last executing test programs:

1m57.465339133s ago: executing program 3 (id=45):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x1, 0x4, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x3, 0x0, 0x9, 0x4, 0x0, @remote, @loopback, {[@end, @noop, @cipso={0x86, 0x31, 0x2, [{0x6, 0x3, 'A'}, {0x6, 0x12, "3f47b0349b50d2c2122fd2c049d290b8"}, {0x1, 0x6, "e036a26e"}, {0x0, 0xe, "4d7413f5f6598e679518ad65"}, {0x7, 0x2}]}, @ssrr={0x89, 0xa, 0x5d, [@local]}, @noop, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x5, [{@empty, 0x21f1e9d0}, {@loopback, 0x6}]}, @ssrr={0x89, 0x0, 0x8a}]}}}}})
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x3ff, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x40, 0x1, 0x8, 0xe, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x68, 0x0, 0x3, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

1m57.413214954s ago: executing program 3 (id=46):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9e, 0x3, 0x81, 0xf, 0x0, 0x0, 0xf9, 0x1, 0x7f}, {0x94a0a44099bb8ca2, 0x2000, 0x3, 0x5, 0xc2, 0xbc, 0x9, 0x67, 0xc5, 0x7, 0x5, 0x40}, {0x1, 0xdddd1000, 0x3, 0x6, 0x9, 0x34, 0x10, 0x6, 0x3, 0x1c, 0x7, 0xff}, {0x8080000, 0x3000, 0x10, 0x58, 0x7d, 0x0, 0x0, 0xc, 0x2, 0x5, 0x9, 0x1}, {0x504ce1cb89483871, 0xeeeca000, 0xa, 0x8f, 0x80, 0x0, 0x9, 0x1, 0x1, 0x7, 0x5, 0xfd}, {0x4000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0x7c, 0xd}, {0xffff1000, 0x80a0000, 0x8, 0x2, 0x8, 0x3, 0x3, 0x0, 0x9, 0xb, 0xe, 0x7}, {0x74000, 0xdddd0000, 0x3, 0x6, 0x0, 0x0, 0x9, 0x80, 0x9, 0x8f, 0x2e, 0x31}, {0x4000, 0x59}, {0xffffffff, 0x6}, 0x10000, 0x0, 0x1, 0x40141, 0x7, 0x1000, 0xdddd0000, [0x8, 0x3, 0xfff, 0x1]})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x3, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80, 0x3}, {0x10000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x3, 0x6, 0x36, 0x4, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x7, 0x3, 0x7, 0x0, 0x7f, 0x60, 0xa4, 0x5, 0x5}, {0xfec0f001, 0xeeee0000, 0x9, 0x0, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x3000, 0xf, 0x3, 0x16, 0x7, 0x2b, 0x8, 0x9, 0x1, 0xf7, 0x93}, {0x2000, 0x2, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x21, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xeeee0000, 0x7}, 0x80040031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100c00, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x839, 0x0, 0x7}]})

1m57.312600097s ago: executing program 3 (id=47):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x1d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x400006, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x8, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00')
read$FUSE(r2, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000000)=0x9bb})

1m57.300772787s ago: executing program 3 (id=48):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000180)='nilfs2\x00', 0x2628010, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r2, &(0x7f00000004c0)="306663353a313232373a620afaf6379a248d1d6534518f10951005a34b6665", 0x1f)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000440)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x1)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r6, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0xe1, 0x8, 0x3, 0x3e, 0xfffffdf9, 0x1d8, 0x40, 0x2d9, 0xd33, 0x5, 0x38, 0x3, 0x78, 0x1f, 0x9}, [{0x70000000, 0x101, 0x7, 0xffff, 0x5, 0x8, 0x4a8a, 0x63b}, {0x2, 0x6, 0xc, 0x8, 0xa, 0x0, 0x14000000000000, 0x4}, {0x7, 0x9, 0x5, 0x5, 0x7f, 0x9, 0x7, 0x1}]}, 0xe8)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
close(r6)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd25, 0x25dfdbfb, 0x5, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newsa={0x19c, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x3, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@policy={0xac, 0x7, {{@in6=@private2, @in6=@remote, 0x4e24, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x67}, {0x3, 0x4a, 0xe9b, 0xc61f, 0x3, 0x975, 0x8, 0x82df}, {0x7fffffff, 0xfffffffffffffffb, 0x5, 0x9}, 0x101, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8801}, 0x40001)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r10, 0x0)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000000c0)={[0x81, 0x10001, 0x1, 0x0, 0x3, 0x7, 0xd, 0x87b, 0x2, 0x0, 0x3, 0x0, 0x3, 0x4, 0x1, 0xb1e], 0x70000, 0x203c1})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1m57.125278731s ago: executing program 3 (id=49):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0)
close(0x3)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
syz_open_procfs(r1, &(0x7f00000000c0)='mounts\x00')
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x1a3001, 0x18)
write$khugepaged_scan(r2, &(0x7f0000000000), 0x8)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000080)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000040)=0x5})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)

1m57.124592141s ago: executing program 3 (id=50):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x80800)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f000000a400)=[{{&(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/46, 0x2e}, {&(0x7f0000001680)=""/169, 0xa9}, {&(0x7f0000001740)=""/47, 0x2f}], 0x9, &(0x7f0000001840)=""/185, 0xb9}, 0xbf}, {{&(0x7f0000001900)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001980)=""/55, 0x37}, {&(0x7f00000019c0)=""/22, 0x16}, {&(0x7f0000001a00)=""/119, 0x77}, {&(0x7f0000001a80)=""/159, 0x9f}, {&(0x7f0000001b40)=""/246, 0xf6}], 0x5, &(0x7f0000001cc0)=""/141, 0x8d}, 0x91}, {{&(0x7f0000001d80)=@generic, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001e00)=""/30, 0x1e}], 0x1, &(0x7f0000001e80)=""/214, 0xd6}, 0x81}, {{&(0x7f0000001f80)=@phonet, 0x80, &(0x7f0000003240)=[{&(0x7f0000002000)=""/78, 0x4e}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/29, 0x1d}, {&(0x7f00000030c0)=""/171, 0xab}, {&(0x7f0000003180)=""/110, 0x6e}, {&(0x7f0000003200)}], 0x6, &(0x7f00000032c0)=""/179, 0xb3}, 0x1}, {{&(0x7f0000003380), 0x80, &(0x7f00000045c0)=[{&(0x7f0000003400)=""/34, 0x22}, {&(0x7f0000003440)=""/203, 0xcb}, {&(0x7f0000003540)=""/65, 0x41}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004600)=""/147, 0x93}, 0x63a}, {{&(0x7f00000046c0)=@x25, 0x80, &(0x7f0000007a80)=[{&(0x7f0000004740)=""/142, 0x8e}, {&(0x7f0000004800)=""/180, 0xb4}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/185, 0xb9}, {&(0x7f0000007980)=""/222, 0xde}], 0x7, &(0x7f0000007b00)=""/74, 0x4a}, 0xa9}, {{0x0, 0x0, &(0x7f0000008d80)=[{&(0x7f0000007c00)}, {&(0x7f0000007c40)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000008dc0)=""/222, 0xde}, 0x81}], 0x7, 0x0, 0x0)

1m41.849573335s ago: executing program 32 (id=50):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x80800)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f000000a400)=[{{&(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/46, 0x2e}, {&(0x7f0000001680)=""/169, 0xa9}, {&(0x7f0000001740)=""/47, 0x2f}], 0x9, &(0x7f0000001840)=""/185, 0xb9}, 0xbf}, {{&(0x7f0000001900)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001980)=""/55, 0x37}, {&(0x7f00000019c0)=""/22, 0x16}, {&(0x7f0000001a00)=""/119, 0x77}, {&(0x7f0000001a80)=""/159, 0x9f}, {&(0x7f0000001b40)=""/246, 0xf6}], 0x5, &(0x7f0000001cc0)=""/141, 0x8d}, 0x91}, {{&(0x7f0000001d80)=@generic, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001e00)=""/30, 0x1e}], 0x1, &(0x7f0000001e80)=""/214, 0xd6}, 0x81}, {{&(0x7f0000001f80)=@phonet, 0x80, &(0x7f0000003240)=[{&(0x7f0000002000)=""/78, 0x4e}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/29, 0x1d}, {&(0x7f00000030c0)=""/171, 0xab}, {&(0x7f0000003180)=""/110, 0x6e}, {&(0x7f0000003200)}], 0x6, &(0x7f00000032c0)=""/179, 0xb3}, 0x1}, {{&(0x7f0000003380), 0x80, &(0x7f00000045c0)=[{&(0x7f0000003400)=""/34, 0x22}, {&(0x7f0000003440)=""/203, 0xcb}, {&(0x7f0000003540)=""/65, 0x41}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004600)=""/147, 0x93}, 0x63a}, {{&(0x7f00000046c0)=@x25, 0x80, &(0x7f0000007a80)=[{&(0x7f0000004740)=""/142, 0x8e}, {&(0x7f0000004800)=""/180, 0xb4}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/185, 0xb9}, {&(0x7f0000007980)=""/222, 0xde}], 0x7, &(0x7f0000007b00)=""/74, 0x4a}, 0xa9}, {{0x0, 0x0, &(0x7f0000008d80)=[{&(0x7f0000007c00)}, {&(0x7f0000007c40)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000008dc0)=""/222, 0xde}, 0x81}], 0x7, 0x0, 0x0)

6.165242513s ago: executing program 4 (id=909):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001200010023bd050000000004000000804a69a331efa1a2643bf70fad38108a04de07c357"], 0x14}], 0x1}, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) (async)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) (async)
sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) (async)
recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x40080)
ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080))

6.164864313s ago: executing program 4 (id=910):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14fffdffffff02424c2f69ea0e90ec3d12e14373"], 0x14}, 0x1, 0x6000000}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x4000e, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0xa, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
readv(r0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4074, 0xfea}], 0x1)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000001b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x44004001}, 0x40000000)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x6)

5.350328372s ago: executing program 4 (id=914):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
syz_usb_connect$midi(0x5, 0x67, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000002099043e104000010203010902550001018190be0904000002010320041324036d0f78470d2c030c01048007e7db050606240201810209058d0320027ffef80425010009058702"], 0x0)

4.689258148s ago: executing program 4 (id=916):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015000100"], 0xb8}}, 0x0) (async)
r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r1, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(r2, &(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x4) (async)
fsmount(r2, 0x1, 0x80) (async)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x1, 0x0, 0xfff})
syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0], 0x0)

4.465141243s ago: executing program 0 (id=919):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x6)
r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x400)
recvmmsg(r1, &(0x7f0000005940)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000380)=""/199, 0xc7}], 0x2, &(0x7f00000004c0)=""/215, 0xd7}, 0x2096}, {{&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/131, 0x83}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/56, 0x38}, {&(0x7f0000002840)=""/224, 0xe0}], 0x6, &(0x7f00000029c0)=""/41, 0x29}}, {{&(0x7f0000002a00)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002a80)=""/89, 0x59}, {&(0x7f0000002b00)=""/181, 0xb5}, {&(0x7f0000002bc0)=""/12, 0xc}], 0x3}, 0x1}, {{&(0x7f0000002c40)=@sco, 0x80, &(0x7f0000003000)=[{&(0x7f0000002cc0)=""/249, 0xf9}, {&(0x7f0000002dc0)=""/27, 0x1b}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/236, 0xec}], 0x4, &(0x7f0000003040)=""/245, 0xf5}, 0x7f}, {{&(0x7f0000003140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004380)=[{&(0x7f00000031c0)=""/165, 0xa5}, {&(0x7f0000003280)=""/137, 0x89}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/56, 0x38}], 0x4, &(0x7f00000043c0)=""/23, 0x17}, 0xfffffff8}, {{&(0x7f0000004400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000005580)=[{&(0x7f0000004480)=""/29, 0x1d}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/60, 0x3c}, {&(0x7f0000005500)=""/70, 0x46}], 0x4, &(0x7f00000055c0)=""/61, 0x3d}, 0xff}, {{&(0x7f0000005600)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005680)=""/138, 0x8a}, {&(0x7f0000005740)=""/155, 0x9b}], 0x2, &(0x7f0000005840)=""/235, 0xeb}, 0x9}], 0x7, 0x40, &(0x7f0000005b00)={0x0, 0x3938700})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="690c3593", 0x4}], 0x1}}], 0x2, 0x4404c880)
sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendto(r0, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb)
write(r0, &(0x7f0000000340)="9d72b6ee8495aebbf96da1dca9", 0xd)

4.464687073s ago: executing program 0 (id=920):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = memfd_secret(0x80000)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = dup2(r3, r2)
sendmsg$key(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0}}, 0x40048d5)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x80000000002})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
fcntl$lock(r5, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) (async)
r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES32=<r8=>r0, @ANYBLOB="ecec1dc256e758e643d96f24a7bd39844cc91f013271dce757f83d6791198d7f763279a59fe53903dbb368da7d03c616fe141e4940351db1e95e8de35f297189e7e6a0fb3dfc31c4f171fc6432a1b650cc19a69008df0fce084343e3f2cb50529538054b8964caddccc9cec1f02c05743be41d0f40"], 0x104}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000ae700000000522a1d500"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000002b80)={'geneve1\x00', @local}) (async)
r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00')
read$FUSE(r11, &(0x7f0000002840)={0x2020}, 0x2020) (async)
renameat2(r9, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) (async)
renameat2(r1, &(0x7f0000000300)='./file1\x00', r1, &(0x7f0000000280)='./file1\x00', 0x2) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x1, 0x1, 0x4, 0x5}]})
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300}) (async)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
dup3(r13, r12, 0x0)

4.464042423s ago: executing program 0 (id=921):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000f00)={0x24, &(0x7f0000000d40)={0x20, 0x5, 0xd0, {0xd0, 0x22, "fe22c0bdb11e0c6773e7db1999eb52e3f550b701daf50b1ff46f2ea21a176d3273e1bcbe1f041e15d5bd7c2ef32c7f90ee1dba1b67875885337017064dfc30b19e943d9cb09ca0efe7216bbe9455de0125afcbfac35f7dacdf1e0ccdbf0d0a19d819d113a9fb22fc35936080e8c52a03e0908a0943db20db67c446f49741873418ec5aefb92a91c14c7403d6025391bd2826618a550f7cfb7758dcdbf5341d9221c757172343cdb5660824423c08a6c7a597d54617490c394fb5e9058949de3d281fb5611abb683f6b48c7dda851"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000e80)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "a1d12a1e"}, @local=@item_4={0x3, 0x2, 0x7, "e006b2f9"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_012={0x1, 0x1, 0xa, "bf"}, @main=@item_4={0x3, 0x0, 0xb, "561bf9fe"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x81, 0x1, {0x22, 0x9a}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f40)={0x0, 0x14, 0xc, "2558c5d67448820d55edaed5"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001000)={0x20, 0x1, 0xce, "1bcf6a6046902fdffca2307b12a7ac7314c3630c0c19735c6bc9b93404c6a455109a2aebdac60cc97ec5d7d0894876b775d1659a2941435f28c9148cf826710ef848fad8440dc6484aca73f5c5939de19f7f50129929710aeab3abad6143c363dc44fa784d19af3aeff51028597f925efed2b7baab7966039e2db453cb9d24f1219b5910e2b4209e9b6dc34e33eff6d24aa0992979e8527e4de2e20b0f89e68d5521d77b0357f582487f6cc5253dbe5f7e6a0bcc35e2575740305c6b7b96db18bd05ad5d79eec78bf1a21c42cbba"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x10}})

4.206556199s ago: executing program 4 (id=923):
syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_usb_connect$uac2(0x3, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000101e041030400001020301090286000301081040080b00010102208109040000000101200009240106009a4969ae112408022100000300010002000100034317240305f7040702"], 0x0)

