C3]  ? mark_held_locks+0x40/0x70
[  144.295617][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  144.295629][    C3]  usb_set_configuration+0xd97/0x1dc0
[  144.295645][    C3]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  144.295657][    C3]  usb_generic_driver_probe+0xa1/0xe0
[  144.295668][    C3]  usb_probe_device+0xef/0x400
[  144.295680][    C3]  ? __pfx_usb_probe_device+0x10/0x10
[  144.295694][    C3]  really_probe+0x241/0xa60
[  144.295706][    C3]  __driver_probe_device+0x210/0x460
[  144.295719][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  144.295730][    C3]  driver_probe_device+0x4a/0x140
[  144.295743][    C3]  __device_attach_driver+0x1df/0x320
[  144.295756][    C3]  ? __pfx___device_attach_driver+0x10/0x10
[  144.295768][    C3]  bus_for_each_drv+0x159/0x1e0
[  144.295778][    C3]  ? __pfx_bus_for_each_drv+0x10/0x10
[  144.295788][    C3]  ? lockdep_hardirqs_on+0x7d/0x110
[  144.295800][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  144.295814][    C3]  __device_attach+0x1e4/0x4c0
[  144.295827][    C3]  ? __pfx___device_attach+0x10/0x10
[  144.295839][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  144.295850][    C3]  device_initial_probe+0xaf/0xf0
[  144.295863][    C3]  __bus_probe_device+0x60/0x160
[  144.295874][    C3]  device_add+0x121d/0x1970
[  144.295888][    C3]  ? __pfx_device_add+0x10/0x10
[  144.295901][    C3]  ? usb_detect_static_quirks+0x335/0x3e0
[  144.295915][    C3]  usb_new_device.part.0+0xcc2/0x1686
[  144.295928][    C3]  ? do_raw_spin_lock+0x128/0x260
[  144.295937][    C3]  ? __pfx_usb_new_device.part.0+0x10/0x10
[  144.295948][    C3]  ? mark_held_locks+0x40/0x70
[  144.295962][    C3]  hub_event.cold+0x1e3/0xe90
[  144.295978][    C3]  ? __pfx_hub_event+0x10/0x10
[  144.295990][    C3]  ? lockdep_unregister_key+0x190/0x2a0
[  144.296004][    C3]  ? lock_acquire+0x1d1/0x380
[  144.296017][    C3]  ? process_one_work+0xa2c/0x1b10
[  144.296029][    C3]  ? process_one_work+0x906/0x1b10
[  144.296040][    C3]  ? process_one_work+0x906/0x1b10
[  144.296052][    C3]  process_one_work+0xac7/0x1b10
[  144.296065][    C3]  ? __pfx_process_one_work+0x10/0x10
[  144.296077][    C3]  ? lock_acquire+0x1d1/0x380
[  144.296093][    C3]  ? __pfx_hub_event+0x10/0x10
[  144.296112][    C3]  worker_thread+0x5ef/0xe50
[  144.296131][    C3]  ? kthread+0x13a/0x450
[  144.296144][    C3]  ? __pfx_worker_thread+0x10/0x10
[  144.296161][    C3]  kthread+0x373/0x450
[  144.296178][    C3]  ? __pfx_kthread+0x10/0x10
[  144.296196][    C3]  ret_from_fork+0x730/0xd60
[  144.296220][    C3]  ? __pfx_ret_from_fork+0x10/0x10
[  144.296234][    C3]  ? __switch_to+0x800/0x10e0
[  144.296243][    C3]  ? __pfx_kthread+0x10/0x10
[  144.296253][    C3]  ret_from_fork_asm+0x1a/0x30
[  144.296269][    C3]  </TASK>
[  144.296273][    C3] 
[  144.296275][    C3] Allocated by task 10484:
[  144.296280][    C3]  kasan_save_stack+0x30/0x50
[  144.296291][    C3]  kasan_save_track+0x14/0x30
[  144.296316][    C3]  __kasan_kmalloc+0xaa/0xb0
[  144.296329][    C3]  __kmalloc_noprof+0x32f/0x840
[  144.296342][    C3]  security_inode_init_security+0x113/0x370
[  144.296361][    C3]  shmem_symlink+0x163/0xbf0
[  144.296379][    C3]  vfs_symlink+0x17b/0x520
[  144.296394][    C3]  filename_symlinkat+0x2a6/0x5a0
[  144.296417][    C3]  __x64_sys_symlinkat+0x9c/0xe0
[  144.296439][    C3]  do_syscall_64+0x123/0x7b0
[  144.296459][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.296476][    C3] 
[  144.296481][    C3] Freed by task 10484:
[  144.296489][    C3]  kasan_save_stack+0x30/0x50
[  144.296505][    C3]  kasan_save_track+0x14/0x30
[  144.296522][    C3]  kasan_save_free_info+0x3b/0x70
[  144.296545][    C3]  __kasan_slab_free+0x5f/0x80
[  144.296562][    C3]  kfree+0x22b/0x6d0
[  144.296582][    C3]  security_inode_init_security+0x2bf/0x370
[  144.296602][    C3]  shmem_symlink+0x163/0xbf0
[  144.296618][    C3]  vfs_symlink+0x17b/0x520
[  144.296632][    C3]  filename_symlinkat+0x2a6/0x5a0
