last executing test programs:

1m22.537311938s ago: executing program 2 (id=92):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x17d)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x9, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="e196bc1480bb", 0x6}], 0x2, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_int={{0xffffffffffffffb6, 0x0, 0x1, 0x7}}], 0x38}, 0x2400c004)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/udc/dummy_udc.0/soft_connect\x00', 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20040000)
write$FUSE_OPEN(r1, &(0x7f0000004b00)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x20)
unshare(0x22020600)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$setsig(r3, 0xa, 0x21)
fcntl$setlease(r3, 0x400, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
shutdown(r4, 0x1)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2008c058)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000000090000000500000000000000000000000000000000001dd413f5b9bbb61ff9bd85f16cbd5d0c3ca92e759fede03f057f774562c22acf18457c2796ada6e34e9f7621b9aedb52726ee135f808e841288f1c479bcb8a0a0a30d9120ca05f45dae18a8c4488ba15b61e987f853904be9104f4f6054157a566b29e10ccea3c0dcdd82579f9095d30f338bbd9774c"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000000)=@arm64)
open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1m21.63983695s ago: executing program 2 (id=93):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001580), 0x20000, 0x0)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0)

1m21.63937614s ago: executing program 2 (id=94):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f00000004c0)="ec6e366b965574d3429880aa59de24d5b012447871159a99abd2085261c84996ae46ab33d2095c446db826ac91a2d37c24ca65e4a3e5a215f60c77499fe6c127053844cfd5e8a95c7aaa1d29964b6a5dee24da85297af1c67d4a79aaca4b20a2e4c5ed4f26aafd6cb86488d1cc6ac6d5c0a0065db64517c86c25de5c1bae03489f")
ioctl$sock_bt_hci(r3, 0x400448cb, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400"], 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0x7, 0x18, {0x18, 0xa, "a865b516cc8ebb37e670769751c85a54bec01cdd6460"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = gettid()
r7 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4)
recvmmsg(r7, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/24, 0x18}, 0x40}], 0x1, 0x10002, 0x0)
ptrace(0x11, r6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
getsockopt$inet6_tcp_int(r8, 0x6, 0x2, 0x0, &(0x7f0000000480))
ptrace$getregset(0x4205, r4, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78})
syz_usb_connect$uac2(0x6, 0xd3, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000001099041d104000010203010902c100030100d00f080b0002010920050904000000010120000924010a00051500010c24030505038001090500d709040100000102200009040101010102200009050198000207022e0825018200aa06000904020000010220000904020101010220000e240201020401016fa4a0f04977102401050a1601100000f6000000000909240201040d0906010a24020207001b0e7fac0b2402010702ff07e084fe10240100100201377e4425f17826f936000000090f0000000d090582090004b0801db134c5006c394819bf23bbc319b8c7668e7a2b5ba5edc767a7cb4a19c9ca62bd384f19e80d2567066bec891634e2da6a2983c0961f1225d879c79eaa93d95bb9bd4262e2d7d29b6f3c37ed3b2cdf9b88756acb2f7d27e5b1862963c9d7db07a4fff577afb4f851fde2a01c9953bb63a850bd56fb49966c25cf746c749812485562629736bde6dcd6ff0a0806277f7f61f9c8269172c8460fa1f171b4db9197b83617542af55502c8dae6fa1aafe8977987739e1777514b9dc3122cfeefd3f042bce85aed7130da94fcb4dfbd3b234a5b70d1cafdddf10302d1c231b85ff564b0dbca7f07c3a99de727e019638c44306c08af97139f8cbd8928ce6c494140b612fff07f52ee8492"], 0x0)

1m21.038907625s ago: executing program 2 (id=98):
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0xd4, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x3001}}, {0xfffffffffffffc76, &(0x7f00000000c0)=ANY=[]}]}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async)
creat(&(0x7f0000000080)='./file0\x00', 0x0) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) (async)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x4, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x1, 0x4003bffc, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8, 0xb0, 0x6, 0x9}, {0x6, 0xd, 0x1, 0x7fff}, {0x8000, 0x3, 0x8, 0x9}, {0x2, 0x0, 0x1, 0x8}, {0x5, 0x0, 0x3, 0x5}, {0x4, 0xe, 0x3, 0xffffffff}]})

1m19.869721224s ago: executing program 2 (id=107):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00')
symlink(&(0x7f0000000280)='functions/gser.usb0\x00', &(0x7f00000002c0)='configs/c.1/gser.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='dummy_udc.0', 0xb)
r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
wait4(r1, 0x0, 0x80000000, &(0x7f0000000500))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r2=>0x0)
tgkill(r1, r2, 0xd)

1m19.750815897s ago: executing program 2 (id=108):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
getdents64(r4, 0x0, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.time\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000080)={@val={0x0, 0x892f}, @val={0x2, 0x0, 0x6, 0x1, 0x8001, 0x4}, @eth={@multicast, @local, @val={@val={0x88a8, 0x4}, {0x8100, 0x1, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @broadcast, @mcast1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mcast1}}}}}, 0x58)
ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000580))
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='ntfs\x00', 0x6, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r6, &(0x7f0000006dc0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x6, @remote, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x18}}], 0x1, 0x400c000)
write(r5, 0x0, 0x3000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r7=>0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r9)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x66e3ee79261eb38e, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40)
setsockopt$inet6_tcp_int(r8, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4)
sendto$packet(r0, &(0x7f0000000480)="05031600ffff140000004788031c09102c28a632590b0bf6ab6c26c1ed7a2254c30206e9b5ae", 0x26, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)

1m4.524992895s ago: executing program 32 (id=108):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
getdents64(r4, 0x0, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.time\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000080)={@val={0x0, 0x892f}, @val={0x2, 0x0, 0x6, 0x1, 0x8001, 0x4}, @eth={@multicast, @local, @val={@val={0x88a8, 0x4}, {0x8100, 0x1, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @broadcast, @mcast1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mcast1}}}}}, 0x58)
ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000580))
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='ntfs\x00', 0x6, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r6, &(0x7f0000006dc0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x6, @remote, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x18}}], 0x1, 0x400c000)
write(r5, 0x0, 0x3000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r7=>0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r9)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x66e3ee79261eb38e, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40)
setsockopt$inet6_tcp_int(r8, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4)
sendto$packet(r0, &(0x7f0000000480)="05031600ffff140000004788031c09102c28a632590b0bf6ab6c26c1ed7a2254c30206e9b5ae", 0x26, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)

59.656249667s ago: executing program 3 (id=216):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000004c0))

59.627265308s ago: executing program 3 (id=217):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x2f, @private=0xa010101, 0x4e23, 0x1, 'sh\x00', 0x6, 0x17e, 0x76}, {@private=0xa010101, 0x4e20, 0x1, 0xe, 0x7ff, 0x9}}, 0x44) (async)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1})
recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000100)=@nl, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/166, 0xa6}], 0x2, &(0x7f00000002c0)=""/98, 0x62}, 0xa}, {{&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f00000004c0)=""/180, 0xb4}], 0x3, &(0x7f00000005c0)=""/226, 0xe2}, 0x5cec}, {{&(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/66, 0x42}], 0x1, &(0x7f0000000800)=""/226, 0xe2}, 0x7}], 0x3, 0x10143, &(0x7f00000009c0)={0x77359400})
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000a00))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x110, 0x10, 0x2, 0x70bd26, 0x25dfdbfd, {0x5}, [@nested={0xfc, 0xca, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @generic="0520ee3cb7760584831fdeb30c88f9604ff60a769097f8a339bf3c520d4e57020da5025c40a770c5fb8553800268ef71d9eb4ae7d6c8da91a200a9b7df95fe023a28b38d146d26daddf9c10c5e0469ea2bf78660165c3d13cc73ccfbd5192e6e5c9c9e66e3c5167462587e60466071b96b760d409e837dd5122d3de24dc930f379cdee81492cebdc2998904d1a42ea44d986116be9c55e0e165431c3039b9ead399c32cc93760a50344202cb0da17e896c652e65b1c4ba4f398d9e32010c45e10fc6578fdb24f9f0a1a29f002cae6dd0d2fa8ee7241effb59d76e0e355720ae7321de5c9c29571cd96a40ab78c27dbff"]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20020004}, 0x10) (async)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000c40)='./file0\x00', 0x8900) (async)
r3 = getpgrp(0x0)
write$cgroup_pid(r2, &(0x7f0000000c80)=r3, 0x12) (async)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000cc0)) (async)
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000d00)) (async)
setxattr$trusted_overlay_origin(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), &(0x7f0000000dc0), 0x2, 0x1)
r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000e00), 0x2, 0x0) (async)
r5 = fspick(r2, &(0x7f0000000e40)='./file0/file0\x00', 0x1)
r6 = fsmount(r5, 0x1, 0x71)
getpriority(0x1, r3)
getsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) (async)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000f00)={{r7}, "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"}) (async)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000001f00)={0x8, 0x0, 0xfff8}) (async)
sendmmsg$inet(r7, &(0x7f0000002680)=[{{&(0x7f0000001f40)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000002500)=[{&(0x7f0000001f80)="315cab33fed88263a578e952a80eb5cbc4a8639cf0d89db7786a2a551adedb1ccd451a721d621b7183c4945059278497fefccbe052c7912caa300a5363f4d00223e2e6ae42f80f4a867a680c245e3aa5a4e18d466cff47dc4b02a8de44f481c842341d97f39b1fcdcbf78886576e56e9813131a686a0e5f08e79f8df34d1255ad439d6d5f588fe75d6e623017115ca0b72954c40653d5b38637f2c3d6457ca8ad75ebe92dc6df43e7a8e8bdebe83dfa3ebd458ac96135e", 0xb7}, {&(0x7f0000002040)="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", 0xfc}, {&(0x7f0000002140)="d7adbd4b0c44554e385dda9162d96c0e612dea7ae050d04ae946df67e47ee0c44593eea8c369fe8a21a479d6b6b4b14b97f0187d9b7a18620b546612031cd3f6508c85c878b1540d090710a9d937a33e1ab5dbd1a8716629b1b90fd565cfbc157888f5", 0x63}, {&(0x7f00000021c0)="6168d5f8a9cba510386fc6a4aa8bf36a711ffd76c31fe7", 0x17}, {&(0x7f0000002200)="12832bd23bf98bf4f756cf9172a74614f479d78ec2ba878e94d5e3420bd3e6ce23002b5376ae8dfe09f01af3800199359e8e8c6d7478213b4cd318fe1ffc1a0c1810f7b8e044c910695ca4cfe44a4912c82037a4a460986891f27752dab0a16bd2df1b8273a2461faa674e6af1197bb5bf54368cf58fb83fca6a99ac5c5eb5dd97dbdb2e26c30e3e511d24cc19b29601ec5e042ca2f5c68680dee37a765368e5064161bba03b240921be3c68665955c6e847050372cedc94d7610ab632ee173077d5547047255176219e31d306419761822e4a08a81b9c2965b69d2407ed139fb2aebc6f838b29ae00dbd52566e007c054", 0xf1}, {&(0x7f0000002300)="fb26d27661309c7ae7f8b5ec591d2f3d969c9b5376bf172e839933651adbead3b0081d7ac67480c3b88d09626e3f9eed107177e48e8fb2a601410fd2823930c09e8d2c40dfcab5b07b34d8a3b5e036757ddb92451d89f20253dadf8a65ab8e6c104b481f767469ece0fa803203c77bd0c69d2ed11d7b6783792eabe7e3ce6212de16ff033ac665ec5dadcdb7991e13e4e98878ef67f0ecde4efe4c70b971df032af012f8c6bee6fe9266e667df697ecdc60ebbd8ac0b276771b11af49d93e501dfdd00dd1692a00b5ca1b09dd81601f017d0", 0xd2}, {&(0x7f0000002400)="85768c1f0cdd14c6b17a4f3c5158d7a75198169e10a56e0f3f7a564dfe6ad4863f47fffd73fb75cd9c289cc054d613f5e042b9a446a54d5442e65e3bfab1f31ada06522e98444ddc719acab7afffa6a8dcd11a4a568f83f19fa4628405152781d71d59fb5bcc23174a11465f779b299e9e641875be57875b78aaf3d700f5023889965ac0b3a49e485f6c29dfeffa8fbce0a9d96f22ccf20d907eca669b3f3f754506db93260f75acdb553e8a4e2bc2a600be72575ffccfe80f22d8c06b1408f455b9", 0xc2}], 0x7, &(0x7f0000002580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x676}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x43, 0x0, 0x8, [0x10, 0x2, 0x7, 0x6]}, @generic={0x44, 0x3, "ab"}, @timestamp_addr={0x44, 0x34, 0xf3, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x9}, {@multicast2, 0x77}, {@loopback}, {@empty, 0x1}, {@broadcast, 0x101}, {@broadcast, 0x3ff}]}, @lsrr={0x83, 0x27, 0xf8, [@local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x40}, @remote, @private=0xa010101, @local, @multicast2, @broadcast]}, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x9, [0xffffffff, 0x98, 0x1]}, @end]}}}], 0xc8}}], 0x1, 0x4001)
getdents64(r2, &(0x7f00000026c0)=""/166, 0xa6)
fcntl$getflags(r5, 0x401) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002780), r1)
sendmsg$key(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000027c0)={0x2, 0xe, 0xf, 0x6, 0x6, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x2, 0x10001, 0x80000001, 0xf}]}, 0x30}}, 0x24) (async)
close_range(r4, r7, 0x2) (async)
ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f0000002880)={0x2, 0x2, 0x6}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000028c0), 0x414000, 0x0)
ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000002900))

59.546728639s ago: executing program 3 (id=218):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x2400000)
recvmmsg(r0, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40000040, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r3 = syz_open_pts(r2, 0x200)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x3)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b9800000c00f3235001000000f3066ba4000b0fcee0f01c4c4e22d38b68492b41f660f38814f1f0f015e0866baf80cb836240a86ef66bafc0c66edb9800000c00f3235000800000f30b8a60000000f23d80f21f835800000100f23f8db550e", 0x5f}], 0x1, 0x0, 0x0, 0x0)
r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38880000000081aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603001d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657382924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
close(0x3)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

58.624698302s ago: executing program 3 (id=221):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) (async)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) (async)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='0', 0x1) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000540)={0x110003, 0x0, {[0x4, 0x10001, 0xe2, 0x7fff, 0x9, 0x9, 0x9, 0x8]}})
fcntl$dupfd(r0, 0x0, r1) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x20000)
read$usbfs(r4, &(0x7f0000000080)=""/36, 0x24) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)

58.598117823s ago: executing program 3 (id=222):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0', 0x1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="137d27ca7717f53cbdbde63a7ed556161cdb056d6a89dc012165c256745da0924b88b31c93c6ba29da38eb5bd409d735722c7e7d39fe3c5b6a679f6e05b3cb00c2b735bc4f68e4bced4a58a2527a184df9afa5d5fdb78058fba066fa9de36e33b1538b3294270629e529646ec0db133d56aa801e6626ef14f8be0c3ef038f36d71ea6cc03d33f96b37dfc1747a8380f843761f92000000000000000000000000000000009c93be6e84aa8676a89b51a5ec46608beccbe59939b02a8fbc7725759354ad9b9fb4522fb1714ef3382cd542d267a5d13fee261c5c6704b97a33198ebf35fcc76b129df65d2f43d7edaf19d6a2744c755a0a74c6c00951a4ac84f11c96ca8f827ecaa7fb600609d183da582874c72fee332a68cccbe54639b8faca7e745e76e794eb3e8654ee9db37da45a7c8c04367fead249a02753d813483d20d240bf4636b01bd2992b118021b1d7fb2bc91f28be00b8c6eb704fb4573b42a21d45f7becd406df485e6ffca6f952ca3d057d21fae58e3792fd5187dd8d7241317ff050af31849b1834560745eac3b052c00000000000000000000a15a", 0x19c, 0x10, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121400, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae03, 0xe)
ptrace$pokeuser(0x6, r1, 0x358, 0xfffffffffffffffe)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001580), 0x20000, 0x0)
ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, 0x0)

58.560535304s ago: executing program 3 (id=223):
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) (async)
write$selinux_create(r0, &(0x7f00000000c0)=@access={'system_u:object_r:fsadm_log_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x3}, 0x5b)

43.390687331s ago: executing program 33 (id=223):
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) (async)
write$selinux_create(r0, &(0x7f00000000c0)=@access={'system_u:object_r:fsadm_log_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x3}, 0x5b)

35.637207904s ago: executing program 4 (id=345):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a000009240301010105"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="00b301000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0xe73a6c3fe2897294, 0x8, 0x2, '\\K'}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x40, 0x4, 0xe1, {0xe1, 0x23, "275282dbf558fdbe8a8ccefa079437b02c5bbc70b5f1109b35b4d97fea6b2e2a4513af802fe112c00bf579b941aed847cd3fcb39c152ffb1558a18bfd8b4cf488a64a20108e193e6572526ec338ce369231248038eb95ca436f9dab8a1b2ff48991c56fe01419efa28b4d5de72f910ed45899b6cf141b032162bc4dd8c5e28fd82ddf2db4a133e65d04b220c3a30402a4abf82f17a7a9643869c957e5bc4e03fec2ab2254a86c5fdeaca1b0bc2e21172ac070b29ed7f8717afaf6f9ed1639d310d302641d002f233adcaa7352873941dad94e19256eaf63ef116043665363f"}}, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003044c630004031f04"], &(0x7f0000000300)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@generic={0x16, 0x10, 0x4, "6a4f41877b2b9ff22679da8329a898a768c3dc"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0324f43c17ec0022eb9ac6073df9fd51"}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x10, 0x2, "e32d819a", "bd9e8030"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x1, 0x4, 0x1, 0x8, 0x3fca}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000440)={0x0, 0xf, 0x23, "f5ea775328197dad14f08ea75fe743ac051b12a3131ba944efd23d014edbcdfedcfabb"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000600)={0x40, 0x7, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xfd}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "111f"}, &(0x7f0000000080)={0x40, 0xf, 0x2, 0x8212}, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "ff00"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xe}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x14}})

34.033848413s ago: executing program 4 (id=348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
write$tun(r0, &(0x7f0000000680)={@void, @void, @eth={@multicast, @empty, @void, {@x25={0x805, {0x3, 0xcc, 0xf64e8bab7856ca53, "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"}}}}}, 0x1011)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x2, 'veth1_to_hsr\x00', {0x40}, 0x9})

33.946382226s ago: executing program 4 (id=350):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x10)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='+1', 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000004000)={0x2020}, 0x2020)
r3 = socket(0x80000000000000a, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f00000003c0)={0x81, 0x20, '\x00', 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]})
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c004)
r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
poll(&(0x7f0000000000)=[{r7, 0x1000}], 0x1, 0x8)
setsockopt$sock_int(r3, 0x1, 0x32, &(0x7f0000006c00)=0x1, 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="020027bd7000fbdbdf25280000000c005f0004005f00060036000200000004005f000600360007200000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x48004)
connect$unix(r3, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

33.310777191s ago: executing program 4 (id=353):
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @auto=[0x65, 0x37, 0x33, 0x39, 0x61, 0x34, 0x62, 0x31, 0x32, 0x66, 0x32, 0x65, 0x61, 0x5f, 0x39, 0x34]}, &(0x7f00000001c0)={0x0, "49fa3494fef28d3d675dea4302dd2cf7526ac6d3c507eb54c6bb7beaef0c321230194f63334ca5420297cdbbf83bfa1d460768b69f99bdf4a5d40b70f260e6e6", 0x33}, 0x48, 0xfffffffffffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x18d883, 0x0)
keyctl$set_timeout(0xf, r0, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
setreuid(0xee00, 0x0)
pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xc6)
ioprio_get$uid(0x3, 0xee00)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0)

33.309927282s ago: executing program 4 (id=354):
flock(0xffffffffffffffff, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
close(r0)

33.229494084s ago: executing program 4 (id=355):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xe7cf000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000118000/0x400000)=nil)
fadvise64(r0, 0x2, 0x4, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 4)

33.147639566s ago: executing program 34 (id=355):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xe7cf000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000118000/0x400000)=nil)
fadvise64(r0, 0x2, 0x4, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 4)

24.746619145s ago: executing program 5 (id=435):
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40203, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xe7cf000)
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040))
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x5e}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10001}]}, 0x40}}, 0xc040)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000118000/0x400000)=nil)
fadvise64(r0, 0x2, 0x4, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

24.674763696s ago: executing program 5 (id=436):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x200129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0x3, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x2000a8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x8, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd7d, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x858b, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x0, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001", @ANYBLOB="000000000000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000500000000000000000000000000000000000000000000000000000000000000040000"], 0x1a4}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000380)="66b8ec14616f66ba000000000f309a00202f01440f20c0663506000000440f22c0b80e010f00d0b8e4000f00d00fc72cf20f1a650d0f323e0f066766c744240066ee21c96766c744240280dd00006766c744240600000000670f011424", 0x5d}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="be43cfcf9ab9368ef0e7e6c530d3ef3c392918d11a9c6eff7a319711cf2429a3344a40d22a79", 0x26}, {&(0x7f00000005c0)="f18db359ec475a05038997011057dd", 0xf}, {0x0}], 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000000000000000000001000000feffffff000000001400000000fbffff00140000000000000000000000010000000900000000000000a8000000000000000000000007000000442c12c1e000000200000200e000000200000002ffffffff00000002ac1414bb00000007e00000010000004094040100832bd90a01010164010102e0000000001414aa00000000000007dde0000001ac1414bbe0000002ac1414bb9404010093230400100000ac1414bbac14143a00000000e0000001e000000100000000e000000244141f43ac1414bb00000002e0000001000100"/240], 0xf0}}], 0x1, 0x4000000)
write(r0, &(0x7f0000001f00)="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", 0x7e9)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

