last executing test programs:

1m11.692762238s ago: executing program 0 (id=667):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x1000}, @flat=@weak_handle={0x77682a85, 0xb, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1m11.692490287s ago: executing program 0 (id=668):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x4, &(0x7f0000000040)=[{0x5, 0x10, 0xfc, 0x40}, {0x1, 0x10, 0x2a, 0x2}, {0x5, 0x6, 0x79, 0x5}, {0x3, 0x12, 0x4, 0x7}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, <r2=>r0})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')

1m11.632981016s ago: executing program 0 (id=669):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x2, 0x1, 0x200000, 0x0, 0x1, 0x0, {0x4003, 0x200000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, 0x0, 0x0, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x21042, 0x136)
write$FUSE_BMAP(r2, &(0x7f0000000200)={0x18, 0x0, r1}, 0x18)

1m11.632540179s ago: executing program 0 (id=670):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
lseek(r0, 0x10000000005, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000040))
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
syz_emit_ethernet(0xee, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @random="a547ae413200", @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "21bd", "19f160", 0x88e7, "84f1790a47e5ccafe73e953a82d14268f96ad297f8f4feb797f22c74aa59388eb8fb48f05f4ce00af84c915495a8b110b1b513f21b723415b41fcba417f862246a13027a09c3b243fe9353ce7498d6d508d8da03696f21bf7cf4d5fe81bcc0efbc19c32b0023c65033134eac6fcc7d4509ffe7fc66caa2cadabe9a416a2414d48aea35c78b5f2050fec539eeff9e0ffd4e62c42e1342df1347b9fea921cd5439306f3bfe9b7b25e73513584c483e126eeab9307a2299647f8b168f2e56e3ecb05a94554a2a12282f00a7aa877d389f08ed95e17b9535ed"}}}}}, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x28, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r1, @ANYRES8=r1], 0x28}}, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
ftruncate(r3, 0x3)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
ftruncate(r8, 0x9)
fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x7})

1m11.270051392s ago: executing program 0 (id=676):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
recvmmsg(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x60000100, 0x0)

1m10.713100515s ago: executing program 0 (id=681):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES64=r4, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
listen(r3, 0x7)

1m10.668094539s ago: executing program 32 (id=681):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES64=r4, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
listen(r3, 0x7)

5.225242645s ago: executing program 4 (id=1161):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x482a00, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x4000080)
close(0xffffffffffffffff)
r1 = socket(0x28, 0x801, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffd, @loopback}}, 0x1e)
connect$pptp(r3, &(0x7f0000000200)={0x18, 0x2, {0x2, @multicast2}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121b43, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000640000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x45, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a33, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)="cb3050", 0x3}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0)
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000001e"])
getsockname$packet(r1, 0x0, &(0x7f00000004c0))
recvmsg(r0, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r6, 0x1, 0x7, 0x0, &(0x7f0000000980))

5.020553896s ago: executing program 3 (id=1163):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x1, [{0xffffffff, 0xfff}]}})
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_emit_ethernet(0x8a, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x8, "0803000000d1"}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @md5sig={0x13, 0x12, "0d678fadf674cece5030bacbe9ffdd8e"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0)
mkdir(&(0x7f0000000600)='./file0\x00', 0x46)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)

4.337401194s ago: executing program 4 (id=1165):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd01220500090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0xbd, 0x0, &(0x7f00000000c0)={0x9, "044e5b012eb4aa053e4717e0de98f4bcbf75b8c600"}})

4.202138273s ago: executing program 3 (id=1168):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) (async)
r1 = fanotify_init(0x1, 0x101801) (async)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
pipe(0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094)
syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="2b6370752091338f59ef478ddf1c3c4ae539742646a9eac01506789c644f7d8084c8fda8fdf86110ddfccee05cb3d2c92fedc8c1d6b75bd93ecdf6fa06d1a4dafcd391110943f4dea6db3d36c7a8ba24ae756c7389984a613bd9cee65f328083e9b2dcc0a5c9c929033019128c6ba1b7152d91e0c6b3950e73e001bda40e5928cd194147b9e44410a301e2d4d4ce492933b91751475b2668b9c7"], 0x5)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) (async)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x400017e)
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async, rerun: 64)
r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (rerun: 64)
ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) (async, rerun: 32)
r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32)
ioctl$TCFLSH(r10, 0x540b, 0x2)
fremovexattr(r2, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00') (async)
acct(&(0x7f0000000000)='./file0\x00') (async, rerun: 32)
getpeername$netrom(r3, &(0x7f0000000200)={{0x3, @rose}, [@null, @netrom, @remote, @bcast, @netrom, @rose, @bcast]}, &(0x7f00000000c0)=0x48) (rerun: 32)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.052564678s ago: executing program 3 (id=1169):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"/3489], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000000)=ANY=[@ANYBLOB='siz'])
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701feffffff00000020017c000004"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.892620325s ago: executing program 3 (id=1170):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x4000080)
close(0xffffffffffffffff)
recvmsg(r0, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x20, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x6eac}}}}}}, 0x0)

3.232651872s ago: executing program 1 (id=1176):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000000)=ANY=[@ANYBLOB='siz'])
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300)

3.121541114s ago: executing program 1 (id=1178):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r2], 0x50}, 0x4, 0x700000000000000, 0x0, 0x40}, 0x0)

3.119007029s ago: executing program 1 (id=1179):
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x7, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{<r1=>0x0, 0x0, 0x6, 0x9, 0x8, 0x8001, 0xffffffffffffff01, 0x4, 0xf9, 0x7, 0xe, 0x50, 0x7fff, 0x800, 0xd}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{r1, 0xb, 0x6, 0xffff, 0x2, 0x9, 0x0, 0xffffffd6, 0x1, 0x0, 0x5, 0x7, 0x8, 0x6, 0x5}, 0x18, [0x0, 0x0, 0x0]}) (async)
r2 = syz_open_dev$video(0x0, 0x10001, 0x20400) (async, rerun: 32)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x1101, 0x4980) (rerun: 32)
read$snddsp(r3, &(0x7f0000000180)=""/115, 0x73) (async, rerun: 32)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001240), 0x480000, 0x0) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x18, 0x140e, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xd982df87125b9ea0}, 0xc014)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x80000012})
ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000080)={0x8, 0xe, 0x100, 0x9, 0x1}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r6, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r6, 0x0, &(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x9}) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000001380)={0x7fffffff, 0x6, 0x78, 0xfffffffc, '\x00', '\x00', '\x00', 0x1, 0x6, 0xf7fffffe, 0x80000001, "b6855a32474ffa64f77a9dcf29c94337"})

3.032655453s ago: executing program 3 (id=1180):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000280)="94", 0x1)

3.03241339s ago: executing program 1 (id=1181):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x181800, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0xfff1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
splice(r1, 0x0, r4, &(0x7f00000002c0)=0xe, 0xffff, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(r5, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[{0x10, 0x115}], 0x10}}], 0x1, 0x20000040)
ftruncate(r0, 0x3)

2.692537947s ago: executing program 1 (id=1184):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.172470176s ago: executing program 4 (id=1199):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1.172249222s ago: executing program 2 (id=1200):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c63616368653d6c6f6f7365"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x003X', 0x18, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4000884)
sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a090500ff33e6a2bb0000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44)
sendmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="4166deb08f5490e60cbd5dc80404c8a1d8b1dcefa938cbb0a2ca79523b6cc1574a6c7282edd54fa942633e7cf2fddaf1b19a9bd2aded624ffe3ed905bd5bc2ef28c3c689bdc609239748afb03e5201f0edcb4e0edfc9f07805d021a76bd013330c33937875ea24a4e7b7c9150afbfb67c43037a0f32d72c4b8b6a70cd359878738", 0x81}], 0x1}}], 0x1, 0x0)
r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffe, 0x280}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffc, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000006c0)={0xb, 0x1, 0x2, 0x0, 0xf})
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x1, 0x2, 0x0, 0x5})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_setup(0x5c, &(0x7f0000000040)=<r6=>0x0)
r7 = eventfd2(0x9, 0x80000)
io_cancel(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x2, r1, &(0x7f0000000700)="6ceef961f25db3997feb62c10cb2fcd4c0b1a042ed8a28a0acd452e460627755762272f1e30b91a81a637c51cf4c001b3a7100b31b9538d5f1566598690730a40594c0a2cd3beda72684dcbcd638b66f11d8e1ec5f316aed9cea3b23c592ccafe54aa7a9fde9110ba6b7c3de1637b40453d23cc6aa0e0482a2751f1d3a5d3f4738ee8e9845687f8f0fbdb2b6b40cc4d8c347853f9c1db40bcac64b540551ae69b87fb2935f616340200eacc7256549783ded03f897d7a7af0380be13af646381790e89f13affa35f6039dcfca5f1c0eca1a2d557d0", 0xd5, 0x7fc, 0x0, 0x1, r7}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r2, 0x47bc, 0x0, 0x4000000000000000, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x59, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00290000100003040200000000000000000004", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c0002800500160000000000000016000000000005002a0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

1.047949004s ago: executing program 2 (id=1201):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.047632647s ago: executing program 2 (id=1202):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x40004)

1.04725424s ago: executing program 4 (id=1203):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0xfffffff7, 0x20, [0x3, 0x3, 0x4, 0x0, 0x1, 0x7, 0x1800, 0x2]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000003c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae03, 0xa3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x7ffd, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x9, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x7, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x3, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xe9, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r10, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14)
statx(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x400, 0x4, &(0x7f0000000040))

1.047017891s ago: executing program 2 (id=1204):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000000)=ANY=[@ANYBLOB='siz'])
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000)

862.710091ms ago: executing program 4 (id=1205):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x4000080)
close(0xffffffffffffffff)
recvmsg(r0, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x3f, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x6eac}}}}}}, 0x0)

772.10182ms ago: executing program 2 (id=1206):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x2, 0x0, 0x5, 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) (async)
setsockopt$inet6_int(r2, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket(0x8, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r7, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delnexthop={0x15, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}, {0x0, 0x1, 0x2}, {}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010700000c0000000000160000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x851}, 0x40004) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010700000c0000000000160000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x851}, 0x40004)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
r12 = socket(0x10, 0x80002, 0x0)
r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r14 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r14, &(0x7f000000fc40)=[{{&(0x7f0000006480)={0xa, 0x4e20, 0x1, @mcast1, 0x3}, 0x1c, &(0x7f0000007840)=[{&(0x7f00000064c0)="b4e3565cf01761e391212459ae86f8fe58e3c210721ed2c51bfecf9d25f95a7d8cfc0a923b8b7d557fa7d8a5b1991d586c", 0x31}, {&(0x7f0000006500)="70534e8b7c0496564cf15565d70da49bfffd5e1fdd65af37169135e5ceb5f778e03524fb1ed961f29ad3a35483e3c5c631e00a1db7d1a1463855787f2453d36bc911122e8ad2e9df6ae146893f0c322898c7b0babb6fffe63304fea35255f983ee24dbfc5be35c3141af61f95ebc5e7d816d9fac8e9788506c5e381de232c44906e792960550cb50ef2ec732e3310c14cf7ffc88f72ade8d912ed22ba06c73cc6ce1ac47ec38339a34a696f740e98383b8118dfdda9948abd7f0b8f2d16d", 0xbe}, {&(0x7f00000065c0)="3b1e142f24f1f96f55069cec51a5c485e18e2187c87afa05591868d45f5fc0927fe8dc2dfd8147d968c3cee79d3a4ca7b570a78f1c4ac464eb91a8705059267513df194caf419e1d64f64a32062754818a8cdbb0140af7d8de5f4d16", 0x5c}, {&(0x7f0000006640)="e9dcfbef53aca353b64da9308c54b30357fa75861ee32c09721504e0855ca2deae52ff04b7c178d1d594bcb300dbab8c89e99b1ac8e3933d73dd19cc5c6591eee470284d0d06b0758f276b3d5387e8529874eba4826cfa83361f58c9d67bcc1efd46184d37198ae1926ee862cc2b74ab6d8d6786170a", 0x76}, {&(0x7f00000066c0)="60cc074efa716759c9e1e3dd99dec59722e6ead07d39d82d43af2888c170e9eae85472781bfc07c5d19c75e6242722925ecbea2353c72322898ee1befbc42ad9eefa27ba3e02548b2d94ae0bf0a18003764842c5cd74af64dbf08fd39f87a6cd3a829241128bd56553f49053d8a1cfc42c4ff6c4c46480a108aad8a1577102f0f7b02e30fa5dd7f4aa5b6663a820a9dafe1014316c1bb18d4bbf8d11770652d9ae4b02144e6525222ac09085ed805202cd9291dd90efde692ca77eac8f67296af2ed29e1e2991bdfd875181f5e3adf2fc842f1d9010191ec438f05b2bd3ec7", 0xdf}, {&(0x7f00000067c0)="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", 0x29d}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="380000000000000029000000040000008904000000000000091e0d74b15a74ac317d8dff49ae2356dd8b1d212e0a7ead2fa7e6f8657244511800000000000000290000003700000000000000000000001400000000000000290000003e0000000100000000000000180000000000000029000000370000003300000000000000b14e7bc28e5ccb42e873f6c8be54135dcba309cf290e71bcdf6c895f2f70e987878d1d0d4ee357c29ce87f0f1104a02d5f6a71cb411d"], 0x80}}], 0x1, 0x0) (async)
sendmmsg$inet6(r14, &(0x7f000000fc40)=[{{&(0x7f0000006480)={0xa, 0x4e20, 0x1, @mcast1, 0x3}, 0x1c, &(0x7f0000007840)=[{&(0x7f00000064c0)="b4e3565cf01761e391212459ae86f8fe58e3c210721ed2c51bfecf9d25f95a7d8cfc0a923b8b7d557fa7d8a5b1991d586c", 0x31}, {&(0x7f0000006500)="70534e8b7c0496564cf15565d70da49bfffd5e1fdd65af37169135e5ceb5f778e03524fb1ed961f29ad3a35483e3c5c631e00a1db7d1a1463855787f2453d36bc911122e8ad2e9df6ae146893f0c322898c7b0babb6fffe63304fea35255f983ee24dbfc5be35c3141af61f95ebc5e7d816d9fac8e9788506c5e381de232c44906e792960550cb50ef2ec732e3310c14cf7ffc88f72ade8d912ed22ba06c73cc6ce1ac47ec38339a34a696f740e98383b8118dfdda9948abd7f0b8f2d16d", 0xbe}, {&(0x7f00000065c0)="3b1e142f24f1f96f55069cec51a5c485e18e2187c87afa05591868d45f5fc0927fe8dc2dfd8147d968c3cee79d3a4ca7b570a78f1c4ac464eb91a8705059267513df194caf419e1d64f64a32062754818a8cdbb0140af7d8de5f4d16", 0x5c}, {&(0x7f0000006640)="e9dcfbef53aca353b64da9308c54b30357fa75861ee32c09721504e0855ca2deae52ff04b7c178d1d594bcb300dbab8c89e99b1ac8e3933d73dd19cc5c6591eee470284d0d06b0758f276b3d5387e8529874eba4826cfa83361f58c9d67bcc1efd46184d37198ae1926ee862cc2b74ab6d8d6786170a", 0x76}, {&(0x7f00000066c0)="60cc074efa716759c9e1e3dd99dec59722e6ead07d39d82d43af2888c170e9eae85472781bfc07c5d19c75e6242722925ecbea2353c72322898ee1befbc42ad9eefa27ba3e02548b2d94ae0bf0a18003764842c5cd74af64dbf08fd39f87a6cd3a829241128bd56553f49053d8a1cfc42c4ff6c4c46480a108aad8a1577102f0f7b02e30fa5dd7f4aa5b6663a820a9dafe1014316c1bb18d4bbf8d11770652d9ae4b02144e6525222ac09085ed805202cd9291dd90efde692ca77eac8f67296af2ed29e1e2991bdfd875181f5e3adf2fc842f1d9010191ec438f05b2bd3ec7", 0xdf}, {&(0x7f00000067c0)="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", 0x29d}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="380000000000000029000000040000008904000000000000091e0d74b15a74ac317d8dff49ae2356dd8b1d212e0a7ead2fa7e6f8657244511800000000000000290000003700000000000000000000001400000000000000290000003e0000000100000000000000180000000000000029000000370000003300000000000000b14e7bc28e5ccb42e873f6c8be54135dcba309cf290e71bcdf6c895f2f70e987878d1d0d4ee357c29ce87f0f1104a02d5f6a71cb411d"], 0x80}}], 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) (async)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410)
socket$inet6(0xa, 0x4, 0x9)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
r15 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r15, 0x84, 0x8, &(0x7f0000000380)=0x10001, 0x4) (async)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r15, 0x84, 0x8, &(0x7f0000000380)=0x10001, 0x4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x4853, 0x24}, 0x90)