[  144.296654][    C3]  __x64_sys_symlinkat+0x9c/0xe0
[  144.296675][    C3]  do_syscall_64+0x123/0x7b0
[  144.296693][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.296710][    C3] 
[  144.296714][    C3] The buggy address belongs to the object at ffff88805881c800
[  144.296714][    C3]  which belongs to the cache kmalloc-512 of size 512
[  144.296729][    C3] The buggy address is located 232 bytes inside of
[  144.296729][    C3]  freed 512-byte region [ffff88805881c800, ffff88805881ca00)
[  144.296746][    C3] 
[  144.296750][    C3] The buggy address belongs to the physical page:
[  144.296758][    C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5881c
[  144.296775][    C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  144.296789][    C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  144.296810][    C3] page_type: f5(slab)
[  144.296826][    C3] raw: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122
[  144.296843][    C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  144.296858][    C3] head: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122
[  144.296874][    C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  144.296891][    C3] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  144.296906][    C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  144.296916][    C3] page dumped because: kasan: bad access detected
[  144.296924][    C3] page_owner tracks the page as allocated
[  144.296930][    C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6423, tgid 6421 (syz.2.129), ts 56905318081
[  144.296958][    C3]  post_alloc_hook+0xfd/0x120
[  144.296978][    C3]  get_page_from_freelist+0xdae/0x2c80
[  144.297001][    C3]  __alloc_frozen_pages_noprof+0x2ad/0x31e0
[  144.297024][    C3]  new_slab+0xb1/0x6d0
[  144.297045][    C3]  refill_objects+0xe3/0x410
[  144.297067][    C3]  __pcs_replace_empty_main+0x35e/0x650
[  144.297087][    C3]  __kmalloc_cache_noprof+0x4ef/0x6d0
[  144.297109][    C3]  snd_mixer_oss_build_test+0x7a/0x380
[  144.297151][    C3]  snd_mixer_oss_build_test_all+0x2b4/0x6e0
[  144.297176][    C3]  snd_mixer_oss_build_input+0x139/0xd50
[  144.297191][    C3]  snd_mixer_oss_notify_handler+0x4e5/0xa10
[  144.297207][    C3]  snd_card_register+0x2bd/0x780
[  144.297227][    C3]  f_midi2_bind+0x1198/0x2770
[  144.297247][    C3]  usb_add_function+0x219/0x890
[  144.297269][    C3]  configfs_composite_bind+0xd83/0x1960
[  144.297293][    C3]  gadget_bind_driver+0x28c/0xbf0
[  144.297310][    C3] page last free pid 5782 tgid 5782 ts 56657486186 stack trace:
[  144.297322][    C3]  __free_frozen_pages+0x7b1/0x10f0
[  144.297342][    C3]  qlist_free_all+0x47/0xf0
[  144.297358][    C3]  kasan_quarantine_reduce+0x1a0/0x1f0
[  144.297374][    C3]  __kasan_slab_alloc+0x69/0x90
[  144.297391][    C3]  kmem_cache_alloc_noprof+0x269/0x6a0
[  144.297416][    C3]  do_getname+0x35/0x390
[  144.297439][    C3]  __x64_sys_rename+0x57/0xb0
[  144.297462][    C3]  do_syscall_64+0x123/0x7b0
[  144.297480][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.297497][    C3] 
[  144.297501][    C3] Memory state around the buggy address:
[  144.297510][    C3]  ffff88805881c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  144.297523][    C3]  ffff88805881c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.297535][    C3] >ffff88805881c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.297543][    C3]                                                           ^
[  144.297574][    C3]  ffff88805881c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.297587][    C3]  ffff88805881c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.297596][    C3] ==================================================================
[  144.297606][    C3] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  144.686581][    C3] CPU: 3 UID: 0 PID: 35 Comm: kworker/3:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  144.690017][    C3] Tainted: [L]=SOFTLOCKUP
