last executing test programs:

36.261785175s ago: executing program 0 (id=37):
syz_usb_connect$uac2(0x3, 0x9b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x41, 0x582, 0x42, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x7, 0x60, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x13, 0x7}, [@selector_unit={0xa, 0x24, 0xb, 0xc1, 0x5, "c0d3faaf31"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0xc4, 0x3, 0x3, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0xd, {0x8, 0x25, 0x1, 0x83, 0x5, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x4, 0x1, 0xf3, {0x8, 0x25, 0x1, 0x3, 0xc, 0x0, 0x8001}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x86, &(0x7f0000000140)=@string={0x86, 0x3, "1a4ac87678519fb810596085f80db1ef2fb6c6dd22fccd1bdf849cc5210c9da40dcafa1c77e9ace063bbec75870b38a95c8803fd9f4505ec50f80eef866f4eecc6f30d4d8e555285f893cea21d6fcfa2d559e929bf64f8da871bf9dea1d4888c7462717c25ebc39d3f5d1aae9f81d598dcbe3fac9e062b559f4fc6196573d6d7cc861025"}}, {0x7b, &(0x7f00000000c0)=@string={0x7b, 0x3, "7bf451f73d68512dadc5f61b8b4fa25f5309ee7d968189c52ab44e085370fce8c05cf2e81b87ebcfa0a27784d9608384681786e3a91f8374ae8c630df045bffd2698d0712b3399807e9b41262f6763edb1e9da1e4831a2388ddaa917a22428494440327737d8f8504799cbfd3ef49a3448725a304fccdf0bfb"}}]})

33.23776908s ago: executing program 0 (id=50):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@multicast, @random="000000000300", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010102, {0x5, 0x4, 0x1, 0x31, 0x8, 0x66, 0xfffe, 0x6, 0x2, 0xd92, @remote, @empty=0x7f000000}}}}}}}, 0x42)

33.20622678s ago: executing program 0 (id=51):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='streaming/header/h/u\x00', 0x137)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x4001, 0x0)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x4, 0x1, 0x0, "0062ba92600000f73809630400"})
syz_open_pts(r1, 0x900)
r2 = dup3(r0, r1, 0x0)
read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x200})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xe332, 0x9, 0xc9c, 0x12, "1c8fd30a08600300d91f1e4eb77fa58efd22c0"})
socketpair(0x24, 0x1, 0x3, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00'})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[], 0x120}}, 0x4004010)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fff0000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'rose0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x49, 0x100, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8000001b, 0x0, 0x0, 0x0, 0x0, [0xfffffffe]}})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
open_tree(r5, &(0x7f00000008c0)='\x00', 0x1001)
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
ioctl$BLKRASET(r0, 0x1262, &(0x7f0000000040)=0x2000000009)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000240)=ANY=[@ANYBLOB="06e2a9565db93babb2b00c886d763943ac9493711fa6ce455d973b1c4b8d9c75b439766fd5e2e8c5468373a557910d196892fe9ed699636838990cfe1fd216a21362bff5d855fe6b5ad0c3e7a4a64516db6cf87e27e6f81214184d50de6189b63e7f"], 0x0)

30.145230926s ago: executing program 0 (id=61):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) (rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38)
sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x0, 0x51, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @empty}}}})
r4 = socket$inet(0x2, 0x3, 0x6) (async)
fadvise64(0xffffffffffffffff, 0x7f, 0x8dff, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 32)
chdir(&(0x7f00000001c0)='./bus\x00')
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000300)=@filename='./file0/file0\x00', 0x0, 0x0) (async, rerun: 32)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0xb0, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x5f, 0x0, 0xf9, 0x2f, 0x0, @local, @empty}}}}) (async)
writev(r2, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

30.103929497s ago: executing program 0 (id=62):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x100001, 0xfffffffffffffe9c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$unix(0x1, 0x3, 0x0)
close(r2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r5, 0x0, r3}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x40, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x20000880}, 0x41)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007340), 0x0, 0x800)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="dc7b7e224f2a6256cf47edac233c6bae3cb629260b207ffcc2678da4d6719774c773a4fb37cc989858554e2f45186a578a552d4c18386860a93593b3974145766a19f7b298ea657af753", 0x4a}], 0x1, 0x0, 0x0, 0x11000000}, 0x44819)
modify_ldt$write(0x1, &(0x7f0000000180)={0x94, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540))
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000380)=0x8, 0x4)
sendmmsg$inet6(r7, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60080004)
recvmmsg(r7, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000039c0)=""/93, 0x5d}, 0x4}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x40002142, 0x0)
ptrace$cont(0x20, r6, 0x0, 0x0)

30.025948039s ago: executing program 0 (id=63):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = gettid()
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x77359400})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000200)=0x3)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
listen(r4, 0x0)
mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x8d03000)
capget(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000000)={0x0, 0x0, 0x7, 0xc9, 0x0, 0x10001})
accept4(r4, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xb7)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x26)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x92ac, 0x5})

29.950668701s ago: executing program 32 (id=63):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = gettid()
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x77359400})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000200)=0x3)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
listen(r4, 0x0)
mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x8d03000)
capget(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000000)={0x0, 0x0, 0x7, 0xc9, 0x0, 0x10001})
accept4(r4, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xb7)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x26)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x92ac, 0x5})

21.099510319s ago: executing program 4 (id=167):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup3(r2, r1, 0x80000)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000013740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20008054)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_cmd={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x404, 0x1, 0x0, 0x0, 0x0, 0x3fffffc, [0x0, 0x10001]}})
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x24, 0x0, &(0x7f0000000740))
ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000000)={0x1, 0x2, 0xc, 0x5c1, 0x1c8, 0x4})
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

19.869682669s ago: executing program 4 (id=185):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000000c0)="f610f5b33c962b62c00d0914345792dd23a78cdac1300e5e167ce3c540e94f06530dc539e8c1d98289a14446bb8d486f0060cb76b4abc705083f72adeea32830e92b6c89e7b929ff", 0x0, 0x48)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1})
sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x1000000}}, 0x10, 0x0}, 0x0)

19.830719001s ago: executing program 4 (id=186):
eventfd2(0x50, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
pipe2$9p(&(0x7f0000001240), 0x80000)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0xf00}], 0x1, 0x0)

19.818565211s ago: executing program 4 (id=187):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040))
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)

19.780656352s ago: executing program 4 (id=189):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000280)='./file0/../file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001e00)={0x10, 0x1d, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000008d80)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20, 0x24000001}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x77)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10)
dup3(r6, r5, 0x80000)
finit_module(r6, 0x0, 0x1)
ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r6, 0x54a6)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast})
write$tun(r2, &(0x7f0000000140)={@val={0x0, 0xa76b46610d92c08d}, @void, @arp=@generic={0xf, 0x8917, 0x6, 0xf, 0x2, @broadcast, "af72a19ba857ad9a59cdc9bee26e2b", @local, "f2c487d1955727958e480dc1f9472765"}}, 0x37)

19.770032312s ago: executing program 4 (id=192):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x3, 0x80, "957d8014", "6fd43bee"}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x3, 0x80, "957d8014", "6fd43bee"}}, 0x0}, 0x0) (async)

14.60373469s ago: executing program 1 (id=258):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x101102, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='[--.\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x1}, 0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c)
r3 = creat(&(0x7f0000000200)='./file1\x00', 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2080)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
r9 = syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x4000, 0x0, 0x2de, 0x0, r8}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0))
syz_ublk_setup_queues(r8, r6, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff, 0x0, r9}}], 0x1, 0x0, 0x0)
close(r3)
accept4(r3, &(0x7f0000000240)=@qipcrtr, &(0x7f00000002c0)=0x80, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(r3, 0x2103)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='[--.\x00')
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')

14.407197865s ago: executing program 1 (id=259):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0)
pselect6(0x40, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x3, 0x693, 0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xa)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000013c0)={0x4, 0x7, 0xfffd, 0x7f, 0x14, "40999f49f937a4fd"})
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180))
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000000)='dummy_udc.0\n', 0xc)
ioctl$KDMKTONE(r2, 0x4b30, 0xc0a3)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffffffe)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

13.497752687s ago: executing program 1 (id=269):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x89a000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x89a000, 0x0, 0x0, 0x0, 0x0, 0x0)

13.487852007s ago: executing program 1 (id=272):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x4210, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000001e002100000000000000000007000008"], 0x20}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x2, 'syzkaller0\x00', {0x9}, 0x104})
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="510f02"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000040)={0x20, 0x15, 0x71, "a522ef5f091387901dd4c4a964f14786b84bd40393b3a953e58751c1f8f5e41478d7145c73d2a54aac04a9a80d71eeb7420fc37d616fd5b724d38b12a333d2b7beb5d2631b8d955e611936451e892149f2fa2b0b60dfa25cce9dbb986f12601cf6800dadb2a714305d78ae580000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x1003008, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x0, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r3, 0x8004af7a, &(0x7f00000003c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
syz_usb_control_io$uac1(r2, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x0, 0xa, 0x66, {0x66, 0xb, "a1c82cce59a23d778b996eedad9196eaec2eb44a32421a0dd371b60782db3ae432f2b5cf85cfd5d2086c1ff30cf4ed8f9c214d0235189e25e6f24d6c7fa2595f3d7f0ef84a73aa1b046599b58392220c55d9e9bb9fb5b3342ca641bed60b1b01878be63f"}}, &(0x7f0000000480)={0x0, 0x3, 0xed, @string={0xed, 0x3, "f94c05fd31849b744e38135346012be4386823f25a086c6b2e6e7b6ccfded0810a97ba4af876571f9a29cd19a61cab2bbe608a51ddd570a46f71b8392418971850fc73537fea832ca67da5f61523b395bae90053deea85e6da6dbab2a0fe75e0fbebd9bc1eab6c7ab458669a8b1171c92573f07905cc39f0a77fc3cc1e762af8c8ece7a2df1a98f8f24fce9140a76c89f592b182d1ab13ba6d8730073fb38fa092937d59cc0027b133bf884e568cacb222359852f7f9751050d36b3edaf85c5f6d2d255e0e693cad633506654f68e6de1300036422cad52879452dd4f1fc901e65fb260890eadf4a90b7d4"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x12, 0x59, "b0273cb7f0959d383aa657711c5224adaeab074a51b14b12882fe9329ae9c2524373c5a5c5d64de4c4ae2d68e8768dd89f5442e24cd54a4170787f18e0017cf7b6d757959b959809704659f2bb0d7fafe41291af36ccf9e43c"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x81, 0x2, "45d5"}, &(0x7f0000000780)={0x20, 0x82, 0x1, 'P'}, &(0x7f00000007c0)={0x20, 0x83, 0x2, "f369"}, &(0x7f0000000800)={0x20, 0x84, 0x3, "b62ff8"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "3fe34f"}})
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
read$FUSE(r3, 0x0, 0x0)

10.705789026s ago: executing program 1 (id=300):
eventfd2(0x50, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
pipe2$9p(&(0x7f0000001240), 0x80000)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0x2000000}], 0x1, 0x0)

10.609029888s ago: executing program 1 (id=304):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1, 0xfffffff6, 0x9)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x7) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000002900)=0x759c, 0x64)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000019c0)=0x2, 0x4) (async)
connect$inet(r2, &(0x7f0000001a00)={0x2, 0x4e23, @remote}, 0x10)

10.496407661s ago: executing program 33 (id=304):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1, 0xfffffff6, 0x9)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x7) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000002900)=0x759c, 0x64)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000019c0)=0x2, 0x4) (async)
connect$inet(r2, &(0x7f0000001a00)={0x2, 0x4e23, @remote}, 0x10)

9.214699963s ago: executing program 5 (id=331):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1f3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) (async)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000240)='(-&\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0)
read(r1, &(0x7f0000000300)=""/100, 0x64)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
dup(r6) (async)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

8.13664263s ago: executing program 5 (id=337):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3169e45", 0x4, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@chain)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = gettid()
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000440)=ANY=[], 0x2e)
r5 = socket$netlink(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4)
quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="39000000130010bc68fe0700ea9f00480200100000000004002b000a000100f6ffffff7108f989fd04640400"/54, 0x36}], 0x1)
getrandom(&(0x7f0000000340)=""/70, 0x57, 0x3)

8.07739154s ago: executing program 5 (id=339):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

6.617720587s ago: executing program 5 (id=355):
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x1, 0x80800)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000001200)=""/4096, 0xffffffffffffffbf}, {&(0x7f0000001180)=""/14, 0x1d}], 0x3, 0xffffffff, 0x266)
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[], 0x0) (async)
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
setresgid(0xee00, 0xee01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20, 0x4000}}], 0x1, 0x14040804)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32})
recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

4.767640023s ago: executing program 34 (id=192):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x3, 0x80, "957d8014", "6fd43bee"}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x3, 0x80, "957d8014", "6fd43bee"}}, 0x0}, 0x0) (async)

3.589207061s ago: executing program 5 (id=383):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c200)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x50480240, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x40, 0x2}}, 0x50)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x0)
read$msr(r3, &(0x7f0000000280)=""/175, 0xaf)
syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6a07000000d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fff0f6e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9cccbde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f05b3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x800000000000000, 0x0, 0x400, 0x0, {0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1, r2, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000206d042dc200000000000109022400010000a0080904a20002f99897240009210800020122280009058103ff0308c100e20676fb7243e5b9b5bc160b418b74b478ef039323d88d782df24563e163fec01b1672fc1117cdc8dd19f23c48b5124f21ccb93ef63c2084399b7d8bf9eb0c9f71ddded6a2e7242ca35996adfffbf6ab3616f723588a57114d4cd86f2e4824d8bd32640ddcc2f4f8b5fb1e53de26590d51ef9e48ea98c2ba1a320310a6300304ce0b177379e0c700b929"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0009280000002810826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e7c1acce2a529736"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.851773484s ago: executing program 2 (id=402):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r6=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
timer_create(0x8, 0x0, &(0x7f0000000000))
unshare(0x60000600)
syz_ublk_setup_queues(r1, r6, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0)

1.644535339s ago: executing program 2 (id=407):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])

