last executing test programs:

3m46.434624485s ago: executing program 0 (id=147):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c77fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x41}], 0x1, 0x11, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan1\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000a40)='\t', 0x1, 0x240058d4, &(0x7f0000000300)={0x11, 0x8100, r8, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x5}, {0x1, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x4, 0x0, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

3m45.514870305s ago: executing program 0 (id=153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = fsopen(&(0x7f0000000080)='omfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3m45.511952465s ago: executing program 0 (id=154):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./debug\x00', 0x361800, 0x0)
read(r1, &(0x7f0000000200)=""/100, 0x64)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x1000})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x9, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0x8, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x1, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x3, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x3, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0xfffe, 0xfffffffd, 0x5, 0xfffffffe], [0xfffffffd, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})

3m30.29009892s ago: executing program 32 (id=154):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./debug\x00', 0x361800, 0x0)
read(r1, &(0x7f0000000200)=""/100, 0x64)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x1000})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x9, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0x8, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x1, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x3, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x3, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0xfffe, 0xfffffffd, 0x5, 0xfffffffe], [0xfffffffd, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})

3m22.25480538s ago: executing program 4 (id=264):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

3m20.657495851s ago: executing program 4 (id=275):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x3f2})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m20.510544595s ago: executing program 4 (id=276):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80c00, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r1}, "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"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa}]}, 0x4c}}, 0x800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001200)={'wg1\x00', <r4=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000095}, 0x800)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x845)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000001440)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001480)=0x14)
setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f00000014c0)=0x8, 0x4)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), r2)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0x100, r9, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xda, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x6000, 0xfffb}}, @tim={0x5, 0xbe, {0x9, 0xd, 0x2, "dafcf9b747cf3b642d26eb8aa0da39448053258196e78a0c7945a05b36b6a8afc5faee0bc0939f2223b5c1d79b183227767f40b7599dcc81cd9fa0a1daa852f7d63ec29f43f629d05d3737190e6bebaa85ac65f4c3452b5445f50a197b13fa6e71a8baccd951cd8f9dd3e5195621635b3e16f05ee85f9c56add10c31817de23c974607e0de5a6061044e79494e0b601a032c1ec198fe6cde06f58363574cb8e37cd3407b33e47d049c72557c5d9c8ac9e06d33df3003385c0532a2"}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000001880)={0x1, 'nr0\x00', {}, 0x9})
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001900)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r11, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x34, r9, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000800)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001a40), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r13, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, r14, 0x200, 0x3ff, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0xe1}, 0x51)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001bc0), r11)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001d00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0xb8, r15, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8044}, 0x200000c1)
syz_open_dev$evdev(&(0x7f0000001d40), 0x40, 0x480900)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, r15, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000001e80), &(0x7f0000001ec0)=0x10)

3m20.510038395s ago: executing program 4 (id=277):
timer_create(0x6, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async)
unlink(&(0x7f00000002c0)='./trace/file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/trace\x00', 0x40, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
read(r1, &(0x7f0000000180), 0x1000) (async)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async)
io_setup(0x5, &(0x7f00000000c0)=<r3=>0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(r3, 0x1, &(0x7f00000024c0)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x5, 0x5, r4, &(0x7f00000021c0), 0x0, 0x9ab, 0x0, 0x2}])
prlimit64(0x0, 0x0, &(0x7f0000000080)={0xa, 0xfffffffffeffffff}, 0x0)

3m20.421931698s ago: executing program 4 (id=279):
r0 = socket(0xa, 0x1, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r1 = socket(0x28, 0x1, 0x0) (async)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) (async)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$evdev(0x0, 0x2, 0x4002) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0)
write$cgroup_pid(r3, 0x0, 0x0) (async)
bind$vsock_stream(r1, 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000280)=0x6, 0x4)
listen(r1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r4, 0x2) (async)
r5 = socket(0x28, 0x5, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
write(r7, &(0x7f0000000000)="240000005a001f001007f4b9002304000a04f51108000500020100020800038005004000", 0x24)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040004}, 0x40480c4) (async)
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000000)=""/251) (async)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)

3m20.266856922s ago: executing program 4 (id=280):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x800)

3m20.255111442s ago: executing program 33 (id=280):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x800)

2m44.447280779s ago: executing program 3 (id=549):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x6c}, @in6=@mcast1, {0x401, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x28}}, 0xf0}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10080)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x4e20, @broadcast}})

2m44.38281316s ago: executing program 3 (id=550):
timer_create(0x3, 0x0, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x10, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0)
write(r3, &(0x7f0000000180)='0', 0x1)
prlimit64(0x0, 0x0, &(0x7f0000000080)={0xa, 0xfffffffffeffffff}, 0x0)

2m44.38233181s ago: executing program 3 (id=551):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0) (async)
syz_ublk_setup_io_uring(0x6070, &(0x7f0000000200)={0x0, 0x4a3f, 0x2000, 0x2, 0x1dc, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x11000) (async)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async)
listen(r2, 0x5a) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) (async)
accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000100)=0x1e)