4.138765171s ago: executing program 4 (id=925):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x2})
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3c4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)="ec244c407a80ee9fa132a130392a34ff81", 0x11}, {&(0x7f0000000100)="4696badd0579e754fb14a01b08078076a423d0fdd95f0ec4523d91bd392532a348e697c9539473d8415114e11c0a2e5016e11d9542ca5622e80543df579523f13174f9af56d410e7b997c43acf4247ab3a7088f4e919f237d5c8933fd6957a66c0332f77ed137998e745fef792d7b456fb9f1f15d18e8306151fd41f45077ec60d4426a5e58f8b1a6d8124a2bd1114e66d260f37e8a36fb297b58ae9ca65645801c845ee3785aa8dbf", 0xa9}, {&(0x7f00000001c0)="5fc9bf7cae09a56648", 0x9}, {&(0x7f0000000200)="d0031be6273e26bea5b6cfc7c1aec076109cec20123c7477389ef2d58fc3f1b5c20d13bd94729047", 0x28}, {&(0x7f0000000240)="af8d9bc1ded091c61265a9e8ed664a", 0xf}], 0x5, &(0x7f0000000300)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts={{0x80, 0x29, 0x37, {0x67, 0xd, '\x00', [@ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x18, {0x3, 0x4, 0x20, 0x9, [0x5, 0x89]}}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x9, 0x45, "3eabd1c480d08c3770f07a190e6be7d7f14e8883de0dfad11ec70aecdb232e0d6beb59affd36a3a92c337cd823058a6df8d6b13f60d2848ec52d8d7da10d430f6ab0d2b2e8"}]}}}], 0x98}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c2ab250c2777"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6f4130eb6b5c"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7e53c9021bb2"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="405f84273a72"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="128e2661e5c1"}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x4b}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x891}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x54)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000780)={{{@in=@local, @in6=@private1, 0x4e23, 0x9, 0x4e24, 0x8000, 0x2, 0xc0, 0x20, 0x5e, 0x0, 0xee00}, {0x4, 0x7, 0x0, 0xe, 0x20fe, 0x1, 0xb, 0x8}, {0x10, 0x1, 0x7, 0x8}, 0xfff, 0x6e6bb9, 0x2, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x4d2, 0xff}, 0xa, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x5, 0x37be}}, 0xe8)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f00000008c0), 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000d00)={r7, "0ac6303630b5b677aa2aaa9bd52a70e4"})
r8 = openat$cgroup_type(r2, &(0x7f0000001d00), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000001d40), 0x9)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001e00)={'vcan0\x00', <r9=>0x0})
recvfrom$packet(r2, &(0x7f0000001d80)=""/65, 0x41, 0x2000, &(0x7f0000001e40)={0x11, 0x8d, r9, 0x1, 0x4, 0x6, @broadcast}, 0x14)
r10 = openat$cgroup_freezer_state(r2, &(0x7f0000001e80), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2023}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x2d}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x824}, 0x40050)
setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000002000)=0x6, 0x4)
sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000081)
connect$tipc(r2, &(0x7f0000002140)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x3}}, 0x10)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000002280)={0x1, 0x1, 0x1000, 0x76, &(0x7f0000002180)="739723807b82d3c5276d5ec78d61f488a4208b206e90456e53238d12a047ea66e0adc8538251f2a43d1dc0ab6e1d2e3de22dee9b193312b25b474e556a0335135794889ca8b7ae4ef1107c1f2d0023ce08b9c9f1fa75078fd841cc9f00140b4b1293fdbaf973659459a85ad3dfdafbc57e8f1528c792", 0x58, 0x0, &(0x7f0000002200)="509a132c0885d105e6ff68b833d556bb96c46b9246e5cd7bf01b1e700fcd47ab72b815f2c247b2165241bf4462feb24477aeaea473123aa775073fd39038967accd656e90f1588e7d4867603d889be0ef0128307c987f105"})
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf)
fsetxattr$security_selinux(r10, &(0x7f0000002300), &(0x7f0000002340)='system_u:object_r:crash_device_t:s0\x00', 0x24, 0x6)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000002380)={@loopback, 0x2d, r9})

4.135825071s ago: executing program 33 (id=925):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x2})
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3c4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)="ec244c407a80ee9fa132a130392a34ff81", 0x11}, {&(0x7f0000000100)="4696badd0579e754fb14a01b08078076a423d0fdd95f0ec4523d91bd392532a348e697c9539473d8415114e11c0a2e5016e11d9542ca5622e80543df579523f13174f9af56d410e7b997c43acf4247ab3a7088f4e919f237d5c8933fd6957a66c0332f77ed137998e745fef792d7b456fb9f1f15d18e8306151fd41f45077ec60d4426a5e58f8b1a6d8124a2bd1114e66d260f37e8a36fb297b58ae9ca65645801c845ee3785aa8dbf", 0xa9}, {&(0x7f00000001c0)="5fc9bf7cae09a56648", 0x9}, {&(0x7f0000000200)="d0031be6273e26bea5b6cfc7c1aec076109cec20123c7477389ef2d58fc3f1b5c20d13bd94729047", 0x28}, {&(0x7f0000000240)="af8d9bc1ded091c61265a9e8ed664a", 0xf}], 0x5, &(0x7f0000000300)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts={{0x80, 0x29, 0x37, {0x67, 0xd, '\x00', [@ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x18, {0x3, 0x4, 0x20, 0x9, [0x5, 0x89]}}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x9, 0x45, "3eabd1c480d08c3770f07a190e6be7d7f14e8883de0dfad11ec70aecdb232e0d6beb59affd36a3a92c337cd823058a6df8d6b13f60d2848ec52d8d7da10d430f6ab0d2b2e8"}]}}}], 0x98}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c2ab250c2777"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6f4130eb6b5c"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7e53c9021bb2"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="405f84273a72"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="128e2661e5c1"}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x4b}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x891}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x54)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000780)={{{@in=@local, @in6=@private1, 0x4e23, 0x9, 0x4e24, 0x8000, 0x2, 0xc0, 0x20, 0x5e, 0x0, 0xee00}, {0x4, 0x7, 0x0, 0xe, 0x20fe, 0x1, 0xb, 0x8}, {0x10, 0x1, 0x7, 0x8}, 0xfff, 0x6e6bb9, 0x2, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x4d2, 0xff}, 0xa, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x5, 0x37be}}, 0xe8)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f00000008c0), 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000d00)={r7, "0ac6303630b5b677aa2aaa9bd52a70e4"})
r8 = openat$cgroup_type(r2, &(0x7f0000001d00), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000001d40), 0x9)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001e00)={'vcan0\x00', <r9=>0x0})
recvfrom$packet(r2, &(0x7f0000001d80)=""/65, 0x41, 0x2000, &(0x7f0000001e40)={0x11, 0x8d, r9, 0x1, 0x4, 0x6, @broadcast}, 0x14)
r10 = openat$cgroup_freezer_state(r2, &(0x7f0000001e80), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2023}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x2d}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x824}, 0x40050)
setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000002000)=0x6, 0x4)
sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000081)
connect$tipc(r2, &(0x7f0000002140)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x3}}, 0x10)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000002280)={0x1, 0x1, 0x1000, 0x76, &(0x7f0000002180)="739723807b82d3c5276d5ec78d61f488a4208b206e90456e53238d12a047ea66e0adc8538251f2a43d1dc0ab6e1d2e3de22dee9b193312b25b474e556a0335135794889ca8b7ae4ef1107c1f2d0023ce08b9c9f1fa75078fd841cc9f00140b4b1293fdbaf973659459a85ad3dfdafbc57e8f1528c792", 0x58, 0x0, &(0x7f0000002200)="509a132c0885d105e6ff68b833d556bb96c46b9246e5cd7bf01b1e700fcd47ab72b815f2c247b2165241bf4462feb24477aeaea473123aa775073fd39038967accd656e90f1588e7d4867603d889be0ef0128307c987f105"})
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf)
fsetxattr$security_selinux(r10, &(0x7f0000002300), &(0x7f0000002340)='system_u:object_r:crash_device_t:s0\x00', 0x24, 0x6)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000002380)={@loopback, 0x2d, r9})

2.887436341s ago: executing program 0 (id=938):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = memfd_create(&(0x7f0000000440)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
r1 = syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0x1bf1407f34702e47, 0x6, {0x6, 0x23, "ef8cb832"}}, &(0x7f0000000140)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "ec1c52f31fb7a17d28c6770682862034b2ccba66ec1e504a06e273b4219d0b165d44366d642f170106a5a5d50e885cd2d30ff5e74ed4cc431dd745629c4be99bddbda6031e078238a30d4351f0708adacb60a6534e916e9a8f1d7e1ccbdeaad8cf49acbf45b1830397e00b23d02ae7f6ddf209d574c86df62299d9e686eb357d89ce4cc04bba3052c3"}}, &(0x7f0000000200)={0x0, 0xf, 0xd2, {0x5, 0xf, 0xd2, 0x3, [@generic={0x35, 0x10, 0xa, "0643810641106a43b7f849af133d9702384c418f1e6a6b09f1beba479770b886ef4cbb409977b25c5567b2492b97ab06d6b4"}, @generic={0x88, 0x10, 0x4, "7c55b8b517659a21af206f708976a21ccba37a4e94a5096fb4ec25ff68b9cb6876c4a903c13d05d37d561a94cf09b94997572e94d359519a8c5bd884e6253da6cc2fd446ab67c727e5cdd10aa8daf18e667d1ed59cf49978b1d41db60a6b9f6fafa3269a81cbbb7fa18c80d57e66658dcaf9ac886af04f2aaadb2e380317cc7e22175e87ca"}, @ssp_cap={0x10, 0x10, 0xa, 0xc5, 0x1, 0x8, 0xf000, 0x7ff, [0xc0]}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0xe, 0xed, "f2e339bf", "6597c7c9"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x80, 0x7f, 0x9e, 0x4, 0xfe00, 0xd}}}, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x20, 0xe, 0xf, "6f2f5465596cc7cd4057eb23310847"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x40, 0x20, [0x1e000]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0xb, 0x2, "67e8"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x13, 0x6, @local}, &(0x7f0000000740)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "b37c"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xca}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x80}})

2.372524833s ago: executing program 5 (id=945):
r0 = gettid()
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
write(r1, &(0x7f0000000480)="532e2eac770767f7429748", 0xb)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000040)=0x89, 0x4)
recvfrom$unix(r7, 0x0, 0x0, 0x12101, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f00000015c0)={{0x10b, 0x8, 0x1, 0x1f3, 0x21b, 0xfff, 0x313, 0x6}, "8c8afbe86d1b6275abaf669b205c392750754bb35c0616bc3cae2ad9fc70cc8ecce1e306f03a14935cea96a007ac80b2d7e35769deae51aae25b76678b30efe0a81e6aecc4d37aa87a4db0f24ccf2add3b2004fc3625701c5743dd80aceef1142d14d28e3f942cddd3475e38cd4b8ce420f2bb0608cd32155d14d11b740e0d639d4ac4506d1d1e100bcc6f7f3235eb7fdffb3ceea240b103b2e8d04cd57f1a62a788aa7fb183317c970152fd42e90c2331d4e682b69abd83a345d60ba270da0f69d0b75a74ab77", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae7)
syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=<r9=>0x0)
syz_ublk_setup_queues(r3, r9, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff)
ustat(0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.214587307s ago: executing program 5 (id=946):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @empty, 0x7}, 0x1c)
ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000000))
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r2 = fcntl$dupfd(r1, 0x406, r1)
r3 = socket$unix(0x1, 0x1, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r3}}, 0x20)
write$cgroup_pid(r2, &(0x7f0000000240), 0xb375)
read$FUSE(r2, &(0x7f0000001900)={0x2020}, 0x2020)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190)

2.173999598s ago: executing program 5 (id=947):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000f00)={0x24, &(0x7f0000000d40)={0x20, 0x5, 0xd0, {0xd0, 0x22, "fe22c0bdb11e0c6773e7db1999eb52e3f550b701daf50b1ff46f2ea21a176d3273e1bcbe1f041e15d5bd7c2ef32c7f90ee1dba1b67875885337017064dfc30b19e943d9cb09ca0efe7216bbe9455de0125afcbfac35f7dacdf1e0ccdbf0d0a19d819d113a9fb22fc35936080e8c52a03e0908a0943db20db67c446f49741873418ec5aefb92a91c14c7403d6025391bd2826618a550f7cfb7758dcdbf5341d9221c757172343cdb5660824423c08a6c7a597d54617490c394fb5e9058949de3d281fb5611abb683f6b48c7dda851"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000e80)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "a1d12a1e"}, @local=@item_4={0x3, 0x2, 0x7, "e006b2f9"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_012={0x1, 0x1, 0xa, "bf"}, @main=@item_4={0x3, 0x0, 0xb, "561bf9fe"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x81, 0x1, {0x22, 0x9a}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f40)={0x0, 0x14, 0xc, "2558c5d67448820d55edaed5"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001000)={0x20, 0x1, 0xce, "1bcf6a6046902fdffca2307b12a7ac7314c3630c0c19735c6bc9b93404c6a455109a2aebdac60cc97ec5d7d0894876b775d1659a2941435f28c9148cf826710ef848fad8440dc6484aca73f5c5939de19f7f50129929710aeab3abad6143c363dc44fa784d19af3aeff51028597f925efed2b7baab7966039e2db453cb9d24f1219b5910e2b4209e9b6dc34e33eff6d24aa0992979e8527e4de2e20b0f89e68d5521d77b0357f582487f6cc5253dbe5f7e6a0bcc35e2575740305c6b7b96db18bd05ad5d79eec78bf1a21c42cbba"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x10}})

1.685198209s ago: executing program 2 (id=948):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700)
r1 = socket$netlink(0x10, 0x3, 0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r2, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_setup(0x2278, &(0x7f0000000180)=<r4=>0x0)
syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000140)='./file0\x00', 0x1ff)
r6 = openat(r5, &(0x7f0000000200)='usb_gadget/g1\x00', 0x0, 0x0)
r7 = openat(r6, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0)
write(r7, &(0x7f0000000100)="e39fda04", 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r8, &(0x7f00000000c0)=' ', 0x1, 0x0, 0x0, 0x2}])
io_destroy(r4)
add_key$fscrypt_provisioning(&(0x7f0000000740), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200e08edd12747766efac1c23c48f89d713000048e3ff0061616161616161616161616160616161616161616161013566336787a501ba7a3e9ea49759616161616161616161613131313131313131313131313131313131313531313131313131313131313131"], 0x48, 0xffffffffffffffff)
r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000100, 0x0, 0x7fff}]})
fspick(0xffffffffffffff9c, &(0x7f00000002c0)='webusb/use\x00', 0x0)
sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYRES32=r9], 0x1c}], 0x1, 0x0, 0x0, 0x20048801}, 0x0)

1.592805262s ago: executing program 2 (id=949):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xad491000) (async)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000003, 0x12, r1, 0x0) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a0005"], 0x28}}, 0x0) (rerun: 64)

1.514767854s ago: executing program 2 (id=950):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = memfd_create(&(0x7f0000000440)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0) (async)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r2, &(0x7f0000000580)={@val={0xa, 0x72d1}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x1d8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x4, 0x1ff, 0x2000005, 0x53, [{0x4, 0x1e, "8666000005dc13128e21be0ca3631c139c476e64ddd58715f9515609f30f02dcc39e129ed698ffa44d6548a012f7004e0ab9dcb95580c0b6d48fc1a50000c8896cf496271da94eb0b9f1499f1bcb2cfe350875803587770312bd1d83e9a99408855797b33e14534c04acafd2d7eb6380b19eff8edf4e40f9661c77a5fba9af8147db07882c4b2b387a61a0ad366b75089a26b0dc126b5e9f0af1d657bd0752bc88f1853833ed6e6b5255910c9101243892dfbbbda1d2dbda346f3aa802afc1c1b4ee89e7df67dc1edfc4ab3fe773e7ea7ddc8b0e7ed5e3cdead388ad5ff116ec8279ecbd85faf0b0bc2c7378c7b2041bbb0badf634"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x1f, 0x0, "3457000005"}, {0x3, 0xf, "98cadafa174595f7f6484e6cda04f0785b24bf0f6bcad89c2ccf7c88b1ba56edfdd6bb5dc326796702c47e113d3698468fbb7326dbe14d20d0fc0c74d1e9d94057b4056b76797d99bfff96690440e51ba14d591b990376625cefb327d328655ca183d4ad196f6b2a5c63e4bdb3f92f3ce8909c7d7718"}]}}}}}}}, 0x212) (async)
write$tun(r2, &(0x7f0000000580)={@val={0xa, 0x72d1}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x1d8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x4, 0x1ff, 0x2000005, 0x53, [{0x4, 0x1e, "8666000005dc13128e21be0ca3631c139c476e64ddd58715f9515609f30f02dcc39e129ed698ffa44d6548a012f7004e0ab9dcb95580c0b6d48fc1a50000c8896cf496271da94eb0b9f1499f1bcb2cfe350875803587770312bd1d83e9a99408855797b33e14534c04acafd2d7eb6380b19eff8edf4e40f9661c77a5fba9af8147db07882c4b2b387a61a0ad366b75089a26b0dc126b5e9f0af1d657bd0752bc88f1853833ed6e6b5255910c9101243892dfbbbda1d2dbda346f3aa802afc1c1b4ee89e7df67dc1edfc4ab3fe773e7ea7ddc8b0e7ed5e3cdead388ad5ff116ec8279ecbd85faf0b0bc2c7378c7b2041bbb0badf634"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x1f, 0x0, "3457000005"}, {0x3, 0xf, "98cadafa174595f7f6484e6cda04f0785b24bf0f6bcad89c2ccf7c88b1ba56edfdd6bb5dc326796702c47e113d3698468fbb7326dbe14d20d0fc0c74d1e9d94057b4056b76797d99bfff96690440e51ba14d591b990376625cefb327d328655ca183d4ad196f6b2a5c63e4bdb3f92f3ce8909c7d7718"}]}}}}}}}, 0x212)
vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)="fa5d0de5d65d724a1faba0c153017403b82480b4f6b30ca4e4e30c9c86699e5b7419db4371f1264dd1e31f2f6555d67f15bad50639aae7dbf35f6162dd803b09b6b1317194e6980fdf0ba8b14bee14a7283891d1c78fb6c890c58fdeb0b5dc115217301de06747e1f3d3d95c01ff33cab9544ba92c9f45dba1de8169ca41a0e2c8c7bd5b3b69b4b6a4eb8d58285a90cc4a6a36b633286f026038f605363742eebe686f1e59fa47b2081811f42a11c31c", 0xb0}, {&(0x7f00000001c0)="e30a70d937decba796621aaac9e174e8bd23d72d53f19f43dc13446cefa1ec20791ff4318de7a75c3a1ce7f1c3b91bacc923eefe3e3c95dca8c065e7aa4cf894c175135aa8b63bf527f02f0fc1c454de83b844bb95b495d0962afa04197271bc70f1efa09c2ebf56ba5be40a6a977f4f4c45ff208eac3e546e43afb8a7e557dff4aa", 0x82}, {&(0x7f0000000280)="e24a572ca18b52828260ef431ee9e528bd7a328486629ed56afd1acd5623f61f13d4ecf17b979dda60aa14db7f38d20a4035b5d4a236e0ed08637e7407b437a04ebc4bfb04514f9febd1874d25e6fe1766f6fca1003c73a24adcdea0c2bfb3b4bc5c4a19ce4e8ee6ffadf5dcf00568dbcee5397f6b861900f6e497c2de42a9e578daf703ab317ae226ce68bb20b7c8a80f51", 0x92}, {&(0x7f0000000340)="f1f363a944fd2a63569783b0cbc93600c4e03430c17edba97a56ac96228e7b0c5dfff9c8b1b47e8920aab52533dfdf5b0d927816dced983c7a02f23e51275b2db4eb890b84f59e3b490ebfc6f239efa137f2183f89b15258af3e732f68262ef7e5b5ba66bcc3f28fd02f4f03afaef571899c141769", 0x75}, {&(0x7f00000003c0)="847ac5600f653a3fa51790c3e26d271f722c85f6e5e3af966413993277e3f02ac96d15cbb49640f3f09b56fee15f0b8f8cdcb6ee4cd13b3e40925406e3a7f0652e0208846debb051dad16559c1d7c1f70cc2f277c758d9223b462a547b4e72875bcf93c0650d9507e2f5b61e917ebc6ba7cef9a05dc4e9344897", 0x7a}, {&(0x7f0000000440)="02772a26249db85136f902defc34367177945b6592698790bbdb2215d3bb2a67a03994180d3b6f", 0x27}, {&(0x7f0000000480)="9091902a9e6777b203187cb7e58d28c4b34f4cbe6237d00d78d1d3b3cd372709f01e29167298c0f70816b2e1bee6e78a75d77dccfef3421876689d005f09ce4c330d2793055f03d047893d261b8ca24316e9a96ed51385e6e08e0f6ce5e0586f5b5934e90cac2b34d1d42c3000563755694f66dce4a165266cdb08e01ac67c0eaa9a7e850beee8d4dfcb659bd5226ff224fd5b33d54d2ea50aaf1a88f542ba15ebf7e878abe6d751b488c0e453dc9a8d3ca35d53c64804f6aadd35806ca94bde3cc110b0276e49a4967d7be368ad56892ca5bd5661326cfef43db10e2e5632661f1435a0cf979b0a2b61c77259044d3a4a52", 0xf2}, {&(0x7f0000000580)="bebf9d7a5a", 0x5}], 0x8, 0x0)
r5 = fcntl$getown(r1, 0x9)
prlimit64(r5, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) (async)
prlimit64(r5, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