1.557280321s ago: executing program 3 (id=409):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000080)='\x00', 0x2400, &(0x7f00000000c0)={@_ha_fsid={[0x54ff, 0x3]}, {0x2, 0xf0, 0x2, 0xa}}, 0x1000, &(0x7f0000000100), &(0x7f0000000140)=0x7f})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x40}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}]}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3983}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4b}]}, 0x80}}, 0x40080) (async)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1023, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x20cdbbb887e2f7bc, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0x817}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xbb, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x0, 0x10, 0x0, 0xff, 0x5}, 0x16, &(0x7f0000000440)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0xb, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8b, 0x4, 0xe}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x52, &(0x7f0000000500)=@string={0x52, 0x3, "edaf3ae3c88bc9c5a1716bc35b2bc89fc27da02ccb95679c2066e7196d11e6545e0385141ccf01fa654082ed87d0c936e29993f373d34414565d026d4ed0ba1fb11252ceffc3fe7b541795b535bd6da4"}}]})
r3 = syz_usb_connect$cdc_ecm(0x1, 0x91, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x6, 0xb0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "484d9e70501e"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x9, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x62, 0x7, [0xff]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x8, 0x1, [0x1, 0x0, 0xffff]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xff, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x8001}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0xc9, 0x78}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x10, 0x1}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x32, 0x0, 0xe2, 0xff, 0x91}, 0xac, &(0x7f00000006c0)={0x5, 0xf, 0xac, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x2, 0x9}, @generic={0x96, 0x10, 0xa, "7b86ec700b355914d9a7ed8d89f35c1fa8969e5658b9cf3f6eead2094115aae2b9b959d708fe0bf3363a0fe3d2bc327232d3bac19525d8d2907713bf93cc6eafc12e6e88310f495c0406b4993098f091f8386020f75466c037704651ff90818d7e16a35a90f0d8828226a6134bc9bde70efbdfb0e67cac1c3a68c64a40657a79abc14229e3dfc27f06fd25e6ce487f283c4c1c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x30, 0xc, 0x4}]}, 0x5, [{0xb2, &(0x7f0000000780)=@string={0xb2, 0x3, "c6d1d90156dc376b3392bb36573632528a948232e6345679effcf797f5fdaa94300effe28a3c6107e879910cea56644358e03878a8dc619781e1e0e8aadc0e37a8c209428afb0f36eb5d3164fcc566aed2e7361579a6c5e2c2366ffabfb5208bb71747f5be47a9a56e7277966255d30ee7d424208f76e58a4264089db09941ff52f6b0a08e1230b042745039d4ee6b2bf46d7fdef1eb318f213208b3693d410d96fcb82225a16c98b501a532b832b2f0"}}, {0xb9, &(0x7f0000000840)=@string={0xb9, 0x3, "a21e269b1eca1e5fb56cc886910e7549d39a6eb2a0183cf29830f6849a9f904cf9032be3af960cb88c08c326a095626a7bafaa885cf932ea9f5e4028de16c26f9c1400a8c5c24432376dbe7557fb9ea8295e695bed5e02abf4c25aabc5fc6ffc26e561708ec34dcaea29f03ee4a73a6acf9ef9d94ee1329e8ab03f0d42c529c30633393068f71b341b04e21d486a62b7426d7d29208426452ec5b39869e6bdf6e4b0ee4c63d20738b695ffb4d675bc9f1a223ef0d5cbde"}}, {0x8e, &(0x7f0000000900)=@string={0x8e, 0x3, "f0695d37d780e953b2d10535043c4884045138e26579263d5f797d10c8db1bef286fc45b66f908cd8aa113a51d7fcf7381165c6df115d40ba71e79be9e9756e73dea45ac18fe8c414ca0fc8a7101f25f4fdb8d50cc4d00e05478a2275ec160fec1a0f24706050da0865ad9d117710287fbae5e231967b2ed111e1e3dc7d564c82c552e92026b41a2c0bc1929"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x2401}}]}) (async)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000ac0)=[{{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x1}, {0x2}}, {{0x3}, {0x0, 0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x40) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xfc, r2, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xbe30}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd8, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc8, 0x2, "add6597e224908d83fd68c6a800c3e121fd0be18068ea604ed17bc52d07e5c94eede6602f117844c3cc774bd95fe8184d22304654c470cb6e7856347915f2ab42f036f8426f3d6bca94bc6fa93ce8cdd6ce2457ee54dce8dba048af9a757e1070d38ec052693a2e9582242584ee6918120406965d6181ba5202792c8f1a7657a962cc27b504e9e36009fbb307775fb0097e0488192d5b6254bc3f05968956564c2110583a1e018846d5ff64c4588dad9a16688403de7e19116dec891c804de9cf1423386"}}, {0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0xfc}}, 0x8000)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000cc0)=[{{0x6, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x2, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x30) (async)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000d00)) (async)
write$9p(r1, &(0x7f0000000d40)="9a26862cabfdd7ecbe64cf1feec621474577aceea693dc28a6b2e719ac98c7c624e2c3cce0233f5da9c4f4d66e46fbf8d3627b2fb20263e09e4c5557f394f0f7c254e1f38a8927fb09a1a4831d2b2089e9154d7d97c3efc8b4bf8dea2ae40c875003e76b29821a7747745f8e645b5b5567eb26836a24accd7c400c8a92d52556015240f2d0e4c00d78e645518a00367746bc78afcf65110f42583d474e5f4de0e0da13d1e2634b7d49ad5abdf003208e093ae22c4efae2aced46511b965b5d9aa5ff6b6776cfbb17d6f4be61a74201d29afc", 0xd2)
syz_usb_connect$cdc_ncm(0x6, 0x85, &(0x7f0000000e40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x3, 0xd0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "2c47d82135c3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0xfff, 0x7f}, {0x6, 0x24, 0x1a, 0x8, 0x4}, [@acm={0x4, 0x24, 0x2, 0x6}, @obex={0x5, 0x24, 0x15, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe3, 0x10, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x47, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xe8, 0xe6, 0xa6}}}}}}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0xa6, 0x7, 0x3, 0xff, 0x3}, 0x42, &(0x7f0000000f40)={0x5, 0xf, 0x42, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xeb, "138313600f8a0c5fa7faed741a227103"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x3, 0x200}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "c650ace3e832d473ba44bf71cc199615"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x5, 0x80, 0x7, 0x7}]}, 0x5, [{0x75, &(0x7f0000000fc0)=@string={0x75, 0x3, "05bf3dfec8ea9a662d867100b21103b09b0798b4ea67e71c1e5ceb4f8c40b4f6011ea98b2182a08d1ab8bebe815653fc7a6a1a70f9769c2a07f8aa5d5c9d22858023dea0ec0d3ea99222411c2b540d48eb49eb4db60c2c09f56a001adf3bce7df915ce667c109524e52537545a97ab0ca3356c"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x5250}}, {0x25, &(0x7f0000001080)=@string={0x25, 0x3, "b9f14c690b3d6d2da09248a7d70d87dd5d11030553f7211c03f3a4f984eeaa91692d7c"}}, {0xc8, &(0x7f00000010c0)=@string={0xc8, 0x3, "6aa172e8923d44215ca835782517aae630c28141ffe28e5e7be913f6c22b6218b397fefe7f8e320e60442ad842e9522dc5c8de0aef9984a6e65358e0354844da013c576fae12b3ffb9f1fbeb816813bca020c308da64142d973320a6090fb07a93f34add4b8b6b9abd4352984809e1323f0952e2c602816d528c0569db6c67c00127f7c8749ec8d523a63638ac4511a01a6b564636eac070b7be3c9229784b03f164c239f22a81190a59ddd2e2c7582642f9807a9f6e35afb7bf7b865f6347a55b2ef4dd8446"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x29}}]}) (async)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000001280)) (async)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000012c0)={{0x1, 0xffffffff, 0xb653, 0x5, 0x0, 0x9}, 0xb7, [0xfffffffd, 0x87e4, 0x2, 0x5, 0x6, 0x6, 0x101, 0x7, 0x10, 0x400, 0x6, 0xfffffff9, 0x0, 0x2b, 0x4, 0x6d7, 0x3, 0x9, 0x4, 0x4, 0x13, 0x3, 0x2, 0x5, 0x3, 0x7, 0x9, 0xffff, 0x9, 0x2, 0x3521, 0x3, 0x8, 0x5, 0x5abc, 0x3, 0x80, 0x9, 0x2, 0x8, 0x6, 0x8001, 0x4, 0x80000000, 0x5, 0x0, 0x8, 0x8001, 0x9, 0x2, 0xcd81, 0x8, 0x3be, 0x101, 0xb, 0x1, 0x6, 0xb10, 0x9, 0x8, 0xc56a8000, 0xe, 0x7, 0x4f, 0x5, 0x2, 0x7e6a4097, 0x9, 0x5, 0x5, 0x9, 0x2, 0x9eb, 0xea72, 0x3, 0x401, 0x4, 0x3, 0xa, 0x9ec, 0x2, 0x6, 0x7, 0x4, 0x6, 0xac4, 0x1, 0x5d4, 0x2, 0xd5a, 0xe5, 0x5, 0x8, 0x7627, 0xff, 0x8, 0x3600, 0x10000, 0x1, 0x6, 0x0, 0x7, 0x9, 0x101, 0x7, 0xffff0000, 0x9, 0xc, 0x0, 0x0, 0x3, 0x6, 0x5, 0x6, 0x2, 0x3ff, 0x2, 0x5, 0x5, 0x7, 0x3ff, 0x40, 0x200, 0x4, 0x5, 0x3, 0x7, 0x1000, 0x1, 0x6, 0x1, 0x5, 0x3, 0x2, 0x3, 0x6e5c0c, 0x771, 0x7, 0x9, 0x3, 0x9, 0x1, 0x1000, 0xfffffffa, 0x5, 0x2, 0x5c, 0x3, 0xfffeffff, 0x9, 0x1, 0x9, 0x5, 0x9, 0x5, 0xdb76, 0xffffff85, 0x4c57, 0x7, 0x8000, 0x65d, 0x7, 0xa, 0x101, 0xf, 0xa, 0x5, 0x8, 0x8, 0x9, 0x8, 0xfffffffa, 0xff, 0x2, 0x868, 0xd7, 0x3, 0xfffffff8, 0xfffffffb, 0x9, 0x4, 0x10001, 0x1, 0x501, 0xd16, 0x7, 0x6, 0x36b45251, 0x3, 0x6, 0x9, 0x80000000, 0x9, 0x2, 0x510f, 0x6, 0x8, 0x7, 0x12000, 0xd, 0x8000, 0x5, 0x81, 0x6, 0xfffffffc, 0x9, 0x9, 0xffffffff, 0x8, 0x9, 0x9, 0xffffffff, 0x4, 0x8, 0x4, 0x1, 0x0, 0x6, 0x2, 0x8, 0x532, 0xd2bb, 0x2ff2, 0x6, 0x3ff, 0x8, 0x514, 0x1, 0x3, 0x2949, 0x3, 0xfeaf, 0x7, 0x9, 0xfffff45a, 0x6, 0x8, 0x5, 0x0, 0xedaa, 0x3, 0x24, 0x1, 0x8, 0x4, 0x645e, 0x8, 0x2, 0x9, 0x1, 0x4, 0x262, 0x7f, 0xe, 0xa0000, 0x6, 0x0, 0x0, 0x89, 0x10000000, 0x82f6, 0x4a6, 0x5, 0x3, 0x9, 0xcf, 0x1, 0x3465, 0x4b8, 0x5, 0x6, 0x0, 0x0, 0xae, 0x80000000, 0x8535, 0x1, 0x0, 0x4, 0x0, 0x75, 0x7, 0x10001, 0xa383, 0xa, 0x9, 0x1, 0x9, 0x8b73, 0xfffffffc, 0x400, 0x401, 0x7, 0xf, 0x1, 0x1, 0x6, 0x4, 0x4, 0x7ff, 0x7f, 0x80000001, 0x7, 0x8, 0x2, 0x200, 0x7, 0x1, 0x1, 0x4, 0x2, 0xc, 0x4, 0x2, 0x100, 0xdc, 0x9, 0x5, 0xd, 0xffffffff, 0x70000000, 0x6, 0x8, 0x4, 0x4, 0x4, 0x0, 0xfffffffa, 0x0, 0x8000, 0x1, 0xd3b, 0x25eb, 0x5, 0x3d, 0x3, 0x7, 0x7fffffff, 0x4, 0x4, 0x4, 0x1, 0x0, 0x3, 0x8, 0x2, 0x4, 0x0, 0x2, 0x9, 0x6348, 0x2, 0x131, 0x80, 0x7, 0x2, 0x7, 0x9, 0x4, 0x9, 0x7f, 0x0, 0x0, 0x81, 0x4, 0x8000, 0xfffffff7, 0x400, 0x0, 0x4, 0x9, 0x457, 0x6, 0x2c, 0x401, 0xfffffffd, 0xfffffffb, 0x3b, 0x40, 0x2, 0x7, 0x1000, 0x9, 0x10, 0x1, 0x8, 0xe0000000, 0x7fffffff, 0x6, 0x8c5, 0xe5, 0x2, 0x6, 0x10000, 0xcc00, 0x0, 0xef, 0x7f, 0x6, 0x4, 0x3, 0x0, 0xa, 0x8, 0xffffffff, 0x8, 0x8, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x7, 0x4, 0x2, 0x142e, 0x7ff, 0x1fbd, 0x1, 0xfffffffc, 0x14f25a9f, 0x6a, 0x4, 0x2, 0x9, 0x401, 0x8000, 0xe03, 0x8ce, 0x7, 0x9, 0x4, 0x7de, 0x6cd, 0xb8, 0x3, 0x8, 0x10, 0x3ff, 0x350, 0x8001, 0x8000, 0x5b, 0xffffd52b, 0x9, 0x2, 0x7fff, 0x80000001, 0x10001, 0x1, 0x23b0, 0x7, 0x7fffffff, 0x9, 0x6, 0x8186, 0xd, 0x5a, 0x6, 0x9, 0x8, 0x15, 0x4, 0x4, 0x1, 0x80000001, 0x3, 0x8, 0x2, 0xffff, 0x6, 0x10000, 0x4, 0x1, 0x80000001, 0x5, 0x1, 0x7581305b, 0x5, 0x2, 0x6, 0x0, 0xfff, 0x4, 0x8001, 0xa74, 0x4, 0x5, 0x14a, 0x5, 0x2, 0x0, 0x6, 0x4, 0x0, 0x8, 0xf, 0x826c, 0xfffffffd, 0x7b4bd241, 0x77cec2fa, 0x3, 0x5, 0x7, 0x2, 0x0, 0xfffffffc, 0x7, 0x2, 0x30e, 0x39aa, 0xb33, 0xd, 0x9, 0x240, 0x2, 0x1ff, 0xcd, 0x7, 0xc6, 0xff, 0x7, 0x100, 0x6, 0xea, 0x6b9, 0x9c11, 0x2, 0x10, 0xd, 0x5, 0x7d7, 0x400, 0x4, 0x2, 0x80000001, 0x0, 0x1, 0x2, 0x0, 0xffffffff, 0xfff, 0x101, 0xae, 0x100, 0x808, 0x0, 0x7, 0x10000, 0x2, 0xfffffff8, 0x2000000, 0x3, 0xc, 0x9, 0x8000, 0x5d, 0x7ff, 0xfffffffd, 0xc, 0x5, 0x1, 0xfffffde6, 0x8, 0xd, 0x9, 0x1, 0x6b173786, 0x401, 0x7, 0x57, 0xa36, 0x2d55, 0x10, 0xc102, 0xffffffff, 0x0, 0x4, 0x0, 0x9, 0x1000, 0x80000001, 0x7, 0x8, 0x2, 0xc, 0xffffffff, 0x5, 0x0, 0x5, 0x38, 0xe9, 0x80000001, 0x4, 0x3, 0x1, 0x1, 0xc5f0, 0x6, 0x9, 0xffffff26, 0x9, 0x80000001, 0x8, 0xe, 0x0, 0x61, 0x5, 0x290, 0xfffffffc, 0x4, 0x8, 0x0, 0x42b, 0x5, 0x3f01, 0x400, 0x3, 0xa9, 0xfffffff8, 0x3d, 0x4, 0x9, 0x3, 0x3, 0x3, 0xe8, 0x1000, 0x6, 0x250, 0x9, 0x1b7d, 0x2, 0xd1, 0xfffffffd, 0x80000000, 0xffffffff, 0xbdcc, 0x10, 0xc08f, 0x1ff, 0x2, 0x2, 0x1c00000, 0x64, 0xffff3f69, 0x1, 0x0, 0xe0, 0x1000, 0x1, 0x6, 0x3ff, 0x200, 0x800, 0x470a, 0x4, 0x3ff, 0x5f07, 0x1, 0x3, 0x7, 0x8, 0x0, 0x5, 0xd76, 0x9, 0x27, 0x5a, 0x4, 0x10, 0x7fff, 0xd, 0x1, 0x401, 0x0, 0x8, 0x3, 0x785, 0x9, 0x41, 0x3, 0x0, 0x8, 0xf94, 0x3, 0x9740, 0x5, 0x7, 0x7ff, 0x3, 0x4000, 0xfff, 0x4, 0x4, 0xc, 0x7, 0x3, 0x7, 0x5, 0x1, 0x9, 0x5, 0x100, 0x5c7b, 0x4, 0x8000, 0x7e5, 0x5, 0x80, 0x7, 0x4, 0x8001, 0xfffeffff, 0x6, 0x1, 0x6, 0x4, 0x4, 0x800, 0x837, 0x0, 0xa, 0xffffff13, 0x3, 0x1, 0x3, 0x5, 0x80000001, 0xbf, 0x100, 0x5, 0x2, 0x2, 0x1, 0x0, 0x81, 0xfc83ce4, 0x2, 0x4, 0x5, 0x5, 0x3, 0x0, 0x75, 0x0, 0x0, 0x3, 0x0, 0x3, 0x1, 0x7, 0x9d6, 0xe4, 0x2, 0x1, 0x7c6f, 0x5, 0xff, 0x7, 0x10001, 0x2, 0x31c00, 0x100, 0x5, 0x4fd, 0x2, 0x0, 0x1, 0x8001, 0x9, 0xffff, 0x6, 0x7ff, 0x0, 0x4, 0x9, 0x5, 0x1ff, 0x0, 0x0, 0x2, 0x9, 0x36e5e2fe, 0x5, 0x26, 0x5, 0xc7, 0x0, 0x10000, 0x80000000, 0x6440, 0x3, 0x9b, 0x4, 0x800, 0x3, 0x6, 0x7fff, 0x0, 0x2e7f, 0x3, 0x2, 0xfbc3, 0xa, 0x6, 0x7ff, 0xb7, 0xffffff31, 0x7cf, 0x10000, 0x3ff, 0x0, 0x8, 0xdcb, 0xfffffff8, 0xb, 0x101, 0x9, 0x468, 0x1800000, 0x7fff, 0x2, 0x5, 0x66b189eb, 0xb, 0x6, 0xc, 0x4, 0x0, 0x0, 0x3b4f, 0x6, 0x2, 0x80000000, 0x6, 0x6, 0x100, 0x9, 0xe5d, 0x10, 0x100, 0x4631, 0x4, 0x14000, 0x4, 0x1, 0x80000001, 0xfff, 0x3, 0xbb, 0x8, 0x7, 0x1, 0x9, 0x2, 0x8db, 0x7f, 0x0, 0x0, 0x3, 0x3, 0x8, 0x3, 0x9, 0x1, 0x7, 0x7fffffff, 0xdd1ea27, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x9, 0x2, 0xb4, 0xffffffff, 0x7, 0x5, 0x401, 0x81, 0x5, 0xffff, 0x0, 0x4, 0x100, 0x3, 0x5da, 0xfffffffc, 0x2, 0x747, 0xa, 0x8, 0x5, 0x6, 0x8, 0x8, 0x10, 0xfffffffb, 0xfffffc00, 0x1, 0xffff, 0xfffffff9, 0x2, 0x0, 0x7, 0xfffffff8, 0xfffff000, 0x1, 0x7fff, 0x7, 0xcee7, 0x2, 0xb6a, 0x2, 0x2, 0x2, 0x8, 0xff, 0x0, 0x5, 0x3, 0x6, 0x2, 0x569b, 0x8, 0x7fffffff, 0x2, 0xb3, 0xcb, 0xc2b0, 0xfffffffc, 0x81, 0x9, 0x3ff, 0x7, 0x0, 0x4, 0x7, 0x8, 0x8, 0x8001, 0xb3, 0xd881, 0xffffffcf, 0x8, 0x0, 0x1, 0x401, 0x8000, 0x8, 0x170, 0x7, 0x0, 0x46, 0xfffffffc, 0xffff, 0x1ff, 0x5, 0xffff270d, 0x4c2, 0xf5d, 0x4, 0x9, 0x800, 0x1, 0x5, 0xffffffff, 0xa, 0x2, 0x9, 0x4, 0xcfd, 0x40, 0x6, 0x9, 0x400, 0x6, 0x288, 0x8, 0x8001, 0x8, 0x3, 0x4, 0x0, 0x7, 0x9, 0xfffffffd, 0x4, 0x20, 0xffff9790, 0xb, 0x2, 0x9, 0xf0000000, 0xc, 0x5, 0x9, 0x3, 0x1, 0x1911ee76, 0x1, 0xed, 0x8001, 0x3, 0x1, 0x7f, 0x4, 0xfffffff7, 0x81, 0x5, 0x1, 0x2, 0x9, 0x80000001, 0x1, 0x6, 0x5a3dc3c2, 0x0, 0x4, 0x2]})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002300)='./binderfs2/binder1\x00', 0x0, 0x0) (async)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000002340)) (async)
r5 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r6 = fcntl$dupfd(r0, 0x0, r4)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002680)={0x90, 0x0, &(0x7f0000002540)=[@clear_death, @clear_death={0x400c630f, 0x3}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002480)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000002380)=""/219, 0xdb, 0x1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000002500)={0x0, 0x18, 0x40}}, 0x40}, @request_death={0x400c630e, 0x3}, @dead_binder_done], 0x52, 0x0, &(0x7f0000002600)="29cee8932f5146a7f24af425902add2537c9fd9b1828cb315cef43b0ceb23f667c866736e46168effb6c3caf4ffa899300c57e69f15f6be02051d2387b0a595a266cc16fbcf528b0c674f205710f72ce0834"}) (async)
ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) (async)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000026c0))
ioctl$HIDIOCGDEVINFO(r5, 0x801c4803, &(0x7f0000002700)=""/121)
fcntl$dupfd(r1, 0x0, r5) (async)
r7 = syz_open_dev$loop(&(0x7f0000002780), 0x0, 0x220683)
ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x7ce4) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f00000027c0)) (async)
ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000002800)={r5, 0x0, 0x8041, 0x1, 0x9, 0x8, [0x4, 0x3, 0x5, 0x35b, 0x7fffffffffffffff, 0x1]}) (async)
syz_usb_control_io$cdc_ecm(r3, &(0x7f00000029c0)={0x14, &(0x7f0000002880)={0x20, 0x7, 0xe7, {0xe7, 0x22, "e7dbeb6811a27cc89bfd8d264aae143a844f9cbb9103a4407e9a094aa0d4983c9b961b1c88fc30c77f7a23b61c95229ab3e581204485b19fb8ba8bafa16bcf4b5b6662e1f8008e4877b66477a33e03cbea3377b31714be0b905c698e6d415f8a36f885060acbf0a65ed46c7e8b0941437dfcb2ece0aeecd45abf1c7188f217e501db78b8fc16c574dc9760f16b0c6b5951ca710840ac1055b7cf9e7bf2a3e257d3efa230b19fbb0a02f80a8912555a5a4d35357089ec3ec8f9c4841b2191e85ad118f6e1f6b0a0fa39b8f623445139340105cda9e74eed3fa9f40568824f41991c0f63be1b"}}, &(0x7f0000002980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002ac0)={0x1c, &(0x7f0000002a00)={0x0, 0x30, 0x1a, "5b9e5282384b97422337afd8e1d4aac79f857f837dd34288ce76"}, &(0x7f0000002a40)={0x0, 0xa, 0x1, 0x6c}, &(0x7f0000002a80)={0x0, 0x8, 0x1, 0xff}})

