last executing test programs:

1m52.471679418s ago: executing program 3 (id=152):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1m52.290002144s ago: executing program 3 (id=154):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x1, 0x2, 0xe65, 0x400000005, 0x6, 0x5, 0x8, 0xcc3, 0x0, 0x100000a, 0x100400, 0x1})
write$snddsp(r2, &(0x7f0000000080)='i', 0x1)

1m51.324817091s ago: executing program 3 (id=168):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000040)='mountstats\x00')

1m50.454387796s ago: executing program 3 (id=180):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d)

1m50.386942618s ago: executing program 3 (id=183):
io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000})
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1m50.065447655s ago: executing program 3 (id=188):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lsetxattr$trusted_overlay_upper(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x1)
syz_fuse_handle_req(r0, &(0x7f0000004400)="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", 0x2000, &(0x7f0000004340)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0x6, 0x495a802, 0x8, 0x7fc, 0x87aa9, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0)

1m50.001465384s ago: executing program 32 (id=188):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lsetxattr$trusted_overlay_upper(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x1)
syz_fuse_handle_req(r0, &(0x7f0000004400)="6074800be6a663e55421e35b2d43c491fcb92e5276791368f7ac2306753e5c7f43fa1b328eeff3ade5036fa9a59965b7df04f04f394c4cdfa8154858a9b5c5e05dcbb6c6da75b7a0cb7d0ffa4f38aad2817157bebff12aadd611f82c34b5a46a36986ae839bacb8fbd6d5b683cffb6a6deac9a40e90d498ce1c6a8d40923128d548f72af5df610254e7c7694126b8b7494136c9be79639605b6ced224b4a90169ac56ee14947ab15a77c56af89e73b0cf83a771af79d268d57db9c16b4752b205844fcf27e9a584dbc110728c484f0509c190bd94befea72c78d2c1539a2314f95183804234d66727c337deb23f16352880071a4a7234250c6cdd977668ecd4b18ec46f19f49ab9be757a3db22f6390d34d4e6b3535689feb7d63d08a8927aa90e627aae135c154df05403fc33fcb6a409a5ec3d729d1f647da6043660e0260a359cd65cb016ddaf275ba215b10f7a144a94b7dd57a8a754a119683e716c9fe7219d2be8d006e7e309b81140664240dd372168cc05932f05c8aaa9f8772456062f01270c099da18a451f7618e2ea324db80e2d47dcacfd030ee12e88f48e5aae2e3297f748d5832e74a777cbc4cf26a8733963ddef4a2f62696345c81b8b79dabf2d010ee6318ee3928d6a9c8f6b28db6a4c590a3a5dc0bc10770a879d05976dc75af7448e9f9506c72d79b7bd1bc829472706686382a12c8b6fae13094269588782d12694da6565f0bbbb4f0f707307f36285ee491f0c8a2942107651bab4639a6000fec0590896120f97813a3a8f0c8b5beb5e5e113ebeeb4404567230ce492c1398ed1bf07353c2f49e6703d0c41a59588bd6e1acc133291947b9088c6ada89caa09d83bb8dfc768574968235fe9ba04fefa161e36fde8f2cbf877ec3c284d85253f6bcf941150937544e92dcdc360a20516158557d4aa08e781fcda8cb90186ed407bd934cc8801edb7dc19e60dc1f86f056e9728359406dd4ac81683a5d41de219d97bbd9edcfc5cc81c8d23157865a6eeb1c30bd6fa93b6174c0a2f97d6bddfbb6014a820f39870c1df328792b8133f6dedac7fff173b54fc5024e3163eeb6094fb00e9848a9e11e37fa454f6192fe9cc9c3bb68bc418cd170c43a90cb4cf0540489a26cc89b316bd5fa410b517ca63a4ceeaacbd0243f25d0236b8a2424c45f0eabc584bbf268302747d68257499db740115d413a209c6b05f6d01cdd069f4a2b208d48a98bccf569af42999eae6f7ef3f40dba45d3b38e1c28fddf0cfe1bfe02fe77315f329329f3843467cb29c490c694dc5ebebb0e6eb42fb9e611d2e07c01773605a4a542a32a2f47bd1524cf4c2bb064e8eee2e95c4dea608581794b6ec05cd0558d1251ad3aeec246717ea9ab2730c7c1a29879bd44a61fd86058ae677789bdba038f2054445ef2efb18b9924d863fe4e91f0670f00ac4dd7a75e182b3eb45df57499ea81149529f6a59c5293f89ae07001acefaa3ac2731f0f8f940d83fa529efb49ab2960dbed16fb18a5fa8e624a5e7d40a6b909da91aed2ac73ebc9eb83b093fd9ef6e2ecec94d24c2a2dc2914df20f2aa07b396ab02e0ad91ac44b1a76c331f5dceb7b7569d8103f8c8e944a2c1772ec9b42462463a534ffaf6d3e4dfca3cc556a34c857b7096a67e9795c133d351ca436e99b23537e93dec2b2abb6082f20b25a767185f4d33f6a5eb65eae396a2ebeecfbacb6992246e0c56dd0e73d615e73567fde83e8fc26d168edd0a4cbafe5b9d1d92bfdb0461ec4d1a0672072ddcadaecc750208355e281aa0fc0cd06085a91083f21ec2a8307205fa0e26bafc7ceafcbe5d19e0c29f62d4e6e14b037b735e26d97037dcf863784beef2bb374ce40c67971730cf4cba66afd802ab3b8c24836ab1fe903d46b82d8145cfcd9e45997044cc4ac3154bd3006a252c590eb7523494d64f8301e4f8388557aded12a969bf149d8767eb912c10976e48806823304bec64db0b50635240093911736b6f5b3a358713d882fb522da3afc5ce818ccc80b7a3a5834e2dc2d2fc6f8252198f82885d45e3171a6abc7319602c309f74250bc1e5f6c42a1d1dadfb589d6ebf6e2f5fab456abee5038d0b55eb961dda18334110173a8db62f4fa41cf6aeb47d62ae179e2c45d60657c70e3549734437e3098d948a1f709079427c3fdab87f6d2abad9d35326f69aa40a8d76c8b5147539ea9b80c18cf32248ea2429c0fcbe506c4c98790a885c5c34104e130e520f2741666b984be1892e5552454d1750ae76dbb52688bef7edcf286f61bfdecbffb277549fe144c71f908fc1b4831e0062386600e0ecb61fa2227c4ecd51b4e14bf412b438b9c839bea9ec8a15616fadedba57e7cb0e727289ecc014dc9fb21f3619533355a5c614cce36016196c503e7df99acca67025d2744c8b428575c89897314a822c8010ec8e2a0b085e2f6e11d3acd29382da799d5d51ab110666d49d3030268cf903d08000000000000009d065e806ed89f46cacb5fe4cd5be3bb2c7e287df2ce18637ee8b0def95a3395004e3d739fe3f34fba26ecdd47ff86795b59c06101699a99e1e8098bf0206d453c738fa8b2110037ea9bb72e4a600b2f6cb49695ec7e9b61bba6360ce105d681970592cf3ff05381d5df9be8c7d6ce64914211f0c84d5aa8addca85ffaa656bcdf576fc2f52514e3e5ea7d23ff296ab746913ddabc437ca5cedec9a85f48aac54601888d82f2bdfc0f908fb544329fd740ae969dedb427cfd12bfd094eda6126f7fad7ba2c38811f0893a08c670804e88b94d355bcf517cbfb8e45934b3c7ed13b5ab309b0996ba1778c82f462b9fbc67ee8a06dd1e7ff7a584fdb0a3eb1a4f7857f8af8b60c27027a83a9c4b65f727c7f861e2a497a53da9efead3c11fc22dce14e1621a678a37794f08e5ca62bf036590a4680c45b0152bbfcc8bdb727b40f504750a356fc1ef044d038415ca57f26a6191512dcc31373dfc6feab298c2f761bb48ac177656160be1c0bb37dc45a6eb6db84c3681939f479dee630108ad479eb8815bd9e65838c171686e907d212e10d26ab0d6cae312db3180e0cc642c67a822c9702a344d3242b94a20aad40788fe539769ff33b777b14a175e5d9980414e2281c52f05540174eae1d83006ad74ee5f2214d032b4cce90029b9ca8af3ae4eeae1b3463cbc078c51db509802158cce5fa9cdf4c3b35ee3c622b4b96b9d0f6a5598e1eea82cf27a3f61bdd5808acc5eae715be2e1068884e49baab264c2575645f1fcaf5b07cb001e3c661656959ab665462be436f79b14076903fe18921d25393d770b8f2039b2791167ace1d95fee3534ab872e639196a5364bd79ddc91d2c049a83eb7c0add3e3fabcb070d475bf544327d908fc8df486ffb040db05a5bbcf34f23a65b69f31b65bb2e2f960430d3abe9172738fe647521a2760975174f549cce5d1f6ce51cc96a47596cd171322e18c183813fa58fca62a1841083c210957709b68f46bd4c5aaf893dbba8fc9556f419e49f4afeedf3f70d182a5626b7a655b41773180f32b80e259bc6136680752c88d877df708e578fc515522ae69fce6e871ed20a38457fcc176f7e359011a43bf67cd31251a152a1ff6ab7ba2ea4c0c2a142f6b02f711befd521b32a35b00a38b4dbc00c7c773e4677129ee43a94061a5d1258ae10f13ec26bf3f9dd509fbbf401a957b76c5bea039c552b72151a7e6d4c00c599e9b39c13171b1ceb5949a34b2fe3fd3e56a9dbeb7cbdc82ae928a90b65d9f533075dd0d7cba12ffee7b3650373137fa8ae25f0e4237355e4a65577234f3f1345294234ae62ff1c899bbe6869afab2132dfc5e3c71670e59c488de7b8da39e9e29f64abd5151e486bf178ec193b72cfc93b362b41e099c78f22e81e6cb1b74922d715037ae015ea3c3834dd516221c5a446c34ac71aebdd8d8de9ad0d2e2c1d4a039c23f99a7256cbb9ccd8450d7a5a49854ce6f4b1f108824a7339c08ee6d21329a04f7024ffd48f081496e210a56e437ec073b78c7ed0ed0e235f256c18a680854195f450f733f6b0208fa2f9aa4d8d9d4c53690d02acc9d3f5f84a12eb2b27de105106e1f45ed8380001932b7b112d2137fc57be3d684260bea8c216249479ee578ca14de22622d54f7c0ccaa9486fe447d36116ad2b51d13a473c732c068244d6b6065ef191eae289a8c1dcc1264c5e9395996bdbdce6a6c8c303ed9a272c0f1e058e921e7d2cf83dd21a356ac9b1c2e8d4a6da22cfa3c6ae6c3b3ce3ce38bd569be66f0f30ccbff5930783d8f048874c36a6f1ea8b028c8cd1acaf828dabc10f2d912087bd4fc0bb016f90b06cc2d9cefec47daaf618dc4e44e2fb9dc11796dffc70316c990418a16752a42d31d0001d975d884e55fb46ae694bfa83be7d7537ce98525391376e844fe8fee3f7170fdcd05b09a2211a957f8e16c1ccb485d21c186bd88c383dda7731efc6e6fd7dc931b1517199af8d7cf8c3a3d5222c419e3c27d27872689df26bf65c9dd63110f12c9d03b4ebc661b7dc69da1e22575860220a3f54108a7bf08d2f48e5cbe473de2fda525c8a64a60561f6f5c1a15a0ffffba7adb488c6362f4914f2e6ead87dd5ea0a824b5b486755a24838f32b9dd00e92bfa0480a21b6562cb2e04fbb8a7c5dad3bbe5ac5f4d6213719e347961d198bbcfb99a50d7327c0f4f68058d0b46d71a4d64402062405dda774dca879920b2785a313e3c616e791c8687f54cb66fc4dc121dc0af9fcbbed360d180aee5008e604977873738b8d2f2400cc6cc0270541c0fee88430e01e201b917e151b2efbb332d66ace606edbe66ec49b911c1639d2b911c95ce00e82b01438bfd698fa271d18a1d6504529b7a113dbd3494365aa0112f4b350495f76c1529063744457b6518721eefbe8e27781467f63846cb0f4a5b48c184201d95d70e9d7423311f3c3833035bb47ba629ca707f42271d3cf7c47fc5266eb1dca27f5d70b2a177b64c6d5628c5764717d1db6d2ae13e13b9a8217e2f3d64d735bf2f19d68250d553ece5214b499b0ebb0d75fcaf8f6a46de37bac2155677582f419ef84f7e41a80fdc48c773269627f331c42afc2aa46712b55f3fc2c7e36b26add96fe03a56122042453e9a890ec3bc6bbb1813d90f0fa37d8551cab8862fe75171a01d1af4efa6be9146e521f704180a0da228b222e81de07c9b1f65415c4794a2a2a50c0385233ac19cf2a4236f5e526231867dded0869fb44b5762925a6416f660b5ed55608c1dbe1cfaa4706e181cdfb103a8e466c5c679322e22b911d0278f6105c402f39f28311bd1f64a47b3eb4d5a2d99e28308ebcf43581a654f647df956aabca459d146eb96ececad853babd92eb34a901488b56f3726641432ad334fa20accd363894fba5212247e6d8ef4c7f20e54ef1f1c81dfe2c6610231491b53856c0ba97ff7de37754ce0af03cb823630477decef2fdd2ae96f97dc5aae788be8be7b5d5e44239e7b39c75885869c00948de5261ec9e62d18ea80256e111e7f2ca6484270d13c29451b65096d526360c118129800367dd8debb2542594465e484eff349cc18c058d6dc5d91b2cac0b1293aaa58c9f4f816d3aac353c32b1d25d313072cc3e114fffdc2dea9cb133719467d8cb957e0d029ce0b82e77e7ffa2e98c8f4fa975680f996a8db08bfff8e9e7bbabed5d4572c43d22877b45b3fdefc90d61b0362258acd5950bd1ec7eaee8f2703ef50eab471580ad221e1437ca7b10234fa9ee59ffdddd1461612926a1557b79833039e72d39af31396448c03560355762195fe4b44c4d33e8aeca85b039bd2d79318d677bc4dfc9bbba27bb63adfb6e2f8e5933b9d2353bee5def42c89d5a6d9fc9f17066591cda89eae9e44a5b5e716eeba79fbbf176852758ed06b970b2ebc108f20a89c0e3eab82bd38aef15ba04f59ba97dc7f354bf5515d459b0890e0af945a5c7168001b9ecfc8c8509420916380bc790c3a26b16cb997002ee62539bc2216c0316676cab658fe812c94e72651627c501672271ef002870f887d9c574afbdd0887c32c190bea374044a2314377ce44090f18c946864be712bda210731eb4fb8a01e9c614bbe30772dee15f4504595fecf8729e52bf428ff9505c58c4ab296164ac092ffbf40f27e2c9f9865d7bab3692b6b3ef7ce96dedf87750b020ef58b4aeea1a881ceda3da5126545a468f7becea1d53533ad94930ee278f699301830d7e58aac459b7c3288c377c2be063ad501856b0b7b3e2270c2d830ca7c44c060dd70bdb91edd964b6c7fbcf1c772a559076fed0014b2f5a8678cae521a31e2c48ea75076894e3d1abfbbe16f14f6c0ce29e701fd339e2e7554f646128ae86999f766f294311318227a81eae02db71fe92f80c6aab822fcfb650e49d55ff38f972a2cdef50d244326bdb756cf28c4a84b7f5d8d0aa0876adacf20105db6bedc08838f125fc7409ea1f023fd375237a3b78dc9ef1e788e355be1ab9f827ccc1bdb140bd2230a9d5a6c0fff37ee521b9a5c0b7e5a5afc8d70cbf27715865411c517f8dcf0a8607f49db91dd763f1964be2caea29a763d8ca0c7bb53fb57b5e25d056916b756e255cca8cbd85d891ae9d9068ad6c267c1a7fca6582918f23c423773bc2fbf1a3db5a36b30f8386621de5d204591bc0aed068b60d11db8791f40a432c08334cdcacf6d1c63cb39a9c149c03cf7477a85b178ab2d5d87593cdcb4bfb13f90411dd8bd8917599e51a484f9d41139b257691a586c062933f29dcbefc012f4b940a995704ecf86542404da548f3915f21f33b56239177f6e4064d921094e1295de8fc30900000000000000eec9a49947327d7693da0ea4de8551d2145910baa3305bc9dd1e1e6eabf911e893f3e0dc7b2e44120ac6ca6497d8fc6301d96be488b01ceabb30e4d03c9b29bed0f506a8ea698411c53dbb066bff7e7104b377cccc3efcc2fcbd17f5a969efa8fb785cd5f1409c81d77ecc3dd09ee9d3cc7fef504a69c22701997bd2f8c27dcaf7f5a19e276db7e8d39383f3a6033b74176aa70fe6393dd9c743317336635ce216ff72d495b8687b5e637bffdcc2d3d9d97a982281f4c0212eaa34f0d54a17431689c037aa9cbd5cfb2d4bf08a69cde84459b181f66b7547b0a4d885e525ba107148c882e2ba555c8a19b55b34a73f36bd191ee16668a981f27df9d360dd555a99f033361493112ef201d7eda6ebee01dc87c10a8cdc63918eb554908fbfb309f2fe8890814ee97ec5d9832db8805805782a1e0dba713c6856308381bb6601c00b4c58c8729251a35595ff05e09951e89bd97996bb4a30c5af662ede04a252b514bb4040bceab78af8579fc2942ce5bcc4d68c68a8144a3adb438ecb74bff0056d298a6eaaa4654f97cd8bf3e87e168e900fee7e8ed0cd3632af256169e51c9f33431849a95d77c9798ffe846e8e193f401c69898ceb9bbd47062f545c65dcbdb3df046ee4e9b6671ed5035e09c886597a8a46eff7c4d972ff675e4428f08bac45659e423d00587cd31175f63e5f44fbb4a4084cb6af8425c9a77d8195de6888f7f911665cec1a222d20da812c9cba09194b2fc377326ccfb70a5b763f4a6fe7d6eec17362f5f6bcfd95de88832c8ba2ca04f241d02ae35acc945fd752bc5aad95b140102dee269fa26eaff2c2204022ca5a5feea60155dd274cf5d869fa0d40b13f72c0c839c1c39fbd0b0d645675670f2576e47118b395a916c64abca51478afa5b30796ec275501a6a826a47122f2ded90d121fc78f21807c9ec78e113de68496b7d9e713e19374edb69060e8562153aa10e587a61f73879084a8ed5e3614b79cf25ac9296d723c1344fff24639a93ca3304fd8a710b80199a7fb2086927e4f1c296e5daeadad06825a04476365a317ed74847c7bda20c00484ab599a415bfa26799d041e2ae28844a65a4469b842038f1b935b1c0d49cc6111afcb44e0d193da83d95f358e68fc03fae5e00d33b440876fb7dfd83ca760d61ac4ae3e3cfdea9286d4fb26876d7382ef947f91f318c6b393a678d66f191c9c4110cf177ada12fd907382b83047defe3a9bc357fceac8724afe9c2cca4f79f44e9acd1860676597b5f7325b96786e2c437ecb15ab8ca3cdb26d79d2557e858528638ca5322e3e37a180a4706ae5b780827f61e0f9d8bffe2d732418d891faa2cbbb33b29e6bdc93ebcccf3f3017cb265318d4d31afbeb43049a6f136448b5cbdeb9bfe34ca7d3c612dbf43df6a8868c8d8f7a3615238d3e9ab83e2be4df5d2be3c4ea640399e62f361ee1f34553afbf88f33972da827864af0589a0dc71e9b79802c021266b2107fe007c12842b1ed0bf1a77529e5a5bd9ca7a9e39a78dcf5b4723d66bb9791adecaadb8375410b8d5cc5823f339f0a1f3de3d84804b5014f1048473e719ea12d81aef9292f99c39f71d6ead8921942641c008a5ef87e752397579e6333ed2d889e6acf393e8c8e4577cd2c659ba2a6c58d8862215b5630dce04953b26c2403ee3dde05c9f71f8ec3577ea83cdc7fc889e264882fa4d9131ad58eb796f20ab1832bef5ace5db774f05b02f11a81aad9153785de483d4da2e917010bee84cc9a09e4b9a87966965ef5df1832ae1d52b80e1d931a2835f772524541ba1b71d9aba451782cb20be59cd13bc44ac41855643f614bec40167cce4336776517087921e6abe792ef61219852db78b49facb620f5157d6a78dca85c5c5ccdfa10ad0ed77844727294be6ae102a608e863b0ed0668e634729925714143d8126f3654f34171a91e35cae62d495ba4c48ed2b291c792d6b750c9fdbc5fd4ba7e8b28d5ab46fa91a1f3d345784eb4c1f558619e77f5a4840c584303a499eff1c2b100356a5bdf32dd4ada98329e6fc6383272e3e89f4d18a56b7cbb88e942d464702fea7d9f91912a901b2422c906c481c427659e91e62305b227635556b9d9f7d4771108044464aaab87bfc430671103b256975f097530cc46ddd14eeea17c17e285c10146322617ea20d6816f7a7a4b6fc9b90dd98e7b83c9aa3b1b8fc98cef0f74aad62ea2fc3e4fdf51832f3384b3b4a6b6b72d523052d8d933fc8e464e6766f95a19e29212d4b149e36501252554616b72e5d2c113c86530d2a43daf4ef4af38ad4f5009cac453a6ee507d39d30ba98cde7c798c7201a83391f4c8c2dbd0c6914974b24782ee78790cafa96bc661f3b51e8b68d3a24b859e5c127e0326ff5c14093015e24f5f8fdd940f31f6b583f1e4af4f7999b30b154f8f9971aea81d66b401850610ec11ce9b067f285b19cf3d12393ce1bb922b898899a946605e52f4f81493172050f24ee0b3e1aace86f66d7029c7cd91dcd6dc06dde09110a074b61e7a9b4d475336863dfd501246202454bef5898b3896ae378f09f9ac34f921d251c46a80f57dd6421751b00beacc8e09911f73eb5628da767d1cf46c46348092496350b1021be8dc4f6f82f26d6e7115845c1227f0252cfcf73155b75676ef6fe3451e8a2439408a71167f75796399b8c78e018ec155b7146a23bca3a3b13822a1f60063257404f119652a57a44b907063476a69d7b4ed675521690bf629c07290b3f5f3bd5624d043f94d25140c1f631d011f990c26b1f8b55ee5430a0914ba56d7e0b122a7f8c60b7cd8e5267336f01945d927ecc84cdbcc576643d2d9a4f812cd7027735d95fecf00e85e1865a6c493600a37ab3ca94542954dd19c91380692da8596f06f17a164396c505748e2e7a9f719d865ecbea331c6e6a2f6aa90443f3c952b2c5326b96ba1c2f060c6bd5947e06650b40b2ffda56ca869e5d2a1052a9923c85000d45226315d5b8d49f6d729a87cc5f1de62c6ad9e5e347e8540f6d685a2444e180f5dc388a0c02191d6a918e12e9cf5a802eac59ca6390258730e639daca48affa58665fd42e0286775eed9592352a3785cde2515f370960bb289ca8d3a0c7cac66274aba329e215a9b2be57696b71775cb55b2f836ec7408bb48006c512963d07a68d705cc2f1615a2a198d3517d3324502c67f035abc0f739d8398e0820aacb40b5e86bf0c21a34cd5a069e2653c9cee3245ae17eeb7517c1caddc385fc870acc86d951c7348710832ca5d2542f5a0b8467310dbb1b0874af96f92f0d3ab477ab49b9b0ef41ccb5e7a27d6c1e40cd47ecbf5304e8334ec3cbb56ddb0796a1a64a10b1971776f0ec30113ee266b59526dcdb3016d26e0c02001551c4f5b4293854a0b40da0945492da0ffc6010dadafc5f9e57bd24d5c95374387d8362240adbfa1a4c75a891059062042de77902dd557612a35a699924a909bf522a1a357e8c44ac3da80850ef071146d5dca52a21a9996d68a061891500ba7e60f400baf058004c7c226da0500dc172d611fb227f1ae4e49c93b97fd05e3854a7994676e1481579918257d9e76167ad1fa3e7dfd5982295e75177f6fbdab76e1dfc91d3b9fe9f272d981692e7947adecbfd5c821348f371d5cea4d13dabdaea04869376c742d18fd419f2d18e3f74b8ecd256ea02f15377a11004c21b61adfa6fed9391ae5336abb03b62f098f5985f257812a2c35aeb9ca5ff68a40838e2d2fbc4896724bcd84114ac6739b6fef9aa1c7b9d5ba0e7eb96679aa0974ee4d7093c818b3d3e01b5bb301abd95ac86acbc18d3e4162f3ac99f86f4df9e63b6a58c9d41afc903a1a7ac53f0b5f6e31b802367cef00c03d142f23a8bec76d62ffdf7cc8810e34230f76ce60970932aebb9d35f9f90f662f332c5e9226b7008c31c250082c6762214a14ae1ef73d1d7464d11adcafbe9ff4e163a8f8502ede5a9fb322a59a0647c4bbf7d5019ef994187069cd4a4a3a9598544521f64848a9b92dc8b4b1d16c0528db1da87a1edcae6e05d63bd6603c6ab177f398019b5c3c8c807ae46e4f301a553b73be391e21f06d8cba49886416d508187918d2f16d8085ab07612ab6499bd9fd1c4ee6d33ffc49b5588a54fe3d362a914094ecfc76fae5685f2d919a651c35c31954756dc6d5d369754755ac248851ab108c0284e0c69683c1a97206a85cc694b7b369e7bd07aa3c7d47f03f744ffe08ce7c3366ec1f8e320d1f85d832934688206ffeb203119a03fea67ed52fbdf91df4f2a1aef49e69f242766c1b3abd25d0d8f3b91b361107ac74a0c898593cba83754a55b78988ad1059f4bc8007a6643ea53e297e5e1e506e0d11ecf73d21e15a9182db19304aa0c057790e56f940159d1b0748d14e4986d15b2ad364f85db37724e6e3111ce291f35050cf3dcf50ec09100cbd7f3ad25306527423eb4d899d7f99e8d5b88ddf9be36d9a12a69fb5bffb8b539a3c20e7c83398c637f3d77d2a101b783833e71ab9f856a1f48c6ab164438f823419145af131f62c53ff3b95316c3d2a55c18e7df0b30f74208ec60abcbc671342328e70201c76192a9d33de0a7f5e17aaf4284096d86c3a8f86b1bf1c82191842a6015b0f29d3d4d85b92401200ee99190827f25e0b96c7be32a910d955d0f69d7b08bc0935b4cfb4ae7d2d6abfc94741b202717b5f7648bbc52993573449b455b425bb40b047d6e4bd4044ba93614efcf1ecc11e30ebd593fb", 0x2000, &(0x7f0000004340)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0x6, 0x495a802, 0x8, 0x7fc, 0x87aa9, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0)