[  144.691413][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  144.694581][    C3] Workqueue: usb_hub_wq hub_event
[  144.696173][    C3] Call Trace:
[  144.697232][    C3]  <IRQ>
[  144.698184][    C3]  dump_stack_lvl+0x100/0x190
[  144.699688][    C3]  vpanic+0x2dc/0x6f8
[  144.700956][    C3]  panic+0xd1/0xe0
[  144.702158][    C3]  ? __pfx_panic+0x10/0x10
[  144.703570][    C3]  ? end_report.part.0+0x23/0x90
[  144.705138][    C3]  ? rcu_is_watching+0x13/0xc0
[  144.706674][    C3]  ? end_report.part.0+0x23/0x90
[  144.708230][    C3]  check_panic_on_warn.cold+0x19/0x34
[  144.709929][    C3]  end_report.part.0+0x3a/0x90
[  144.711434][    C3]  kasan_report.cold+0xe/0x18
[  144.712898][    C3]  ? find_endpoint+0x2a3/0x2c0
[  144.714501][    C3]  find_endpoint+0x2a3/0x2c0
[  144.715968][    C3]  dummy_timer+0x506/0x3840
[  144.717576][    C3]  ? do_raw_spin_lock+0x128/0x260
[  144.719271][    C3]  ? find_held_lock+0x2b/0x80
[  144.720770][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  144.722567][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  144.724330][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  144.726169][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  144.727933][    C3]  ? __pfx_debug_object_deactivate+0x10/0x10
[  144.729832][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  144.731387][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  144.732961][    C3]  ? mark_held_locks+0x40/0x70
[  144.734482][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  144.736303][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  144.737879][    C3]  __hrtimer_run_queues+0x448/0x9a0
[  144.739514][    C3]  hrtimer_run_softirq+0x1ca/0x360
[  144.741120][    C3]  handle_softirqs+0x216/0xa20
[  144.742643][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  144.744305][    C3]  ? _raw_spin_unlock+0x28/0x50
[  144.745845][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  144.747596][    C3]  __irq_exit_rcu+0x178/0x220
[  144.749083][    C3]  irq_exit_rcu+0x9/0x30
[  144.750422][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  144.752196][    C3]  </IRQ>
[  144.753136][    C3]  <TASK>
[  144.754090][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  144.755904][    C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  144.757877][    C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 0c f7 f5 48 89 df e8 3e 63 f7 f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 85 29 e6 f5 65 48 83 3d f4 70 c8 09 00 74 16 5b
[  144.763834][    C3] RSP: 0018:ffffc900006eef18 EFLAGS: 00000246
[  144.765745][    C3] RAX: 0000000000000002 RBX: ffff88802998a108 RCX: 0000000000000040
[  144.768202][    C3] RDX: 0000000000000001 RSI: ffffffff8e628f58 RDI: ffffffff8c835280
[  144.770711][    C3] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000
[  144.773188][    C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000283
[  144.775659][    C3] R13: ffff88802998a028 R14: ffff88802998a108 R15: ffff88802fd3d900
[  144.778096][    C3]  xpad360w_start_input+0x394/0x4b0
[  144.779735][    C3]  xpad_probe+0x178e/0x1f60
[  144.781169][    C3]  usb_probe_interface+0x386/0x980
[  144.782821][    C3]  ? __pfx_usb_probe_interface+0x10/0x10
[  144.784581][    C3]  ? kernfs_put+0x3f/0x60
[  144.785970][    C3]  ? sysfs_create_link+0x68/0xc0
[  144.787528][    C3]  ? __pfx_usb_probe_interface+0x10/0x10
[  144.789311][    C3]  really_probe+0x241/0xa60
[  144.790752][    C3]  __driver_probe_device+0x210/0x460
[  144.792443][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  144.794289][    C3]  driver_probe_device+0x4a/0x140
[  144.795870][    C3]  __device_attach_driver+0x1df/0x320
[  144.797562][    C3]  ? __pfx___device_attach_driver+0x10/0x10
[  144.799408][    C3]  bus_for_each_drv+0x159/0x1e0
[  144.800949][    C3]  ? __pfx_bus_for_each_drv+0x10/0x10
[  144.802636][    C3]  ? lockdep_hardirqs_on+0x7d/0x110
[  144.804256][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  144.806081][    C3]  __device_attach+0x1e4/0x4c0