1.497782653s ago: executing program 3 (id=410):
timer_create(0x1, &(0x7f0000001340)={0x0, 0x2f, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001380)=<r0=>0x0)
timer_gettime(r0, &(0x7f00000013c0)) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c40), r2)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000800)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x14, 0x111, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (rerun: 64)

1.146559242s ago: executing program 2 (id=411):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
pread64(r2, &(0x7f0000001280)=""/200, 0xc8, 0x17a7)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x20, 0x18, 0x4, "e928cf66"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

841.777939ms ago: executing program 6 (id=412):
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = dup2(r0, r0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000ff08df255900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000000a000000"], 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x1)
write$tun(r1, 0x0, 0x46) (async)
write$tun(r1, 0x0, 0x46)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r2) (async)
close(r2)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getrandom(0xfffffffffffffffd, 0x0, 0x3) (async)
getrandom(0xfffffffffffffffd, 0x0, 0x3)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8090200c}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0100004bbb47f8592bfe66387ab779c03fed1d1fb04864ef78505ef2553dc4c8a157c048e2ad88f18ee9582ec1733c8d1d01dff6e0a14bdea8b1d7599eb4313facc392e98cd37d96eb755f24a0a6ffd8a4fa0cf3463a964a00051a357eaf3bef6f89c4d1c3b135243e39934c15d3427a70dc281b37", @ANYRES16=r4, @ANYBLOB="000125bd7000ffdbdf253f0000000c009900f30000002300000050005e800800050044000000140001009aa6f719070000000900000001000000080005001200000008000300f0437c0d080009007b00000008000500110000000800070055020000080005001e00000024005e8018000100080000000010000006000000f9fffffffcffffff08000200020000003c005e80080003001b000000080006000e0000000800020000000100080006000800000008000700f5030000080003000600000008000700d304000014005e8008000700c6050000080005003200000048005e80080002000010000008000700ec0200001c00010049000000070000000000000e05000000040000000500000008000200c2c7cf1308000700a80300000800030001000000"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}])
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) (async)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x11}, 0xe7, 0x2, 0x1, 0x4, 0xfffb, 0x4}, &(0x7f0000000240)=0x20)

769.781491ms ago: executing program 6 (id=413):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00')
getdents64(r3, &(0x7f00000046c0)=""/4096, 0x1000)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000003c0)="808300100000efc744240007000000c7442402ef1e0000c7442406000000000f011c24b8010000000f01c1670fc76a0066ba4200b80b000000efc40279213f42900fc79d0001c0fe66450f59cd66baf80cb8faf3dd8cef66bafc0cec", 0x5c}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

726.952662ms ago: executing program 6 (id=414):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, <r1=>0x0})
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000340)=r1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf)
socket$inet(0x2, 0x5, 0xffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="74726f6e733d66642c727ccc24df57", @ANYRES32, @ANYBLOB=',wfdno=', @ANYRES64=r1, @ANYBLOB=',version=9p2000,\x00'])
write$P9_RVERSION(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="006bdcff000000ab80677300", @ANYRES16=r3, @ANYRESHEX=0x0], 0x15)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000180)=ANY=[@ANYBLOB="7345265b978290917b5319bc78e81124697a653f25382c00"])
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0xfffd}, 'syz1\x00', 0x401a})
socket$tipc(0x1e, 0x5, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x840, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xb0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d5c, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

690.770713ms ago: executing program 6 (id=415):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x22) (async)
recvmsg$unix(r2, 0x0, 0x22)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000001000/0x1000)=nil) (async)
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000001000/0x1000)=nil)
syz_kvm_add_vcpu$x86(r5, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r6, &(0x7f0000000080)="50347a0ebe3254a157bb401f03", 0x0) (async)
write(r6, &(0x7f0000000080)="50347a0ebe3254a157bb401f03", 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x44, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

621.661975ms ago: executing program 3 (id=416):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00')
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000140)={0x100000, 0x8, 0x80000, {r1}}, 0x20)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r6 = syz_open_pts(r2, 0x200)
r7 = dup3(r6, r2, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xff)
ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000180))
fcntl$getflags(r7, 0x1)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x16)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000ffffac1414aa0000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}}, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x11, r8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
ptrace$pokeuser(0x6, r8, 0x388, 0x7a092814)
ptrace$pokeuser(0x6, r8, 0x358, 0xffffffeffffffffe)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001000000000000000000180000000c000000ff0fecfbffffffff07001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48000)
socket$inet6_tcp(0xa, 0x1, 0x0)