429.466114ms ago: executing program 2 (id=1207):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd01220500090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0xbd, 0x0, &(0x7f00000000c0)={0x9, "044e5b012eb4aa053e4717e0de98f4bcbf75b8c600"}})

171.478816ms ago: executing program 1 (id=1208):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="46eaf6291823a26955d3c75fa2e742e4390f94cba5a933423c39e2d7c9b91f9b7ca3c46652f7c4db9789330b211b860e857d283805b367609801176010018a628126ba25a456fcbd36f2301aac2b17fabe9f88a630233053760c7e4abb2173b3ec3c299b0f5587da906b55d665b5bbcbf7303b55f54c3cbffc865fc3c7c58efa4e5b7a6471657a10ed89a727f7184625"], 0x0, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x240900, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x180, 0x4)
socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x0, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x28, 0x6c}, {@loopback, 0x4e22, 0x0, 0x9, 0x1}}, 0x44)
sendmsg$sock(r2, &(0x7f00000001c0)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x400000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, 0x0, 0xfeba, &(0x7f0000000000), 0x18, 0xb00}, 0xd4)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000fcb000)=0xffffffff, 0x4)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0xffff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@getnexthop={0x24, 0x6a, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000080)={0x4, 0x1, 0x81, 0xf, "bf99f7a0f281ca8fbeb8216bef5c543cf861aa6b6f005e00"})

434.155µs ago: executing program 4 (id=1209):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x3000084, &(0x7f0000000c00)=ANY=[@ANYRES8=r0])
chdir(&(0x7f0000000100)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
ftruncate(r2, 0x3)

0s ago: executing program 3 (id=1210):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000340)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e6f64655f686172646c696d69743d372c003be316611e3a4e270ea45e4eddbc24a45cf4da814f5e80f6833e2d4d4058d8248743b167c1db7c695c09c6f6fe2384a6f92979b3d32d242ec4a3a0c83837a0b8294c92be48bb6bf6b78062fb99512a9d46b447a514c16d642a2998738dedfa26147408b909bca63b1175ca2d8e385ee423f3e4246d3807f8ac3a1399d09788fbfb5f5c6141c366159fd28b0d97fcf1415e4f0156b85c7bc5825fddc16138287382a447f1e162489e37c1de26"])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x448000, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', '', [{0x20, '\xfe\xd5z\xfb/\xd8\xb1\xeeR\xfd+c\xcb\x94\xa1\xaaOy\x89\xae\xddR\xed\xed\x0e\xaa\xb3\xab\xa2~\xb6.\xce\xec\x1e-\x9b\x8c\n\x92\x8cP7\xc5\xb4\xc0Wna\xe6}D~\x9f\x83\xe5\xcb\x84\xcf\xa9\xcd\xcd\x12ypg\xe9Vv\xd5\xa1\xde\xf0\xdfd?\xe0g\xea\x0e(5\x1ce\x16\x13@\xd2\x9d\xc3\xa3\x8c{\xc9U\xe5|x2\x02\x00\x00\x00E\x14\xb77.\x94pe\xa6\xe7\x8b\x1a!y\x90\x10\x98\xc1\f\x05\x7f[\x1b\x84\x10K\x0e\xcd\x13:P\xed\xd3h\x13G[`'}, {0x20, 'virt_wifi0\x00'}, {0x20, '#! '}]}, 0xa2)
syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x3c}, @l2cap_cid_signaling={{0x38}, [@l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x4, 0x1ff}}, @l2cap_create_chan_req={{0xc, 0x9, 0x5}, {0x981a, 0xff01, 0x2}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x3, 0x6}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0xbe25}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x1, 0x5}}, @l2cap_move_chan_rsp={{0xf, 0x3, 0x4}, {0x3, 0x4}}]}}, 0x41)
mmap(&(0x7f0000ab9000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x40000003, {0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x886f5cad098fbc1)
ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{}, {@any, 0x3}}}, 0x3)

kernel console output (not intermixed with test programs):