1m19.18306951s ago: executing program 4 (id=543):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0})

1m19.182457104s ago: executing program 4 (id=544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0x9}, {0xa, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040050)

1m19.067823136s ago: executing program 4 (id=547):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000380)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m18.83540533s ago: executing program 4 (id=552):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
listen(0xffffffffffffffff, 0x5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0)

1m16.611982494s ago: executing program 4 (id=565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

1m16.535456583s ago: executing program 4 (id=566):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m1.56403066s ago: executing program 33 (id=566):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.970622936s ago: executing program 5 (id=1194):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000014c0)=ANY=[], 0x30}], 0x1}, 0x20000000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000)
socket$netlink(0x10, 0x3, 0xf)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
preadv2(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000002c0)=""/86, 0x56}], 0x2, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
fcntl$dupfd(r4, 0x0, r4)

3.455418319s ago: executing program 0 (id=1197):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, 0x0, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9})
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.974548032s ago: executing program 5 (id=1200):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$adsp1(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000001900), 0x0, 0x40400)
epoll_create1(0x0)
syz_open_dev$media(&(0x7f0000000180), 0x103e, 0x60402)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
fanotify_init(0x0, 0x101400)
openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x1})

2.883504608s ago: executing program 5 (id=1202):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xa, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000180)={0x980915, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/8, 0x8, 0x0, 0x8, 0x4000001, 0x10}}, 0x11c)
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x105c81)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc)
epoll_create(0x2)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f00000003c0)=""/52, 0x34}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}}], 0x1, 0x41, 0x0)
readv(r3, &(0x7f0000000140), 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)

2.614223847s ago: executing program 5 (id=1206):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x4, 0x3, 0xffffffff, 0x440, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x9}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000001c0))
chdir(&(0x7f0000000080)='./file0\x00')
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r2, 0x4, 0x40800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xd0}}, 0x0)
listen(0xffffffffffffffff, 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r2, r4, 0x0, 0x7ffff004)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = syz_pidfd_open(0x0, 0x0)
pidfd_send_signal(r5, 0x21, 0x0, 0x4)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0)

2.391601455s ago: executing program 0 (id=1209):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa909, 0x1f480, 0x2, 0x254})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
write(r3, 0x0, 0x0)
write(r3, &(0x7f0000000400)='wusb3801 0x4', 0xc)
socket$nl_generic(0x10, 0x3, 0x10)

2.326982313s ago: executing program 5 (id=1210):
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x20000810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
setns(0xc9, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r3, &(0x7f0000000700)='\x00'/27, 0xfdef)

2.309843308s ago: executing program 2 (id=1211):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
close(0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000b00), 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0)
read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r0, r0, &(0x7f0000000100)=0x3000, 0x81)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)

1.683610862s ago: executing program 2 (id=1212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000d00000042000000"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x810f0, r0}, 0x38)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
listen(r1, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x6)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000001406fffe8000000000000000000000000000aafe8000000000000000000000000000aa4e234e22", @ANYRES32=0x2, @ANYRES32=0x1, @ANYBLOB="501810009078000054acd29eb2775d45244bcb02b5e81fc0f7249f6d162b988ef42b15e24db30b9dda95770d723532ce9133fee723ea2470ad68d91d85fc968c9ec53391ec6e4036ed95e4441c745b832f83ad52714f7b9b12782ef977cc"], 0x0)
mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xa800, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}]}}}]}, 0x40}}, 0x24008040)
openat$pmem0(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r7, 0x560d, &(0x7f0000000140)={0x5, 0x899, 0x1006})

1.665347982s ago: executing program 2 (id=1213):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x400000000010, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udp(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

1.663927987s ago: executing program 5 (id=1214):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x10001, 0x0)
write(r1, &(0x7f0000000d00)='1\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0)
write(r5, &(0x7f0000000800)='101:0:1\x00', 0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e49371800", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb70300850000001e0000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r5)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write(r6, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discover', 0x9f)
close(r6)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000e00)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYBLOB="000000185500f40f0000000000000000000000b50000000000000000000000004c382362c262e1c2731e1de26d5f38c2a44c9ba6a139f347ddfb1c702435bbbc00f695c388693759d89e3f6c63a2591f17ec3d0f5d06de99e0d3d87f171253d2c31e52faaf51fcd212ef8c91a4d93e2931b9c4d16720d1f28fdaf7ca0f2cc3fcce2135472108bf5d6c8a1beca7a65eceffc7256778773536ad20a0700b9cb06ef7accf"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x8001, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4, r4, r5, r1, r4, r3, r5, r6], 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r8, 0x0, 0x16, 0x8d, &(0x7f0000000540)="64178b234f02331923ee6ea8bf04705c09d343289dc7", &(0x7f0000000740)=""/141, 0x800, 0x0, 0x84, 0xe0, &(0x7f0000000840)="b32d559ecceaf671be599cc5b7534ee68562e24fa1083f81f1947288a4e60ed5b6f20c19c6f3b5f01b82171bc811500face0111299f31f1458c1f16c301b588917ebe6f1d2009ac21d75a88140568b64efc2651df10cb7e4271aa5fa5b17de81b4b085dd215ad14e36736307b526952ebe35af7274b764d6727993b2252e0234581e5004", &(0x7f0000000ac0)="ee480e3c99ab615904db569a9b28da50b1f2d4a336406887f54f4e9c0858ea75b993a3784a82dd1962550f50c8de49d7eb249bc65f882850d9bf057cd9d32411c3c342ce41b94c8cffcd13fc5c9df63ec21c1657fe122ed255f02a26407161f8215157beef8e03fb817420efa420f3c13787f2b62feba7b23f475836e8a4329ba9972ad6d8fff299fbb6ba9c2e88e0e1739406c9999a6b0276c20563a95f0959fcf87791be56373f6ba2920399fd0d91f9abc4b019cf9a4463b472f8b03a82fc9fb26f006dcb991c6da4a1b032f3a667a3622c5dcb300eef3d7e37ec4615d713", 0x1, 0x0, 0x5}, 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r7, 0x0)
mount$9p_rdma(&(0x7f0000000180), 0x0, &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c706f7274373078303430303030303030303030346532342c74696d656f75743d3078303030303030303030303030303030302c0096c8ef61a7d0e12e74cf322b8d5245092afef8b6f2968e062da99da4b2d1c0e03771e755eaf5a05f0f24e2fd9ac9920b4b0847e6304498c0253735ecf5e3734b11e69d0901bb4474a7fb8bad58922b267f046c1d7baeae3ab4192fb14ed846856edf861d5e3e1e5f801ddc64f4ef50"])
dup(0xffffffffffffffff)