2m44.341964651s ago: executing program 3 (id=552):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0)
lseek(r0, 0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a45004, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r1=>0x0)
syz_open_procfs(r1, &(0x7f0000000100)='net/sockstat\x00')

2m44.296695483s ago: executing program 3 (id=553):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88000, 0x40)
r1 = openat(r0, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20)
setxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00')
fchdir(r2)
exit(0x5c7b)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, r3, &(0x7f0000002100)=""/228, 0xe4)
io_setup(0xfffc, &(0x7f0000000800))
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000100)=@nullb, 0x0, &(0x7f0000000140))

2m43.978619511s ago: executing program 3 (id=554):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1e88, 0x27, 0x2, 0x372, 0x0, r2}, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x13)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "e7cdc75f", '\x00\x00\x00\x00\x00\x00\x00X'}, 0x28)
recvmsg$unix(r2, &(0x7f0000000600)={&(0x7f00000003c0), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000580)=""/41, 0x29}], 0x2}, 0x143)
writev(r0, &(0x7f0000004800)=[{&(0x7f0000000140)="58ddb007", 0x4}, {&(0x7f0000002180)="2ea63d218bc102", 0x7}, {&(0x7f0000000440)="63e7368651", 0x5}, {&(0x7f0000000c80)="be77", 0x2}, {&(0x7f0000000540)="8fa68a274cab49b9c8061727", 0xc}, {&(0x7f0000000180)="925061", 0x3}, {&(0x7f0000000b80)="c83a799900d0a6b295193dcb943ab2191386165eea5853024232db9a4ac8eddd921d", 0x22}, {&(0x7f0000000340)="dcceb4ec", 0x4}, {&(0x7f0000000cc0)="0aaf6556", 0x4}, {&(0x7f0000000300)="38af426159", 0x5}, {&(0x7f0000000fc0)="e72d1514527e3c5d60b56ac052adbfdbc8562530bc4c1895d95ebe949dae4379a18b6bd028a9723a19811b7ac2750f120ce98b21be2e7d34b020335991c893a1e5", 0x41}, {&(0x7f00000010c0)="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", 0xf41}, {&(0x7f0000000d40)="0a0100", 0x3}, {&(0x7f00000001c0)="d8a55173e35236092329f86280f5e799d7dbf35bbe52407e4116", 0x1a}, {&(0x7f0000000e80)="e8", 0x1}, {&(0x7f0000000ec0)="7100dd78d9", 0x5}], 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8020000110001002cbd70000200000017000000e402e380e0022280dc022b80d7021c"], 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m43.971696811s ago: executing program 34 (id=554):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1e88, 0x27, 0x2, 0x372, 0x0, r2}, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x13)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "e7cdc75f", '\x00\x00\x00\x00\x00\x00\x00X'}, 0x28)
recvmsg$unix(r2, &(0x7f0000000600)={&(0x7f00000003c0), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000580)=""/41, 0x29}], 0x2}, 0x143)
writev(r0, &(0x7f0000004800)=[{&(0x7f0000000140)="58ddb007", 0x4}, {&(0x7f0000002180)="2ea63d218bc102", 0x7}, {&(0x7f0000000440)="63e7368651", 0x5}, {&(0x7f0000000c80)="be77", 0x2}, {&(0x7f0000000540)="8fa68a274cab49b9c8061727", 0xc}, {&(0x7f0000000180)="925061", 0x3}, {&(0x7f0000000b80)="c83a799900d0a6b295193dcb943ab2191386165eea5853024232db9a4ac8eddd921d", 0x22}, {&(0x7f0000000340)="dcceb4ec", 0x4}, {&(0x7f0000000cc0)="0aaf6556", 0x4}, {&(0x7f0000000300)="38af426159", 0x5}, {&(0x7f0000000fc0)="e72d1514527e3c5d60b56ac052adbfdbc8562530bc4c1895d95ebe949dae4379a18b6bd028a9723a19811b7ac2750f120ce98b21be2e7d34b020335991c893a1e5", 0x41}, {&(0x7f00000010c0)="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", 0xf41}, {&(0x7f0000000d40)="0a0100", 0x3}, {&(0x7f00000001c0)="d8a55173e35236092329f86280f5e799d7dbf35bbe52407e4116", 0x1a}, {&(0x7f0000000e80)="e8", 0x1}, {&(0x7f0000000ec0)="7100dd78d9", 0x5}], 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8020000110001002cbd70000200000017000000e402e380e0022280dc022b80d7021c"], 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m4.564069722s ago: executing program 1 (id=754):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080)
sendto(r0, &(0x7f00000000c0)="57a54416f4da84c92f5d466535448ead2c3b006e214e63858be0c38b97be455286f170d4e7986c85f96ac5191a675a546a39a5bc03aa796e845accc8305bdef783eaecc358721358b25d4c49ebeb427d5840398de7a7b947398fbd125c4327433c1445da8f088271351fd80dd6963e15d2dfa004cdd2738498d6022a92045949836fb2bfeaaa197a84770f6d102c3157da00ca669a191a679fdf1dfbff4ee48ca0d60d7eacb8160e786357c751713f551a06d490210f004cabbc6824b57f4e341d09e61dba0232bb696e06f507c4ffab", 0xd0, 0x4040801, &(0x7f00000001c0)=@llc={0x1a, 0x30e, 0x2, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000080)=0x1c, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) (async)
sendto(r0, &(0x7f00000000c0)="57a54416f4da84c92f5d466535448ead2c3b006e214e63858be0c38b97be455286f170d4e7986c85f96ac5191a675a546a39a5bc03aa796e845accc8305bdef783eaecc358721358b25d4c49ebeb427d5840398de7a7b947398fbd125c4327433c1445da8f088271351fd80dd6963e15d2dfa004cdd2738498d6022a92045949836fb2bfeaaa197a84770f6d102c3157da00ca669a191a679fdf1dfbff4ee48ca0d60d7eacb8160e786357c751713f551a06d490210f004cabbc6824b57f4e341d09e61dba0232bb696e06f507c4ffab", 0xd0, 0x4040801, &(0x7f00000001c0)=@llc={0x1a, 0x30e, 0x2, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000080)=0x1c, 0x4) (async)