e=1400 audit(1773186277.204:505): avc:  denied  { ioctl } for  pid=7990 comm="syz.0.664" path="socket:[19442]" dev="sockfs" ino=19442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  112.748584][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'.
[  112.752340][   T40] audit: type=1400 audit(1773186277.224:506): avc:  denied  { write } for  pid=7990 comm="syz.0.664" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  112.807868][ T5937] Bluetooth: hci3: SCO packet for unknown connection handle 201
[  112.911346][   T10] usb 5-1: USB disconnect, device number 17
[  113.072864][ T6368] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  113.076483][ T6368] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  113.076638][ T8000] binder: 7999:8000 ioctl c0306201 0 returned -14
[  113.078823][ T6368] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  113.084032][ T6368] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  113.086806][ T6368] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  113.089401][ T6368] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  113.142259][ T8004] fuse: Unknown parameter 'use00000000000000000000'
[  113.276585][   T50] usb 6-1: USB disconnect, device number 19
[  113.293479][ T8013] CIFS mount error: No usable UNC path provided in device string!
[  113.293479][ T8013] 
[  113.297594][ T8013] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  113.303138][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'.
[  113.368494][   T40] audit: type=1400 audit(1773186277.844:507): avc:  denied  { write } for  pid=8016 comm="syz.2.674" name="file0" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  113.375850][   T40] audit: type=1400 audit(1773186277.844:508): avc:  denied  { open } for  pid=8016 comm="syz.2.674" path="/158/file0" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  113.852684][  T273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.942492][  T273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.008213][  T273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.066211][ T6005] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  114.109749][  T273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.132667][   T40] audit: type=1400 audit(1773186278.604:509): avc:  denied  { execute } for  pid=8031 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  114.142039][   T40] audit: type=1400 audit(1773186278.604:510): avc:  denied  { execute_no_trans } for  pid=8031 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  114.190515][ T5929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.194634][ T5929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.198033][ T5929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.203876][ T5929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.216153][ T5929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.226065][ T6005] usb 6-1: device descriptor read/64, error -71
[  114.313000][  T273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.325170][  T273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.330665][  T273] bond0 (unregistering): Released all slaves
[  114.336858][  T273] bond1 (unregistering): Released all slaves
[  114.428797][  T273] tipc: Left network mode
[  114.444317][ T8032] chnl_net:caif_netlink_parms(): no params data found
[  114.466356][ T6005] usb 6-1: new low-speed USB device number 21 using dummy_hcd
[  114.471672][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'.
[  114.475268][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'.
[  114.528743][ T8052] Bluetooth: hci0: Opcode 0x080f failed: -22
[  114.554914][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.557386][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.559702][ T8032] bridge_slave_0: entered allmulticast mode
[  114.562433][ T8032] bridge_slave_0: entered promiscuous mode
[  114.565586][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.569780][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.572209][ T8032] bridge_slave_1: entered allmulticast mode
[  114.574960][ T8032] bridge_slave_1: entered promiscuous mode
[  114.591371][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.595856][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.607700][ T6005] usb 6-1: device descriptor read/64, error -71
[  114.643234][ T8032] team0: Port device team_slave_0 added
[  114.646665][ T8032] team0: Port device team_slave_1 added
[  114.659555][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.662018][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  114.670579][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.675845][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.678388][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  114.691137][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.717057][ T6005] usb usb6-port1: attempt power cycle
[  114.762501][  T273] hsr_slave_0: left promiscuous mode
[  114.762797][   T40] audit: type=1400 audit(1773186279.234:511): avc:  denied  { connect } for  pid=8064 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  114.771571][  T273] hsr_slave_1: left promiscuous mode
[  114.775521][  T273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.781104][  T273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.785629][  T273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.789198][  T273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.797587][  T273] veth1_macvtap: left promiscuous mode
[  114.799998][  T273] veth0_macvtap: left promiscuous mode
[  114.802653][  T273] veth1_vlan: left promiscuous mode
[  114.804643][  T273] veth0_vlan: left promiscuous mode
[  114.970646][  T273] team0 (unregistering): Port device team_slave_1 removed
[  114.980083][  T273] team0 (unregistering): Port device team_slave_0 removed
[  115.052751][ T8032] hsr_slave_0: entered promiscuous mode
[  115.055315][ T8032] hsr_slave_1: entered promiscuous mode
[  115.057821][ T6005] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[  115.076740][ T6005] usb 6-1: device descriptor read/8, error -71
[  115.197595][ T8032] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  115.210109][ T8032] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  115.224800][ T8032] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  115.229826][ T8032] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  115.298141][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.316137][ T6005] usb 6-1: new low-speed USB device number 23 using dummy_hcd
[  115.321697][ T8032] 8021q: adding VLAN 0 to HW filter on device team0
[  115.329575][  T210] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.331831][  T210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.346976][ T6005] usb 6-1: device descriptor read/8, error -71
[  115.348505][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.352529][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.456452][ T6005] usb usb6-port1: unable to enumerate USB device
[  115.484532][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.649476][ T8032] veth0_vlan: entered promiscuous mode
[  115.660744][ T8032] veth1_vlan: entered promiscuous mode
[  115.685319][ T8032] veth0_macvtap: entered promiscuous mode
[  115.689952][ T8032] veth1_macvtap: entered promiscuous mode
[  115.698953][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.700673][ T8101] netlink: 548 bytes leftover after parsing attributes in process `syz.2.689'.
[  115.702994][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.721149][   T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.725051][   T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.736398][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.739784][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.777527][  T273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.781080][  T273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.796904][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.799953][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.811054][   T40] audit: type=1400 audit(1773186280.284:512): avc:  denied  { mounton } for  pid=8032 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  115.819079][   T40] audit: type=1400 audit(1773186280.284:513): avc:  denied  { mounton } for  pid=8032 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  115.842249][ T8106] CIFS mount error: No usable UNC path provided in device string!
[  115.842249][ T8106] 
[  115.845649][ T8106] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  115.850826][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'.
[  116.243770][ T8120] fuse: Unknown parameter 'user_id00000000000000000000'
[  116.306735][ T5937] Bluetooth: hci3: command tx timeout
[  116.547726][ T7155] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  116.567417][ T8126] lo: entered promiscuous mode
[  116.582616][ T8126] dvmrp0: entered allmulticast mode
[  116.588187][ T8126] Can't find a SQUASHFS superblock on nullb0
[  116.618934][ T8129] syzkaller0: entered promiscuous mode
[  116.620829][ T8129] syzkaller0: entered allmulticast mode
[  116.717340][ T7155] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  116.720198][ T7155] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.723464][ T7155] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  116.727008][ T7155] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.732225][ T7155] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  116.736157][ T7155] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  116.739488][ T7155] usb 9-1: Product: syz
[  116.741252][ T7155] usb 9-1: Manufacturer: syz
[  116.746482][ T7155] cdc_wdm 9-1:1.0: skipping garbage
[  116.750025][ T7155] cdc_wdm 9-1:1.0: skipping garbage
[  116.752840][ T7155] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  116.755079][ T7155] cdc_wdm 9-1:1.0: Unknown control protocol
[  116.948966][ T7155] usb 9-1: USB disconnect, device number 2
[  117.095701][ T8144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.099066][ T8144] syzkaller0: mtu greater than device maximum
[  117.102063][ T8143] tipc: Disabling bearer <eth:syzkaller0>
[  117.161332][ T8147] fuse: Unknown parameter 'user_id00000000000000000000'
[  117.436336][ T6012] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  117.587132][ T6012] usb 6-1: Using ep0 maxpacket: 32
[  117.590498][ T6012] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  117.593384][ T6012] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  117.596871][ T5970] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  117.599417][ T6012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  117.603035][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  117.607756][ T6012] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  117.610929][ T6012] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102
[  117.614468][ T6012] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  117.619119][ T6012] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  117.622174][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.626648][ T6012] usb 6-1: config 0 descriptor??
[  117.629348][ T8149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  117.736163][ T5970] usb 9-1: device descriptor read/64, error -71
[  117.839009][ T6012] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  117.976100][ T5970] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  118.034516][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  118.034532][   T40] audit: type=1400 audit(1773186282.504:515): avc:  denied  { read write } for  pid=8148 comm="syz.1.706" name="lp0" dev="devtmpfs" ino=3138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  118.036493][    C0] usblp0: nonzero read bulk status received: -71
[  118.037608][   T40] audit: type=1400 audit(1773186282.504:516): avc:  denied  { open } for  pid=8148 comm="syz.1.706" path="/dev/usb/lp0" dev="devtmpfs" ino=3138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  118.047001][  T832] usb 6-1: USB disconnect, device number 24
[  118.062518][  T832] usblp0: removed
[  118.106130][ T5970] usb 9-1: device descriptor read/64, error -71
[  118.226309][ T5970] usb usb9-port1: attempt power cycle
[  118.386122][ T5937] Bluetooth: hci3: command 0x041b tx timeout
[  118.576153][ T5970] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  118.596982][ T5970] usb 9-1: device descriptor read/8, error -71
[  118.678588][ T5929] block nbd1: Receive control failed (result -32)
[  118.680565][ T8153] block nbd1: shutting down sockets
[  118.749344][ T8161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.710'.
[  118.757771][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  118.801822][ T8164] CIFS mount error: No usable UNC path provided in device string!
[  118.801822][ T8164] 
[  118.805297][ T8164] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  118.809992][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'.
[  118.847603][ T8167] syzkaller0: entered promiscuous mode
[  118.850182][ T8167] syzkaller0: entered allmulticast mode
[  118.857590][ T5970] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  118.873749][ T8167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.877211][ T8166] tipc: Resetting bearer <eth:syzkaller0>
[  118.877863][ T5970] usb 9-1: device descriptor read/8, error -71
[  118.887417][ T8166] tipc: Disabling bearer <eth:syzkaller0>
[  118.986256][ T5970] usb usb9-port1: unable to enumerate USB device
[  119.127698][ T8182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=8182 comm=syz.1.719
[  119.146127][  T832] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  119.260409][ T8186] bond1 (unregistering): Released all slaves
[  119.307658][  T832] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  119.309991][   T40] audit: type=1400 audit(1773186283.784:517): avc:  denied  { mounton } for  pid=8185 comm="syz.1.721" path="/203/bus/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  119.312186][  T832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.325152][  T832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.338184][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  119.355356][  T832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.359280][  T832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.363762][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  119.367341][  T832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.370459][  T832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.375069][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  119.379593][  T832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.383516][  T832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.388554][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  119.391915][   T40] audit: type=1400 audit(1773186283.864:518): avc:  denied  { unmount } for  pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  119.392992][  T832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.408548][  T832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.413210][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  119.425397][  T832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.429588][  T832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.434222][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  119.438498][  T832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.439934][ T8194] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  119.442349][  T832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.447098][ T8194] overlayfs: missing 'lowerdir'
[  119.452047][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  119.457742][  T832] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.461635][  T832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  119.463497][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'.
[  119.466438][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  119.468637][  T832] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  119.478658][  T832] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  119.482311][  T832] usb 7-1: Product: syz
[  119.484194][  T832] usb 7-1: Manufacturer: syz
[  119.486354][  T832] usb 7-1: SerialNumber: syz
[  119.491229][  T832] usb 7-1: config 0 descriptor??
[  119.499106][  T832] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  119.708658][   T40] audit: type=1400 audit(1773186284.184:519): avc:  denied  { listen } for  pid=8173 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  119.753655][   T50] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  119.779700][ T8201] XFS (nbd2): SB validate failed with error -5.
[  119.906160][   T50] usb 6-1: Using ep0 maxpacket: 32
[  119.909633][   T50] usb 6-1: config 0 has an invalid interface number: 119 but max is 0
[  119.912344][   T50] usb 6-1: config 0 has no interface number 0
[  119.914365][   T50] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  119.917968][   T50] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  119.921729][   T50] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[  119.924941][   T50] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  119.932051][   T50] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  119.935346][   T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.938054][   T50] usb 6-1: Product: syz
[  119.939415][   T50] usb 6-1: Manufacturer: syz
[  119.940934][   T50] usb 6-1: SerialNumber: syz
[  119.943927][   T50] usb 6-1: config 0 descriptor??
[  119.946254][ T8197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  119.951158][   T50] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input25
[  119.956082][ T5321] usb 6-1: BOGUS urb xfer, pipe 1 != type 3
[  120.212462][ T8197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.218916][   T24] usb 6-1: USB disconnect, device number 25
[  120.442177][   T40] audit: type=1400 audit(1773186284.914:520): avc:  denied  { mounton } for  pid=8208 comm="syz.4.727" path="/11/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  120.466181][ T5929] Bluetooth: hci3: command 0x041b tx timeout
[  120.806769][ T8216] fuse: Unknown parameter '18446744073709551615'
[  120.826249][   T40] audit: type=1400 audit(1773186285.294:521): avc:  denied  { set_context_mgr } for  pid=8225 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  120.836954][   T40] audit: type=1400 audit(1773186285.314:522): avc:  denied  { call } for  pid=8225 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  120.845493][   T40] audit: type=1400 audit(1773186285.314:523): avc:  denied  { transfer } for  pid=8225 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  121.016103][ T5970] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  121.186534][ T5970] usb 6-1: Using ep0 maxpacket: 32
[  121.190334][ T5970] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  121.194102][ T5970] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  121.197991][ T5970] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  121.201282][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  121.204489][ T5970] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  121.207646][ T5970] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102
[  121.211566][ T5970] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  121.217221][ T5970] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  121.221064][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.227150][ T5970] usb 6-1: config 0 descriptor??
[  121.230232][ T8223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  121.437262][ T5970] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  121.747431][    C2] usb 7-1: yurex_control_callback - control failed: -2
[  121.752069][  T832] usb 6-1: USB disconnect, device number 26
[  121.762395][  T832] usblp1: removed
[  121.762594][   T50] usb 7-1: USB disconnect, device number 28
[  121.777396][   T50] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  122.062712][ T8242] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  122.339288][ T8252] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.741'.