619.198485ms ago: executing program 2 (id=417):
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r0, &(0x7f0000000680)="1c00000021002551071c0165ff00fc0202000000000001000000000c", 0x1c)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
fcntl$dupfd(r2, 0x406, r2)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {}, 0xfffffffa, 0xc0, &(0x7f0000000180)="3e1081729d7cf64c4289e32d0be3574d7d64fcbde2d1acb4c3f749b33d27f3f94897c64eb3276e3f3c249d836efbc41d7d889c8d3f71cbcacf31057e83", 0x3d, 0xfff, 0x8, 0x0, 0x101, 0x1, &(0x7f0000000480)="28d80134f38d0ab10c155b4e99e02d91e07e358f04981de21ee692adde9f2d3d4ee90f1c91dd485ceade6868e7127aad84dd7e6e54357da7b1d5b04e5728289bc2c139b0bab59dbc685136258f4e4a6a11e34f70dfcf5bea6a3e11042789935785395460b4fd05d19cacde69327ca6c57b9613dc5d0341003f32a70ad21f2ddf90097dc769858994cc832088d2c3a5214dea0ab4a8324e940feecf87cc4c6802ed4b5d1c0fbe439633fe2528b360aa43dac335c0b913dddd0dfd218e12b1a7113bedeab5b7ceebc16bd547db8d131d8daf59b7c2d7cc"}) (async)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {}, 0xfffffffa, 0xc0, &(0x7f0000000180)="3e1081729d7cf64c4289e32d0be3574d7d64fcbde2d1acb4c3f749b33d27f3f94897c64eb3276e3f3c249d836efbc41d7d889c8d3f71cbcacf31057e83", 0x3d, 0xfff, 0x8, 0x0, 0x101, 0x1, &(0x7f0000000480)="28d80134f38d0ab10c155b4e99e02d91e07e358f04981de21ee692adde9f2d3d4ee90f1c91dd485ceade6868e7127aad84dd7e6e54357da7b1d5b04e5728289bc2c139b0bab59dbc685136258f4e4a6a11e34f70dfcf5bea6a3e11042789935785395460b4fd05d19cacde69327ca6c57b9613dc5d0341003f32a70ad21f2ddf90097dc769858994cc832088d2c3a5214dea0ab4a8324e940feecf87cc4c6802ed4b5d1c0fbe439633fe2528b360aa43dac335c0b913dddd0dfd218e12b1a7113bedeab5b7ceebc16bd547db8d131d8daf59b7c2d7cc"})
preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000940)=""/4107, 0x100b}], 0x2, 0xfffffffb, 0x7) (async)
preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000940)=""/4107, 0x100b}], 0x2, 0xfffffffb, 0x7)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x2c, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}, @typed={0x4, 0x1}]}, 0x1c}}, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, 0xfffffc1a) (async)
setsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, 0xfffffc1a)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
getpeername$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
ioctl$sock_bt_hci(r8, 0x800448d4, &(0x7f00000002c0)="da237c0f52dc5091168e98554123eab3e34c8b24764130c761eed157a486cfaa232df856ca5234d94aec199593f9c7369dff431e8ab0e97684c256ff266d54aa2b24d0431152631803925102b6de7e5c53e81ba2e4b321a8eeb261296e2744dbdf8e691fe686e64fe651587dba81d5830c6d72ea2cc8e688b7d9d5c2fe0240b26cedc19a80fa93b0ea7eb3de01d621ea4fdd2d01dbfc6ab4f4b2d8d26739f0b5a3")

599.090775ms ago: executing program 3 (id=418):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1fe)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=<r1=>0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@fowner_lt={'fowner<', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'xfrm0\x00'}}, {@uid_gt={'uid>', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/:%'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@euid_lt={'euid<', r1}}, {@fowner_gt={'fowner>', r1}}, {@audit}], 0x2f})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00')
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x4e, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', r6, 0x40, 0x8000, 0xf5, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @loopback}}}})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000803, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72dd, 0x20002, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x80, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x2, 0x14, 0xfffc, 0x0, 0x5, 0x4, 0x0, @empty, @rand_addr=0x64010101}}}})
ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f00000006c0)=[0x5, 0x3, 0x67b5, 0x100, 0x9, 0x5, 0x9, 0x1882909c])
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x11c, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100, 0x108}}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
syz_usb_connect$midi(0x2, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000002082054501400001020301090240000101181004090400000301030006090509022000000405072501033c375309050602ff030600050525080b01072501"], 0x0)
mount$incfs(&(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0), 0x82, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x101080, 0x0)

545.709046ms ago: executing program 5 (id=419):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='dummy_hcd.0\x00', 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000100), 0x10)
sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x33, 0x17, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r4, 0x0, 0x1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

365.717511ms ago: executing program 6 (id=420):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='config/usb_gadget/g1/idVendor\x00', 0x210c02, 0x0)
write(r0, &(0x7f0000000180)='0x0525', 0x6)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
wait4(0x0, 0x0, 0x4, 0x0)
symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbf5, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x48004)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='dummy_udc.0\x00', 0xb)
write(r3, &(0x7f00000003c0)='dummy_udc.1\x00', 0xb)
write(r3, &(0x7f0000000400)='dummy_udc.2\x00', 0xb)
write(r3, &(0x7f0000000440)='dummy_udc.3\x00', 0xb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

224.945654ms ago: executing program 6 (id=421):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$unix(0x1, 0x2, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x977})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b0"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000000)={0x3, 0x100, 0x0, 0x4, 0x41, 0x9})

63.575948ms ago: executing program 2 (id=422):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@multicast, @random="000000ffffff", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010102, {0x5, 0x4, 0x1, 0x31, 0x8, 0x66, 0xfffe, 0x6, 0x2, 0xd92, @remote, @empty=0x7f000000}}}}}}}, 0x42)

1.18329ms ago: executing program 2 (id=423):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
read$msr(r1, &(0x7f0000000280)=""/175, 0xaf)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
r2 = socket$inet(0x2, 0x801, 0x0)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xffffffff, 0x4)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01e723000000ffdbdf251500000024001d8120"], 0x38}}, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xfffffffd})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2)
listen(r0, 0x3)

303.38µs ago: executing program 3 (id=424):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x103802, 0x0)
pwritev(r0, &(0x7f00000022c0)=[{&(0x7f0000000200)='g', 0x1}], 0x1, 0x4, 0x9) (async)
pwritev(r0, &(0x7f00000022c0)=[{&(0x7f0000000200)='g', 0x1}], 0x1, 0x4, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f00000000c0)={0xefb9, 0x3}) (async)
ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f00000000c0)={0xefb9, 0x3})
socket$can_raw(0x1d, 0x3, 0x1) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000200))
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x4, 0x0, [{0x40000000, 0x101, 0xffffffff, 0x5, 0x3}, {0xc0000001, 0x4, 0x6, 0x5, 0xc}, {0x4, 0x72, 0xfffffffe, 0xffff6cd8, 0x3b13}, {0xaf8fe31aa08a21f3, 0x7d3f1e31, 0x9cf, 0x7ff, 0x9}]})