1.621884076s ago: executing program 34 (id=1214):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x10001, 0x0)
write(r1, &(0x7f0000000d00)='1\x00', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0)
write(r5, &(0x7f0000000800)='101:0:1\x00', 0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e49371800", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb70300850000001e0000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r5)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write(r6, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discover', 0x9f)
close(r6)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000e00)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYBLOB="000000185500f40f0000000000000000000000b50000000000000000000000004c382362c262e1c2731e1de26d5f38c2a44c9ba6a139f347ddfb1c702435bbbc00f695c388693759d89e3f6c63a2591f17ec3d0f5d06de99e0d3d87f171253d2c31e52faaf51fcd212ef8c91a4d93e2931b9c4d16720d1f28fdaf7ca0f2cc3fcce2135472108bf5d6c8a1beca7a65eceffc7256778773536ad20a0700b9cb06ef7accf"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x8001, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4, r4, r5, r1, r4, r3, r5, r6], 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r8, 0x0, 0x16, 0x8d, &(0x7f0000000540)="64178b234f02331923ee6ea8bf04705c09d343289dc7", &(0x7f0000000740)=""/141, 0x800, 0x0, 0x84, 0xe0, &(0x7f0000000840)="b32d559ecceaf671be599cc5b7534ee68562e24fa1083f81f1947288a4e60ed5b6f20c19c6f3b5f01b82171bc811500face0111299f31f1458c1f16c301b588917ebe6f1d2009ac21d75a88140568b64efc2651df10cb7e4271aa5fa5b17de81b4b085dd215ad14e36736307b526952ebe35af7274b764d6727993b2252e0234581e5004", &(0x7f0000000ac0)="ee480e3c99ab615904db569a9b28da50b1f2d4a336406887f54f4e9c0858ea75b993a3784a82dd1962550f50c8de49d7eb249bc65f882850d9bf057cd9d32411c3c342ce41b94c8cffcd13fc5c9df63ec21c1657fe122ed255f02a26407161f8215157beef8e03fb817420efa420f3c13787f2b62feba7b23f475836e8a4329ba9972ad6d8fff299fbb6ba9c2e88e0e1739406c9999a6b0276c20563a95f0959fcf87791be56373f6ba2920399fd0d91f9abc4b019cf9a4463b472f8b03a82fc9fb26f006dcb991c6da4a1b032f3a667a3622c5dcb300eef3d7e37ec4615d713", 0x1, 0x0, 0x5}, 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r7, 0x0)
mount$9p_rdma(&(0x7f0000000180), 0x0, &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c706f7274373078303430303030303030303030346532342c74696d656f75743d3078303030303030303030303030303030302c0096c8ef61a7d0e12e74cf322b8d5245092afef8b6f2968e062da99da4b2d1c0e03771e755eaf5a05f0f24e2fd9ac9920b4b0847e6304498c0253735ecf5e3734b11e69d0901bb4474a7fb8bad58922b267f046c1d7baeae3ab4192fb14ed846856edf861d5e3e1e5f801ddc64f4ef50"])
dup(0xffffffffffffffff)

1.536275696s ago: executing program 2 (id=1215):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
unlink(&(0x7f0000000200)='./file0\x00')
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
socket$key(0xf, 0x3, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x30)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe})
openat$udambuf(0xffffff9c, &(0x7f0000000180), 0x2)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4})
close(r4)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

1.205296281s ago: executing program 0 (id=1218):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=<r8=>0x0)
nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40))
r9 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0))
r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0)
pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0)
syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}})
io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}})
io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)

462.360017ms ago: executing program 1 (id=1223):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r0, 0x10ada85e65c25359, 0x70bd25, 0x25dfdbfd, {{0x6b}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x2004000)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x81e88c, 0x0)
r3 = socket(0x15, 0x5, 0x0)
epoll_create(0x0)
close_range(0xffffffffffffffff, r3, 0x2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x4, 0xa620, 0x3})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x80010, 0xffffffffffffffff, 0xec778000)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r6 = fsopen(0x0, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x4010)
sendmsg$nl_route(r8, 0x0, 0x4000000)
fcntl$setpipe(r7, 0x8, 0x80000000)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
socket$inet6(0xa, 0x5, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x2})

438.025291ms ago: executing program 2 (id=1224):
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040f0409010b08"], 0x7)

376.579577ms ago: executing program 1 (id=1225):
fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x60a20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x203, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0x2, 0x3, 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

376.248841ms ago: executing program 2 (id=1226):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000)
ptrace(0x10, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x1, 0x7, {{0x31, 0x4, 0x3, 0x9, 0xc4, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x27, 0xc3, [@remote, @local, @local, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @multicast2]}, @rr={0x7, 0x1b, 0x5f, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @local, @multicast1]}, @noop, @rr={0x7, 0x1f, 0xaa, [@private=0xa010101, @empty, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @ssrr={0x89, 0x13, 0x31, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_addr={0x44, 0x34, 0x37, 0x1, 0x7, [{@remote, 0x9}, {@local, 0x2}, {@empty, 0x6}, {@broadcast, 0x5}, {@multicast2, 0x9}, {@multicast1, 0xfffffffc}]}, @rr={0x7, 0x7, 0xef, [@loopback]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
r7 = socket$inet(0x2, 0x1, 0x6)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0xffffffffffffffff)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000f80)={0x80000000, &(0x7f0000000ec0), &(0x7f0000000f00)})
bind$inet(r7, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
listen(r7, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]})
ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000))
fstat(r5, &(0x7f0000000140))
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7", 0x92})

264.158592ms ago: executing program 0 (id=1227):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{0x9}, {0xa, 0xf3}}}}, 0x8)

179.501594ms ago: executing program 1 (id=1228):
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SC_SUPPORT={{0x3f}, 0x6}}}, 0x7)

177.258456ms ago: executing program 0 (id=1229):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0)
ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000880)=@manufact={0x4, 0x3, 0x800, "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"})

82.257221ms ago: executing program 1 (id=1230):
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc9, 0x9}}}, 0x7)

82.140071ms ago: executing program 1 (id=1231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000050900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000408000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800024000000015080001400000000f08000640000000010900010073797a30"], 0x108}}, 0x0)

548.39µs ago: executing program 0 (id=1232):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x1d, 0x200, &(0x7f0000003c40)="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"})

0s ago: executing program 1 (id=1233):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'ni_at_a2150\x00', [0x140, 0xfffffffc, 0x1000c, 0xdddc, 0x0, 0xbd, 0x7fff, 0x2, 0x7, 0x3, 0x2000004, 0xf, 0xc000, 0x8, 0x4ce, 0x8e99, 0x80000001, 0xed, 0x5, 0x8, 0xacf, 0x80000001, 0x800000a, 0x9, 0xffd, 0x9, 0xb1, 0x9, 0x281, 0x8001, 0xe43f]})

kernel console output (not intermixed with test programs):