1.408850626s ago: executing program 0 (id=953):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
ppoll(&(0x7f0000000380)=[{r0, 0x230}, {r0, 0x800}, {}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410)
sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000090020000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r5 = syz_open_pts(r4, 0x200)
r6 = dup3(r5, r4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xff)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xa)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvfrom$inet6(r3, 0x0, 0x0, 0x10040, 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="7d5a87c3e0ac784ea8cb6c38e3db9657f7dc63e9072d5a5e1d74d95c55d9002594ad7002121e5751fd66c0167e745153d945b1b3b73bb687941494e6d889a96d5cfa82a83d9f1bbf445683a608f806afdbd79ed1ae22bbaf628836c0c0a2029a60d3ee12c552ea2b4fb7f1704b043859b4256abfa4180600a3b34f99429789dfd766e07597ae7be13b488693c63d88f6a710b910b734ce317466a6af6b7f93fb9b50a475159d9fff792b80afd51774d88f8ad3b71e568e7a100b496dd2277d11f8ebece6bd0ef6975d0782ee21e6046db464b4ad3447d2696dbf64d306d6da8532ea225944c613aa69a48c03dfe1befe35a01354f3bcc2ddb34dd77ac2853a5f2568d9965b292dbfe6af4e6558fb81dd3c364bb4be067044297e5153a110fba16d90476d8edde5a76d35b6529fe1f3309041ba732a87f837413ad4cec8a96fb70be2d91286e83a4b573bf529864a6976e8999c5d60eb0208fe6ddce623b5a0918ef016d9394b457f048453f371d49ff69bf724a6466f3f0a1e8daafd533e36a608f073727db6e3a051f2992614ad794e28fe3370de5ff4c72647ec5a43f19c9c5646bfd66ac91a13dc40005cd8955d3da2b9c06e61cfc3d2d349a51f3ff57be65e3629d7e634424f58f4159440ea21b4346b2e2a3673419a933f06ce7dfd660150f529cb635736d082dfff47"])

812.63867ms ago: executing program 1 (id=956):
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
capset(&(0x7f00000000c0)={0x19980330, r0}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x1)
getresuid(&(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140), &(0x7f0000000180))
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@nullb, r2, 0x0)

803.84589ms ago: executing program 1 (id=957):
setresuid(0x0, 0xee00, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080))
fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0xbfbb, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

745.306182ms ago: executing program 1 (id=958):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x4, 0x6, 0x4, 0x3ff, 0x5, "c069f86cf89fe9c2a8dd0a394874b580404b0f"})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f20210f30c4c111fd1e0fc79d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x5, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

622.970895ms ago: executing program 1 (id=959):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000048c000/0x3000)=nil, 0x3000}, 0x4}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x6, "86"}, @local=@item_4={0x3, 0x2, 0xa, "3c59da13"}]}}, 0x0}, 0x0)

568.078816ms ago: executing program 0 (id=960):
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) (async)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) (async)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20, 0x24000080}}], 0x2, 0x0) (async)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ftruncate(r3, 0x7) (async)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000400040000", 0x27}], 0x1) (async)
syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef0101"], 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000c04000000da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0xffffffffffffffb7, &(0x7f0000000300)={0x40, 0x10, 0x12, "838a471e2f7d164ab40fa2becf1c65b595f0"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x41}})
ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000580)={'\x00', 0x0, 0x1, 0x4})
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x24, 0xc4, {0xc4, 0xd, "a4ee1c91488ca9194b727f3eccdb547a1655e77be83ded873d452b7f5d9af5ea89a6ae532d659d6009780a64f7f398347ffebd0fb920e66981c5aa7bd62419711b52d618c5dc20bef5cc52413d4526204248903be1b14d19018ca0863c7a0bc6378591ece332f6a8986d733d9e5dd1ad7ea05fb690546a86d9a1dd21b89d7df7c042c7e33503c9d06ddb547864e3090884bee6a20d5b80c0c149557ff10157810c42df91ca8b7f630da7ba323af07da013926e80505a25f013d9db189c64ead2b800"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000400)={0x40, 0xb, 0x51, "cfc4eeb62e719c51d4c118e8fa174a3c7de48221abbd984e7d4c19d1e52e7ceac062d4b6004831f98bd99904878d5bc2289dea8af02a4320c65875a1de36f74c89bc8adcef4722e8b4a7cb2c42351020be"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xd8}})

539.686907ms ago: executing program 5 (id=961):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x7, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x3}, {0x2000, 0x5000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0x50000, 0xd, 0xfd, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xfc, 0x6, 0x10}, {0xffff1000, 0x7000, 0x10, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x80000000, 0x0, 0x1]}) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) (async, rerun: 64)
listen(r2, 0x5)
close(0x3) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x3, 0x1e3}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280))
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async)
openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x2000, 0x89, 0x4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (rerun: 32)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r11, 0x40104d06, &(0x7f0000000a00))

405.09475ms ago: executing program 5 (id=962):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, 0x0, 0x0, 0xfffffffffffffffd}])
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2b3173d11d86322843bc6ee4beeff184bfeb2f15cfd1ae189bb68995feab724d720656d528d8b67823c02941343f1f478e74a152bdc0a55b2ce0c3dfb338c25e4b63a3a3063c240ea4a0712507fad227c65b7da6ed66f943a61c724a0db0d774b994b4fc8ddc44a10c32f59e555e5d1b07195df685079189c3140956b641b5617e9bab446bc57bd614e99827f8e1797ec6d59fc7cf1057bd947f233de2e12d217aa517da60e38a648e3a3ef7359bacef04e583e430786d6606bc06d8d48297e76deaecc592b98ff4c4024f7cbb9ab9b3d0c5aa08e940fdc7462fd7e92632f3a36576d83088a30f960b69d972c263d6d5a21f4f69b131f762326bddbcc121602419c39bd32a198a9996df6e84f9f09ffe48c3c9581158c0fdeca83338d36f6e5665f090a667d0c62c967a87b6099f4c03c87ee4c09d2d47724f7b7a69d7c1f06936eb49bb92dd9ff83859c3a0218d618a8831666d7060ef6f39af904daf0bf662f7ae82b1527f3251dbebded35df44065981f486bfff3a3493e6b5c9eaef877d7a74356b1d83a0d65df13789ad181270d98d1f09a9e021354910cf891ae4f027bd4864b8d6888b807b70b499eb0d934c1f899ac1cbb8378da0e43c0161003d0d8107e0367174107436ab7b7199373d30415d89a77a0c91c313a191bb95751ed33cdb641b0a7d2a57166941ec6d68461cfc1d7b01f3f560f2d06669ac83b83c210593f1072f985a623cc7167353272b4aa91e9d1d4f992ba9e38841818850e90f144671f7730a998f58136ef67d1eb18d0f2e46f71c2a9d34f0122295185bdeb2f4172dac7534801ad577c77e962fa2b195e7541772d563df75f2c4667bc4dfa8cbbfc0283e3a299232ba8945f2da080b64e26c44292f097ce185571cd8ed031b26bfef46134a66bd71967bc90cdbe3ff65c589604727d952a46a2f32bc393ef72713c84f6d6b200b8050232009c7066c8c7523d28e451dc6e243955474f885dee66ad9639e90034751cf3d225646d2ed7e16e74887eb8dada57640e6d5b58e5419fb11cf63d1caf311ad24114aac0c0a4095d8e10c0ff9039f099d201b7f3a5ec74d9b220f2b9ba9d67456dd053d872c6f5dd1340fb56fbacefd34a4bc7ca6a12957ebf648e79878e908800c3b33eb271c6fe6008b83e70ef156910059ad58e7e47db24f824c23feeb8da94ebc56c938d3e80dc9bf95aba44093529390ad31e44dcea486b90b7ffc4d6cda130584c3c4340754423dcb4a075db5ee177be9bf6e6a6eecd3c23592d2e48901b8b5cdad3fa3140bf819e8c28bb4293c18452be2766d1960438e21275dd840a4314a9251e67b3d799f567b6114a67955fe10c82e36e775a039fa826b3b849f30ca34b9ffdf5fdaf19862d9c5962e07992711dec34d61b48104cc27c1eb9eddffeeffe82567e23905bab084071304e1373ef53bd3ca53a44eaf699890757453a2882eaecc59e7610e66db46b93c8d1376b7dd424a08344f9443a92029a566496ecedbf9ace7ffb2ff6503daabac197bc4158159062703818af07db6dbfd773342ff68a0ca5504607ea545e33ff46454392c07f878cecbc4f03c611af8e76b5706a5bbbcf7db03eaebf41fe5b562848eed6264ef94d80aa6fec84dd75aa31accac6b352d77cf9db16609fd606982e4061e1a14947fa257d1c1812c990297027ba7d247e8dc775dc231d318f1019c4f9da720f52a3b1da63b66b8da7f0e93cf2fbe48d818d3921854bac96903ff4cc1dcbc09b737d4259e4e2104e3c996362ca9d0a503f4de2912eb14c92ca57a6655ce0fbc283de04d7aaa887226d090886427024006fca8603f7777ddf5875e72b809a81781b48cb2c4c1c5adf7de8e0a0cca35cdfdb030c91f1b981b2e36cdcf1ba6304483694ec6e310816237cdcebd593e8c0ec18d6446bddb62970077b97a0715545e7ea2fe91a29f828dd1e18c1668bb313f6a8e25e72c9df900f1d0d4c6e4a0fbc222615d2033eee134dcb85d9e6b059b28964f17b048f1a78a4c34e54cf9accd06198e145c4c4f01e856215e55108e55db71ddcc538a649a8016d73d422a550f377f79cc2a460249eade98ed4e082ab1ada4b9ee7024fb7da38424866c49bd463a3198873e0105277cfffcd6e3d6c29472d66577773aaa473beda5544b5f69c215d1e56a4c42732fa3ea530252a7f9005a4f7a235b8bf44adeee87e53701b926130934338fd5e0b0715f60c2e311e9d3dcd08093ec8db55a2886bc75bd11a5f247abc1fd927da1206442ef216cac1b952f2ca9", 0x712)
futex(&(0x7f0000000000), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x2)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r3, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="290288ac4d770dd953f7fa7534f3c73cc21e1beedba555dee2095863cb6ddd2179d7a0c65bcb1b99a8041996038bec5a13ecb4ef64431583554ec5162f030e1b4855c0d162da72db7b01878b849fc5e2dff7ac3d012ea6b5c805d3e6411a46096005b07235e5c504f9e485e05ddda0c62263d5003962ef720e1d9f8810457154a1d378207d118456da7bbc965ea2fd7f24be"}, {&(0x7f0000000100)="647bbd91424f1e8a897a38c6926dbc3a"}, {&(0x7f0000000200)="f84cc67aad65bb2a26656f47b4177f20cf556169729cc68c0f4f7cd14bb97a291f0e83d1dc6a57b0bc996c2b80fb0231fcf11bc9d5e9caf6cd59860e2c567e95b1532e9b2d32b2a9944caa289fac2c732722b797373ee57824ee4672c8bb1d9546a45621e262ef00a4"}, {&(0x7f0000000280)="6ca827ab5ff587c25583970974d4cab0b1cfc9b49c94f5b43333c0040a52a28089d003075763745f6b36b4a0bdb9"}], 0x0, &(0x7f00000008c0)=[@rthdr_2292={{0x0, 0x29, 0x39, {0x2e, 0x0, 0x0, 0x1f, 0x0, [@empty, @local, @private1, @local, @remote, @empty, @loopback, @local, @mcast2, @empty]}}}, @flowinfo={{0x0, 0x29, 0xb, 0x1}}, @flowinfo={{0x0, 0x29, 0xb, 0x7}}, @tclass={{0x0, 0x29, 0x43, 0x7f}}, @hopopts={{0x0, 0x29, 0x36, {0x6, 0x0, '\x00', [@calipso={0x7, 0x0, {0x0, 0x0, 0xd7, 0x3, [0x1]}}, @ra={0x5, 0x2, 0x8}, @generic={0x0, 0x0, "085b0b318354e5082a9355bf591e72614f4fa53a44dc2a4f0e296eabb5ffd758531ab6025ce0f0b7abe1bb9e26f1cdd2411c3d040a879dd5bcf7b9972cf38482e9ff0d66e99b73f1b67580b3f1184c92f2a267be4ffeaab53cde10078b9443a8be1cad217e68377845671713491a746fff07000082dc354d7cc1bdac59baa30fa77d25b07715d79351a591fcd3ace081b9"}, @ra={0x5, 0x2, 0x7}]}}}, @tclass={{0x0, 0x29, 0x43, 0x4}}]}}, {{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000600)=[@hopopts={{0x0, 0x29, 0x36, {0x67, 0x0, '\x00', [@padn={0x1, 0x0, [0x0, 0x0]}, @hao={0xc9, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @calipso={0x7, 0x0, {0x1, 0x0, 0xe0, 0x4, [0x9, 0x7, 0x5, 0x3, 0xffffffffffffffff, 0x2f9, 0x5, 0xfffffffffffffffc, 0x9]}}, @pad1, @generic={0xe, 0x0, "83a37127c961a6d9476c8c3440d20040c64285636bee7a81467e8395e6931c8e4115147c3d778fd9bbdbd539d6542431ebd1fa1784d2e8a118d5995787dc8e7c52917da932f124d1d7a485"}]}}}, @dstopts_2292={{0x0, 0x29, 0x4, {0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}]}}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x2b, 0x0, 0x0, 0xe8, 0x0, [@remote, @private2, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hoplimit={{0x0, 0x29, 0x34, 0x3}}, @pktinfo={{0x0, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x88, 0x0, 0x0, 0xe, 0x0, [@rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, @empty, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}]}}}]}}], 0x4000129, 0x20e8086)
sendto$inet6(r3, &(0x7f0000000180)="e4eba9c15d1ee9eb1913bcf106c6b1bb86172d891122171bc44f929c668058cce40ea87402e90200518ed4516e2d4fbc906d645a81939dfb0000959ce7e19237140c51c44c2bdb", 0x47, 0x800, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

200.965505ms ago: executing program 5 (id=963):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r2, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000000)="de21cff472aa580c2ee9", 0xa}, {&(0x7f00000014c0)="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", 0xe0c}], 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f00000000c0)=0xffff1884, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4)
r6 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x2000)
r7 = socket$netlink(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000000)="590000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b00086001000b0000000800040001000000", 0x58)

130.361026ms ago: executing program 2 (id=964):
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, 0x0, 0xfdef)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000100)=""/140, 0x8c})
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
r3 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x20900, 0x16a, 0x19}, 0x31)
sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x200008d0}, 0x4040)
sendmsg$802154_dgram(r2, &(0x7f00000000c0)={&(0x7f0000000540)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f0000000380)={0x0}}, 0x20000010)