23.646861782s ago: executing program 5 (id=442):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60)
r1 = syz_usb_connect(0x5, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200100924030201010001"], 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x301, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
write$tun(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0090000204010000022a4070070180c200000300000000000086dd694fd2cd00263afffc000000000000000000000000000000ff020000000000000000e445fd4d00018100907800050080"], 0x4c)
syz_usb_control_io$lan78xx(r1, &(0x7f00000004c0)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="4030820000008230135cd7714cfa1b70a47522f8b9f1cfe91152699f080803dae5931bebf858c4f8cbb5dd4df72ab011623d05ae9064b9ca46676dceeb32068daa6c6efaa7e18543a0ef15c8869a9962d6e3b83ac0064fd05e5a917d148b7fd90cee2826c0277e0c2f7d67acde50306e9940258ec5f3aa52e2d98d2e54"], &(0x7f00000003c0)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "e4e17092029f70d30375390e27dc686465c441779a3c9caa2cf3547ada3bddbaed9bbfe700f0cc4cfdb1f8d2a937eebd0aee2f3f422fea47afbe93721a5f9ecc0e430f1ce90f1ead4b4dd0506b13647dcd332f80f272cec64817072044d6654813f67cac95c37591814c807fec1d538e31f6fccdf0ace47fe007d0c46eace4faf622f5170a2438b8e1fef79e69be85a861d23c3deb3619fe204d8b5ca337d1773dc5c845d7198fffba87643cefb5d56fa787c22c78764860220c2c4a5389621220d401f73fe10467baf7ff36673c4de05c8499de36118b00ddae410a48938bc6bc2e5234a7e3afbfe7096b96c877196820b3d12e4efff0"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="2023b0000000ce3a4bbbb463dfb6661a8aa65aa83e792a0a7f655fe528764d81df5183d3861eb062046a79899434e3e1dcab6052408a81cebc0b6e1f5b5afb14eabb063c027cf97b2b0c5cd010a6a669cfa97f2b33cee5eeb8788ad84c866da67473e2204e653756a1bb918920f1fdea0852db73773abf56c7f2e218769c2ce016dae98946ab5ab6c368889b42cb7e9892a93f6a80938cc456d4913264de689db6ddd4256bb702a833d078633e61284e96d04452340e"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3d}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000680)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "1eac450fd22e0a5b0ed98847fbcc290e012ecb7dcfc6c09374e79b93c99613e54f92dc0884e0d52174166e43183116"}})

22.236626607s ago: executing program 5 (id=447):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0xfffffffe}, 0x10)
sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x463b5607015b9854, {0x41, 0x0, 0x4}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="e0f680cf6b138dd6b48edf094116f5a4bed627086e70e8c96ad5aa3f261b458028211a1f05da0f6773680f49b3e87b", 0x2f}], 0x1, &(0x7f0000000180)="3a297adafa9a0e", 0x7}, 0x400c010)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000})
bind$tipc(r0, 0x0, 0x0)
close(r0)

22.194541398s ago: executing program 5 (id=448):
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100))
fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x3, 0x2, 0x12, 0xd38b, 0x54, "1710d0a484d2c66ad4c927e75c8f980e1119627485140b02ce87cbf0b95990c4495aabe5b2133e72dc7c19a8c1869a35d9e7794afbbc895d814ee14c5a572eceeff703ec48ca5d98faad76ee8a21231ff0631547"}, 0x5d, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000200), &(0x7f0000000240)=0x4)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r1, &(0x7f0000000a40)='0fc5:1227:', 0xa)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000040)='./file2\x00', 0x8)
syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00')
lseek(r6, 0x3, 0x0)
read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000580)={0x50, 0x0, r8, {0x7, 0x28, 0xfffd, 0x40200880, 0xfffc, 0x0, 0x1e0, 0x2, 0x0, 0x0, 0x24522716a989086f, 0x80}}, 0x50)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x100)
write$FUSE_ATTR(r2, &(0x7f00000004c0)={0x78, 0xffffffffffffffda, r8, {0x6, 0x8, 0x0, {0x4, 0x5, 0x1000000000000, 0x9, 0x1, 0xb, 0x39fd, 0x2, 0x7, 0xc000, 0x8, r9, r10, 0x7ff, 0x69}}}, 0x78)

21.966486844s ago: executing program 5 (id=449):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x14c)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000387000/0x2000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00005c1000/0x1000)=nil, 0x1000, &(0x7f0000000080)='#\x06\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100001002cbd7000fedbdf2508000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c001a8008000a00040009"], 0x2c}], 0x1}, 0x0)
write(r0, &(0x7f0000000280)="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", 0xfffffe73)
syz_usb_connect(0x3, 0x373, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0xab, 0xe0, 0x10, 0x7392, 0x7811, 0x69f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x361, 0x3, 0xe3, 0x5, 0xd0, 0x0, "", [{{0x9, 0x4, 0xb2, 0x5, 0x1, 0xff, 0xff, 0xff, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x45e6, 0x1f}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x402, 0x3, 0x3, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x405, 0x5, 0x5, 0x6c, 0x3, 0x8}]}], [{{0x9, 0x5, 0x3, 0x0, 0x20, 0xfe, 0x7f, 0x7}}]}}, {{0x9, 0x4, 0x17, 0x2, 0x7, 0xa5, 0x82, 0xe6, 0x2, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "9d2c492d59"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xffc0, 0x7}, [@acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x8, 0x94, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x73, 0x9, 0x7}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0xc, 0x7, 0xc0, [@generic={0xcf, 0x22, "00c355276514d5d694d5c45fbd3f39e1765e42006610fe68215d70e41c408fdb8a36fc219d4f9eabc0f0efff120fd8f60ccb7164a5d00ff2c1160ea2827149131f3dcc4becfe9cc992bf440b2b16e0d8a87127b295b3d42205e206829be76d5ba835f782f6ca629b43a6d90a21e0e67d5c2983765c00ad598fcb3793cc8bdb3221420886f776d1b635b2d2958819bd3d0514c058dc9d3155245e752077b724273f8ec32b440ce2eb7e30d352565ffaffe0018e529e6649d1e41e5a988e1891844b98638f64d7dc3ea9cc7ad030"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x0, 0xc, 0x5}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xcd, 0x9, 0xef, [@generic={0xcd, 0x1, "6402ea6d64bc40e54d43be57fc7805cc947e4f99e1857c80dc8318968fceeac4fa136cfd0119078ebb67d701f68a96186dffd1fd64af09f0568011d3edc21638be5249f2a4cfa1acb467509f7590fad65508e6fdfd54874677b041837ce36b0a11c6a63469f75e26c73b5cf7ef93f8d938533191ba43a5fef0161d9b7cfb833e7d78c3ddfc2c51002d74defffedd2ec0c8ff13286ac9f2042d024a4b952d876dae14b59302ad49bd233eef9097ccdd113191b074e1b4a82cef789158a5ef151d3aaa9f4adf1359fbb4df3b"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0xb9, 0x8, 0x18}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x0, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xcb, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5f, 0x200}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x1, 0x7e, 0x6f}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0xd, 0xf}}]}}, {{0x9, 0x4, 0x26, 0x4, 0x1, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '9'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0xa72, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@acm={0x4}, @country_functional={0x6, 0x24, 0x7, 0x4f, 0x7}]}, @generic={0x2f, 0x21, "caaab39aae760c940c61d5fcb1a9e114711c40b496212caec6604895e8eb1ff6539970dfc0ca85176cfbd2b064"}], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x4d, 0xa, 0xe2, [@generic={0x9e, 0xe, "8dd837fe9eba27128290a38a746221dcedb7311d8a951393badcb05c867c1f21e31ac72336f64ef60ee4272d5557ea63afe04e7f37018d9a084d7ba3ab444540038425de36ed518ed8ee15289f9e1b9aa43d001dc5ae73802ce7b2d80da128f3597a659d7b44aaa2b1b93ca9800c17ffef8105c1850ce5253fedece468adc3176afce5cb5a9a1e6d92b7c43e2c1edad7ec97c244de451af098027fa6"}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x0, 0x9, 0x4, 0x40, 0x3}, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x80a}}]})
write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000840)={{r0}, "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"})

6.366224801s ago: executing program 35 (id=449):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x14c)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000387000/0x2000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00005c1000/0x1000)=nil, 0x1000, &(0x7f0000000080)='#\x06\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100001002cbd7000fedbdf2508000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c001a8008000a00040009"], 0x2c}], 0x1}, 0x0)
write(r0, &(0x7f0000000280)="519abf06ed8d36dd221dfb068ad3408405f63c4d688f1de322f0a22b62b4c3acae9ff529dc0667f572bef974603a7b848ca86370497ee922dbd690a53c9fa518dd615af5ee34959577009ac73020dae6673c0fdae31f204b59c21bdd90baff2dd57a4dfc9032adeea8aaedc98e7d8372abc8a44846b3fe148ce849ece32f65da7ab465ff90ebf2dd075961d1150e8994fc3757cb9bf5c3da08f61695cb92eb8a807dce6745a027c442b98348a87be7e244312afb99d98d930fab66283069b8f81548c6a2f6eb6d9cfb6e735f2b8b639ed5b5ccc998fd69a05b56f74a86493187dd62c542cf00b9507724a26dcdc6c891fef3dfb50bbf94a308b7c4f414389d7d8ae07f55f54bce6dd61d8b", 0xfffffe73)
syz_usb_connect(0x3, 0x373, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0xab, 0xe0, 0x10, 0x7392, 0x7811, 0x69f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x361, 0x3, 0xe3, 0x5, 0xd0, 0x0, "", [{{0x9, 0x4, 0xb2, 0x5, 0x1, 0xff, 0xff, 0xff, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x45e6, 0x1f}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x402, 0x3, 0x3, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x405, 0x5, 0x5, 0x6c, 0x3, 0x8}]}], [{{0x9, 0x5, 0x3, 0x0, 0x20, 0xfe, 0x7f, 0x7}}]}}, {{0x9, 0x4, 0x17, 0x2, 0x7, 0xa5, 0x82, 0xe6, 0x2, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "9d2c492d59"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xffc0, 0x7}, [@acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x8, 0x94, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x73, 0x9, 0x7}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0xc, 0x7, 0xc0, [@generic={0xcf, 0x22, "00c355276514d5d694d5c45fbd3f39e1765e42006610fe68215d70e41c408fdb8a36fc219d4f9eabc0f0efff120fd8f60ccb7164a5d00ff2c1160ea2827149131f3dcc4becfe9cc992bf440b2b16e0d8a87127b295b3d42205e206829be76d5ba835f782f6ca629b43a6d90a21e0e67d5c2983765c00ad598fcb3793cc8bdb3221420886f776d1b635b2d2958819bd3d0514c058dc9d3155245e752077b724273f8ec32b440ce2eb7e30d352565ffaffe0018e529e6649d1e41e5a988e1891844b98638f64d7dc3ea9cc7ad030"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x0, 0xc, 0x5}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xcd, 0x9, 0xef, [@generic={0xcd, 0x1, "6402ea6d64bc40e54d43be57fc7805cc947e4f99e1857c80dc8318968fceeac4fa136cfd0119078ebb67d701f68a96186dffd1fd64af09f0568011d3edc21638be5249f2a4cfa1acb467509f7590fad65508e6fdfd54874677b041837ce36b0a11c6a63469f75e26c73b5cf7ef93f8d938533191ba43a5fef0161d9b7cfb833e7d78c3ddfc2c51002d74defffedd2ec0c8ff13286ac9f2042d024a4b952d876dae14b59302ad49bd233eef9097ccdd113191b074e1b4a82cef789158a5ef151d3aaa9f4adf1359fbb4df3b"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0xb9, 0x8, 0x18}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x0, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xcb, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5f, 0x200}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x1, 0x7e, 0x6f}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0xd, 0xf}}]}}, {{0x9, 0x4, 0x26, 0x4, 0x1, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '9'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0xa72, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@acm={0x4}, @country_functional={0x6, 0x24, 0x7, 0x4f, 0x7}]}, @generic={0x2f, 0x21, "caaab39aae760c940c61d5fcb1a9e114711c40b496212caec6604895e8eb1ff6539970dfc0ca85176cfbd2b064"}], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x4d, 0xa, 0xe2, [@generic={0x9e, 0xe, "8dd837fe9eba27128290a38a746221dcedb7311d8a951393badcb05c867c1f21e31ac72336f64ef60ee4272d5557ea63afe04e7f37018d9a084d7ba3ab444540038425de36ed518ed8ee15289f9e1b9aa43d001dc5ae73802ce7b2d80da128f3597a659d7b44aaa2b1b93ca9800c17ffef8105c1850ce5253fedece468adc3176afce5cb5a9a1e6d92b7c43e2c1edad7ec97c244de451af098027fa6"}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x0, 0x9, 0x4, 0x40, 0x3}, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x80a}}]})
write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000840)={{r0}, "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"})

6.322929123s ago: executing program 0 (id=517):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xe7cf000)
pipe(&(0x7f00000000c0))
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000013f000/0x400000)=nil)
fadvise64(r3, 0x2, 0x4, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r4 = socket(0x10, 0x3, 0x0)
connect$netlink(r4, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000003500)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00'/32], 0x20}}], 0x1, 0x8090)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)

5.494544063s ago: executing program 0 (id=520):
socket(0x2, 0x2, 0x0) (async)
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/53, 0x35, 0x1, &(0x7f0000000100)=""/70, 0x46}, &(0x7f00000001c0)=0x40)

5.488900103s ago: executing program 0 (id=521):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
exit(0x1ff)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = gettid()
process_vm_readv(r1, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10)
listen(r0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902"], 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, {0x6, @broadcast}, 0x1a, {0x2, 0x4e21, @broadcast}, 'vlan0\x00'})
socket$packet(0x11, 0x3, 0x300)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0xf7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x30, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@nested={0x9, 0x0, 0x0, 0x1, [@generic="cec654a2c5"]}]}]}, 0x30}], 0x1}, 0x0)
accept4$inet(r0, &(0x7f0000000000), 0x0, 0x80000)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)

4.749371552s ago: executing program 7 (id=525):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) (async)
r2 = getpgid(0x0)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = syz_pidfd_open(r2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r5, 0x0) (async, rerun: 32)
landlock_restrict_self(r5, 0x0) (async, rerun: 32)
pidfd_send_signal(r4, 0x21, 0x0, 0x4) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @mcast1, 0x1}, 0x1c) (async, rerun: 32)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfff}, 0x1c) (async, rerun: 32)
r6 = epoll_create(0xc)
epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0)

4.670467964s ago: executing program 7 (id=526):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$UHID_INPUT(r2, &(0x7f0000001080)={0x8, {"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", 0x1000}}, 0xfffffe11)
prctl$PR_MCE_KILL(0x35, 0x0, 0x2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x8, &(0x7f00000001c0)=[{0x809, 0x0, 0x21, 0x8}, {0x0, 0x3d, 0x7c, 0x3}, {0xe, 0x9, 0x7, 0x5}, {0x100, 0xa, 0x0, 0x3fe}, {0x5, 0x1, 0x5d}, {0x49, 0x0, 0x0, 0x1}, {0x5, 0x3, 0x80, 0x7}, {0x1ff, 0x0, 0xb, 0x200}]})
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000000c0)="e53fd47b4f2b1a13c3daafa1c7b79447dff58026c68bfe158fb3c9569a793213e2697f516efb9b875ef868d48c9b34af44e55a855813dbb2dc64a45a19b86c96d033d9bb5d119c9b15e523f004426edbaf5e61ca1ccc993610fc95dcccca0817ed7b556f7295022452d8f41d5144270facc860beb449cf7fcca97b59f3330c03370e5e0fa19d8ec53d90624afaabd38bf810f75c9d1a0130053d950e663dc711b8040a6a22619db1589e1dd5bdd8046789e9faffdf7bdcf9e4e2ed2181d95e022b9fe458ba18aa6fe043d217eeeec9a71a9c7fb188", 0xd5)
ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f00000004c0)="ec6e366b96")

4.635965775s ago: executing program 7 (id=527):
r0 = syz_create_resource$binfmt(&(0x7f0000000540)='./file1\x00')
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xce, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x2, 0x1, 0x5, 0x30, 0xdc}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0x9, 0x2, 0x8, 0x8}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe5dc72ee8d8eee2, 0x81, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "37d5c87a8d7dcfde62307820d7609678"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42d}}, {0x68, &(0x7f0000000340)=@string={0x68, 0x3, "08e46219a0ae3f76fb440f88cd6c8d317941b4ea86c4199f85720fa0dfbe1a9d67467c2123cd4af54850413697f5535457c70c0b6fed47433440fe82b77d0d490167679cc9b598cbc89febffcf24f887cfb9fb1b32c3a794a2c60000231b83d9494c7f29ca9f"}}, {0x4, &(0x7f00000008c0)=@string={0x0, 0x3, "634a1c91b81f97ce168539bc10519f2ce22106653b661bb64c2e85a70ed9269482bc189d1c42d025d30178e5d7a07bebe6fa0352f2256e1d7a593b3686f4cb796c771707f7f1ea32df1e6a5abeb7be6e9e7676cb32aa97bd22dd1eae743e8353ab272f4f9e666e87787f06a3388a7e65470018eb0f62f95a6853291289bf8eef390be492c277c3af0acb0ba38b7690e87263a9d603d744060dc5679cd0707f259f8d45143f"}}]})
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async)
syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)

2.427988609s ago: executing program 0 (id=533):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x10201, 0x2, 0xdddd0000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
open(&(0x7f00000003c0)='./file2\x00', 0x200, 0x10dd722b6e14c2dd)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40a000, 0x0)
pipe2(&(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x44)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x1}}}, @dstopts={{0x18, 0x29, 0x37, {0x5e}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0xf0, 0x2, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2b}]}}}], 0x58}, 0x1)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x20000})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x50000, 0x3000008, 0x12, r7, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006a00150010000008ffffffff894150da2e15c76bc0000000"], 0x1c}], 0x1, 0x0, 0x0, 0x4008145}, 0x4000080)
lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x54, 0x34, ""/52}, &(0x7f00000000c0)=0x54, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000500)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b81342b8a387ca4e0f23d80f21f835800000d00f23f866ba4300ec0f0f49e4b70fbaa9220000000d", 0x7d}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0)
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic, &(0x7f0000000180)=0xffffffffffffff7f})

1.982453891s ago: executing program 6 (id=534):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = socket(0xa, 0x2, 0xff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
fallocate(r4, 0x0, 0x200000000000003, 0x6)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000500)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b81342b8a387ca4e0f23d80f21f835800000d00f23f866ba4300ec0f0f49e4b70fbaa9220000000d", 0x7d}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000080))
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000002c0)={0x80000000, 0x8})

1.866984013s ago: executing program 6 (id=535):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000004c0)="ec6e366b96")
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0xa)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)

1.866779124s ago: executing program 6 (id=536):
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.831128954s ago: executing program 6 (id=537):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040))

1.526862242s ago: executing program 7 (id=539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc175f46e7f093e10b8960fd4f20e4e2e539e62758957533"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a60eeffc2ef072af6d0e765b5b7f71bee3a616e912dd613c"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r4, 0x325, 0x3, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200180a4}, 0x4000010)