or of length 0, skipping remainder of the config
[   83.515019][ T1488] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.518509][ T1488] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   83.523401][ T1488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   83.526163][ T1488] usb 7-1: SerialNumber: syz
[   83.531306][ T1488] hub 7-1:1.0: bad descriptor, ignoring hub
[   83.533431][ T1488] hub 7-1:1.0: probe with driver hub failed with error -5
[   83.536724][ T1488] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[   83.855222][ T1488] usb 7-1: USB disconnect, device number 7
[   83.997629][ T7081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.095345][ T7077] comedi comedi1: reset error (fatal)
[   84.914101][ T5812] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   85.084120][ T5812] usb 9-1: Using ep0 maxpacket: 8
[   85.087407][ T5812] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   85.095857][ T5812] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[   85.099417][ T5812] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.103457][ T5812] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.107502][ T5812] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[   85.111925][ T5812] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   85.117493][ T5812] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.122950][ T5812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.279077][ T7140] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   85.336634][ T5812] usb 9-1: GET_CAPABILITIES returned 0
[   85.341807][ T5812] usbtmc 9-1:16.0: can't read capabilities
[   85.568444][    C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.572571][    C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.576130][    C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.580092][    C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.586854][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.590458][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.593923][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.597487][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.601706][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.605252][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.608756][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.612223][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.615692][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.621071][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.624667][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   85.628191][    C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[   85.635061][ T5821] usb 9-1: USB disconnect, device number 3
[   86.849212][ T7158] syzkaller1: entered allmulticast mode
[   87.186572][ T5812] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   87.344930][ T5812] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.350517][ T5812] usb 9-1: config index 0 descriptor too short (expected 45, got 36)
[   87.353797][ T5812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.357898][ T5812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.361958][ T5812] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.367348][ T5812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.371898][ T5812] usb 9-1: config 0 descriptor??
[   87.416751][ T7185] netlink: 'syz.0.434': attribute type 1 has an invalid length.
[   87.455417][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   87.469976][ T7185] bond1: (slave geneve2): making interface the new active one
[   87.473660][ T7185] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   87.504229][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   87.508162][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   87.512686][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   87.518488][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   87.531043][ T7188] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   87.606611][ T5923] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   87.612808][ T5923] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.618065][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.633145][ T5923] as10x_usb: device has been detected
[   87.637423][ T5923] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   87.659771][ T5923] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   87.673826][ T5923] as10x_usb: error during firmware upload part1
[   87.677084][ T5923] Registered device Abilis Systems DVB-Titan
[   87.798487][ T5812] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd
[   87.822771][ T5812] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   87.992170][ T5099] usb 9-1: USB disconnect, device number 4
[   88.067923][ T7202] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   88.129421][   T42] kauditd_printk_skb: 4 callbacks suppressed
[   88.129439][   T42] audit: type=1400 audit(1786957979.213:460): avc:  denied  { create } for  pid=7207 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   88.140625][   T42] audit: type=1400 audit(1786957979.213:461): avc:  denied  { setopt } for  pid=7207 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   88.149510][   T42] audit: type=1400 audit(1786957979.213:462): avc:  denied  { bind } for  pid=7207 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   88.161740][   T42] audit: type=1400 audit(1786957979.233:463): avc:  denied  { write } for  pid=7207 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   88.389120][   T29] usb 6-1: USB disconnect, device number 5
[   88.403195][   T29] Unregistered device Abilis Systems DVB-Titan
[   88.405032][   T29] as10x_usb: device has been disconnected
[   88.646967][ T7220] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   88.698443][   T42] audit: type=1400 audit(1786957979.783:464): avc:  denied  { write } for  pid=7222 comm="syz.2.449" path="socket:[19886]" dev="sockfs" ino=19886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   88.946838][ T7236] gadgetfs: bound to dummy_udc driver
[   88.994136][   T42] audit: type=1400 audit(1786957980.073:465): avc:  denied  { unmount } for  pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   89.023050][   T42] audit: type=1400 audit(1786957980.103:466): avc:  denied  { shutdown } for  pid=7240 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   89.031429][   T42] audit: type=1400 audit(1786957980.103:467): avc:  denied  { getopt } for  pid=7240 comm="syz.1.459" lport=39644 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   89.045577][ T7238] kvm: kvm [7237]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   89.052231][ T7238] kvm: kvm [7237]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   89.076786][   T42] audit: type=1400 audit(1786957980.163:468): avc:  denied  { create } for  pid=7244 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   89.083592][   T42] audit: type=1400 audit(1786957980.163:469): avc:  denied  { bind } for  pid=7244 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   89.200890][ T7250] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   89.208304][ T7250] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   89.211153][ T7250] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   89.213885][ T7250] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   89.439694][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'.
[   89.460828][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'.
[   89.467610][ T5829] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.479999][ T5829] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.483626][ T5829] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.488167][ T5829] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.525727][ T7336] kvm: pic: level sensitive irq not supported
[   90.682863][ T7345] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer.
[   91.214327][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout
[   91.215556][   T65] Bluetooth: hci1: command 0x0c1a tx timeout
[   91.219459][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout
[   91.294232][ T5085] Bluetooth: hci2: command 0x041b tx timeout
[   91.644788][ T7370] netlink: 112 bytes leftover after parsing attributes in process `syz.0.508'.
[   91.923102][ T7385] gadgetfs: bound to dummy_udc driver
[   92.359245][ T7396] kvm: kvm [7395]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   92.363375][ T7396] kvm: kvm [7395]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   92.670414][ T7410] lo: entered promiscuous mode
[   92.676021][ T7410] bond0: entered promiscuous mode
[   92.679412][ T7410] dummy0: entered promiscuous mode
[   92.684913][ T7410] eql: entered promiscuous mode
[   92.694326][ T7410] ifb0: entered promiscuous mode
[   92.697321][ T7410] ifb1: entered promiscuous mode
[   92.703701][ T7410] e1000 0000:00:06.0 eth0: entered promiscuous mode
[   92.723051][ T7410] e1000e 0000:00:02.0 eth1: entered promiscuous mode
[   92.730724][ T7410] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[   92.734870][ T7410] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[   92.739884][ T7410] hwsim0: entered promiscuous mode
[   92.742236][ T7410] ieee802154 phy0 wpan0: entered promiscuous mode
[   92.746505][ T7410] ieee802154 phy1 wpan1: entered promiscuous mode
[   92.749015][ T7410] teql0: entered promiscuous mode
[   92.750714][ T7410] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[   92.806710][ T7421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.526'.
[   92.899416][ T7430] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   92.908461][ T7429] ref_ctr_offset mismatch. inode: 0x279 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a
[   93.964127][ T1488] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   94.128976][ T1488] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   94.133922][ T1488] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   94.137931][ T1488] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   94.142102][ T1488] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   94.147550][ T1488] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   94.152435][ T1488] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   94.157306][ T1488] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   94.163721][ T1488] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   94.167514][ T1488] usb 7-1: Product: syz
[   94.169260][ T1488] usb 7-1: Manufacturer: syz
[   94.175717][ T7437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   94.180552][ T1488] cdc_wdm 7-1:1.0: skipping garbage
[   94.182811][ T1488] cdc_wdm 7-1:1.0: skipping garbage
[   94.189967][ T1488] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   94.192143][ T1488] cdc_wdm 7-1:1.0: Unknown control protocol
[   94.225755][ T7451] xt_hashlimit: size too large, truncated to 1048576
[   94.278426][ T7455] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[   94.369517][   T42] kauditd_printk_skb: 17 callbacks suppressed
[   94.369529][   T42] audit: type=1400 audit(1786957985.453:487): avc:  denied  { mount } for  pid=7461 comm="syz.1.545" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   94.384861][    C3] wdm_int_callback: 8 callbacks suppressed
[   94.384875][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.388909][    C3] wdm_int_callback: 8 callbacks suppressed
[   94.388923][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.393015][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.395225][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.398421][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.400966][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.403151][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.405310][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.407434][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.409630][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.412269][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.414997][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.418238][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.420910][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.424048][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.426708][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.429151][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.431260][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.433499][    C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   94.436086][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   94.470498][ T1488] usb 7-1: USB disconnect, device number 8
[   94.470561][    C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   94.476947][ T7437] cdc_wdm 7-1:1.0: Tx URB error: -19
[   94.717149][ T7476] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   94.735689][ T7476] bond2: entered promiscuous mode
[   94.738295][ T7476] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.752987][ T7476] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.756641][ T7476] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   94.760925][ T7476] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   94.774688][ T7476] bond2: (slave ip6gre1): making interface the new active one
[   94.777743][ T7476] ip6gre1: entered promiscuous mode
[   94.780741][ T7476] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[   95.231055][   T42] audit: type=1400 audit(1786957986.313:488): avc:  denied  { name_bind } for  pid=7486 comm="syz.2.555" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   95.685698][   T42] audit: type=1400 audit(1786957986.763:489): avc:  denied  { shutdown } for  pid=7500 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.764979][   T42] audit: type=1400 audit(1786957986.853:490): avc:  denied  { create } for  pid=7503 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   95.820658][ T5812] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   96.005047][ T5812] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   96.025722][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.030189][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.047387][ T5812] usb 5-1: config 0 descriptor??
[   96.475662][ T5812] savu 0003:1E7D:2D5A.0006: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[   96.791676][ T1488] usb 5-1: USB disconnect, device number 10
[   96.939549][   T42] audit: type=1400 audit(1786957988.023:491): avc:  denied  { mounton } for  pid=7514 comm="syz.4.565" path="/72/file1/file0" dev="autofs" ino=22564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[   97.450168][ T7517] xt_hashlimit: size too large, truncated to 1048576
[   97.695095][   T65] Bluetooth: hci2: command 0x041b tx timeout
[   99.010733][   T42] audit: type=1800 audit(1786957990.093:492): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.571" name="file0" dev="overlay" ino=703 res=0 errno=0
[   99.095553][ T7535] Bluetooth: Invalid esc byte 0x03
[   99.398340][   T42] audit: type=1400 audit(1786957990.483:493): avc:  denied  { create } for  pid=7542 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.414059][   T42] audit: type=1400 audit(1786957990.483:494): avc:  denied  { bind } for  pid=7542 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.424420][   T42] audit: type=1400 audit(1786957990.493:495): avc:  denied  { listen } for  pid=7542 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.431008][   T42] audit: type=1400 audit(1786957990.493:496): avc:  denied  { write } for  pid=7542 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.437096][   T42] audit: type=1400 audit(1786957990.493:497): avc:  denied  { read } for  pid=7542 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.496514][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'.
[   99.518808][ T7547] macvlan0: entered allmulticast mode
[   99.520717][ T7547] e1000 0000:00:06.0 eth0: entered allmulticast mode
[   99.531486][ T7547] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  101.163489][   T42] audit: type=1800 audit(1786957992.243:498): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.581" name="file0" dev="overlay" ino=994 res=0 errno=0
[  101.484621][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.584'.
[  101.487629][ T7570] netlink: 'syz.2.584': attribute type 7 has an invalid length.
[  101.490480][ T7570] netlink: 'syz.2.584': attribute type 8 has an invalid length.
[  101.493094][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'.
[  101.807374][ T7521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  101.955688][   T42] audit: type=1400 audit(1786957993.043:499): avc:  denied  { write } for  pid=7577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.002109][   T42] audit: type=1400 audit(1786957993.083:500): avc:  denied  { write } for  pid=7580 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.014731][ T7583] netlink: 'syz.2.587': attribute type 1 has an invalid length.
[  102.032772][ T7583] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.050389][ T7583] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  102.125105][   T42] audit: type=1400 audit(1786957993.213:501): avc:  denied  { write } for  pid=7586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.219095][   T42] audit: type=1400 audit(1786957993.303:502): avc:  denied  { write } for  pid=7594 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.989342][ T7621] capability: warning: `syz.1.597' uses 32-bit capabilities (legacy support in use)
[  103.344087][   T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  103.494237][   T29] usb 5-1: Using ep0 maxpacket: 8
[  103.497369][   T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  103.502253][   T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  103.505775][   T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  103.509811][   T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  103.512805][   T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  103.516792][   T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  103.520673][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.729759][   T29] usb 5-1: usb_control_msg returned -32
[  103.731646][   T29] usbtmc 5-1:16.0: can't read capabilities
[  104.082563][ T7639] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  104.283712][ T5099] usb 5-1: USB disconnect, device number 11
[  104.808022][ T7641] netlink: 'syz.1.604': attribute type 1 has an invalid length.
[  104.846051][ T7645] Driver unsupported XDP return value 0 on prog  (id 45) dev N/A, expect packet loss!
[  104.853392][ T7641] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.897010][ T7641] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[  105.151563][ T7658] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer.
[  105.165104][ T7658] kvm: kvm [7657]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  105.168678][ T7658] kvm: kvm [7657]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  105.230201][ T7661] syz.1.610 (7661): drop_caches: 2
[  105.376942][ T7666] syzkaller1: entered promiscuous mode
[  105.379258][ T7666] syzkaller1: entered allmulticast mode
[  106.028847][ T7669] kvm: kvm [7667]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[  106.608378][   T42] kauditd_printk_skb: 2 callbacks suppressed
[  106.608397][   T42] audit: type=1400 audit(1786957997.693:505): avc:  denied  { write } for  pid=7685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.672119][   T42] audit: type=1400 audit(1786957997.753:506): avc:  denied  { write } for  pid=7688 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  107.383126][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'.
[  107.386157][ T7698] netlink: 'syz.0.621': attribute type 7 has an invalid length.
[  107.388620][ T7698] netlink: 'syz.0.621': attribute type 8 has an invalid length.
[  107.390980][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[  107.452571][   T42] audit: type=1326 audit(1786957998.533:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.622" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f142879e0d9 code=0x0
[  107.661123][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.665341][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.731270][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.739994][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.866698][ T5777] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.870072][ T5777] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  107.873432][ T5777] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.876561][ T5777] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  107.879917][ T5777] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.882976][ T5777] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  107.885971][ T5777] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.888893][ T5777] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  108.286898][   T42] audit: type=1400 audit(1786957999.373:508): avc:  denied  { mount } for  pid=7716 comm="syz.2.626" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  108.897474][   T42] audit: type=1400 audit(1786957999.983:509): avc:  denied  { write } for  pid=7719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.951723][   T42] audit: type=1400 audit(1786958000.033:510): avc:  denied  { write } for  pid=7722 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.970229][ T7674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  109.236076][   T42] audit: type=1400 audit(1786958000.323:511): avc:  denied  { write } for  pid=7739 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  109.250728][   T42] audit: type=1400 audit(1786958000.323:512): avc:  denied  { read } for  pid=7739 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  109.677557][ T7755] netlink: 'syz.1.640': attribute type 4 has an invalid length.
[  109.744672][ T7761] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.643'.
[  110.014119][   T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  110.164074][   T34] usb 7-1: Using ep0 maxpacket: 8
[  110.166381][   T34] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  110.170299][   T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.173709][   T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  110.176792][   T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  110.180693][   T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  110.184944][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.192703][   T34] hub 7-1:1.0: bad descriptor, ignoring hub
[  110.195324][   T34] hub 7-1:1.0: probe with driver hub failed with error -5
[  110.198765][   T34] cdc_wdm 7-1:1.0: skipping garbage
[  110.200944][   T34] cdc_wdm 7-1:1.0: skipping garbage
[  110.204693][   T34] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  110.207255][   T34] cdc_wdm 7-1:1.0: Unknown control protocol
[  110.577770][   T42] audit: type=1400 audit(1786958001.663:513): avc:  denied  { write } for  pid=7770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.631294][   T42] audit: type=1400 audit(1786958001.713:514): avc:  denied  { write } for  pid=7773 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.964067][ T5821] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  111.074599][ T7764] usb 7-1: reset high-speed USB device number 9 using dummy_hcd
[  111.135138][ T5821] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  111.140297][ T5821] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  111.144158][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.147628][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.150655][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  111.156007][ T5821] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  111.158736][ T5821] usb 6-1: Manufacturer: syz
[  111.161715][ T5821] usb 6-1: config 0 descriptor??
[  111.235888][ T7764] usb 7-1: device firmware changed
[  111.239156][ T6077] usb 7-1: USB disconnect, device number 9
[  111.394121][ T6077] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  111.564114][ T6077] usb 7-1: Using ep0 maxpacket: 8
[  111.566443][ T6077] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  111.570359][ T6077] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  111.577843][ T6077] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  111.582894][ T5821] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  111.585205][ T6077] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  111.590860][ T6077] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.603447][ T6077] hub 7-1:1.0: bad descriptor, ignoring hub
[  111.606044][ T5821] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  111.609602][ T6077] hub 7-1:1.0: probe with driver hub failed with error -5
[  111.613219][ T6077] cdc_wdm 7-1:1.0: skipping garbage
[  111.614958][ T6077] cdc_wdm 7-1:1.0: skipping garbage
[  111.618256][ T6077] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  111.835857][ T6077] usb 6-1: USB disconnect, device number 6
[  111.934276][ T5812] usb 7-1: USB disconnect, device number 10
[  111.979180][ T7792] netlink: 'syz.0.650': attribute type 4 has an invalid length.
[  112.025716][   T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.032929][   T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.039396][   T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.043401][   T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.048116][   T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.370264][ T7817] jffs2: notice: (7817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  112.377466][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.380111][   T42] audit: type=1400 audit(1786958003.463:515): avc:  denied  { write } for  pid=7816 comm="syz.1.655" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  112.380489][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.393746][ T7793] bridge_slave_0: entered allmulticast mode
[  112.399012][ T7793] bridge_slave_0: entered promiscuous mode
[  112.403072][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.407289][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.409966][ T7793] bridge_slave_1: entered allmulticast mode
[  112.413001][ T7793] bridge_slave_1: entered promiscuous mode
[  112.420072][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'.
[  112.440209][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.445587][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.463238][ T7793] team0: Port device team_slave_0 added
[  112.467169][ T7793] team0: Port device team_slave_1 added
[  112.484097][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.486293][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.493596][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.497708][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.499847][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.507607][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.534089][ T7793] hsr_slave_0: entered promiscuous mode
[  112.536318][ T7793] hsr_slave_1: entered promiscuous mode
[  112.538478][ T7793] debugfs: 'hsr0' already exists in 'hsr'
[  112.540704][ T7793] Cannot create hsr debugfs directory
[  112.809111][   T42] audit: type=1400 audit(1786958003.893:516): avc:  denied  { write } for  pid=7834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  112.851712][   T42] audit: type=1400 audit(1786958003.933:517): avc:  denied  { write } for  pid=7839 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.770381][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.772994][ T7847] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  113.807839][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.812831][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.884269][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.887978][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.891423][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.894748][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.104501][   T65] Bluetooth: hci4: command tx timeout
[  114.586901][   T42] audit: type=1400 audit(1786958005.673:518): avc:  denied  { write } for  pid=7861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.631122][   T42] audit: type=1400 audit(1786958005.713:519): avc:  denied  { write } for  pid=7864 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.638863][ T7829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  115.644821][ T7793] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  115.660558][ T7793] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  115.674936][ T7793] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  115.679731][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'.
[  115.685122][ T7793] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  115.698095][ T7872] jffs2: notice: (7872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  115.701034][ T7793] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  115.707124][   T42] audit: type=1400 audit(1786958006.793:520): avc:  denied  { write } for  pid=7870 comm="syz.0.666" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  115.719272][ T7793] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  115.723519][ T7793] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  115.752256][ T7793] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  115.836636][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.851231][ T7793] 8021q: adding VLAN 0 to HW filter on device team0
[  115.859033][  T119] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.862111][  T119] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.870812][  T119] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.873770][  T119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.014124][ T5821] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  116.122084][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.165882][ T5821] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  116.170889][ T5821] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  116.174327][   T65] Bluetooth: hci4: command tx timeout
[  116.176554][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.180827][ T7897] geneve3: entered promiscuous mode
[  116.188738][ T7880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  116.194074][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.200761][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.209441][ T5821] opticon 6-1:1.0: opticon converter detected
[  116.209740][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.219754][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.223095][ T5821] usb 6-1: opticon converter now attached to ttyUSB0
[  116.341746][ T7793] veth0_vlan: entered promiscuous mode
[  116.350130][ T7793] veth1_vlan: entered promiscuous mode
[  116.363625][ T7909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=7909 comm=syz.2.675
[  116.364899][ T7793] veth0_macvtap: entered promiscuous mode
[  116.374363][ T7793] veth1_macvtap: entered promiscuous mode
[  116.384797][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.391898][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.425886][ T5829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.428987][ T5829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.431863][ T5829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.436602][ T5829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.483395][  T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.486705][  T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.515970][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.519971][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.536164][   T42] audit: type=1400 audit(1786958007.623:521): avc:  denied  { mounton } for  pid=7793 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  116.853775][ T7923] jffs2: notice: (7923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  116.864957][   T42] audit: type=1400 audit(1786958007.953:522): avc:  denied  { write } for  pid=7921 comm="syz.5.678" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  116.874757][  T150] usb 6-1: USB disconnect, device number 7
[  116.882095][  T150] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  116.885697][  T150] opticon 6-1:1.0: device disconnected
[  116.937188][   T42] audit: type=1400 audit(1786958008.023:523): avc:  denied  { cmd } for  pid=7928 comm="syz.5.681" path="socket:[22383]" dev="sockfs" ino=22383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  117.244084][   T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  117.414123][   T34] usb 5-1: Using ep0 maxpacket: 16
[  117.418340][   T34] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  117.427363][   T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  117.434442][   T34] usb 5-1: config 0 interface 0 has no altsetting 0
[  117.445163][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.450823][   T34] usb 5-1: Product: syz
[  117.452481][   T34] usb 5-1: Manufacturer: syz
[  117.459962][   T34] usb 5-1: SerialNumber: syz
[  117.465697][ T7953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=7953 comm=syz.5.693
[  117.469098][   T34] usb 5-1: config 0 descriptor??
[  117.686020][    C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  117.696509][   T34] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9
[  117.715940][   T34] imon:send_packet: packet tx failed (-71)
[  117.734047][   T34] imon 5-1:0.0: panel buttons/knobs setup failed
[  117.784239][   T34] rc_core: IR keymap rc-imon-pad not found
[  117.787502][   T34] Registered IR keymap rc-empty
[  117.789444][   T34] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  117.792572][   T34] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  117.796967][   T34] imon:send_packet: packet tx failed (-71)
[  117.814214][   T34] imon 5-1:0.0: remote input dev register failed
[  117.817073][   T34] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[  117.852607][   T34] imon 5-1:0.0: unable to initialize intf0, err 0
[  117.857829][   T34] imon:imon_probe: failed to initialize context!
[  117.860727][   T34] imon 5-1:0.0: unable to register, err -19
[  117.866923][   T34] usb 5-1: USB disconnect, device number 12
[  118.234185][   T34] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  118.254191][   T65] Bluetooth: hci4: command tx timeout
[  118.294116][ T6077] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  118.378934][ T7957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.394809][   T34] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  118.402004][   T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  118.412012][   T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[  118.424056][   T34] usb 5-1: config 0 interface 0 has no altsetting 0
[  118.430737][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.434788][   T34] usb 5-1: Product: syz
[  118.436644][   T34] usb 5-1: Manufacturer: syz
[  118.438694][   T34] usb 5-1: SerialNumber: syz
[  118.446232][   T34] usb 5-1: config 0 descriptor??
[  118.449274][ T7931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.464342][ T6077] usb 6-1: Using ep0 maxpacket: 8
[  118.466595][ T6077] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  118.470965][ T6077] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.474805][ T6077] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  118.477769][ T6077] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  118.482945][ T6077] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  118.487716][ T6077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.497256][ T6077] hub 6-1:1.0: bad descriptor, ignoring hub
[  118.499793][ T6077] hub 6-1:1.0: probe with driver hub failed with error -5
[  118.503390][ T6077] cdc_wdm 6-1:1.0: skipping garbage
[  118.507408][ T6077] cdc_wdm 6-1:1.0: skipping garbage
[  118.511849][ T6077] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  118.514426][ T6077] cdc_wdm 6-1:1.0: Unknown control protocol
[  118.671097][    C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  118.678504][   T34] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11
[  118.954246][   T34] rc_core: IR keymap rc-imon-pad not found
[  118.956649][   T34] Registered IR keymap rc-empty
[  118.958686][   T34] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  118.962699][   T34] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  119.085513][   T34] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0
[  119.091628][   T34] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input12
[  119.099586][   T34] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:13> initialized
[  119.358184][ T7975] usb 6-1: reset high-speed USB device number 8 using dummy_hcd
[  119.361303][ T7975] usb 6-1: device reset changed ep0 maxpacket size!
[  119.367500][   T62] usb 6-1: USB disconnect, device number 8
[  119.371414][ T7931] cdc_wdm 6-1:1.0: Error autopm - -16
[  119.376723][   T34] usb 5-1: USB disconnect, device number 13
[  119.514186][   T62] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  119.678367][   T62] usb 6-1: unable to get BOS descriptor or descriptor too short
[  119.681279][   T62] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e300, bcdDevice=4b.7e
[  119.685416][   T62] usb 6-1: unable to read config index 0 descriptor/start: -71
[  119.688256][   T62] usb 6-1: can't read configurations, error -71
[  120.204902][ T7998] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  120.290440][   T42] audit: type=1326 audit(1786958011.373:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.1.707" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe26b59e0d9 code=0x0