[  122.556324][ T5929] Bluetooth: hci3: command 0x041b tx timeout
[  122.566842][  T832] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  122.727394][  T832] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  122.732878][  T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.736894][  T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.741565][  T832] usb 6-1: config 0 interface 0 has no altsetting 0
[  122.745667][  T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.750116][  T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.754824][  T832] usb 6-1: config 0 interface 0 has no altsetting 0
[  122.759088][  T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.763220][  T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.768062][  T832] usb 6-1: config 0 interface 0 has no altsetting 0
[  122.771988][  T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.776070][  T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.780761][  T832] usb 6-1: config 0 interface 0 has no altsetting 0
[  122.784775][  T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.789942][  T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.792941][   T40] audit: type=1400 audit(1773186287.264:524): avc:  denied  { override_creds } for  pid=8264 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  122.794527][  T832] usb 6-1: config 0 interface 0 has no altsetting 0
[  122.799623][  T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.808161][  T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.811269][  T832] usb 6-1: config 0 interface 0 has no altsetting 0
[  122.814173][  T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.817993][  T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.821732][  T832] usb 6-1: config 0 interface 0 has no altsetting 0
[  122.826028][  T832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.829604][  T832] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.833537][  T832] usb 6-1: config 0 interface 0 has no altsetting 0
[  122.838285][  T832] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  122.842176][  T832] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  122.845424][  T832] usb 6-1: Product: syz
[  122.847511][  T832] usb 6-1: Manufacturer: syz
[  122.849569][  T832] usb 6-1: SerialNumber: syz
[  122.856539][  T832] usb 6-1: config 0 descriptor??
[  122.864846][  T832] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  123.176145][ T1327] usb 9-1: new low-speed USB device number 7 using dummy_hcd
[  123.306111][ T1327] usb 9-1: device descriptor read/64, error -71
[  123.546592][ T1327] usb 9-1: new low-speed USB device number 8 using dummy_hcd
[  123.686155][ T1327] usb 9-1: device descriptor read/64, error -71
[  123.796457][ T1327] usb usb9-port1: attempt power cycle
[  124.136058][ T1327] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  124.156620][ T1327] usb 9-1: device descriptor read/8, error -71
[  124.396077][ T1327] usb 9-1: new low-speed USB device number 10 using dummy_hcd
[  124.416480][ T1327] usb 9-1: device descriptor read/8, error -71
[  124.526183][ T1327] usb usb9-port1: unable to enumerate USB device
[  124.604152][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'.
[  124.615841][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'.
[  124.626087][ T5929] Bluetooth: hci3: command 0x041b tx timeout
[  124.683516][ T8278] binder: 8277:8278 ioctl c0306201 0 returned -14
[  124.782958][ T5929] Bluetooth: hci2: unexpected event for opcode 0x0c1c
[  124.813640][ T8285] SELinux: security_context_str_to_sid („) failed with errno=-22
[  124.870748][ T8290] kAFS: Can only specify source 'none' with -o dyn
[  125.106255][    C2] usb 6-1: yurex_control_callback - control failed: -2
[  125.111765][ T7155] usb 6-1: USB disconnect, device number 27
[  125.120944][ T7155] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  125.656662][ T8295] syzkaller0: entered promiscuous mode
[  125.658513][ T8295] syzkaller0: entered allmulticast mode
[  125.798119][ T8303] binder: BINDER_SET_CONTEXT_MGR already set
[  125.800093][ T8303] binder: 8302:8303 ioctl 4018620d 200000000100 returned -16
[  125.803796][ T8303] binder: BINDER_SET_CONTEXT_MGR already set
[  125.806758][ T8303] binder: 8302:8303 ioctl 4018620d 200000004a80 returned -16
[  125.810151][ T8303] binder: 8302:8303 ioctl c0306201 0 returned -14
[  125.820875][ T8305] netlink: 'syz.2.760': attribute type 1 has an invalid length.
[  125.874235][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.762'.
[  125.959593][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'.
[  125.966693][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'.
[  126.007675][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'.
[  126.026622][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  126.026632][   T40] audit: type=1400 audit(1773186290.504:526): avc:  denied  { open } for  pid=8322 comm="syz.1.767" path="/dev/ttyq7" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  126.205469][   T40] audit: type=1400 audit(1773186290.674:527): avc:  denied  { shutdown } for  pid=8333 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  127.086096][   T50] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  127.153249][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.775'.
[  127.158233][ T8357] netlink: 96 bytes leftover after parsing attributes in process `syz.1.775'.
[  127.247440][   T50] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  127.250241][   T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.253565][   T50] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  127.256689][   T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.261367][   T50] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  127.264431][   T50] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  127.266071][ T1327] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[  127.267619][   T50] usb 7-1: Product: syz
[  127.271317][   T50] usb 7-1: Manufacturer: syz
[  127.276775][   T50] cdc_wdm 7-1:1.0: skipping garbage
[  127.278465][   T50] cdc_wdm 7-1:1.0: skipping garbage
[  127.282181][   T50] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  127.284158][   T50] cdc_wdm 7-1:1.0: Unknown control protocol
[  127.417690][ T1327] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.422267][ T1327] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  127.426255][ T1327] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  127.431972][ T1327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.443413][ T1327] usb 9-1: config 0 descriptor??
[  127.479656][ T8375] binder: BINDER_SET_CONTEXT_MGR already set
[  127.485764][ T8375] binder: 8374:8375 ioctl 4018620d 200000000100 returned -16
[  127.489059][ T5980] usb 7-1: USB disconnect, device number 29
[  127.498260][ T8375] binder: BINDER_SET_CONTEXT_MGR already set
[  127.500242][ T8375] binder: 8374:8375 ioctl 4018620d 200000004a80 returned -16
[  127.531259][   T40] audit: type=1400 audit(1773186292.004:528): avc:  denied  { ioctl } for  pid=8376 comm="syz.1.780" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24135 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  128.136287][   T34] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  128.287349][   T34] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  128.290224][   T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.293398][   T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  128.296379][   T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.300797][   T34] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  128.303658][   T34] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  128.306482][   T34] usb 7-1: Product: syz
[  128.307883][   T34] usb 7-1: Manufacturer: syz
[  128.313252][   T34] cdc_wdm 7-1:1.0: skipping garbage
[  128.314932][   T34] cdc_wdm 7-1:1.0: skipping garbage
[  128.317636][   T34] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  128.319579][   T34] cdc_wdm 7-1:1.0: Unknown control protocol
[  128.489441][ T8393] CIFS mount error: No usable UNC path provided in device string!
[  128.489441][ T8393] 
[  128.492675][ T8393] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  128.497716][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'.
[  128.514111][   T34] usb 7-1: USB disconnect, device number 30
[  128.594136][ T8395] orangefs: client-core tried to read wrong size
[  128.648545][ T8396] orangefs_devreq_open: device cannot be opened in blocking mode
[  129.626055][   T34] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  129.788130][   T34] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  129.791908][   T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.796362][   T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  129.800380][   T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.806851][   T34] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  129.810895][   T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  129.813957][   T34] usb 6-1: Product: syz
[  129.815446][   T34] usb 6-1: Manufacturer: syz
[  129.820264][   T34] cdc_wdm 6-1:1.0: skipping garbage
[  129.822054][   T34] cdc_wdm 6-1:1.0: skipping garbage
[  129.824827][   T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  129.826897][   T34] cdc_wdm 6-1:1.0: Unknown control protocol
[  130.023469][   T34] usb 6-1: USB disconnect, device number 28
[  130.028609][ T1327] usb 9-1: USB disconnect, device number 11
[  130.101220][ T8413] CIFS mount error: No usable UNC path provided in device string!
[  130.101220][ T8413] 
[  130.104539][ T8413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  130.109558][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'.
[  130.129732][ T8415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.793'.
[  130.726141][ T5999] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  130.877307][ T5999] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  130.880691][ T5999] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[  130.885572][ T5999] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  130.890353][ T5999] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.897263][ T5999] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  130.901067][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  130.904550][ T5999] usb 6-1: Product: syz
[  130.907200][ T5999] usb 6-1: Manufacturer: syz
[  130.917427][ T5999] cdc_wdm 6-1:1.0: skipping garbage
[  130.919602][ T5999] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  131.563967][   T40] audit: type=1400 audit(1773186296.034:529): avc:  denied  { getopt } for  pid=8451 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  131.613265][   T40] audit: type=1400 audit(1773186296.084:530): avc:  denied  { create } for  pid=8416 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  131.620727][   T40] audit: type=1400 audit(1773186296.094:531): avc:  denied  { ioctl } for  pid=8416 comm="syz.2.794" path="socket:[24208]" dev="sockfs" ino=24208 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  131.897074][   T40] audit: type=1400 audit(1773186296.374:532): avc:  denied  { watch watch_reads } for  pid=8455 comm="syz.3.807" path="/proc/357" dev="proc" ino=25814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  132.405428][ T5999] usb 6-1: USB disconnect, device number 29
[  132.933015][ T8475] binder: BINDER_SET_CONTEXT_MGR already set
[  132.935215][ T8475] binder: 8474:8475 ioctl 4018620d 200000003280 returned -16
[  132.940935][ T8475] binder: BINDER_SET_CONTEXT_MGR already set
[  132.943197][ T8475] binder: 8474:8475 ioctl 4018620d 200000000040 returned -16
[  132.944174][ T8473] orangefs: client-core tried to read wrong size
[  132.951455][ T8475] binder: 8474:8475 ioctl c0306201 2000000003c0 returned -14
[  132.954671][   T40] audit: type=1400 audit(1773186297.424:533): avc:  denied  { append } for  pid=8474 comm="syz.1.812" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  133.002552][ T8477] orangefs_devreq_open: device cannot be opened in blocking mode
[  133.068978][   T40] audit: type=1400 audit(1773186297.544:534): avc:  denied  { read } for  pid=8481 comm="syz.1.814" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  133.076552][   T40] audit: type=1400 audit(1773186297.544:535): avc:  denied  { open } for  pid=8481 comm="syz.1.814" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  133.084583][   T40] audit: type=1400 audit(1773186297.544:536): avc:  denied  { write } for  pid=8481 comm="syz.1.814" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  133.170213][ T5929] Bluetooth: hci1: unexpected event for opcode 0x001c
[  133.783522][   T40] audit: type=1400 audit(1773186298.254:537): avc:  denied  { create } for  pid=8496 comm="syz.2.818" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  134.068422][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'.
[  134.306912][ T8511] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  134.357394][ T8515] binder: BINDER_SET_CONTEXT_MGR already set
[  134.359441][ T8515] binder: 8514:8515 ioctl 4018620d 200000000100 returned -16
[  134.364089][ T8515] binder: BINDER_SET_CONTEXT_MGR already set
[  134.366410][ T8515] binder: 8514:8515 ioctl 4018620d 200000004a80 returned -16
[  134.369347][ T8515] binder: 8514:8515 ioctl c0306201 0 returned -14
[  134.481648][   T40] audit: type=1804 audit(1773186298.954:538): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.830" name="/newroot/40/file0" dev="tmpfs" ino=227 res=1 errno=0
[  134.482928][ T8523] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1
[  134.495253][ T8523] ref_ctr increment failed for inode: 0xe3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ea355c0
[  134.503429][ T8523] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1
[  134.508325][ T8523] ref_ctr decrement failed for inode: 0xe3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ea355c0
[  134.513044][ T8523] uprobe: syz.4.830:8523 failed to unregister, leaking uprobe
[  134.560159][ T8525] vxfs: unable to read disk superblock at 1
[  134.563358][ T8525] vxfs: unable to read disk superblock at 8
[  134.565426][ T8525] vxfs: can't find superblock.
[  134.896107][   T50] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  135.057424][   T50] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  135.061059][   T50] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  135.064333][   T50] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  135.067888][   T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.072487][ T8532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  135.078086][   T50] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  135.086095][ T8545] program syz.3.838 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.217955][ T8552] ubi0: attaching mtd0
[  135.220836][ T8552] ubi0: scanning is finished
[  135.222502][ T8552] ubi0: empty MTD device detected
[  135.277509][ T5929] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  135.281576][ T5929] CPU: 1 UID: 0 PID: 5929 Comm: kworker/u33:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.281597][ T5929] Tainted: [L]=SOFTLOCKUP
[  135.281602][ T5929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  135.281610][ T5929] Workqueue: hci3 hci_rx_work
[  135.281647][ T5929] Call Trace:
[  135.281652][ T5929]  <TASK>
[  135.281657][ T5929]  dump_stack_lvl+0x100/0x190
[  135.281677][ T5929]  sysfs_warn_dup.cold+0x1c/0x28
[  135.281695][ T5929]  sysfs_create_dir_ns+0x24b/0x2b0
[  135.281712][ T5929]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  135.281728][ T5929]  ? find_held_lock+0x2b/0x80
[  135.281749][ T5929]  ? kobject_add_internal+0x25f/0x930
[  135.281766][ T5929]  ? kobject_add_internal+0x25f/0x930
[  135.281782][ T5929]  ? do_raw_spin_unlock+0x145/0x1e0
[  135.281797][ T5929]  kobject_add_internal+0x2c8/0x930
[  135.281815][ T5929]  kobject_add+0x16a/0x1e0
[  135.281830][ T5929]  ? __pfx_kobject_add+0x10/0x10
[  135.281846][ T5929]  ? class_to_subsys+0x10f/0x150
[  135.281871][ T5929]  ? kobject_put+0xb9/0x640
[  135.281883][ T5929]  ? _raw_spin_unlock+0x28/0x50
[  135.281897][ T5929]  device_add+0x294/0x1950
[  135.281918][ T5929]  ? __pfx_dev_set_name+0x10/0x10
[  135.281931][ T5929]  ? __pfx_device_add+0x10/0x10
[  135.281947][ T5929]  ? mgmt_send_event_skb+0x2fb/0x460
[  135.281967][ T5929]  hci_conn_add_sysfs+0x1a3/0x260
[  135.281980][ T5929]  le_conn_complete_evt+0x11cb/0x1f40
[  135.282003][ T5929]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  135.282023][ T5929]  hci_le_conn_complete_evt+0x23c/0x3a0
[  135.282041][ T5929]  ? skb_pull_data+0x15f/0x1e0
[  135.282057][ T5929]  hci_le_meta_evt+0x34a/0x5f0
[  135.282069][ T5929]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  135.282087][ T5929]  hci_event_packet+0x682/0x11c0
[  135.282104][ T5929]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  135.282116][ T5929]  ? __pfx_hci_event_packet+0x10/0x10
[  135.282133][ T5929]  ? kcov_remote_start+0x374/0x660
[  135.282148][ T5929]  ? lockdep_hardirqs_on+0x78/0x100
[  135.282163][ T5929]  hci_rx_work+0x451/0xfc0
[  135.282184][ T5929]  process_one_work+0x9d7/0x1920
[  135.282201][ T5929]  ? __pfx_process_one_work+0x10/0x10
[  135.282217][ T5929]  ? __pfx_hci_rx_work+0x10/0x10
[  135.282235][ T5929]  worker_thread+0x5da/0xe40
[  135.282250][ T5929]  ? __pfx_worker_thread+0x10/0x10
[  135.282262][ T5929]  ? kthread+0x13a/0x450
[  135.282271][ T5929]  ? __pfx_worker_thread+0x10/0x10
[  135.282281][ T5929]  kthread+0x370/0x450
[  135.282291][ T5929]  ? __pfx_kthread+0x10/0x10
[  135.282302][ T5929]  ret_from_fork+0x754/0xd80
[  135.282313][ T5929]  ? __pfx_ret_from_fork+0x10/0x10
[  135.282326][ T5929]  ? __switch_to+0x7b4/0x1120
[  135.282338][ T5929]  ? __pfx_kthread+0x10/0x10
[  135.282360][ T5929]  ret_from_fork_asm+0x1a/0x30
[  135.282381][ T5929]  </TASK>
[  135.282394][ T5929] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  135.359689][ T6368] usb 9-1: USB disconnect, device number 12
[  135.359845][ T5929] Bluetooth: hci3: failed to register connection device
[  135.485285][ T8552] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  135.487945][ T8552] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes
[  135.490380][ T8552] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  135.492696][ T8552] ubi0: VID header offset: 258 (aligned 258), data offset: 322
[  135.495391][ T8552] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  135.497758][ T8552] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21
[  135.501815][ T8552] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 693534323
[  135.505152][ T8552] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  135.509504][ T8563] ubi0: background thread "ubi_bgt0d" started, PID 8563
[  135.670012][ T8577] binder: 8575:8577 ioctl c0306201 2000000003c0 returned -14
[  135.673992][ T8576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  135.743062][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.846'.
[  135.841041][ T8592] netlink: 'syz.1.852': attribute type 3 has an invalid length.
[  135.843750][ T8592] netlink: 'syz.1.852': attribute type 3 has an invalid length.
[  135.983003][ T8546] [U] 
[  136.038520][ T8602] netlink: 80 bytes leftover after parsing attributes in process `syz.2.856'.
[  136.092863][ T8607] syzkaller0: entered promiscuous mode
[  136.095005][ T8607] syzkaller0: entered allmulticast mode
[  136.100002][ T8607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.102870][ T8606] tipc: Resetting bearer <eth:syzkaller0>
[  136.112584][ T8606] tipc: Disabling bearer <eth:syzkaller0>
[  136.201883][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'.
[  136.237163][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'.
[  136.457012][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.861'.
[  136.785070][ T8631] FAULT_INJECTION: forcing a failure.
[  136.785070][ T8631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.789825][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.4.866 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  136.789849][ T8631] Tainted: [L]=SOFTLOCKUP