2m4.506692063s ago: executing program 1 (id=755):
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x20e000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee2, &(0x7f0000001080))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r4, 0x400455cb, 0x2)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000406e05e600000000000001f30a2400010000403e040000fe0300020009210001fc01222800090581031000030206eae2744c160f66f5dac3f006584befec9cba338d05dfe3c798fa635fa83a25a8319eb1f239b19074e9d1bb464276c9fdc415d0dc605d300b1b6558d5559fb3262c4884a5da5323ea112d25b8e4a76415415ead9de827b672dc0c305c1c54cf34b272"], 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_usb_control_io$hid(r5, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0xa9e, 0x3, 0x5, 0xfffffe01, 0x1901, 0x7}]})
syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000240)={0x20, 0x23, 0x28, {0x28, 0x4, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049e1002100c9a7befe6f6d645a1a11b81b2c4b100fd57c06db1a75df432a9ed32d3b475663c0d236fd000000000000000000000000000000267f49eb82b962d81db29f0b47df47351f"], 0x184}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}}, 0x0)
r12 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000680)={0x6, <r13=>0xffffffffffffffff, 0x1})
sendmsg$unix(r11, &(0x7f0000000740)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000340)="7bd2195b317486f01901f99c964f51fc94cfec5aea8e30b24bf763e0cba77c12befe80522589eefd914df791dd2dca808f5e9250488989c308093f748e40bf71afebfee465a6656a36da3c5480e955f52ed82876ca746e455f67deaef55c8bb1b5c660d3ef1ca5bd2a839b51cdb193dd1599bf0ddad9d96d56200fb3d369ee97dc13845a72419041de553174cd8552da6e16fb67a51afdd3751a8b2b987ce14ea833b807150d4b75cb16ec2665f0ec5c2ad36228c108a72433e9c8e5dd1d17e2c38e29dbe8a71b29f4ec44ddd1f9f24ae1412e3da74ba2e4fee67c9e1aa1932d6ef22510a37539bf7f21cb79cdc4b4", 0xef}, {&(0x7f0000000440)="ce6cb5253d3f0c0be78e116865de5aa4bc63d8c3c956365710020cab079da2f9b96b1cbf8a0a9162bbe45cbeb3943aef85df74079ea7f3569a7b7befe125bceb3f36bf315d8c460ce69f86918a13dba5caa49b92f5f737b89fbe7292f9947084680a3603a2e8bd8fbd6d517a4c7b61e71db8b34b", 0x74}, {&(0x7f00000004c0)="f9fb67dc68999c41515505cc611ab0f274f0ffec67d860d8444fbc0410840b40285a6d47b4a3b3ea5c8af4a4ae94f6f6cef13a8dc10d7a3d8e4a7e413801c8e8915ae73dd7cf7034d93980057179a3b4c51c1ce1bf7bbd5697525b829d2fabe0d27b66d49c83436f22b17371479c9536e58c27bc6cd9357d9c0a5554f2b556489a1faa21b885196b552092143497e7090fe3", 0x92}, {&(0x7f0000000580)="2c8bb447623a50f3965db328d286ee3eb1a9aa18c353c050e1d3f528ebf1fcf740a9cf14fbbb243e98692b76bf836f0c3b7e4174170660e57fdbf062608948c632cfc62846e04902400c9744c3d7ede2204a81b6ab67954610e369445f3eb1088175678adf997fbdf4bceab62b54bda376e0", 0x72}], 0x4, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r6, r3]}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r6, r7, 0xffffffffffffffff, r12, r1, r13]}}], 0x60, 0x800}, 0x4)