1.526582492s ago: executing program 7 (id=540):
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x402480, 0x91)
unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x5)
r4 = eventfd2(0x0, 0x0)
io_setup(0x4, &(0x7f0000000080)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
io_getevents(r5, 0x7, 0x5, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x0)
shutdown(r3, 0x0)
r6 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x02\x00\x00\x00\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x92\xe3 P\xbf\xa0\v`s\xec\x18>(\xc2N\xb4\xa0\\\xf2\x1a\xd1v7\x0f\x91', 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, &(0x7f0000000040)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.097022183s ago: executing program 7 (id=541):
fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) (async)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000001c0)=""/254)
syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1.080658373s ago: executing program 0 (id=542):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x13)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "e7cdc75f", '\x00\x00\x00\x00\x00\x00\x00X'}, 0x28)
writev(r0, &(0x7f0000004800)=[{&(0x7f0000000140)="58ddb007", 0x4}, {&(0x7f0000002180)="2ea63d218bc102", 0x7}, {&(0x7f0000000440)="63e7368651", 0x5}, {&(0x7f0000000c80)="be77", 0x2}, {&(0x7f0000000540)="8fa68a274cab49b9c8061727", 0xc}, {&(0x7f0000000280)="925061", 0x3}, {&(0x7f0000000b80)="c83a799900d0a6b295193dcb943ab2191386165eea5853024232db9a4ac8eddd921d", 0x22}, {&(0x7f0000000340)="dcceb4ec", 0x4}, {&(0x7f0000000cc0)="0aaf6556", 0x4}, {&(0x7f0000000300)="38af426159", 0x5}, {&(0x7f0000000fc0)="e72d1514527e3c5d60b56ac052adbfdbc8562530bc4c1895d95ebe949dae4379a18b6bd028a9723a19811b7ac2750f120ce98b21be2e7d34b020335991c893a1e5", 0x41}, {&(0x7f00000010c0)="e0c4e52d579260a2a8bf3d5229419dca3a727283fdc6da702fbc3f84fe46eb42695cd82ab88a63f2d08d91b8043e1f281b142eb5a8d112098cf8eadf141ab70534bee0cc27ecd9fde8c3f8e37aaa299e0099f7763844e8117bd0c513626e632bb271dada32a8835fb808f35f5395e690261a80d330abae7c6247100b3b70f5779148580c3bc06381f9223a08e3da5fe1ff64801dbbb2b69a5547b0cad39f46661978550ebe60173c9204e9173d71eb393633706ceb615141e5168c92a11a9103f3d2e3106b82037c17a53680278c7cbfb23df3ce07cdd11fc9366394f3cb5a2b10ff038601d8f0c05f5d8d300aae2eaa0ea7c82c784789b7d4d76974d1f6fc6288cdb97827501f4663ca689f192bc15a7cdf93f7839f3296736fd0c2ce338b10dda1e9dd4cd271fd73c98af90a06aa632d74854562a1650df6976456badc91812ce56012e4e080546be50bfb9ed022c073b948965945b9e1c1343a8756ee534c1d2be99d1829dd89ae93dbacba8277713ae7efe96aee8d6a8ccd1c46de90f3464690dad281ef8777d38777cd575406cfd550dcf5ba7f39050c65f363b2551479621bdf4292cac5c383e0696ff850d3f6874dd1e6d75201fc688ca9a564ea241092b9cf69fd8dfd4dfee3d300f4c1f11ed98369623402e35a37c248c75ddd35c53dbc2bf43783ccab63dea29c779ee75c37137224580adc94800e56087fc3bad7dff41c059e9a032db3f888d62cb2146ea34456c6d69642737bb013d445f4c7f088a1e382b8f5db48ea36ca7589f147607a48bafe152dce38890cb375135885129ded98e4b3d1bc3467bd37a136cb733342c579b824561f15b4f09322301248028458e79f29bae761a0ff8663c9f3b98ebe90afe663f3990d46ee18d9f3a5c5e0cd1211a874cee05df71e862184fdb80f5a744683a393f91370bd678ce70f5a3a8db61c04e1947c21c805496d0edcf31412599217877adc419349f3cbdd5b7c86686127048e5ab1ba055cecfc3a4b7a4a2a128d0015ac095f940fee0f71e9388266318fa4229783dd7c71ca2ca1bdbf3529bed9e6a6ee1d22f214a8763bbd0500d48c2231846f466f98692694796afdf00b4f600766efdce844408b29f0beb608418654c249da135918b1303a61c1b4792d7c6feb4f8914a57e4dcabd40e41d58607dcfbcd706ee2e96163cbd24410393ba661a112c3c88900bd1320897322dfb01fb3da109439c82e01d8fad4ef26dc5e118506a3e5b505bd171c1559754039630a86dfcb8d5f10cd6d0e722e09e09f25553587449d9dbd7f55b7540fe167fe4f4bb872a6324e764f97bb8055c0acfcdf4d54d76499b753d55028c9f5c61281140fbf6aa4064048bd56ef6ae4e54ccb76d584a92f21cc43e8822a2ca8d2e92c0db05e50fef9c23dce70cdc466378b90ed343264a235b9c90426fd57d81b536215008006cb16cb2a0025c83a0c70fb48c4ea573f983866caffc410e8b7e9e7b8faadbb95e94633ddacb174080eae1dc8f8baae989c42d344a1c61798e189687f2365870a76e1c34788321e9415c2740546cd3a227c6b49b6e3ded1ebc81de19e288d66cb8ac2f6a3c8993a75fbaaba1d03f58c213374bb71832f3f2d4a115e2f666c59a08601aa43b919be64b46dfb57edfeaa68329870e7a198a46fb7b65b0a7e0ee380c46050e43942cfdab0b714ac1aa6e73ab81833a9c548d9ee917a40c5425dc74763030fd163ddc66559215f0e7a1efe15a9eda714a79ed48e95413359ac97f00be61d37abc5c0e4327c7453ded35218889a2e9b0939a4e98c455beb346c5f04708dea07c64958bdde45975ca487be21f87e78dad45eaf62761fc44951dee76aa02533441710be83e49d6f9e8a6a237dbcf0a9ec3d1e9ba26b26a226442c01b4f0b20480ab1bce78d1b4bd8cbb0b0103f17968b3e278c2b9825ff612815e18e0426970d2333d7638197267ece2532e8ded3a88817ae7c15bd981d70b3e257941a0bed4ba5d0ca632e5396568f1072d6b0ea9175bf22885c592730643715fbaea67d8a17b5a49056476a3d7ef96a0dfaff6448ce961914c73494de386d4bbde8107cef1d051bb9e33aeddc846aee6c7647b3d2818bcf87ff31fdaa96ac208f0feb9a308fe7481b611028885d068aee21f44a983caa6f17d24e413d462a32a8bc4cecad8a4da90e5354f4ce248ba71b126690a453ddd267222a3a4581860b43728d60eceb1982b3e0a475b5c9fb027539089d1e1873c994aeb2cb7868bac4ab8747cb6c2d7baadec6008a2a23313785e7657366bcd84c2192640fd182f91cb9b17cf083482c418310cc6034b3ee77ba558787ad03bc1f75e6ee0035a10d7800ec477336e563e3c6bd95a77af9003f8d401dde392296c13243f147ea1d48c569e27e1e06c6ee4244729db64f70b9a3e89dd56d312585f392af12c848576181417ab2ac93b30a1fadbb26ef407f09ada480fb48c8a736380eabb7dc03be7ad1b4077ea7cd76bc1d6b6e4b78dd5f148b0a369315223e0900d2615c8b8e3904e779262d3a50a67f3f9c157d5ab38808d5a11c68cd6fe826a136ad3c6c99db79b184908997c1a26a1bafcd77bd50356928fa25cc2b3a5d35926ffccaf889eb63c58276f8697099d4d0d8d7d67a11b555efe53310e9b41cc016f9778b5648dd69f628ccf04313e3216dd8ff76bd849ccb75fed939647e308d1637aa71c8a5cad0dded6457dbbcef75c807b430c4f91e47b0b0dbbc5212fab74c9eed6fffcade3cc05adc4c3e2643d352a9c05f3d1fb6cef8d6a8fa14aa44ed7a6edd989c1878859a32ecc46d7a55595d5614463947177c946a1f4d5a34ab6187346a54445ff4626141be8ce9936e77009b3dfe4e3292cfeda764f1101d8d994579c5967bdd1474103ab1b31d2cd8e39a571acc990a87a312e1788a7609e6c09406d0a95c9221d4c5bdb19957eb7503e085719a19f004cae527cb445c184c71f11ae0cb2153fd56f938e6c0fdbb22a651f3802452568f7651e776c090a61b09eca2271914c03ce7fdac3120be7402c6cf694d6c597bd48585088e5d9497f1b5888f0339bc3f0ba70ee78c39254f98b341f6dc202791a0cd4616f50176f42fb80977ba7fa82cb3e3f337f7a7287f8da595139e789922fb16c1a8bf4fb2fbfe90f4e40dcf31bf19d287aa52997d5dd686708b3b3dcd5007ef40efba7372713775ce4444147cdb54907d81b1938440978f2744ca12ce3e5f33efa25f9cc50b2930aa438c85e96b7a5838cf2683f7d70bd0deb8167be5ec96b85cae0f1fe543b2cb754969e314f06b08e58c94251e2a14066e502dbfeadb9cce7845b9f961ff21ad128b3d4d9ed76bd57eeda67312d3d569dc606559a8816889612fcbfbe23bc42278b2500cb38b5a76ef7815b01137265ba5012081cd9cc811881a14ff8fa79ba4fd7da6b90635f485091692261e36010c645607c08af1a933a234b4b87483852a233dc1d5a912f5664fbc0e5f720fc8ff91e14d34915d81a3c82748e15b4440a39e0d9ef5c0778cf23e8e990262951c6c68f35bca54cd8a8fd160e3b718aeebedbd1bfc04e29720e4dca547962f61e6ff7c8274090e9b230441593d03a57ef7e42d14b4c9dcac7a208dccee9dc308df7cd96aa3caa59f39732ee1ca3a2d3cc4863fbb50b3945e7230eb48737d993b9c0f218990a32a2b6d007305daef59ca8b9b3bd8a4721fde3dfd1036d1a38dd07721484f8a8b7f31a7587de3deb7909f6c1be2a2f6e037bdf579c312e3e928ba1f5f79927ee9163a2f6d5868038cb9f7f8ba6276ab7c14ee708ece39b36cea04aa7b296e18bfaa0affdaacd55bee3f6ba8f326452129148747a26c89f5b1739629d71ea362142b3889474dc57d9f058e18b4a1b9fb61f5cd457f50fa4707565d0b100deb79f87095fc11fbcdec2d9a534ba5fc6b2d170a5f7599765d9a0906b0612ce49a3b2395836466fad2a7bd8a5f1af07637021d35c27e163c3800658333238df8cc8d4eebd8c33cc94c1ba098c298d361e639d489bf72c11d817b479804c235117af91d039b4db220a5bce6eed1b06b54659e0c7e7fbcea8124985e30f159b3e005eb72b07f112d9f6fd397afb6002165d4d573f7fa8ae028a366d68e9c704bd3f91ddccdcd765228d332c82dda8594a8e37593da824314f9ed8d22b6cefe660a8f369557b0bce8d48733156c0cb1bc0767bbb69716df7dc753486dc115d585538c9fcaaa7d10a9d13784d7ed38b9a1896eaf15a086af79c063768ed72ce9beb6c13ac8fdbddfce9a64fad7aef101088db3a57f2d641a06288df40b649b60affb042bb709b39318ce2b150f8c8cdb846aa56fe5368beab42308321acd535eacd1c46b947bb766473d851a5baac3d7c29a96c14ec578ca02cb624f7e36b52f00c7bcb18da2144e4321013893f683f180510d7edcb5247f2a58673cec47d5d02cedc96eada8a184fd43be283edd27d686c894cec71f2aa09ff98d0d979f8e33d98b089e7a13316db9c1f2dd94125222af0723adb13a3ffe619b9b50cc03c9eaa71e3886a0bf4782b619d4dce7ec4269393faf02557495aecc1fa62bc0e5e32df90c91f23be73e6f5c61a50ad90d2e30b8274a6cd687a0f6d3bbb421ac920c9733340858c550cff307e2c3ef3086cfe64b34623e4fb66e4cad084dd1e4db596d2b77a5724f892c3ec7db837b33760c8e86f51d2d403e5155ffa1c3dc89a6b663f927ccb99b1dc0d3387aa0a837a8e6080065cc256061c037b642848d70b9b5d3e4ad138f32e3c28ac5d0b790e9d2825a2b6cf4d3bbed17aec4a1bc0a3f4457afd61a8d3114601a8b79fd0025c64b62c54764f0e6a46f27b7c1354424ab7101b4ce5355e3baa0e36769eb142ea659386294c0c5dd283986f38b3a3c3a7698d58834290041b04c88f21e0757813e9db3343e0cbd45051f7b3204dbb2320cd945f54a3e2a21b2d586c24d3cf23dda77e60493cee205ea35721e98ffc77c98767d7903b2452739a3fef21ea6ed7d4e8718a13f17aa9c324894e4edf470e5a6fe8435f1db6af89500725720353b633df18d167492335c096669aa051a24f03c484c92e21294e7d8bd4ffa2737269bcac16058ed68d7e25921cd39939bf02f7f6391a4bec29f95231e408fd11b3c5c3b62bbbe61975393bc96fdc8b252c4c3f4853231552f98acdc6f812f7df0b7cb97cc1fdc197b8a7267a04aceae822f1af319aa0e970cd084615cd66ff546509fce6f48c34f6514a3a9326ae532cb3b93655b8939295172537f3d87ca148d73d031f98a55d942a8ddf7d5ccb24a864344c9136de022077b6aeea6a37976c203f01034afccbedf0cf241dd7525bbdb498add68aabf8f9c6d5c191ca32bdf8bdd5b8eeb982d80275ff76179a25f8dbaf7ba801871bfbf779d4a5c7aca4afec1d158d2e868be75a0ddc06c2bae3f76c760fb49201e872306856e4347d5c50bab25fdfe6a7904b92d7f6b6f79b423b5db59d32ed658938cf6c09d332914d41b578b21b64e4addd82000ef4b926bee971fec", 0xf41}, {&(0x7f0000000d40)="046d0a", 0x3}, {&(0x7f0000000e00)="d8a55173e752be52407e4116", 0xc}, {&(0x7f0000000e80)="e8", 0x1}, {&(0x7f0000000ec0)="7100dd78d9", 0x5}], 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8ab43, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0)

920.687637ms ago: executing program 0 (id=543):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0xe73a6c3fe2897294, 0x8, 0x2, '\\K'}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x40, 0x4, 0xe1, {0xe1, 0x23, "275282dbf558fdbe8a8ccefa079437b02c5bbc70b5f1109b35b4d97fea6b2e2a4513af802fe112c00bf579b941aed847cd3fcb39c152ffb1558a18bfd8b4cf488a64a20108e193e6572526ec338ce369231248038eb95ca436f9dab8a1b2ff48991c56fe01419efa28b4d5de72f910ed45899b6cf141b032162bc4dd8c5e28fd82ddf2db4a133e65d04b220c3a30402a4abf82f17a7a9643869c957e5bc4e03fec2ab2254a86c5fdeaca1b0bc2e21172ac070b29ed7f8717afaf6f9ed1639d310d302641d002f233adcaa7352873941dad94e19256eaf63ef116043665363f"}}, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003044c630004031f04"], &(0x7f0000000300)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@generic={0x16, 0x10, 0x4, "6a4f41877b2b9ff22679da8329a898a768c3dc"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0324f43c17ec0022eb9ac6073df9fd51"}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x10, 0x2, "e32d819a", "bd9e8030"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x1, 0x4, 0x1, 0x8, 0x3fca}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000440)={0x0, 0xf, 0x23, "f5ea775328197dad14f08ea75fe743ac051b12a3131ba944efd23d014edbcdfedcfabb"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000600)={0x40, 0x7, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xfd}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "111f"}, &(0x7f0000000080)={0x40, 0xf, 0x2, 0x8212}, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "ff00"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xe}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x14}})

549.690246ms ago: executing program 1 (id=545):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="b46175bbb8067f3f63d35130c33d2bc1029212b98be0062a5201ef99d326317b5e9810fe3166206cd2410e79e4eab7015b8bce2ce62fe4d4197cf387e80a33a4c221715bc800aa690b2cc57fbde2a5eab586eb5aef67a09a859676ac2d34b89a1847257cfe6aadc31758ba265502638e74db")

470.508468ms ago: executing program 1 (id=546):
socketpair(0x6, 0x80000, 0xb83e, &(0x7f0000000040))
socketpair(0x6, 0x80000, 0xb83e, &(0x7f0000000040)) (async)

456.482008ms ago: executing program 1 (id=547):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x2})
io_setup(0x2278, &(0x7f0000000180)=<r1=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_KEEPCAPS(0x8, 0x3)
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="b6b8", 0x2, 0x0, 0x0, 0x2}])
io_destroy(r1)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@local, @remote, 0x0, "ca1f4efa3a1b1574e891515ab0b9f7fba355be28a6d06209120fb2dd533d91f0", 0x0, 0xc0a, 0x7ff, 0x6}, 0x3c)
write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0)

316.326132ms ago: executing program 1 (id=548):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r3, &(0x7f0000000380), 0x8)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x1, 0xc, 0xd9c7d69, 0x8, 0x8})
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000000, 0xfffffffd, 0x7, 0x5, 0x5c6}]})

202.806565ms ago: executing program 1 (id=549):
unshare(0x60000600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) (async)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) (async)
recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a80)=""/4094, 0xffe}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f00000004c0)=""/264, 0x108}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000880)=""/227, 0xe3}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000000)=""/78, 0x4e}], 0x9}, 0x1207}], 0x3, 0x0, 0x0)
unshare(0x60000600) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x11)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x3, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x40b3b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x8, 0x3, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9559, 0x2000, 0x3, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0xffffffff}}], 0x1, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x2000c041) (async)
ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f0000000080)={@remote, @rand_addr=' \x01\x00'}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) (async)
execveat(r6, &(0x7f00000003c0)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000400)=' \x01\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000780)='ip6tnl0\x00']}, &(0x7f00000008c0)={[&(0x7f0000000800)='$[[\x00', &(0x7f0000000840)='[{\\/%/&&&(\x00', &(0x7f0000000880)=' \x01\x00']}, 0x1000)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x91, 0x6, 0x3, 0x0, 0xa, 0x0, 0xd8, 0x8, 0x7, 0x19, 0x42, 0x8, 0x0, 0xe956da36, 0x9, 0x10, 0x9, 0x21, 0x0, '\x00', 0x6, 0x1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x492492492492846, 0x0) (async)
fcntl$setstatus(r8, 0x4, 0x42000) (async)
unshare(0xc000400)
ppoll(&(0x7f0000000040)=[{r8, 0x140}], 0x1, 0x0, 0x0, 0x0) (async)
connect$unix(r7, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)

200.258445ms ago: executing program 6 (id=550):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xa})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300150c0000002cbd7000fcdbdf2505000600000000000a0000000000000000000000000000005300000000000001020000000000000002000100000000000400030c000000e0030005003c00000002004e23e00000010000000000000000b64b30910c932726b03354264c1346295e6598932f7297830e458a3ea249a50abb8c930fdd841b355e7fe6fb979270b058047571981b"], 0x60}, 0x1, 0x7}, 0x14)
r1 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002480)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
listen(0xffffffffffffffff, 0x2)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0xfffffffe)

178.541586ms ago: executing program 6 (id=551):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
chroot(&(0x7f0000000a40)='./file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
geteuid()
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x2)
sched_setscheduler(0x0, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840), 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x180)
getdents64(r5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b9, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000)
ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000040))

0s ago: executing program 1 (id=552):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xffffffff)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="2ef20f017df4ba4200b07aeeb80e000f00d0660f3acfc30d0f01b91a000f20e06635000010000f22e06766c744240033d500006766c74424020001c0fe6766c744240600000000670f0114240f00d466b9410101c066b869d281cd66ba000000000f302e0f017500", 0x68}], 0x1, 0x48, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001ac000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x3a, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8900)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c010}, 0x4000)
write(r1, &(0x7f0000001200)='dummy_udc.0', 0xb)
prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/15)

kernel console output (not intermixed with test programs):