53.243808ms ago: executing program 1 (id=965):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
poll(&(0x7f0000000000), 0x0, 0x9)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
socket$packet(0x11, 0x3, 0x300) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) (async)
poll(&(0x7f0000000000), 0x0, 0x9) (async)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) (async)

51.453618ms ago: executing program 1 (id=966):
syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102880c00404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c09247b83a80c23631c072402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c4427d7940d2450f01c42e0f070f20d835200000000f22d8650f09d15827440f20c0350a000000440f22c044850dd900000064660f38821e66baf80cb830b7c986ef66bafc0cb800000000ef", 0x4c}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

45.204528ms ago: executing program 2 (id=967):
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0xfbb4})
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x8000000, 0x200000, &(0x7f0000e00000/0x200000)=nil})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x8000000, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x1, 0x8000000, 0x200000, &(0x7f0000e00000/0x200000)=nil})
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r5, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x300000a, 0x12, r5, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000180)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1})
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r12=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r13=>0x0)
r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2)
syz_ublk_setup_queues(r14, r13, &(0x7f0000000180)={0x0, 0x8001679, 0x100, 0x1, 0x358, 0x0, r7}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f17, 0x40, 0x0, 0x3b7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a1e, 0x4000, 0x0, 0x3be}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x45a0, 0x200, 0x2, 0x104, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf24, 0x0, 0x1, 0x42, 0x0, r7}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x2, 0x0, <r15=>r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r12, '\x00', {0x2, 0xea2, 0x0, 0x0}}, 0x0)
syz_ublk_setup_queues(r14, r13, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1fd}, &(0x7f0000000800)=[{}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14e5, 0x20000}}, {0x0, 0x0, 0xffffffffffffffff, {}, <r16=>0xffffffffffffffff}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00))
r17 = socket$netlink(0x10, 0x3, 0x0)
r18 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r18, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(r18, 0x1, r17, &(0x7f00000000c0)={0x8000000c})
sendmsg$NFT_BATCH(r17, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000010000100"], 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x40004)
dup(r16)

0s ago: executing program 2 (id=968):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) (async)
sendto$packet(r0, &(0x7f0000000180)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b6800000cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB="39af46244b246c18"], 0x0)

kernel console output (not intermixed with test programs):