[  120.344095][   T65] Bluetooth: hci4: command tx timeout
[  120.554074][ T5099] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  120.715454][ T5099] usb 5-1: Using ep0 maxpacket: 16
[  120.717739][ T5099] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  120.721500][ T5099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.725050][ T5099] usb 5-1: config 0 has no interfaces?
[  120.725696][   T65] Bluetooth: hci1: unexpected event for opcode 0x202d
[  120.728683][ T5099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.732496][ T5099] usb 5-1: Product: syz
[  120.734623][ T5099] usb 5-1: Manufacturer: syz
[  120.736409][ T5099] usb 5-1: SerialNumber: syz
[  120.742002][ T5099] usb 5-1: config 0 descriptor??
[  121.096162][ T8018] kvm: user requested TSC rate below hardware speed
[  121.138341][ T8018] kvm: kvm [8017]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  121.142220][ T8018] kvm: kvm [8017]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  121.144144][   T62] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  121.194204][ T6077] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  121.305061][   T62] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  121.308890][   T62] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  121.311767][   T62] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.315290][   T62] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  121.319201][   T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.325212][   T62] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  121.327854][   T62] usb 7-1: Product: syz
[  121.329285][   T62] usb 7-1: Manufacturer: syz
[  121.345356][ T6077] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  121.350649][   T62] cdc_wdm 7-1:1.0: skipping garbage
[  121.351415][ T6077] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  121.353041][   T62] cdc_wdm 7-1:1.0: skipping garbage
[  121.355892][ T6077] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  121.355919][ T6077] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.357914][   T42] audit: type=1400 audit(1786958012.443:525): avc:  denied  { write } for  pid=8020 comm="syz.1.716" name="subsystems" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  121.360176][   T62] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  121.361873][   T42] audit: type=1400 audit(1786958012.443:526): avc:  denied  { add_name } for  pid=8020 comm="syz.1.716" name="subsys1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  121.362230][ T6077] spcp8x5 10-1:1.0: SPCP8x5 converter detected
[  121.362752][ T8021] nvmet: adding nsid 1 to subsystem subsys1
[  121.365014][   T62] cdc_wdm 7-1:1.0: Unknown control protocol
[  121.370348][ T6077] usb 10-1: SPCP8x5 converter now attached to ttyUSB0
[  121.373769][   T42] audit: type=1400 audit(1786958012.443:527): avc:  denied  { create } for  pid=8020 comm="syz.1.716" name="subsys1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  121.406112][   T42] audit: type=1400 audit(1786958012.443:528): avc:  denied  { write } for  pid=8020 comm="syz.1.716" name="namespaces" dev="configfs" ino=26656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  121.413353][   T42] audit: type=1400 audit(1786958012.453:529): avc:  denied  { write } for  pid=8020 comm="syz.1.716" name="enable" dev="configfs" ino=26659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  121.421088][   T42] audit: type=1400 audit(1786958012.453:530): avc:  denied  { open } for  pid=8020 comm="syz.1.716" path="/166/config/nvmet/subsystems/subsys1/namespaces/1/enable" dev="configfs" ino=26659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  121.446648][ T8023] syzkaller1: entered promiscuous mode
[  121.449594][ T8023] syzkaller1: entered allmulticast mode
[  121.540702][ T6586] usb 7-1: USB disconnect, device number 11
[  121.744605][ T8016] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  121.750517][ T8016] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  121.753642][ T8016] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  121.837015][ T8016] SPCP8x5 ttyUSB0: Set UART format 0x300c failed (error = -32)
[  121.944462][ T8015] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  121.950612][   T62] usb 10-1: USB disconnect, device number 2
[  121.957038][ T8032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'.
[  121.969621][   T62] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  121.973382][   T62] spcp8x5 10-1:1.0: device disconnected
[  122.004062][ T6586] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  122.154684][ T6586] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  122.159361][ T6586] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  122.162946][ T6586] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.168289][ T6586] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  122.172169][ T6586] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.178882][ T6586] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  122.181951][ T6586] usb 7-1: Product: syz
[  122.183335][ T6586] usb 7-1: Manufacturer: syz
[  122.188231][ T6586] cdc_wdm 7-1:1.0: skipping garbage
[  122.189927][ T6586] cdc_wdm 7-1:1.0: skipping garbage
[  122.192398][ T6586] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  122.195699][ T6586] cdc_wdm 7-1:1.0: Unknown control protocol
[  122.425070][ T5099] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  122.584064][ T5099] usb 6-1: Using ep0 maxpacket: 8
[  122.587536][ T5099] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  122.592486][ T5099] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  122.596251][ T5099] usb 6-1: config 0 has no interface number 0
[  122.599213][ T5099] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  122.603738][ T5099] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  122.608541][ T5099] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  122.612854][ T5099] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  122.618038][ T5099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.623549][ T5099] usb 6-1: config 0 descriptor??
[  122.630417][ T5099] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  122.899530][   T29] usb 6-1: USB disconnect, device number 11
[  122.909308][   T29] ldusb 6-1:0.55: LD USB Device #1 now disconnected
[  122.946548][    C0] wdm_int_callback: 168 callbacks suppressed
[  122.946573][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  122.946977][   T62] usb 7-1: USB disconnect, device number 12
[  122.949102][    C0] wdm_int_callback: 168 callbacks suppressed
[  122.949123][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  122.949140][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  123.265997][   T42] audit: type=1400 audit(1786958014.353:531): avc:  denied  { read } for  pid=8061 comm="syz.5.731" name="file0" dev="9p" ino=79691783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  123.277198][   T42] audit: type=1400 audit(1786958014.353:532): avc:  denied  { open } for  pid=8061 comm="syz.5.731" path="/21/file1/file0" dev="9p" ino=79691783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  123.285624][   T42] audit: type=1400 audit(1786958014.363:533): avc:  denied  { append } for  pid=8061 comm="syz.5.731" name="file0" dev="9p" ino=79691783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  123.286580][   T29] usb 5-1: USB disconnect, device number 14
[  123.627448][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.735'.
[  123.774187][  T150] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  123.935937][  T150] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  123.943829][  T150] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  123.948783][  T150] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  123.951839][  T150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.962944][  T150] spcp8x5 5-1:1.0: SPCP8x5 converter detected
[  123.971669][  T150] usb 5-1: SPCP8x5 converter now attached to ttyUSB0
[  124.024096][ T6077] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  124.189152][ T6077] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  124.202124][ T6077] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.206746][ T6077] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.245649][ T6077] as10x_usb: device has been detected
[  124.248626][ T6077] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  124.266116][ T6077] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  124.300367][ T6077] as10x_usb: error during firmware upload part1
[  124.302811][ T6077] Registered device Abilis Systems DVB-Titan
[  124.311748][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x3f
[  124.338729][ T8069] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  124.342172][ T8069] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  124.349485][ T8069] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  124.435832][ T8080] netlink: 'syz.2.738': attribute type 29 has an invalid length.
[  124.438826][ T8080] netlink: 'syz.2.738': attribute type 3 has an invalid length.
[  124.439344][ T8069] SPCP8x5 ttyUSB0: Set UART format 0x300c failed (error = -32)
[  124.441590][ T8080] netlink: 76 bytes leftover after parsing attributes in process `syz.2.738'.
[  124.568786][ T8068] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  124.582832][ T6586] usb 5-1: USB disconnect, device number 15
[  124.587897][ T6586] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  124.594620][ T6586] spcp8x5 5-1:1.0: device disconnected
[  125.140816][ T8097] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size.
[  125.884525][   T42] kauditd_printk_skb: 2 callbacks suppressed
[  125.884544][   T42] audit: type=1400 audit(1786958016.973:536): avc:  denied  { setopt } for  pid=8118 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  125.952842][   T42] audit: type=1400 audit(1786958017.033:537): avc:  denied  { write } for  pid=8118 comm="syz.5.751" path="socket:[27665]" dev="sockfs" ino=27665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  126.074544][ T1488] usb 7-1: USB disconnect, device number 13
[  126.090420][ T1488] Unregistered device Abilis Systems DVB-Titan
[  126.092899][ T1488] as10x_usb: device has been disconnected
[  126.241305][ T8129] netlink: 'syz.0.755': attribute type 1 has an invalid length.
[  126.263413][ T8129] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.305546][ T8129] bond2: (slave geneve4): making interface the new active one
[  126.310830][ T8129] bond2: (slave geneve4): Enslaving as an active interface with an up link
[  126.769241][ T8143] IPVS: lc: FWM 3 0x00000003 - no destination available
[  126.770514][  T150] IPVS: starting estimator thread 0...
[  126.864253][ T8144] IPVS: using max 26 ests per chain, 62400 per kthread
[  127.220723][ T8088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.224090][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.751'.
[  127.227909][ T8119] tipc: Started in network mode
[  127.230125][ T8119] tipc: Node identity 4, cluster identity 4711
[  127.232740][ T8119] tipc: Node number set to 4
[  127.515531][ T8162] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  127.584543][ T8166] ip6gre2: entered promiscuous mode
[  127.586972][ T8166] ip6gre2: entered allmulticast mode
[  127.606689][ T5829] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  127.613798][ T5829] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  127.622667][ T8166] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  127.644235][   T34] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  127.672548][ T8170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  128.527239][   T42] audit: type=1400 audit(1786958019.613:538): avc:  denied  { write } for  pid=8221 comm="syz.0.791" name="/" dev="9p" ino=79691781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.547290][   T42] audit: type=1400 audit(1786958019.633:539): avc:  denied  { remove_name } for  pid=8221 comm="syz.0.791" name="file0" dev="9p" ino=79691783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.556713][   T42] audit: type=1400 audit(1786958019.633:540): avc:  denied  { unlink } for  pid=8221 comm="syz.0.791" name="file0" dev="9p" ino=79691783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  128.567158][   T42] audit: type=1400 audit(1786958019.653:541): avc:  denied  { write } for  pid=8221 comm="syz.0.791" name="/" dev="9p" ino=79691781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.575211][ T1488] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  128.579808][   T42] audit: type=1400 audit(1786958019.653:542): avc:  denied  { add_name } for  pid=8221 comm="syz.0.791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.590999][ T1488] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  128.598275][   T42] audit: type=1400 audit(1786958019.653:543): avc:  denied  { create } for  pid=8221 comm="syz.0.791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  128.606671][   T42] audit: type=1400 audit(1786958019.653:544): avc:  denied  { associate } for  pid=8221 comm="syz.0.791" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  128.615640][   T42] audit: type=1400 audit(1786958019.683:545): avc:  denied  { write } for  pid=8221 comm="syz.0.791" name="/" dev="9p" ino=79691781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  128.617367][ T8222] overlayfs: failed to resolve './cgroup': -2
[  128.957745][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.424712][   T65] Bluetooth: hci0: Zero size dump init pkt
[  129.838518][ T8251] kvm: faulting far call emulation tainted memory
[  129.840804][ T8251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.066010][ T8254] jffs2: notice: (8254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  130.369366][ T8271] netlink: 'syz.1.809': attribute type 1 has an invalid length.
[  130.434625][ T8271] 8021q: adding VLAN 0 to HW filter on device bond5
[  130.450582][ T8271] bond4: (slave bond5): making interface the new active one
[  130.467447][ T8271] bond4: (slave bond5): Enslaving as an active interface with an up link
[  130.483740][ T8275] bond4: (slave gretap1): Enslaving as a backup interface with an up link
[  130.528829][ T8271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.809'.
[  130.538205][ T8271] 8021q: adding VLAN 0 to HW filter on device bond4
[  130.748615][ T6077] IPVS: starting estimator thread 0...
[  130.844103][ T8283] IPVS: using max 45 ests per chain, 108000 per kthread
[  130.899966][ T8291] IPVS: wrr: TCP 127.0.0.1:21 - no destination available
[  130.904941][ T1488] IPVS: starting estimator thread 0...
[  131.004075][ T8292] IPVS: using max 44 ests per chain, 105600 per kthread
[  131.057853][   T42] kauditd_printk_skb: 9 callbacks suppressed
[  131.057866][   T42] audit: type=1400 audit(1786958022.143:555): avc:  denied  { write } for  pid=8297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.131356][   T42] audit: type=1400 audit(1786958022.213:556): avc:  denied  { write } for  pid=8300 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.201327][ T8303] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  131.262430][   T42] audit: type=1400 audit(1786958022.343:557): avc:  denied  { write } for  pid=8304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.362419][   T42] audit: type=1400 audit(1786958022.443:558): avc:  denied  { write } for  pid=8307 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.490049][   T42] audit: type=1400 audit(1786958022.573:559): avc:  denied  { write } for  pid=8309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.572772][   T42] audit: type=1400 audit(1786958022.653:560): avc:  denied  { write } for  pid=8318 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.784128][   T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  131.846764][   T42] audit: type=1400 audit(1786958022.933:561): avc:  denied  { ioctl } for  pid=8322 comm="syz.5.824" path="socket:[27451]" dev="sockfs" ino=27451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  131.934192][    C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  131.945001][   T34] usb 6-1: unable to get BOS descriptor or descriptor too short
[  131.947662][   T34] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  131.955761][   T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.959635][   T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.965207][   T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.970642][   T34] usb 6-1: Product: syz
[  131.972010][   T34] usb 6-1: Manufacturer: syz
[  131.976091][   T34] usb 6-1: SerialNumber: syz
[  132.000207][   T34] usb 6-1: selecting invalid altsetting 1
[  132.006648][   T34] usb 6-1: unit 6 not found!
[  132.214698][   T34] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2)
[  132.222356][ T8340] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  132.298697][ T8344] ip6gre1: entered promiscuous mode
[  132.300778][ T8344] ip6gre1: entered allmulticast mode
[  132.302175][   T34] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  132.306137][ T5829] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  132.313617][   T34] usb 6-1: USB disconnect, device number 12
[  132.318706][ T5829] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  132.322252][ T8344] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  132.337416][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.439598][   T42] audit: type=1400 audit(1786958023.523:562): avc:  denied  { map } for  pid=8348 comm="syz.5.835" path="socket:[26489]" dev="sockfs" ino=26489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  132.503452][   T42] audit: type=1400 audit(1786958023.583:563): avc:  denied  { write } for  pid=8352 comm="syz.5.837" name="usb_gadget" dev="configfs" ino=6216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  132.517156][ T8351] syzkaller0: entered promiscuous mode
[  132.527253][ T8351] syzkaller0: entered allmulticast mode
[  132.595822][ T8355] netlink: 44 bytes leftover after parsing attributes in process `syz.5.838'.
[  132.667693][ T1434] ieee802154 phy0 wpan0: encryption failed: -22
[  132.667743][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  132.730981][ T8357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.731039][ T8357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  132.884694][   T42] audit: type=1400 audit(1786958023.973:564): avc:  denied  { map } for  pid=8370 comm="syz.5.852" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  132.922453][ T8357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.930060][ T8357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  132.939753][ T8376] netlink: 'syz.1.844': attribute type 1 has an invalid length.
[  132.964306][ T8376] 8021q: adding VLAN 0 to HW filter on device bond6
[  132.983092][ T8373] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  133.019491][ T8357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.024244][ T8357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  133.055947][ T5923] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  133.055961][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  133.105686][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.175052][ T8357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.176183][   T65] Bluetooth: hci4: adv larger than maximum supported
[  133.180773][   T65] Bluetooth: hci4: Unknown advertising packet type: 0x18
[  133.184447][   T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  133.186942][ T8357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  133.187488][   T65] Bluetooth: hci4: Unknown advertising packet type: 0x1e
[  133.197133][   T65] Bluetooth: hci4: Malformed LE Event: 0x0d
[  133.291264][ T8396] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  133.572400][ T5440] 8021q: adding VLAN 0 to HW filter on device eth6
[  133.768649][ T5440] 8021q: adding VLAN 0 to HW filter on device eth7
[  133.949293][ T5440] 8021q: adding VLAN 0 to HW filter on device eth8
[  134.123831][ T8431] syzkaller0: entered promiscuous mode
[  134.128478][ T8431] syzkaller0: entered allmulticast mode
[  134.241641][ T5440] 8021q: adding VLAN 0 to HW filter on device eth9
[  134.253830][ T8437] zram0: detected capacity change from 0 to 8
[  134.330028][ T8441] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  134.504219][ T8444] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  134.506918][ T8444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  134.528923][ T8444] vhci_hcd vhci_hcd.0: Device attached
[  134.764057][  T150] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  134.784271][   T29] usb 10-1: new low-speed USB device number 3 using dummy_hcd
[  134.945617][   T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  134.953124][   T29] usb 10-1: config 0 has no interfaces?
[  134.958395][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.960531][ T8460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  134.975724][ T8460] block device autoloading is deprecated and will be removed.
[  134.983561][   T29] usb 10-1: config 0 descriptor??
[  135.246890][ T8449] usb 47-1: recv xbuf, 0
[  135.249733][ T5875] usb 10-1: USB disconnect, device number 3
[  135.271777][ T5829] vhci_hcd vhci_hcd.5: stop threads
[  135.289134][ T5829] vhci_hcd vhci_hcd.5: release socket
[  135.305628][ T5829] vhci_hcd vhci_hcd.5: disconnect device
[  135.334195][  T150] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  136.077099][   T42] kauditd_printk_skb: 28 callbacks suppressed
[  136.077118][   T42] audit: type=1326 audit(1786958027.163:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.097849][   T42] audit: type=1326 audit(1786958027.183:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.108310][   T42] audit: type=1326 audit(1786958027.193:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.118649][   T42] audit: type=1326 audit(1786958027.193:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.131444][   T42] audit: type=1326 audit(1786958027.193:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.149028][   T42] audit: type=1326 audit(1786958027.193:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.159462][   T42] audit: type=1326 audit(1786958027.193:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.188623][   T42] audit: type=1326 audit(1786958027.193:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.209874][   T42] audit: type=1326 audit(1786958027.203:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.226300][   T42] audit: type=1326 audit(1786958027.203:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8491 comm="syz.5.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c819e0d9 code=0x7ffc0000
[  136.574201][    C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.129532][ T8511] futex_wake_op: syz.2.880 tries to shift op by 32; fix this program
[  137.309399][ T8519] jffs2: notice: (8519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  137.350888][ T8519] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  137.353372][ T8519] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  137.360019][ T8519] vhci_hcd vhci_hcd.0: Device attached
[  137.622581][ T8523] vhci_hcd: connection closed
[  137.623517][ T5829] vhci_hcd vhci_hcd.2: stop threads
[  137.624453][   T34] usb 42-1: SetAddress Request (2) to port 0
[  137.628460][ T5829] vhci_hcd vhci_hcd.2: release socket
[  137.631050][   T34] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  137.638416][ T5829] vhci_hcd vhci_hcd.2: disconnect device
[  137.639050][ T8540] kernel profiling enabled (shift: 9)
[  137.654226][   T34] usb 42-1: enqueue for inactive port 0
[  138.046821][   T34] usb usb42-port1: attempt power cycle
[  138.164203][ T5923] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  138.334182][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  138.337460][ T5923] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  138.341463][ T5923] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.348088][ T5923] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.352293][ T5923] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.358462][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0
[  138.361326][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.371811][ T5923] usb 5-1: config 0 descriptor??
[  138.554806][ T8588] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44
[  138.564283][    C3] vxcan1: j1939_tp_rxtimer: 0xffff88804ab1e400: rx timeout, send abort
[  138.614846][   T34] usb usb42-port1: unable to enumerate USB device
[  138.620974][ T8590] bond2: entered allmulticast mode
[  138.622902][ T8590] ip6gre1: entered allmulticast mode
[  139.064693][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888057b52400: rx timeout, send abort
[  139.069003][    C3] vxcan1: j1939_tp_rxtimer: 0xffff88804ab1e400: abort rx timeout. Force session deactivation
[  139.088800][ T8600] TC_ACT_REPEAT abuse ?
[  139.219194][ T8604] syzkaller0: entered promiscuous mode
[  139.229301][ T8604] syzkaller0: entered allmulticast mode
[  139.568196][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888057b52400: abort rx timeout. Force session deactivation
[  139.682283][ T8620] binder: 8616:8620 ioctl c0306201 2000000004c0 returned -14
[  139.934194][ T8556] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  139.941123][ T5923] usbhid 5-1:0.0: can't add hid device: -71
[  139.943735][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  139.953745][ T5923] usb 5-1: USB disconnect, device number 16
[  140.303294][ T8643] kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[  140.309296][ T8643] kvm: requested 48609 ns i8254 timer period limited to 200000 ns
[  140.316491][ T8643] kvm: requested 170971 ns i8254 timer period limited to 200000 ns
[  140.323462][ T8643] kvm: requested 40228 ns i8254 timer period limited to 200000 ns
[  140.327600][ T8643] kvm: requested 108952 ns i8254 timer period limited to 200000 ns
[  140.331738][ T8643] kvm: requested 33523 ns i8254 timer period limited to 200000 ns
[  140.336849][ T8643] kvm: requested 150857 ns i8254 timer period limited to 200000 ns
[  140.341851][ T8643] kvm: requested 35200 ns i8254 timer period limited to 200000 ns
[  140.360628][ T8643] kvm: requested 56990 ns i8254 timer period limited to 200000 ns
[  140.366400][ T8643] kvm: requested 33523 ns i8254 timer period limited to 200000 ns
[  140.519355][ T8655] syzkaller0: entered promiscuous mode
[  140.521974][ T8655] syzkaller0: entered allmulticast mode
[  140.595743][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.925'.
[  140.598795][ T8663] netlink: 'syz.5.925': attribute type 2 has an invalid length.
[  140.602595][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.925'.
[  140.642351][ T8667] binder_alloc: 8665: pid 8665 spamming oneway? 1 buffers allocated for a total size of 4096
[  140.734201][ T5829] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.737850][ T5829] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.753291][ T8673] syzkaller0: entered promiscuous mode
[  140.756582][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.929'.
[  140.757331][ T8673] syzkaller0: entered allmulticast mode
[  140.760528][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.929'.
[  140.794252][ T5777] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.800231][ T5777] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.984281][    C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  141.095691][ T8691] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  141.155728][ T8691] md: loop0 has zero or unknown size, marking faulty!
[  141.256882][ T8702] syzkaller0: entered promiscuous mode
[  141.258905][ T8702] syzkaller0: entered allmulticast mode
[  141.313125][ T8706] input: syz0 as /devices/virtual/input/input13
[  141.415590][ T8712] syzkaller0: entered promiscuous mode
[  141.417777][ T8712] syzkaller0: entered allmulticast mode
[  141.644144][ T1488] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  141.814260][ T1488] usb 5-1: Using ep0 maxpacket: 32
[  141.915842][ T8732] jffs2: notice: (8732) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[  141.929286][   T42] kauditd_printk_skb: 56 callbacks suppressed
[  141.929302][   T42] audit: type=1400 audit(1786958033.013:659): avc:  denied  { write } for  pid=8731 comm="syz.5.950" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.993327][   T42] audit: type=1400 audit(1786958033.073:660): avc:  denied  { write } for  pid=8731 comm="syz.5.950" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  142.000589][   T42] audit: type=1400 audit(1786958033.073:661): avc:  denied  { remove_name } for  pid=8731 comm="syz.5.950" name="test" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  142.012156][   T42] audit: type=1400 audit(1786958033.083:662): avc:  denied  { unlink } for  pid=8731 comm="syz.5.950" name="test" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  142.388725][ T1488] usb 5-1: unable to get BOS descriptor or descriptor too short
[  142.396693][ T1488] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  142.410840][ T1488] usb 5-1: too many configurations: 80, using maximum allowed: 8
[  142.424944][ T1488] usb 5-1: unable to read config index 0 descriptor/start: -71
[  142.430300][ T1488] usb 5-1: can't read configurations, error -71
[  142.518540][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'.
[  143.709121][   T42] audit: type=1400 audit(1786958034.793:663): avc:  denied  { ioctl } for  pid=8779 comm="syz.1.965" path="/235/file0/file0" dev="fuse" ino=61 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  143.776953][ T5923] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  143.782103][   T42] audit: type=1400 audit(1786958034.863:664): avc:  denied  { module_request } for  pid=8779 comm="syz.1.965" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  143.802557][   T65] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  143.838746][ T8780] md: could not open device unknown-block(0,0).
[  143.844198][ T8780] md: md_import_device returned -6
[  143.934362][ T5923] usb 10-1: Using ep0 maxpacket: 32
[  143.936554][ T8795] syzkaller0: entered promiscuous mode
[  143.936576][ T8795] syzkaller0: entered allmulticast mode
[  143.940814][ T5923] usb 10-1: unable to get BOS descriptor or descriptor too short
[  143.943361][ T5923] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  143.947504][ T5923] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[  143.950642][ T5923] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[  143.953564][ T5923] usb 10-1: config 14 has no interface number 0
[  143.956445][ T5923] usb 10-1: config 14 has no interface number 1
[  143.958915][ T5923] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  143.962938][ T5923] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  143.967951][ T5923] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  143.973209][ T5923] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  143.978861][ T5923] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  143.983496][ T5923] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  143.989922][ T5923] usb 10-1: config 14 interface 57 has no altsetting 0
[  143.992688][ T5923] usb 10-1: config 14 interface 228 has no altsetting 0
[  143.998797][ T5923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.002222][ T5923] usb 10-1: Product: syz
[  144.004511][ T5923] usb 10-1: Manufacturer: syz
[  144.006580][ T5923] usb 10-1: SerialNumber: syz
[  144.192600][ T8800] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  144.431705][ T5923] legousbtower 10-1:14.57: interrupt endpoints not found
[  144.530980][ T8809] syzkaller0: entered promiscuous mode
[  144.533340][ T8809] syzkaller0: entered allmulticast mode
[  144.691042][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'.
[  144.814317][    C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  144.830412][ T5923] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  144.839978][ T5923] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  144.843396][   T42] audit: type=1400 audit(1786958035.923:665): avc:  denied  { ioctl } for  pid=8815 comm="syz.0.978" path="socket:[29404]" dev="sockfs" ino=29404 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  144.914420][ T8819] binder: 8818:8819 unknown command 0
[  144.916769][ T8819] binder: 8818:8819 ioctl c0306201 2000000001c0 returned -22
[  145.081696][   T42] audit: type=1400 audit(1786958036.163:666): avc:  denied  { write } for  pid=8823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  145.136928][   T42] audit: type=1400 audit(1786958036.223:667): avc:  denied  { write } for  pid=8828 comm="syz.1.981" name="configs" dev="configfs" ino=28774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  145.150018][   T42] audit: type=1400 audit(1786958036.233:668): avc:  denied  { write } for  pid=8828 comm="syz.1.981" name="functions" dev="configfs" ino=28773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  145.228984][ T8834] syzkaller0: entered promiscuous mode
[  145.231075][ T8834] syzkaller0: entered allmulticast mode
[  145.333647][ T5777] syzkaller0: tun_net_xmit 76
[  145.340921][ T5777] syzkaller0: tun_net_xmit 48
[  145.344124][ T8836] syzkaller0: create flow: hash 716019310 index 2
[  145.354445][ T5099] syzkaller0: tun_net_xmit 76
[  145.370023][ T8836] syzkaller0: delete flow: hash 716019310 index 2
[  145.388852][  T150] usb 10-1: USB disconnect, device number 4
[  145.388903][    C1] usb 10-1: tower_interrupt_in_callback: usb_submit_urb failed (-19)
[  145.409864][  T150] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected
[  147.016987][   T42] kauditd_printk_skb: 10 callbacks suppressed
[  147.017007][   T42] audit: type=1400 audit(1786958038.103:679): avc:  denied  { write } for  pid=8871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.017998][ T8865] syzkaller0: entered promiscuous mode
[  147.030971][ T8865] syzkaller0: entered allmulticast mode
[  147.065035][   T42] audit: type=1400 audit(1786958038.153:680): avc:  denied  { write } for  pid=8874 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.149565][   T42] audit: type=1400 audit(1786958038.233:681): avc:  denied  { create } for  pid=8879 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  147.368974][ T1488] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  147.530046][ T1488] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  147.536937][ T1488] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.541572][ T1488] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  147.547584][ T1488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.550378][   T42] audit: type=1800 audit(1786958038.633:682): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.989" name="memory_backed" dev="configfs" ino=30366 res=0 errno=0
[  147.553705][ T1488] usb 5-1: config 0 descriptor??
[  147.557640][   T42] audit: type=1800 audit(1786958038.633:683): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.989" name="power" dev="configfs" ino=30367 res=0 errno=0
[  147.820945][ T8884] null_blk: disk nullb1 created
[  147.995723][ T5923] usb 5-1: USB disconnect, device number 19
[  148.871415][   T42] audit: type=1400 audit(1786958039.953:684): avc:  denied  { write } for  pid=8897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.957904][   T42] audit: type=1400 audit(1786958040.043:685): avc:  denied  { write } for  pid=8904 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  148.982690][   T42] audit: type=1804 audit(1786958040.063:686): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.994" name="/newroot/96/file1" dev="tmpfs" ino=520 res=1 errno=0
[  149.011520][ T8908] ip_tables: iptables: counters copy to user failed while replacing table
[  149.104289][   T42] audit: type=1400 audit(1786958040.193:687): avc:  denied  { write } for  pid=8910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  149.178611][   T42] audit: type=1400 audit(1786958040.263:688): avc:  denied  { write } for  pid=8915 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.670547][ T8946] syzkaller0: entered promiscuous mode
[  150.672326][ T8946] syzkaller0: entered allmulticast mode
[  150.808107][ T8948] syzkaller0: entered promiscuous mode
[  150.810275][ T8948] syzkaller0: entered allmulticast mode
[  150.821287][ T8948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.826772][ T8947] tipc: Resetting bearer <eth:syzkaller0>
[  150.846316][ T8947] tipc: Disabling bearer <eth:syzkaller0>
[  151.154728][ T8956] syzkaller1: entered promiscuous mode
[  151.156647][ T8956] syzkaller1: entered allmulticast mode
[  151.239431][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1012'.
[  151.267447][ T8965] syzkaller0: entered promiscuous mode
[  151.269331][ T8965] syzkaller0: entered allmulticast mode
[  151.276446][ T8965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.280232][ T8964] tipc: Resetting bearer <eth:syzkaller0>
[  151.304877][ T8964] tipc: Disabling bearer <eth:syzkaller0>
[  151.378796][ T8970] syzkaller0: entered promiscuous mode
[  151.381044][ T8970] syzkaller0: entered allmulticast mode
[  151.781432][   T65] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  151.810840][   T65] Bluetooth: hci1: unexpected event for opcode 0x200d
[  152.045985][ T9005] syzkaller0: entered promiscuous mode
[  152.047807][ T9005] syzkaller0: entered allmulticast mode
[  152.177836][ T9009] overlayfs: failed to resolve './cgroup': -2