2m1.406449324s ago: executing program 1 (id=766):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88a827008100100008060001080006040001bbbbbbbbbbbbac14dac7a4efc14ef533ac1414"], 0x32)
syz_ublk_setup_io_uring(0x3bbb, 0x0, 0x0, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xfff}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x103, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x40000) (async)
r4 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0) (async)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
r5 = getpgrp(0xffffffffffffffff)
fstat(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}) (async)
r8 = getpgrp(0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006340)=ANY=[@ANYBLOB="200000001500010027bd7000ffdbdf2502003800", @ANYRES32=r9, @ANYBLOB="08000200"], 0x20}], 0x1}, 0x4000) (async)
r10 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES64=r8, @ANYRES32=r3, @ANYRESOCT=r5, @ANYRES8=r7, @ANYRESHEX=r9, @ANYRES16=r5], 0x474}, {&(0x7f00000005c0)={0x158, 0x3b, 0x2, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x53, 0x0, 0x0, @u32=0x9}, @generic="eca858221aa7307921f938e223ff0b4eb263cfa106a4589c9b9152ccafecbf82f407ad0fc2cc224c6b274b5832ec125e53", @generic="7cddfdd891527bd952b569450b309cbb490550c2e615ca1129c2218dc74c67ebf0b455a2a11296787b53b56d210053e1b97dbdddda735c4559c940e844ade1553d69735d464afc356f49a4d7131cc0d4a2a8fc1a733742de11d6333fd1b84809ef4fa9d302bf", @generic="b27f56f2da2da742a6c9f8a408422526d40a927cc587a5a15e285aba433713847e620ccd4bf35c3b943e4e9f62b56e5c3f9c1f2cebd29285210bb2b26206853c70ce3e68b11b03e4b5380e561123aa3d04561944f2b909da5e98d567f23da42aba21e7ba1a9f78fd317b88f3bc24b2d65389b5d4078349ef1c1a2bff32732064ec17125872a063d09555a0274c0172d1a42dd0204f463c7b3f3e48fe3c5a4c55d4b80351774b"]}, 0x158}, {&(0x7f0000000800)={0x150, 0x1a, 0x100, 0x70bd25, 0x25dfdbfb, "", [@typed={0xf, 0xd3, 0x0, 0x0, @str=',-,$,*^]/;\x00'}, @nested={0x111, 0x71, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @u32=0x1}, @generic="ca9dfe6812b2aed90e9493fb1e0130237fb138e377bef35e1974a81401d80ad04bffb623f7a200683adf8fa4d8efb35b9c9bc08922f430e6556849e28736077076c2992d5751303e0edf3159600cd93f899170b53390a38b001ca4f928ba9b303fc526692b8ea1676f257ca245ea442561d13ce31a406b2b519a022fe9da3de1fb4da581508ad57c93d05ef8b069b43e66ef2b78c5a0867a2b0da7a221b2b8c9847117043dc871ecb2d92ec2ec4980aee542844efcd031612a58f98e257eefe5d519fee41d1bd6ac907efcc5967c4ccee53c82465a3c7981fd1f4c56af2694a92b", @nested={0x4, 0x14b}, @nested={0x4, 0xcc}, @typed={0x8, 0x63, 0x0, 0x0, @uid=r6}, @typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @nested={0x4, 0x4c}, @nested={0x4, 0x152}, @nested={0x4, 0x5e}, @generic]}, @nested={0x10, 0xdf, 0x0, 0x1, [@typed={0x4, 0xe9}, @nested={0x4, 0x166}, @nested={0x4, 0x8f}]}, @generic="3381", @typed={0x8, 0x93, 0x0, 0x0, @uid=r6}]}, 0x150}, {&(0x7f0000002a40)={0x11f0, 0x22, 0x800, 0x70bd26, 0x25dfdbfe, "", [@generic="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", @generic="2f1f76dffc1e6ca1230fb5f60d703fe7c884ee3738b1978e92ecfe8e41450da2660b402fb48af47710c5ca5986377f32f9f20e5cca04a452cb", @nested={0x94, 0x76, 0x0, 0x1, [@generic="f997643ad65789f29bcc7495cc91e52cfe0b92c9cc6688f09affb7b889f5b07fd7888efca2e1bf3e6a8baf33bd6ca64195f7d8c617ef993e000884e39e632129e145d1a7f2b861ef955f44e518f06133cc526c764ed60e960a89aa8b9adb253ab46bb98f1f3812dc828f9b836659b68d", @typed={0x8, 0xc3, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x64, 0x0, 0x0, @pid=r8}, @nested={0x4, 0xaa}, @nested={0x4, 0x152}, @typed={0x5, 0x1f, 0x0, 0x0, @str='\x00'}]}, @generic="85d307319f3e53fca501d83eca27c842b7701ca17bce2a99c64e3476cf2bc96a40d5a1e192cdb434ad287f65330fb90fbf53c60c6114276e3f557168e39936a35e", @generic="b64e204ebbb6f919ef4e01deb06d01f80eb1f1a5461168ab45b6de2bafdcc2847a5921c8f9a345c814c7562fd6b96ced0e1935327d87a9c22d5f6360434e71c5aa29d14432eb4f32174bf5de1c4d0f0aa30c7e2c77afeb6e3ed9396b448f80fe99838ede261f9738a06192b335d391cb64f2cf6142301b0037829e2828296aafcf636c6b60ba12aacf491c1bbcfed92b1395741554b4abf8a2f1653b21bb2bb25c58c830cc7ac87e21368d943c0925f9898de025e3378f87fba608a092fa072be8995000b90403b7f23b0c42c3f273962e"]}, 0x11f0}, {&(0x7f0000000340)={0x258, 0x3a, 0x20, 0x70bd28, 0x25dfdbff, "", [@generic="478a899d3bddc79566965d7321311cba7663932e007431d9e2a2d49d9c0b16d9471234807b35e2508657690e925918f17b7ef6c9e1f6503a", @nested={0x1c6, 0xee, 0x0, 0x1, [@generic="0c7de105302e1bb878839c01229c3fac662621a1bb6b95d55390f969f2b4f7e344629e2239559166ec571a3844a3298343781d6e78fac0267fa5e479211991a6d067bfd771b0543f33ee74a7c56eb27003c9bc70d661dac1f841bb61fbada5c7b511da8a4bcf47f3513cd95fce9b8c33def295ffc105255f7e7d423bb4341feef5ed2db71f2d9e9d66507dd36da3fe42d8559b73c855a4409f828916672a0db8ba360bfa0ca22ad81dd480065cee4b075c9677488f68d08df957a0b458", @nested={0x4, 0xc2}, @nested={0x4, 0x12a}, @generic="62061fc853340248b70780c4a02427a8a5cdaa542c44b73658baff0a19c90ed92a34d4e71c154444fe58c57c04b4177ac3a1919f1dd1bf0f0c", @generic="36f0c584f527198caa0b41780da790005dc4fff6fa678ba2b04825a8", @nested={0xa8, 0x94, 0x0, 0x1, [@typed={0x8, 0x167, 0x0, 0x0, @u32=0x20}, @typed={0x8, 0x51, 0x0, 0x0, @uid=r6}, @nested={0x94, 0x39, 0x0, 0x1, [@generic="8dd505a0c1be5bf27ff1f315421ba634a720c0fb2bcec4145e4f710582e11078d07f7efcbf06a505b6dd8512", @typed={0x63, 0xe6, 0x0, 0x0, @binary="6417be23143bbf9e09c5b66ddc2d0808095b858ea433578abb4c2550c4186ba633844b2631bb0a3fd1b72ebd67269c41ab5a7dd2c659e7132681cef014a66f831295f21ebedc0f8174c72bd9cd2b2f241c098aad174935f8dbdcd4a78312ae"}]}]}]}, @nested={0x48, 0x40, 0x0, 0x1, [@generic="a0d9c6ac73c55e59bb98bdefad2b1d414d4d24a6254d18759d622c1cb425d2ea1a98b4ddfbdb5f9f6c22130093e7fdd8de0006b9a699df52965eba06d77d86fa71b72b01"]}]}, 0x258}], 0x5, 0x0, 0x0, 0x4}, 0x4)