0s ago: executing program 3 (id=425):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x91490000) (async)
r0 = userfaultfd(0x80001) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00')
getdents(r1, &(0x7f00000010c0)=""/4135, 0x1027)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x1db}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f00003ef000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) (async)
syz_usb_connect$uac2(0x3, 0x8e, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x0, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1df, 0x9, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1ff, 0x40, 0xd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x4, 0x8, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x2, 0x6, {0x8, 0x25, 0x1, 0x83, 0x18, 0xff, 0x1e3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x1, 0xea, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x2, 0x9}}}}}}}}]}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts.
[   22.501053][   T36] audit: type=1400 audit(1785200025.740:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.504927][  T286] cgroup: Unknown subsys name 'net'
[   22.523735][   T36] audit: type=1400 audit(1785200025.740:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.551141][   T36] audit: type=1400 audit(1785200025.780:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.551664][  T286] cgroup: Unknown subsys name 'devices'
[   22.676540][  T286] cgroup: Unknown subsys name 'hugetlb'
[   22.682253][  T286] cgroup: Unknown subsys name 'rlimit'
[   22.777402][   T36] audit: type=1400 audit(1785200026.020:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.800690][   T36] audit: type=1400 audit(1785200026.020:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.825541][   T36] audit: type=1400 audit(1785200026.020:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.849610][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.858473][   T36] audit: type=1400 audit(1785200026.100:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.883977][   T36] audit: type=1400 audit(1785200026.100:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.919527][   T36] audit: type=1400 audit(1785200026.160:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.945385][   T36] audit: type=1400 audit(1785200026.160:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.946128][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.871689][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.878891][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.886139][  T296] bridge_slave_0: entered allmulticast mode
[   23.892446][  T296] bridge_slave_0: entered promiscuous mode
[   23.899596][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.906706][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.913908][  T296] bridge_slave_1: entered allmulticast mode
[   23.920335][  T296] bridge_slave_1: entered promiscuous mode
[   23.993383][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.000587][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.007732][  T295] bridge_slave_0: entered allmulticast mode
[   24.014006][  T295] bridge_slave_0: entered promiscuous mode
[   24.023803][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.030894][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.038004][  T295] bridge_slave_1: entered allmulticast mode
[   24.044373][  T295] bridge_slave_1: entered promiscuous mode
[   24.050363][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.057507][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.064630][  T293] bridge_slave_0: entered allmulticast mode
[   24.070846][  T293] bridge_slave_0: entered promiscuous mode
[   24.080073][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.087139][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.094218][  T293] bridge_slave_1: entered allmulticast mode
[   24.100511][  T293] bridge_slave_1: entered promiscuous mode
[   24.106590][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.113647][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.120894][  T294] bridge_slave_0: entered allmulticast mode
[   24.127257][  T294] bridge_slave_0: entered promiscuous mode
[   24.143774][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.150863][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.158137][  T294] bridge_slave_1: entered allmulticast mode
[   24.164504][  T294] bridge_slave_1: entered promiscuous mode
[   24.305754][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.312910][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.320245][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.327359][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.354064][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.361150][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.368477][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.375622][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.405296][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.412362][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.419690][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.426743][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.435083][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.442134][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.449468][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.456518][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.470951][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.478297][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.485937][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.493099][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.500602][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.507805][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.515835][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.522993][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.533890][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.540959][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.555541][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.562593][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.591864][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.598957][  T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.615161][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.622226][  T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.629850][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.636894][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.649955][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.657054][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.688417][  T293] veth0_vlan: entered promiscuous mode
[   24.702348][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.709433][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.728685][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.735761][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.752615][  T293] veth1_macvtap: entered promiscuous mode
[   24.763297][  T296] veth0_vlan: entered promiscuous mode
[   24.790527][  T294] veth0_vlan: entered promiscuous mode
[   24.797930][  T296] veth1_macvtap: entered promiscuous mode
[   24.818423][  T294] veth1_macvtap: entered promiscuous mode
[   24.839888][  T295] veth0_vlan: entered promiscuous mode
[   24.853333][  T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.898939][  T295] veth1_macvtap: entered promiscuous mode
[   24.935709][  T318] TCP: TCP_TX_DELAY enabled
[   25.174256][   T63] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   25.244354][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   25.324294][   T63] usb 2-1: Using ep0 maxpacket: 16
[   25.330836][   T63] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[   25.339288][   T63] usb 2-1: config 0 has no interface number 0
[   25.345806][   T63] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   25.356038][   T63] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   25.367692][   T63] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   25.376982][   T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.385231][   T63] usb 2-1: Product: syz
[   25.389425][   T63] usb 2-1: Manufacturer: syz
[   25.394169][   T63] usb 2-1: SerialNumber: syz
[   25.400366][   T63] usb 2-1: config 0 descriptor??
[   25.405416][    T9] usb 1-1: Using ep0 maxpacket: 32
[   25.410773][  T315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   25.412404][    T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   25.422837][  T315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   25.426797][    T9] usb 1-1: config 0 has no interface number 0
[   25.439545][    T9] usb 1-1: config 0 interface 184 has no altsetting 0
[   25.448231][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   25.457482][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.465576][    T9] usb 1-1: Product: syz
[   25.469766][    T9] usb 1-1: Manufacturer: syz
[   25.474454][    T9] usb 1-1: SerialNumber: syz
[   25.480000][    T9] usb 1-1: config 0 descriptor??
[   25.486422][    T9] smsc75xx v1.0.0
[   25.640266][  T315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   25.647663][  T315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   25.849901][  T339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8'.
[   25.857294][   T63] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   25.963015][  T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.084160][   T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   26.089326][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   26.097419][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   26.254170][   T45] usb 4-1: Using ep0 maxpacket: 16
[   26.260726][   T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   26.272775][   T45] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[   26.282246][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.290467][   T45] usb 4-1: Product: syz
[   26.295044][   T45] usb 4-1: Manufacturer: syz
[   26.299712][   T45] usb 4-1: SerialNumber: syz
[   26.306077][   T45] usb 4-1: config 0 descriptor??
[   26.514142][  T324] usb 4-1: USB disconnect, device number 2
[   26.721095][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[   26.744363][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[   26.753988][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   26.784266][    T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[   26.794232][    T9] usb 1-1: USB disconnect, device number 2
[   27.061920][  T347] netlink: 'syz.3.10': attribute type 46 has an invalid length.
[   27.076698][   T63] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   27.097090][   T63] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   27.116945][   T63] asix 2-1:0.34: probe with driver asix failed with error -71
[   27.135180][   T63] usb 2-1: USB disconnect, device number 2
[   27.475096][  T359] SELinux: ebitmap: map size 2585547753 does not match my size 64 (high bit was 704179291)
[   27.493776][  T368] netlink: 'syz.0.15': attribute type 10 has an invalid length.
[   27.501879][  T359] SELinux: failed to load policy
[   27.509597][   T36] kauditd_printk_skb: 64 callbacks suppressed
[   27.509614][   T36] audit: type=1400 audit(1785200030.750:138): avc:  denied  { write } for  pid=364 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   27.551719][   T36] audit: type=1400 audit(1785200030.750:139): avc:  denied  { setopt } for  pid=364 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   27.631220][   T36] audit: type=1400 audit(1785200030.790:140): avc:  denied  { write } for  pid=367 comm="syz.0.15" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   27.673587][   T36] audit: type=1400 audit(1785200030.840:141): avc:  denied  { create } for  pid=364 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.696391][   T36] audit: type=1400 audit(1785200030.840:142): avc:  denied  { write } for  pid=364 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.718733][   T36] audit: type=1400 audit(1785200030.850:143): avc:  denied  { ioctl } for  pid=364 comm="syz.3.14" path="socket:[4115]" dev="sockfs" ino=4115 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.746265][   T36] audit: type=1400 audit(1785200030.910:144): avc:  denied  { read write } for  pid=369 comm="syz.1.16" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   27.769744][   T36] audit: type=1400 audit(1785200030.910:145): avc:  denied  { open } for  pid=369 comm="syz.1.16" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   27.794404][   T36] audit: type=1400 audit(1785200030.910:146): avc:  denied  { ioctl } for  pid=369 comm="syz.1.16" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   27.819494][   T36] audit: type=1400 audit(1785200030.910:147): avc:  denied  { create } for  pid=364 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   27.924179][  T333] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   27.964178][   T63] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   27.989595][  T383] syzkaller1: entered promiscuous mode
[   27.995229][  T383] syzkaller1: entered allmulticast mode
[   28.075378][  T333] usb 2-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   28.087148][  T333] usb 2-1: config 0 interface 0 altsetting 126 endpoint 0x81 has invalid wMaxPacketSize 0
[   28.097164][   T63] usb 3-1: device descriptor read/64, error -71
[   28.103554][  T333] usb 2-1: config 0 interface 0 has no altsetting 0
[   28.110253][  T333] usb 2-1: New USB device found, idVendor=056a, idProduct=0716, bcdDevice= 0.00
[   28.119396][  T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.128055][  T333] usb 2-1: config 0 descriptor??
[   28.334169][   T63] usb 3-1: device descriptor read/64, error -71
[   28.354170][   T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   28.444180][   T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   28.505306][   T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   28.517232][   T31] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[   28.526360][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.535029][   T31] usb 4-1: Product: syz
[   28.539605][  T333] wacom 0003:056A:0716.0001: unknown main item tag 0x1
[   28.540527][   T31] usb 4-1: Manufacturer: syz
[   28.551319][   T31] usb 4-1: SerialNumber: syz
[   28.551558][  T333] wacom 0003:056A:0716.0001: unknown main item tag 0x5
[   28.563079][   T31] usb 4-1: config 0 descriptor??
[   28.563667][  T333] wacom 0003:056A:0716.0001: unknown main item tag 0x6
[   28.575319][   T63] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   28.584286][  T333] wacom 0003:056A:0716.0001: Unknown device_type for 'HID 056a:0716'. Ignoring.
[   28.594175][   T45] usb 1-1: Using ep0 maxpacket: 32
[   28.600643][   T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   28.608954][   T45] usb 1-1: config 0 has no interface number 0
[   28.615116][   T45] usb 1-1: config 0 interface 184 has no altsetting 0
[   28.623474][   T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   28.632615][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.640649][   T45] usb 1-1: Product: syz
[   28.644863][   T45] usb 1-1: Manufacturer: syz
[   28.649483][   T45] usb 1-1: SerialNumber: syz
[   28.655003][   T45] usb 1-1: config 0 descriptor??
[   28.660907][   T45] smsc75xx v1.0.0
[   28.714539][   T63] usb 3-1: device descriptor read/64, error -71
[   28.748686][   T31] usb 2-1: USB disconnect, device number 3
[   28.770630][  T385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'.
[   28.954188][   T63] usb 3-1: device descriptor read/64, error -71
[   29.062156][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[   29.073070][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[   29.074564][   T63] usb usb3-port1: attempt power cycle
[   29.083284][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   29.098793][   T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61
[   29.296503][  T333] usb 4-1: USB disconnect, device number 3
[   29.324490][  T395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.434313][   T63] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   29.455278][   T63] usb 3-1: device descriptor read/8, error -71
[   29.585457][   T63] usb 3-1: device descriptor read/8, error -71
[   29.594240][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   29.684222][  T333] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   29.744188][    T9] usb 2-1: Using ep0 maxpacket: 8
[   29.750548][    T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[   29.759023][    T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[   29.767781][    T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[   29.776892][    T9] usb 2-1: config 250 has no interface number 0
[   29.783174][    T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   29.794810][    T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   29.805279][    T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   29.816112][    T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   29.826652][   T63] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   29.834343][    T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   29.847935][    T9] usb 2-1: config 250 interface 228 has no altsetting 0
[   29.855022][  T333] usb 4-1: Using ep0 maxpacket: 16
[   29.861374][  T333] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[   29.869684][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   29.878837][  T333] usb 4-1: config 0 has no interface number 0
[   29.885012][    T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   29.893431][  T333] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   29.904490][    T9] usb 2-1: Product: syz
[   29.908729][    T9] usb 2-1: SerialNumber: syz
[   29.913415][   T63] usb 3-1: device descriptor read/8, error -71
[   29.919673][  T333] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   29.933319][    T9] hub 2-1:250.228: bad descriptor, ignoring hub
[   29.939773][    T9] hub 2-1:250.228: probe with driver hub failed with error -5
[   29.947530][  T333] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   29.956761][  T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.964830][  T333] usb 4-1: Product: syz
[   29.969028][  T333] usb 4-1: Manufacturer: syz
[   29.973644][  T333] usb 4-1: SerialNumber: syz
[   29.979858][  T333] usb 4-1: config 0 descriptor??
[   29.985246][  T400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   29.992624][  T400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   30.045310][   T63] usb 3-1: device descriptor read/8, error -71
[   30.133100][    T9] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   30.154690][   T63] usb usb3-port1: unable to enumerate USB device
[   30.200682][  T400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   30.208001][  T400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   30.417039][  T333] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   31.044461][  T402] usb 2-1: reset high-speed USB device number 4 using dummy_hcd
[   31.074183][   T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   31.224162][   T31] usb 3-1: Using ep0 maxpacket: 32
[   31.230579][   T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   31.238746][   T31] usb 3-1: config 0 has no interface number 0
[   31.246376][   T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   31.255685][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.263741][   T31] usb 3-1: Product: syz
[   31.267975][   T31] usb 3-1: Manufacturer: syz
[   31.272618][   T31] usb 3-1: SerialNumber: syz
[   31.278180][   T31] usb 3-1: config 0 descriptor??
[   31.284392][   T31] smsc95xx v2.0.0
[   31.448584][  T402] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71)
[   31.458559][   T45] usb 2-1: USB disconnect, device number 4
[   31.466147][   T45] usblp0: removed
[   31.629779][  T333] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   31.641564][  T333] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   31.651956][  T333] asix 4-1:0.34: probe with driver asix failed with error -71
[   31.660572][  T333] usb 4-1: USB disconnect, device number 4
[   31.685111][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   31.686812][  T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.704251][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   31.714357][  T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.724502][  T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.733016][  T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.740606][  T392] usb 1-1: USB disconnect, device number 3
[   31.744728][  T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.756045][  T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.764140][  T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.777221][  T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.786370][  T418] syzkaller1: entered promiscuous mode