[  152.181595][ T9009] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1030'.
[  152.187198][ T9009] jffs2: notice: (9009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found.
[  152.250861][ T9012] syzkaller0: entered promiscuous mode
[  152.252692][ T9012] syzkaller0: entered allmulticast mode
[  152.323531][ T5875] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  152.422916][   T65] Bluetooth: hci1: unexpected event for opcode 0x0419
[  152.515846][ T5875] usb 6-1: Using ep0 maxpacket: 16
[  152.518543][ T5875] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  152.522140][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  152.529661][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.532310][ T5875] usb 6-1: Product: syz
[  152.533629][ T5875] usb 6-1: Manufacturer: syz
[  152.535125][ T5875] usb 6-1: SerialNumber: syz
[  152.538764][ T5875] usb 6-1: config 0 descriptor??
[  152.547587][ T5875] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  152.550980][ T5875] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  152.599052][ T9022] syzkaller0: entered promiscuous mode
[  152.601127][ T9022] syzkaller0: entered allmulticast mode
[  152.681348][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'.
[  152.690783][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.694822][ T9025] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  152.723114][   T42] kauditd_printk_skb: 29 callbacks suppressed
[  152.723134][   T42] audit: type=1400 audit(1786958043.778:718): avc:  denied  { mount } for  pid=9026 comm="syz.5.1037" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  152.852007][   T42] audit: type=1400 audit(1786958043.890:719): avc:  denied  { unmount } for  pid=7793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  153.110873][ T9054] syzkaller1: entered promiscuous mode
[  153.112916][ T9054] syzkaller1: entered allmulticast mode
[  153.117217][ T9060] syzkaller0: entered promiscuous mode
[  153.118879][ T9060] syzkaller0: entered allmulticast mode
[  153.193751][ T5875] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  153.345250][ T9070] syzkaller0: entered promiscuous mode
[  153.347556][ T9070] syzkaller0: entered allmulticast mode
[  153.674807][ T5875] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  153.678720][ T5875] em28xx 6-1:0.0: board has no eeprom
[  153.721463][   T42] audit: type=1400 audit(1786958044.705:720): avc:  denied  { read write } for  pid=9086 comm="syz.5.1051" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  153.723529][ T9087] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  153.745345][   T42] audit: type=1400 audit(1786958044.705:721): avc:  denied  { open } for  pid=9086 comm="syz.5.1051" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  153.755417][   T42] audit: type=1400 audit(1786958044.714:722): avc:  denied  { search } for  pid=9086 comm="syz.5.1051" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  153.763698][   T42] audit: type=1400 audit(1786958044.714:723): avc:  denied  { search } for  pid=9086 comm="syz.5.1051" name="events" dev="tracefs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  153.772952][   T42] audit: type=1400 audit(1786958044.723:724): avc:  denied  { search } for  pid=9086 comm="syz.5.1051" name="raw_syscalls" dev="tracefs" ino=32516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  153.791601][   T42] audit: type=1400 audit(1786958044.723:725): avc:  denied  { search } for  pid=9086 comm="syz.5.1051" name="sys_enter" dev="tracefs" ino=32518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  153.799620][   T42] audit: type=1400 audit(1786958044.770:726): avc:  denied  { create } for  pid=9090 comm="syz.5.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  153.866074][ T9096] syzkaller0: entered promiscuous mode
[  153.867918][ T9096] syzkaller0: entered allmulticast mode
[  153.990980][ T9091] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1053'.
[  153.995452][ T9091] ifb0: left promiscuous mode
[  154.029858][   T42] audit: type=1400 audit(1786958044.995:727): avc:  denied  { write } for  pid=9102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.054665][ T5875] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  154.060233][ T5875] em28xx 6-1:0.0: dvb set to bulk mode.
[  154.062425][ T5099] em28xx 6-1:0.0: Binding DVB extension
[  154.119701][ T9111] bond2: (slave syz_tun): Removing an active aggregator
[  154.124122][ T9111] bond2: (slave syz_tun): Releasing backup interface
[  154.133672][ T9111] ¾x9ÿ: left allmulticast mode
[  154.135289][ T9111] ¾x9ÿ: left promiscuous mode
[  154.138983][ T9111] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  154.150742][ T9111] bridge_slave_1: left allmulticast mode
[  154.152601][ T9111] bridge_slave_1: left promiscuous mode
[  154.154501][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.159868][ T9111] bond0: (slave bond_slave_0): Releasing backup interface
[  154.166779][ T9111] bond0: (slave bond_slave_1): Releasing backup interface
[  154.182557][ T9111] team0: Port device team_slave_0 removed
[  154.193476][ T9111] team0: Port device team_slave_1 removed
[  154.196261][ T9111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.198616][ T9111] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.202023][ T9111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.204488][ T9111] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.219367][ T9111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  154.235856][ T9112] team0: Mode changed to "random"
[  154.238688][ T9113] vlan0: entered promiscuous mode
[  154.244367][ T9113] team0: Port device vlan0 added
[  154.252663][ T9111] tipc: Started in network mode
[  154.254283][ T9111] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  154.267796][ T9111] tipc: Enabled bearer <eth:team0>, priority 0
[  154.560603][ T9126] kvm: kvm [9125]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xda0c
[  154.582936][ T9126] kvm: kvm [9125]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5001
[  154.597280][ T9126] kvm_intel: kvm [9125]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa401
[  154.604626][ T9126] kvm: kvm [9125]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xee0c
[  154.869550][ T9149] syzkaller0: entered promiscuous mode
[  154.871386][ T9149] syzkaller0: entered allmulticast mode
[  155.257817][ T9007] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  155.278423][   T29] usb 6-1: USB disconnect, device number 13
[  155.284966][   T29] em28xx 6-1:0.0: Disconnecting em28xx
[  155.326075][ T5099] em28xx 6-1:0.0: Registering input extension
[  155.333546][   T29] em28xx 6-1:0.0: Closing input extension
[  155.377478][   T29] em28xx 6-1:0.0: Freeing device
[  155.454623][ T1488] tipc: Node number set to 11578026
[  155.518545][ T9176] netlink: 'syz.5.1071': attribute type 11 has an invalid length.
[  155.584198][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.586640][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.624875][ T9176] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  155.627641][ T9176] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  155.715789][ T9178] syzkaller0: entered promiscuous mode
[  155.717743][ T9178] syzkaller0: entered allmulticast mode
[  155.922844][ T9187] nvmet_tcp: enabling port 1 (127.0.0.1:8009)
[  156.109604][   T65] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  156.113296][   T65] Bluetooth: hci1: Injecting HCI hardware error event
[  156.116663][   T65] Bluetooth: hci1: hardware error 0x00
[  156.860603][ T9230] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1088'.
[  156.864865][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1088'.
[  156.915191][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1090'.
[  156.918926][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1090'.
[  157.092000][ T9245] tc action pedit offset 0 out of bounds
[  157.095240][ T9245] tc action pedit offset 0 out of bounds
[  157.097136][ T9245] tc action pedit offset 0 out of bounds
[  157.098928][ T9245] tc action pedit offset 0 out of bounds
[  157.100785][ T9245] tc action pedit offset 0 out of bounds
[  157.102537][ T9245] tc action pedit offset 0 out of bounds
[  157.104331][ T9245] tc action pedit offset 0 out of bounds
[  157.106115][ T9245] tc action pedit offset 0 out of bounds
[  157.108063][ T9245] tc action pedit offset 0 out of bounds
[  157.110407][ T9245] tc action pedit offset 0 out of bounds
[  157.112358][ T9245] TC_ACT_REPEAT abuse ?
[  157.447875][ T9261] binder_alloc: 9260: pid 9260 spamming oneway? 1 buffers allocated for a total size of 4096
[  157.467212][ T9261] binder_alloc: 9260: pid 9260 spamming oneway? 2 buffers allocated for a total size of 5120
[  157.582164][   T10] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  157.742634][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  157.747492][   T10] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  157.751804][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  157.757852][   T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  157.760451][   T10] usb 7-1: Product: syz
[  157.762118][   T10] usb 7-1: Manufacturer: syz
[  157.764573][   T10] usb 7-1: SerialNumber: syz
[  157.768291][   T10] usb 7-1: config 0 descriptor??
[  157.773057][   T10] usb 7-1: selecting invalid altsetting 0
[  157.952360][ T5085] Bluetooth: hci3: unexpected event for opcode 0x2003
[  158.117123][   T42] kauditd_printk_skb: 30 callbacks suppressed
[  158.117137][   T42] audit: type=1800 audit(1786958048.822:758): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1108" name="nexus" dev="configfs" ino=34699 res=0 errno=0
[  158.223489][ T9291] syzkaller0: entered promiscuous mode
[  158.225943][ T9291] syzkaller0: entered allmulticast mode
[  158.231544][ T9291] tipc: Started in network mode
[  158.234095][ T9291] tipc: Node identity 12062e5e8323, cluster identity 4711
[  158.240895][ T9291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.247007][ T9291] tipc: Resetting bearer <eth:syzkaller0>
[  158.251870][ T9289] tipc: Resetting bearer <eth:syzkaller0>
[  158.263704][ T9289] tipc: Disabling bearer <eth:syzkaller0>
[  158.330133][   T65] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  158.363421][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'.
[  158.411869][ T9295] syzkaller0: entered promiscuous mode
[  158.414252][ T9295] syzkaller0: entered allmulticast mode
[  158.560289][ T9300] binder_alloc: binder_alloc_mmap_handler: 9299 200000ffd000-200001000000 already mapped failed -16
[  158.605660][ T9300] syz.5.1114 (9300): drop_caches: 2
[  158.641707][ T9302] fuse: Bad value for 'fd'
[  158.688808][ T9306] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  158.691426][ T9306] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  158.702028][   T42] audit: type=1400 audit(1786958049.365:759): avc:  denied  { create } for  pid=9301 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  158.708929][   T42] audit: type=1400 audit(1786958049.365:760): avc:  denied  { write } for  pid=9301 comm="syz.1.1115" path="socket:[37433]" dev="sockfs" ino=37433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  158.749432][   T42] audit: type=1400 audit(1786958049.412:761): avc:  denied  { bind } for  pid=9311 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  158.779178][ T9314] syzkaller0: entered promiscuous mode
[  158.781251][ T9314] syzkaller0: entered allmulticast mode
[  159.355081][    C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  160.538952][   T10] usb 7-1: USB disconnect, device number 14
[  160.551545][   T42] audit: type=1400 audit(1786958051.096:762): avc:  denied  { create } for  pid=9335 comm="syz.2.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  161.407088][    C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  162.380426][   T42] audit: type=1400 audit(1786958052.818:763): avc:  denied  { audit_write } for  pid=9341 comm="syz.5.1129" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  162.488965][   T42] audit: type=1400 audit(1786958052.911:764): avc:  denied  { write } for  pid=9348 comm="syz.5.1131" name="functions" dev="configfs" ino=28773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  162.495978][   T42] audit: type=1400 audit(1786958052.911:765): avc:  denied  { write } for  pid=9348 comm="syz.5.1131" name="c.1" dev="configfs" ino=32935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  162.505114][   T42] audit: type=1400 audit(1786958052.911:766): avc:  denied  { write } for  pid=9348 comm="syz.5.1131" name="c.1" dev="configfs" ino=32935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  162.651501][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1134'.
[  162.759762][   T42] audit: type=1400 audit(1786958053.164:767): avc:  denied  { write } for  pid=9353 comm="syz.2.1133" name="functions" dev="configfs" ino=28773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  163.593273][ T9372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  163.595317][ T9374] bridge_slave_0: left allmulticast mode
[  163.599014][ T9374] bridge_slave_0: left promiscuous mode
[  163.601659][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.607456][ T9374] bridge_slave_1: left allmulticast mode
[  163.610044][ T9374] bridge_slave_1: left promiscuous mode
[  163.612502][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.623065][ T9374] bond0: (slave bond_slave_0): Releasing backup interface
[  163.629336][ T9374] bond0: (slave bond_slave_1): Releasing backup interface
[  163.635269][ T9374] team0: Port device team_slave_0 removed
[  163.639409][ T9374] team0: Port device team_slave_1 removed
[  163.641843][ T9374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.646337][ T9374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.649406][ T9374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  163.654882][ T9375] team0: Mode changed to "random"
[  163.672515][ T9374] vlan0: entered promiscuous mode
[  163.732217][ T9374] tipc: Enabled bearer <eth:team0>, priority 0
[  164.269441][   T42] audit: type=1400 audit(1786958567.577:768): avc:  denied  { read } for  pid=9378 comm="syz.5.1140" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  164.283884][   T42] audit: type=1400 audit(1786958567.577:769): avc:  denied  { open } for  pid=9378 comm="syz.5.1140" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  164.366434][   T42] audit: type=1400 audit(1786958567.662:770): avc:  denied  { read } for  pid=9383 comm="syz.0.1142" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.386317][   T42] audit: type=1400 audit(1786958567.671:771): avc:  denied  { open } for  pid=9383 comm="syz.0.1142" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.416757][   T42] audit: type=1400 audit(1786958567.671:772): avc:  denied  { ioctl } for  pid=9383 comm="syz.0.1142" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.463262][   T42] audit: type=1400 audit(1786958567.764:773): avc:  denied  { write } for  pid=9383 comm="syz.0.1142" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.623101][ T1488] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  164.783472][ T1488] usb 10-1: Using ep0 maxpacket: 8
[  164.794149][  T150] tipc: Node number set to 2435133022
[  164.794240][ T1488] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  164.810990][ T1488] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  164.814472][ T1488] usb 10-1: config 179 has no interface number 0
[  164.825837][ T1488] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  164.836904][ T1488] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  164.852640][ T1488] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  164.864859][ T1488] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  164.876404][ T1488] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  164.890501][ T1488] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.910000][ T9382] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  165.148531][   T42] audit: type=1400 audit(1786958568.401:774): avc:  denied  { create } for  pid=9381 comm="syz.5.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  165.165558][   T42] audit: type=1400 audit(1786958568.401:775): avc:  denied  { bind } for  pid=9381 comm="syz.5.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  165.203007][ T1488] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input15
[  165.382824][ T5875] usb 10-1: USB disconnect, device number 5
[  165.382927][    C3] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  165.388266][    C3] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[  166.021208][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1154'.
[  166.025889][   T42] audit: type=1400 audit(1786958569.224:776): avc:  denied  { setopt } for  pid=9417 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  166.040692][   T42] audit: type=1400 audit(1786958569.224:777): avc:  denied  { accept } for  pid=9417 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  166.172325][ T9424] loop0: detected capacity change from 0 to 128
[  166.184930][ T9424] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  166.997746][ T9458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.156857][ T9496] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  168.171444][ T9496] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  168.278336][ T9500] netlink: 'syz.0.1183': attribute type 11 has an invalid length.
[  168.373175][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.378827][ T9500] 8021q: adding VLAN 0 to HW filter on device team0
[  168.383550][ T9500] tipc: Resetting bearer <eth:team0>
[  168.403294][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.453384][ T9500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.464018][ T9500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.484282][ T9500] veth1_vlan: left promiscuous mode
[  168.488440][ T9500] veth1_vlan: entered promiscuous mode
[  168.496908][ T9500] veth1_macvtap: left promiscuous mode
[  168.500819][ T9500] veth0_macvtap: left promiscuous mode
[  168.503221][ T9500] veth0_macvtap: entered promiscuous mode
[  168.505671][ T9500] veth1_macvtap: entered promiscuous mode
[  168.510797][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  168.513895][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  168.516594][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  168.519294][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  168.531380][ T9500] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.550901][ T9500] 8021q: adding VLAN 0 to HW filter on device bond2
[  168.615552][ T9510] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  168.618716][ T9510] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  168.703974][ T5829] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  168.790522][ T9512] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  168.801325][ T9512] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  168.812952][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.822853][ T9512] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  168.826774][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  168.832471][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.838873][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  168.852199][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.859317][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  168.867731][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.878202][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  168.881516][ T9512] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  168.897732][ T9512] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  169.086847][ T9521] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49
[  169.670998][   T42] kauditd_printk_skb: 30 callbacks suppressed
[  169.671017][   T42] audit: type=1400 audit(1786958572.630:808): avc:  denied  { write } for  pid=9524 comm="syz.2.1192" name="functions" dev="configfs" ino=28773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  169.692964][   T42] audit: type=1800 audit(1786958572.658:809): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1192" name="pnp_string" dev="configfs" ino=40211 res=0 errno=0
[  169.762106][   T42] audit: type=1400 audit(1786958572.714:810): avc:  denied  { read write } for  pid=9535 comm="syz.0.1195" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  169.773035][   T42] audit: type=1400 audit(1786958572.724:811): avc:  denied  { open } for  pid=9535 comm="syz.0.1195" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  170.391668][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'.
[  170.395780][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'.
[  170.399297][ T9543] netlink: 'syz.2.1198': attribute type 19 has an invalid length.
[  170.441591][ T9545] block nbd1: NBD_DISCONNECT
[  170.447753][   T42] audit: type=1400 audit(1786958573.351:812): avc:  denied  { write } for  pid=9544 comm="syz.1.1199" name="functions" dev="configfs" ino=28773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  170.453633][ T9545] block nbd1: Disconnected due to user request.
[  170.461138][   T42] audit: type=1400 audit(1786958573.360:813): avc:  denied  { write } for  pid=9544 comm="syz.1.1199" name="c.1" dev="configfs" ino=32935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  170.461192][ T9545] block nbd1: shutting down sockets
[  170.470168][   T42] audit: type=1400 audit(1786958573.360:814): avc:  denied  { write } for  pid=9544 comm="syz.1.1199" name="c.1" dev="configfs" ino=32935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  170.542406][   T42] audit: type=1400 audit(1786958573.444:815): avc:  denied  { write } for  pid=9547 comm="syz.5.1200" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  170.558837][   T42] audit: type=1400 audit(1786958573.444:816): avc:  denied  { open } for  pid=9547 comm="syz.5.1200" path="/160/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  170.662884][   T42] audit: type=1400 audit(1786958573.566:817): avc:  denied  { ioctl } for  pid=9550 comm="syz.2.1201" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  170.664090][ T9553] Trying to write to read-only block-device nullb0
[  170.705522][ T5812] hid-generic 0000:0008:4000001.0008: unknown main item tag 0x0
[  170.708806][ T5812] hid-generic 0000:0008:4000001.0008: unknown main item tag 0x0
[  170.711128][ T5812] hid-generic 0000:0008:4000001.0008: unknown main item tag 0x0
[  170.713640][ T5812] hid-generic 0000:0008:4000001.0008: unknown main item tag 0x0
[  170.716297][ T5812] hid-generic 0000:0008:4000001.0008: unknown main item tag 0x0
[  170.718812][ T5812] hid-generic 0000:0008:4000001.0008: unknown main item tag 0x0
[  170.721160][ T5812] hid-generic 0000:0008:4000001.0008: unknown main item tag 0x0
[  170.723426][ T5812] hid-generic 0000:0008:4000001.0008: unknown main item tag 0x0
[  170.730264][ T9555] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  170.798925][ T5812] hid-generic 0000:0008:4000001.0008: hidraw1: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  170.914232][ T9560] fido_id[9560]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  171.243612][ T9574] Mass Storage Function, version: 2009/09/11
[  171.247621][ T9574] LUN: removable file: (no medium)
[  171.269584][ T9574] LUN: removable file: (no medium)
[  171.503733][ T9581] wusb3801 0-0004: supply vbus not found, using dummy regulator
[  171.621920][ T9584] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1212'.
[  171.633026][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'.
[  171.642752][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1212'.
[  171.765905][ T9581] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04
[  172.167572][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.179204][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.186669][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.197882][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.203015][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.317453][ T9591] batman_adv: batadv0: Adding interface: dummy0
[  172.320369][ T9591] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.347496][ T9591] batman_adv: batadv0: Interface activated: dummy0
[  172.420660][ T9591] batadv0: mtu less than device minimum
[  172.427499][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.431740][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.437429][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.442092][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.446469][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.451173][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.455851][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.460637][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.465195][ T9591] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  172.544353][ T9608] block device autoloading is deprecated and will be removed.
[  172.549684][ T5085] Bluetooth: hci3: unexpected event for opcode 0x203e
[  172.613841][ T9617] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances
[  172.685922][  T238] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  172.697421][   T61] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed
[  172.703515][    C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  172.712292][  T238] (NULL device *): queue 0 connect admin queue failed (-6).
[  172.716668][  T238] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6)
[  172.719974][  T238] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  172.727018][ T9617] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:67817b8a-f3dd-4371-872a-f9d19dc34120
[  172.794245][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.797228][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.800354][ T9592] bridge_slave_0: entered allmulticast mode
[  172.804136][ T9592] bridge_slave_0: entered promiscuous mode
[  172.808901][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.812176][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.815534][ T9592] bridge_slave_1: entered allmulticast mode
[  172.823183][ T9592] bridge_slave_1: entered promiscuous mode
[  172.845656][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.851115][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.909888][ T9592] team0: Port device team_slave_0 added
[  172.922799][ T9592] team0: Port device team_slave_1 added
[  172.933377][ T9631] input: syz0 as /devices/virtual/input/input16
[  172.973428][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.978954][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.988452][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.997257][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.000005][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.009681][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.068525][ T9592] hsr_slave_0: entered promiscuous mode
[  173.072193][ T9592] hsr_slave_1: entered promiscuous mode
[  173.075376][ T9592] debugfs: 'hsr0' already exists in 'hsr'
[  173.078229][ T9592] Cannot create hsr debugfs directory
[  173.366947][ T9592] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  173.367786][ T5085] Bluetooth: hci3: unexpected event for opcode 0x0c7a
[  173.389722][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  173.395087][ T9592] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  173.410330][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  173.414297][ T9592] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  173.425127][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  173.428519][ T9592] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  173.434909][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  173.459273][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.463175][ T9592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.466389][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.468591][ T9592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.478506][  T119] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.481869][  T119] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.526722][ T9657] ==================================================================
[  173.526735][ T9657] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1b48/0x1d60
[  173.526767][ T9657] Write of size 8 at addr ffffc90024344c00 by task syz.0.1232/9657
[  173.526777][ T9657] 
[  173.526786][ T9657] CPU: 2 UID: 0 PID: 9657 Comm: syz.0.1232 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  173.526804][ T9657] Tainted: [L]=SOFTLOCKUP
[  173.526810][ T9657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  173.526820][ T9657] Call Trace:
[  173.526827][ T9657]  <TASK>
[  173.526833][ T9657]  dump_stack_lvl+0x100/0x190
[  173.526867][ T9657]  print_report+0x13d/0x4b0
[  173.526900][ T9657]  ? _raw_spin_lock_irqsave+0x52/0x60
[  173.526928][ T9657]  ? sys_imageblit+0x1b48/0x1d60
[  173.526946][ T9657]  kasan_report+0xdf/0x1c0
[  173.526980][ T9657]  ? sys_imageblit+0x1b48/0x1d60
[  173.527001][ T9657]  sys_imageblit+0x1b48/0x1d60
[  173.527026][ T9657]  ? __pfx_sys_imageblit+0x10/0x10
[  173.527048][ T9657]  ? drm_fb_helper_setcmap+0x151/0x1010
[  173.527072][ T9657]  ? find_held_lock+0x2b/0x80
[  173.527099][ T9657]  ? drm_fb_helper_setcmap+0x117/0x1010
[  173.527122][ T9657]  ? drm_fb_helper_setcmap+0x117/0x1010
[  173.527149][ T9657]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  173.527182][ T9657]  ccw_putcs+0x92f/0xbb0
[  173.527216][ T9657]  ? __pfx_ccw_putcs+0x10/0x10
[  173.527240][ T9657]  ? fb_get_color_depth+0x120/0x250
[  173.527270][ T9657]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  173.527332][ T9657]  fbcon_putcs+0x3b2/0x480
[  173.527359][ T9657]  ? __pfx_ccw_putcs+0x10/0x10
[  173.527382][ T9657]  do_update_region+0x2cf/0x3f0
[  173.527413][ T9657]  redraw_screen+0x63f/0x760
[  173.527432][ T9657]  ? mark_held_locks+0x40/0x70
[  173.527454][ T9657]  ? __pfx_redraw_screen+0x10/0x10
[  173.527474][ T9657]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  173.527495][ T9657]  vc_do_resize+0xc3d/0xeb0
[  173.527518][ T9657]  ? __pfx_vc_do_resize+0x10/0x10
[  173.527538][ T9657]  ? __local_bh_enable_ip+0x9e/0x120
[  173.527580][ T9657]  ? lockdep_hardirqs_on+0x78/0x100
[  173.527619][ T9657]  ? kernel_fpu_end+0x5f/0x80
[  173.527645][ T9657]  ? __local_bh_enable_ip+0x9e/0x120
[  173.527670][ T9657]  fbcon_do_set_font+0x443/0x8c0
[  173.527700][ T9657]  fbcon_set_font+0x4be/0x730
[  173.527729][ T9657]  ? __pfx_fbcon_set_font+0x10/0x10
[  173.527754][ T9657]  con_font_op+0x9c0/0x1040
[  173.527778][ T9657]  ? __pfx_con_font_op+0x10/0x10
[  173.527802][ T9657]  ? __might_fault+0xc5/0x140
[  173.527828][ T9657]  ? __might_fault+0xc5/0x140
[  173.527849][ T9657]  vt_ioctl+0xe00/0x3150
[  173.527879][ T9657]  ? __pfx_vt_ioctl+0x10/0x10
[  173.527941][ T9657]  ? find_held_lock+0x2b/0x80
[  173.527966][ T9657]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  173.527991][ T9657]  ? __pfx_vt_ioctl+0x10/0x10
[  173.528021][ T9657]  tty_ioctl+0x26a/0x1640
[  173.528046][ T9657]  ? __pfx_tty_ioctl+0x10/0x10
[  173.528069][ T9657]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  173.528102][ T9657]  ? __fget_files+0x215/0x3d0
[  173.528130][ T9657]  ? hook_file_ioctl_common+0x140/0x440
[  173.528153][ T9657]  ? selinux_file_ioctl+0x13b/0x290
[  173.528180][ T9657]  ? selinux_file_ioctl+0xb6/0x290
[  173.528213][ T9657]  ? __pfx_tty_ioctl+0x10/0x10
[  173.528235][ T9657]  __x64_sys_ioctl+0x18e/0x210
[  173.528267][ T9657]  do_syscall_64+0x115/0x870
[  173.528288][ T9657]  ? clear_bhb_loop+0x70/0xc0
[  173.528309][ T9657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.528327][ T9657] RIP: 0033:0x7f6f6919e0d9
[  173.528344][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.528363][ T9657] RSP: 002b:00007f6f6a14d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.528382][ T9657] RAX: ffffffffffffffda RBX: 00007f6f69425fa0 RCX: 00007f6f6919e0d9
[  173.528395][ T9657] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000003
[  173.528406][ T9657] RBP: 00007f6f69235024 R08: 0000000000000000 R09: 0000000000000000
[  173.528418][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.528429][ T9657] R13: 00007f6f69426038 R14: 00007f6f69425fa0 R15: 00007fff97bc5128
[  173.528446][ T9657]  </TASK>
[  173.528453][ T9657] 
[  173.528459][ T9657] The buggy address belongs to a 32-page vmalloc region starting at 0xffffc90024345000 allocated at tpg_alloc+0xbd/0x9b0
[  173.528500][ T9657] Memory state around the buggy address:
[  173.528510][ T9657]  ffffc90024344b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  173.528523][ T9657]  ffffc90024344b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  173.528537][ T9657] >ffffc90024344c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  173.528549][ T9657]                    ^
[  173.528558][ T9657]  ffffc90024344c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  173.528572][ T9657]  ffffc90024344d00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  173.528583][ T9657] ==================================================================
[  173.528787][ T9657] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  173.528804][ T9657] CPU: 2 UID: 0 PID: 9657 Comm: syz.0.1232 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  173.528832][ T9657] Tainted: [L]=SOFTLOCKUP
[  173.528839][ T9657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  173.528852][ T9657] Call Trace:
[  173.528859][ T9657]  <TASK>
[  173.528866][ T9657]  dump_stack_lvl+0x100/0x190
[  173.528891][ T9657]  vpanic+0x552/0x970
[  173.528909][ T9657]  ? __pfx_vpanic+0x10/0x10
[  173.528926][ T9657]  ? mark_held_locks+0x40/0x70
[  173.528951][ T9657]  ? sys_imageblit+0x1b48/0x1d60
[  173.528973][ T9657]  panic+0xd1/0xe0
[  173.528989][ T9657]  ? __pfx_panic+0x10/0x10
[  173.529006][ T9657]  ? sys_imageblit+0x1b48/0x1d60
[  173.529028][ T9657]  ? preempt_schedule_common+0x42/0xc0
[  173.529050][ T9657]  check_panic_on_warn.cold+0x19/0x34
[  173.529070][ T9657]  end_report.part.0+0x3a/0x90
[  173.529095][ T9657]  kasan_report.cold+0xe/0x18
[  173.529120][ T9657]  ? sys_imageblit+0x1b48/0x1d60
[  173.529145][ T9657]  sys_imageblit+0x1b48/0x1d60
[  173.529170][ T9657]  ? __pfx_sys_imageblit+0x10/0x10
[  173.529191][ T9657]  ? drm_fb_helper_setcmap+0x151/0x1010
[  173.529222][ T9657]  ? find_held_lock+0x2b/0x80
[  173.529239][ T9657]  ? drm_fb_helper_setcmap+0x117/0x1010
[  173.529263][ T9657]  ? drm_fb_helper_setcmap+0x117/0x1010
[  173.529290][ T9657]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  173.529319][ T9657]  ccw_putcs+0x92f/0xbb0
[  173.529345][ T9657]  ? __pfx_ccw_putcs+0x10/0x10
[  173.529368][ T9657]  ? fb_get_color_depth+0x120/0x250
[  173.529395][ T9657]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  173.529419][ T9657]  fbcon_putcs+0x3b2/0x480
[  173.529445][ T9657]  ? __pfx_ccw_putcs+0x10/0x10
[  173.529466][ T9657]  do_update_region+0x2cf/0x3f0
[  173.529496][ T9657]  redraw_screen+0x63f/0x760
[  173.529514][ T9657]  ? mark_held_locks+0x40/0x70
[  173.529537][ T9657]  ? __pfx_redraw_screen+0x10/0x10
[  173.529556][ T9657]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  173.529577][ T9657]  vc_do_resize+0xc3d/0xeb0
[  173.529601][ T9657]  ? __pfx_vc_do_resize+0x10/0x10
[  173.529621][ T9657]  ? __local_bh_enable_ip+0x9e/0x120
[  173.529646][ T9657]  ? lockdep_hardirqs_on+0x78/0x100
[  173.529667][ T9657]  ? kernel_fpu_end+0x5f/0x80
[  173.529682][ T9657]  ? __local_bh_enable_ip+0x9e/0x120
[  173.529708][ T9657]  fbcon_do_set_font+0x443/0x8c0
[  173.529738][ T9657]  fbcon_set_font+0x4be/0x730
[  173.529764][ T9657]  ? __pfx_fbcon_set_font+0x10/0x10
[  173.529789][ T9657]  con_font_op+0x9c0/0x1040
[  173.529814][ T9657]  ? __pfx_con_font_op+0x10/0x10
[  173.529858][ T9657]  ? __might_fault+0xc5/0x140
[  173.529878][ T9657]  ? __might_fault+0xc5/0x140
[  173.529901][ T9657]  vt_ioctl+0xe00/0x3150
[  173.529931][ T9657]  ? __pfx_vt_ioctl+0x10/0x10
[  173.529960][ T9657]  ? find_held_lock+0x2b/0x80
[  173.529983][ T9657]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  173.530007][ T9657]  ? __pfx_vt_ioctl+0x10/0x10
[  173.530035][ T9657]  tty_ioctl+0x26a/0x1640
[  173.530058][ T9657]  ? __pfx_tty_ioctl+0x10/0x10
[  173.530081][ T9657]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  173.530115][ T9657]  ? __fget_files+0x215/0x3d0
[  173.530133][ T9657]  ? hook_file_ioctl_common+0x140/0x440
[  173.530157][ T9657]  ? selinux_file_ioctl+0x13b/0x290
[  173.530185][ T9657]  ? selinux_file_ioctl+0xb6/0x290
[  173.530217][ T9657]  ? __pfx_tty_ioctl+0x10/0x10
[  173.530240][ T9657]  __x64_sys_ioctl+0x18e/0x210
[  173.530268][ T9657]  do_syscall_64+0x115/0x870
[  173.530290][ T9657]  ? clear_bhb_loop+0x70/0xc0
[  173.530310][ T9657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.530329][ T9657] RIP: 0033:0x7f6f6919e0d9
[  173.530343][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.530362][ T9657] RSP: 002b:00007f6f6a14d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.530381][ T9657] RAX: ffffffffffffffda RBX: 00007f6f69425fa0 RCX: 00007f6f6919e0d9
[  173.530394][ T9657] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000003
[  173.530405][ T9657] RBP: 00007f6f69235024 R08: 0000000000000000 R09: 0000000000000000
[  173.530417][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.530429][ T9657] R13: 00007f6f69426038 R14: 00007f6f69425fa0 R15: 00007fff97bc5128
[  173.530449][ T9657]  </TASK>
[  173.531144][ T9657] Kernel Offset: disabled