3f35b0a1e1238c384757fc17b797
[   72.203714][ T1284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   72.203722][ T1284] Call Trace:
[   72.203727][ T1284]  <TASK>
[   72.203732][ T1284]  __dump_stack+0x21/0x30
[   72.203751][ T1284]  dump_stack_lvl+0x140/0x1c0
[   72.203765][ T1284]  ? __cfi_dump_stack_lvl+0x10/0x10
[   72.203786][ T1284]  dump_stack+0x19/0x20
[   72.203808][ T1284]  should_fail_ex+0x3c2/0x510
[   72.203831][ T1284]  should_failslab+0xac/0x100
[   72.203854][ T1284]  kmem_cache_alloc_noprof+0x42/0x410
[   72.203867][ T1284]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   72.203880][ T1284]  ? alloc_empty_file+0xbf/0x270
[   72.203893][ T1284]  ? arch_stack_walk+0x10a/0x170
[   72.203904][ T1284]  alloc_empty_file+0xbf/0x270
[   72.203916][ T1284]  path_openat+0xf4/0x35a0
[   72.203937][ T1284]  ? stack_depot_save_flags+0x38/0x800
[   72.203961][ T1284]  ? kasan_save_track+0x4f/0x80
[   72.203982][ T1284]  ? kasan_save_track+0x3e/0x80
[   72.204002][ T1284]  ? kasan_save_alloc_info+0x3a/0x50
[   72.204018][ T1284]  ? __kasan_slab_alloc+0x73/0x90
[   72.204030][ T1284]  ? getname+0x1b/0x30
[   72.204040][ T1284]  ? do_sys_openat2+0xda/0x1d0
[   72.204054][ T1284]  ? __x64_sys_creat+0x92/0xc0
[   72.204070][ T1284]  ? x64_sys_call+0x2710/0x2ee0
[   72.204095][ T1284]  ? do_syscall_64+0x57/0xf0
[   72.204118][ T1284]  ? do_filp_open+0x440/0x440
[   72.204143][ T1284]  do_filp_open+0x1f2/0x440
[   72.204159][ T1284]  ? __cfi_do_filp_open+0x10/0x10
[   72.204173][ T1284]  ? alloc_fd+0x4c1/0x570
[   72.204185][ T1284]  do_sys_openat2+0x134/0x1d0
[   72.204198][ T1284]  ? do_sys_open+0x100/0x100
[   72.204215][ T1284]  __x64_sys_creat+0x92/0xc0
[   72.204241][ T1284]  x64_sys_call+0x2710/0x2ee0
[   72.204259][ T1284]  do_syscall_64+0x57/0xf0
[   72.204280][ T1284]  ? clear_bhb_loop+0x50/0xa0
[   72.204299][ T1284]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   72.204312][ T1284] RIP: 0033:0x7fcecf19e019
[   72.204322][ T1284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.204331][ T1284] RSP: 002b:00007fced00ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[   72.204343][ T1284] RAX: ffffffffffffffda RBX: 00007fcecf426090 RCX: 00007fcecf19e019
[   72.204351][ T1284] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000200000000080
[   72.204362][ T1284] RBP: 00007fced00ee090 R08: 0000000000000000 R09: 0000000000000000
[   72.204375][ T1284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   72.204388][ T1284] R13: 00007fcecf426128 R14: 00007fcecf426090 R15: 00007ffc5cde16c8
[   72.204404][ T1284]  </TASK>
[   72.480367][ T1273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1273 comm=syz.4.297
[   72.544448][  T350] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   72.583457][  T350] usb 5-1: USB disconnect, device number 12
[   72.590203][  T350] usblp0: removed
[   72.863071][  T542] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   73.013068][  T542] usb 1-1: Using ep0 maxpacket: 16
[   73.013931][   T36] kauditd_printk_skb: 1373 callbacks suppressed
[   73.013945][   T36] audit: type=1326 audit(2000000046.769:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.018295][  T350] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   73.034781][   T36] audit: type=1326 audit(2000000046.779:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.053691][  T310] usb 3-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40
[   73.060197][   T36] audit: type=1326 audit(2000000046.779:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.084962][  T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.095885][   T36] audit: type=1326 audit(2000000046.779:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.124452][  T310] usb 3-1: can't set config #1, error -71
[   73.128274][   T36] audit: type=1326 audit(2000000046.779:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.153195][  T542] usb 1-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[   73.158841][   T36] audit: type=1326 audit(2000000046.779:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.185198][  T542] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   73.194839][   T36] audit: type=1326 audit(2000000046.779:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.224882][  T310] usb 3-1: USB disconnect, device number 22
[   73.235397][   T36] audit: type=1326 audit(2000000046.779:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.270706][  T542] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[   73.288468][   T36] audit: type=1326 audit(2000000046.779:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.297398][  T542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.323694][   T36] audit: type=1326 audit(2000000046.779:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.1.305" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04739e019 code=0x7fc00000
[   73.330992][  T350] usb 5-1: device descriptor read/64, error -71
[   73.371671][  T542] usb 1-1: config 0 descriptor??
[   73.401457][ T1309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.410565][ T1309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.603114][  T350] usb 5-1: device descriptor read/64, error -71
[   73.773280][  T310] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   73.843089][  T350] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   73.923040][  T310] usb 3-1: Using ep0 maxpacket: 16
[   73.930460][  T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.941856][  T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   73.954256][  T310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   73.964286][  T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.972553][  T310] usb 3-1: Product: syz
[   73.976867][  T310] usb 3-1: Manufacturer: syz
[   73.981683][  T310] usb 3-1: SerialNumber: syz
[   73.986429][  T350] usb 5-1: device descriptor read/64, error -71
[   74.196335][  T310] usb 3-1: 0:2 : does not exist
[   74.203351][  T310] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   74.214726][  T310] usb 3-1: USB disconnect, device number 23
[   74.223169][  T350] usb 5-1: device descriptor read/64, error -71
[   74.335731][  T350] usb usb5-port1: attempt power cycle
[   74.688247][  T350] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   74.822362][ T1330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.830857][ T1330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.006614][   T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   75.120190][  T350] usb 5-1: device not accepting address 15, error -71
[   75.161429][   T45] usb 3-1: Using ep0 maxpacket: 16
[   75.168036][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.178528][   T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[   75.189498][   T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   75.199255][   T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   75.214522][   T45] usb 3-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40
[   75.224180][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.232391][   T45] usb 3-1: Product: syz
[   75.236758][   T45] usb 3-1: Manufacturer: syz
[   75.241698][   T45] usb 3-1: SerialNumber: syz
[   75.365200][ T1335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.373800][ T1335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.459732][   T45] usb 3-1: USB disconnect, device number 24
[   75.464669][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   75.491376][  T350] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   75.513343][  T350] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[   75.522538][  T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.667398][   T62] usb 1-1: USB disconnect, device number 26
[   75.738372][  T350] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[   75.920398][ T1345] tipc: Started in network mode
[   75.925683][ T1345] tipc: Node identity ac14140f, cluster identity 4711
[   75.933184][ T1345] tipc: New replicast peer: 255.255.255.255
[   75.943897][ T1345] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.061993][ T1355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.070779][ T1355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.097500][ T1357] netlink: 220 bytes leftover after parsing attributes in process `syz.2.325'.
[   76.108657][ T1357] netlink: 'syz.2.325': attribute type 29 has an invalid length.
[   76.650952][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[   76.665118][   T62] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   76.688230][ T1385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.699456][ T1385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.765739][ T1389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.774955][ T1389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.829600][   T62] usb 3-1: Using ep0 maxpacket: 32
[   76.835816][   T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.847128][   T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.857113][   T62] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   76.875059][   T62] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   76.884387][   T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.894600][   T62] usb 3-1: config 0 descriptor??
[   76.930991][ T1395] zram0: detected capacity change from 0 to 24
[   77.086697][   T10] tipc: Node number set to 2886997007
[   77.261464][   T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   77.416728][   T45] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   77.432765][   T45] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   77.446079][   T45] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   77.457595][   T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   77.466671][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.475758][ T1404] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[   77.519490][   T62] usbhid 3-1:0.0: can't add hid device: -71
[   77.525854][   T62] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   77.535028][   T62] usb 3-1: USB disconnect, device number 25
[   78.308592][  T542] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   78.316828][   T45] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[   78.324914][   T45] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input28
[   78.472632][  T542] usb 3-1: Using ep0 maxpacket: 32
[   78.478775][  T542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.489941][  T542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.499758][  T542] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   78.508836][  T542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.517544][  T542] usb 3-1: config 0 descriptor??
[   78.526110][  T542] hub 3-1:0.0: USB hub found
[   78.729146][ T1408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.737604][  T542] hub 3-1:0.0: 11 ports detected
[   78.742847][  T542] hub 3-1:0.0: insufficient power available to use all downstream ports
[   78.751307][ T1408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.947915][  T542] hub 3-1:0.0: hub_hub_status failed (err = -71)
[   78.954405][  T542] hub 3-1:0.0: config failed, can't get hub status (err -71)
[   78.963023][  T542] usbhid 3-1:0.0: can't add hid device: -71
[   78.969025][  T542] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   78.995607][  T542] usb 3-1: USB disconnect, device number 26
[   79.784868][   T36] kauditd_printk_skb: 131 callbacks suppressed
[   79.784887][   T36] audit: type=1400 audit(2000000053.389:2704): avc:  denied  { ioctl } for  pid=1420 comm="syz.1.347" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   79.814370][   T45] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   79.817155][   T36] audit: type=1326 audit(2000000053.389:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.1.347" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe04739e019 code=0x0
[   79.978054][   T45] usb 3-1: Using ep0 maxpacket: 16
[   79.984284][   T45] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[   79.992552][   T45] usb 3-1: config 1 has no interface number 0
[   79.999647][   T45] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   80.009599][   T45] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   80.019730][   T45] usb 3-1: config 1 interface 105 has no altsetting 0
[   80.028613][   T45] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   80.037709][   T45] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   80.046106][   T45] usb 3-1: Product: syz
[   80.050303][   T45] usb 3-1: Manufacturer: syz
[   80.054926][   T45] usb 3-1: SerialNumber: syz
[   80.060578][ T1419] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   80.067758][ T1419] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   80.088083][   T10] usb 1-1: USB disconnect, device number 27
[   80.088106][    C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   80.281709][ T1425] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   80.289008][ T1425] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   80.438455][   T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   80.485703][   T45] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[   80.498485][   T45] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[   80.511092][   T45] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   80.525348][   T45] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1e:f0:15:8b:1f:15
[   80.526618][   T36] audit: type=1400 audit(2000000054.112:2706): avc:  denied  { write } for  pid=1428 comm="syz.2.349" name="/" dev="incremental-fs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.540906][   T45] usb 3-1: USB disconnect, device number 27
[   80.575714][   T36] audit: type=1400 audit(2000000054.112:2707): avc:  denied  { add_name } for  pid=1428 comm="syz.2.349" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.598673][   T45] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   80.601568][   T36] audit: type=1400 audit(2000000054.112:2708): avc:  denied  { create } for  pid=1428 comm="syz.2.349" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   80.630938][   T10] usb 1-1: Using ep0 maxpacket: 8
[   80.636547][ T1432] syzkaller1: entered promiscuous mode
[   80.650698][ T1432] syzkaller1: entered allmulticast mode
[   80.660312][ T1440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.664047][   T36] audit: type=1400 audit(2000000054.112:2709): avc:  denied  { associate } for  pid=1428 comm="syz.2.349" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   80.664109][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   80.669181][ T1440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.706102][   T36] audit: type=1400 audit(2000000054.161:2710): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   80.709522][   T45] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   80.729083][   T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   80.743374][   T45] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   80.746334][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.753903][   T45] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   80.765015][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   80.793259][   T10] usb 1-1: config 1 has no interface number 1
[   80.799506][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   80.813082][   T10] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   80.835239][   T10] usb 1-1: config 1 interface 2 has no altsetting 0
[   80.843740][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   80.853775][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.862647][   T10] usb 1-1: Product: 噅唡鯛鬫滃쒱ਊ㉔膿ᰄ렜⢳槦頪誫➝ﾜ狷ῼ졊㬙穋熥䢎綤濶勘뫴ꗼၭ䎽ⷧ◵붵ἢꀎ駸濝쯄兆応뿡伬ȩ燔孆鎡ꃲ滰ᓽ
[   80.881815][   T10] usb 1-1: Manufacturer: ఌ
[   80.886430][   T10] usb 1-1: SerialNumber: 
[   81.092346][   T45] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[   81.103335][   T10] usb 1-1: USB disconnect, device number 28
[   81.246668][   T45] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt
[   81.256702][   T45] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[   81.266818][   T45] usb 3-1: config 1 interface 0 has no altsetting 0
[   81.275944][   T45] usb 3-1: string descriptor 0 read error: -22
[   81.282348][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   81.291588][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.300440][ T1432] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[   81.307724][ T1432] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[   81.378858][   T10] usb 5-1: USB disconnect, device number 16
[   81.394811][ T1468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.403420][ T1468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.527137][  T826] usb 3-1: USB disconnect, device number 28
[   81.766184][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[   81.920321][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.930587][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.940325][   T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   81.949360][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   81.957550][   T10] usb 5-1: SerialNumber: syz
[   82.000916][  T826] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   82.122413][ T1481] netlink: 'syz.2.358': attribute type 8 has an invalid length.
[   82.161794][  T826] usb 1-1: unable to get BOS descriptor or descriptor too short
[   82.170264][  T826] usb 1-1: config 3 has an invalid interface number: 207 but max is 0
[   82.178658][  T826] usb 1-1: config 3 has no interface number 0
[   82.185018][  T826] usb 1-1: config 3 interface 207 has no altsetting 0
[   82.193231][  T826] usb 1-1: New USB device found, idVendor=0586, idProduct=3418, bcdDevice=5f.f6
[   82.202369][  T826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.210560][  T826] usb 1-1: Product: syz
[   82.214930][  T826] usb 1-1: Manufacturer: syz
[   82.223234][  T826] usb 1-1: SerialNumber: syz
[   82.434693][  T826] cdc_ether 1-1:3.207: More than one union descriptor, skipping ...
[   82.442822][  T826] usb 1-1: bad CDC descriptors
[   82.448550][  T826] usb 1-1: USB disconnect, device number 29
[   82.459973][  T318] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   82.612853][  T318] usb 3-1: Using ep0 maxpacket: 32
[   82.619113][  T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.630288][  T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.640063][  T318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   82.653013][  T318] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   82.662085][  T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.670777][  T318] usb 3-1: config 0 descriptor??
[   82.992264][   T36] audit: type=1400 audit(2000000056.533:2711): avc:  denied  { write } for  pid=1489 comm="syz.0.361" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   83.015449][   T36] audit: type=1400 audit(2000000056.552:2712): avc:  denied  { write } for  pid=1489 comm="syz.0.361" name="functions" dev="configfs" ino=4716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   83.038441][   T36] audit: type=1400 audit(2000000056.552:2713): avc:  denied  { add_name } for  pid=1489 comm="syz.0.361" name="uvc.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   83.291612][  T318] usbhid 3-1:0.0: can't add hid device: -71
[   83.297749][  T318] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   83.306793][  T318] usb 3-1: USB disconnect, device number 29
[   83.336311][  T826] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   83.490353][  T826] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   83.501866][  T826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.512195][  T826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   83.521290][  T826] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   83.535767][  T826] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   83.545092][  T826] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   83.553130][  T826] usb 1-1: Product: syz
[   83.557554][  T826] usb 1-1: Manufacturer: syz
[   83.565061][  T826] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[   83.771332][  T826] usb 1-1: USB disconnect, device number 30
[   84.296444][ T1510] SELinux:  Context system_u: is not valid (left unmapped).
[   84.347567][ T1515] batadv_slave_1: entered promiscuous mode
[   84.353708][ T1515] batadv_slave_1: left promiscuous mode
[   84.370492][  T311] Bluetooth: hci0: Frame reassembly failed (-84)
[   84.378069][ T1517] overlayfs: conflicting lowerdir path
[   84.460682][   T10] usb 5-1: 0:2 : does not exist
[   84.466188][   T45] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[   84.478291][   T10] usb 5-1: USB disconnect, device number 17
[   84.492370][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   84.618731][   T45] usb 3-1: Using ep0 maxpacket: 16
[   84.625293][   T45] usb 3-1: unable to get BOS descriptor or descriptor too short
[   84.633777][   T45] usb 3-1: config 9 has an invalid interface number: 91 but max is 0
[   84.641933][   T45] usb 3-1: config 9 has no interface number 0
[   84.648013][   T45] usb 3-1: config 9 interface 91 has no altsetting 0
[   84.656094][   T45] usb 3-1: New USB device found, idVendor=19d2, idProduct=8056, bcdDevice=e9.41
[   84.665271][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.673276][   T45] usb 3-1: Product: syz
[   84.677505][   T45] usb 3-1: Manufacturer: syz
[   84.682126][   T45] usb 3-1: SerialNumber: syz
[   84.901694][   T45] usb 3-1: bad CDC descriptors
[   84.909046][   T45] usb 3-1: USB disconnect, device number 30
[   85.042378][ T1529] 
[   85.054753][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   85.054770][   T36] audit: type=1400 audit(2000000058.547:2723): avc:  denied  { write } for  pid=1530 comm="syz.4.375" name="protocol" dev="configfs" ino=13971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   85.055037][ T1531] cgroup: Unknown subsys name 'measure'
[   85.057456][   T36] audit: type=1400 audit(2000000058.547:2724): avc:  denied  { open } for  pid=1530 comm="syz.4.375" path="/60/config/usb_gadget/g1/functions/hid.usb0/protocol" dev="configfs" ino=13971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   85.125221][ T1533] syzkaller1: entered promiscuous mode
[   85.130928][ T1533] syzkaller1: entered allmulticast mode
[   85.190059][   T36] audit: type=1400 audit(2000000058.695:2725): avc:  denied  { setopt } for  pid=1538 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   85.218762][   T45] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[   85.372247][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.382410][   T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   85.391537][   T45] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   85.405910][   T45] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[   85.415190][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.423302][   T45] usb 3-1: Product: syz
[   85.427455][   T45] usb 3-1: Manufacturer: syz
[   85.432181][  T350] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   85.439780][   T45] usb 3-1: SerialNumber: syz
[   85.452388][  T826] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   85.574382][  T350] usb 1-1: device descriptor read/64, error -71
[   85.614962][  T826] usb 5-1: Using ep0 maxpacket: 8
[   85.621514][  T826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.631795][  T826] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d1
[   85.640957][  T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.649643][  T826] usb 5-1: config 0 descriptor??
[   85.652758][ T1540] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.665719][   T45] usb 3-1: 0:2 : does not exist
[   85.683463][   T45] usb 3-1: USB disconnect, device number 31
[   85.781291][   T36] audit: type=1400 audit(2000000059.275:2726): avc:  denied  { write } for  pid=1543 comm="syz.2.379" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   85.782934][ T1545] rust_binder: 1543:1545 transaction to 0 failed: ENOENT
[   85.838371][  T350] usb 1-1: device descriptor read/64, error -71
[   85.860911][   T36] audit: type=1400 audit(2000000059.354:2727): avc:  denied  { ioctl } for  pid=1538 comm="syz.4.378" path="socket:[12809]" dev="sockfs" ino=12809 ioctlcmd=0x6f06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   85.861359][   T45] usb 5-1: USB disconnect, device number 18
[   86.092280][  T350] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   86.224339][  T350] usb 1-1: device descriptor read/64, error -71
[   86.427425][  T754] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   86.427455][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   86.468447][  T350] usb 1-1: device descriptor read/64, error -71
[   86.600198][  T350] usb usb1-port1: attempt power cycle
[   86.945001][  T350] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   86.966413][  T350] usb 1-1: device descriptor read/8, error -71
[   87.029267][   T36] audit: type=1400 audit(2000000060.506:2728): avc:  denied  { setopt } for  pid=1563 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   87.054186][   T36] audit: type=1400 audit(2000000060.506:2729): avc:  denied  { write } for  pid=1563 comm="syz.1.386" path="socket:[14108]" dev="sockfs" ino=14108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   87.080886][   T36] audit: type=1400 audit(2000000060.536:2730): avc:  denied  { setopt } for  pid=1567 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   87.105286][  T350] usb 1-1: device descriptor read/8, error -71
[   87.123742][   T36] audit: type=1400 audit(2000000060.595:2731): avc:  denied  { create } for  pid=1576 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   87.144925][   T36] audit: type=1400 audit(2000000060.615:2732): avc:  denied  { sys_admin } for  pid=1576 comm="syz.1.391" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   87.177162][ T1577] pim6reg1: entered promiscuous mode
[   87.188531][ T1577] pim6reg1: entered allmulticast mode
[   87.209443][ T1581] netlink: 'syz.1.392': attribute type 1 has an invalid length.
[   87.217252][ T1581] netlink: 'syz.1.392': attribute type 2 has an invalid length.
[   87.225300][ T1581] netlink: 48 bytes leftover after parsing attributes in process `syz.1.392'.
[   87.244541][ T1586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.253842][ T1586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.350826][  T350] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   87.372199][  T350] usb 1-1: device descriptor read/8, error -71
[   87.524347][  T350] usb 1-1: device descriptor read/8, error -71
[   87.634990][  T350] usb usb1-port1: unable to enumerate USB device
[   87.888289][ T1606] random: crng reseeded on system resumption
[   87.909734][ T1606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.918475][ T1606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.934626][ T1608] netlink: 13672 bytes leftover after parsing attributes in process `syz.2.399'.
[   87.936239][ T1610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.400'.
[   87.952997][ T1606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.958352][ T1610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'.
[   87.961964][ T1606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.182244][  T318] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[   88.335373][  T318] usb 3-1: config 255 has an invalid interface number: 4 but max is 0