[  136.789854][ T8631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  136.789863][ T8631] Call Trace:
[  136.789868][ T8631]  <TASK>
[  136.789874][ T8631]  dump_stack_lvl+0x100/0x190
[  136.789906][ T8631]  should_fail_ex.cold+0x5/0xa
[  136.789928][ T8631]  _copy_from_iter+0x1f4/0x1690
[  136.789958][ T8631]  ? alloc_pages_mpol+0x25a/0x550
[  136.789976][ T8631]  ? __pfx__copy_from_iter+0x10/0x10
[  136.790002][ T8631]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  136.790030][ T8631]  copy_page_from_iter+0xde/0x180
[  136.790061][ T8631]  tun_build_skb.constprop.0+0x2ea/0x15d0
[  136.790092][ T8631]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  136.790114][ T8631]  ? unwind_get_return_address+0x59/0xa0
[  136.790138][ T8631]  ? arch_stack_walk+0xa6/0xf0
[  136.790168][ T8631]  ? _kstrtoull+0x13c/0x1f0
[  136.790180][ T8631]  ? __pfx__kstrtoull+0x10/0x10
[  136.790193][ T8631]  tun_get_user+0x16d0/0x3e10
[  136.790214][ T8631]  ? __pfx_tun_get_user+0x10/0x10
[  136.790229][ T8631]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  136.790253][ T8631]  ? find_held_lock+0x2b/0x80
[  136.790267][ T8631]  ? tun_get+0x191/0x370
[  136.790280][ T8631]  ? tun_get+0x191/0x370
[  136.790296][ T8631]  tun_chr_write_iter+0xdc/0x200
[  136.790313][ T8631]  vfs_write+0x6ac/0x1070
[  136.790330][ T8631]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  136.790346][ T8631]  ? __pfx_vfs_write+0x10/0x10
[  136.790361][ T8631]  ? find_held_lock+0x2b/0x80
[  136.790384][ T8631]  ksys_write+0x12a/0x250
[  136.790400][ T8631]  ? __pfx_ksys_write+0x10/0x10
[  136.790420][ T8631]  do_syscall_64+0x106/0xf80
[  136.790434][ T8631]  ? clear_bhb_loop+0x40/0x90
[  136.790447][ T8631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.790459][ T8631] RIP: 0033:0x7f8e02f5cfce
[  136.790469][ T8631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  136.790479][ T8631] RSP: 002b:00007f8e011f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.790490][ T8631] RAX: ffffffffffffffda RBX: 00007f8e011f66c0 RCX: 00007f8e02f5cfce
[  136.790497][ T8631] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8
[  136.790504][ T8631] RBP: 00007f8e011f6090 R08: 0000000000000000 R09: 0000000000000000
[  136.790513][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.790522][ T8631] R13: 00007f8e03216128 R14: 00007f8e03216090 R15: 00007ffe02987498
[  136.790545][ T8631]  </TASK>
[  136.897908][ T8637] CIFS mount error: No usable UNC path provided in device string!
[  136.897908][ T8637] 
[  136.901844][ T8637] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  136.905695][   T40] kauditd_printk_skb: 30 callbacks suppressed
[  136.905705][   T40] audit: type=1400 audit(1773186301.374:569): avc:  denied  { read } for  pid=8636 comm="syz.3.868" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  136.917904][   T40] audit: type=1400 audit(1773186301.374:570): avc:  denied  { open } for  pid=8636 comm="syz.3.868" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  136.925672][   T40] audit: type=1400 audit(1773186301.384:571): avc:  denied  { ioctl } for  pid=8636 comm="syz.3.868" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  136.927720][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'.
[  137.059614][ T8648] netlink: 184 bytes leftover after parsing attributes in process `syz.1.872'.
[  137.063397][ T8648] xt_socket: unknown flags 0xd0
[  137.157702][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'.
[  137.170704][ T8652] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.177840][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.874'.
[  137.181850][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'.
[  137.191321][ T8652] netlink: 'syz.1.874': attribute type 4 has an invalid length.
[  137.195796][ T8652] .`: renamed from bond0
[  137.416509][ T8665] CIFS mount error: No usable UNC path provided in device string!
[  137.416509][ T8665] 
[  137.419781][ T8665] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  137.526929][ T8667] orangefs: client-core tried to read wrong size
[  137.581243][ T8668] orangefs_devreq_open: device cannot be opened in blocking mode
[  137.650713][   T40] audit: type=1400 audit(1773186302.124:572): avc:  denied  { write } for  pid=8669 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  137.669279][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  137.671475][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  137.771168][   T40] audit: type=1400 audit(1773186302.244:573): avc:  denied  { nlmsg_write } for  pid=8676 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  137.814624][ T5929] Bluetooth: hci3: unexpected event for opcode 0x0c03
[  137.818963][ T5929] Bluetooth: hci3: unexpected cc 0x0c03 length: 7 > 1
[  137.821796][ T5929] Bluetooth: hci3: unexpected event for opcode 0x0c03
[  137.925193][ T8687] CIFS mount error: No usable UNC path provided in device string!
[  137.925193][ T8687] 
[  137.928865][ T8687] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  138.219647][ T8704] binder: BINDER_SET_CONTEXT_MGR already set
[  138.222374][ T8704] binder: 8703:8704 ioctl 4018620d 200000000100 returned -16
[  138.231355][ T8704] binder: BINDER_SET_CONTEXT_MGR already set
[  138.233982][ T8704] binder: 8703:8704 ioctl 4018620d 200000004a80 returned -16
[  138.254327][ T8706] openvswitch: netlink: Unknown nsh attribute 0
[  138.291741][   T40] audit: type=1400 audit(1773186302.764:574): avc:  denied  { load_policy } for  pid=8707 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  138.291944][ T8708] SELinux:  policydb version -1110538504 does not match my version range 15-35
[  138.302460][ T8708] SELinux: failed to load policy
[  138.367711][   T40] audit: type=1400 audit(1773186302.844:575): avc:  denied  { audit_write } for  pid=8720 comm="syz.2.898" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  138.379499][   T40] audit: type=1400 audit(1773186302.854:576): avc:  denied  { create } for  pid=8720 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  138.386238][   T40] audit: type=1400 audit(1773186302.854:577): avc:  denied  { getopt } for  pid=8720 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  138.434002][ T8725] binder: 8724:8725 ioctl ae01 1d returned -22
[  138.437513][ T8726] binder: 8724:8726 ioctl c0306201 2000000004c0 returned -22
usb_generic_handle_packet: ctrl buffer too small (16384 > 4096)
[  138.578171][ T8733] fuse: Unknown parameter '000000000000000000000030x0000000000000003'
[  138.680912][   T40] audit: type=1400 audit(1773186303.154:578): avc:  denied  { ioctl } for  pid=8744 comm="syz.2.907" path="socket:[24531]" dev="sockfs" ino=24531 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.722601][ T8745] orangefs: client-core tried to read wrong size
[  138.726103][ T8745] orangefs_devreq_open: device cannot be opened in blocking mode
[  138.774060][ T8753] binder: 8752:8753 ioctl c0306201 2000000003c0 returned -14
[  138.819955][ T8756] netlink: 'syz.4.910': attribute type 8 has an invalid length.
[  139.186726][ T8771] binder: 8770:8771 ioctl c0306201 2000000001c0 returned -14
[  139.190636][ T8771] binder: 8770:8771 ioctl c0306201 200000000180 returned -14
[  139.366109][   T29] usb 6-1: new low-speed USB device number 30 using dummy_hcd
[  139.520018][   T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.524498][   T29] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  139.530150][   T29] usb 6-1: config 0 interface 0 has no altsetting 0
[  139.532877][   T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  139.536983][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.542749][   T29] usb 6-1: config 0 descriptor??
[  139.553518][   T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  139.664736][ T8780] orangefs: client-core tried to read wrong size
[  139.669137][ T8780] orangefs_devreq_open: device cannot be opened in blocking mode
[  139.799486][ T8786] CIFS mount error: No usable UNC path provided in device string!
[  139.799486][ T8786] 
[  139.803883][ T8786] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  140.178009][ T8805] orangefs_devreq_open: device cannot be opened in blocking mode
[  140.228856][ T8812] CIFS mount error: No usable UNC path provided in device string!
[  140.228856][ T8812] 
[  140.233895][ T8812] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  140.613856][ T8824] dvmrp0: entered allmulticast mode
[  140.616137][   T29] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[  140.778102][   T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.781369][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  140.785027][   T29] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  140.788179][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.792316][   T29] usb 7-1: config 0 descriptor??
[  140.799004][   T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  140.801201][   T29] dvb-usb: bulk message failed: -22 (3/0)
[  140.810564][   T29] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  140.814759][   T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  140.817742][   T29] usb 7-1: media controller created
[  140.820223][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  140.829217][   T29] dvb-usb: bulk message failed: -22 (6/0)
[  140.834229][   T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  140.838809][   T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input27
[  140.845437][   T29] dvb-usb: schedule remote query interval to 150 msecs.
[  140.848203][   T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  140.997753][ T5970] usb 7-1: USB disconnect, device number 31
[  141.015735][ T5970] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  141.627949][ T8832] orangefs_devreq_open: device cannot be opened in blocking mode
[  141.869183][ T8840] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  141.934144][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  141.934162][   T40] audit: type=1400 audit(1773186306.404:585): avc:  denied  { setopt } for  pid=8842 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  141.947754][   T40] audit: type=1400 audit(1773186306.404:586): avc:  denied  { accept } for  pid=8842 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  141.957613][   T40] audit: type=1400 audit(1773186306.404:587): avc:  denied  { write } for  pid=8842 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  141.986974][ T5929] Bluetooth: hci3: unexpected event for opcode 0x051c
[  142.035922][ T8850] __nla_validate_parse: 11 callbacks suppressed
[  142.035934][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'.
[  142.042916][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'.
[  142.046033][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'.
[  142.050407][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'.
[  142.115155][ T8852] binder: 8851:8852 ioctl c0306201 2000000003c0 returned -14
[  142.119712][ T8852] binder: BINDER_SET_CONTEXT_MGR already set
[  142.122548][ T8852] binder: 8851:8852 ioctl 4018620d 2000000002c0 returned -16
[  142.144027][ T6368] usb 6-1: USB disconnect, device number 30
[  142.183494][ T8855] binder: 8853:8855 ioctl c0306201 2000000003c0 returned -14
[  142.223715][   T40] audit: type=1400 audit(1773186306.694:588): avc:  denied  { ioctl } for  pid=8857 comm="syz.4.948" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  142.232887][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'.
[  142.278017][ T8865] binder: BINDER_SET_CONTEXT_MGR already set
[  142.280058][ T8865] binder: 8863:8865 ioctl 4018620d 200000000100 returned -16
[  142.282971][ T8865] binder: 8863:8865 ioctl c018620c 200000000040 returned -1
[  142.287352][ T8865] binder: BINDER_SET_CONTEXT_MGR already set
[  142.289391][ T8865] binder: 8863:8865 ioctl 4018620d 200000004a80 returned -16
[  142.347039][ T8869] fuse: Unknown parameter 'd'
[  143.195458][ T8879] tipc: Started in network mode
[  143.200461][ T8879] tipc: Node identity 0900000000000000000000000000008, cluster identity 4711
[  143.375248][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'.
[  143.381462][ T8890] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.391266][ T8890] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.484959][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.961'.
[  143.497312][ T8890] block nbd4: NBD_DISCONNECT
[  143.534335][ T8901] binder: 8900:8901 unknown command 0
[  143.536359][ T8901] binder: 8900:8901 ioctl c0306201 200000000640 returned -22
[  143.539267][ T8901] binder: 8900:8901 ioctl 80045400 2000000000c0 returned -22
[  143.596092][ T8882] block nbd4: Disconnected due to user request.
[  143.600109][ T8882] block nbd4: shutting down sockets
[  143.744860][ T8909] FAULT_INJECTION: forcing a failure.
[  143.744860][ T8909] name failslab, interval 1, probability 0, space 0, times 0
[  143.749380][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.4.967 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  143.749397][ T8909] Tainted: [L]=SOFTLOCKUP
[  143.749401][ T8909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  143.749407][ T8909] Call Trace:
[  143.749411][ T8909]  <TASK>
[  143.749415][ T8909]  dump_stack_lvl+0x100/0x190
[  143.749436][ T8909]  should_fail_ex.cold+0x5/0xa
[  143.749449][ T8909]  ? tomoyo_realpath_from_path+0xb6/0x690
[  143.749464][ T8909]  should_failslab+0xc2/0x120
[  143.749474][ T8909]  __kmalloc_noprof+0xe0/0x850
[  143.749492][ T8909]  tomoyo_realpath_from_path+0xb6/0x690
[  143.749508][ T8909]  tomoyo_path_number_perm+0x23c/0x580
[  143.749519][ T8909]  ? tomoyo_path_number_perm+0x22e/0x580
[  143.749531][ T8909]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  143.749556][ T8909]  ? find_held_lock+0x2b/0x80
[  143.749570][ T8909]  ? __fget_files+0x215/0x3d0
[  143.749580][ T8909]  ? hook_file_ioctl_common+0x146/0x410
[  143.749598][ T8909]  ? __fget_files+0x21f/0x3d0
[  143.749610][ T8909]  security_file_ioctl+0xd3/0x230
[  143.749624][ T8909]  __x64_sys_ioctl+0xb7/0x210
[  143.749640][ T8909]  do_syscall_64+0x106/0xf80
[  143.749668][ T8909]  ? clear_bhb_loop+0x40/0x90
[  143.749681][ T8909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.749692][ T8909] RIP: 0033:0x7f8e02f9c799
[  143.749701][ T8909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.749711][ T8909] RSP: 002b:00007f8e03d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  143.749722][ T8909] RAX: ffffffffffffffda RBX: 00007f8e03215fa0 RCX: 00007f8e02f9c799
[  143.749729][ T8909] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  143.749735][ T8909] RBP: 00007f8e03d8a090 R08: 0000000000000000 R09: 0000000000000000
[  143.749741][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.749747][ T8909] R13: 00007f8e03216038 R14: 00007f8e03215fa0 R15: 00007ffe02987498
[  143.749761][ T8909]  </TASK>
[  143.750401][ T8909] ERROR: Out of memory at tomoyo_realpath_from_path.
[  144.146103][ T6368] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  144.276177][ T6368] usb 6-1: device descriptor read/64, error -71
[  144.516120][ T6368] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  144.646102][ T6368] usb 6-1: device descriptor read/64, error -71
[  144.756485][ T6368] usb usb6-port1: attempt power cycle
[  144.817018][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'.
[  144.892779][ T8932] binder: 8931:8932 ioctl 4018620d 0 returned -22
[  145.096192][ T6368] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  145.117668][ T6368] usb 6-1: device descriptor read/8, error -71
[  145.126116][ T7155] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  145.286075][ T7155] usb 7-1: Using ep0 maxpacket: 16
[  145.291335][ T7155] usb 7-1: unable to read config index 0 descriptor/start: -61
[  145.294626][ T7155] usb 7-1: can't read configurations, error -61
[  145.356095][ T6368] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  145.377566][ T6368] usb 6-1: device descriptor read/8, error -71
[  145.426609][ T7155] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  145.487460][ T6368] usb usb6-port1: unable to enumerate USB device
[  145.586116][ T7155] usb 7-1: Using ep0 maxpacket: 16
[  145.590055][ T7155] usb 7-1: unable to read config index 0 descriptor/start: -61
[  145.592722][ T7155] usb 7-1: can't read configurations, error -61
[  145.595062][ T7155] usb usb7-port1: attempt power cycle
[  145.655721][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'.
[  145.707622][ T8952] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  145.894327][ T8964] bond1: entered promiscuous mode
[  145.900678][ T8964] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.905237][ T8964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8964 comm=syz.3.985
[  145.909767][ T8964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8964 comm=syz.3.985
[  145.913917][ T8964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8964 comm=syz.3.985
[  145.918035][ T8964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8964 comm=syz.3.985
[  145.921818][ T8964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8964 comm=syz.3.985
[  145.925755][ T8964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8964 comm=syz.3.985
[  145.966306][ T7155] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  145.997946][ T7155] usb 7-1: Using ep0 maxpacket: 16
[  146.001421][ T5929] Bluetooth: hci2: unexpected event for opcode 0x100a
[  146.003988][ T7155] usb 7-1: unable to read config index 0 descriptor/start: -61
[  146.007075][ T7155] usb 7-1: can't read configurations, error -61
[  146.136129][ T7155] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  146.157160][ T7155] usb 7-1: Using ep0 maxpacket: 16
[  146.160358][ T7155] usb 7-1: unable to read config index 0 descriptor/start: -61
[  146.163153][ T7155] usb 7-1: can't read configurations, error -61
[  146.166519][ T7155] usb usb7-port1: unable to enumerate USB device
[  146.570557][   T40] audit: type=1400 audit(1773186311.044:589): avc:  denied  { setopt } for  pid=8978 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  146.900357][ T8982] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  147.365517][ T8996] binder: BINDER_SET_CONTEXT_MGR already set
[  147.367716][ T8996] binder: 8995:8996 ioctl 4018620d 200000000100 returned -16
[  147.371822][ T8996] binder: BINDER_SET_CONTEXT_MGR already set
[  147.373894][ T8996] binder: 8995:8996 ioctl 4018620d 200000004a80 returned -16
[  147.432598][ T9000] syzkaller0: entered promiscuous mode
[  147.434424][ T9000] syzkaller0: entered allmulticast mode
[  147.441091][ T9000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.446589][ T8999] tipc: Resetting bearer <eth:syzkaller0>
[  147.454820][ T8999] tipc: Disabling bearer <eth:syzkaller0>
[  147.458224][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'.
[  147.517296][   T40] audit: type=1400 audit(1773186311.994:590): avc:  denied  { mount } for  pid=9001 comm="syz.4.999" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  147.540214][   T40] audit: type=1400 audit(1773186312.014:591): avc:  denied  { unmount } for  pid=8032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  147.563650][   T40] audit: type=1400 audit(1773186312.034:592): avc:  denied  { setopt } for  pid=9006 comm="syz.4.1001" lport=52511 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  147.651146][ T9011] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  147.774411][ T9013] CIFS mount error: No usable UNC path provided in device string!
[  147.774411][ T9013] 
[  147.778364][ T9013] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  147.782715][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'.
[  147.847977][ T9017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13348 sclass=netlink_route_socket pid=9017 comm=syz.3.1005
[  147.887884][ T9019] netlink: 'syz.3.1006': attribute type 1 has an invalid length.
[  147.890530][ T9019] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1006'.