[   31.792043][  T418] syzkaller1: entered allmulticast mode
[   31.799885][  T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.809070][  T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.820484][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   31.831394][   T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[   31.845714][   T31] usb 3-1: USB disconnect, device number 6
[   31.856002][   T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   31.912846][  T431] netlink: 'syz.0.34': attribute type 29 has an invalid length.
[   31.927238][  T431] fuse: Unknown parameter 'group�vid'
[   31.948748][  T434] tipc: Started in network mode
[   31.953638][  T434] tipc: Node identity ac14140f, cluster identity 4711
[   31.964275][  T434] tipc: New replicast peer: 172.30.0.1
[   31.969868][  T434] tipc: Enabled bearer <udp:syz2>, priority 10
[   31.994867][   T45] usb 2-1: device descriptor read/64, error -71
[   32.164173][   T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   32.234189][   T45] usb 2-1: device descriptor read/64, error -71
[   32.254380][  T392] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   32.314162][   T31] usb 3-1: Using ep0 maxpacket: 8
[   32.320740][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[   32.329547][   T31] usb 3-1: config 2 has an invalid interface number: 99 but max is 0
[   32.337690][   T31] usb 3-1: config 2 has no interface number 0
[   32.343798][   T31] usb 3-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E
[   32.355463][   T31] usb 3-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0
[   32.365601][   T31] usb 3-1: config 2 interface 99 has no altsetting 0
[   32.373724][   T31] usb 3-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3
[   32.382817][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.390911][  T442] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   32.398423][  T392] usb 1-1: device descriptor read/64, error -71
[   32.404689][   T31] usb 3-1: Product: syz
[   32.408843][   T31] usb 3-1: Manufacturer: syz
[   32.413432][   T31] usb 3-1: SerialNumber: syz
[   32.494172][   T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   32.564224][  T442] usb 4-1: Using ep0 maxpacket: 32
[   32.570521][  T442] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   32.578769][  T442] usb 4-1: config 0 has no interface number 0
[   32.584928][  T442] usb 4-1: config 0 interface 184 has no altsetting 0
[   32.593172][  T442] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   32.602360][  T442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.610493][  T442] usb 4-1: Product: syz
[   32.614736][  T442] usb 4-1: Manufacturer: syz
[   32.619353][  T442] usb 4-1: SerialNumber: syz
[   32.624154][   T45] usb 2-1: device descriptor read/64, error -71
[   32.629839][  T422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.633389][  T442] usb 4-1: config 0 descriptor??
[   32.645227][  T442] smsc75xx v1.0.0
[   32.647072][  T422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.659346][   T31] usb 3-1: USB disconnect, device number 7
[   32.665318][  T392] usb 1-1: device descriptor read/64, error -71
[   32.864189][   T45] usb 2-1: device descriptor read/64, error -71
[   32.904164][  T392] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   32.974372][   T45] usb usb2-port1: attempt power cycle
[   33.034182][  T392] usb 1-1: device descriptor read/64, error -71
[   33.094210][   T31] tipc: Node number set to 2886997007
[   33.247131][  T442] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   33.258393][  T442] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   33.274303][  T392] usb 1-1: device descriptor read/64, error -71
[   33.292464][  T462] syzkaller1: entered promiscuous mode
[   33.298073][  T462] syzkaller1: entered allmulticast mode
[   33.324218][   T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   33.345571][   T45] usb 2-1: device descriptor read/8, error -71
[   33.394367][  T392] usb usb1-port1: attempt power cycle
[   33.475177][   T45] usb 2-1: device descriptor read/8, error -71
[   33.634178][   T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   33.714208][   T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   33.734221][  T392] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   33.742777][   T45] usb 2-1: device descriptor read/8, error -71
[   33.755126][  T392] usb 1-1: device descriptor read/8, error -71
[   33.785150][   T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[   33.796115][   T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[   33.808690][   T31] usb 3-1: New USB device found, idVendor=0499, idProduct=1053, bcdDevice= 0.40
[   33.817875][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.825907][   T31] usb 3-1: Product: syz
[   33.830094][   T31] usb 3-1: Manufacturer: syz
[   33.834729][   T31] usb 3-1: SerialNumber: syz
[   33.869715][  T442] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[   33.880618][  T442] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[   33.890286][  T442] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   33.899882][  T442] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[   33.909034][   T45] usb 2-1: device descriptor read/8, error -71
[   33.915276][  T392] usb 1-1: device descriptor read/8, error -71
[   33.922329][  T442] usb 4-1: USB disconnect, device number 5
[   34.024388][   T45] usb usb2-port1: unable to enumerate USB device
[   34.045127][   T31] usb 3-1: Can't get UAC3 power state for id 10
[   34.052257][   T31] usb 3-1: BAAD MICROPHONE c_chmask mismatch
[   34.061225][   T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   34.072151][   T31] usb 3-1: USB disconnect, device number 8
[   34.085027][  T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.154252][  T392] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   34.175266][  T392] usb 1-1: device descriptor read/8, error -71
[   34.305209][  T392] usb 1-1: device descriptor read/8, error -71
[   34.388211][   T36] kauditd_printk_skb: 18 callbacks suppressed
[   34.388230][   T36] audit: type=1400 audit(1785200037.630:166): avc:  denied  { create } for  pid=470 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   34.416123][   T36] audit: type=1400 audit(1785200037.660:167): avc:  denied  { create } for  pid=470 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   34.435384][   T36] audit: type=1400 audit(1785200037.660:168): avc:  denied  { ioctl } for  pid=470 comm="syz.3.44" path="socket:[5342]" dev="sockfs" ino=5342 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   34.459768][  T392] usb usb1-port1: unable to enumerate USB device
[   34.486503][   T36] audit: type=1400 audit(1785200037.730:169): avc:  denied  { write } for  pid=472 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   34.562315][   T36] audit: type=1400 audit(1785200037.800:170): avc:  denied  { getopt } for  pid=474 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.592038][  T477] exfat: Deprecated parameter 'debug'
[   34.594568][  T475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'.
[   34.597579][  T477] /dev/nullb0: Can't lookup blockdev
[   34.599876][   T36] audit: type=1400 audit(1785200037.830:171): avc:  denied  { ioctl } for  pid=476 comm="syz.2.46" path="socket:[5417]" dev="sockfs" ino=5417 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.644421][   T36] audit: type=1400 audit(1785200037.830:172): avc:  denied  { wake_alarm } for  pid=474 comm="syz.3.47" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   34.667175][   T36] audit: type=1400 audit(1785200037.830:173): avc:  denied  { nlmsg_read } for  pid=474 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.687607][   T36] audit: type=1400 audit(1785200037.850:174): avc:  denied  { mounton } for  pid=474 comm="syz.3.47" path="/15/file0" dev="incremental-fs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   34.711647][   T36] audit: type=1400 audit(1785200037.850:175): avc:  denied  { unmount } for  pid=474 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   34.834200][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   34.985796][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   34.994395][    T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   35.005451][  T333] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[   35.014990][    T9] usb 3-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40
[   35.024073][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.037538][    T9] usb 3-1: Product: syz
[   35.041746][    T9] usb 3-1: Manufacturer: syz
[   35.046408][    T9] usb 3-1: SerialNumber: syz
[   35.059927][  T486] syzkaller1: entered promiscuous mode
[   35.065501][  T486] syzkaller1: entered allmulticast mode
[   35.154567][  T333] usb 2-1: no configurations
[   35.159198][  T333] usb 2-1: can't read configurations, error -22
[   35.262643][    T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[   35.275829][    T9] usb 3-1: USB disconnect, device number 9
[   35.290747][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   35.306720][  T333] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   35.444215][  T393] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   35.464654][  T333] usb 2-1: no configurations
[   35.469281][  T333] usb 2-1: can't read configurations, error -22
[   35.475765][  T333] usb usb2-port1: attempt power cycle
[   35.574196][  T393] usb 1-1: device descriptor read/64, error -71
[   35.814184][  T393] usb 1-1: device descriptor read/64, error -71
[   35.820517][  T333] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   35.845037][  T333] usb 2-1: no configurations
[   35.849659][  T333] usb 2-1: can't read configurations, error -22
[   35.984232][  T333] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[   36.005040][  T333] usb 2-1: no configurations
[   36.009690][  T333] usb 2-1: can't read configurations, error -22
[   36.016008][   T63] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   36.023782][  T333] usb usb2-port1: unable to enumerate USB device
[   36.064191][  T393] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   36.154198][   T63] usb 3-1: device descriptor read/64, error -71
[   36.194166][  T393] usb 1-1: device descriptor read/64, error -71
[   36.394171][   T63] usb 3-1: device descriptor read/64, error -71
[   36.444203][  T393] usb 1-1: device descriptor read/64, error -71
[   36.554357][  T393] usb usb1-port1: attempt power cycle
[   36.634200][   T63] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   36.764304][   T63] usb 3-1: device descriptor read/64, error -71
[   36.894184][  T393] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   36.915325][  T393] usb 1-1: device descriptor read/8, error -71
[   37.004168][   T63] usb 3-1: device descriptor read/64, error -71
[   37.045284][  T393] usb 1-1: device descriptor read/8, error -71
[   37.114298][   T63] usb usb3-port1: attempt power cycle
[   37.284194][  T393] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   37.305422][  T393] usb 1-1: device descriptor read/8, error -71
[   37.435358][  T393] usb 1-1: device descriptor read/8, error -71
[   37.454197][   T63] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   37.475278][   T63] usb 3-1: device descriptor read/8, error -71
[   37.544310][  T393] usb usb1-port1: unable to enumerate USB device
[   37.605419][   T63] usb 3-1: device descriptor read/8, error -71
[   37.845739][   T63] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   37.857504][  T504] syzkaller1: entered promiscuous mode
[   37.863023][  T504] syzkaller1: entered allmulticast mode
[   37.875186][   T63] usb 3-1: device descriptor read/8, error -71
[   38.005178][   T63] usb 3-1: device descriptor read/8, error -71
[   38.114305][   T63] usb usb3-port1: unable to enumerate USB device
[   38.153224][  T509] =======================================================
[   38.153224][  T509] WARNING: The mand mount option has been deprecated and
[   38.153224][  T509]          and is ignored by this kernel. Remove the mand
[   38.153224][  T509]          option from the mount to silence this warning.
[   38.153224][  T509] =======================================================
[   38.194155][  T393] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   38.285878][   T12] bridge_slave_1: left allmulticast mode
[   38.292157][   T12] bridge_slave_1: left promiscuous mode
[   38.298157][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.306022][   T12] bridge_slave_0: left allmulticast mode
[   38.311789][   T12] bridge_slave_0: left promiscuous mode
[   38.317676][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.355539][  T393] usb 2-1: unable to get BOS descriptor or descriptor too short
[   38.368235][  T393] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   38.379249][  T393] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   38.396047][  T393] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[   38.405242][  T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.413269][  T393] usb 2-1: Product: syz
[   38.419233][  T393] usb 2-1: Manufacturer: syz
[   38.423878][  T393] usb 2-1: SerialNumber: syz
[   38.431016][   T12] tipc: Disabling bearer <udp:syz2>
[   38.437400][   T12] tipc: Left network mode
[   38.444896][   T12] veth1_macvtap: left promiscuous mode
[   38.450464][   T12] veth0_vlan: left promiscuous mode
[   38.569965][  T515] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.577365][  T515] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.584505][  T515] bridge_slave_0: entered allmulticast mode
[   38.590804][  T515] bridge_slave_0: entered promiscuous mode
[   38.597611][  T515] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.604680][  T515] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.611737][  T515] bridge_slave_1: entered allmulticast mode
[   38.619515][  T515] bridge_slave_1: entered promiscuous mode
[   38.671520][  T515] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.678608][  T515] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.685953][  T515] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.692997][  T515] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.718031][  T463] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.725549][  T463] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.735549][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.742656][  T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.751785][  T312] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.758867][  T312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.792423][  T515] veth0_vlan: entered promiscuous mode
[   38.804701][  T515] veth1_macvtap: entered promiscuous mode
[   39.085164][  T548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'.
[   39.134176][  T442] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   39.181695][  T393] usb 2-1: USB disconnect, device number 13
[   39.200568][  T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   39.294949][  T559] netlink: 'syz.1.77': attribute type 12 has an invalid length.
[   39.305847][  T442] usb 3-1: unable to get BOS descriptor or descriptor too short
[   39.316996][  T442] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   39.342597][  T442] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[   39.361727][  T442] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   39.391798][  T442] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[   39.402003][  T442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.410501][  T442] usb 3-1: Product: syz
[   39.416524][  T442] usb 3-1: Manufacturer: syz
[   39.421221][  T442] usb 3-1: SerialNumber: syz
[   39.437648][  T564] syzkaller1: entered promiscuous mode
[   39.443231][  T564] syzkaller1: entered allmulticast mode
[   39.491702][  T581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=581 comm=syz.3.80
[   39.631727][  T442] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   39.642559][  T442] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[   39.656391][  T442] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[   39.666284][  T442] usb 3-1: USB disconnect, device number 14
[   39.680744][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   39.814440][   T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   39.964158][   T31] usb 2-1: Using ep0 maxpacket: 32
[   39.970600][   T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   39.982383][   T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   39.996100][   T31] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[   40.005210][   T31] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[   40.013222][   T31] usb 2-1: Product: syz
[   40.015044][   T36] kauditd_printk_skb: 23 callbacks suppressed
[   40.015078][   T36] audit: type=1400 audit(1785200043.250:199): avc:  denied  { unmount } for  pid=515 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   40.025233][   T31] usb 2-1: config 0 descriptor??
[   40.054498][   T36] audit: type=1400 audit(1785200043.300:200): avc:  denied  { unlink } for  pid=515 comm="syz-executor" name="file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   40.078972][   T36] audit: type=1400 audit(1785200043.320:201): avc:  denied  { write } for  pid=635 comm="syz.4.84" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   40.104005][   T36] audit: type=1400 audit(1785200043.350:202): avc:  denied  { ioctl } for  pid=635 comm="syz.4.84" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   40.150850][   T36] audit: type=1400 audit(1785200043.390:203): avc:  denied  { nlmsg_write } for  pid=637 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   40.191423][   T36] audit: type=1400 audit(1785200043.390:204): avc:  denied  { create } for  pid=637 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   40.266352][  T631] netlink: 'syz.1.82': attribute type 3 has an invalid length.
[   40.274483][  T631] netlink: 944 bytes leftover after parsing attributes in process `syz.1.82'.
[   40.284940][   T36] audit: type=1400 audit(1785200043.530:205): avc:  denied  { bind } for  pid=630 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   40.286077][  T631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'.
[   40.314482][  T645] overlayfs: conflicting options: userxattr,redirect_dir=on
[   40.321914][   T36] audit: type=1400 audit(1785200043.530:206): avc:  denied  { setopt } for  pid=630 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   40.454197][  T393] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   40.472282][  T651] syzkaller1: entered promiscuous mode
[   40.477861][  T651] syzkaller1: entered allmulticast mode
[   40.530071][   T36] audit: type=1400 audit(1785200043.770:207): avc:  denied  { write } for  pid=652 comm="syz.4.91" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   40.560869][  T655] netlink: 'syz.4.92': attribute type 16 has an invalid length.
[   40.568602][  T655] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.92'.
[   40.591694][  T658] netlink: 'syz.4.93': attribute type 5 has an invalid length.
[   40.599434][  T658] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.93'.
[   40.608445][  T393] usb 3-1: Using ep0 maxpacket: 16
[   40.614766][  T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.625740][  T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.626569][   T31] uclogic 0003:5543:0005.0002: No inputs registered, leaving
[   40.635524][  T393] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   40.645744][   T31] uclogic 0003:5543:0005.0002: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0
[   40.655984][  T659] netlink: 'syz.4.93': attribute type 5 has an invalid length.
[   40.675124][   T36] audit: type=1400 audit(1785200043.920:208): avc:  denied  { write } for  pid=656 comm="syz.4.93" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   40.676841][  T393] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   40.699226][  T658] netlink: 180 bytes leftover after parsing attributes in process `syz.4.93'.
[   40.708418][  T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.717197][  T657] netlink: 180 bytes leftover after parsing attributes in process `syz.4.93'.
[   40.734626][  T659] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.93'.
[   40.746638][  T393] usb 3-1: config 0 descriptor??
[   40.795674][  T657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.93'.
[   40.825283][   T31] usb 2-1: USB disconnect, device number 14
[   41.065341][  T442] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   41.099651][  T666] capability: warning: `syz.3.96' uses deprecated v2 capabilities in a way that may be insecure