[   88.343594][  T318] usb 3-1: config 255 has no interface number 0
[   88.349896][  T318] usb 3-1: config 255 interface 4 has no altsetting 0
[   88.358192][  T318] usb 3-1: New USB device found, idVendor=0482, idProduct=0203, bcdDevice=5c.d2
[   88.367363][  T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.375376][  T318] usb 3-1: Product: syz
[   88.379521][  T318] usb 3-1: Manufacturer: syz
[   88.384199][  T318] usb 3-1: SerialNumber: syz
[   88.502865][ T1637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.511470][ T1637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.520329][ T1637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.528899][ T1637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.537821][ T1637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.546413][ T1637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.595355][  T318] usb 3-1: USB disconnect, device number 32
[   88.658580][   T45] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   88.668299][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.677297][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.694967][ T1664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.703652][ T1664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.822226][   T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.832705][   T45] usb 1-1: config 1 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   88.843650][   T45] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   88.857787][   T45] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   88.866864][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.874863][   T45] usb 1-1: Product: syz
[   88.879007][   T45] usb 1-1: Manufacturer: syz
[   88.883613][   T45] usb 1-1: SerialNumber: syz
[   88.889920][   T45] usb-storage 1-1:1.0: USB Mass Storage device detected
[   88.898019][   T45] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   88.906377][   T45] scsi host1: usb-storage 1-1:1.0
[   89.094594][ T1634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.103190][ T1634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.111560][   T45] usb 1-1: USB disconnect, device number 35
[   89.387792][  T350] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[   89.540858][  T350] usb 3-1: config 11 has an invalid interface number: 109 but max is 0
[   89.549253][  T350] usb 3-1: config 11 has no interface number 0
[   89.555536][  T350] usb 3-1: config 11 interface 109 altsetting 119 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[   89.566766][  T350] usb 3-1: config 11 interface 109 has no altsetting 0
[   89.575206][  T350] usb 3-1: New USB device found, idVendor=0582, idProduct=63dc, bcdDevice=5f.b4
[   89.584365][  T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.592701][  T350] usb 3-1: Product: syz
[   89.596936][  T350] usb 3-1: Manufacturer: syz
[   89.601548][  T350] usb 3-1: SerialNumber: syz
[   89.709451][ T1692] fuse: Unknown parameter '0000000000000000000500000000000000000005'
[   89.825464][  T350] usb 3-1: USB disconnect, device number 33
[   89.837268][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:11.109/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   90.338272][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   90.338289][   T36] audit: type=1400 audit(2000000063.763:2744): avc:  denied  { mount } for  pid=1699 comm="syz.2.426" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   90.369359][ T1700] netlink: 'syz.2.426': attribute type 27 has an invalid length.
[   90.381406][ T1702] can: request_module (can-proto-0) failed.
[   90.383997][   T36] audit: type=1400 audit(2000000063.813:2745): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   90.418122][ T1704] x_tables: duplicate entry at hook 1
[   90.441731][ T1702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.450380][ T1702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.508544][ T1711] SELinux: ebitmap: truncated map
[   90.514637][ T1711] SELinux: failed to load policy
[   90.974348][ T1715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=1715 comm=syz.1.431
[   90.988203][ T1715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1715 comm=syz.1.431
[   91.002001][ T1715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1715 comm=syz.1.431
[   91.350170][   T36] audit: type=1400 audit(2000000064.762:2746): avc:  denied  { accept } for  pid=1718 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   91.623679][  T350] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[   91.755061][  T350] usb 3-1: device descriptor read/64, error -71
[   92.007737][  T350] usb 3-1: device descriptor read/64, error -71
[   92.250206][  T350] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[   92.381616][  T350] usb 3-1: device descriptor read/64, error -71
[   92.502674][ T1752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.511588][ T1752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.624123][  T350] usb 3-1: device descriptor read/64, error -71
[   92.698975][   T36] audit: type=1400 audit(2000000066.098:2747): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   92.735304][  T350] usb usb3-port1: attempt power cycle
[   92.957355][  T310] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   93.079525][  T350] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[   93.091066][  T310] usb 1-1: device descriptor read/64, error -71
[   93.101653][  T350] usb 3-1: device descriptor read/8, error -71
[   93.160144][ T1765] syzkaller1: entered promiscuous mode
[   93.165649][ T1765] syzkaller1: entered allmulticast mode
[   93.231349][  T350] usb 3-1: device descriptor read/8, error -71
[   93.331057][  T310] usb 1-1: device descriptor read/64, error -71
[   93.492605][  T350] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[   93.513837][  T350] usb 3-1: device descriptor read/8, error -71
[   93.573412][  T310] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[   93.645083][  T350] usb 3-1: device descriptor read/8, error -71
[   93.704649][  T310] usb 1-1: device descriptor read/64, error -71
[   93.755155][  T350] usb usb3-port1: unable to enumerate USB device
[   93.946832][  T310] usb 1-1: device descriptor read/64, error -71
[   93.986097][ T1769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.451'.
[   94.057962][  T310] usb usb1-port1: attempt power cycle
[   94.411113][  T310] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[   94.432339][  T310] usb 1-1: device descriptor read/8, error -71
[   94.439448][   T36] audit: type=1400 audit(2000000067.821:2748): avc:  denied  { write } for  pid=1790 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   94.563569][  T310] usb 1-1: device descriptor read/8, error -71
[   94.804603][  T310] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[   94.825853][  T310] usb 1-1: device descriptor read/8, error -71
[   94.950547][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.956918][  T310] usb 1-1: device descriptor read/8, error -71
[   94.960646][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.066938][  T310] usb usb1-port1: unable to enumerate USB device
[   95.524043][   T36] audit: type=1400 audit(2000000068.902:2749): avc:  denied  { create } for  pid=1804 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   95.617089][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.625924][ T1819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.632441][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.634538][ T1819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.397862][  T310] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[   96.429120][ T1841] fuse: Unknown parameter 'f��J�� '
[   96.550235][  T310] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[   96.558698][  T310] usb 1-1: config 0 has no interface number 0
[   96.567618][  T310] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   96.576931][  T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.584985][  T310] usb 1-1: Product: syz
[   96.590448][  T310] usb 1-1: Manufacturer: syz
[   96.595175][  T310] usb 1-1: SerialNumber: syz
[   96.600757][  T310] usb 1-1: config 0 descriptor??
[   96.690190][  T542] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[   96.852435][  T542] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   96.863747][  T542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[   96.874583][  T542] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   96.887691][  T542] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[   96.896857][  T542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.909296][  T542] usb 3-1: config 0 descriptor??
[   96.914636][ T1845] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[   97.126851][  T542] belkin 0003:050D:3201.000E: unknown main item tag 0x2
[   97.133904][  T542] belkin 0003:050D:3201.000E: unknown main item tag 0x6
[   97.140924][  T542] belkin 0003:050D:3201.000E: unknown main item tag 0x4
[   97.148336][  T542] belkin 0003:050D:3201.000E: unknown main item tag 0x1
[   97.155894][  T542] belkin 0003:050D:3201.000E: unknown main item tag 0x0
[   97.166995][  T542] belkin 0003:050D:3201.000E: hiddev96,hidraw0: USB HID v0.01 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0
[   97.213292][ T1839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.222137][ T1839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.278176][  T310] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   97.289223][  T310] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[   97.299082][  T310] asix 1-1:0.251: probe with driver asix failed with error -5
[   97.307760][  T310] usb 1-1: USB disconnect, device number 40
[   97.483737][  T318] usb 3-1: USB disconnect, device number 38
[   97.571485][   T36] audit: type=1400 audit(2000000070.936:2750): avc:  denied  { block_suspend } for  pid=1861 comm="syz.2.476" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   98.110679][  T318] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[   98.221478][  T310] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[   98.261746][  T318] usb 1-1: Using ep0 maxpacket: 32
[   98.268140][  T318] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   98.276812][  T318] usb 1-1: config 0 has no interface number 0
[   98.282933][  T318] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[   98.293104][  T318] usb 1-1: config 0 interface 184 has no altsetting 0
[   98.301375][  T318] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   98.310502][  T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.318725][  T318] usb 1-1: Product: syz
[   98.323087][  T318] usb 1-1: Manufacturer: syz
[   98.327760][  T318] usb 1-1: SerialNumber: syz
[   98.336748][  T318] usb 1-1: config 0 descriptor??
[   98.342014][ T1879] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[   98.350059][  T318] smsc75xx v1.0.0
[   98.373647][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.384905][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.394759][  T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   98.407996][  T310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.417069][  T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.425857][  T310] usb 3-1: config 0 descriptor??
[   98.551073][ T1879] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[   98.559870][  T318] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   98.571372][  T318] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[   98.581322][  T318] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   98.591972][  T318] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32
[   98.651575][ T1893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.660218][ T1893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.701188][ T1899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'.
[   98.710841][   T36] audit: type=1400 audit(2000000072.058:2751): avc:  denied  { create } for  pid=1898 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[   98.837426][  T310] plantronics 0003:047F:FFFF.000F: unbalanced delimiter at end of report description
[   98.847521][  T310] plantronics 0003:047F:FFFF.000F: parse failed
[   98.853796][  T310] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22
[   99.039984][  T318] usb 3-1: USB disconnect, device number 39
[   99.255528][ T1913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.262953][ T1917] netlink: 104 bytes leftover after parsing attributes in process `syz.4.494'.
[   99.264158][ T1913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.274720][ T1916] netlink: 104 bytes leftover after parsing attributes in process `syz.4.494'.
[   99.634361][   T10] usb 1-1: USB disconnect, device number 41
[   99.802091][  T310] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[   99.953036][  T310] usb 3-1: Using ep0 maxpacket: 16
[   99.954394][ T1947] netlink: 188 bytes leftover after parsing attributes in process `syz.1.504'.
[   99.959369][  T310] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7
[   99.980952][  T310] usb 3-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40
[   99.983680][ T1949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.990633][  T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.999575][ T1949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.007098][  T310] usb 3-1: Product: syz
[  100.019244][  T310] usb 3-1: Manufacturer: syz
[  100.020614][ T1949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.024065][  T310] usb 3-1: SerialNumber: syz
[  100.033884][ T1949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.245116][  T310] usb 3-1: 1:1 : bogus bTerminalLink 4
[  100.250882][  T310] usb 3-1: unit 1 not found!
[  100.255504][  T310] usb 3-1: unit 12 not found!
[  100.260653][  T310] usb 3-1: unit 4 not found!
[  100.265397][  T310] usb 3-1: unit 8 not found!
[  100.273743][  T310] usb 3-1: USB disconnect, device number 40
[  100.560594][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.569835][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.579174][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.587991][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.672188][   T36] audit: type=1400 audit(2000000074.015:2752): avc:  denied  { setopt } for  pid=1954 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  100.929022][  T542] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  100.977573][ T1973] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1973 comm=syz.2.511
[  101.069868][  T542] usb 1-1: device descriptor read/64, error -71
[  101.126492][ T1978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.154364][ T1978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.157019][ T1985] fuse: Unknown parameter 'rootm>'
[  101.194303][ T2022] syzkaller1: entered promiscuous mode
[  101.205306][ T2022] syzkaller1: entered allmulticast mode
[  101.312338][  T542] usb 1-1: device descriptor read/64, error -71
[  101.522465][   T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  101.552650][  T542] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  101.675718][   T10] usb 3-1: Using ep0 maxpacket: 16
[  101.679045][   T36] audit: type=1400 audit(2000000075.009:2753): avc:  denied  { append } for  pid=2041 comm="syz.1.525" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  101.684265][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  101.704033][  T542] usb 1-1: device descriptor read/64, error -71
[  101.712850][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.727331][   T10] usb 3-1: Product: syz
[  101.731497][   T10] usb 3-1: Manufacturer: syz
[  101.736114][   T10] usb 3-1: SerialNumber: syz
[  101.950474][ T2030] Invalid logical block size (2)
[  101.955571][  T542] usb 1-1: device descriptor read/64, error -71
[  102.065604][  T542] usb usb1-port1: attempt power cycle
[  102.118394][   T10] usb 3-1: 1:1: invalid format type 0x9978 is detected, processed as PCM
[  102.127303][   T10] usb 3-1: 1:1 : unsupported sample bitwidth 76 in 64 bytes
[  102.135038][   T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  102.146917][   T10] usb 3-1: USB disconnect, device number 41
[  102.417452][  T542] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  102.438716][  T542] usb 1-1: device descriptor read/8, error -71
[  102.569340][  T542] usb 1-1: device descriptor read/8, error -71
[  102.658260][ T2058] fuse: Bad value for 'fd'
[  102.665243][   T36] audit: type=1400 audit(2000000075.994:2754): avc:  denied  { mounton } for  pid=2057 comm="syz.4.530" path="/115/file0/file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  102.665297][ T2058] 9pnet_virtio: no channels available for device syz
[  102.759302][   T10] usb 3-1: new low-speed USB device number 42 using dummy_hcd
[  102.809576][  T542] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  102.830645][  T542] usb 1-1: device descriptor read/8, error -71
[  102.889960][   T10] usb 3-1: device descriptor read/64, error -71
[  102.961336][  T542] usb 1-1: device descriptor read/8, error -71
[  103.071042][  T542] usb usb1-port1: unable to enumerate USB device
[  103.131201][   T10] usb 3-1: device descriptor read/64, error -71
[  103.372408][   T10] usb 3-1: new low-speed USB device number 43 using dummy_hcd
[  103.513129][   T10] usb 3-1: device descriptor read/64, error -71
[  103.522368][   T36] audit: type=1400 audit(2000000076.839:2755): avc:  denied  { create } for  pid=2082 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  103.754366][   T10] usb 3-1: device descriptor read/64, error -71
[  103.875017][   T10] usb usb3-port1: attempt power cycle
[  104.202079][ T2104] syz.0.543 (2104): attempted to duplicate a private mapping with mremap.  This is not supported.
[  104.213457][ T2104] mmap: syz.0.543 (2104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  104.225542][   T10] usb 3-1: new low-speed USB device number 44 using dummy_hcd
[  104.247818][   T10] usb 3-1: device descriptor read/8, error -71
[  104.388529][   T10] usb 3-1: device descriptor read/8, error -71
[  104.471525][   T36] audit: type=1400 audit(2000000077.795:2756): avc:  denied  { execute } for  pid=2109 comm="syz.4.545" name="file1" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  104.493975][   T36] audit: type=1400 audit(2000000077.795:2757): avc:  denied  { execute_no_trans } for  pid=2109 comm="syz.4.545" path="/122/file1" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  104.648711][   T10] usb 3-1: new low-speed USB device number 45 using dummy_hcd
[  104.669886][   T10] usb 3-1: device descriptor read/8, error -71
[  104.810438][   T10] usb 3-1: device descriptor read/8, error -71
[  104.920008][   T10] usb usb3-port1: unable to enumerate USB device
[  105.019709][ T2114] netlink: 72 bytes leftover after parsing attributes in process `syz.4.547'.
[  105.051129][ T2120] overlay: filesystem on ./file0 not supported as upperdir
[  105.106536][   T36] audit: type=1400 audit(2000000078.422:2758): avc:  denied  { map } for  pid=2124 comm="syz.4.551" path="socket:[15318]" dev="sockfs" ino=15318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  105.131337][ T2130] fuse: Bad value for 'fd'
[  105.135929][   T36] audit: type=1400 audit(2000000078.422:2759): avc:  denied  { accept } for  pid=2124 comm="syz.4.551" path="socket:[15318]" dev="sockfs" ino=15318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  105.372266][ T2149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.380909][ T2149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.402062][   T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  105.552754][   T10] usb 1-1: Using ep0 maxpacket: 32
[  105.559022][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.569516][   T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  105.578562][   T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  105.588749][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.597440][   T10] usb 1-1: config 0 descriptor??
[  105.704218][ T2154] netlink: 9 bytes leftover after parsing attributes in process `syz.2.559'.
[  105.713223][ T2154] gretap0: entered promiscuous mode
[  105.719803][ T2154] netlink: 5 bytes leftover after parsing attributes in process `syz.2.559'.
[  105.728690][ T2154] 0��{X��: renamed from gretap0
[  105.734542][ T2154] 0��{X��: left promiscuous mode
[  105.739565][ T2154] 0��{X��: entered allmulticast mode
[  105.745365][ T2154] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  105.901614][   T36] audit: type=1400 audit(2000000079.208:2760): avc:  denied  { create } for  pid=2162 comm="syz.1.562" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  106.245755][   T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  106.406395][   T10] usb 3-1: Using ep0 maxpacket: 16
[  106.412737][   T10] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[  106.423065][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  106.432207][   T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  106.441314][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.449980][   T10] usb 3-1: config 0 descriptor??
[  106.747174][   T36] audit: type=1400 audit(2000000080.055:2761): avc:  denied  { setattr } for  pid=2174 comm="syz.1.565" name="UDPLITEv6" dev="sockfs" ino=17452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.775136][ T2179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.783746][ T2179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.992888][ T2183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.567'.
[  107.096910][   T36] audit: type=1400 audit(2000000080.403:2762): avc:  denied  { execmod } for  pid=2189 comm="syz.4.570" path="/133/cgroup.controllers" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.304874][ T2206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.313394][ T2206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.365427][ T2207] fuse: Bad value for 'fd'
[  107.372110][  T888] Bluetooth: hci0: Frame reassembly failed (-84)
[  107.432786][ T2206] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  107.440913][ T2206] tipc: Disabling bearer <udp:syz2>
[  108.178086][   T10] usb 1-1: USB disconnect, device number 46
[  108.665177][   T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  108.816925][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.828007][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.838738][   T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  108.849862][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.858871][   T10] usb 1-1: config 0 descriptor??
[  109.090009][ T2240] veth0: entered allmulticast mode
[  109.183112][   T36] audit: type=1400 audit(2000000082.486:2763): avc:  denied  { cmd } for  pid=2248 comm="iou-wrk-2249" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  109.207708][ T2250] netlink: 'syz.1.589': attribute type 4 has an invalid length.
[  109.216058][ T2250] netlink: 17 bytes leftover after parsing attributes in process `syz.1.589'.
[  109.248104][ T2257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.256748][ T2257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.278780][ T2231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.287656][ T2231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.297133][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  109.303546][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  109.312259][   T10] usb 1-1: USB disconnect, device number 47
[  109.408019][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  109.408018][  T754] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  109.422017][  T826] usb 3-1: USB disconnect, device number 46
[  109.447161][   T36] audit: type=1400 audit(2000000082.745:2764): avc:  denied  { map } for  pid=2260 comm="syz.2.593" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  109.470809][   T36] audit: type=1400 audit(2000000082.745:2765): avc:  denied  { nlmsg_write } for  pid=2260 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  109.499721][ T2262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2049 sclass=netlink_audit_socket pid=2262 comm=syz.2.593
[  110.104046][ T2304] overlayfs: failed to resolve '/003': -2
[  110.405695][ T2313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'.
[  110.661975][  T310] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  110.819231][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.832360][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.844157][  T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  110.859688][ T2333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=591197932 (1182395864 ns) > initial count (4398 ns). Using initial count to start timer.
[  110.878921][  T310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  110.888128][  T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.896588][ T2338] futex_wake_op: syz.4.617 tries to shift op by 144; fix this program
[  110.897707][  T310] usb 3-1: config 0 descriptor??
[  110.977422][   T36] audit: type=1400 audit(2000000084.270:2766): avc:  denied  { watch } for  pid=2345 comm="syz.1.619" path="pipe:[17257]" dev="pipefs" ino=17257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  111.015320][ T2348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.028289][ T2348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.036708][  T542] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  111.124647][   T36] audit: type=1400 audit(2000000084.419:2767): avc:  denied  { map } for  pid=2314 comm="syz.2.610" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  111.194879][  T542] usb 1-1: config 7 has too many interfaces: 224, using maximum allowed: 32
[  111.213607][  T542] usb 1-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config
[  111.224527][  T542] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 224
[  111.235831][  T542] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  111.245156][  T542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.253301][  T542] usb 1-1: Product: syz
[  111.257952][  T542] usb 1-1: Manufacturer: syz
[  111.262619][  T542] usb 1-1: SerialNumber: syz
[  111.460045][  T310] plantronics 0003:047F:FFFF.0010: collection stack underflow
[  111.472934][  T310] plantronics 0003:047F:FFFF.0010: item 0 1 0 12 parsing failed
[  111.482416][  T542] usb 1-1: USB disconnect, device number 48
[  111.491281][  T310] plantronics 0003:047F:FFFF.0010: parse failed
[  111.497970][  T310] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22
[  111.617972][ T2356] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.622'.
[  111.986880][   T36] audit: type=1400 audit(2000000085.277:2768): avc:  denied  { connect } for  pid=2357 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  112.129663][ T2374] tmpfs: Unknown parameter '
'
[  112.143198][ T2376] netlink: 1343 bytes leftover after parsing attributes in process `syz.4.629'.
[  112.168117][   T10] usb 3-1: USB disconnect, device number 47
[  112.276855][  T542] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  112.410271][ T2401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.418934][ T2401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.437236][  T542] usb 1-1: Using ep0 maxpacket: 32
[  112.443681][  T542] usb 1-1: config index 0 descriptor too short (expected 548, got 36)