[  147.907492][   T40] audit: type=1400 audit(1773186312.384:593): avc:  denied  { mount } for  pid=9021 comm="syz.2.1007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  147.916887][   T40] audit: type=1400 audit(1773186312.384:594): avc:  denied  { remount } for  pid=9021 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  147.925331][   T40] audit: type=1400 audit(1773186312.384:595): avc:  denied  { read } for  pid=9021 comm="syz.2.1007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  147.934808][   T40] audit: type=1400 audit(1773186312.384:596): avc:  denied  { open } for  pid=9021 comm="syz.2.1007" path="/236/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  147.945028][   T40] audit: type=1400 audit(1773186312.414:597): avc:  denied  { ioctl } for  pid=9024 comm="syz.3.1008" path="socket:[28114]" dev="sockfs" ino=28114 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  148.034537][   T40] audit: type=1400 audit(1773186312.504:598): avc:  denied  { connect } for  pid=9021 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  148.280586][   T40] audit: type=1400 audit(1773186312.754:599): avc:  denied  { unmount } for  pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  148.305020][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'.
[  148.690641][ T5929] Bluetooth: hci3: unexpected event for opcode 0x201b
[  148.934835][ T9066] openvswitch: netlink: Duplicate key (type 6).
[  148.948306][ T9066] bond1: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms
[  148.951207][ T9066] bond1: entered allmulticast mode
[  148.954968][ T9066] bond1: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms
[  149.017101][   T50] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  149.166056][   T50] usb 9-1: Using ep0 maxpacket: 32
[  149.169153][   T50] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  149.171869][   T50] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  149.174698][   T50] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  149.177707][   T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  149.180783][   T50] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  149.183856][   T50] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102
[  149.187189][   T50] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  149.191393][   T50] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  149.194310][   T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.198825][   T50] usb 9-1: config 0 descriptor??
[  149.201001][ T9064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  149.409603][   T50] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  149.606698][    C0] usblp0: nonzero read bulk status received: -71
[  149.608902][ T9064] usblp0: error -71 reading from printer
[  149.612377][    C0] usblp0: nonzero read bulk status received: -71
[  149.662711][   T50] usb 9-1: USB disconnect, device number 13
[  149.667567][   T50] usblp0: removed
[  149.820462][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1026'.
[  149.938190][ T9087] netlink: 'syz.2.1027': attribute type 10 has an invalid length.
[  149.942224][ T9087] team0: Device vxcan1 is of different type
[  150.207836][ T9092] binder: 9090:9092 ioctl c0306201 2000000003c0 returned -14
[  150.272079][ T9097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.274681][ T9097] syzkaller0: mtu less than device minimum
[  150.279233][ T9096] tipc: Disabling bearer <eth:syzkaller0>
usb_generic_handle_packet: ctrl buffer too small (16384 > 4096)
[  150.527105][ T9112] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1036'.
[  150.818173][ T9126] xt_hashlimit: size too large, truncated to 1048576
[  150.902115][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'.
[  151.384469][ T9149] binder: BINDER_SET_CONTEXT_MGR already set
[  151.387502][ T9149] binder: 9148:9149 ioctl 4018620d 200000004a80 returned -16
[  151.448088][ T9153] syzkaller0: entered promiscuous mode
[  151.449915][ T9153] syzkaller0: entered allmulticast mode
[  151.454454][ T9153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.457583][ T9152] tipc: Resetting bearer <eth:syzkaller0>
[  151.466399][ T9152] tipc: Disabling bearer <eth:syzkaller0>
[  151.564394][ T9155] netlink: 'syz.4.1051': attribute type 1 has an invalid length.
[  151.618800][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'.
[  151.694014][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'.
[  151.761455][ T9163] nfs: Unknown parameter 'fuse'
[  151.976252][ T5999] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  152.106188][   T50] usb 9-1: new low-speed USB device number 14 using dummy_hcd
[  152.137585][ T5999] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.141236][ T5999] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  152.146041][ T5999] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  152.149418][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.152945][ T5999] usb 6-1: Product: syz
[  152.154846][ T5999] usb 6-1: Manufacturer: syz
[  152.156992][ T5999] usb 6-1: SerialNumber: syz
[  152.164620][ T5999] cdc_mbim 6-1:1.0: skipping garbage
[  152.267818][   T50] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  152.271472][   T50] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.274748][   T50] usb 9-1: config 0 interface 0 has no altsetting 0
[  152.277034][   T50] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  152.279974][   T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.284400][   T50] usb 9-1: config 0 descriptor??
[  152.326114][ T6368] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  152.407525][ T9161] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  152.476073][ T6368] usb 7-1: Using ep0 maxpacket: 16
[  152.479938][ T6368] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.483662][ T6368] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.488303][ T6368] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  152.491878][ T6368] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  152.495841][ T6368] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.502003][ T6368] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  152.505394][ T6368] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  152.508780][ T6368] usb 7-1: Manufacturer: syz
[  152.512087][ T6368] usb 7-1: config 0 descriptor??
[  152.697909][   T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  152.701153][   T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  152.704250][   T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  152.707439][   T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  152.709948][   T50] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  152.712640][   T50] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  152.766049][ T6368] rc_core: IR keymap rc-hauppauge not found
[  152.768559][ T6368] Registered IR keymap rc-empty
[  152.770869][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.796208][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.816809][ T6368] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0
[  152.822619][ T6368] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input29
[  152.830045][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.847198][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.876142][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.899019][  T832] usb 9-1: USB disconnect, device number 14
[  152.906680][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.926125][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.946202][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.966165][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  152.986105][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  153.006131][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  153.012456][ T9161] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  153.015268][ T5999] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  153.017765][ T5999] cdc_mbim 6-1:1.0: setting rx_max = 2048
[  153.026306][ T6368] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  153.047782][ T6368] mceusb 7-1:0.0: Registered 楬 with mce emulator interface version 1
[  153.050983][ T6368] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  153.056288][ T6368] usb 7-1: USB disconnect, device number 36
[  153.215744][ T5999] cdc_mbim 6-1:1.0: setting tx_max = 184
[  153.219302][ T5999] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  153.223031][ T5999] wwan wwan0: port wwan0mbim0 attached
[  153.228708][ T5999] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 2a:9f:c5:bb:53:71
[  153.374941][ T5639] 8021q: adding VLAN 0 to HW filter on device wwan0
[  153.436712][    C2] wdm_int_callback: 398 callbacks suppressed
[  153.436727][    C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  153.437245][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.439036][    C2] wdm_int_callback: 398 callbacks suppressed
[  153.439048][    C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  153.439235][    C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  153.441600][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.444778][    C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  153.458627][    C2] cdc_mbim 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  153.519724][ T9197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=9197 comm=syz.2.1061
[  153.527524][ T9197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1061'.
[  153.530959][   T50] usb 6-1: USB disconnect, device number 35
[  153.534143][   T50] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  153.622167][   T50] wwan wwan0: port wwan0mbim0 disconnected
[  153.685697][   T40] kauditd_printk_skb: 13 callbacks suppressed
[  153.685708][   T40] audit: type=1400 audit(1773186318.154:613): avc:  denied  { checkpoint_restore } for  pid=9215 comm="syz.2.1065" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  154.969612][ T9251] syzkaller0: entered promiscuous mode
[  154.971437][ T9251] syzkaller0: entered allmulticast mode
[  155.105322][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1076'.
[  155.408527][   T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  155.548727][   T10] usb 7-1: device descriptor read/64, error -71
[  155.798351][   T10] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  155.914288][ T9264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.917449][ T9264] syzkaller0: mtu less than device minimum
[  155.922932][ T9263] tipc: Disabling bearer <eth:syzkaller0>
[  155.926261][   T40] audit: type=1400 audit(1773186320.404:614): avc:  denied  { wake_alarm } for  pid=9265 comm="syz.4.1078" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  155.936101][   T10] usb 7-1: device descriptor read/64, error -71
[  156.022471][   T40] audit: type=1400 audit(1773186320.494:615): avc:  denied  { append } for  pid=9274 comm="syz.4.1082" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  156.046320][   T10] usb usb7-port1: attempt power cycle
[  156.076687][ T9277] syzkaller0: entered promiscuous mode
[  156.078999][ T9277] syzkaller0: entered allmulticast mode
[  156.300998][ T9282] binder: BINDER_SET_CONTEXT_MGR already set
[  156.303443][ T9282] binder: 9281:9282 ioctl 4018620d 200000000100 returned -16
[  156.308812][ T9282] binder: BINDER_SET_CONTEXT_MGR already set
[  156.311214][ T9282] binder: 9281:9282 ioctl 4018620d 200000004a80 returned -16
[  156.347021][   T50] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  156.396396][   T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  156.427036][   T10] usb 7-1: device descriptor read/8, error -71
[  156.508069][   T50] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.511227][   T50] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  156.514530][   T50] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  156.517508][   T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.521444][   T50] usb 9-1: config 0 descriptor??
[  156.526020][   T50] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  156.528127][   T50] dvb-usb: bulk message failed: -22 (3/0)
[  156.532087][   T50] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  156.535204][   T50] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  156.537767][   T50] usb 9-1: media controller created
[  156.540071][   T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  156.546537][   T50] dvb-usb: bulk message failed: -22 (6/0)
[  156.548467][   T50] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  156.552025][   T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input30
[  156.558000][   T50] dvb-usb: schedule remote query interval to 150 msecs.
[  156.560271][   T50] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  156.676103][   T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  156.696118][   T50] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  156.696438][   T10] usb 7-1: device descriptor read/8, error -71
[  156.716536][ T5999] dvb-usb: bulk message failed: -22 (1/0)
[  156.718487][ T5999] dvb-usb: error while querying for an remote control event.
[  156.730924][ T6368] usb 9-1: USB disconnect, device number 15
[  156.748338][ T6368] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  156.816307][   T10] usb usb7-port1: unable to enumerate USB device
[  156.846778][   T50] usb 6-1: too many configurations: 82, using maximum allowed: 8
[  156.851229][   T50] usb 6-1: config index 0 descriptor too short (expected 32300, got 72)
[  156.855903][   T50] usb 6-1: config index 1 descriptor too short (expected 32300, got 72)
[  156.859554][   T50] usb 6-1: config index 2 descriptor too short (expected 32300, got 72)
[  156.863001][   T50] usb 6-1: config index 3 descriptor too short (expected 32300, got 72)
[  156.866770][   T50] usb 6-1: config index 4 descriptor too short (expected 32300, got 72)
[  156.871308][   T50] usb 6-1: config index 5 descriptor too short (expected 32300, got 72)
[  156.876585][   T50] usb 6-1: config index 6 descriptor too short (expected 32300, got 72)
[  156.879991][   T50] usb 6-1: config index 7 descriptor too short (expected 32300, got 72)
[  156.884229][   T50] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  156.887645][   T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.891124][   T50] usb 6-1: Product: syz
[  156.892983][   T50] usb 6-1: Manufacturer: syz
[  156.895097][   T50] usb 6-1: SerialNumber: syz
[  156.904955][   T50] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  156.926812][   T40] audit: type=1400 audit(1773186321.404:616): avc:  denied  { firmware_load } for  pid=5999 comm="kworker/3:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  156.933303][ T5999] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  157.195507][ T9288] syzkaller0: entered promiscuous mode
[  157.197932][ T9288] syzkaller0: entered allmulticast mode
[  157.204069][ T9288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.216354][ T9287] tipc: Resetting bearer <eth:syzkaller0>
[  157.229214][ T9287] tipc: Disabling bearer <eth:syzkaller0>
[  157.286618][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'.
[  157.290112][ T9292] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1088'.
[  157.292950][ T9291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'.
[  157.297175][ T9291] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1088'.
[  157.298213][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1088'.
[  157.303881][ T9292] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1088'.
[  157.323732][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1088'.
[  157.333471][ T9292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1088'.
[  157.722779][ T9308] netlink: 'syz.4.1094': attribute type 1 has an invalid length.
[  157.750936][ T9308] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.794151][ T9308] bond1: (slave veth3): Enslaving as an active interface with a down link
[  157.806477][ T9308] bond1: (slave dummy0): making interface the new active one
[  157.810099][ T9308] dummy0: entered promiscuous mode
[  157.812211][ T9308] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  157.816558][ T9308] netlink: 'syz.4.1094': attribute type 10 has an invalid length.
[  157.820470][ T9308] bond1: (slave dummy0): Releasing active interface
[  157.986473][ T5999] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  157.991189][ T5999] ath9k_htc: Failed to initialize the device
[  158.013451][ T5999] usb 6-1: ath9k_htc: USB layer deinitialized
[  158.076585][ T5970] usb 9-1: new low-speed USB device number 16 using dummy_hcd
[  158.227740][ T5970] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  158.231453][ T5970] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.234831][ T5970] usb 9-1: config 0 interface 0 has no altsetting 0
[  158.238432][ T5970] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  158.241371][ T5970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.249011][ T5970] usb 9-1: config 0 descriptor??
[  158.506172][ T5980] usb 7-1: new low-speed USB device number 41 using dummy_hcd
[  158.613077][   T29] usb 6-1: USB disconnect, device number 36
[  158.658763][ T5980] usb 7-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  158.663558][ T5970] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  158.676303][ T5980] usb 7-1: config 0 interface 0 has no altsetting 0
[  158.679172][ T5980] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  158.682993][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.686472][ T5970] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  158.689140][ T5970] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  158.692137][ T5970] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  158.695074][ T5970] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0
[  158.707781][ T5970] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  158.714274][ T5980] usb 7-1: config 0 descriptor??
[  158.728642][ T5980] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  158.859758][   T29] usb 9-1: USB disconnect, device number 16
[  158.873367][ T9319] CIFS mount error: No usable UNC path provided in device string!
[  158.873367][ T9319] 
[  158.876537][ T9319] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  158.880387][ T9319] __nla_validate_parse: 1 callbacks suppressed
[  158.880396][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'.
[  159.156088][ T5999] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  159.307895][ T5999] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.311496][ T5999] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  159.317593][ T5999] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.320565][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.323228][ T5999] usb 6-1: Product: syz
[  159.324615][ T5999] usb 6-1: Manufacturer: syz
[  159.326280][ T5999] usb 6-1: SerialNumber: syz
[  159.331267][ T5999] cdc_mbim 6-1:1.0: skipping garbage
[  159.523580][ T9327] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  159.531540][ T9321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.737017][   T40] audit: type=1400 audit(1773186324.214:617): avc:  denied  { create } for  pid=9320 comm="syz.1.1099" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  159.765481][ T9340] FAULT_INJECTION: forcing a failure.
[  159.765481][ T9340] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  159.771498][ T9340] CPU: 1 UID: 0 PID: 9340 Comm: syz.4.1103 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  159.771525][ T9340] Tainted: [L]=SOFTLOCKUP
[  159.771531][ T9340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  159.771540][ T9340] Call Trace:
[  159.771546][ T9340]  <TASK>
[  159.771552][ T9340]  dump_stack_lvl+0x100/0x190
[  159.771596][ T9340]  should_fail_ex.cold+0x5/0xa
[  159.771613][ T9340]  ? fs_reclaim_acquire+0x70/0x100
[  159.771634][ T9340]  should_fail_alloc_page+0xeb/0x140
[  159.771659][ T9340]  prepare_alloc_pages+0x1f0/0x5f0
[  159.771678][ T9340]  ? stack_trace_save+0x8e/0xc0
[  159.771701][ T9340]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  159.771725][ T9340]  ? register_lock_class+0x40/0x560