[   41.207616][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.214282][  T442] usb 5-1: Using ep0 maxpacket: 8
[   41.215320][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.221835][  T442] usb 5-1: unable to get BOS descriptor or descriptor too short
[   41.227464][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.236734][  T442] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[   41.242969][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.257729][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.258091][  T442] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[   41.265011][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.274383][  T442] usb 5-1: config 4 has no interface number 0
[   41.281387][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.289644][  T442] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[   41.294627][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.304304][  T442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.310988][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.319064][  T442] usb 5-1: Product: syz
[   41.326256][  T393] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   41.330312][  T442] usb 5-1: Manufacturer: syz
[   41.342501][  T442] usb 5-1: SerialNumber: syz
[   41.347627][  T393] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input8
[   41.378715][  T393] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   41.444687][  T676] syzkaller1: entered promiscuous mode
[   41.450244][  T676] syzkaller1: entered allmulticast mode
[   41.564434][  T442] usb 5-1: Found UVC 0.02 device syz (04f2:b746)
[   41.574386][  T442] uvcvideo 5-1:4.147: Entity type for entity Output 251 was not initialized!
[   41.583378][  T442] usb 5-1: Failed to create links for entity 251
[   41.590182][  T442] usb 5-1: Failed to register entities (-22).
[   41.599090][  T442] usb 5-1: USB disconnect, device number 2
[   41.659466][  T695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   41.768206][  T702] syzkaller1: entered promiscuous mode
[   41.773738][  T702] syzkaller1: entered allmulticast mode
[   42.084169][  T393] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   42.254163][  T393] usb 2-1: Using ep0 maxpacket: 16
[   42.263013][  T393] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[   42.276067][  T393] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.294165][  T393] usb 2-1: config 0 has no interface number 0
[   42.302063][  T393] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   42.311589][  T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.319613][  T393] usb 2-1: Product: syz
[   42.323842][  T393] usb 2-1: Manufacturer: syz
[   42.328484][  T393] usb 2-1: SerialNumber: syz
[   42.335507][  T393] usb 2-1: config 0 descriptor??
[   42.542416][  T393] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[   42.548950][  T393] usb 2-1: No valid video chain found.
[   42.557415][  T393] usb 2-1: USB disconnect, device number 15
[   42.614371][  T442] usb 3-1: reset high-speed USB device number 15 using dummy_hcd
[   42.704189][  T392] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   42.865257][  T392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.876309][  T392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.886142][  T392] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   42.899095][  T392] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   42.908210][  T392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.917076][  T392] usb 5-1: config 0 descriptor??
[   43.062571][  T727] syzkaller1: entered promiscuous mode
[   43.068155][  T727] syzkaller1: entered allmulticast mode
[   43.238735][  T736] sysfs: Unknown parameter ' T��+l�j�H�d���V�អB�� B'
[   43.279153][  T740] kvm: kvm [739]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800
[   43.288081][  T740] kvm: kvm [739]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800
[   43.325853][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.333352][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.341513][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.348979][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.356440][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.363885][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.371496][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.379199][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.386696][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.394220][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.401635][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.409123][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.416575][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.424072][  T392] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   43.431820][  T392] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   43.440829][  T392] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   43.634165][  T393] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   43.647952][  T748] input: syz1 as /devices/virtual/input/input9
[   43.784206][  T393] usb 2-1: Using ep0 maxpacket: 32
[   43.791969][  T393] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   43.800474][  T393] usb 2-1: config 0 has no interface number 0
[   43.806786][  T393] usb 2-1: config 0 interface 184 has no altsetting 0
[   43.815043][  T393] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   43.824189][  T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.832187][  T393] usb 2-1: Product: syz
[   43.836430][  T393] usb 2-1: Manufacturer: syz
[   43.841054][  T393] usb 2-1: SerialNumber: syz
[   43.846571][  T393] usb 2-1: config 0 descriptor??
[   43.852444][  T393] smsc75xx v1.0.0
[   43.964652][   T45] usb 3-1: USB disconnect, device number 15
[   44.062959][  T744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.110732][  T744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.163895][  T757] overlayfs: failed to resolve './file0/file1': -2
[   44.631864][  T393] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   44.647764][  T393] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[   44.664265][  T393] usb 2-1: USB disconnect, device number 16
[   44.949006][  T781] batadv_slave_1: entered promiscuous mode
[   44.955832][  T780] batadv_slave_1: left promiscuous mode
[   45.084193][  T393] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   45.236608][  T393] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[   45.245733][  T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.253734][  T393] usb 2-1: Product: syz
[   45.257938][  T393] usb 2-1: Manufacturer: syz
[   45.262572][  T393] usb 2-1: SerialNumber: syz
[   45.473211][  T393] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[   45.488683][  T393] usb 2-1: USB disconnect, device number 17
[   45.617743][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   45.617762][   T36] audit: type=1400 audit(1785200048.860:237): avc:  denied  { audit_read } for  pid=791 comm="syz.3.142" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   45.702589][   T36] audit: type=1400 audit(1785200048.940:238): avc:  denied  { getopt } for  pid=803 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   45.704283][   T63] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[   45.874618][   T63] usb 5-1: device firmware changed
[   45.880020][   T45] usb 5-1: USB disconnect, device number 3
[   45.985413][   T36] audit: type=1400 audit(1785200049.230:239): avc:  denied  { mount } for  pid=807 comm="syz.1.148" name="/" dev="ramfs" ino=6577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   46.014218][   T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   46.037250][   T36] audit: type=1400 audit(1785200049.280:240): avc:  denied  { nlmsg_write } for  pid=809 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   46.165449][   T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   46.175653][   T45] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[   46.189902][   T45] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   46.199238][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.207281][   T45] usb 5-1: Product: syz
[   46.211459][   T45] usb 5-1: Manufacturer: syz
[   46.216092][   T45] usb 5-1: SerialNumber: syz
[   46.222900][   T45] usb-storage 5-1:1.0: USB Mass Storage device detected
[   46.230874][   T45] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   46.239626][   T45] scsi host1: usb-storage 5-1:1.0
[   46.324212][  T392] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   46.422902][  T788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.431414][  T832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.433587][  T788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.440328][  T832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.455875][   T63] usb 5-1: USB disconnect, device number 4
[   46.474165][  T392] usb 2-1: Using ep0 maxpacket: 16
[   46.480720][  T392] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7
[   46.493414][  T392] usb 2-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40
[   46.502577][  T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.510695][  T392] usb 2-1: Product: syz
[   46.514904][  T392] usb 2-1: Manufacturer: syz
[   46.519812][  T392] usb 2-1: SerialNumber: syz
[   46.731239][  T392] usb 2-1: 1:1 : bogus bTerminalLink 4
[   46.737030][  T392] usb 2-1: unit 1 not found!
[   46.741637][  T392] usb 2-1: unit 12 not found!
[   46.746994][  T392] usb 2-1: unit 4 not found!
[   46.751614][  T392] usb 2-1: unit 8 not found!
[   46.761147][  T392] usb 2-1: USB disconnect, device number 18
[   46.772381][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   47.034816][   T36] audit: type=1400 audit(1785200050.280:241): avc:  denied  { write } for  pid=846 comm="syz.4.161" name="udp" dev="proc" ino=4026532722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   47.057229][   T36] audit: type=1400 audit(1785200050.280:242): avc:  denied  { map } for  pid=846 comm="syz.4.161" path="/proc/57/net/udp" dev="proc" ino=4026532722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   47.081675][   T36] audit: type=1400 audit(1785200050.280:243): avc:  denied  { execute } for  pid=846 comm="syz.4.161" path="/proc/57/net/udp" dev="proc" ino=4026532722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   47.107705][   T36] audit: type=1400 audit(1785200050.350:244): avc:  denied  { mount } for  pid=848 comm="syz.4.162" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   47.131809][  T849] zram0: detected capacity change from 0 to 20480
[   47.138492][   T36] audit: type=1400 audit(1785200050.370:245): avc:  denied  { ioctl } for  pid=850 comm="syz.2.163" path="socket:[7274]" dev="sockfs" ino=7274 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   47.172833][   T36] audit: type=1400 audit(1785200050.380:246): avc:  denied  { getopt } for  pid=850 comm="syz.2.163" laddr=172.20.20.170 lport=127 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   47.277190][  T865] netlink: 'syz.1.168': attribute type 6 has an invalid length.
[   47.301111][  T867] syzkaller1: entered promiscuous mode
[   47.306653][  T867] syzkaller1: entered allmulticast mode
[   47.454209][  T393] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   47.605488][  T393] usb 5-1: unable to get BOS descriptor or descriptor too short
[   47.613973][  T393] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.624349][   T63] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[   47.631972][  T393] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[   47.643171][  T393] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   47.657713][  T393] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[   47.666923][  T393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.674995][  T393] usb 5-1: Product: syz
[   47.679203][  T393] usb 5-1: Manufacturer: syz
[   47.683807][  T393] usb 5-1: SerialNumber: syz
[   47.785221][   T63] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   47.793455][   T63] usb 2-1: config 0 has no interface number 0
[   47.796673][  T876] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[   47.799739][   T63] usb 2-1: config 0 interface 41 has no altsetting 0
[   47.816475][   T63] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   47.825661][   T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.833703][   T63] usb 2-1: Product: syz
[   47.838146][   T63] usb 2-1: Manufacturer: syz
[   47.842800][   T63] usb 2-1: SerialNumber: syz
[   47.848884][   T63] usb 2-1: config 0 descriptor??
[   47.895520][  T393] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[   47.910123][  T393] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[   47.936270][  T393] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[   47.946891][  T393] usb 5-1: USB disconnect, device number 5
[   47.961846][  T900] Zero length message leads to an empty skb
[   47.969537][  T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   48.457792][   T63] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   48.470240][   T63] usb 2-1: USB disconnect, device number 19
[   48.597835][  T925] netlink: 'syz.3.191': attribute type 4 has an invalid length.
[   48.605637][  T925] netlink: 'syz.3.191': attribute type 21 has an invalid length.
[   48.613383][  T925] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.191'.
[   49.254336][   T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   49.435712][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   49.444428][   T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.455506][   T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[   49.469021][   T45] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   49.483771][   T45] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[   49.492983][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.501637][   T45] usb 2-1: Product: syz
[   49.506074][   T45] usb 2-1: Manufacturer: syz
[   49.510805][   T45] usb 2-1: SerialNumber: syz
[   49.732264][   T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   49.756954][   T45] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22
[   49.786376][  T323] udevd[323]: setting owner of /dev/snd/pcmC0D0p to uid=0, gid=29 failed: No such file or directory
[   49.797534][   T45] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22
[   49.807424][   T45] usb 2-1: USB disconnect, device number 20
[   49.814526][  T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   50.573014][  T985] overlayfs: failed to clone upperpath
[   50.679295][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   50.679314][   T36] audit: type=1400 audit(1785200053.920:258): avc:  denied  { execute } for  pid=997 comm="syz.3.216" name="file0" dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   50.828594][ T1002] fuse: Bad value for 'fd'
[   50.987174][   T36] audit: type=1400 audit(1785200054.230:259): avc:  denied  { write } for  pid=1010 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   51.139769][   T36] audit: type=1400 audit(1785200054.380:260): avc:  denied  { mount } for  pid=1012 comm="syz.1.221" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   51.181796][   T36] audit: type=1400 audit(1785200054.410:261): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   51.291230][ T1030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=1030 comm=syz.3.226
[   51.527010][ T1040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[   51.858957][   T36] audit: type=1400 audit(1785200055.100:262): avc:  denied  { setopt } for  pid=1045 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   51.903828][   T36] audit: type=1400 audit(1785200055.100:263): avc:  denied  { create } for  pid=1045 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   51.924287][   T36] audit: type=1400 audit(1785200055.100:264): avc:  denied  { bind } for  pid=1045 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   52.374285][  T392] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   52.544164][  T392] usb 2-1: Using ep0 maxpacket: 16
[   52.550519][  T392] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   52.561506][  T392] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   52.570642][  T392] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   52.581388][  T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.590898][  T392] usb 2-1: config 0 descriptor??
[   52.801328][   T36] audit: type=1400 audit(1785200056.040:265): avc:  denied  { read write } for  pid=1050 comm="syz.1.234" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   52.827997][  T392] usb 2-1: USB disconnect, device number 21
[   52.842291][   T36] audit: type=1400 audit(1785200056.040:266): avc:  denied  { open } for  pid=1050 comm="syz.1.234" path="/42/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   52.866167][   T36] audit: type=1400 audit(1785200056.040:267): avc:  denied  { ioctl } for  pid=1050 comm="syz.1.234" path="/42/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   53.053884][ T1074] netlink: 80 bytes leftover after parsing attributes in process `syz.2.243'.
[   53.307865][ T1079] 8021q: VLANs not supported on tunl0
[   53.564879][ T1095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1095 comm=syz.1.250
[   54.196754][ T1135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9414 sclass=netlink_route_socket pid=1135 comm=syz.2.265
[   54.209910][ T1135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1135 comm=syz.2.265
[   55.095080][   T63] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   55.222972][ T1170] netlink: 'syz.3.278': attribute type 21 has an invalid length.
[   55.244160][   T63] usb 2-1: Using ep0 maxpacket: 16
[   55.256792][   T63] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[   55.274146][   T63] usb 2-1: config 0 has no interface number 0
[   55.280297][   T63] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   55.291586][ T1171] cgroup: Unknown subsys name 'obj_role'
[   55.314146][   T63] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   55.336986][   T63] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   55.346195][   T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.354235][   T63] usb 2-1: Product: syz
[   55.358422][   T63] usb 2-1: Manufacturer: syz
[   55.363037][   T63] usb 2-1: SerialNumber: syz
[   55.368778][   T63] usb 2-1: config 0 descriptor??
[   55.374071][ T1151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   55.381864][ T1151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   55.589796][ T1151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   55.597281][ T1151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   55.807304][   T63] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   55.820868][ T1186] fuse: Bad value for 'fd'
[   55.861664][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   55.861684][   T36] audit: type=1400 audit(1785200059.100:281): avc:  denied  { mount } for  pid=1189 comm="syz.2.285" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   55.890728][ T1190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=1190 comm=syz.2.285
[   55.904685][ T1190] netlink: 100 bytes leftover after parsing attributes in process `syz.2.285'.
[   56.089411][   T36] audit: type=1400 audit(1785200059.330:282): avc:  denied  { shutdown } for  pid=1198 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   56.141438][   T36] audit: type=1400 audit(1785200059.380:283): avc:  denied  { create } for  pid=1201 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   56.510636][ T1206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'.
[   56.695784][ T1217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.296'.
[   56.809472][   T36] audit: type=1400 audit(1785200060.050:284): avc:  denied  { mounton } for  pid=1150 comm="syz.1.272" path="/56/file0" dev="ramfs" ino=8398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   57.033261][   T63] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   57.054157][   T63] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   57.074217][   T63] asix 2-1:0.34: probe with driver asix failed with error -71
[   57.094820][   T63] usb 2-1: USB disconnect, device number 22
[   57.237158][   T36] audit: type=1400 audit(1785200060.480:285): avc:  denied  { name_bind } for  pid=1222 comm="syz.3.299" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   57.569729][   T36] audit: type=1400 audit(1785200060.810:286): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   57.690725][  T615] bridge_slave_1: left allmulticast mode
[   57.706696][  T615] bridge_slave_1: left promiscuous mode
[   57.713540][  T615] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.735045][  T615] bridge_slave_0: left allmulticast mode
[   57.740768][  T615] bridge_slave_0: left promiscuous mode