9] usb 2-1: Product: syz
[   77.766099][    T9] usb 2-1: Manufacturer: syz
[   77.797646][    T9] usb 2-1: SerialNumber: syz
[   77.807518][  T311] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   77.837827][  T311] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   77.858853][  T311] usb 5-1: USB disconnect, device number 7
[   78.187865][ T1131] FAULT_INJECTION: forcing a failure.
[   78.187865][ T1131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   78.204635][ T1131] CPU: 1 UID: 0 PID: 1131 Comm: syz.0.269 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[   78.204672][ T1131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   78.204687][ T1131] Call Trace:
[   78.204695][ T1131]  <TASK>
[   78.204704][ T1131]  __dump_stack+0x21/0x30
[   78.204741][ T1131]  dump_stack_lvl+0x140/0x1c0
[   78.204774][ T1131]  ? __cfi_dump_stack_lvl+0x10/0x10
[   78.204809][ T1131]  dump_stack+0x19/0x20
[   78.204840][ T1131]  should_fail_ex+0x3c2/0x510
[   78.204880][ T1131]  should_fail+0xf/0x20
[   78.204905][ T1131]  should_fail_usercopy+0x1e/0x30
[   78.204934][ T1131]  _copy_from_user+0x20/0xa0
[   78.204967][ T1131]  csum_and_copy_from_iter_full+0x1ee/0x1c70
[   78.204996][ T1131]  ? bpf_lsm_capable+0xd/0x20
[   78.205030][ T1131]  ? __cfi_csum_and_copy_from_iter_full+0x10/0x10
[   78.205058][ T1131]  ? capable+0x8e/0xf0
[   78.205080][ T1131]  ip_generic_getfrag+0x155/0x2c0
[   78.205109][ T1131]  ? __cfi_ip_generic_getfrag+0x10/0x10
[   78.205136][ T1131]  ? skb_page_frag_refill+0x22e/0x4f0
[   78.205168][ T1131]  __ip_append_data+0x1f27/0x3b60
[   78.205201][ T1131]  ? __cfi_ip_generic_getfrag+0x10/0x10
[   78.205232][ T1131]  ? ip_setup_cork+0x9f0/0x9f0
[   78.205258][ T1131]  ? lock_sock_nested+0x216/0x2a0
[   78.205293][ T1131]  ip_append_data+0x109/0x1a0
[   78.205320][ T1131]  ? __cfi_ip_generic_getfrag+0x10/0x10
[   78.205349][ T1131]  udp_sendmsg+0x627/0x2440
[   78.205374][ T1131]  ? avc_has_perm_noaudit+0x26b/0x360
[   78.205403][ T1131]  ? __asan_memcpy+0x5a/0x80
[   78.205429][ T1131]  ? __cfi_ip_generic_getfrag+0x10/0x10
[   78.205457][ T1131]  ? __cfi_udp_sendmsg+0x10/0x10
[   78.205488][ T1131]  ? kstrtouint_from_user+0x117/0x170
[   78.205515][ T1131]  ? __x64_sys_openat+0x13a/0x170
[   78.205552][ T1131]  ? selinux_socket_sendmsg+0x281/0x380
[   78.205584][ T1131]  ? __kasan_check_write+0x18/0x20
[   78.205608][ T1131]  ? proc_fail_nth_write+0x184/0x220
[   78.205643][ T1131]  ? inet_send_prepare+0x64/0x4e0
[   78.205674][ T1131]  ? __cfi_udp_sendmsg+0x10/0x10
[   78.205698][ T1131]  inet_sendmsg+0xef/0x120
[   78.205728][ T1131]  ? __cfi_inet_sendmsg+0x10/0x10
[   78.205758][ T1131]  __sys_sendto+0x5ea/0x700
[   78.205808][ T1131]  ? __cfi___sys_sendto+0x10/0x10
[   78.205836][ T1131]  ? __kasan_check_write+0x18/0x20
[   78.205869][ T1131]  ? __cfi_ksys_write+0x10/0x10
[   78.205896][ T1131]  __x64_sys_sendto+0xe9/0x100
[   78.205921][ T1131]  x64_sys_call+0x2c2c/0x2ee0
[   78.205943][ T1131]  do_syscall_64+0x57/0xf0
[   78.205975][ T1131]  ? clear_bhb_loop+0x50/0xa0
[   78.206000][ T1131]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   78.206037][ T1131] RIP: 0033:0x7fd52e19e0d9
[   78.206057][ T1131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.206078][ T1131] RSP: 002b:00007fd52ef9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   78.206104][ T1131] RAX: ffffffffffffffda RBX: 00007fd52e425fa0 RCX: 00007fd52e19e0d9
[   78.206122][ T1131] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000003
[   78.206138][ T1131] RBP: 00007fd52ef9b090 R08: 0000000000000000 R09: 0000000011000a00
[   78.206154][ T1131] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001
[   78.206169][ T1131] R13: 00007fd52e426038 R14: 00007fd52e425fa0 R15: 00007fff17e6f228
[   78.206190][ T1131]  </TASK>
[   78.819614][ T1137] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   78.875725][    T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:5f:96:89:c5:32
[   78.892783][    T9] rtl8150 2-1:1.0: eth1: rtl8150 is detected
[   78.919856][   T36] audit: type=1400 audit(1787684919.830:273): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   78.961458][   T36] audit: type=1400 audit(1787684919.850:274): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.017622][   T36] audit: type=1400 audit(1787684919.850:275): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2264 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   79.073975][  T311] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   79.080700][   T36] audit: type=1400 audit(1787684919.850:276): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2264 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   79.166881][   T36] audit: type=1400 audit(1787684919.850:277): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2264 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   79.217294][   T36] audit: type=1400 audit(1787684919.970:278): avc:  denied  { read } for  pid=1144 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.273368][   T36] audit: type=1400 audit(1787684919.970:279): avc:  denied  { open } for  pid=1144 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.313997][   T36] audit: type=1400 audit(1787684919.970:280): avc:  denied  { getattr } for  pid=1144 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.345508][  T311] usb 5-1: unable to get BOS descriptor or descriptor too short
[   79.365048][  T311] usb 5-1: not running at top speed; connect to a high speed hub
[   79.365595][   T36] audit: type=1400 audit(1787684920.270:281): avc:  denied  { write } for  pid=1143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.402553][   T36] audit: type=1400 audit(1787684920.270:282): avc:  denied  { add_name } for  pid=1143 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.402983][  T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.462943][  T311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   79.485188][  T311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   79.498952][  T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.509145][  T311] usb 5-1: Product: syz
[   79.514322][  T311] usb 5-1: Manufacturer: syz
[   79.534639][  T311] usb 5-1: SerialNumber: syz
[   79.750899][    C0] usb 2-1: eth1: intr status -71
[   79.758381][    C0] usb 2-1: eth1: intr status -71
[   79.758504][   T46] usb 2-1: USB disconnect, device number 25
[   79.772373][  T148] usb 2-1: device reset failed
[   79.983024][  T311] usb 5-1: 0:2 : does not exist
[   79.998500][  T311] usb 5-1: unit 0 not found!
[   80.020403][  T311] usb 5-1: USB disconnect, device number 8
[   80.737795][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   80.749706][ T1193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'.
[   80.759575][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'.
[   80.917639][    T9] usb 5-1: Using ep0 maxpacket: 32
[   80.931119][    T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   80.945939][    T9] usb 5-1: config 0 has no interface number 0
[   80.960468][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   80.977633][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.995621][    T9] usb 5-1: Product: syz
[   81.005676][    T9] usb 5-1: Manufacturer: syz
[   81.015757][    T9] usb 5-1: SerialNumber: syz
[   81.028577][    T9] usb 5-1: config 0 descriptor??
[   81.046204][    T9] smsc95xx v2.0.0
[   81.367646][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   81.559513][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.577655][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   81.587445][   T10] usb 2-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   81.629361][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[   81.649152][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.659404][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.669311][    T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   81.697645][   T10] usb 2-1: Product: syz
[   81.702920][   T10] usb 2-1: Manufacturer: syz
[   81.713068][    T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   81.725589][   T10] usb 2-1: SerialNumber: syz
[   81.731479][    T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   81.746808][    T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   81.773303][    T9] usb 5-1: USB disconnect, device number 9
[   81.864808][ T1200] FAULT_INJECTION: forcing a failure.
[   81.864808][ T1200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.878707][ T1200] CPU: 1 UID: 0 PID: 1200 Comm: syz.0.283 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[   81.878765][ T1200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   81.878780][ T1200] Call Trace:
[   81.878788][ T1200]  <TASK>
[   81.878797][ T1200]  __dump_stack+0x21/0x30
[   81.878835][ T1200]  dump_stack_lvl+0x140/0x1c0
[   81.878868][ T1200]  ? __cfi_dump_stack_lvl+0x10/0x10
[   81.878902][ T1200]  ? check_stack_object+0x138/0x150
[   81.878929][ T1200]  dump_stack+0x19/0x20
[   81.878959][ T1200]  should_fail_ex+0x3c2/0x510
[   81.878988][ T1200]  should_fail+0xf/0x20
[   81.879022][ T1200]  should_fail_usercopy+0x1e/0x30
[   81.879052][ T1200]  _copy_to_user+0x24/0xa0
[   81.879084][ T1200]  simple_read_from_buffer+0xed/0x160
[   81.879118][ T1200]  proc_fail_nth_read+0x1aa/0x220
[   81.879153][ T1200]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   81.879188][ T1200]  ? bpf_lsm_file_permission+0xd/0x20
[   81.879220][ T1200]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   81.879254][ T1200]  vfs_read+0x288/0xc70
[   81.879277][ T1200]  ? __kasan_check_write+0x18/0x20
[   81.879314][ T1200]  ? __cfi_vfs_read+0x10/0x10
[   81.879336][ T1200]  ? __kasan_check_write+0x18/0x20
[   81.879359][ T1200]  ? mutex_lock+0x97/0x1d0
[   81.879381][ T1200]  ? __cfi_mutex_lock+0x10/0x10
[   81.879407][ T1200]  ksys_read+0x145/0x260
[   81.879431][ T1200]  ? xfd_validate_state+0x68/0x140
[   81.879463][ T1200]  ? __cfi_ksys_read+0x10/0x10
[   81.879488][ T1200]  ? __kasan_check_write+0x18/0x20
[   81.879511][ T1200]  ? fpregs_restore_userregs+0x11c/0x260
[   81.879541][ T1200]  __x64_sys_read+0x7f/0x90
[   81.879565][ T1200]  x64_sys_call+0x2638/0x2ee0
[   81.879587][ T1200]  do_syscall_64+0x57/0xf0
[   81.879618][ T1200]  ? clear_bhb_loop+0x50/0xa0
[   81.879643][ T1200]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   81.879678][ T1200] RIP: 0033:0x7fd52e15e90e
[   81.879698][ T1200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   81.879719][ T1200] RSP: 002b:00007fd52ef9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   81.879746][ T1200] RAX: ffffffffffffffda RBX: 00007fd52ef9b6c0 RCX: 00007fd52e15e90e
[   81.879764][ T1200] RDX: 000000000000000f RSI: 00007fd52ef9b0a0 RDI: 0000000000000004
[   81.879780][ T1200] RBP: 00007fd52ef9b090 R08: 0000000000000000 R09: 0000000000000000
[   81.879795][ T1200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.879809][ T1200] R13: 00007fd52e426038 R14: 00007fd52e425fa0 R15: 00007fff17e6f228
[   81.879830][ T1200]  </TASK>
[   82.179945][  T311] usb 2-1: USB disconnect, device number 26
[   82.274277][  T310] Bluetooth: hci0: Frame reassembly failed (-84)
[   82.289232][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.307885][ T1209] netlink: 92 bytes leftover after parsing attributes in process `syz.0.286'.
[   82.327658][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.337834][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.359723][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.384785][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.402536][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.425936][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.445691][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.465045][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.484038][ T1207] futex_wake_op: syz.0.286 tries to shift op by 144; fix this program
[   82.957634][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   83.118732][    T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.141157][    T9] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.165175][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.211536][    T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00
[   83.251746][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.268459][    T9] usb 2-1: config 0 descriptor??
[   83.437647][  T319] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[   83.589132][  T319] usb 1-1: unable to get BOS descriptor or descriptor too short
[   83.597504][  T319] usb 1-1: not running at top speed; connect to a high speed hub
[   83.607138][  T319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.619520][  T319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.631099][  T319] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.641785][  T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.650542][  T319] usb 1-1: Product: syz
[   83.655592][  T319] usb 1-1: Manufacturer: syz
[   83.660645][  T319] usb 1-1: SerialNumber: syz
[   83.692458][    T9] thrustmaster 0003:044F:B65A.0003: No inputs registered, leaving
[   83.707913][    T9] thrustmaster 0003:044F:B65A.0003: hidraw0: USB HID v0.00 Joystick [HID 044f:b65a] on usb-dummy_hcd.1-1/input0
[   83.726137][    T9] thrustmaster 0003:044F:B65A.0003: no inputs found
[   83.895535][ T1212] fuse: Bad value for 'fd'
[   83.903678][    T9] usb 2-1: USB disconnect, device number 27
[   84.079913][  T319] usb 1-1: 0:2 : does not exist
[   84.085058][  T319] usb 1-1: unit 0 not found!
[   84.098279][  T319] usb 1-1: USB disconnect, device number 24
[   84.287722][  T593] Bluetooth: hci0: command 0x1003 tx timeout
[   84.287722][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   84.677881][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   84.807614][    T9] usb 5-1: device descriptor read/64, error -71
[   84.946195][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.953413][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.960997][ T1244] bridge_slave_0: entered allmulticast mode
[   84.967634][ T1244] bridge_slave_0: entered promiscuous mode
[   84.974994][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.982975][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.990232][ T1244] bridge_slave_1: entered allmulticast mode
[   84.996948][ T1244] bridge_slave_1: entered promiscuous mode
[   85.037633][  T311] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   85.073235][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.077912][    T9] usb 5-1: device descriptor read/64, error -71
[   85.080542][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.094578][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.101667][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.125392][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.134746][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.148109][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.155496][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.168213][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.176121][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.184188][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   85.184205][   T36] audit: type=1400 audit(1787684926.090:291): avc:  denied  { read write } for  pid=1248 comm="syz.1.296" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   85.215253][  T311] usb 1-1: Using ep0 maxpacket: 32
[   85.221767][  T311] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   85.229483][   T36] audit: type=1400 audit(1787684926.090:292): avc:  denied  { open } for  pid=1248 comm="syz.1.296" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   85.235877][  T311] usb 1-1: config 0 has no interface number 0
[   85.261307][   T12] veth1_to_team: left allmulticast mode
[   85.266985][   T12] veth1_to_team: left promiscuous mode
[   85.269649][  T311] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   85.273318][   T12] bridge0: port 3(veth1_to_team) entered disabled state
[   85.283237][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.298896][   T12] bridge_slave_1: left allmulticast mode
[   85.299352][  T311] usb 1-1: Product: syz
[   85.304788][   T12] bridge_slave_1: left promiscuous mode
[   85.310007][  T311] usb 1-1: Manufacturer: syz
[   85.315675][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.320892][  T311] usb 1-1: SerialNumber: syz
[   85.332151][   T12] bridge_slave_0: left allmulticast mode
[   85.336553][  T311] usb 1-1: config 0 descriptor??
[   85.344443][   T12] bridge_slave_0: left promiscuous mode
[   85.346334][  T311] smsc95xx v2.0.0
[   85.351208][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.362015][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   85.452617][ T1244] veth0_vlan: entered promiscuous mode
[   85.471308][ T1244] veth1_macvtap: entered promiscuous mode
[   85.487502][   T12] veth1_macvtap: left promiscuous mode
[   85.503298][   T12] veth0_vlan: left promiscuous mode
[   85.508980][    T9] usb 5-1: device descriptor read/64, error -71
[   85.636729][   T36] audit: type=1400 audit(1787684926.540:293): avc:  denied  { mount } for  pid=1244 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   85.699625][  T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   85.717742][  T311] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   85.738949][  T311] usb 1-1: USB disconnect, device number 25
[   85.757778][    T9] usb 5-1: device descriptor read/64, error -71
[   85.883060][    T9] usb usb5-port1: attempt power cycle
[   86.124597][   T36] audit: type=1400 audit(1787684927.030:294): avc:  denied  { connect } for  pid=1258 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   86.127964][  T584] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   86.238885][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   86.269663][    T9] usb 5-1: device descriptor read/8, error -71
[   86.297632][  T584] usb 6-1: Using ep0 maxpacket: 8
[   86.298836][ T1266] netlink: 'syz.0.301': attribute type 27 has an invalid length.
[   86.305757][  T584] usb 6-1: unable to get BOS descriptor or descriptor too short
[   86.320730][  T584] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.331685][  T584] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   86.343120][  T584] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   86.352796][  T584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.361358][  T584] usb 6-1: Product: syz
[   86.365977][  T584] usb 6-1: Manufacturer: syz
[   86.371772][  T584] usb 6-1: SerialNumber: syz
[   86.400108][    T9] usb 5-1: device descriptor read/8, error -71
[   86.637781][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   86.647347][   T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[   86.679135][    T9] usb 5-1: device descriptor read/8, error -71
[   86.799507][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   86.812667][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[   86.821895][    T9] usb 5-1: device descriptor read/8, error -71
[   86.829603][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.840740][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   86.852520][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.862526][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.871341][   T10] usb 1-1: Product: syz
[   86.876025][   T10] usb 1-1: Manufacturer: syz
[   86.881017][   T10] usb 1-1: SerialNumber: syz
[   86.937779][    T9] usb usb5-port1: unable to enumerate USB device
[   87.047663][  T311] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[   87.210922][  T311] usb 2-1: unable to get BOS descriptor or descriptor too short
[   87.222655][  T311] usb 2-1: not running at top speed; connect to a high speed hub
[   87.235621][  T311] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40
[   87.245851][  T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.254893][  T311] usb 2-1: Product: syz
[   87.259174][  T311] usb 2-1: Manufacturer: syz
[   87.264364][  T311] usb 2-1: SerialNumber: syz
[   87.295610][   T10] usb 1-1: 0:2 : does not exist
[   87.302229][   T10] usb 1-1: unit 0 not found!
[   87.311159][   T10] usb 1-1: USB disconnect, device number 26
[   87.323622][  T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   87.476385][  T311] usb 2-1: invalid MIDI in EP 0
[   87.494609][  T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   87.510222][  T311] usb 2-1: USB disconnect, device number 28
[   87.522592][  T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   87.571367][ T1278] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   87.754551][   T36] audit: type=1400 audit(1787684928.660:295): avc:  denied  { mount } for  pid=1280 comm="syz.4.307" name="/" dev="ramfs" ino=149244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   87.786559][   T36] audit: type=1400 audit(1787684928.690:296): avc:  denied  { unmount } for  pid=867 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   87.834527][   T36] audit: type=1400 audit(1787684928.740:297): avc:  denied  { read } for  pid=1285 comm="syz.0.309" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.846300][ T1288] netlink: 'syz.0.309': attribute type 27 has an invalid length.
[   87.889948][   T36] audit: type=1400 audit(1787684928.800:298): avc:  denied  { mounton } for  pid=1289 comm="syz.0.310" path="/93/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   88.113006][   T36] audit: type=1400 audit(1787684929.020:299): avc:  denied  { setopt } for  pid=1303 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.145388][ T1306] netlink: 'syz.1.318': attribute type 27 has an invalid length.
[   88.167637][  T309] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   88.191116][   T36] audit: type=1326 audit(1787684929.100:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.1.319" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda3c79e0d9 code=0x0
[   88.317663][  T309] usb 1-1: Using ep0 maxpacket: 8
[   88.324923][  T309] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   88.338084][  T309] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[   88.347989][  T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.356305][  T309] usb 1-1: Product: syz
[   88.360750][  T309] usb 1-1: Manufacturer: syz
[   88.365435][  T309] usb 1-1: SerialNumber: syz
[   88.573161][ T1292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.582501][ T1292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.591835][ T1292] rust_binder: 1291:1292 no such ref 3
[   88.597776][ T1292] rust_binder: 1291:1292 got reply transaction with no transaction stack
[   88.606927][ T1292] rust_binder: 1291:1292 transaction reply to 0:0 failed EINVAL, code 0 size 96-24
[   88.619099][ T1292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.628130][ T1292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.644864][    T9] rust_binder: 1291: undelivered TRANSACTION_ERROR: 29201
[   88.658020][  T309] usb 1-1: 1:1 : format type 0 is detected, processed as PCM
[   88.669013][  T309] usb 1-1: 1:1 : sample bitwidth 177 in over sample bytes 2
[   88.676642][  T309] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   88.683902][  T309] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   88.697728][  T309] usb 1-1: USB disconnect, device number 27
[   88.711404][  T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   88.906929][  T584] usb 6-1: Unsupported UAC3 BADD profile
[   88.922076][  T584] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[   88.940978][  T584] usb 6-1: USB disconnect, device number 2
[   88.959375][  T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   89.061019][ T1332] FAULT_INJECTION: forcing a failure.
[   89.061019][ T1332] name failslab, interval 1, probability 0, space 0, times 0
[   89.075008][ T1332] CPU: 1 UID: 0 PID: 1332 Comm: syz.4.326 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[   89.075048][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.075064][ T1332] Call Trace:
[   89.075072][ T1332]  <TASK>
[   89.075081][ T1332]  __dump_stack+0x21/0x30
[   89.075122][ T1332]  dump_stack_lvl+0x140/0x1c0
[   89.075157][ T1332]  ? __cfi_dump_stack_lvl+0x10/0x10
[   89.075194][ T1332]  ? selinux_file_open+0x46c/0x630
[   89.075221][ T1332]  dump_stack+0x19/0x20
[   89.075254][ T1332]  should_fail_ex+0x3c2/0x510
[   89.075284][ T1332]  should_failslab+0xac/0x100