2m1.348277555s ago: executing program 1 (id=767):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async, rerun: 64)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
chdir(&(0x7f0000000240)='./file0\x00') (async)
setreuid(0x0, 0xee01)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

2m1.218281699s ago: executing program 1 (id=768):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0xc004)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc2c02e4d8eb3a414, 0x4)
r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, r0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept4(r5, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80, 0x100000)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000001880)={0x2020}, 0x2020)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000400)=""/155, 0x9b}], 0x1, 0x0, 0x3)
read$FUSE(r6, &(0x7f0000001940)={0x2020}, 0x207b)
recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0)
signalfd4(r3, &(0x7f0000000000), 0x8, 0x800)
r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00')
pread64(r8, 0x0, 0x0, 0x8)
write$FUSE_CREATE_OPEN(r7, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x5, 0x1, 0x200005, 0x6, 0x0, 0x2, {0x1, 0x17a, 0x40000000103, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0xa000, 0x4, 0xee00, 0x0, 0x403, 0x3}}, {0x0, 0x11}}}, 0xfffffffffffffea1)

2m1.118800001s ago: executing program 1 (id=769):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r0)
open(&(0x7f0000000240)='./file1\x00', 0x149142, 0x0) (async)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x149142, 0x0)
unshare(0x80)
syz_usb_ep_write(r0, 0x8, 0x79, &(0x7f0000000100)="590913bf9b4b5422b65102fb9dc8fe72911711a952e4f8ceb84d3cf39a84fbd97ee96f384a0616a6d6b90bd8ce21f24805334535ccac21a8e81b155c410fcc81ab122ca0dbd72328b393445305a07b0abec2fbada7712377a9658a90211723f1e336c26412c3169bfaa0836aaca40df482aff9a7743219e01f")
sendfile(r1, r1, 0x0, 0x8000000000000000)