[   57.757085][  T615] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.759547][ T1232] capability: warning: `syz.2.305' uses 32-bit capabilities (legacy support in use)
[   57.942851][  T615] veth1_macvtap: left promiscuous mode
[   57.955141][  T615] veth0_vlan: left promiscuous mode
[   58.120117][ T1256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'.
[   58.157326][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.171582][ T1245] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.183923][ T1245] bridge_slave_0: entered allmulticast mode
[   58.191366][ T1245] bridge_slave_0: entered promiscuous mode
[   58.204490][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.213612][ T1245] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.227169][ T1245] bridge_slave_1: entered allmulticast mode
[   58.233828][ T1245] bridge_slave_1: entered promiscuous mode
[   58.243107][ T1268] fuse: Unknown parameter ''
[   58.432017][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.439119][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.446479][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.453559][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.507287][  T621] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.514710][  T621] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.528620][  T621] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.535714][  T621] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.543605][  T621] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.550695][  T621] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.582185][ T1245] veth0_vlan: entered promiscuous mode
[   58.595925][ T1245] veth1_macvtap: entered promiscuous mode
[   58.618988][ T1290] overlayfs: failed to clone upperpath
[   58.625954][   T36] audit: type=1400 audit(1785200061.870:287): avc:  denied  { mounton } for  pid=1245 comm="syz-executor" path="/root/syzkaller.MAhCxC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   58.655935][   T36] audit: type=1400 audit(1785200061.900:288): avc:  denied  { bind } for  pid=1289 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   58.815946][ T1301] mmap: syz.5.326 (1301) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   59.019000][ T1309] netlink: 64 bytes leftover after parsing attributes in process `syz.2.329'.
[   59.033331][ T1309] netlink: 'syz.2.329': attribute type 1 has an invalid length.
[   59.117812][   T36] audit: type=1400 audit(1785200062.360:289): avc:  denied  { read } for  pid=1313 comm="syz.5.331" name="pnp_string" dev="configfs" ino=8609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   59.150741][   T36] audit: type=1400 audit(1785200062.380:290): avc:  denied  { open } for  pid=1313 comm="syz.5.331" path="/5/config/usb_gadget/g1/functions/printer.usb0/pnp_string" dev="configfs" ino=8609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   60.383949][ T1341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'.
[   60.494207][  T392] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   60.644176][  T392] usb 6-1: Using ep0 maxpacket: 16
[   60.666171][  T392] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   60.676624][  T392] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.687566][  T392] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.697663][  T392] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   60.710533][  T392] usb 6-1: config 7 interface 0 has no altsetting 0
[   60.717250][  T392] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   60.726348][  T392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.006797][ T1351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1351 comm=syz.3.345
[   61.143834][  T392] usbhid 6-1:7.0: can't add hid device: -71
[   61.151551][  T392] usbhid 6-1:7.0: probe with driver usbhid failed with error -71
[   61.164641][  T392] usb 6-1: USB disconnect, device number 2
[   61.672115][ T1380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.684436][ T1380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.904177][  T392] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   62.015157][ T1389] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.046404][ T1387] 9p: Unknown uid 00000000004294967295
[   62.064180][  T392] usb 6-1: device descriptor read/64, error -71
[   62.314139][  T392] usb 6-1: device descriptor read/64, error -71
[   62.574163][  T392] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   62.714968][  T392] usb 6-1: device descriptor read/64, error -71
[   62.736366][   T36] audit: type=1400 audit(1785200065.980:291): avc:  denied  { read } for  pid=1407 comm="syz.3.365" name="/" dev="configfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   62.758547][   T36] audit: type=1400 audit(1785200065.980:292): avc:  denied  { open } for  pid=1407 comm="syz.3.365" path="/" dev="configfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   62.782362][   T36] audit: type=1400 audit(1785200066.020:293): avc:  denied  { create } for  pid=1407 comm="syz.3.365" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[   62.984155][  T392] usb 6-1: device descriptor read/64, error -71
[   63.094474][  T392] usb usb6-port1: attempt power cycle
[   63.388519][ T1421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'.
[   63.398346][   T36] audit: type=1400 audit(1785200066.650:294): avc:  denied  { shutdown } for  pid=1420 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   63.434191][  T392] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   63.475150][  T392] usb 6-1: device descriptor read/8, error -71
[   63.607595][  T392] usb 6-1: device descriptor read/8, error -71
[   63.667696][  T614] bridge_slave_1: left allmulticast mode
[   63.673371][  T614] bridge_slave_1: left promiscuous mode
[   63.679071][  T614] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.686639][  T614] bridge_slave_0: left allmulticast mode
[   63.692340][  T614] bridge_slave_0: left promiscuous mode
[   63.698071][  T614] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.793619][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.800768][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.807931][ T1438] bridge_slave_0: entered allmulticast mode
[   63.815932][ T1438] bridge_slave_0: entered promiscuous mode
[   63.823001][  T614] veth1_macvtap: left promiscuous mode
[   63.828917][  T614] veth0_vlan: left promiscuous mode
[   63.844360][  T392] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   63.865346][  T392] usb 6-1: device descriptor read/8, error -71
[   63.890371][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.897452][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.906028][ T1438] bridge_slave_1: entered allmulticast mode
[   63.912333][ T1438] bridge_slave_1: entered promiscuous mode
[   63.961776][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.968872][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.976207][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.983270][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.995268][  T392] usb 6-1: device descriptor read/8, error -71
[   64.010155][  T621] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.017651][  T621] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.027842][  T590] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.034943][  T590] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.044046][  T621] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.051151][  T621] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.080274][ T1438] veth0_vlan: entered promiscuous mode
[   64.092062][ T1438] veth1_macvtap: entered promiscuous mode
[   64.104931][  T392] usb usb6-port1: unable to enumerate USB device
[   64.674237][  T333] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   64.791029][ T1465] overlayfs: missing 'lowerdir'
[   64.835330][  T333] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.846355][  T333] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   64.859137][  T333] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   64.868285][  T333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.876530][  T333] usb 7-1: Product: syz
[   64.880766][  T333] usb 7-1: Manufacturer: syz
[   64.885423][  T333] usb 7-1: SerialNumber: syz
[   64.896879][  T333] cdc_mbim 7-1:1.0: skipping garbage
[   65.084146][   T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   65.097869][ T1461] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[   65.234132][   T31] usb 6-1: Using ep0 maxpacket: 32
[   65.240586][   T31] usb 6-1: config 0 has an invalid interface number: 162 but max is 0
[   65.248992][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.259162][   T31] usb 6-1: config 0 has no interface number 0
[   65.265328][   T31] usb 6-1: config 0 interface 162 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   65.278436][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[   65.287572][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.296417][   T31] usb 6-1: config 0 descriptor??
[   65.671104][   T36] audit: type=1400 audit(1785200068.910:295): avc:  denied  { ioctl } for  pid=1474 comm="syz.2.387" path="socket:[10188]" dev="sockfs" ino=10188 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   65.674630][ T1475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'.
[   65.712378][ T1461] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[   65.719865][  T333] cdc_mbim 7-1:1.0: setting tx_max = 28
[   65.726358][  T333] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[   65.737930][  T333] wwan wwan0: port wwan0mbim0 attached
[   65.749367][  T333] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, f6:cf:1e:6f:31:43
[   65.768991][   T36] audit: type=1400 audit(1785200069.010:296): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   65.792733][   T36] audit: type=1400 audit(1785200069.020:297): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.833953][   T36] audit: type=1400 audit(1785200069.020:298): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.856049][   T36] audit: type=1400 audit(1785200069.020:299): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.903736][   T36] audit: type=1400 audit(1785200069.020:300): avc:  denied  { getattr } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.930133][   T10] usb 7-1: USB disconnect, device number 2
[   65.938344][   T10] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[   65.987904][   T10] wwan wwan0: port wwan0mbim0 disconnected
[   66.477807][ T1547] kvm: pic: non byte write
[   66.566513][ T1552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.405'.
[   67.601955][ T1581] tmpfs: Unknown parameter 'sE&[����{S�x�$ize?%8'
[   67.681358][ T1586] netlink: 'syz.3.416': attribute type 28 has an invalid length.
[   67.702420][ T1589] netlink: 'syz.2.417': attribute type 4 has an invalid length.
[   67.720564][ T1589] netlink: 17 bytes leftover after parsing attributes in process `syz.2.417'.
[   67.737476][ T1593] overlayfs: failed to resolve 'fowner<00000000000000000000': -2
[   67.757033][   T31] usb 6-1: string descriptor 0 read error: -71
[   67.774650][   T31] usb 6-1: USB disconnect, device number 7
[   67.973729][   T36] kauditd_printk_skb: 22 callbacks suppressed
[   67.973749][   T36] audit: type=1400 audit(1785200071.210:323): avc:  denied  { create } for  pid=1597 comm="syz.6.420" name="rndis.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[   67.990311][ T1598] configfs-gadget.g1 gadget.0: HOST MAC 9e:6d:fd:87:3c:52
[   68.003024][   T36] audit: type=1400 audit(1785200071.220:324): avc:  denied  { write } for  pid=1597 comm="syz.6.420" name="UDC" dev="configfs" ino=10719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   68.026792][ T1598] configfs-gadget.g1 gadget.0: MAC 32:dd:8f:c8:0a:39
[   68.124186][   T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   68.274170][   T63] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   68.289053][   T31] usb 6-1: Using ep0 maxpacket: 32
[   68.294888][   T36] audit: type=1400 audit(1785200071.540:325): avc:  denied  { getopt } for  pid=1620 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   68.315902][   T31] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[   68.324368][   T31] usb 6-1: config 0 has no interface number 0
[   68.330537][   T31] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   68.342140][   T31] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   68.351277][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.359302][   T31] usb 6-1: Product: syz
[   68.363533][   T31] usb 6-1: Manufacturer: syz
[   68.364270][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   68.368165][   T31] usb 6-1: SerialNumber: syz
[   68.381010][   T31] usb 6-1: config 0 descriptor??
[   68.386330][ T1596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   68.435353][   T63] usb 1-1: Dual-Role OTG device on HNP port
[   68.441512][   T63] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12
[   68.450945][   T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.469220][   T63] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 9e:6d:fd:87:3c:52
[   68.526270][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.538188][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.550920][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   68.574134][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   68.583209][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.596324][ T1596] dummy_hcd dummy_hcd.0: remove, state 1
[   68.602849][   T10] usb 7-1: config 0 descriptor??
[   68.611103][ T1596] usb usb1: USB disconnect, device number 1
[   68.619080][ T1596] usb 1-1: USB disconnect, device number 12
[   68.628114][ T1596] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device
[   68.664124][ T1636] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   68.686989][ T1596] dummy_hcd dummy_hcd.0: stopped
[   68.693976][ T1596] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[   68.776369][ T1644] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN PTI
[   68.789009][ T1644] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057]
[   68.797503][ T1644] CPU: 1 UID: 101 PID: 1644 Comm: dhcpcd Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35
[   68.808906][ T1644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   68.818989][ T1644] RIP: 0010:dummy_queue+0x1c0/0x8e0
[   68.824262][ T1644] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 89 a1 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[   68.843896][ T1644] RSP: 0018:ffffc9000103f028 EFLAGS: 00010206
[   68.850011][ T1644] RAX: 000000000000000a RBX: ffff888121348f10 RCX: dffffc0000000000
[   68.858021][ T1644] RDX: ffff88811f9b2600 RSI: 0000000000000003 RDI: 0000000000000005
[   68.866046][ T1644] RBP: ffffc9000103f0a0 R08: ffffffff81dfface R09: ffffffff81dfface
[   68.874059][ T1644] R10: 0000000000000000 R11: ffffffff83b98e90 R12: 0000000000000050
[   68.882154][ T1644] R13: ffff888121348f00 R14: 1ffff110242691e0 R15: ffff888104f54c90
[   68.890157][ T1644] FS:  00007f179cc71740(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   68.899164][ T1644] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.905784][ T1644] CR2: 00007ffca3372a10 CR3: 000000012cea6000 CR4: 00000000003526b0
[   68.913795][ T1644] Call Trace:
[   68.917100][ T1644]  <TASK>
[   68.920085][ T1644]  ? kasan_save_free_info+0x44/0x50
[   68.925351][ T1644]  ? kasan_save_track+0x3e/0x80
[   68.930251][ T1644]  usb_ep_queue+0xe3/0x230
[   68.934726][ T1644]  eth_start_xmit+0x9c1/0xf90
[   68.939443][ T1644]  dev_hard_start_xmit+0x230/0x730
[   68.944604][ T1644]  sch_direct_xmit+0x27d/0x9c0
[   68.949405][ T1644]  ? __kasan_check_write+0x18/0x20
[   68.954552][ T1644]  ? _raw_spin_trylock+0xb5/0x140
[   68.959623][ T1644]  ? __cfi_sch_direct_xmit+0x10/0x10
[   68.964940][ T1644]  ? check_page_allocation+0x70/0xa0
[   68.970275][ T1644]  ? netdev_core_pick_tx+0x1ff/0x370
[   68.975600][ T1644]  ? __dev_queue_xmit+0x26c/0x3780
[   68.980745][ T1644]  __dev_queue_xmit+0x1611/0x3780
[   68.985810][ T1644]  ? __dev_queue_xmit+0x26c/0x3780
[   68.990971][ T1644]  ? __cfi___dev_queue_xmit+0x10/0x10
[   68.996389][ T1644]  ? __kasan_check_write+0x18/0x20
[   69.001539][ T1644]  ? _copy_from_iter+0x6b5/0x1520
[   69.006608][ T1644]  ? packet_parse_headers+0x7f0/0xb10
[   69.012025][ T1644]  ? packet_parse_headers+0x801/0xb10
[   69.017439][ T1644]  ? __cfi_sock_alloc_send_pskb+0x10/0x10
[   69.023192][ T1644]  ? skb_setup_tx_timestamp+0x210/0x210
[   69.028782][ T1644]  packet_xmit+0x76/0x360
[   69.033161][ T1644]  packet_sendmsg+0x435e/0x56b0
[   69.038044][ T1644]  ? avc_has_perm_noaudit+0x26b/0x360
[   69.043465][ T1644]  ? selinux_socket_sendmsg+0x281/0x380
[   69.049097][ T1644]  ? __cfi_selinux_socket_sendmsg+0x10/0x10
[   69.055043][ T1644]  ? __cfi_packet_sendmsg+0x10/0x10
[   69.060285][ T1644]  ? avc_has_perm_noaudit+0x26b/0x360
[   69.065704][ T1644]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[   69.071029][ T1644]  ? security_socket_sendmsg+0x3d/0x100
[   69.076621][ T1644]  ? __cfi_packet_sendmsg+0x10/0x10
[   69.081855][ T1644]  sock_write_iter+0x442/0x490
[   69.086657][ T1644]  ? __cfi_sock_write_iter+0x10/0x10
[   69.091999][ T1644]  ? selinux_file_permission+0x8a4/0xb60
[   69.097670][ T1644]  do_iter_readv_writev+0x629/0x820
[   69.102908][ T1644]  ? vfs_iter_read+0x5e0/0x5e0
[   69.107720][ T1644]  ? bpf_lsm_file_permission+0xd/0x20
[   69.113141][ T1644]  vfs_writev+0x4a5/0xe90
[   69.117512][ T1644]  ? do_writev+0x2e0/0x2e0
[   69.121967][ T1644]  ? __seccomp_filter+0x48a/0x1b70
[   69.127129][ T1644]  ? __secure_computing+0x2b0/0x2b0
[   69.132368][ T1644]  ? __kasan_check_read+0x15/0x20
[   69.137426][ T1644]  do_writev+0x151/0x2e0
[   69.141705][ T1644]  ? vfs_readv+0xa00/0xa00
[   69.146162][ T1644]  ? __secure_computing+0xee/0x2b0
[   69.151310][ T1644]  __x64_sys_writev+0x81/0x90
[   69.156026][ T1644]  x64_sys_call+0x1fbb/0x2ee0
[   69.160745][ T1644]  do_syscall_64+0x57/0xf0
[   69.165196][ T1644]  ? clear_bhb_loop+0x50/0xa0
[   69.169912][ T1644]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   69.175846][ T1644] RIP: 0033:0x7f179ccfb407
[   69.180287][ T1644] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   69.200367][ T1644] RSP: 002b:00007ffca3372970 EFLAGS: 00000202 ORIG_RAX: 0000000000000014
[   69.208821][ T1644] RAX: ffffffffffffffda RBX: 00007f179cc71740 RCX: 00007f179ccfb407
[   69.216832][ T1644] RDX: 0000000000000002 RSI: 00007ffca33729d0 RDI: 0000000000000003
[   69.224849][ T1644] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000
[   69.232850][ T1644] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffca3372a10
[   69.240845][ T1644] R13: 000055d19fe82180 R14: 00007ffca3372a60 R15: 00007ffca3382c30
[   69.248836][ T1644]  </TASK>
[   69.251860][ T1644] Modules linked in:
[   69.255860][ T1644] ---[ end trace 0000000000000000 ]---
[   69.261362][ T1644] RIP: 0010:dummy_queue+0x1c0/0x8e0
[   69.266640][ T1644] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 89 a1 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[   69.283123][   T36] audit: type=1400 audit(1785200072.500:326): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   69.286301][ T1644] RSP: 0018:ffffc9000103f028 EFLAGS: 00010206
[   69.308873][   T36] audit: type=1400 audit(1785200072.500:327): avc:  denied  { search } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.314127][ T1644] RAX: 000000000000000a RBX: ffff888121348f10 RCX: dffffc0000000000
[   69.337957][   T36] audit: type=1400 audit(1785200072.500:328): avc:  denied  { write } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.343395][ T1644] RDX: ffff88811f9b2600 RSI: 0000000000000003 RDI: 0000000000000005
[   69.365644][   T36] audit: type=1400 audit(1785200072.500:329): avc:  denied  { add_name } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.372588][ T1644] RBP: ffffc9000103f0a0 R08: ffffffff81dfface R09: ffffffff81dfface
[   69.372611][ T1644] R10: 0000000000000000 R11: ffffffff83b98e90 R12: 0000000000000050
[   69.394548][   T36] audit: type=1400 audit(1785200072.500:330): avc:  denied  { create } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   69.401153][ T1644] R13: ffff888121348f00 R14: 1ffff110242691e0 R15: ffff888104f54c90
[   69.410015][   T36] audit: type=1400 audit(1785200072.500:331): avc:  denied  { append open } for  pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   69.429555][ T1644] FS:  00007f179cc71740(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   69.429580][ T1644] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.429597][ T1644] CR2: 00007ffca3372a10 CR3: 000000012cea6000 CR4: 00000000003526b0
[   69.429620][ T1644] Kernel panic - not syncing: Fatal exception in interrupt
[   69.429771][ T1644] Kernel Offset: disabled