[   89.075325][ T1332]  kmem_cache_alloc_noprof+0x42/0x410
[   89.075352][ T1332]  ? vm_area_dup+0x3f/0x560
[   89.075382][ T1332]  vm_area_dup+0x3f/0x560
[   89.075407][ T1332]  ? __split_vma+0x1bf/0xc10
[   89.075435][ T1332]  __split_vma+0x1ce/0xc10
[   89.075462][ T1332]  ? kernel_text_address+0xa9/0xe0
[   89.075498][ T1332]  ? vms_gather_munmap_vmas+0xd90/0xd90
[   89.075528][ T1332]  ? _parse_integer_limit+0x195/0x1e0
[   89.075557][ T1332]  ? can_vma_merge_left+0x184/0x4b0
[   89.075586][ T1332]  vma_modify+0x60c/0x1540
[   89.075618][ T1332]  vma_modify_flags+0x182/0x1c0
[   89.075650][ T1332]  mlock_fixup+0x1c9/0x740
[   89.075689][ T1332]  apply_vma_lock_flags+0x28a/0x3b0
[   89.075729][ T1332]  ? do_mlock+0xa10/0xa10
[   89.075767][ T1332]  ? __cfi_down_write_killable+0x10/0x10
[   89.075797][ T1332]  ? __kasan_check_write+0x18/0x20
[   89.075824][ T1332]  ? mutex_unlock+0x90/0x240
[   89.075850][ T1332]  do_mlock+0x71d/0xa10
[   89.075887][ T1332]  ? fput+0x1a4/0x230
[   89.075920][ T1332]  ? lru_gen_add_folio+0x880/0x880
[   89.075957][ T1332]  ? ksys_write+0x1f3/0x260
[   89.075989][ T1332]  ? __cfi_ksys_write+0x10/0x10
[   89.076017][ T1332]  ? __kasan_check_read+0x15/0x20
[   89.076043][ T1332]  __x64_sys_mlock+0x64/0x80
[   89.076086][ T1332]  x64_sys_call+0x670/0x2ee0
[   89.076110][ T1332]  do_syscall_64+0x57/0xf0
[   89.076145][ T1332]  ? clear_bhb_loop+0x50/0xa0
[   89.076171][ T1332]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   89.076211][ T1332] RIP: 0033:0x7fa918f9e0d9
[   89.076234][ T1332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.076256][ T1332] RSP: 002b:00007fa919e45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[   89.076284][ T1332] RAX: ffffffffffffffda RBX: 00007fa919225fa0 RCX: 00007fa918f9e0d9
[   89.076311][ T1332] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[   89.076329][ T1332] RBP: 00007fa919e45090 R08: 0000000000000000 R09: 0000000000000000
[   89.076345][ T1332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.076360][ T1332] R13: 00007fa919226038 R14: 00007fa919225fa0 R15: 00007ffe3f941948
[   89.076382][ T1332]  </TASK>
[   89.505558][ T1342] overlay: Unknown parameter 'euid<00000000000000000000'
[   89.537674][  T584] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[   89.687673][  T584] usb 6-1: Invalid ep0 maxpacket: 32
[   89.797705][  T336] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[   89.817725][  T584] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   89.937725][  T336] usb 5-1: device descriptor read/64, error -71
[   89.970860][  T584] usb 6-1: Invalid ep0 maxpacket: 32
[   89.978180][  T584] usb usb6-port1: attempt power cycle
[   90.189321][  T336] usb 5-1: device descriptor read/64, error -71
[   90.296549][ T1361] FAULT_INJECTION: forcing a failure.
[   90.296549][ T1361] name failslab, interval 1, probability 0, space 0, times 0
[   90.310239][ T1361] CPU: 1 UID: 0 PID: 1361 Comm: syz.0.336 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[   90.310270][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.310284][ T1361] Call Trace:
[   90.310291][ T1361]  <TASK>
[   90.310299][ T1361]  __dump_stack+0x21/0x30
[   90.310333][ T1361]  dump_stack_lvl+0x140/0x1c0
[   90.310360][ T1361]  ? __cfi_dump_stack_lvl+0x10/0x10
[   90.310388][ T1361]  ? kasan_save_track+0x4f/0x80
[   90.310411][ T1361]  ? kasan_save_alloc_info+0x3a/0x50
[   90.310429][ T1361]  dump_stack+0x19/0x20
[   90.310455][ T1361]  should_fail_ex+0x3c2/0x510
[   90.310478][ T1361]  should_failslab+0xac/0x100
[   90.310501][ T1361]  kmem_cache_alloc_noprof+0x42/0x410
[   90.310522][ T1361]  ? mas_wr_store_type+0x13f3/0x1b40
[   90.310543][ T1361]  ? mas_alloc_nodes+0x254/0x9d0
[   90.310565][ T1361]  mas_alloc_nodes+0x254/0x9d0
[   90.310589][ T1361]  mas_preallocate+0x79b/0xc90
[   90.310610][ T1361]  ? __cfi_mas_preallocate+0x10/0x10
[   90.310632][ T1361]  ? __kasan_check_read+0x15/0x20
[   90.310651][ T1361]  ? anon_vma_name+0x51/0xa0
[   90.310668][ T1361]  ? vm_area_dup+0x415/0x560
[   90.310691][ T1361]  __split_vma+0x449/0xc10
[   90.310713][ T1361]  ? vms_gather_munmap_vmas+0xd90/0xd90
[   90.310737][ T1361]  ? _parse_integer_limit+0x195/0x1e0
[   90.310758][ T1361]  ? can_vma_merge_left+0x184/0x4b0
[   90.310780][ T1361]  vma_modify+0x60c/0x1540
[   90.310811][ T1361]  vma_modify_flags+0x182/0x1c0
[   90.310836][ T1361]  mlock_fixup+0x1c9/0x740
[   90.310866][ T1361]  apply_vma_lock_flags+0x28a/0x3b0
[   90.310898][ T1361]  ? do_mlock+0xa10/0xa10
[   90.310927][ T1361]  ? __cfi_down_write_killable+0x10/0x10
[   90.310950][ T1361]  ? __kasan_check_write+0x18/0x20
[   90.310969][ T1361]  ? mutex_unlock+0x90/0x240
[   90.310989][ T1361]  do_mlock+0x71d/0xa10
[   90.311017][ T1361]  ? fput+0x1a4/0x230
[   90.311042][ T1361]  ? lru_gen_add_folio+0x880/0x880
[   90.311071][ T1361]  ? ksys_write+0x1f3/0x260
[   90.311092][ T1361]  ? __cfi_ksys_write+0x10/0x10
[   90.311113][ T1361]  ? __kasan_check_read+0x15/0x20
[   90.311133][ T1361]  __x64_sys_mlock+0x64/0x80
[   90.311160][ T1361]  x64_sys_call+0x670/0x2ee0
[   90.311178][ T1361]  do_syscall_64+0x57/0xf0
[   90.311214][ T1361]  ? clear_bhb_loop+0x50/0xa0
[   90.311234][ T1361]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   90.311265][ T1361] RIP: 0033:0x7fd52e19e0d9
[   90.311283][ T1361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.311301][ T1361] RSP: 002b:00007fd52ef9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[   90.311322][ T1361] RAX: ffffffffffffffda RBX: 00007fd52e425fa0 RCX: 00007fd52e19e0d9
[   90.311337][ T1361] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[   90.311351][ T1361] RBP: 00007fd52ef9b090 R08: 0000000000000000 R09: 0000000000000000
[   90.311364][ T1361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.311376][ T1361] R13: 00007fd52e426038 R14: 00007fd52e425fa0 R15: 00007fff17e6f228
[   90.311393][ T1361]  </TASK>
[   90.637941][  T584] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   90.658039][  T584] usb 6-1: Invalid ep0 maxpacket: 32
[   90.697692][  T336] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[   90.787671][  T584] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[   90.808027][  T584] usb 6-1: Invalid ep0 maxpacket: 32
[   90.813672][  T584] usb usb6-port1: unable to enumerate USB device
[   90.834497][  T336] usb 5-1: device descriptor read/64, error -71
[   90.853917][ T1371] netlink: 'syz.0.340': attribute type 27 has an invalid length.
[   90.855505][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   90.855570][   T36] audit: type=1400 audit(1787684931.760:310): avc:  denied  { setopt } for  pid=1370 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   91.077711][  T336] usb 5-1: device descriptor read/64, error -71
[   91.097698][  T311] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   91.137820][   T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   91.187833][  T336] usb usb5-port1: attempt power cycle
[   91.249528][  T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   91.259562][  T311] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   91.271742][  T311] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[   91.281426][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.288022][   T10] usb 2-1: Using ep0 maxpacket: 16
[   91.289616][  T311] usb 1-1: Product: syz
[   91.297307][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   91.298896][  T311] usb 1-1: Manufacturer: syz
[   91.298916][  T311] usb 1-1: SerialNumber: syz
[   91.310386][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.331308][   T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   91.343123][   T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.356576][   T10] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   91.367372][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.376427][   T10] usb 2-1: Product: syz
[   91.381591][   T10] usb 2-1: Manufacturer: syz
[   91.386579][   T10] usb 2-1: SerialNumber: syz
[   91.528413][  T309] usb 1-1: USB disconnect, device number 28
[   91.537665][  T336] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[   91.558947][  T336] usb 5-1: device descriptor read/8, error -71
[   91.595482][   T10] usb 2-1: Audio class v2/v3 interfaces need an interface association
[   91.604233][   T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   91.698789][  T336] usb 5-1: device descriptor read/8, error -71
[   91.794978][   T10] usb 2-1: 2:1 : can't get High Capability descriptor
[   91.937874][  T336] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[   91.958854][  T336] usb 5-1: device descriptor read/8, error -71
[   92.089384][  T336] usb 5-1: device descriptor read/8, error -71
[   92.207829][  T336] usb usb5-port1: unable to enumerate USB device
[   92.288491][  T309] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   92.427644][  T309] usb 1-1: device descriptor read/64, error -71
[   92.667638][  T309] usb 1-1: device descriptor read/64, error -71
[   92.917646][  T309] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   92.997627][  T336] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[   93.057623][  T309] usb 1-1: device descriptor read/64, error -71
[   93.149249][  T336] usb 5-1: unable to get BOS descriptor or descriptor too short
[   93.157833][  T336] usb 5-1: not running at top speed; connect to a high speed hub
[   93.170193][  T336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.184010][  T336] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.196960][  T336] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.209199][  T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.219700][  T336] usb 5-1: Product: syz
[   93.224773][  T336] usb 5-1: Manufacturer: syz
[   93.230184][  T336] usb 5-1: SerialNumber: syz
[   93.297642][  T309] usb 1-1: device descriptor read/64, error -71
[   93.407806][  T309] usb usb1-port1: attempt power cycle
[   93.649902][  T336] usb 5-1: 0:2 : does not exist
[   93.656814][  T336] usb 5-1: unit 0 not found!
[   93.667064][  T336] usb 5-1: USB disconnect, device number 18
[   93.688898][  T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   93.757649][  T309] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   93.778938][  T309] usb 1-1: device descriptor read/8, error -71
[   93.908889][  T309] usb 1-1: device descriptor read/8, error -71
[   93.926945][   T10] usb 2-1: USB disconnect, device number 29
[   94.157759][  T309] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   94.199808][  T309] usb 1-1: device descriptor read/8, error -71
[   94.233163][   T36] audit: type=1400 audit(1787684935.140:311): avc:  denied  { getopt } for  pid=1395 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.289576][   T36] audit: type=1400 audit(1787684935.190:312): avc:  denied  { bind } for  pid=1395 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   94.347609][   T36] audit: type=1400 audit(1787684935.200:313): avc:  denied  { bind } for  pid=1395 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   94.378229][   T36] audit: type=1400 audit(1787684935.200:314): avc:  denied  { setopt } for  pid=1395 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   94.408114][  T309] usb 1-1: device descriptor read/8, error -71
[   94.517746][  T309] usb usb1-port1: unable to enumerate USB device
[   94.545231][   T36] audit: type=1400 audit(1787684935.440:315): avc:  denied  { rename } for  pid=1398 comm="syz.1.351" name="file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   94.870632][ T1405] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25884 sclass=netlink_xfrm_socket pid=1405 comm=syz.4.353
[   94.907600][   T36] audit: type=1400 audit(1787684935.810:316): avc:  denied  { unmount } for  pid=867 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   94.970240][   T12] bridge_slave_1: left allmulticast mode
[   94.979329][   T12] bridge_slave_1: left promiscuous mode
[   94.985968][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.994701][   T12] bridge_slave_0: left allmulticast mode
[   95.001081][   T12] bridge_slave_0: left promiscuous mode
[   95.008811][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.129853][ T1410] netlink: 'syz.5.358': attribute type 13 has an invalid length.
[   95.150799][   T12] veth1_macvtap: left promiscuous mode
[   95.156839][   T12] veth0_vlan: left promiscuous mode
[   95.256653][ T1418] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543
[   95.351617][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.359241][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.367236][ T1413] bridge_slave_0: entered allmulticast mode
[   95.374667][ T1413] bridge_slave_0: entered promiscuous mode
[   95.382395][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.390612][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.398273][ T1413] bridge_slave_1: entered allmulticast mode
[   95.407255][ T1413] bridge_slave_1: entered promiscuous mode
[   95.518082][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.526425][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.534623][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.542605][ T1413] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.544715][   T36] audit: type=1400 audit(1787684936.450:317): avc:  denied  { write } for  pid=1425 comm="syz.5.363" name="dev" dev="proc" ino=4026532589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   95.553604][  T336] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   95.639740][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.648450][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.666238][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.675343][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.699864][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.707471][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.735056][ T1413] veth0_vlan: entered promiscuous mode
[   95.760578][ T1413] veth1_macvtap: entered promiscuous mode
[   95.780063][  T336] usb 1-1: unable to read config index 0 descriptor/start: -61
[   95.794435][  T336] usb 1-1: can't read configurations, error -61
[   95.814126][ T1440] netlink: 'syz.5.368': attribute type 27 has an invalid length.
[   95.860630][ T1442] futex_atomic_op_inuser: 55 callbacks suppressed
[   95.860655][ T1442] futex_wake_op: syz.6.356 tries to shift op by 144; fix this program
[   95.938403][  T336] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   95.987733][  T584] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   96.101171][  T336] usb 1-1: unable to read config index 0 descriptor/start: -61
[   96.109797][  T336] usb 1-1: can't read configurations, error -61
[   96.118030][  T336] usb usb1-port1: attempt power cycle
[   96.147718][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   96.151861][  T584] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.168639][  T584] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   96.179239][  T584] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   96.189643][  T584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.202936][  T584] usb 2-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   96.309675][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[   96.319577][    T9] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   96.336090][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[   96.348008][    T9] usb 6-1: string descriptor 0 read error: -22
[   96.356931][    T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.40
[   96.371520][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.402662][  T584] usb 2-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[   96.414494][  T584] usb 2-1: No streaming interface found for terminal 2.
[   96.423779][  T584] usb 2-1: USB disconnect, device number 30
[   96.477779][  T336] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   96.521434][  T336] usb 1-1: unable to read config index 0 descriptor/start: -61
[   96.530187][  T336] usb 1-1: can't read configurations, error -61
[   96.667758][  T336] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   96.692158][  T336] usb 1-1: unable to read config index 0 descriptor/start: -61
[   96.700596][  T336] usb 1-1: can't read configurations, error -61
[   96.708719][  T336] usb usb1-port1: unable to enumerate USB device
[   96.795231][    T9] hid (null): unknown global tag 0xc
[   96.802651][    T9] hid (null): unknown global tag 0xc
[   96.809237][    T9] hid (null): unknown global tag 0xd
[   96.814681][    T9] hid (null): invalid report_count -1546357864
[   96.821273][    T9] hid (null): unknown global tag 0xe
[   96.827255][    T9] hid (null): unknown global tag 0xe
[   96.838778][    T9] itetech 0003:06CB:73F6.0004: unknown main item tag 0x3
[   96.847758][    T9] itetech 0003:06CB:73F6.0004: unknown main item tag 0x3
[   96.856002][    T9] itetech 0003:06CB:73F6.0004: unknown global tag 0xc
[   96.863814][    T9] itetech 0003:06CB:73F6.0004: item 0 0 1 12 parsing failed
[   96.872090][    T9] itetech 0003:06CB:73F6.0004: probe with driver itetech failed with error -22
[   96.923762][ T1456] rust_binder: 1455:1456 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 128, size: 50)
[   96.936702][   T36] audit: type=1400 audit(1787684937.830:318): avc:  denied  { call } for  pid=1455 comm="syz.6.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   96.960368][ T1456] rust_binder: 1455:1456 error while translating object: EINVAL
[   96.966739][   T36] audit: type=1400 audit(1787684937.830:319): avc:  denied  { transfer } for  pid=1455 comm="syz.6.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   96.969958][ T1456] rust_binder: Failure in copy_transaction_data: EINVAL
[   96.991137][ T1456] rust_binder: 1455:1456 transaction call to 1455:0 failed EINVAL, code 0 size 88-24
[   97.005350][   T36] audit: type=1400 audit(1787684937.910:320): avc:  denied  { read } for  pid=1455 comm="syz.6.374" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   97.028091][    T9] usb 6-1: USB disconnect, device number 7
[   97.041560][   T36] audit: type=1400 audit(1787684937.910:321): avc:  denied  { open } for  pid=1455 comm="syz.6.374" path="/4/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   97.067248][   T36] audit: type=1400 audit(1787684937.950:322): avc:  denied  { ioctl } for  pid=1455 comm="syz.6.374" path="/4/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   97.070788][   T10] rust_binder: 1455: undelivered TRANSACTION_ERROR: 29201
[   97.138273][ T1465] netlink: 'syz.6.377': attribute type 27 has an invalid length.
[   97.184864][   T36] audit: type=1400 audit(1787684938.090:323): avc:  denied  { getopt } for  pid=1464 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   97.408291][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   97.588599][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.607678][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   97.617287][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   97.637828][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.659426][   T10] usb 7-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   97.872935][ T1468] syzkaller1: entered promiscuous mode
[   97.888314][ T1468] syzkaller1: entered allmulticast mode
[   97.981122][   T10] usb 7-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[   97.991089][   T10] usb 7-1: No streaming interface found for terminal 2.
[   98.003039][   T10] usb 7-1: USB disconnect, device number 2
[   98.369848][   T36] audit: type=1400 audit(1787684939.280:324): avc:  denied  { read } for  pid=1501 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   98.493990][ T1507] netlink: 'syz.5.389': attribute type 27 has an invalid length.
[   98.670147][ T1520] kvm: kvm [1519]: vcpu7, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x8d00
[   98.685246][ T1520] kvm: kvm [1519]: vcpu7, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x8d00
[   98.697900][ T1520] kvm: kvm [1519]: vcpu7, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9200
[   98.707676][ T1520] kvm: kvm [1519]: vcpu7, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x8d00
[   98.747621][  T336] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   98.907611][  T336] usb 7-1: Using ep0 maxpacket: 16
[   98.915774][  T336] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.935518][  T336] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   98.954943][  T336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.963946][  T336] usb 7-1: Product: syz
[   98.968728][  T336] usb 7-1: Manufacturer: syz
[   98.973736][  T336] usb 7-1: SerialNumber: syz
[   98.980025][  T336] usb 7-1: config 0 descriptor??
[   98.986355][  T336] sr9700 7-1:0.0: probe with driver sr9700 failed with error -22
[   99.188434][    T9] usb 7-1: USB disconnect, device number 3
[   99.604129][ T1542] netlink: 'syz.0.401': attribute type 27 has an invalid length.
[   99.617745][  T336] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   99.670675][   T36] audit: type=1400 audit(1787684940.580:325): avc:  denied  { write } for  pid=1545 comm="syz.5.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   99.797607][  T336] usb 2-1: Using ep0 maxpacket: 16
[   99.805859][ T1552] netlink: 96 bytes leftover after parsing attributes in process `syz.6.405'.
[   99.817052][  T336] usb 2-1: unable to get BOS descriptor or descriptor too short
[   99.828598][  T336] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64
[   99.847703][  T336] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   99.872574][  T336] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   99.882670][  T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.895354][  T336] usb 2-1: Product: syz
[   99.913480][  T336] usb 2-1: Manufacturer: syz
[   99.919643][  T336] usb 2-1: SerialNumber: syz
[   99.943516][ T1540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   99.961255][ T1540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  100.044338][ T1561] FAULT_INJECTION: forcing a failure.
[  100.044338][ T1561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  100.058512][ T1561] CPU: 0 UID: 0 PID: 1561 Comm: syz.0.408 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[  100.058556][ T1561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  100.058573][ T1561] Call Trace:
[  100.058582][ T1561]  <TASK>
[  100.058592][ T1561]  __dump_stack+0x21/0x30
[  100.058643][ T1561]  dump_stack_lvl+0x140/0x1c0
[  100.058698][ T1561]  ? __cfi_dump_stack_lvl+0x10/0x10
[  100.058743][ T1561]  dump_stack+0x19/0x20
[  100.058787][ T1561]  should_fail_ex+0x3c2/0x510
[  100.058932][ T1561]  should_fail+0xf/0x20
[  100.058969][ T1561]  should_fail_usercopy+0x1e/0x30
[  100.059004][ T1561]  _copy_from_user+0x20/0xa0
[  100.059042][ T1561]  hci_get_dev_info+0xbc/0x770
[  100.059075][ T1561]  ? __cfi_hci_get_dev_info+0x10/0x10
[  100.059115][ T1561]  ? _raw_spin_lock_bh+0x96/0x130
[  100.059158][ T1561]  ? _raw_spin_unlock_bh+0x54/0x60
[  100.059201][ T1561]  ? release_sock+0x171/0x1f0
[  100.059233][ T1561]  hci_sock_ioctl+0x461/0x9e0
[  100.059266][ T1561]  sock_do_ioctl+0x115/0x330
[  100.059322][ T1561]  ? sock_show_fdinfo+0xd0/0xd0
[  100.059369][ T1561]  ? __cfi_vfs_write+0x10/0x10
[  100.059399][ T1561]  ? __kasan_check_write+0x18/0x20
[  100.059433][ T1561]  ? mutex_unlock+0x90/0x240
[  100.059460][ T1561]  sock_ioctl+0x568/0x7e0
[  100.059496][ T1561]  ? __cfi_sock_ioctl+0x10/0x10
[  100.059545][ T1561]  ? bpf_lsm_file_ioctl+0xd/0x20
[  100.059591][ T1561]  ? security_file_ioctl+0x3e/0x110
[  100.059622][ T1561]  ? __cfi_sock_ioctl+0x10/0x10
[  100.059665][ T1561]  __se_sys_ioctl+0x135/0x1b0
[  100.059705][ T1561]  __x64_sys_ioctl+0x7f/0xa0
[  100.059744][ T1561]  x64_sys_call+0x1878/0x2ee0
[  100.059774][ T1561]  do_syscall_64+0x57/0xf0
[  100.059809][ T1561]  ? clear_bhb_loop+0x50/0xa0
[  100.059832][ T1561]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  100.059868][ T1561] RIP: 0033:0x7fd52e19e0d9
[  100.059888][ T1561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.059906][ T1561] RSP: 002b:00007fd52ef9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.059930][ T1561] RAX: ffffffffffffffda RBX: 00007fd52e425fa0 RCX: 00007fd52e19e0d9
[  100.059949][ T1561] RDX: 00002000000004c0 RSI: 00000000800448d3 RDI: 0000000000000004