[  159.771743][ T9340]  ? find_held_lock+0x2b/0x80
[  159.771761][ T9340]  ? ima_match_policy+0x8b8/0x2340
[  159.771792][ T9340]  ? ima_match_policy+0x8b8/0x2340
[  159.771816][ T9340]  ? __lock_acquire+0x4a5/0x2630
[  159.771843][ T9340]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  159.771882][ T9340]  ? __lock_acquire+0x4a5/0x2630
[  159.771905][ T9340]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  159.771929][ T9340]  ? policy_nodemask+0xed/0x4f0
[  159.771947][ T9340]  alloc_pages_mpol+0x1fb/0x550
[  159.771966][ T9340]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  159.771982][ T9340]  ? find_held_lock+0x2b/0x80
[  159.772002][ T9340]  ? filemap_get_entry+0x1a7/0x3b0
[  159.772025][ T9340]  ? filemap_get_entry+0x1a7/0x3b0
[  159.772050][ T9340]  folio_alloc_noprof+0x22/0x330
[  159.772070][ T9340]  filemap_alloc_folio_noprof.part.0+0x377/0x450
[  159.772088][ T9340]  ? __pfx_filemap_get_entry+0x10/0x10
[  159.772132][ T9340]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  159.772161][ T9340]  __filemap_get_folio_mpol+0x6a4/0xe70
[  159.772197][ T9340]  iomap_write_begin+0x15bd/0x2340
[  159.772223][ T9340]  ? is_bpf_text_address+0x94/0x1a0
[  159.772247][ T9340]  ? kernel_text_address+0x8d/0x100
[  159.772266][ T9340]  ? __pfx_iomap_write_begin+0x10/0x10
[  159.772284][ T9340]  ? fault_in_readable+0x14c/0x190
[  159.772308][ T9340]  ? __pfx_fault_in_readable+0x10/0x10
[  159.772332][ T9340]  ? rcu_is_cpu_rrupt_from_idle+0x1c8/0x270
[  159.772352][ T9340]  ? I_BDEV+0xd/0x20
[  159.772372][ T9340]  ? inode_to_bdi+0x9e/0x160
[  159.772403][ T9340]  iomap_file_buffered_write+0x48b/0xac0
[  159.772431][ T9340]  ? __pfx_iomap_file_buffered_write+0x10/0x10
[  159.772456][ T9340]  ? __lock_acquire+0x4a5/0x2630
[  159.772497][ T9340]  ? __pfx_down_read+0x10/0x10
[  159.772528][ T9340]  ? avc_policy_seqno+0x9/0x20
[  159.772550][ T9340]  ? file_update_time_flags+0x373/0x500
[  159.772575][ T9340]  blkdev_write_iter+0x575/0xd70
[  159.772600][ T9340]  vfs_write+0x6ac/0x1070
[  159.772624][ T9340]  ? __pfx_blkdev_write_iter+0x10/0x10
[  159.772645][ T9340]  ? __pfx_vfs_write+0x10/0x10
[  159.772666][ T9340]  ? find_held_lock+0x2b/0x80
[  159.772702][ T9340]  ksys_write+0x12a/0x250
[  159.772727][ T9340]  ? __pfx_ksys_write+0x10/0x10
[  159.772758][ T9340]  do_syscall_64+0x106/0xf80
[  159.772775][ T9340]  ? clear_bhb_loop+0x40/0x90
[  159.772796][ T9340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.772812][ T9340] RIP: 0033:0x7f8e02f9c799
[  159.772828][ T9340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.772843][ T9340] RSP: 002b:00007f8e03d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  159.772861][ T9340] RAX: ffffffffffffffda RBX: 00007f8e03215fa0 RCX: 00007f8e02f9c799
[  159.772871][ T9340] RDX: 0000000000000018 RSI: 0000200000000200 RDI: 0000000000000004
[  159.772880][ T9340] RBP: 00007f8e03d8a090 R08: 0000000000000000 R09: 0000000000000000
[  159.772891][ T9340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.772900][ T9340] R13: 00007f8e03216038 R14: 00007f8e03215fa0 R15: 00007ffe02987498
[  159.772922][ T9340]  </TASK>
[  159.953923][ T9343] netlink: 'syz.4.1104': attribute type 1 has an invalid length.
[  159.957559][ T9343] netlink: 'syz.4.1104': attribute type 2 has an invalid length.
[  160.149485][ T9321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  160.152273][ T5999] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  160.154790][ T5999] cdc_mbim 6-1:1.0: setting rx_max = 2048
[  160.157185][   T40] audit: type=1400 audit(1773186324.634:618): avc:  denied  { setopt } for  pid=9348 comm="syz.3.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  160.166176][   T40] audit: type=1400 audit(1773186324.644:619): avc:  denied  { ioctl } for  pid=9348 comm="syz.3.1107" path="socket:[31103]" dev="sockfs" ino=31103 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  160.355501][ T5999] cdc_mbim 6-1:1.0: setting tx_max = 184
[  160.358581][ T5999] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  160.363740][ T5999] wwan wwan0: port wwan0mbim0 attached
[  160.369563][ T5999] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 6a:1f:cb:12:e8:86
[  160.556600][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  160.559439][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  160.564692][ T5639] 8021q: adding VLAN 0 to HW filter on device wwan0
[  160.566396][ T9180] usb 6-1: USB disconnect, device number 37
[  160.574697][ T9180] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  160.653212][ T9180] wwan wwan0: port wwan0mbim0 disconnected
[  160.862442][ T9373] binder: 9372:9373 ioctl c0306201 2000000003c0 returned -14
[  160.973052][ T9381] fuse: Unknown parameter 'ÿÿ'
[  161.115589][ T9180] usb 7-1: USB disconnect, device number 41
[  161.115638][ T9395] binder: BINDER_SET_CONTEXT_MGR already set
[  161.120736][ T9395] binder: 9394:9395 ioctl 4018620d 200000000100 returned -16
[  161.121062][ T9393] binder: 9392:9393 unknown command 0
[  161.133556][ T9393] binder: 9392:9393 ioctl c0306201 2000000001c0 returned -22
[  161.134540][ T9395] binder: 9394:9395 ioctl 5000940a 200000001040 returned -22
[  161.142725][   T40] audit: type=1400 audit(1773186325.614:620): avc:  denied  { bind } for  pid=9394 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  161.144039][ T9395] binder: BINDER_SET_CONTEXT_MGR already set
[  161.154341][ T9395] binder: 9394:9395 ioctl 4018620d 200000004a80 returned -16
[  161.208638][ T9407] CIFS mount error: No usable UNC path provided in device string!
[  161.208638][ T9407] 
[  161.211938][ T9407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  161.218716][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'.
[  161.264863][   T40] audit: type=1400 audit(1773186325.734:621): avc:  denied  { write } for  pid=9408 comm="syz.4.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  161.436088][ T7155] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  161.586356][ T7155] usb 6-1: Using ep0 maxpacket: 32
[  161.589705][ T7155] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  161.593045][ T7155] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  161.595942][ T7155] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  161.599033][ T7155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  161.602234][ T7155] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  161.605482][ T7155] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102
[  161.608740][ T7155] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  161.612876][ T7155] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  161.615772][ T7155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.620014][ T7155] usb 6-1: config 0 descriptor??
[  161.622276][ T9405] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  161.706124][ T5970] usb 9-1: new low-speed USB device number 17 using dummy_hcd
[  161.827895][ T7155] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  161.857369][ T5970] usb 9-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  161.861681][ T5970] usb 9-1: config 0 interface 0 has no altsetting 0
[  161.863845][ T5970] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  161.866987][ T5970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.871190][ T5970] usb 9-1: config 0 descriptor??
[  161.875371][ T5970] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  162.023829][ T9436] openvswitch: netlink: Duplicate key (type 6).
[  162.188327][   T40] audit: type=1400 audit(1773186326.664:622): avc:  denied  { read write } for  pid=9404 comm="syz.1.1119" name="lp0" dev="devtmpfs" ino=3265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  162.189023][    C0] usblp0: nonzero read bulk status received: -71
[  162.196911][   T40] audit: type=1400 audit(1773186326.664:623): avc:  denied  { open } for  pid=9404 comm="syz.1.1119" path="/dev/usb/lp0" dev="devtmpfs" ino=3265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  162.200200][ T9439] usblp0: error -71 reading from printer
[  162.211118][    C3] usblp0: nonzero read bulk status received: -71
[  162.536164][  T832] usb 7-1: new low-speed USB device number 42 using dummy_hcd
[  162.688170][  T832] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 65535, setting to 8
[  162.693001][  T832] usb 7-1: config 0 interface 0 has no altsetting 0
[  162.695812][  T832] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  162.699963][  T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.705355][  T832] usb 7-1: config 0 descriptor??
[  162.708707][ T9443] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  163.326320][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.330102][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.400586][  T832] usbhid 7-1:0.0: can't add hid device: -71
[  163.402643][  T832] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  163.406353][  T832] usb 7-1: USB disconnect, device number 42
[  163.932229][ T9449] CIFS mount error: No usable UNC path provided in device string!
[  163.932229][ T9449] 
[  163.936913][ T9449] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  163.943184][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'.
[  163.989848][   T40] audit: type=1400 audit(1773186328.464:624): avc:  denied  { name_bind } for  pid=9450 comm="syz.2.1130" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  164.206018][   T50] usb 6-1: USB disconnect, device number 38
[  164.209879][   T50] usblp0: removed
[  164.321018][ T9459] bridge3: the hash_elasticity option has been deprecated and is always 16
[  164.415163][ T9463] overlay: Unknown parameter 'mask'
[  164.418943][ T9463] overlayfs: invalid origin (0000)
[  164.426548][ T9180] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  164.456506][   T40] audit: type=1400 audit(1773186328.924:625): avc:  denied  { create } for  pid=9467 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  164.467136][   T40] audit: type=1400 audit(1773186328.944:626): avc:  denied  { bind } for  pid=9467 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  164.482888][   T50] usb 9-1: USB disconnect, device number 17
[  164.521707][ T9470] syzkaller0: entered promiscuous mode
[  164.523580][ T9470] syzkaller0: entered allmulticast mode
[  164.578032][ T9180] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.582143][ T9180] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  164.587754][ T9180] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  164.591543][ T9180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.594381][ T9180] usb 7-1: Product: syz
[  164.596261][ T9180] usb 7-1: Manufacturer: syz
[  164.598231][ T9180] usb 7-1: SerialNumber: syz
[  164.604389][ T9180] cdc_mbim 7-1:1.0: skipping garbage
[  164.803536][ T9454] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  165.106172][   T50] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  165.218650][ T9480] binder: BINDER_SET_CONTEXT_MGR already set
[  165.220794][ T9480] binder: 9479:9480 ioctl 4018620d 200000000100 returned -16
[  165.225269][ T9480] binder: BINDER_SET_CONTEXT_MGR already set
[  165.227642][ T9480] binder: 9479:9480 ioctl 4018620d 200000004a80 returned -16
[  165.259519][   T50] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.263325][   T50] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  165.267418][ T9482] binder: BINDER_SET_CONTEXT_MGR already set
[  165.269239][   T50] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  165.269502][ T9482] binder: 9481:9482 ioctl 4018620d 200000000100 returned -16
[  165.272477][   T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.277624][   T50] usb 9-1: Product: syz
[  165.282378][   T50] usb 9-1: Manufacturer: syz
[  165.283963][   T50] usb 9-1: SerialNumber: syz
[  165.289655][   T50] cdc_mbim 9-1:1.0: skipping garbage
[  165.315209][ T9482] binder: BINDER_SET_CONTEXT_MGR already set
[  165.317669][ T9482] binder: 9481:9482 ioctl 4018620d 200000004a80 returned -16
[  165.407959][ T9454] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  165.416139][ T9180] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  165.419009][ T9180] cdc_mbim 7-1:1.0: setting rx_max = 2048
[  165.441360][ T9487] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  165.490188][ T9478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  165.619678][ T9180] cdc_mbim 7-1:1.0: setting tx_max = 184
[  165.622924][ T9180] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[  165.626959][ T9180] wwan wwan0: port wwan0mbim0 attached
[  165.637013][ T9180] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, fa:b0:f1:06:dc:43
[  165.716049][ T5970] usb 6-1: new low-speed USB device number 39 using dummy_hcd
[  165.823144][    C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  165.825348][    C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  165.827606][    C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  165.829730][    C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  165.831820][    C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  165.834548][    C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  165.836994][    C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  165.839585][    C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  165.841605][    C3] cdc_mbim 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  165.847193][ T1327] usb 7-1: USB disconnect, device number 43
[  165.847885][ T5639] 8021q: adding VLAN 0 to HW filter on device wwan0
[  165.849711][ T1327] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  165.878862][ T5970] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  165.885026][ T5970] usb 6-1: config 0 interface 0 has no altsetting 0
[  165.888347][ T5970] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  165.892729][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.904900][ T5970] usb 6-1: config 0 descriptor??
[  165.912421][ T5970] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  165.949506][ T1327] wwan wwan0: port wwan0mbim0 disconnected
[  166.095376][ T9478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  166.098184][   T50] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  166.100864][   T50] cdc_mbim 9-1:1.0: setting rx_max = 2048
[  166.280254][ T9516] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  166.298930][   T50] cdc_mbim 9-1:1.0: setting tx_max = 184
[  166.303308][   T50] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device
[  166.308966][   T50] wwan wwan0: port wwan0mbim0 attached
[  166.315667][   T50] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 0a:e4:6e:98:68:35
[  166.487114][ T5639] 8021q: adding VLAN 0 to HW filter on device wwan0
[  166.490646][   T40] audit: type=1400 audit(1773186330.964:627): avc:  denied  { setattr } for  pid=9527 comm="syz.3.1148" name="file0" dev="9p" ino=78118973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  166.499866][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.500245][   T40] audit: type=1400 audit(1773186330.964:628): avc:  denied  { map } for  pid=9527 comm="syz.3.1148" path="socket:[30618]" dev="sockfs" ino=30618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  166.507777][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.513399][   T40] audit: type=1400 audit(1773186330.964:629): avc:  denied  { accept } for  pid=9527 comm="syz.3.1148" path="socket:[30618]" dev="sockfs" ino=30618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  166.873304][    C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71
[  166.875748][    C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes
[  166.878670][    C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71
[  166.881708][    C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes
[  166.883056][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.884715][    C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71
[  166.887483][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.890159][    C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes
[  166.895756][    C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71
[  166.898681][    C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes
[  166.901199][    C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71
[  166.904209][    C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes
[  166.907014][    C2] cdc_mbim 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  167.444671][   T40] audit: type=1400 audit(1773186331.914:630): avc:  denied  { read } for  pid=9546 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  167.571705][   T40] audit: type=1400 audit(1773186332.044:631): avc:  denied  { append } for  pid=9551 comm="syz.3.1151" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  167.612354][ T9554] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  167.614527][ T9554] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  167.619404][ T9554] vhci_hcd vhci_hcd.0: Device attached
[  167.886477][  T832] usb 44-1: SetAddress Request (2) to port 0
[  167.889423][  T832] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  167.946863][   T50] usb 9-1: USB disconnect, device number 18
[  167.953910][   T50] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  168.054047][   T50] wwan wwan0: port wwan0mbim0 disconnected
[  168.439151][ T9555] vhci_hcd: connection reset by peer
[  168.442699][   T12] vhci_hcd vhci_hcd.3: stop threads
[  168.444486][   T12] vhci_hcd vhci_hcd.3: release socket
[  168.448802][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  168.499736][ T5970] usb 6-1: USB disconnect, device number 39
[  172.946357][  T832] usb 44-1: device descriptor read/8, error -110
[  173.339582][  T832] usb usb44-port1: attempt power cycle
[  173.897243][  T832] usb usb44-port1: unable to enumerate USB device
[  179.507658][   T40] audit: type=1400 audit(1773186343.984:632): avc:  denied  { setopt } for  pid=9618 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  179.520133][   T40] audit: type=1400 audit(1773186343.994:633): avc:  denied  { accept } for  pid=9618 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  179.558164][   T40] audit: type=1400 audit(1773186344.034:634): avc:  denied  { bind } for  pid=9625 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  179.565094][   T40] audit: type=1400 audit(1773186344.034:635): avc:  denied  { append } for  pid=9625 comm="syz.4.1161" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  179.916186][ T6368] usb 7-1: new low-speed USB device number 44 using dummy_hcd
[  180.087608][ T6368] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  180.091302][ T6368] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.094631][ T6368] usb 7-1: config 0 interface 0 has no altsetting 0
[  180.097014][ T6368] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  180.100043][ T6368] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.113209][ T6368] usb 7-1: config 0 descriptor??
[  180.370330][ T9637] qnx4: no qnx4 filesystem (no root dir).
[  180.523261][ T6368] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[  180.526159][ T6368] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[  180.528546][ T6368] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[  180.531280][ T6368] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[  180.533902][ T6368] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[  180.537308][ T6368] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  180.664471][   T40] audit: type=1400 audit(1773186345.134:636): avc:  denied  { watch } for  pid=9650 comm="syz.3.1168" path="/218/file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  180.673547][   T40] audit: type=1400 audit(1773186345.134:637): avc:  denied  { watch } for  pid=9650 comm="syz.3.1168" path="/218" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  180.682100][   T40] audit: type=1400 audit(1773186345.134:638): avc:  denied  { watch_sb watch_reads } for  pid=9650 comm="syz.3.1168" path="/218/file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  180.725510][ T6368] usb 7-1: USB disconnect, device number 44