2m1.112057892s ago: executing program 35 (id=769):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r0)
open(&(0x7f0000000240)='./file1\x00', 0x149142, 0x0) (async)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x149142, 0x0)
unshare(0x80)
syz_usb_ep_write(r0, 0x8, 0x79, &(0x7f0000000100)="590913bf9b4b5422b65102fb9dc8fe72911711a952e4f8ceb84d3cf39a84fbd97ee96f384a0616a6d6b90bd8ce21f24805334535ccac21a8e81b155c410fcc81ab122ca0dbd72328b393445305a07b0abec2fbada7712377a9658a90211723f1e336c26412c3169bfaa0836aaca40df482aff9a7743219e01f")
sendfile(r1, r1, 0x0, 0x8000000000000000)

1m3.177707537s ago: executing program 6 (id=1180):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0c0fc7ac8ccc00000026640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0cc4e281acb5a9580a5666ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x80}], 0x1, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m2.252680952s ago: executing program 6 (id=1191):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x6, 0x5000, 0x1000, &(0x7f0000ff3000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f06670f2107c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8260f01d1f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e035004000000f22e035080000000f23f8", 0xfffffffffffffeec}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
fcntl$dupfd(r0, 0x406, r1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x6, 0x5000, 0x1000, &(0x7f0000ff3000/0x1000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f06670f2107c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8260f01d1f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e035004000000f22e035080000000f23f8", 0xfffffffffffffeec}], 0x1, 0x21, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

1m2.094922826s ago: executing program 6 (id=1192):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xea, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1106, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfc, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1022156ced45bd4196f2530abaca1801c209b317828abd8827f3585a78a1010901a3a6d3bea855d12fa12c8d6206f88b2cfd667d60053ba2fdc7ce4a420c584e748dd115971d"], 0x0}, 0x0)

1m0.765816411s ago: executing program 6 (id=1201):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0x1})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
pipe2(&(0x7f00000000c0), 0x80000) (async)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$setpipe(r1, 0x407, 0x4)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) (async)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r4, 0xc138fd06, &(0x7f0000003000)="040000000000000000000000380100000000000000000000000000000000000000000000000000006d")
write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x78)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/2699], 0xa8b)
close(r3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
r6 = syz_clone(0x2010000, &(0x7f0000000180)="55f17b1fb5f4b0d4b9fbce95fb7b", 0xe, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000380)="d6d04aff3a655a3e835a4eb38d0d5948fa6b9ff60c46d991e7165666bb5e57219c7db8698bc511da28452626c002ae676f4c3e3580cd772b69279d41da37eab8f91a11a22bcb8322746c7df9b13f325b2eaacd1221c19bebfab5d0854635")
fcntl$lock(r4, 0x1, &(0x7f0000000040)={0x1, 0x2, 0x10001, 0x5, r6})
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$inet6(0xa, 0x80003, 0xff) (async)
r7 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
socket$inet6(0xa, 0x3, 0xff) (async)
r8 = socket$inet6(0xa, 0x3, 0xff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9) (async)
ptrace(0x10, r9)
ptrace(0x4210, r9) (async)
ptrace(0x4210, r9)
socket$inet6(0xa, 0x80003, 0xff) (async)
socket$inet6(0xa, 0x80003, 0xff)
close(r8)

1m0.706809982s ago: executing program 6 (id=1202):
clock_nanosleep(0x1, 0x0, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) (async, rerun: 64)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
capset(&(0x7f0000019340)={0x20071026}, 0x0) (rerun: 32)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x6f9, 0x0, 0x0, 0x1000, 0xb}}}, &(0x7f0000000300)=<r2=>0x0) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa1bd, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m0.684721433s ago: executing program 6 (id=1205):
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=""/4112, 0x1010}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f00000013c0)=""/70, 0x46}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x40010122, 0x0)

1m0.657369314s ago: executing program 36 (id=1205):
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=""/4112, 0x1010}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f00000013c0)=""/70, 0x46}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x40010122, 0x0)

34.062949859s ago: executing program 2 (id=1435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
close(0x3)

34.050890339s ago: executing program 2 (id=1436):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
readv(r0, &(0x7f0000002740)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4)
sendmmsg$inet6(r1, 0x0, 0x0, 0x24000001)
r2 = dup(r1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)

34.04003633s ago: executing program 2 (id=1437):
memfd_create(&(0x7f0000000080)='\xf2&\x04\x00\x00\x00\x00\x00V ((\xf1\x06\xe9daC\x12', 0x5) (async)
memfd_create(&(0x7f0000000080)='\xf2&\x04\x00\x00\x00\x00\x00V ((\xf1\x06\xe9daC\x12', 0x5)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@sg0, 0x0, 0x0)

33.990827431s ago: executing program 2 (id=1438):
r0 = socket$packet(0x11, 0x3, 0x300)
mkdir(&(0x7f0000000300)='./file0\x00', 0x2)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='.\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', <r3=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