[  100.059967][ T1561] RBP: 00007fd52ef9b090 R08: 0000000000000000 R09: 0000000000000000
[  100.059985][ T1561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.060009][ T1561] R13: 00007fd52e426038 R14: 00007fd52e425fa0 R15: 00007fff17e6f228
[  100.060036][ T1561]  </TASK>
[  100.392924][ T1540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.402612][ T1540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.414888][  T336] usb 2-1: MIDIStreaming interface descriptor not found
[  100.449376][  T336] usb 2-1: USB disconnect, device number 31
[  100.481192][   T36] audit: type=1400 audit(1787684941.380:326): avc:  denied  { bind } for  pid=1562 comm="syz.0.409" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  100.519252][ T1563] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.530407][  T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  100.558139][ T1563] netlink: 'syz.0.409': attribute type 1 has an invalid length.
[  100.590610][ T1563] netlink: 9 bytes leftover after parsing attributes in process `syz.0.409'.
[  100.600645][   T36] audit: type=1400 audit(1787684941.410:327): avc:  denied  { name_bind } for  pid=1562 comm="syz.0.409" src=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  100.776120][ T1579] FAULT_INJECTION: forcing a failure.
[  100.776120][ T1579] name failslab, interval 1, probability 0, space 0, times 0
[  100.829251][ T1579] CPU: 1 UID: 0 PID: 1579 Comm: syz.0.411 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[  100.829291][ T1579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  100.829317][ T1579] Call Trace:
[  100.829325][ T1579]  <TASK>
[  100.829334][ T1579]  __dump_stack+0x21/0x30
[  100.829370][ T1579]  dump_stack_lvl+0x140/0x1c0
[  100.829399][ T1579]  ? __cfi_dump_stack_lvl+0x10/0x10
[  100.829444][ T1579]  ? avc_has_perm+0x155/0x240
[  100.829476][ T1579]  ? __cfi_avc_has_perm+0x10/0x10
[  100.829503][ T1579]  dump_stack+0x19/0x20
[  100.829534][ T1579]  should_fail_ex+0x3c2/0x510
[  100.829561][ T1579]  should_failslab+0xac/0x100
[  100.829591][ T1579]  __kmalloc_cache_noprof+0x41/0x470
[  100.829617][ T1579]  ? vhost_task_create+0x12c/0x3f0
[  100.829643][ T1579]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  100.829671][ T1579]  vhost_task_create+0x12c/0x3f0
[  100.829695][ T1579]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  100.829721][ T1579]  ? __cfi_vhost_task_create+0x10/0x10
[  100.829745][ T1579]  ? __cfi_vhost_task_fn+0x10/0x10
[  100.829768][ T1579]  ? __kasan_check_write+0x18/0x20
[  100.829791][ T1579]  ? mutex_lock+0x97/0x1d0
[  100.829813][ T1579]  ? __cfi_mutex_lock+0x10/0x10
[  100.829834][ T1579]  ? kernel_text_address+0xa9/0xe0
[  100.829866][ T1579]  kvm_mmu_post_init_vm+0x161/0x300
[  100.829899][ T1579]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  100.829928][ T1579]  ? _parse_integer_limit+0x195/0x1e0
[  100.829952][ T1579]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  100.829983][ T1579]  ? kstrtoull+0x13b/0x1e0
[  100.830005][ T1579]  ? kstrtouint+0x78/0xf0
[  100.830027][ T1579]  ? ioctl_has_perm+0x1bc/0x500
[  100.830049][ T1579]  ? __asan_memcpy+0x5a/0x80
[  100.830072][ T1579]  ? ioctl_has_perm+0x408/0x500
[  100.830093][ T1579]  ? has_cap_mac_admin+0xd0/0xd0
[  100.830115][ T1579]  ? __kasan_check_write+0x18/0x20
[  100.830137][ T1579]  ? mutex_lock_killable+0x97/0x1d0
[  100.830160][ T1579]  ? __cfi_mutex_lock_killable+0x10/0x10
[  100.830184][ T1579]  ? proc_fail_nth_write+0x184/0x220
[  100.830218][ T1579]  kvm_vcpu_ioctl+0xa43/0x1000
[  100.830241][ T1579]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  100.830261][ T1579]  ? __cfi_vfs_write+0x10/0x10
[  100.830285][ T1579]  ? __kasan_check_write+0x18/0x20
[  100.830317][ T1579]  ? mutex_unlock+0x90/0x240
[  100.830338][ T1579]  ? __cfi_mutex_unlock+0x10/0x10
[  100.830365][ T1579]  ? bpf_lsm_file_ioctl+0xd/0x20
[  100.830393][ T1579]  ? security_file_ioctl+0x3e/0x110
[  100.830414][ T1579]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  100.830434][ T1579]  __se_sys_ioctl+0x135/0x1b0
[  100.830463][ T1579]  __x64_sys_ioctl+0x7f/0xa0
[  100.830490][ T1579]  x64_sys_call+0x1878/0x2ee0
[  100.830513][ T1579]  do_syscall_64+0x57/0xf0
[  100.830543][ T1579]  ? clear_bhb_loop+0x50/0xa0
[  100.830566][ T1579]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  100.830603][ T1579] RIP: 0033:0x7fd52e19e0d9
[  100.830622][ T1579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.830644][ T1579] RSP: 002b:00007fd52cbd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.830669][ T1579] RAX: ffffffffffffffda RBX: 00007fd52e426180 RCX: 00007fd52e19e0d9
[  100.830688][ T1579] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  100.830702][ T1579] RBP: 00007fd52cbd6090 R08: 0000000000000000 R09: 0000000000000000
[  100.830717][ T1579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.830732][ T1579] R13: 00007fd52e426218 R14: 00007fd52e426180 R15: 00007fff17e6f228
[  100.830752][ T1579]  </TASK>
[  101.578208][ T1597] FAULT_INJECTION: forcing a failure.
[  101.578208][ T1597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  101.595657][ T1597] CPU: 0 UID: 0 PID: 1597 Comm: syz.6.417 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[  101.595697][ T1597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  101.595713][ T1597] Call Trace:
[  101.595720][ T1597]  <TASK>
[  101.595730][ T1597]  __dump_stack+0x21/0x30
[  101.595768][ T1597]  dump_stack_lvl+0x140/0x1c0
[  101.595802][ T1597]  ? __cfi_dump_stack_lvl+0x10/0x10
[  101.595837][ T1597]  dump_stack+0x19/0x20
[  101.595869][ T1597]  should_fail_ex+0x3c2/0x510
[  101.595896][ T1597]  should_fail+0xf/0x20
[  101.595922][ T1597]  should_fail_usercopy+0x1e/0x30
[  101.595953][ T1597]  _copy_from_user+0x20/0xa0
[  101.595985][ T1597]  hci_get_dev_info+0xbc/0x770
[  101.596012][ T1597]  ? __cfi_hci_get_dev_info+0x10/0x10
[  101.596038][ T1597]  ? _raw_spin_lock_bh+0x96/0x130
[  101.596076][ T1597]  ? _raw_spin_unlock_bh+0x54/0x60
[  101.596103][ T1597]  ? release_sock+0x171/0x1f0
[  101.596132][ T1597]  hci_sock_ioctl+0x461/0x9e0
[  101.596151][ T1597]  sock_do_ioctl+0x115/0x330
[  101.596182][ T1597]  ? sock_show_fdinfo+0xd0/0xd0
[  101.596215][ T1597]  ? __cfi_vfs_write+0x10/0x10
[  101.596238][ T1597]  ? __kasan_check_write+0x18/0x20
[  101.596261][ T1597]  ? mutex_unlock+0x90/0x240
[  101.596282][ T1597]  sock_ioctl+0x568/0x7e0
[  101.596329][ T1597]  ? __cfi_sock_ioctl+0x10/0x10
[  101.596362][ T1597]  ? bpf_lsm_file_ioctl+0xd/0x20
[  101.596390][ T1597]  ? security_file_ioctl+0x3e/0x110
[  101.596411][ T1597]  ? __cfi_sock_ioctl+0x10/0x10
[  101.596439][ T1597]  __se_sys_ioctl+0x135/0x1b0
[  101.596468][ T1597]  __x64_sys_ioctl+0x7f/0xa0
[  101.596495][ T1597]  x64_sys_call+0x1878/0x2ee0
[  101.596515][ T1597]  do_syscall_64+0x57/0xf0
[  101.596543][ T1597]  ? clear_bhb_loop+0x50/0xa0
[  101.596567][ T1597]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  101.596739][ T1597] RIP: 0033:0x7f16b5f9e0d9
[  101.596759][ T1597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.596781][ T1597] RSP: 002b:00007f16b6da4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  101.596806][ T1597] RAX: ffffffffffffffda RBX: 00007f16b6225fa0 RCX: 00007f16b5f9e0d9
[  101.596825][ T1597] RDX: 00002000000004c0 RSI: 00000000800448d3 RDI: 0000000000000004
[  101.596841][ T1597] RBP: 00007f16b6da4090 R08: 0000000000000000 R09: 0000000000000000
[  101.596857][ T1597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.596871][ T1597] R13: 00007f16b6226038 R14: 00007f16b6225fa0 R15: 00007fff0db9fe68
[  101.596892][ T1597]  </TASK>
[  101.877670][ T1598] rust_binder: 1594:1598 got reply transaction with no transaction stack
[  101.886165][ T1598] rust_binder: 1594:1598 transaction reply to 0:0 failed EINVAL, code 0 size 0-0
[  101.979512][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  101.979532][   T36] audit: type=1400 audit(1787684942.880:330): avc:  denied  { create } for  pid=1601 comm="syz.5.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1
[  102.049490][   T36] audit: type=1400 audit(1787684942.950:331): avc:  denied  { watch_reads } for  pid=1608 comm="syz.6.421" path="/16" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  102.094618][ T1612] netlink: 'syz.1.422': attribute type 27 has an invalid length.
[  102.145921][ T1614] netlink: 104 bytes leftover after parsing attributes in process `syz.6.423'.
[  102.147812][   T36] audit: type=1400 audit(1787684943.050:332): avc:  denied  { setattr } for  pid=1613 comm="syz.6.423" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  102.404520][  T309] rust_binder: 1594: undelivered TRANSACTION_ERROR: 29201
[  102.701245][ T1632] FAULT_INJECTION: forcing a failure.
[  102.701245][ T1632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.737199][ T1632] CPU: 1 UID: 0 PID: 1632 Comm: syz.0.427 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[  102.737245][ T1632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  102.737262][ T1632] Call Trace:
[  102.737270][ T1632]  <TASK>
[  102.737283][ T1632]  __dump_stack+0x21/0x30
[  102.737326][ T1632]  dump_stack_lvl+0x140/0x1c0
[  102.737363][ T1632]  ? __cfi_dump_stack_lvl+0x10/0x10
[  102.737402][ T1632]  ? vsnprintf+0x7b4/0x1ad0
[  102.737436][ T1632]  ? check_stack_object+0x10f/0x150
[  102.737467][ T1632]  dump_stack+0x19/0x20
[  102.737502][ T1632]  should_fail_ex+0x3c2/0x510
[  102.737543][ T1632]  should_fail+0xf/0x20
[  102.737573][ T1632]  should_fail_usercopy+0x1e/0x30
[  102.737603][ T1632]  _copy_from_user+0x20/0xa0
[  102.737636][ T1632]  kstrtouint_from_user+0xde/0x170
[  102.737664][ T1632]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  102.737691][ T1632]  ? selinux_file_permission+0x318/0xb60
[  102.737717][ T1632]  ? __cfi_selinux_file_permission+0x10/0x10
[  102.737741][ T1632]  proc_fail_nth_write+0x8f/0x220
[  102.737776][ T1632]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  102.737812][ T1632]  ? bpf_lsm_file_permission+0xd/0x20
[  102.737846][ T1632]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  102.737879][ T1632]  vfs_write+0x3c4/0xfd0
[  102.737911][ T1632]  ? __cfi_vfs_write+0x10/0x10
[  102.737944][ T1632]  ? __kasan_check_write+0x18/0x20
[  102.737978][ T1632]  ? mutex_lock+0x97/0x1d0
[  102.738008][ T1632]  ? __cfi_mutex_lock+0x10/0x10
[  102.738043][ T1632]  ksys_write+0x145/0x260
[  102.738077][ T1632]  ? __cfi_ksys_write+0x10/0x10
[  102.738114][ T1632]  ? __kasan_check_read+0x15/0x20
[  102.738146][ T1632]  __x64_sys_write+0x7f/0x90
[  102.738180][ T1632]  x64_sys_call+0x271c/0x2ee0
[  102.738211][ T1632]  do_syscall_64+0x57/0xf0
[  102.738254][ T1632]  ? clear_bhb_loop+0x50/0xa0
[  102.738285][ T1632]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.738336][ T1632] RIP: 0033:0x7fd52e15e90e
[  102.738365][ T1632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  102.738392][ T1632] RSP: 002b:00007fd52ef9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  102.738429][ T1632] RAX: ffffffffffffffda RBX: 00007fd52ef9b6c0 RCX: 00007fd52e15e90e
[  102.738453][ T1632] RDX: 0000000000000001 RSI: 00007fd52ef9b0a0 RDI: 0000000000000003
[  102.738473][ T1632] RBP: 00007fd52ef9b090 R08: 0000000000000000 R09: 0000000000000000
[  102.738497][ T1632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.738517][ T1632] R13: 00007fd52e426038 R14: 00007fd52e425fa0 R15: 00007fff17e6f228
[  102.738557][ T1632]  </TASK>
[  103.340411][ T1668] overlayfs: failed to resolve './file0redirect_dir=follow': -2
[  103.359121][ T1670] netlink: 'syz.5.432': attribute type 27 has an invalid length.
[  103.437897][  T336] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  103.587680][  T336] usb 1-1: device descriptor read/64, error -71
[  103.827602][  T336] usb 1-1: device descriptor read/64, error -71
[  104.057662][  T309] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  104.077802][  T336] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  104.217638][  T309] usb 2-1: Using ep0 maxpacket: 16
[  104.224544][  T309] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7
[  104.227872][  T336] usb 1-1: device descriptor read/64, error -71
[  104.244753][  T309] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[  104.254325][  T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.269861][  T309] usb 2-1: Product: syz
[  104.278740][  T309] usb 2-1: Manufacturer: syz
[  104.288786][  T309] usb 2-1: SerialNumber: syz
[  104.477724][  T336] usb 1-1: device descriptor read/64, error -71
[  104.508421][  T309] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  104.516955][  T309] usb 2-1: unit 1 not found!
[  104.521923][  T309] usb 2-1: unit 9 not found!
[  104.562446][  T309] usb 2-1: USB disconnect, device number 32
[  104.591646][  T336] usb usb1-port1: attempt power cycle
[  104.787675][  T407] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  104.819273][   T36] audit: type=1400 audit(1787684945.730:333): avc:  denied  { write } for  pid=1703 comm="syz.6.443" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  104.937736][  T336] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  104.939729][  T407] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.956599][  T407] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  104.966223][  T407] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  104.969350][  T336] usb 1-1: device descriptor read/8, error -71
[  104.976657][  T407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.993063][  T407] usb 6-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  105.097641][  T309] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  105.109008][  T336] usb 1-1: device descriptor read/8, error -71
[  105.195692][ T1702] syzkaller1: entered promiscuous mode
[  105.202073][ T1702] syzkaller1: entered allmulticast mode
[  105.210370][  T407] usb 6-1: No streaming interface found for terminal 2.
[  105.250471][  T309] usb 7-1: unable to get BOS descriptor or descriptor too short
[  105.259596][  T309] usb 7-1: not running at top speed; connect to a high speed hub
[  105.268646][  T309] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.278956][  T309] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.291340][  T309] usb 7-1: string descriptor 0 read error: -22
[  105.297685][  T584] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  105.297696][  T309] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.297725][  T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.326491][  T309] usb 7-1: 0:2 : does not exist
[  105.357705][  T336] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  105.378876][  T336] usb 1-1: device descriptor read/8, error -71
[  105.448871][  T584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.451559][    T9] usb 6-1: USB disconnect, device number 8
[  105.462859][  T584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.477329][  T584] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  105.486748][  T584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.496866][  T584] usb 2-1: config 0 descriptor??
[  105.518811][  T336] usb 1-1: device descriptor read/8, error -71
[  105.627798][  T336] usb usb1-port1: unable to enumerate USB device
[  105.707547][  T584] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  105.715214][  T584] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  105.722869][  T584] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  105.730361][  T584] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  105.738125][  T584] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  105.748065][  T584] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  105.818123][  T584] playstation 0003:054C:0DF2.0005: Invalid byte count transferred, expected 20 got 0
[  105.828351][  T584] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22
[  105.838562][  T584] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense
[  105.848627][  T584] playstation 0003:054C:0DF2.0005: Failed to create dualsense.
[  105.858123][  T584] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -22
[  105.932710][  T309] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5)
[  105.943031][  T309] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  105.953689][  T309] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[  105.978655][  T309] usb 7-1: USB disconnect, device number 4
[  105.980556][ T1716] tipc: Failed to remove unknown binding: 66,0,0/0:1093510626/1093510627
[  105.995607][ T1716] tipc: Failed to remove unknown binding: 66,0,0/0:1093510626/1093510627
[  106.477601][   T36] audit: type=1400 audit(1787684947.380:334): avc:  denied  { bind } for  pid=1726 comm="syz.6.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.537641][ T1727] kernel profiling enabled (shift: 5)
[  106.758469][ T1732] FAULT_INJECTION: forcing a failure.
[  106.758469][ T1732] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  106.807633][ T1732] CPU: 1 UID: 0 PID: 1732 Comm: syz.6.452 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[  106.807685][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  106.807701][ T1732] Call Trace:
[  106.807708][ T1732]  <TASK>
[  106.807718][ T1732]  __dump_stack+0x21/0x30
[  106.807757][ T1732]  dump_stack_lvl+0x140/0x1c0
[  106.807790][ T1732]  ? __cfi_dump_stack_lvl+0x10/0x10
[  106.807825][ T1732]  dump_stack+0x19/0x20
[  106.807868][ T1732]  should_fail_ex+0x3c2/0x510
[  106.807896][ T1732]  should_fail_alloc_page+0xec/0x110
[  106.807928][ T1732]  __alloc_pages_noprof+0x1c0/0x7e0
[  106.807971][ T1732]  ? kernel_text_address+0xa9/0xe0
[  106.808004][ T1732]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  106.808038][ T1732]  ? unwind_get_return_address+0x51/0x90
[  106.808069][ T1732]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  106.808101][ T1732]  get_free_pages_noprof+0x14/0x40
[  106.808133][ T1732]  kasan_populate_vmalloc_pte+0x4c/0x170
[  106.808157][ T1732]  __apply_to_page_range+0x7c2/0xd00
[  106.808185][ T1732]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[  106.808212][ T1732]  ? __x64_sys_ioctl+0x7f/0xa0
[  106.808241][ T1732]  ? apply_to_page_range+0x60/0x60
[  106.808269][ T1732]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[  106.808302][ T1732]  apply_to_page_range+0x3f/0x60
[  106.808330][ T1732]  kasan_populate_vmalloc+0x64/0x80
[  106.808354][ T1732]  alloc_vmap_area+0x1e8e/0x26f0
[  106.808393][ T1732]  ? kasan_save_alloc_info+0x3a/0x50
[  106.808415][ T1732]  ? vm_map_ram+0xdd0/0xdd0
[  106.808447][ T1732]  ? __kmalloc_cache_node_noprof+0x225/0x430
[  106.808475][ T1732]  ? __get_vm_area_node+0x150/0x390
[  106.808509][ T1732]  __get_vm_area_node+0x1f8/0x390
[  106.808546][ T1732]  __vmalloc_node_range_noprof+0x340/0x1300
[  106.808583][ T1732]  ? copy_process+0x57c/0x3350
[  106.808618][ T1732]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  106.808818][ T1732]  ? kasan_save_alloc_info+0x3a/0x50
[  106.809116][ T1732]  ? __kasan_slab_alloc+0x73/0x90
[  106.809144][ T1732]  ? arch_dup_task_struct+0x5b/0xe0
[  106.809184][ T1732]  ? __asan_memcpy+0x5a/0x80
[  106.809203][ T1732]  dup_task_struct+0x5d6/0xd80
[  106.809227][ T1732]  ? copy_process+0x57c/0x3350
[  106.809250][ T1732]  ? _raw_spin_lock_irq+0x93/0x120
[  106.809276][ T1732]  ? copy_process+0x3350/0x3350
[  106.809301][ T1732]  ? __kasan_check_write+0x18/0x20
[  106.809324][ T1732]  copy_process+0x57c/0x3350
[  106.809353][ T1732]  ? kasan_save_alloc_info+0x3a/0x50
[  106.809374][ T1732]  ? __cfi_copy_process+0x10/0x10
[  106.809400][ T1732]  ? __kmalloc_cache_noprof+0x23c/0x470
[  106.809426][ T1732]  ? __kasan_check_write+0x18/0x20
[  106.809450][ T1732]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  106.809480][ T1732]  vhost_task_create+0x1f7/0x3f0
[  106.809504][ T1732]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  106.809534][ T1732]  ? __cfi_vhost_task_create+0x10/0x10
[  106.809561][ T1732]  ? __cfi_vhost_task_fn+0x10/0x10
[  106.809586][ T1732]  ? __kasan_check_write+0x18/0x20
[  106.809610][ T1732]  ? mutex_lock+0x97/0x1d0
[  106.809633][ T1732]  ? __cfi_mutex_lock+0x10/0x10
[  106.809736][ T1732]  ? kernel_text_address+0xa9/0xe0
[  106.809771][ T1732]  kvm_mmu_post_init_vm+0x161/0x300
[  106.809806][ T1732]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  106.809840][ T1732]  ? _parse_integer_limit+0x195/0x1e0
[  106.809866][ T1732]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  106.809898][ T1732]  ? kstrtoull+0x13b/0x1e0
[  106.809923][ T1732]  ? kstrtouint+0x78/0xf0
[  106.809948][ T1732]  ? ioctl_has_perm+0x1bc/0x500
[  106.809971][ T1732]  ? __asan_memcpy+0x5a/0x80
[  106.809995][ T1732]  ? ioctl_has_perm+0x408/0x500
[  106.810019][ T1732]  ? has_cap_mac_admin+0xd0/0xd0
[  106.810043][ T1732]  ? __kasan_check_write+0x18/0x20
[  106.810067][ T1732]  ? mutex_lock_killable+0x97/0x1d0
[  106.810092][ T1732]  ? __cfi_mutex_lock_killable+0x10/0x10
[  106.810118][ T1732]  ? proc_fail_nth_write+0x184/0x220
[  106.810155][ T1732]  kvm_vcpu_ioctl+0xa43/0x1000
[  106.810180][ T1732]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  106.810203][ T1732]  ? __cfi_vfs_write+0x10/0x10
[  106.810230][ T1732]  ? __kasan_check_write+0x18/0x20
[  106.810254][ T1732]  ? mutex_unlock+0x90/0x240
[  106.810277][ T1732]  ? __cfi_mutex_unlock+0x10/0x10
[  106.810305][ T1732]  ? bpf_lsm_file_ioctl+0xd/0x20
[  106.810337][ T1732]  ? security_file_ioctl+0x3e/0x110
[  106.810359][ T1732]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  106.810382][ T1732]  __se_sys_ioctl+0x135/0x1b0
[  106.810413][ T1732]  __x64_sys_ioctl+0x7f/0xa0
[  106.810440][ T1732]  x64_sys_call+0x1878/0x2ee0
[  106.810462][ T1732]  do_syscall_64+0x57/0xf0
[  106.810492][ T1732]  ? clear_bhb_loop+0x50/0xa0
[  106.810513][ T1732]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  106.810547][ T1732] RIP: 0033:0x7f16b5f9e0d9
[  106.810583][ T1732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.810601][ T1732] RSP: 002b:00007f16b49f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  106.810624][ T1732] RAX: ffffffffffffffda RBX: 00007f16b6226180 RCX: 00007f16b5f9e0d9
[  106.810639][ T1732] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  106.810660][ T1732] RBP: 00007f16b49f7090 R08: 0000000000000000 R09: 0000000000000000
[  106.810674][ T1732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.810686][ T1732] R13: 00007f16b6226218 R14: 00007f16b6226180 R15: 00007fff0db9fe68
[  106.810704][ T1732]  </TASK>
[  106.810727][ T1732] syz.6.452: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0
[  107.453517][ T1732] CPU: 1 UID: 0 PID: 1732 Comm: syz.6.452 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[  107.453556][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  107.453572][ T1732] Call Trace:
[  107.453580][ T1732]  <TASK>
[  107.453679][ T1732]  __dump_stack+0x21/0x30
[  107.453717][ T1732]  dump_stack_lvl+0x140/0x1c0
[  107.453750][ T1732]  ? __cfi_dump_stack_lvl+0x10/0x10
[  107.453784][ T1732]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  107.453818][ T1732]  dump_stack+0x19/0x20
[  107.453847][ T1732]  warn_alloc+0x1e7/0x2c0
[  107.453888][ T1732]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  107.453925][ T1732]  ? __cfi_warn_alloc+0x10/0x10
[  107.453954][ T1732]  ? __get_vm_area_node+0x211/0x390
[  107.453989][ T1732]  ? __get_vm_area_node+0x211/0x390
[  107.454025][ T1732]  __vmalloc_node_range_noprof+0x365/0x1300
[  107.454072][ T1732]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  107.454108][ T1732]  ? kasan_save_alloc_info+0x3a/0x50
[  107.454131][ T1732]  ? __kasan_slab_alloc+0x73/0x90
[  107.454159][ T1732]  ? arch_dup_task_struct+0x5b/0xe0
[  107.454194][ T1732]  ? __asan_memcpy+0x5a/0x80
[  107.454218][ T1732]  dup_task_struct+0x5d6/0xd80
[  107.454247][ T1732]  ? copy_process+0x57c/0x3350
[  107.454276][ T1732]  ? _raw_spin_lock_irq+0x93/0x120
[  107.454307][ T1732]  ? copy_process+0x3350/0x3350
[  107.454334][ T1732]  ? __kasan_check_write+0x18/0x20
[  107.454358][ T1732]  copy_process+0x57c/0x3350
[  107.454390][ T1732]  ? kasan_save_alloc_info+0x3a/0x50
[  107.454412][ T1732]  ? __cfi_copy_process+0x10/0x10
[  107.454440][ T1732]  ? __kmalloc_cache_noprof+0x23c/0x470
[  107.454468][ T1732]  ? __kasan_check_write+0x18/0x20
[  107.454492][ T1732]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  107.454520][ T1732]  vhost_task_create+0x1f7/0x3f0