[  180.732631][ T9657] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.1169'.
[  180.737012][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'.
[  180.740571][ T9657] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1169'.
[  180.744296][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'.
[  180.749178][ T9657] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1169'.
[  180.752924][ T9657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1169'.
[  180.776500][ T7155] usb 9-1: new low-speed USB device number 19 using dummy_hcd
[  180.928070][ T7155] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.931837][ T7155] usb 9-1: config 0 interface 0 has no altsetting 0
[  180.934113][ T7155] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  180.937117][ T7155] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.941556][ T7155] usb 9-1: config 0 descriptor??
[  180.945891][ T7155] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  181.288642][   T40] audit: type=1400 audit(1773186345.764:639): avc:  denied  { execute } for  pid=9665 comm="syz.2.1172" path="/281/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=78118957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  181.412795][ T9668] CIFS mount error: No usable UNC path provided in device string!
[  181.412795][ T9668] 
[  181.415947][ T9668] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  181.422224][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1173'.
[  181.468958][ T9670] syzkaller0: entered promiscuous mode
[  181.471387][ T9670] syzkaller0: entered allmulticast mode
[  181.478169][ T9670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.481796][ T9669] tipc: Resetting bearer <eth:syzkaller0>
[  181.493199][ T9669] tipc: Disabling bearer <eth:syzkaller0>
[  181.852635][ T9689] CIFS mount error: No usable UNC path provided in device string!
[  181.852635][ T9689] 
[  181.856134][ T9689] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  181.859879][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'.
[  182.436098][ T9180] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  182.587500][ T9180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.591048][ T9180] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  182.596323][ T9180] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  182.599270][ T9180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.601908][ T9180] usb 6-1: Product: syz
[  182.603369][ T9180] usb 6-1: Manufacturer: syz
[  182.604938][ T9180] usb 6-1: SerialNumber: syz
[  182.609966][ T9180] cdc_mbim 6-1:1.0: skipping garbage
[  182.772081][   T40] audit: type=1400 audit(1773186347.244:640): avc:  denied  { connect } for  pid=9696 comm="syz.2.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  182.810456][ T9695] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  183.055094][ T9707] overlay: ./file0 is not a directory
[  183.087282][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'.
[  183.123356][ T9712] CIFS mount error: No usable UNC path provided in device string!
[  183.123356][ T9712] 
[  183.127697][ T9712] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  183.133203][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'.
[  183.415593][ T9695] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  183.419430][ T9180] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  183.421801][ T9180] cdc_mbim 6-1:1.0: setting rx_max = 2048
[  183.462168][   T40] audit: type=1400 audit(1773186347.934:641): avc:  denied  { write } for  pid=9727 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  183.574688][ T6012] usb 9-1: USB disconnect, device number 19
[  183.612870][ T9736] syzkaller0: entered promiscuous mode
[  183.615159][ T9736] syzkaller0: entered allmulticast mode
[  183.621487][ T9736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.622391][ T9180] cdc_mbim 6-1:1.0: setting tx_max = 184
[  183.625712][ T9735] tipc: Resetting bearer <eth:syzkaller0>
[  183.627124][ T9180] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  183.632194][ T9180] wwan wwan0: port wwan0mbim0 attached
[  183.637669][ T9738] CIFS mount error: No usable UNC path provided in device string!
[  183.637669][ T9738] 
[  183.641559][ T9735] tipc: Disabling bearer <eth:syzkaller0>
[  183.646043][ T9738] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  183.649366][ T9180] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, de:ea:e2:d6:a3:14
[  183.863506][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.866482][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.868803][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.870943][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.873231][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.875583][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.879782][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.882756][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.885643][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.888568][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.891033][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.891792][ T5639] 8021q: adding VLAN 0 to HW filter on device wwan0
[  183.893982][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.894206][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.894224][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.894439][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.894456][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.894666][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.911153][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  183.913358][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  183.915498][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  184.024486][ T9761] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  184.049555][ T6012] usb 6-1: USB disconnect, device number 40
[  184.062104][ T6012] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  184.148929][ T9761] bridge_slave_1: left allmulticast mode
[  184.150812][ T9761] bridge_slave_1: left promiscuous mode
[  184.152741][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.157545][ T9761] bridge_slave_0: left allmulticast mode
[  184.159878][ T9761] bridge_slave_0: left promiscuous mode
[  184.161761][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.167921][ T6012] wwan wwan0: port wwan0mbim0 disconnected
[  184.586150][ T7155] usb 7-1: new low-speed USB device number 45 using dummy_hcd
[  184.739344][ T7155] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.746063][ T7155] usb 7-1: config 0 interface 0 has no altsetting 0
[  184.749016][ T7155] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  184.752917][ T7155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.768898][ T7155] usb 7-1: config 0 descriptor??
[  184.775796][ T7155] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  184.813665][ T9789] netfs: Couldn't get user pages (rc=-14)
[  184.836569][ T6012] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  184.986138][ T6012] usb 6-1: Using ep0 maxpacket: 16
[  184.990518][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.994574][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  184.998546][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  185.002365][ T6012] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  185.006318][ T6012] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.012267][ T6012] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  185.015576][ T6012] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  185.018750][ T6012] usb 6-1: Manufacturer: syz
[  185.026326][ T6012] usb 6-1: config 0 descriptor??
[  185.286036][ T6012] rc_core: IR keymap rc-hauppauge not found
[  185.288601][ T6012] Registered IR keymap rc-empty
[  185.290364][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.316208][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.336916][ T6012] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[  185.343550][ T6012] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input32
[  185.354271][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.376170][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.406090][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.426128][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.446131][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.466168][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.486141][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.506138][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.536139][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.556194][ T6012] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  185.578253][ T6012] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  185.581851][ T6012] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  185.590411][ T6012] usb 6-1: USB disconnect, device number 41
[  185.614168][ T9789] BUG: kernel NULL pointer dereference, address: 0000000000000000
[  185.617590][ T9789] #PF: supervisor instruction fetch in kernel mode
[  185.619335][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  185.619347][   T40] audit: type=1400 audit(1773186350.084:646): avc:  denied  { write } for  pid=5854 comm="syz-executor" path="pipe:[3657]" dev="pipefs" ino=3657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  185.620556][ T9789] #PF: error_code(0x0010) - not-present page
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  185.620571][ T9789] PGD 60442067 P4D 60442067 PUD 0 
[  185.620595][ T9789] Oops: Oops: 0010 [#1] SMP KASAN NOPTI
[  185.636514][   T40] audit: type=1400 audit(1773186350.084:647): avc:  denied  { read } for  pid=5318 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  185.636980][ T9789] CPU: 3 UID: 0 PID: 9789 Comm: syz.4.1209 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  185.638957][   T40] audit: type=1400 audit(1773186350.084:648): avc:  denied  { search } for  pid=5318 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.646939][ T9789] Tainted: [L]=SOFTLOCKUP
[  185.646948][ T9789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  185.646958][ T9789] RIP: 0010:0x0
[  185.646980][ T9789] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  185.646989][ T9789] RSP: 0018:ffffc9000451fb90 EFLAGS: 00010246
[  185.647006][ T9789] RAX: 0000000000000000 RBX: ffff88805a4b86f0 RCX: ffffc900305ce000
[  185.647018][ T9789] RDX: 0000000000080000 RSI: ffffffff82c4a7bc RDI: ffff88805a4b8640
[  185.650993][   T40] audit: type=1400 audit(1773186350.084:649): avc:  denied  { search } for  pid=5318 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.658673][ T9789] RBP: 000000000029ffc0 R08: 0000000000000001 R09: 0000000000000000
[  185.658688][ T9789] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805a4b86d8
[  185.658697][ T9789] R13: dffffc0000000000 R14: ffff88805a4b8640 R15: ffff8880608970c0
[  185.658710][ T9789] FS:  00007f8e03d8a6c0(0000) GS:ffff8880d6645000(0000) knlGS:0000000000000000
[  185.658743][ T9789] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.658755][ T9789] CR2: ffffffffffffffd6 CR3: 000000002c626000 CR4: 0000000000352ef0
[  185.658766][ T9789] Call Trace:
[  185.658771][ T9789]  <TASK>
[  185.658777][ T9789]  netfs_unbuffered_write+0xae5/0x2080
[  185.660455][   T40] audit: type=1400 audit(1773186350.084:650): avc:  denied  { add_name } for  pid=5318 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.664056][ T9789]  netfs_unbuffered_write_iter_locked+0x801/0xab0
[  185.665402][   T40] audit: type=1400 audit(1773186350.084:651): avc:  denied  { create } for  pid=5318 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  185.668068][ T9789]  netfs_unbuffered_write_iter+0x40c/0x710
[  185.668096][ T9789]  v9fs_file_write_iter+0xbf/0x100
[  185.668128][ T9789]  vfs_write+0x6ac/0x1070
[  185.668153][ T9789]  ? __pfx_v9fs_file_write_iter+0x10/0x10
[  185.670362][   T40] audit: type=1400 audit(1773186350.084:652): avc:  denied  { append open } for  pid=5318 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  185.673219][ T9789]  ? __pfx_vfs_write+0x10/0x10
[  185.676241][   T40] audit: type=1400 audit(1773186350.084:653): avc:  denied  { getattr } for  pid=5318 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  185.683901][ T9789]  ksys_write+0x12a/0x250
[  185.750281][ T9789]  ? __pfx_ksys_write+0x10/0x10
[  185.752166][ T9789]  do_syscall_64+0x106/0xf80
[  185.753952][ T9789]  ? clear_bhb_loop+0x40/0x90
[  185.755795][ T9789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.757930][ T9789] RIP: 0033:0x7f8e02f9c799
[  185.759642][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.766804][ T9789] RSP: 002b:00007f8e03d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  185.769794][ T9789] RAX: ffffffffffffffda RBX: 00007f8e03215fa0 RCX: 00007f8e02f9c799
[  185.772682][ T9789] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000005
[  185.775543][ T9789] RBP: 00007f8e03032c99 R08: 0000000000000000 R09: 0000000000000000
[  185.778486][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.781382][ T9789] R13: 00007f8e03216038 R14: 00007f8e03215fa0 R15: 00007ffe02987498
[  185.784323][ T9789]  </TASK>
[  185.785504][ T9789] Modules linked in:
[  185.786988][ T9789] CR2: 0000000000000000
[  185.788558][ T9789] ---[ end trace 0000000000000000 ]---
[  185.790561][ T9789] RIP: 0010:0x0
[  185.791890][ T9789] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  185.794567][ T9789] RSP: 0018:ffffc9000451fb90 EFLAGS: 00010246
[  185.796839][ T9789] RAX: 0000000000000000 RBX: ffff88805a4b86f0 RCX: ffffc900305ce000
[  185.799853][ T9789] RDX: 0000000000080000 RSI: ffffffff82c4a7bc RDI: ffff88805a4b8640
[  185.802809][ T9789] RBP: 000000000029ffc0 R08: 0000000000000001 R09: 0000000000000000
[  185.805742][ T9789] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805a4b86d8
[  185.808740][ T9789] R13: dffffc0000000000 R14: ffff88805a4b8640 R15: ffff8880608970c0
[  185.811712][ T9789] FS:  00007f8e03d8a6c0(0000) GS:ffff8880d6645000(0000) knlGS:0000000000000000
[  185.815096][ T9789] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.817626][ T9789] CR2: ffffffffffffffd6 CR3: 000000002c626000 CR4: 0000000000352ef0
[  185.820578][ T9789] Kernel panic - not syncing: Fatal exception
[  185.823642][ T9789] Kernel Offset: disabled
[  185.825064][ T9789] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:45:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000004 RBX=0000000000000000 RCX=0000000000000004 RDX=0000000000000000
RSI=0000000000000101 RDI=ffffc9000631ff48 RBP=ffffc9000631ff38 RSP=ffffc9000631ff20
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81001dd3 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f39b2fb7880 ffffffff 00c00000
GS =0000 ffff8880d6345000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f39b2545f5c CR3=000000003156c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000000000000
Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc502c1380 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6eadd5170
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6eadc7e00
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d70756b6f6f6c00 72692d006273753d
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffffff ffffffffffffff00
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff00000000ff00
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2056d8c9ae5a87 73732680c6c1ce3e
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737272 7373737373737373
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e303a312d362f 312d362f36627375 2f312e6463685f79 6d6d75642f6d726f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c5325abbadd29f4 000055f3b5b242ea 0000000000000371 000000000000302e
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003a61663a3a 6b6b3a302e2e302d 2d33332d2d637072 633a3131633a3a4d
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85798d55 RDI=ffffffff9b4a0a40 RBP=ffffffff9b4a0a00 RSP=ffffc9000078f830
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=5f6474696475616b
R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff85798cf0
RIP=ffffffff85798d7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6445000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbcb49f4fe0 CR3=000000002e54f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2be2fec823 00007f2be2fec823
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6370722076636572 206f742064656c69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2be2fece80
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2be2fece80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591930ad8
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08060601049a02f6 02001a03aaaaaaaa aa01ffffffffffff fffff50810030002
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002030802000003 1210000680808610 000004060142d220 1000000401000004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0106100000040401 7582060200120300 000000000001ffff fffffffffffff308
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0603000200040340 0200020308020000 0312100006808086 10000004060142d2
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2010000004010000 0408060601049a02 f602001a03aaaaaa aaaa01ffffffffff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff508100300 02000e030002000c 030002000a030002 0008030204000403
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000001b19d4 RBX=ffff88801eafc980 RCX=ffffffff8b8f9c75 RDX=0000000000000001
RSI=ffffffff8c1afc20 RDI=ffffffff81de818b RBP=0000000000000002 RSP=ffffc90000187df0
R8 =0000000000000000 R9 =ffffed100d4c6795 R10=ffff88806a633cab R11=0000000000000002
R12=ffffed1003d5f930 R13=0000000000000002 R14=ffffffff90d98410 R15=0000000000000000
RIP=ffffffff8b8f85df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6545000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f1d1a5bae9c CR3=0000000035fa2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c4000000 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000400004
Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6eadd1630 000055f6ced84040
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6eadd1630
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6eadf10f0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6eadf11f0
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39b29f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2056d8c9ae5a87 73732680c6c1ce3e
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737272 7373737373737373
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d362f36627375 2f312e6463685f79 6d6d75642f6d726f 6674616c702f7365
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f6eaddd1d8 000055f6eaddd1d8 0000000000000041 000055f6ea003232
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000411 0000000000000070 000000000000322d 6332692f7665642d
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000080000 RBX=0000000000000025 RCX=ffffc900305ce000 RDX=0000000000080000
RSI=ffffffff81e7a8cc RDI=ffff888035eb4980 RBP=0000000000000001 RSP=ffffc9000451f728
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=707573203a465023
R12=1ffff920008a3ee7 R13=0000000000000000 R14=ffff88801cfbc980 R15=ffffc9000451f7f0
RIP=ffffffff81e7a8d5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8e03d8a6c0 ffffffff 00c00000
GS =0000 ffff8880d6645000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000002c626000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=0000000002fefce0 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9eeca056
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9eeca056 00007ffe9eeca05c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39db03327c
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39db0332bc
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39db033420
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39db0332ae
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003c8
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 0000000000000000 0000000000000000 00000000000003c8
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000