[  112.452101][  T542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.463545][  T542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.473630][  T542] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.486988][  T542] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  112.496128][  T542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.505846][  T542] usb 1-1: config 0 descriptor??
[  112.517479][   T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  112.667873][   T10] usb 3-1: Using ep0 maxpacket: 32
[  112.674308][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.684572][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  112.697827][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  112.706922][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.715709][   T10] usb 3-1: config 0 descriptor??
[  112.721583][   T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  113.051834][   T36] audit: type=1400 audit(2000000086.344:2769): avc:  denied  { getopt } for  pid=2420 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  113.059924][ T2421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.082185][ T2421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.110198][ T2421] UDC core: g1: couldn't find an available UDC or it's busy
[  113.254575][  T542] usbhid 1-1:0.0: can't add hid device: -71
[  113.260943][  T542] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  113.271509][  T542] usb 1-1: USB disconnect, device number 49
[  113.701731][ T2431] netlink: 'syz.1.642': attribute type 1 has an invalid length.
[  113.722035][ T2433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'.
[  113.789205][ T2439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.799352][ T2439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.320208][ T2452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.329282][ T2452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.855861][ T2463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.865479][ T2463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.234359][  T826] usb 3-1: USB disconnect, device number 48
[  115.535175][  T826] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  115.583301][   T36] audit: type=1400 audit(2000000088.857:2770): avc:  denied  { create } for  pid=2483 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  115.611322][   T36] audit: type=1400 audit(2000000088.857:2771): avc:  denied  { read } for  pid=2483 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  115.615629][ T2486] fuse: Bad value for 'rootmode'
[  115.685550][  T826] usb 3-1: Using ep0 maxpacket: 8
[  115.695279][  T826] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  115.704501][  T826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.709680][ T2490] fuse: Unknown parameter 'al�ow_ot�er'
[  115.712603][  T826] usb 3-1: Product: syz
[  115.723880][  T826] usb 3-1: Manufacturer: syz
[  115.728746][  T826] usb 3-1: SerialNumber: syz
[  115.729328][ T2489] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1016256491 (1016256491 ns) > initial count (152895589 ns). Using initial count to start timer.
[  115.939617][  T826] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  115.958172][  T826] usb 3-1: USB disconnect, device number 49
[  116.659098][ T2505] can0: slcan on ptm0.
[  116.690675][ T2505] can0 (unregistered): slcan off ptm0.
[  116.699963][  T542] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  116.729540][   T36] audit: type=1400 audit(2000000090.015:2772): avc:  denied  { map } for  pid=2511 comm="syz.0.669" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  116.868573][  T542] usb 3-1: Using ep0 maxpacket: 32
[  116.876170][  T542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.886372][  T542] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  116.899747][  T542] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  116.909165][  T542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.917800][  T542] usb 3-1: config 0 descriptor??
[  116.925544][  T542] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  116.968413][  T543] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  117.128718][  T543] usb 1-1: Using ep0 maxpacket: 8
[  117.137446][  T543] usb 1-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40
[  117.147987][  T543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.156181][  T543] usb 1-1: Product: syz
[  117.160474][  T543] usb 1-1: Manufacturer: syz
[  117.165076][  T543] usb 1-1: SerialNumber: syz
[  117.374342][  T543] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  117.381435][  T543] usb 1-1: unit 2 not found!
[  117.388587][  T543] usb 1-1: USB disconnect, device number 50
[  117.898216][ T2540] 9pnet_fd: p9_fd_create_tcp (2540): problem connecting socket to 127.0.0.1
[  118.130746][  T826] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  118.283467][  T826] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[  118.292637][  T826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.300630][  T826] usb 1-1: Product: syz
[  118.305055][  T826] usb 1-1: Manufacturer: syz
[  118.309768][  T826] usb 1-1: SerialNumber: syz
[  118.436279][   T36] audit: type=1400 audit(2000000091.711:2773): avc:  denied  { shutdown } for  pid=2543 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.446171][ T2544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.465643][ T2544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.478754][  T887] Bluetooth: hci0: Frame reassembly failed (-84)
[  118.536742][ T2546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.545280][ T2546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.462759][  T543] usb 3-1: USB disconnect, device number 50
[  119.731785][ T2569] netlink: 'syz.2.677': attribute type 4 has an invalid length.
[  119.740775][ T2569] netlink: 'syz.2.677': attribute type 4 has an invalid length.
[  119.749703][ T2570] netlink: 'syz.2.677': attribute type 4 has an invalid length.
[  120.014190][  T318] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  120.164453][  T318] usb 3-1: Using ep0 maxpacket: 16
[  120.172456][  T318] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40
[  120.182881][  T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.191060][  T318] usb 3-1: Product: syz
[  120.195367][  T318] usb 3-1: Manufacturer: syz
[  120.200034][  T318] usb 3-1: SerialNumber: syz
[  120.407858][ T2578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.416496][ T2578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.438484][  T318] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  120.445701][  T318] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  120.455929][  T318] usb 3-1: USB disconnect, device number 51
[  120.486330][  T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  120.555183][  T754] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  120.906514][  T826] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  120.918598][  T826] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  120.930549][  T826] usb 1-1: USB disconnect, device number 51
[  120.952774][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  120.964898][ T2583] netlink: 172 bytes leftover after parsing attributes in process `syz.2.681'.
[  120.979699][ T2583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'.
[  121.085737][ T2603] rust_binder: 719: no such ref 0
[  121.090888][ T2604] rust_binder: 719: no such ref 0
[  121.096074][ T2603] rust_binder: 2602:2603 transaction to 0 failed: ENOENT
[  121.096472][ T2604] rust_binder: 2602:2604 transaction to 0 failed: ENOENT
[  121.188769][ T2617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  121.330314][ T2624] netlink: 'syz.1.694': attribute type 4 has an invalid length.
[  121.338011][ T2624] netlink: 17 bytes leftover after parsing attributes in process `syz.1.694'.
[  121.366410][  T542] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  121.513147][ T2634] syz.4.697 uses obsolete (PF_INET,SOCK_PACKET)
[  121.526773][  T542] usb 3-1: Using ep0 maxpacket: 16
[  121.533187][  T542] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  121.543621][  T542] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  121.554429][  T542] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[  121.563766][  T542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.574870][  T542] usb 3-1: Product: syz
[  121.579518][  T542] usb 3-1: Manufacturer: syz
[  121.584112][  T542] usb 3-1: SerialNumber: syz
[  121.792076][  T826] usb 3-1: USB disconnect, device number 52
[  121.963083][   T36] audit: type=1400 audit(2000000095.235:2774): avc:  denied  { bind } for  pid=2642 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  121.967637][ T2643] netlink: 'syz.0.701': attribute type 9 has an invalid length.
[  122.042331][ T2652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.053917][ T2652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.274660][ T2661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.283472][  T826] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  122.287998][ T2661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.310446][ T2663] netlink: 124 bytes leftover after parsing attributes in process `syz.2.707'.
[  122.439455][  T826] usb 1-1: not running at top speed; connect to a high speed hub
[  122.447867][  T826] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4
[  122.460264][  T826] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40
[  122.469596][  T826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.477598][  T826] usb 1-1: Product: syz
[  122.482222][  T826] usb 1-1: Manufacturer: syz
[  122.486912][  T826] usb 1-1: SerialNumber: syz
[  122.694902][  T826] usb 1-1: selecting invalid altsetting 1
[  122.700849][  T826] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  122.710374][  T826] usb 1-1: selecting invalid altsetting 1
[  122.716374][  T826] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  122.726010][  T826] usb 1-1: selecting invalid altsetting 1
[  122.733202][  T826] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[  122.744363][  T826] usb 1-1: USB disconnect, device number 52
[  122.748904][  T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  122.827762][ T2669] kvm: kvm [2666]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[  123.055817][ T2682] netlink: 'syz.2.713': attribute type 11 has an invalid length.
[  123.339412][  T826] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  123.490691][  T826] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping
[  123.499850][  T826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.509993][  T826] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  123.520399][  T826] usb 3-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[  123.529533][  T826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.537556][  T826] usb 3-1: Product: syz
[  123.541752][  T826] usb 3-1: Manufacturer: syz
[  123.546434][  T826] usb 3-1: SerialNumber: syz
[  123.549684][  T542] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  123.630576][ T2702] netlink: 'syz.4.721': attribute type 16 has an invalid length.
[  123.638543][ T2702] netlink: 'syz.4.721': attribute type 3 has an invalid length.
[  123.646530][ T2702] netlink: 31362 bytes leftover after parsing attributes in process `syz.4.721'.
[  123.656907][ T2704] netlink: 'syz.4.721': attribute type 16 has an invalid length.
[  123.664968][ T2704] netlink: 'syz.4.721': attribute type 3 has an invalid length.
[  123.672760][ T2704] netlink: 31362 bytes leftover after parsing attributes in process `syz.4.721'.
[  123.709900][  T542] usb 1-1: Using ep0 maxpacket: 8
[  123.716444][  T542] usb 1-1: unable to get BOS descriptor or descriptor too short
[  123.725024][  T542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.735372][  T542] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  123.750023][  T542] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  123.754980][ T2689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.759690][  T542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.768417][ T2689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.776459][  T542] usb 1-1: Manufacturer: 沼
[  123.789613][  T542] usb 1-1: SerialNumber: Ⰱ
[  123.797493][  T542] usb 1-1: config 0 descriptor??
[  123.816299][  T826] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  123.823204][  T542] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  123.828472][  T826] usb 3-1: USB disconnect, device number 53
[  123.844474][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  123.856835][ T2710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2710 comm=syz.1.723
[  123.879859][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  123.910168][ T2717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.919144][ T2717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.014432][  T543] usb 1-1: USB disconnect, device number 53
[  124.581101][  T543] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  124.687266][ T2747] Invalid argument reading file caps for ./file0
[  124.741267][  T543] usb 3-1: Using ep0 maxpacket: 32
[  124.747760][ T2749] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  124.748170][  T543] usb 3-1: unable to get BOS descriptor or descriptor too short
[  124.763596][  T543] usb 3-1: config 1 has an invalid interface number: 242 but max is 2
[  124.772059][  T543] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.782152][  T543] usb 3-1: config 1 has no interface number 2
[  124.788259][  T543] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  124.799138][  T543] usb 3-1: config 1 interface 1 has no altsetting 0
[  124.807518][  T543] usb 3-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40
[  124.816614][  T543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.824609][  T543] usb 3-1: Product: syz
[  124.828928][  T543] usb 3-1: Manufacturer: syz
[  124.833560][  T543] usb 3-1: SerialNumber: syz
[  124.858181][ T2751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.866772][ T2751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.901488][  T542] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  125.045353][  T543] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor
[  125.053716][  T542] usb 1-1: Using ep0 maxpacket: 32
[  125.059037][  T543] usb 3-1: 1:1 : unsupported format bits 0x2004
[  125.066031][  T543] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  125.068259][ T2756] tipc: Started in network mode
[  125.076141][  T543] usb 3-1: selecting invalid altsetting 0
[  125.080838][ T2756] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  125.086769][  T542] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  125.095923][ T2756] tipc: Enabled bearer <udp:s>, priority 10
[  125.104050][  T543] usb 3-1: selecting invalid altsetting 0
[  125.115581][  T542] usb 1-1: config 0 has no interface number 0
[  125.122742][ T2760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.740'.
[  125.127338][  T543] usb 3-1: USB disconnect, device number 54
[  125.137811][  T542] usb 1-1: config 0 interface 184 has no altsetting 0
[  125.144181][ T2759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.740'.
[  125.147050][  T542] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  125.166646][  T542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.175330][  T542] usb 1-1: Product: syz
[  125.179705][  T542] usb 1-1: Manufacturer: syz
[  125.184377][  T542] usb 1-1: SerialNumber: syz
[  125.189477][  T542] usb 1-1: config 0 descriptor??
[  125.195296][  T542] smsc75xx v1.0.0
[  125.401408][ T2768] random: crng reseeded on system resumption
[  125.596933][  T542] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  125.608045][  T542] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  125.617816][  T542] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  125.628833][  T542] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  125.638500][  T542] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  125.648847][  T542] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  125.658374][  T542] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61
[  125.729535][   T36] audit: type=1400 audit(2000000098.990:2775): avc:  denied  { listen } for  pid=2777 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  125.750296][ T2781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.759106][ T2781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.802607][  T543] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  125.949709][ T2783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.962159][  T543] usb 3-1: device descriptor read/64, error -71
[  125.975461][ T2783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.007759][  T318] usb 1-1: USB disconnect, device number 54
[  126.176600][   T36] audit: type=1400 audit(2000000099.440:2776): avc:  denied  { mounton } for  pid=2789 comm="syz.0.749" path="/proc/461/task" dev="proc" ino=20285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  126.217411][   T36] audit: type=1400 audit(2000000099.470:2777): avc:  denied  { setattr } for  pid=2794 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  126.236622][  T318] tipc: Node number set to 4269801492
[  126.283631][  T543] usb 3-1: device descriptor read/64, error -71
[  126.523441][  T543] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  126.653595][  T543] usb 3-1: device descriptor read/64, error -71
[  126.667612][   T36] audit: type=1400 audit(2000000099.929:2778): avc:  denied  { connect } for  pid=2816 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  126.758098][ T2821] netlink: 'syz.0.758': attribute type 4 has an invalid length.
[  126.893833][  T543] usb 3-1: device descriptor read/64, error -71
[  127.004047][  T543] usb usb3-port1: attempt power cycle
[  127.013997][   T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  127.164132][   T10] usb 1-1: Using ep0 maxpacket: 32
[  127.170396][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.180258][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  127.193281][   T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  127.202362][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.211870][   T10] usb 1-1: config 0 descriptor??
[  127.217689][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  127.344339][  T543] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[  127.375577][  T543] usb 3-1: device descriptor read/8, error -71
[  127.505723][  T543] usb 3-1: device descriptor read/8, error -71
[  127.521496][   T36] audit: type=1400 audit(2000000100.778:2779): avc:  denied  { append } for  pid=2831 comm="syz.1.763" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  127.536154][ T2833] loop3: detected capacity change from 0 to 7
[  127.565028][ T2834] support for cryptoloop has been removed.  Use dm-crypt instead.
[  127.573284][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.582462][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  127.590520][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.599766][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  127.607619][ T2833]  loop3: unable to read partition table
[  127.613633][ T2833] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  127.626660][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.635804][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  127.643874][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.653085][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  127.661300][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.666432][ T2836] overlayfs: conflicting options: metacopy=off,verity=on
[  127.670482][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  127.685576][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.694742][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  127.702879][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  127.712090][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  127.754807][  T543] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[  127.785846][  T543] usb 3-1: device descriptor read/8, error -71
[  127.915921][  T543] usb 3-1: device descriptor read/8, error -71
[  127.992778][ T2847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=2847 comm=syz.1.767
[  128.016993][ T2849] batadv_slave_1: entered promiscuous mode
[  128.025274][  T543] usb usb3-port1: unable to enumerate USB device
[  128.037873][ T2849] netlink: 148 bytes leftover after parsing attributes in process `syz.1.768'.
[  128.050286][ T2849] batadv_slave_1: left promiscuous mode
[  128.124539][ T2854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.133136][ T2854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.654117][ T2859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2859 comm=syz.1.772
[  128.667040][ T2859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.772'.
[  128.687610][ T2861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.696167][ T2861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.705359][ T2862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.713895][ T2862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.016104][   T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  129.166185][   T10] usb 3-1: Using ep0 maxpacket: 16
[  129.172360][   T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7
[  129.184923][   T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40
[  129.194049][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.202070][   T10] usb 3-1: Product: syz
[  129.206317][   T10] usb 3-1: Manufacturer: syz
[  129.210908][   T10] usb 3-1: SerialNumber: syz
[  129.231378][ T2873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.240987][ T2873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.250526][ T2873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.259054][ T2873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.420680][   T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  129.427666][   T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  129.434766][   T10] usb 3-1: unable to issue vendor read request (ret = -71)
[  129.442229][   T10] usb 3-1: unable to issue vendor read request (ret = -71)
[  129.449653][   T10] usb 3-1: unable to issue vendor read request (ret = -71)
[  129.457425][   T10] usb 3-1: unable to issue vendor read request (ret = -71)
[  129.464889][   T10] usb 3-1: unable to issue vendor read request (ret = -71)
[  129.472401][   T10] usb 3-1: unable to issue vendor read request (ret = -71)
[  129.479846][   T10] usb 3-1: unable to issue vendor read request (ret = -71)
[  129.487353][   T10] usb 3-1: unable to issue vendor read request (ret = -71)
[  129.496990][   T10] usb 3-1: USB disconnect, device number 59
[  129.506706][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  129.789347][   T10] usb 1-1: USB disconnect, device number 55
[  129.818729][ T2880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.828941][ T2880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.838233][ T2880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.846707][ T2880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.855648][ T2880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.864784][ T2880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.975522][ T1995] tipc: Subscription rejected, illegal request
[  130.000162][   T36] audit: type=1400 audit(2000000103.266:2780): avc:  denied  { read } for  pid=2893 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  130.324473][ T2909] input: syz0 as /devices/virtual/input/input35
[  130.334479][ T2909] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  130.349448][ T2909] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  130.367307][ T2911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'.
[  130.387439][ T2913] tmpfs: Bad value for 'nr_inodes'
[  130.404614][ T2919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.413879][ T2919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.507426][   T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  130.522002][ T2931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.531721][ T2931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.558205][ T2933] Invalid argument reading file caps for ./file0
[  130.660809][ T2938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.667571][   T10] usb 3-1: Using ep0 maxpacket: 32
[  130.670328][ T2938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.677039][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.692924][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  130.705893][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  130.715068][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.727879][   T10] usb 3-1: config 0 descriptor??
[  130.734262][   T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  130.817752][  T543] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  130.978911][  T543] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  130.997908][  T543] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00
[  131.014160][  T543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.027190][  T543] usb 1-1: config 0 descriptor??
[  131.199272][   T36] audit: type=1400 audit(2000000104.465:2781): avc:  denied  { read } for  pid=2950 comm="syz.4.803" name="/" dev="configfs" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  131.221787][   T36] audit: type=1400 audit(2000000104.465:2782): avc:  denied  { open } for  pid=2950 comm="syz.4.803" path="/" dev="configfs" ino=2298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  131.258520][ T2955] netlink: 65 bytes leftover after parsing attributes in process `syz.4.804'.
[  131.336319][ T2966] fuse: Bad value for 'group_id'
[  131.341460][ T2966] fuse: Bad value for 'group_id'
[  131.451982][ T2968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'.
[  133.278788][  T542] usb 3-1: USB disconnect, device number 60
[  133.328183][   T36] audit: type=1400 audit(2000000106.583:2783): avc:  denied  { append } for  pid=2979 comm="syz.2.811" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  133.393635][ T2980] ip6gretap0: entered promiscuous mode
[  133.399301][ T2980] ip6gretap0: entered allmulticast mode
[  133.506916][   T36] audit: type=1400 audit(2000000106.763:2784): avc:  denied  { execmem } for  pid=2985 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  133.538140][   T36] audit: type=1400 audit(2000000106.763:2785): avc:  denied  { create } for  pid=2985 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  133.587174][  T542] usb 1-1: USB disconnect, device number 56
[  133.598617][   T36] audit: type=1400 audit(2000000106.853:2786): avc:  denied  { associate } for  pid=2993 comm="syz.4.813" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  133.648436][   T36] audit: type=1400 audit(2000000106.893:2787): avc:  denied  { remount } for  pid=2989 comm="syz.4.813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  133.688529][   T36] audit: type=1400 audit(2000000106.923:2788): avc:  denied  { create } for  pid=2996 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.737077][   T36] audit: type=1400 audit(2000000106.993:2789): avc:  denied  { write } for  pid=3002 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.758465][   T36] audit: type=1400 audit(2000000106.993:2790): avc:  denied  { nlmsg_write } for  pid=3002 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.792667][   T36] audit: type=1400 audit(2000000107.043:2791): avc:  denied  { ioctl } for  pid=3006 comm="syz.4.820" path="socket:[22925]" dev="sockfs" ino=22925 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  134.080247][  T542] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  134.230329][  T542] usb 1-1: Using ep0 maxpacket: 32