[  107.454545][ T1732]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  107.454578][ T1732]  ? __cfi_vhost_task_create+0x10/0x10
[  107.454613][ T1732]  ? __cfi_vhost_task_fn+0x10/0x10
[  107.454639][ T1732]  ? __kasan_check_write+0x18/0x20
[  107.454662][ T1732]  ? mutex_lock+0x97/0x1d0
[  107.454684][ T1732]  ? __cfi_mutex_lock+0x10/0x10
[  107.454704][ T1732]  ? kernel_text_address+0xa9/0xe0
[  107.454739][ T1732]  kvm_mmu_post_init_vm+0x161/0x300
[  107.454773][ T1732]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  107.454806][ T1732]  ? _parse_integer_limit+0x195/0x1e0
[  107.454833][ T1732]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  107.454864][ T1732]  ? kstrtoull+0x13b/0x1e0
[  107.454889][ T1732]  ? kstrtouint+0x78/0xf0
[  107.454911][ T1732]  ? ioctl_has_perm+0x1bc/0x500
[  107.454976][ T1732]  ? __asan_memcpy+0x5a/0x80
[  107.455001][ T1732]  ? ioctl_has_perm+0x408/0x500
[  107.455025][ T1732]  ? has_cap_mac_admin+0xd0/0xd0
[  107.455050][ T1732]  ? __kasan_check_write+0x18/0x20
[  107.455073][ T1732]  ? mutex_lock_killable+0x97/0x1d0
[  107.455099][ T1732]  ? __cfi_mutex_lock_killable+0x10/0x10
[  107.455124][ T1732]  ? proc_fail_nth_write+0x184/0x220
[  107.455157][ T1732]  kvm_vcpu_ioctl+0xa43/0x1000
[  107.455178][ T1732]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  107.455198][ T1732]  ? __cfi_vfs_write+0x10/0x10
[  107.455223][ T1732]  ? __kasan_check_write+0x18/0x20
[  107.455246][ T1732]  ? mutex_unlock+0x90/0x240
[  107.455268][ T1732]  ? __cfi_mutex_unlock+0x10/0x10
[  107.455295][ T1732]  ? bpf_lsm_file_ioctl+0xd/0x20
[  107.455326][ T1732]  ? security_file_ioctl+0x3e/0x110
[  107.455349][ T1732]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  107.455371][ T1732]  __se_sys_ioctl+0x135/0x1b0
[  107.455397][ T1732]  __x64_sys_ioctl+0x7f/0xa0
[  107.455423][ T1732]  x64_sys_call+0x1878/0x2ee0
[  107.455444][ T1732]  do_syscall_64+0x57/0xf0
[  107.455475][ T1732]  ? clear_bhb_loop+0x50/0xa0
[  107.455499][ T1732]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  107.455536][ T1732] RIP: 0033:0x7f16b5f9e0d9
[  107.455556][ T1732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.455576][ T1732] RSP: 002b:00007f16b49f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  107.455610][ T1732] RAX: ffffffffffffffda RBX: 00007f16b6226180 RCX: 00007f16b5f9e0d9
[  107.455629][ T1732] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  107.455642][ T1732] RBP: 00007f16b49f7090 R08: 0000000000000000 R09: 0000000000000000
[  107.455659][ T1732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.455673][ T1732] R13: 00007f16b6226218 R14: 00007f16b6226180 R15: 00007fff0db9fe68
[  107.455694][ T1732]  </TASK>
[  107.455772][ T1732] Mem-Info:
[  107.964790][ T1732] active_anon:13884 inactive_anon:1 isolated_anon:0
[  107.964790][ T1732]  active_file:18342 inactive_file:2641 isolated_file:0
[  107.964790][ T1732]  unevictable:0 dirty:545 writeback:0
[  107.964790][ T1732]  slab_reclaimable:5532 slab_unreclaimable:73789
[  107.964790][ T1732]  mapped:25253 shmem:165 pagetables:896
[  107.964790][ T1732]  sec_pagetables:0 bounce:0
[  107.964790][ T1732]  kernel_misc_reclaimable:0
[  107.964790][ T1732]  free:1511698 free_pcp:1666 free_cma:0
[  108.016232][ T1732] Node 0 active_anon:51936kB inactive_anon:4kB active_file:73368kB inactive_file:10564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100912kB dirty:2180kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4856kB pagetables:3584kB sec_pagetables:0kB all_unreclaimable? no
[  108.051953][ T1732] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963388kB mlocked:0kB bounce:0kB free_pcp:5224kB local_pcp:0kB free_cma:0kB
[  108.092752][  T584] usb 2-1: USB disconnect, device number 33
[  108.126450][ T1732] lowmem_reserve[]: 0 3921 3921
[  108.136435][ T1732] Normal free:3105444kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39236kB inactive_anon:4kB active_file:73368kB inactive_file:10564kB unevictable:0kB writepending:2180kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:1952kB local_pcp:924kB free_cma:0kB
[  108.172738][ T1732] lowmem_reserve[]: 0 0 0
[  108.177535][ T1732] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  108.197314][ T1732] Normal: 388*4kB (UME) 636*8kB (UME) 812*16kB (UME) 150*32kB (UME) 457*64kB (UME) 144*128kB (UME) 64*256kB (UME) 61*512kB (UME) 36*1024kB (UME) 12*2048kB (UME) 714*4096kB (UM) = 3105712kB
[  108.218604][ T1732] 21145 total pagecache pages
[  108.224568][ T1732] 1 pages in swap cache
[  108.229263][ T1732] Free swap  = 124708kB
[  108.234094][ T1732] Total swap = 124996kB
[  108.239417][ T1732] 2097051 pages RAM
[  108.244434][ T1732] 0 pages HighMem/MovableOnly
[  108.249883][ T1732] 352238 pages reserved
[  108.254075][ T1732] 0 pages cma reserved
[  108.262287][ T1732] Memory allocations:
[  108.266491][ T1732]          0 B        0 init/main.c:1477 func:do_initcalls
[  108.277473][ T1732]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  108.288308][ T1732]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  108.297959][ T1732]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  108.308685][ T1732]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  108.318838][ T1732]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  108.329585][ T1732]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  108.338926][ T1732]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  108.348276][ T1732]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  108.356683][ T1732]          0 B        0 init/initramfs.c:101 func:find_link
[  108.367635][  T407] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  108.477663][  T584] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  108.537653][  T407] usb 1-1: Using ep0 maxpacket: 8
[  108.544880][  T407] usb 1-1: config 0 has an invalid interface number: 151 but max is 1
[  108.566994][  T407] usb 1-1: config 0 has no interface number 1
[  108.584905][  T407] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  108.600423][  T407] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  108.616192][  T407] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  108.633156][  T407] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  108.655146][  T407] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  108.671361][  T407] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[  108.677826][  T584] usb 2-1: Using ep0 maxpacket: 8
[  108.688956][  T407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  108.715607][  T407] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  108.721453][  T584] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  108.740201][  T407] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  108.747776][  T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.751119][  T407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.777759][  T584] usb 2-1: Product: syz
[  108.782514][  T584] usb 2-1: Manufacturer: syz
[  108.787761][  T407] usb 1-1: Product: syz
[  108.792531][  T407] usb 1-1: Manufacturer: syz
[  108.792809][  T584] usb 2-1: SerialNumber: syz
[  108.797352][  T407] usb 1-1: SerialNumber: syz
[  108.817140][  T407] usb 1-1: config 0 descriptor??
[  108.824904][ T1736] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  108.849741][  T407] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12
[  109.027939][   T36] audit: type=1400 audit(1787684949.940:335): avc:  denied  { mount } for  pid=1733 comm="syz.1.453" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  109.077624][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  109.085429][  T584] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  109.106622][  T407] usb 1-1: USB disconnect, device number 41
[  109.118693][  T584] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  109.143152][  T584] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  109.159715][  T584] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  109.184316][  T584] usb 2-1: USB disconnect, device number 34
[  109.204174][  T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  109.268952][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.282944][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  109.297319][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  109.311494][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.329560][    T9] usb 7-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  109.533191][ T1740] syzkaller1: entered promiscuous mode
[  109.540128][ T1740] syzkaller1: entered allmulticast mode
[  109.548923][    T9] usb 7-1: No streaming interface found for terminal 2.
[  109.622846][   T36] audit: type=1400 audit(1787684950.530:336): avc:  denied  { create } for  pid=1741 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  109.650580][   T36] audit: type=1400 audit(1787684950.560:337): avc:  denied  { write } for  pid=1741 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  109.678640][   T36] audit: type=1400 audit(1787684950.560:338): avc:  denied  { setopt } for  pid=1741 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  109.727108][   T36] audit: type=1400 audit(1787684950.560:339): avc:  denied  { read } for  pid=1741 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  109.800628][    T9] usb 7-1: USB disconnect, device number 5
[  109.957699][  T584] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  109.997692][  T407] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  110.122590][  T584] usb 2-1: unable to get BOS descriptor or descriptor too short
[  110.136210][  T584] usb 2-1: not running at top speed; connect to a high speed hub
[  110.146560][  T584] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.161025][  T584] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.169880][  T407] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  110.180560][  T584] usb 2-1: string descriptor 0 read error: -22
[  110.192580][  T407] usb 1-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  110.217930][  T584] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.223194][  T407] usb 1-1: config 0 interface 0 has no altsetting 0
[  110.242101][  T407] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  110.253640][  T407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.254788][  T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.272844][  T407] usb 1-1: config 0 descriptor??
[  110.279807][  T407] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  110.281202][  T584] usb 2-1: 0:2 : does not exist
[  110.339667][   T36] audit: type=1400 audit(1787684951.250:340): avc:  denied  { setopt } for  pid=1750 comm="syz.6.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  110.486811][   T36] audit: type=1400 audit(1787684951.390:341): avc:  denied  { sqpoll } for  pid=1747 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  110.593566][  T336] usb 1-1: USB disconnect, device number 42
[  110.889937][  T584] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  110.903261][  T584] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  110.917632][  T584] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  110.947191][  T584] usb 2-1: USB disconnect, device number 35
[  111.433456][   T36] audit: type=1400 audit(1787684952.340:342): avc:  denied  { mount } for  pid=1761 comm="syz.1.463" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  111.462420][   T36] audit: type=1400 audit(1787684952.340:343): avc:  denied  { search } for  pid=1761 comm="syz.1.463" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  111.490711][   T36] audit: type=1400 audit(1787684952.340:344): avc:  denied  { read write } for  pid=1761 comm="syz.1.463" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  111.517968][ T1764] netlink: 'syz.1.464': attribute type 27 has an invalid length.
[  111.877656][   T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  112.042050][   T10] usb 2-1: config 0 has no interfaces?
[  112.049127][   T10] usb 2-1: config 0 has no interfaces?
[  112.057359][   T10] usb 2-1: config 0 has no interfaces?
[  112.070426][   T10] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  112.081093][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.097925][   T10] usb 2-1: config 0 descriptor??
[  112.331943][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.338876][    T9] usb 2-1: USB disconnect, device number 36
[  112.599091][  T584] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  112.770164][  T584] usb 7-1: unable to get BOS descriptor or descriptor too short
[  112.793479][  T584] usb 7-1: not running at top speed; connect to a high speed hub
[  112.807346][  T584] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.837646][  T584] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.859617][  T584] usb 7-1: string descriptor 0 read error: -22
[  112.876920][  T584] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.888058][  T584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.901097][  T584] usb 7-1: 0:2 : does not exist
[  112.973822][ T1791] netlink: 'syz.1.474': attribute type 27 has an invalid length.
[  113.507678][  T584] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5)
[  113.520980][  T584] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  113.544549][  T584] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[  113.569532][  T584] usb 7-1: USB disconnect, device number 6
[  113.586760][  T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  113.913750][ T1806] tc_dump_action: action bad kind
[  114.044599][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  114.044619][   T36] audit: type=1400 audit(1787684954.950:348): avc:  denied  { setopt } for  pid=1808 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  114.148000][ T1815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1815 comm=syz.0.481
[  114.172208][ T1816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'.
[  114.318015][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  114.377683][   T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  114.479546][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.490199][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  114.510310][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  114.530507][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.544270][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  114.562920][   T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  114.585373][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.608878][    T9] usb 7-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  114.636480][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  114.646232][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  114.655837][   T10] usb 2-1: Product: syz
[  114.660586][   T10] usb 2-1: Manufacturer: syz
[  114.665865][   T10] usb 2-1: SerialNumber: syz
[  114.831316][    T9] usb 7-1: No streaming interface found for terminal 2.
[  114.876928][   T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  115.074117][   T10] usb 7-1: USB disconnect, device number 7
[  115.095764][   T36] audit: type=1400 audit(1787684956.000:349): avc:  denied  { read write } for  pid=1820 comm="syz.1.483" name="lp0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  115.147632][   T36] audit: type=1400 audit(1787684956.000:350): avc:  denied  { open } for  pid=1820 comm="syz.1.483" path="/dev/usb/lp0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  115.206961][ T1828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=1828 comm=syz.1.483
[  115.240063][ T1828] syzkaller1: entered promiscuous mode
[  115.246115][ T1828] syzkaller1: entered allmulticast mode
[  115.851037][   T36] audit: type=1400 audit(1787684956.760:351): avc:  denied  { unmount } for  pid=1413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  115.906731][ T1840] 9pnet_fd: Insufficient options for proto=fd
[  115.951228][ T1840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  115.979274][  T336] usb 2-1: USB disconnect, device number 37
[  116.010339][  T336] usblp0: removed
[  116.127621][   T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  116.234475][ T1854] netlink: 'syz.1.493': attribute type 27 has an invalid length.
[  116.289061][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  116.307916][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  116.330549][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.347971][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.365063][   T10] usb 1-1: string descriptor 0 read error: -22
[  116.377697][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.397738][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.420603][   T10] usb 1-1: 0:2 : does not exist
[  116.917691][  T407] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  117.035509][   T10] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  117.047125][   T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  117.058090][   T10] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  117.068312][  T407] usb 7-1: not running at top speed; connect to a high speed hub
[  117.081659][   T10] usb 1-1: USB disconnect, device number 43
[  117.092044][  T407] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.105939][  T407] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  117.123188][  T407] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.139001][  T407] usb 7-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  117.148089][  T407] usb 7-1: No streaming interface found for terminal 2.
[  117.203975][   T36] audit: type=1400 audit(1787684958.110:352): avc:  denied  { ioctl } for  pid=1861 comm="syz.1.496" path="socket:[155988]" dev="sockfs" ino=155988 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  117.335628][  T407] usb 7-1: USB disconnect, device number 8
[  117.506068][ T1870] sit0: entered promiscuous mode
[  117.520311][ T1870] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[  117.547612][ T1870] netlink: 1 bytes leftover after parsing attributes in process `syz.1.499'.
[  117.599078][ T1875] fuse: Bad value for 'user_id'
[  117.604009][ T1875] fuse: Bad value for 'user_id'
[  117.646893][ T1878] netlink: 'syz.0.502': attribute type 27 has an invalid length.
[  117.666795][  T912] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.674488][  T912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.948275][  T336] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  118.107971][  T336] usb 1-1: Using ep0 maxpacket: 32
[  118.113890][  T584] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  118.129402][  T336] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  118.144290][  T336] usb 1-1: config 2 has no interface number 0
[  118.164148][  T336] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  118.193213][  T336] usb 1-1: config 2 interface 88 has no altsetting 0
[  118.205524][  T336] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  118.221824][  T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  118.234631][  T336] usb 1-1: Product: syz
[  118.241263][  T336] usb 1-1: Manufacturer: syz
[  118.248957][  T336] usb 1-1: SerialNumber: syz
[  118.269231][ T1882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.282390][  T584] usb 7-1: device descriptor read/64, error -71
[  118.502398][ T1882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.528910][  T336] asix 1-1:2.88: probe with driver asix failed with error -71
[  118.543648][  T336] usb 1-1: USB disconnect, device number 44
[  118.552779][  T584] usb 7-1: device descriptor read/64, error -71
[  118.638040][  T407] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  118.797803][  T407] usb 2-1: Using ep0 maxpacket: 8
[  118.806804][  T407] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 8
[  118.807764][  T584] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  118.825764][  T407] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.857993][  T407] usb 2-1: config 1 interface 0 has no altsetting 0
[  118.870466][  T407] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  118.887733][  T407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.898405][  T336] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  118.903146][  T407] usb 2-1: Product: ৓뾾ℚ꒐堹༚겛࢐⒒㽚䉈줻佩鿆殅긁蝵흞᫄뮕綸ꤧ킗ꕗ拕ヸ磮㨈歹痃ࡊ
[  118.928415][  T407] usb 2-1: Manufacturer: ꩮ督㵒亂䠪බ쪃蘾鎖❫⌭䛸ꎛ뾉誕㞦欢炄㏽逽ﺲ㣴瘰쐚⋽࠸￁∵㿗ᱫ㠨镸뒖ᨡ馬릐澷閎䎴蜉惣ℎ髟̐Ꮥ턢苻ᴇ룪釗ᬾй猛࢞蒞醙蓞᧝碟晛팤湎ㄤ懋嘒㠛篳࢝ᴈ熬ﶗ㓔鐵몣졐뒉﵊Ꮙ蛫짙듢ᄉ₩ڊぇ⋲閹網с
[  118.976400][  T407] usb 2-1: SerialNumber: ᐄ
[  118.984586][ T1892] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  118.997688][  T584] usb 7-1: device descriptor read/64, error -71
[  119.089340][  T336] usb 1-1: unable to get BOS descriptor or descriptor too short
[  119.103186][  T336] usb 1-1: not running at top speed; connect to a high speed hub
[  119.118779][  T336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.133774][  T336] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.149169][  T336] usb 1-1: string descriptor 0 read error: -22
[  119.160926][  T336] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  119.178746][  T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.198539][  T336] usb 1-1: 0:2 : does not exist
[  119.220564][  T407] usb 2-1: USB disconnect, device number 38
[  119.267691][  T584] usb 7-1: device descriptor read/64, error -71
[  119.377779][  T584] usb usb7-port1: attempt power cycle
[  119.721103][  T584] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  119.758741][  T584] usb 7-1: device descriptor read/8, error -71
[  119.800494][  T336] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  119.812192][  T336] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  119.823037][  T336] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  119.841315][  T336] usb 1-1: USB disconnect, device number 45
[  119.888841][  T584] usb 7-1: device descriptor read/8, error -71
[  119.967702][  T407] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  120.130773][  T407] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  120.137889][  T584] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  120.142337][  T407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.159544][  T407] usb 2-1: Product: syz
[  120.164893][  T407] usb 2-1: Manufacturer: syz
[  120.172988][  T407] usb 2-1: SerialNumber: syz
[  120.179572][  T584] usb 7-1: device descriptor read/8, error -71
[  120.321427][  T584] usb 7-1: device descriptor read/8, error -71
[  120.417618][ T1903] netlink: 'syz.0.512': attribute type 27 has an invalid length.
[  120.449178][  T584] usb usb7-port1: unable to enumerate USB device
[  120.707664][  T407] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  120.870307][  T407] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  120.882713][  T407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.893298][  T407] usb 1-1: Product: syz
[  120.898598][  T407] usb 1-1: Manufacturer: syz
[  120.903796][  T407] usb 1-1: SerialNumber: syz
[  120.916126][  T407] ums-karma 1-1:1.0: USB Mass Storage device detected
[  120.936552][  T407] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  120.936552][  T407]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  120.973985][   T36] audit: type=1400 audit(1787684961.880:353): avc:  denied  { map } for  pid=1907 comm="syz.6.514" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.006970][   T36] audit: type=1400 audit(1787684961.880:354): avc:  denied  { read } for  pid=1907 comm="syz.6.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  121.307629][  T584] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  121.340922][  T407] ums-karma 1-1:1.0: probe with driver ums-karma failed with error -5
[  121.362967][  T407] usb 1-1: USB disconnect, device number 46
[  121.469052][  T584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.484279][  T584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.498297][  T584] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  121.510307][  T584] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.522179][  T584] usb 7-1: config 0 descriptor??
[  121.932019][  T584] arvo 0003:1E7D:30D4.0006: global environment stack underflow
[  121.959357][  T584] arvo 0003:1E7D:30D4.0006: item 0 4 1 11 parsing failed
[  121.973971][  T518] bridge_slave_1: left allmulticast mode
[  121.982688][  T584] arvo 0003:1E7D:30D4.0006: parse failed