[  144.807578][    C3]  ? __pfx___device_attach+0x10/0x10
[  144.809268][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  144.811026][    C3]  device_initial_probe+0xaf/0xf0
[  144.812830][    C3]  __bus_probe_device+0x60/0x160
[  144.814413][    C3]  device_add+0x121d/0x1970
[  144.815852][    C3]  ? __pfx_device_add+0x10/0x10
[  144.817384][    C3]  ? mark_held_locks+0x40/0x70
[  144.818922][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  144.820750][    C3]  usb_set_configuration+0xd97/0x1dc0
[  144.822486][    C3]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  144.824385][    C3]  usb_generic_driver_probe+0xa1/0xe0
[  144.826083][    C3]  usb_probe_device+0xef/0x400
[  144.827590][    C3]  ? __pfx_usb_probe_device+0x10/0x10
[  144.829296][    C3]  really_probe+0x241/0xa60
[  144.830734][    C3]  __driver_probe_device+0x210/0x460
[  144.832395][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  144.834231][    C3]  driver_probe_device+0x4a/0x140
[  144.835827][    C3]  __device_attach_driver+0x1df/0x320
[  144.837509][    C3]  ? __pfx___device_attach_driver+0x10/0x10
[  144.839380][    C3]  bus_for_each_drv+0x159/0x1e0
[  144.840913][    C3]  ? __pfx_bus_for_each_drv+0x10/0x10
[  144.842626][    C3]  ? lockdep_hardirqs_on+0x7d/0x110
[  144.844253][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  144.846080][    C3]  __device_attach+0x1e4/0x4c0
[  144.847611][    C3]  ? __pfx___device_attach+0x10/0x10
[  144.849286][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  144.850932][    C3]  device_initial_probe+0xaf/0xf0
[  144.852520][    C3]  __bus_probe_device+0x60/0x160
[  144.854100][    C3]  device_add+0x121d/0x1970
[  144.855540][    C3]  ? __pfx_device_add+0x10/0x10
[  144.857079][    C3]  ? usb_detect_static_quirks+0x335/0x3e0
[  144.858870][    C3]  usb_new_device.part.0+0xcc2/0x1686
[  144.860552][    C3]  ? do_raw_spin_lock+0x128/0x260
[  144.862142][    C3]  ? __pfx_usb_new_device.part.0+0x10/0x10
[  144.863967][    C3]  ? mark_held_locks+0x40/0x70
[  144.865478][    C3]  hub_event.cold+0x1e3/0xe90
[  144.866973][    C3]  ? __pfx_hub_event+0x10/0x10
[  144.868481][    C3]  ? lockdep_unregister_key+0x190/0x2a0
[  144.870237][    C3]  ? lock_acquire+0x1d1/0x380
[  144.871733][    C3]  ? process_one_work+0xa2c/0x1b10
[  144.873346][    C3]  ? process_one_work+0x906/0x1b10
[  144.874958][    C3]  ? process_one_work+0x906/0x1b10
[  144.876515][    C3]  process_one_work+0xac7/0x1b10
[  144.878080][    C3]  ? __pfx_process_one_work+0x10/0x10
[  144.879761][    C3]  ? lock_acquire+0x1d1/0x380
[  144.881244][    C3]  ? __pfx_hub_event+0x10/0x10
[  144.882774][    C3]  worker_thread+0x5ef/0xe50
[  144.884237][    C3]  ? kthread+0x13a/0x450
[  144.885580][    C3]  ? __pfx_worker_thread+0x10/0x10
[  144.887185][    C3]  kthread+0x373/0x450
[  144.888478][    C3]  ? __pfx_kthread+0x10/0x10
[  144.889974][    C3]  ret_from_fork+0x730/0xd60
[  144.891447][    C3]  ? __pfx_ret_from_fork+0x10/0x10
[  144.893087][    C3]  ? __switch_to+0x800/0x10e0
[  144.894583][    C3]  ? __pfx_kthread+0x10/0x10
[  144.896049][    C3]  ret_from_fork_asm+0x1a/0x30
[  144.897569][    C3]  </TASK>
[  145.972207][    C3] Shutting down cpus with NMI
[  145.974364][    C3] Kernel Offset: disabled
[  145.975722][    C3] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:52:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000174ef1 RBX=ffffffff8fc91540 RCX=ffffffff8bef6375 RDX=0000000000000001
RSI=ffffffff8e628f58 RDI=ffffffff8c835280 RBP=fffffbfff1f922a8 RSP=ffffffff8fc07cf0
R8 =0000000000000001 R9 =ffffed100d406825 R10=ffff88806a03412b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000
RIP=ffffffff8bef480f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4473000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffe1974eb94 CR3=000000002fe3f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000003d 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 347a79732f74656e 2f70756f7267637a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0b1eebb0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0b1eee10 00007fff0b1eee10