VM DIAGNOSIS:
09:14:24  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff88802b9c2540
RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc90000007fd0
R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc90000007ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f16f0fd2880 ffffffff 00c00000
GS =0000 ffff8880d5bde000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6f69427dac CR3=0000000034185000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002000002 Opmask01=0000000004101011 Opmask02=00000000ffffffff Opmask03=0000000020400004
Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0031706f6f6c2f6b 636f6c622f6c6175
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a775e9e6f0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a775e9c3e8
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326d4069a6483 737326d15cc1b659
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d05b40ba0072d10 7373737629042def
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003164627573 000000524f4e494d 0000000000000021 000000346964656d
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4400000000000003 0000001e00000007
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a775e98180 fffffffffffffffc 44007f16f08bfd69 00007fe36c64926f
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9520ffbff5efffef fffffffffffffffc 44007fb7f7fbfdff ffffffffffffffff
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c43382c30382c46 372c45372c44372c 43372c42372c4137 2c39372c37372c36
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000010000002e 0000000000000000 0000000000001011 0000000000000044
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080010101 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff88802d1f4a80
RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc900006a0458
R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ae196c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbeeef8e300 ffffffff 00c00000
GS =0000 ffff8880d5cde000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f16f0fc7000 CR3=0000000026137000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 788c000000000000 04d0000000060004 000c000600000000 000c020000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c001a00100000 0014010000000000 000800080007000c 00080000000c0000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 04cf000000200000 0001000000100008 0000000000000004
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b2affffffff8175 fc58ffffffff8175 fc2fffffffff8175 fc13000006150300
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030b80000 000cffff9e940000 03e6000000080004 0000000800080000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014000061900000 0002000000000000 0000000000000000 0132000000000459
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e440000000180000 00200000000e0014 000c000000080004 0020000e00000000
ZMM24=548b871a548b871a 548b871a548b871a 548b871a548b871a 548b871a548b871a 548b871a548b871a 548b871a548b871a 548b871a548b871a 548b871a548b871a
ZMM25=ba4b5837ba4b5837 ba4b5837ba4b5837 ba4b5837ba4b5837 ba4b5837ba4b5837 ba4b5837ba4b5837 ba4b5837ba4b5837 ba4b5837ba4b5837 ba4b5837ba4b5837
ZMM26=084d3e57084d3e57 084d3e57084d3e57 084d3e57084d3e57 084d3e57084d3e57 084d3e57084d3e57 084d3e57084d3e57 084d3e57084d3e57 084d3e57084d3e57
ZMM27=f8e80c39f8e80c39 f8e80c39f8e80c39 f8e80c39f8e80c39 f8e80c39f8e80c39 f8e80c39f8e80c39 f8e80c39f8e80c39 f8e80c39f8e80c39 f8e80c39f8e80c39
ZMM28=000001f0000001ef 000001ee000001ed 000001ec000001eb 000001ea000001e9 000001e8000001e7 000001e6000001e5 000001e4000001e3 000001e2000001e1
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=cc120000cc120000 cc120000cc120000 cc120000cc120000 cc120000cc120000 cc120000cc120000 cc120000cc120000 cc120000cc120000 cc120000cc120000
info registers vcpu 2