33.990541341s ago: executing program 2 (id=1439):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22048dc, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
pread64(r4, &(0x7f0000002180)=""/9, 0xfdc5, 0x4ac)
openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c23003f)
r7 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10)
write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r5], 0xa)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$sock(r8, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff0014970000000000000010000200766574682b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="8bcceb216f624c06f5ff84087509000000000800", 0x14}, {&(0x7f0000000180)="c04b89ae113ec9356b14657f3b32f8675408c1cf3035744e", 0x18}], 0x3)

33.866717454s ago: executing program 2 (id=1442):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0)
write(r1, &(0x7f0000002ac0)="f0a5e5", 0x3)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4)

33.861016954s ago: executing program 37 (id=1442):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0)
write(r1, &(0x7f0000002ac0)="f0a5e5", 0x3)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4)

5.913429835s ago: executing program 9 (id=1709):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x388, 0x1)
ptrace$pokeuser(0x6, r0, 0x358, 0x1000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r1, 0xc8519000)
r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103200000000709050203"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.282029658s ago: executing program 9 (id=1717):
rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8)
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000015c0)={0x84, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000012c0)=ANY=[@ANYBLOB="66643d40b93d8f178638216c9888911b890675a2c24ca1b61e7c53fe98b5f56ed6fe6f8b9c580002000045d1801876ab191caf394c59d85f0e95004e483e07dcd9a234a3c767c0bb320c7e5ace02db2673004fae3b1fffbdd1ffa5449475b11be3d1767447b56425492dbe891eaebc3b1a80ef12e8254731d0c49e91e32caf6d38631df663ededa91f1d3440ac7c83d8abf874732a589cab334dac06f1be8630021787542fa60ca6adb4abedfdd53da3957072fb956f578dac802553243851386b", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_fuse_handle_req(r5, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000280)={0x28, 0x4, 0x0, {0x1, 0x6}}, 0x28)
unshare(0x20400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001c40)={{r7, 0x0, 0x8080, 0x0, 0x6, 0x0, 0x0}, 0x1, &(0x7f0000001b00)=[{0x0, 0x2, 0x0, &(0x7f0000000600)="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", 0xc3e, 0x30}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2)
read(r8, 0x0, 0x0)

4.077159313s ago: executing program 9 (id=1718):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000006161fb4c7c29def800000109022400010000600609040000010300020009210300030122180009058103ff03000003"], 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x2011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x80, 0x8, 0x1, {0x22, 0x53f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x12, 0x6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x80, 0x4}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0xa6, 0x1, 0xff, 0x2}, 0x4a, &(0x7f00000000c0)={0x5, 0xf, 0x4a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xa2, "5cc9351633af7e717d7ecdb7faa0317e"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0xd2, 0x9, 0x80, 0x2, 0xc}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x0, 0x0, 0x0, [0xff0018, 0xc000, 0xf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x2, 0x5}]}, 0x3, [{0xde, &(0x7f0000000140)=@string={0xde, 0x3, "b215bc3e528aba0503d500d552b85f729a748ed5ca0f2884c0eef0b740e771429ba8f60743f6d2cef8022ed1173a51e33d4b1cfe5502f6f472d5da1c438104f379680d94f01015f812febfc625f6bbf7f4cde3e4d1de5f526d18b2ff80fc49726c99b9e73fc1f7bca5054f314a9e049e3cbdf8b47998f19ed002a2c0decfb5a75fe4217c2b4d35a18135fc867daa05c3f34788f1eb369f8b93e2b83206cc314d756b6d75056ddb9ff40b482ba25fb4093e8bc46e573cc1bfb7f9331ae585cdae11e7b44b20a3a3974ba3e014bea12a55f4f7681ac5a70688dc8b3bd2"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40c}}, {0x6, &(0x7f0000000280)=@string={0x6, 0x3, "5bc66037"}}]})
r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
read(r1, &(0x7f0000000340)=""/72, 0x48)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xfff0, 0x7a, 0x1, {0x22, 0xbf1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x8, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0xe, 0x7}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x4, 0x7, 0x4, 0x8, 0x47}, 0x3d, &(0x7f0000000380)={0x5, 0xf, 0x3d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7a, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x4, 0x46f}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x3, 0xf000, 0x7, [0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "d593f9dccf02dbf8d8af6bcd58cb06c0"}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x800}}, {0x14, &(0x7f0000000440)=@string={0x14, 0x3, "5f6cd9d34b861dd2a15d3a490517751c18dc"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.779738761s ago: executing program 5 (id=1728):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x1a3001, 0x18)
write$khugepaged_scan(r2, &(0x7f0000000000), 0x8)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040))
r4 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x59, 0x89, 0xc4, 0x40, 0xdba, 0x5000, 0x8a38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6, 0x0, 0x79, "", [{{0x9, 0x4, 0xb6, 0x4, 0x0, 0x5a, 0x88, 0xd2, 0x1}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "038ca3a0", {0x3, 0x102, 0x0, 0x4, 0x0, 0x3, 0xfe}})