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0b1eee10
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42d4a385e4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42d4a3873f
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42d4a385d6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801eb12580
RSI=ffffffff81ec6c77 RDI=0000000000000001 RBP=ffffc900007cfda8 RSP=ffffc900007cfa38
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=0000000020627375
R12=0000000000000000 R13=1ffff920000f9f52 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff820e8100 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4573000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f42d4c27dac CR3=000000002ea5b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000008199b000 Opmask01=000000000000003f Opmask02=000000003327ffbf Opmask03=0000000080000000
Opmask04=00000000fffbffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b951813dd0 000055b951813dd0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9515be9c0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9515be9c0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94421f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000ff0000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737352 737326ca22734212
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17005c1217005c18 101c1f115c434943
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b900003078 0000630000312e74 65676461672d7761 723d524556495244
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558400000d45 00005e00000c1349 585a595c5a104a5c 4f00524556495244
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000077359401 00000000063a80bc 000000006af37566 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 475645447771dd54 564544003b7ec9e9 564544002fb73a2b 564544004d554e51
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f55777f7ffffd 7f7f5f4f7fffefff 7e4d7f7f7fffff7f 775745447dddef5f
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b951810ff0 000055b9517f9430 000055b9517f88a0 000055b9517fdc80
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888026edcb00
RSI=ffffffff8201a4ee RDI=0000000000000005 RBP=ffff88806a1447e0 RSP=ffffc9000585f510
R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000
R12=ffffed1004ddbc13 R13=0000000000000003 R14=ffffed100d4288fd R15=0000000000000001
RIP=ffffffff8201a4f0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 000055558d14c500 ffffffff 00c00000
GS =0000 ffff8880d4673000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f57cfb556c8 CR3=0000000051d44000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc2e39510
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc2e39770 00007ffdc2e39770
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc2e39770
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57cee385e4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57cee3873f
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57cee385d6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85c35315 RDI=ffffffff9cf54f80 RBP=ffffffff9cf54f40 RSP=ffffc90000708438
R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=20666f2064616552
R12=0000000000000000 R13=000000000000005b R14=0000000000000000 R15=ffffc90000708750
RIP=ffffffff85c3533f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d4773000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f57ceff9078 CR3=0000000050108000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe36e70d90
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe36e70ff0 00007ffe36e70ff0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe36e70ff0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc254385e4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc2543873f
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc254385d6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000