CPU#2
RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a350b5 RDI=ffffffff9bc05ec0 RBP=ffffffff9bc05e80 RSP=ffffc900035f6e00
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043
R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b8f81f4 R15=ffffffff85a35050
RIP=ffffffff85a350df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6f6a14d6c0 ffffffff 00c00000
GS =0000 ffff8880d5dde000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f79441f8800 CR3=000000002a317000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ae6c40 ffffffff81ada848
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ae6c40 ffffffff81ada848
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff90b2f2d6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff90b2f2d6 00007fff90b2f2dc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1428835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1428835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14288357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1428835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33740f3b8630618c 2450ade207355af5 6f67a894836fe1f3 532828f82bbb556c
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1d66dbfed01019b 30b9ec15aecde911 401aaa756d8c34aa fb381f0b5e12d2ce
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a77c0ea771c53884 eccbe4a421182f13 d611d1d66dbfed01 019b30b9ec15aecd
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e911401aaa756d8c 34aafb381f0b5e12 d2ceed0b474b2b46 640f2bf9e1987c4f
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 44eedbce39d105fd bf88ae9ea378b9c9 fbc733740f3b8630 618c2450ade20735
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5af56f67a894836f e1f3532828f82bbb 556c0a61688f027f b1a4339c71c774e6
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff888027730000
RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc900006f8fd0
R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc900006f8ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555577ab5500 ffffffff 00c00000
GS =0000 ffff8880d5ede000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fe26c3556c8 CR3=000000004c6b0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f666c65732e7265
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc80d73236
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc80d73236 00007ffc80d7323c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe26b635607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe26b635647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe26b6357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe26b635639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000