[  134.241047][  T542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.252746][  T542] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  134.266676][  T542] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  134.288693][  T542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.306944][  T542] usb 1-1: config 0 descriptor??
[  134.316020][  T542] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  134.390855][ T3025] netlink: 84 bytes leftover after parsing attributes in process `syz.4.827'.
[  134.517222][   T36] audit: type=1400 audit(2000000107.772:2792): avc:  denied  { read } for  pid=3024 comm="syz.4.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  134.749252][ T3044] bridge0: port 3(veth0_vlan) entered blocking state
[  134.756086][ T3044] bridge0: port 3(veth0_vlan) entered disabled state
[  134.762834][ T3044] veth0_vlan: entered allmulticast mode
[  134.768709][ T3044] bridge0: port 3(veth0_vlan) entered blocking state
[  134.775576][ T3044] bridge0: port 3(veth0_vlan) entered forwarding state
[  134.800830][ T3053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.809367][ T3053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.338056][ T3067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.347299][ T3067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.596873][ T3071] netlink: 'syz.2.838': attribute type 17 has an invalid length.
[  135.620542][ T3075] bridge0: port 3(veth0_to_bridge) entered blocking state
[  135.627845][ T3075] bridge0: port 3(veth0_to_bridge) entered disabled state
[  135.635306][ T3075] veth0_to_bridge: entered allmulticast mode
[  135.641696][ T3075] veth0_to_bridge: entered promiscuous mode
[  135.647630][ T3075] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.659960][ T3075] bridge0: port 3(veth0_to_bridge) entered blocking state
[  135.667098][ T3075] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  135.981696][   T45] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  136.109325][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.118076][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.126976][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.135709][   T45] usb 3-1: device descriptor read/64, error -71
[  136.135839][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.151188][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.160008][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.168939][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.177880][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.186788][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.195584][ T3097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.259371][ T3103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'.
[  136.260291][ T3104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.277471][ T3104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.381749][   T45] usb 3-1: device descriptor read/64, error -71
[  136.621899][   T45] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  136.746101][   T62] usb 1-1: USB disconnect, device number 57
[  136.751961][   T45] usb 3-1: device descriptor read/64, error -71
[  136.796408][ T3110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.805024][ T3110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.992130][   T45] usb 3-1: device descriptor read/64, error -71
[  137.102251][   T45] usb usb3-port1: attempt power cycle
[  137.321148][ T3116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.329673][ T3116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.337790][ T3116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.346288][ T3116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.354410][ T3116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.362880][ T3116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.370958][ T3116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.379478][ T3116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.387538][ T3116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.398070][ T3116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.407680][ T3116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.416497][ T3116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.462396][   T45] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  137.483524][   T45] usb 3-1: device descriptor read/8, error -71
[  137.570751][ T3118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'.
[  137.625102][   T45] usb 3-1: device descriptor read/8, error -71
[  137.774561][ T2390] tipc: Subscription rejected, illegal request
[  137.862641][   T45] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  137.883620][   T45] usb 3-1: device descriptor read/8, error -71
[  138.013854][   T45] usb 3-1: device descriptor read/8, error -71
[  138.119179][ T3144] netlink: 15 bytes leftover after parsing attributes in process `syz.4.863'.
[  138.128814][   T45] usb usb3-port1: unable to enumerate USB device
[  138.302859][  T543] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  138.452937][  T543] usb 1-1: Using ep0 maxpacket: 32
[  138.459689][  T543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.470643][  T543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.480489][  T543] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  138.493570][  T543] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  138.502625][  T543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.511217][  T543] usb 1-1: config 0 descriptor??
[  138.765080][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  138.765109][   T36] audit: type=1400 audit(2000000112.019:2798): avc:  denied  { create } for  pid=3155 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  138.824644][   T36] audit: type=1400 audit(2000000112.079:2799): avc:  denied  { getattr } for  pid=3165 comm="syz.2.872" path="socket:[28202]" dev="sockfs" ino=28202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  138.841370][ T3166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3166 comm=syz.2.872
[  138.870833][ T3166] veth1_to_bond: entered promiscuous mode
[  138.877812][ T3166] netlink: 148 bytes leftover after parsing attributes in process `syz.2.872'.
[  138.888061][ T3166] veth1_to_bond (unregistering): left promiscuous mode
[  138.983923][   T36] audit: type=1400 audit(2000000112.239:2800): avc:  denied  { call } for  pid=3183 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  138.983940][ T3184] rust_binder: Error in use_page_slow: ESRCH
[  139.005068][ T3184] rust_binder: use_range failure ESRCH
[  139.011096][ T3184] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  139.016787][ T3184] rust_binder: Failure in copy_transaction_data: ESRCH
[  139.026277][ T3184] rust_binder: 3183:3184 transaction to 3183 failed: ESRCH
[  139.034512][   T36] audit: type=1326 audit(2000000112.289:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3183 comm="syz.2.876" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd87b9e019 code=0x0
[  139.119613][  T543] usbhid 1-1:0.0: can't add hid device: -71
[  139.128257][  T543] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  139.140439][  T543] usb 1-1: USB disconnect, device number 58
[  139.249945][   T36] audit: type=1400 audit(2000000112.499:2802): avc:  denied  { map } for  pid=3197 comm="syz.1.880" path="/proc/911/net/mcfilter" dev="proc" ino=4026532326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  139.343167][ T3203] ext4: Unknown parameter 'barrierost-vsock'
[  139.350674][ T3203] IPv6: syztnl0: Disabled Multicast RS
[  139.433106][   T36] audit: type=1400 audit(2000000112.679:2803): avc:  denied  { mounton } for  pid=3209 comm="syz.1.885" path="/288/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  139.461752][   T36] audit: type=1400 audit(2000000112.709:2804): avc:  granted  { setsecparam } for  pid=3214 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  139.741376][ T3232] netlink: 104 bytes leftover after parsing attributes in process `syz.4.891'.
[  139.741548][   T36] audit: type=1400 audit(2000000112.989:2805): avc:  denied  { nlmsg_read } for  pid=3230 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  139.771199][ T3231] netlink: 104 bytes leftover after parsing attributes in process `syz.4.891'.
[  139.883086][   T45] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  140.033102][   T45] usb 1-1: Using ep0 maxpacket: 32
[  140.039347][   T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  140.047571][   T45] usb 1-1: config 0 has no interface number 0
[  140.053773][   T45] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  140.064100][   T45] usb 1-1: config 0 interface 184 has no altsetting 0
[  140.072272][   T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  140.081445][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.089529][   T45] usb 1-1: Product: syz
[  140.093704][   T45] usb 1-1: Manufacturer: syz
[  140.098282][   T45] usb 1-1: SerialNumber: syz
[  140.103498][   T45] usb 1-1: config 0 descriptor??
[  140.108829][ T3229] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  140.116683][   T45] smsc75xx v1.0.0
[  140.123134][  T543] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  140.253100][  T543] usb 3-1: device descriptor read/64, error -71
[  140.315093][ T3248] netlink: 140 bytes leftover after parsing attributes in process `syz.4.896'.
[  140.317039][ T3229] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  140.324767][ T3248] raw_sendmsg: syz.4.896 forgot to set AF_INET. Fix it!
[  140.503089][  T543] usb 3-1: device descriptor read/64, error -71
[  140.664515][   T36] audit: type=1400 audit(2000000113.919:2806): avc:  denied  { connect } for  pid=3270 comm="syz.1.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  140.684270][   T36] audit: type=1400 audit(2000000113.939:2807): avc:  denied  { read } for  pid=3270 comm="syz.1.903" laddr=fe80::4039:25ff:fec3:ae78 lport=6 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  140.685507][ T3271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.718742][ T3271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.740242][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  140.751304][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  140.763076][  T543] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  140.893082][  T543] usb 3-1: device descriptor read/64, error -71
[  140.995525][ T3285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'.
[  141.065795][ T3291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3291 comm=syz.4.910
[  141.133067][  T543] usb 3-1: device descriptor read/64, error -71
[  141.240798][ T3293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'.
[  141.249861][  T543] usb usb3-port1: attempt power cycle
[  141.260326][ T3295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.268861][ T3295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.593103][  T543] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  141.614217][  T543] usb 3-1: device descriptor read/8, error -71
[  141.744650][  T543] usb 3-1: device descriptor read/8, error -71
[  141.787784][ T3298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.796677][ T3298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.983094][  T543] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  142.003990][  T543] usb 3-1: device descriptor read/8, error -71
[  142.134196][  T543] usb 3-1: device descriptor read/8, error -71
[  142.164728][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  142.175684][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  142.185380][   T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  142.194809][   T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  142.204089][   T45] usb 1-1: USB disconnect, device number 59
[  142.243259][  T543] usb usb3-port1: unable to enumerate USB device
[  142.943117][   T45] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  143.012969][  T807] batadv_slave_1: left promiscuous mode
[  143.070244][ T3331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3331 comm=syz.2.927
[  143.083415][ T3331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3331 comm=syz.2.927
[  143.113070][   T45] usb 1-1: Using ep0 maxpacket: 32
[  143.120605][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.132126][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.143376][ T3333] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  143.156616][   T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  143.172234][   T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  143.185938][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.195572][   T45] usb 1-1: config 0 descriptor??
[  143.201235][ T2389] veth0_to_bridge: left allmulticast mode
[  143.208978][ T2389] veth0_to_bridge: left promiscuous mode
[  143.214955][ T2389] bridge0: port 3(veth0_to_bridge) entered disabled state
[  143.222742][ T2389] bridge_slave_1: left allmulticast mode
[  143.228482][ T2389] bridge_slave_1: left promiscuous mode
[  143.234118][ T2389] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.241664][ T2389] bridge_slave_0: left allmulticast mode
[  143.253062][ T2389] bridge_slave_0: left promiscuous mode
[  143.258758][ T2389] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.312520][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.319655][ T3334] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.326899][ T3334] bridge_slave_0: entered allmulticast mode
[  143.333148][ T3334] bridge_slave_0: entered promiscuous mode
[  143.339517][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.346986][ T3334] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.354087][ T3334] bridge_slave_1: entered allmulticast mode
[  143.363520][ T3334] bridge_slave_1: entered promiscuous mode
[  143.388846][ T2389] tipc: Disabling bearer <udp:s>
[  143.394143][ T2389] tipc: Left network mode
[  143.414800][ T2389] veth1_macvtap: left promiscuous mode
[  143.420429][ T2389] veth0_vlan: left promiscuous mode
[  143.459898][ T2389] veth0 (unregistering): left allmulticast mode
[  143.479062][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.486244][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.493539][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.500560][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.525411][ T2008] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.534054][ T2008] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.544976][ T2009] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.552013][ T2009] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.560895][ T2008] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.567965][ T2008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.594060][ T3334] veth0_vlan: entered promiscuous mode
[  143.606183][ T3334] veth1_macvtap: entered promiscuous mode
[  143.677789][ T3346] kvm: pic: level sensitive irq not supported
[  143.803721][   T45] usbhid 1-1:0.0: can't add hid device: -71
[  143.815851][   T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  143.824732][   T45] usb 1-1: USB disconnect, device number 60
[  144.211980][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  144.211997][   T36] audit: type=1400 audit(2000000117.459:2812): avc:  denied  { write } for  pid=3365 comm="syz.2.937" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  144.241702][   T36] audit: type=1400 audit(2000000117.459:2813): avc:  denied  { open } for  pid=3365 comm="syz.2.937" path="/182/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  144.270189][ T3368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.278856][ T3368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.503073][   T62] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  144.554006][   T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  144.649827][ T3392] 9p: Unknown uid 00000000004294967295
[  144.664767][   T62] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00
[  144.673913][   T62] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  144.682011][   T62] usb 3-1: Product: syz
[  144.688486][   T62] ftdi_sio 3-1:5.0: FTDI USB Serial Device converter detected
[  144.697500][   T62] usb 3-1: Detected FT4233HP
[  144.713066][   T10] usb 1-1: Using ep0 maxpacket: 16
[  144.719255][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.729515][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.740376][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  144.749489][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.764574][ T3397] netlink: 'syz.1.943': attribute type 16 has an invalid length.
[  144.767631][   T10] usb 1-1: Product: syz
[  144.772517][ T3399] netlink: 'syz.1.943': attribute type 16 has an invalid length.
[  144.784805][ T3397] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.943'.
[  144.787776][   T10] usb 1-1: Manufacturer: syz
[  144.796731][ T3399] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.943'.
[  144.807202][   T10] usb 1-1: SerialNumber: syz
[  144.893120][   T62] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  144.903072][   T62] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  144.920382][   T62] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  144.934338][   T62] usb 3-1: USB disconnect, device number 69
[  144.951221][   T62] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  144.963939][   T62] ftdi_sio 3-1:5.0: device disconnected
[  145.225659][   T10] usb 1-1: 0:2 : does not exist
[  145.232349][   T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  145.244274][   T10] usb 1-1: USB disconnect, device number 61
[  145.252682][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  145.283141][  T826] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  145.433112][  T826] usb 6-1: Using ep0 maxpacket: 32
[  145.439392][  T826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.450494][  T826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.460378][  T826] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  145.473401][  T826] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  145.482492][  T826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.492370][   T36] audit: type=1400 audit(2000000118.739:2814): avc:  denied  { create } for  pid=3410 comm="syz.2.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  145.509422][  T826] usb 6-1: config 0 descriptor??
[  145.518363][   T36] audit: type=1400 audit(2000000118.769:2815): avc:  denied  { ioctl } for  pid=3408 comm="syz.5.947" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  145.614198][ T3414] netlink: 'syz.2.949': attribute type 5 has an invalid length.
[  145.621984][ T3414] netlink: 'syz.2.949': attribute type 5 has an invalid length.
[  145.630041][ T3414] netlink: 'syz.2.949': attribute type 5 has an invalid length.
[  145.637973][ T3414] netlink: 'syz.2.949': attribute type 5 has an invalid length.
[  145.648289][ T3414] netlink: 'syz.2.949': attribute type 5 has an invalid length.
[  145.656133][ T3414] netlink: 'syz.2.949': attribute type 5 has an invalid length.
[  145.663999][ T3414] netlink: 'syz.2.949': attribute type 5 has an invalid length.
[  145.671718][ T3414] netlink: 'syz.2.949': attribute type 5 has an invalid length.
[  145.710621][   T36] audit: type=1400 audit(2000000118.959:2816): avc:  denied  { read write } for  pid=3421 comm="syz.1.952" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  145.710996][ T3422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.736499][   T36] audit: type=1400 audit(2000000118.959:2817): avc:  denied  { open } for  pid=3421 comm="syz.1.952" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  145.742991][ T3422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.773292][ T3423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.784093][ T3423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.983084][   T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  146.133151][   T10] usb 3-1: Using ep0 maxpacket: 16
[  146.138373][  T826] usbhid 6-1:0.0: can't add hid device: -71
[  146.144431][  T826] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  146.153371][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.164178][  T826] usb 6-1: USB disconnect, device number 2
[  146.170560][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.182174][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.191313][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.199333][   T10] usb 3-1: Product: syz
[  146.203716][   T10] usb 3-1: Manufacturer: syz
[  146.208347][   T10] usb 3-1: SerialNumber: syz
[  146.374418][ T3432] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  146.435729][ T3439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3992652328 (31941218624 ns) > initial count (3725919384 ns). Using initial count to start timer.
[  146.486982][ T3439] kvm: kvm [3438]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800
[  146.496083][ T3439] kvm: kvm [3438]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800
[  146.517127][   T10] usb 3-1: 0:2 : does not exist
[  146.525596][   T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  146.536665][   T10] usb 3-1: USB disconnect, device number 70
[  146.544570][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  146.580861][ T3443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.589396][ T3443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.636131][   T36] audit: type=1400 audit(2000000119.889:2818): avc:  denied  { watch watch_reads } for  pid=3445 comm="syz.0.960" path="/183/file0" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  146.760107][ T3455] netlink: 72 bytes leftover after parsing attributes in process `syz.5.962'.
[  146.873147][  T826] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  147.024099][  T826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.053783][  T826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.070138][  T826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.080619][  T826] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  147.089788][  T826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.101541][  T826] usb 1-1: config 0 descriptor??
[  147.109986][  T826] rndis_host 1-1:0.0: skipping garbage
[  147.115612][  T826] usb 1-1: bad CDC descriptors
[  147.129475][ T3469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.138133][ T3469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.171044][   T36] audit: type=1400 audit(2000000120.419:2819): avc:  denied  { map } for  pid=3471 comm="syz.2.967" path="/dev/ublkc1" dev="devtmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.194618][ T2008] ------------[ cut here ]------------
[  147.200268][ T2008] WARNING: CPU: 1 PID: 2008 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410
[  147.211334][ T2008] Modules linked in:
[  147.215431][ T2008] CPU: 1 UID: 0 PID: 2008 Comm: kworker/u8:36 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  147.227487][ T2008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  147.237700][ T2008] Workqueue: iou_exit io_ring_exit_work
[  147.243750][ T2008] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410
[  147.250095][ T2008] Code: 5d e9 43 2d 52 02 cc e8 1d 90 33 fe 0f 0b eb e3 e8 14 90 33 fe 0f 0b eb da e8 0b 90 33 fe 0f 0b e9 4d fe ff ff e8 ff 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89
[  147.269769][ T2008] RSP: 0018:ffffc9000fe67990 EFLAGS: 00010293
[  147.275935][ T2008] RAX: ffffffff8353e1c1 RBX: 1ffff1102324876d RCX: ffff888114779300
[  147.283953][ T2008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  147.292008][ T2008] RBP: ffffc9000fe679e0 R08: 0000000000000003 R09: 0000000000000004
[  147.300168][ T2008] R10: 0000000000000000 R11: ffffffff8353d1a0 R12: ffff88811c142600
[  147.307641][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  147.308182][ T2008] R13: ffff888119243b40 R14: ffff88810dbd8100 R15: ffff88810dbd8110
[  147.323136][   T36] audit: type=1400 audit(2000000120.489:2820): avc:  denied  { write } for  pid=286 comm="syz-executor" path="pipe:[1799]" dev="pipefs" ino=1799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  147.324483][ T2008] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  147.356887][ T2008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.363782][ T2008] CR2: 0000200000001dc0 CR3: 00000000074aa000 CR4: 00000000003526b0
[  147.371807][ T2008] Call Trace:
[  147.375304][ T2008]  <TASK>
[  147.377838][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.378239][ T2008]  ublk_ch_uring_cmd+0x6f/0xa0
[  147.390710][ T2008]  io_uring_try_cancel_uring_cmd+0x193/0x280
[  147.396806][ T2008]  io_uring_try_cancel_requests+0x4d6/0x5b5
[  147.401550][   T10] usb 1-1: USB disconnect, device number 62
[  147.402702][ T2008]  ? probe_sched_wakeup+0x62/0x90
[  147.413696][ T2008]  ? io_uring_cancel_generic+0x6eb/0x6eb
[  147.419390][ T2008]  io_ring_exit_work+0x23d/0x83b
[  147.424369][ T2008]  ? finish_task_switch+0x139/0x770
[  147.429582][ T2008]  ? __cfi_io_ring_exit_work+0x10/0x10
[  147.435084][ T2008]  ? wake_up_process+0x14/0x20
[  147.439944][ T2008]  ? kick_pool+0x3b7/0x540
[  147.444420][ T2008]  process_scheduled_works+0x7f7/0x1060
[  147.449978][ T2008]  worker_thread+0xc99/0x13f0
[  147.454927][ T2008]  kthread+0x2c7/0x360
[  147.459030][ T2008]  ? __cfi_worker_thread+0x10/0x10
[  147.464706][ T2008]  ? __cfi_kthread+0x10/0x10
[  147.469304][ T2008]  ret_from_fork+0x67/0xa0
[  147.473764][ T2008]  ? __cfi_kthread+0x10/0x10
[  147.478541][ T2008]  ret_from_fork_asm+0x1a/0x30
[  147.483338][ T2008]  </TASK>
[  147.486444][ T2008] ---[ end trace 0000000000000000 ]---
[  147.486992][  T826] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  147.583157][  T318] usb 2-1: USB disconnect, device number 14
[  147.694972][ T1986] bridge_slave_1: left allmulticast mode
[  147.700649][ T1986] bridge_slave_1: left promiscuous mode
[  147.706536][ T1986] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.743557][ T1986] bridge_slave_0: left allmulticast mode
[  147.749245][ T1986] bridge_slave_0: left promiscuous mode
[  147.783174][ T1986] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.846318][ T1986] bridge0 (unregistering): left allmulticast mode
[  148.175447][ T1986] veth1_macvtap: left promiscuous mode
[  148.626723][ T1986] bridge_slave_1: left allmulticast mode
[  148.632406][ T1986] bridge_slave_1: left promiscuous mode
[  148.638295][ T1986] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.646213][ T1986] bridge_slave_0: left allmulticast mode
[  148.651859][ T1986] bridge_slave_0: left promiscuous mode
[  148.657841][ T1986] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.665909][ T1986] bridge_slave_1: left allmulticast mode
[  148.671561][ T1986] bridge_slave_1: left promiscuous mode
[  148.677461][ T1986] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.685212][ T1986] bridge_slave_0: left allmulticast mode
[  148.690943][ T1986] bridge_slave_0: left promiscuous mode
[  148.696834][ T1986] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.931679][ T1986] veth1_macvtap: left promiscuous mode
[  148.937351][ T1986] veth0_vlan: left promiscuous mode
[  148.953512][ T1986] veth1_macvtap: left promiscuous mode
[  148.959404][ T1986] veth0_vlan: left promiscuous mode