[  121.997662][  T518] bridge_slave_1: left promiscuous mode
[  122.004753][  T584] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -22
[  122.017344][  T518] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.039244][  T518] bridge_slave_0: left allmulticast mode
[  122.046919][  T518] bridge_slave_0: left promiscuous mode
[  122.056803][  T518] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.132121][   T36] audit: type=1400 audit(1787684963.040:355): avc:  denied  { create } for  pid=1907 comm="syz.6.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  122.153630][  T584] usb 7-1: USB disconnect, device number 13
[  122.192734][  T518] veth1_macvtap: left promiscuous mode
[  122.202769][  T518] veth0_vlan: left promiscuous mode
[  122.269687][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.277198][ T1920] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.288858][ T1920] bridge_slave_0: entered allmulticast mode
[  122.296679][ T1920] bridge_slave_0: entered promiscuous mode
[  122.304415][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.312587][ T1920] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.320506][ T1920] bridge_slave_1: entered allmulticast mode
[  122.328174][ T1920] bridge_slave_1: entered promiscuous mode
[  122.379065][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.387195][ T1920] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.395537][ T1920] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.404547][ T1920] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.431679][  T912] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.440418][  T912] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.453428][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.461430][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.471450][  T912] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.478720][  T912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.511355][ T1920] veth0_vlan: entered promiscuous mode
[  122.524452][ T1920] veth1_macvtap: entered promiscuous mode
[  122.580881][   T36] audit: type=1326 audit(1787684963.490:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1926 comm="syz.7.518" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17c5f9e0d9 code=0x0
[  122.742973][  T336] usb 2-1: USB disconnect, device number 39
[  122.870474][   T36] audit: type=1400 audit(1787684963.780:357): avc:  denied  { mounton } for  pid=1939 comm="syz.1.523" path="/148/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  122.918279][  T584] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  123.037805][  T407] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  123.069201][  T584] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  123.082896][  T584] usb 7-1: config 0 interface 0 has no altsetting 0
[  123.090500][  T584] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  123.099989][  T584] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.109523][  T584] usb 7-1: config 0 descriptor??
[  123.167771][  T336] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  123.208152][  T407] usb 1-1: too many configurations: 72, using maximum allowed: 8
[  123.217472][  T407] usb 1-1: config 0 has no interfaces?
[  123.224308][  T407] usb 1-1: config 0 has no interfaces?
[  123.231114][  T407] usb 1-1: config 0 has no interfaces?
[  123.238148][  T407] usb 1-1: config 0 has no interfaces?
[  123.244536][  T407] usb 1-1: config 0 has no interfaces?
[  123.252222][  T407] usb 1-1: config 0 has no interfaces?
[  123.260611][  T407] usb 1-1: config 0 has no interfaces?
[  123.267293][  T407] usb 1-1: config 0 has no interfaces?
[  123.273342][  T407] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  123.283692][  T407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.293102][  T407] usb 1-1: config 0 descriptor??
[  123.338961][  T336] usb 2-1: not running at top speed; connect to a high speed hub
[  123.347973][  T336] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023
[  123.362047][  T336] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  123.371774][  T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.382043][  T336] usb 2-1: Product: syz
[  123.386505][  T336] usb 2-1: Manufacturer: syz
[  123.391925][  T336] usb 2-1: SerialNumber: syz
[  123.492240][   T36] audit: type=1400 audit(1787684964.400:358): avc:  denied  { write } for  pid=1952 comm="syz.7.526" path="socket:[156444]" dev="sockfs" ino=156444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  123.523159][ T1938] 9pnet_fd: p9_fd_create_tcp (1938): problem connecting socket to 127.0.0.1
[  123.527123][   T36] audit: type=1400 audit(1787684964.430:359): avc:  denied  { setopt } for  pid=1952 comm="syz.7.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  123.554466][  T584] input: HID 28bd:0933 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0933.0007/input/input7
[  123.577288][   T36] audit: type=1400 audit(1787684964.480:360): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=769 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  123.602962][  T584] uclogic 0003:28BD:0933.0007: input,hidraw0: USB HID v10.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.6-1/input0
[  123.620662][   T36] audit: type=1400 audit(1787684964.480:361): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=769 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  123.647988][ T1945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.659171][ T1945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.668404][ T1945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.677376][ T1945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.686337][   T36] audit: type=1400 audit(1787684964.560:362): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=769 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  123.736506][  T336] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  123.744450][  T336] usb 2-1: unit 14 not found!
[  123.750814][ T1930] syzkaller0: entered promiscuous mode
[  123.757890][ T1930] syzkaller0: entered allmulticast mode
[  123.765451][  T336] usb 2-1: USB disconnect, device number 40
[  123.775530][  T407] usb 7-1: USB disconnect, device number 14
[  123.795608][  T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  124.497691][  T336] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  124.647724][  T584] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  124.660056][  T336] usb 2-1: Using ep0 maxpacket: 8
[  124.667722][  T336] usb 2-1: config 1 interface 0 altsetting 45 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.688313][  T336] usb 2-1: config 1 interface 0 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  124.709248][  T336] usb 2-1: config 1 interface 0 has no altsetting 0
[  124.721885][  T336] usb 2-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.40
[  124.734061][  T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.744314][  T336] usb 2-1: Product: ⠁
[  124.749362][  T336] usb 2-1: Manufacturer: ꗂ飆纣谛콶៬⛱㈴䴶쾟ꮳ⛥ﲉႀ鎵활扥Ԋ뽰⿃䌌縀夷匴쇥
[  124.764957][  T336] usb 2-1: SerialNumber: syz
[  124.809531][  T584] usb 7-1: unable to get BOS descriptor or descriptor too short
[  124.819384][  T584] usb 7-1: not running at top speed; connect to a high speed hub
[  124.831314][  T584] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.847492][  T584] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.864942][  T584] usb 7-1: string descriptor 0 read error: -22
[  124.875084][  T584] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  124.887478][  T584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.903622][  T584] usb 7-1: 0:2 : does not exist
[  125.032418][  T336] usbhid 2-1:1.0: can't add hid device: -71
[  125.039825][  T336] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  125.051590][  T336] usb 2-1: USB disconnect, device number 41
[  125.708786][  T584] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5)
[  125.719599][  T584] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  125.730286][  T584] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[  125.746146][  T584] usb 7-1: USB disconnect, device number 15
[  125.753472][  T407] usb 1-1: USB disconnect, device number 47
[  125.760762][  T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  126.107679][  T407] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  126.259540][  T407] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.269823][  T407] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.279957][  T407] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  126.289453][  T407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  126.298808][  T407] usb 1-1: SerialNumber: syz
[  126.309966][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  126.309985][   T36] audit: type=1400 audit(1787684967.220:366): avc:  denied  { view } for  pid=1982 comm="syz.6.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  126.346755][ T1985] devpts: called with bogus options
[  126.508948][ T1978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  126.534351][  T407] usb 1-1: 0:2 : does not exist
[  126.542143][  T407] usb 1-1: unit 5: unexpected type 0x0c
[  126.551258][  T407] usb 1-1: USB disconnect, device number 48
[  126.565422][  T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  126.617712][    T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  126.637604][   T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  126.718811][   T36] audit: type=1400 audit(1787684967.630:367): avc:  denied  { execute } for  pid=1992 comm="syz.7.540" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  126.755021][   T36] audit: type=1400 audit(1787684967.630:368): avc:  denied  { execute_no_trans } for  pid=1992 comm="syz.7.540" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  126.786892][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.799045][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.810349][    T9] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  126.820062][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.828249][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  126.840808][    T9] usb 7-1: config 0 descriptor??
[  126.846165][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  126.861005][   T10] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 8.00
[  126.873048][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.884822][   T10] pl2303 2-1:1.0: pl2303 converter detected
[  126.894925][   T10] pl2303 2-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org
[  127.087297][   T10] usb 2-1: USB disconnect, device number 42
[  127.125102][   T36] audit: type=1400 audit(1787684968.030:369): avc:  denied  { unlink } for  pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  127.264719][    T9] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0
[  127.272682][    T9] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  127.348568][    T9] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected
[  127.358468][    T9] hid-steam 0003:28DE:1142.0008: No HID_FEATURE_REPORT submitted -  nothing to read
[  127.373894][    T9] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[  127.382515][    T9] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  127.465827][    T9] usb 7-1: USB disconnect, device number 16
[  127.477889][    T9] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected
[  127.488508][  T407] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  127.613565][   T36] audit: type=1400 audit(1787684968.520:370): avc:  denied  { listen } for  pid=2004 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  127.620034][ T2005] netlink: 'syz.1.544': attribute type 17 has an invalid length.
[  127.671973][  T407] usb 1-1: unable to get BOS descriptor or descriptor too short
[  127.688415][  T407] usb 1-1: not running at top speed; connect to a high speed hub
[  127.696831][   T36] audit: type=1400 audit(1787684968.600:371): avc:  denied  { create } for  pid=2008 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  127.699753][  T407] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.736055][  T407] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.752176][  T407] usb 1-1: string descriptor 0 read error: -22
[  127.761905][  T407] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.771947][  T407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.785327][  T407] usb 1-1: 0:2 : does not exist
[  127.868127][   T36] audit: type=1400 audit(1787684968.780:372): avc:  granted  { setsecparam } for  pid=2010 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  128.088708][ T2024] overlayfs: failed to resolve '/I4L���MU�X�cV7YLdz�z��8�Q�BX�D��ՒpL�[By'bз���r�c'�F�����Ҵ�=`5V;��q&�i��&}�U�R�nL�7b��7����4��sg�[.*�[��0�w��p��/?FoMm^�-�(��S��<���>zv01�V���
[  128.088708][ T2024] ��(Ҭb��X��m': -13
[  128.113614][   T36] audit: type=1400 audit(1787684969.000:373): avc:  denied  { mounton } for  pid=2021 comm="syz.6.551" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  128.251593][ T2027] kvm: emulating exchange as write
[  128.308669][  T407] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  128.322360][  T308] Bluetooth: hci0: Frame reassembly failed (-84)
[  128.339636][  T407] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  128.349712][  T407] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  128.372513][  T407] usb 1-1: USB disconnect, device number 49
[  128.396703][ T2002] ==================================================================
[  128.405551][ T2002] BUG: KASAN: slab-use-after-free in string+0x20f/0x2b0
[  128.412902][ T2002] Read of size 1 at addr ffff88810536cde0 by task syz.0.543/2002
[  128.421536][ T2002] 
[  128.425307][ T2002] CPU: 0 UID: 0 PID: 2002 Comm: syz.0.543 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[  128.425349][ T2002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  128.425366][ T2002] Call Trace:
[  128.425375][ T2002]  <TASK>
[  128.425386][ T2002]  __dump_stack+0x21/0x30
[  128.425429][ T2002]  dump_stack_lvl+0x140/0x1c0
[  128.425465][ T2002]  ? __cfi_dump_stack_lvl+0x10/0x10
[  128.425511][ T2002]  ? dequeue_entity+0x88a/0x13b0
[  128.425548][ T2002]  print_address_description+0x71/0x210
[  128.425586][ T2002]  print_report+0x4a/0x70
[  128.425621][ T2002]  kasan_report+0x162/0x1a0
[  128.425656][ T2002]  ? string+0x20f/0x2b0
[  128.425688][ T2002]  ? string+0x20f/0x2b0
[  128.425719][ T2002]  __asan_report_load1_noabort+0x18/0x20
[  128.425745][ T2002]  string+0x20f/0x2b0
[  128.425776][ T2002]  vsnprintf+0xe65/0x1ad0
[  128.425810][ T2002]  snprintf+0xe9/0x140
[  128.425840][ T2002]  ? __kernel_text_address+0x11/0x40
[  128.425875][ T2002]  ? unwind_get_return_address+0x51/0x90
[  128.425909][ T2002]  ? __cfi_snprintf+0x10/0x10
[  128.425943][ T2002]  ? dev_vprintk_emit+0x179/0x400
[  128.425973][ T2002]  dev_vprintk_emit+0x313/0x400
[  128.426003][ T2002]  ? __cfi_dev_vprintk_emit+0x10/0x10
[  128.426035][ T2002]  ? kasan_save_track+0x4f/0x80
[  128.426064][ T2002]  ? kasan_save_track+0x3e/0x80
[  128.426093][ T2002]  ? kasan_save_alloc_info+0x3a/0x50
[  128.426118][ T2002]  dev_printk_emit+0xef/0x150
[  128.426150][ T2002]  ? __cfi_dev_printk_emit+0x10/0x10
[  128.426183][ T2002]  __dev_printk+0x17f/0x1b0
[  128.426209][ T2002]  _dev_err+0x11f/0x180
[  128.426239][ T2002]  ? __cfi__dev_err+0x10/0x10
[  128.426267][ T2002]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  128.426301][ T2002]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  128.426337][ T2002]  ? __check_object_size+0x54c/0x870
[  128.426363][ T2002]  ? usb_ep_queue+0xf0/0x230
[  128.426401][ T2002]  raw_process_ep0_io+0x54b/0x7a0
[  128.426442][ T2002]  raw_ioctl+0x226c/0x37a0
[  128.426480][ T2002]  ? __cfi_futex_wait+0x10/0x10
[  128.426513][ T2002]  ? __cfi_raw_ioctl+0x10/0x10
[  128.426551][ T2002]  ? selinux_file_ioctl+0x732/0x1480
[  128.426578][ T2002]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  128.426604][ T2002]  ? hrtimer_nanosleep+0x265/0x340
[  128.426643][ T2002]  ? do_futex+0x32a/0x510
[  128.426679][ T2002]  ? __cfi_hrtimer_wakeup+0x10/0x10
[  128.426702][ T2002]  ? __cfi_do_futex+0x10/0x10
[  128.426737][ T2002]  ? get_timespec64+0x11a/0x1b0
[  128.426776][ T2002]  ? bpf_lsm_file_ioctl+0xd/0x20
[  128.426810][ T2002]  ? security_file_ioctl+0x3e/0x110
[  128.426835][ T2002]  ? __cfi_raw_ioctl+0x10/0x10
[  128.426871][ T2002]  __se_sys_ioctl+0x135/0x1b0
[  128.426903][ T2002]  __x64_sys_ioctl+0x7f/0xa0
[  128.426934][ T2002]  x64_sys_call+0x1878/0x2ee0
[  128.426958][ T2002]  do_syscall_64+0x57/0xf0
[  128.426992][ T2002]  ? clear_bhb_loop+0x50/0xa0
[  128.427025][ T2002]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  128.427069][ T2002] RIP: 0033:0x7fd52e19dd6b
[  128.427091][ T2002] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  128.427112][ T2002] RSP: 002b:00007fd52ef98f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  128.427141][ T2002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd52e19dd6b
[  128.427161][ T2002] RDX: 00007fd52ef98fd0 RSI: 0000000040085503 RDI: 0000000000000003
[  128.427179][ T2002] RBP: 00007fd52ef98fd0 R08: 0000000000000002 R09: 0000000000000500
[  128.427196][ T2002] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd52ef98fd8
[  128.427214][ T2002] R13: 0000200000000400 R14: 00007fd52e425fa0 R15: 00007fff17e6f228
[  128.427237][ T2002]  </TASK>
[  128.427246][ T2002] 
[  128.813772][ T2002] Allocated by task 1:
[  128.818210][ T2002]  kasan_save_track+0x3e/0x80
[  128.823492][ T2002]  kasan_save_alloc_info+0x3a/0x50
[  128.829025][ T2002]  __kasan_kmalloc+0x96/0xb0
[  128.834113][ T2002]  __kmalloc_node_track_caller_noprof+0x24e/0x4f0
[  128.841085][ T2002]  kvasprintf+0xf1/0x260
[  128.845827][ T2002]  kvasprintf_const+0xf6/0x250
[  128.850828][ T2002]  kobject_set_name_vargs+0x65/0x120
[  128.856280][ T2002]  dev_set_name+0xe3/0x140
[  128.860841][ T2002]  usb_add_gadget+0x436/0x780
[  128.866092][ T2002]  usb_add_gadget_udc+0x11e/0x160
[  128.871210][ T2002]  dummy_udc_probe+0x6ea/0x7f0
[  128.876283][ T2002]  platform_probe+0x17a/0x200
[  128.881105][ T2002]  really_probe+0x2e1/0x8b0
[  128.885653][ T2002]  __driver_probe_device+0x193/0x280
[  128.891176][ T2002]  driver_probe_device+0x54/0x3f0
[  128.896511][ T2002]  __device_attach_driver+0x2f1/0x4b0
[  128.902015][ T2002]  bus_for_each_drv+0x264/0x300
[  128.907456][ T2002]  __device_attach+0x2c4/0x3c0
[  128.913221][ T2002]  device_initial_probe+0x1e/0x30
[  128.918449][ T2002]  bus_probe_device+0x18b/0x270
[  128.923682][ T2002]  device_add+0x7fd/0xbf0
[  128.928259][ T2002]  platform_device_add+0x464/0x6c0
[  128.933922][ T2002]  dummy_hcd_init+0xce2/0x1230
[  128.939115][ T2002]  do_one_initcall+0x1e8/0x6a0
[  128.944171][ T2002]  do_initcall_level+0x174/0x2e5
[  128.949536][ T2002]  do_initcalls+0x7e/0x160
[  128.954061][ T2002]  do_basic_setup+0x95/0xb0
[  128.958582][ T2002]  kernel_init_freeable+0x2b1/0x400
[  128.964899][ T2002]  kernel_init+0x21/0x1e0
[  128.969353][ T2002]  ret_from_fork+0x67/0xa0
[  128.974065][ T2002]  ret_from_fork_asm+0x1a/0x30
[  128.979282][ T2002] 
[  128.981645][ T2002] Freed by task 2027:
[  128.985637][ T2002]  kasan_save_track+0x3e/0x80
[  128.990426][ T2002]  kasan_save_free_info+0x44/0x50
[  128.995735][ T2002]  __kasan_slab_free+0x5f/0x80
[  129.001786][ T2002]  kfree+0x158/0x440
[  129.005930][ T2002]  kfree_const+0x3d/0x50
[  129.010517][ T2002]  kobject_put+0x21f/0x2a0
[  129.015075][ T2002]  put_device+0x23/0x40
[  129.019701][ T2002]  usb_del_gadget_udc+0x25/0x30
[  129.024839][ T2002]  dummy_udc_remove+0x5c/0x70
[  129.029699][ T2002]  platform_remove+0x7e/0xb0
[  129.034760][ T2002]  device_release_driver_internal+0x4ad/0x830
[  129.042447][ T2002]  device_driver_detach+0x3f/0x50
[  129.047894][ T2002]  unbind_store+0x1ab/0x1f0
[  129.052702][ T2002]  drv_attr_store+0x91/0xb0
[  129.057247][ T2002]  sysfs_kf_write+0x141/0x160
[  129.062124][ T2002]  kernfs_fop_write_iter+0x319/0x510
[  129.068693][ T2002]  vfs_write+0x75f/0xfd0
[  129.073337][ T2002]  ksys_write+0x145/0x260
[  129.077966][ T2002]  __x64_sys_write+0x7f/0x90
[  129.083077][ T2002]  x64_sys_call+0x271c/0x2ee0
[  129.088068][ T2002]  do_syscall_64+0x57/0xf0
[  129.092611][ T2002]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  129.099350][ T2002] 
[  129.101878][ T2002] The buggy address belongs to the object at ffff88810536cde0
[  129.101878][ T2002]  which belongs to the cache kmalloc-16 of size 16
[  129.116051][ T2002] The buggy address is located 0 bytes inside of
[  129.116051][ T2002]  freed 16-byte region [ffff88810536cde0, ffff88810536cdf0)
[  129.130840][ T2002] 
[  129.133281][ T2002] The buggy address belongs to the physical page:
[  129.139902][ T2002] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810536c3c0 pfn:0x10536c
[  129.150593][ T2002] flags: 0x4000000000000200(workingset|zone=1)
[  129.157661][ T2002] page_type: f5(slab)
[  129.162446][ T2002] raw: 4000000000000200 ffff888100041640 ffffea00042efbd0 ffffea00044f4f90
[  129.171408][ T2002] raw: ffff88810536c3c0 000000000080006f 00000001f5000000 0000000000000000
[  129.180927][ T2002] page dumped because: kasan: bad access detected
[  129.188145][ T2002] page_owner tracks the page as allocated
[  129.194631][ T2002] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5151070156, free_ts 0
[  129.216176][ T2002]  register_dummy_stack+0x99/0x110
[  129.222013][ T2002]  init_page_owner+0x36/0x840
[  129.227016][ T2002]  page_ext_init+0x3f8/0x44b
[  129.231725][ T2002]  mm_core_init+0x4b/0x7b
[  129.236611][ T2002] page_owner free stack trace missing
[  129.242361][ T2002] 
[  129.244700][ T2002] Memory state around the buggy address:
[  129.250524][ T2002]  ffff88810536cc80: 00 05 fc fc 00 01 fc fc 00 04 fc fc 00 01 fc fc
[  129.259144][ T2002]  ffff88810536cd00: 00 05 fc fc 00 00 fc fc 00 01 fc fc 00 00 fc fc
[  129.267852][ T2002] >ffff88810536cd80: 00 01 fc fc 00 04 fc fc fa fb fc fc fa fb fc fc
[  129.276556][ T2002]                                                        ^
[  129.284252][ T2002]  ffff88810536ce00: 00 05 fc fc fa fb fc fc 00 05 fc fc fa fb fc fc
[  129.292783][ T2002]  ffff88810536ce80: 00 04 fc fc 00 00 fc fc 00 00 fc fc 00 07 fc fc
[  129.301403][ T2002] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  129.312252][   T36] audit: type=1400 audit(1787684970.220:374): avc:  denied  { write } for  pid=285 comm="syz-executor" path="pipe:[1638]" dev="pipefs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  129.330944][ T2002] Disabling lock debugging due to kernel taint
[  129.360044][ T2002] gadget : fail, usb_ep_queue returned -108
[  129.390345][   T36] audit: type=1400 audit(1787684970.300:375): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  129.554346][  T518] bridge_slave_1: left allmulticast mode
[  129.560435][  T518] bridge_slave_1: left promiscuous mode
[  129.566458][  T518] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.574547][  T518] bridge_slave_0: left allmulticast mode
[  129.580754][  T518] bridge_slave_0: left promiscuous mode
[  129.586973][  T518] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.720700][  T518] veth1_macvtap: left promiscuous mode
[  129.726892][  T518] veth0_vlan: left promiscuous mode
[  129.959326][  T518] bridge_slave_1: left allmulticast mode
[  129.966086][  T518] bridge_slave_1: left promiscuous mode
[  129.972405][  T518] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.980856][  T518] bridge_slave_0: left allmulticast mode
[  129.986893][  T518] bridge_slave_0: left promiscuous mode
[  129.992923][  T518] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.100477][  T518] veth1_macvtap: left promiscuous mode
[  130.107807][  T518] veth0_vlan: left promiscuous mode
[  130.367704][  T593] Bluetooth: hci0: command 0x1003 tx timeout
[  130.370140][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  130.481010][  T518] bridge_slave_1: left allmulticast mode
[  130.487102][  T518] bridge_slave_1: left promiscuous mode
[  130.493121][  T518] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.500907][  T518] bridge_slave_0: left allmulticast mode
[  130.506959][  T518] bridge_slave_0: left promiscuous mode
[  130.513142][  T518] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.639931][  T518] veth1_macvtap: left promiscuous mode
[  130.646145][  T518] veth0_vlan: left promiscuous mode