1.91775619s ago: executing program 5 (id=1731):
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
pipe2$9p(&(0x7f0000000010)={0x0, <r0=>0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000040))
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x37cbd41016e687c3, {0x80, 0x0, 0xfffffffffffffffd}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x800, 0x1, 0x200008, 0x0, 0xf, 0x10000, 0x0, 0x0, 0xfffffffffffffffe, 0xbfffffffffffffb6, 0x0, 0x0, 0xfffffffffffffffc}}, 0xa0)

1.88913027s ago: executing program 5 (id=1724):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a0000000400000014"], 0x2c}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) (async)
getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) (async)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x2a000849, &(0x7f0000000000)={0x2, 0x24e23, @private=0xa010100}, 0xcf27757bdd84dfbc) (async)
sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x1004, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xc1}}}}}]}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40062800000028"], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) (async)
recvmmsg(r1, &(0x7f00000058c0)=[{{&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000300)=""/158, 0x9e}, 0xf}], 0x1, 0x0, 0x0)

1.369690434s ago: executing program 5 (id=1727):
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x4e1f, @private=0xa010102}, {0x1}, 0x66, {0x2, 0x4a23, @loopback}, 'dummy0\x00'})
setsockopt$inet_buf(r0, 0x0, 0x1f, &(0x7f0000000000)="8b62b026b7db827a2ce234c311566bd2288afc3b5af99efcc656e9d9c4d97f56d978061dc4cc18f0c7791c63c2df7ded69dc563f031fc09be4b8c6b75a3982982de762980f624041f86104695da0effd83f2aa1a2fc093454c3476c5c46ff5ef7a0b085a72ab083bc31412aa6871f3cfa5edf709d475d8168f050bb29c67fd3fd690f4a3ba2f4ad4445db4e84e07498855", 0x91)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2000, 0x20)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r1, r0, 0x0)
r4 = openat(r1, &(0x7f0000000000)='./file2\x00', 0xc2c02e4d8e829017, 0x160)
openat$incfs(r4, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
futex(&(0x7f0000000180), 0xa, 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x1)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x101000)
ioctl$USBDEVFS_RESETEP(r6, 0x80045503, 0x0)
r7 = add_key$fscrypt_v1(&(0x7f00000020c0), &(0x7f0000002100)={'fscrypt:', @desc1}, &(0x7f0000002140)={0x0, "9a075c94554e9fbfb8c4b9f49d397a58e25f893447611eb9d551bac19c36c26138ee8a3cf6c921a6ce3ed1ee548201c1e635bd9c472c13aff9187ff8ddd52823", 0x2d}, 0x48, 0xffffffffffffffff)
keyctl$clear(0x7, r7)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22ffec)
ioctl$TUNGETVNETLE(r5, 0x40047452, &(0x7f0000001200))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101a02, 0x13c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')

1.114583131s ago: executing program 8 (id=1732):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x101}, @CTA_TUPLE_MASTER={0x54, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x7d39231a4b6ad90) (async)
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000006c0)="0800fbfaffab07f7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c010) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a41, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2})
syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
r4 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c, 0x800)
getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40)
clock_settime(0x5, &(0x7f0000000140)={r2, r3+60000000})

1.092521031s ago: executing program 8 (id=1733):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x2400c800)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setitimer(0x2, &(0x7f00000000c0)={{}, {0xffffffff}}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00')
r0 = socket$netlink(0x10, 0x3, 0x12)
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x100, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80100, 0x1)
fspick(r2, &(0x7f0000000340)='./file0\x00', 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000140)=@rnullb, r1, &(0x7f00000002c0))
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e2a, 0x9, @loopback, 0x40006}, 0x1c)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x104, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB])
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x7, 0x5, 0x7, 0x4}, {0x0, 0x7, 0x92, 0x1}, {0x5, 0x6, 0x0, 0x1}]}, 0x10)

1.065262342s ago: executing program 8 (id=1734):
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
pipe2$9p(&(0x7f0000000010)={0x0, <r0=>0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000040))
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x37cbd41016e687c3, {0x80, 0x0, 0xfffffffffffffffd}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x800, 0x1, 0x200008, 0x0, 0xf, 0x10000, 0x0, 0x0, 0xfffffffffffffffe, 0xbfffffffffffffb6, 0x0, 0x0, 0xfffffffffffffffc}}, 0xa0)

1.029735643s ago: executing program 9 (id=1735):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000c40))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0xfec00000, 0x80bf000, 0x0, 0x87, 0x7, 0x10, 0xff, 0x7, 0x0, 0x7, 0x6}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0x7f, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x6, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4, 0xc}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0x0, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x3000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r1, &(0x7f0000000140), 0x700)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0)

1.029191953s ago: executing program 8 (id=1736):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4)
r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
fstat(r1, &(0x7f00000002c0))
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0)
getrlimit(0x6, &(0x7f0000000140))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
rt_tgsigqueueinfo(0x0, 0x0, 0x1b, &(0x7f0000000fc0)={0x25, 0x10000, 0x89})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x10}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)

958.895375ms ago: executing program 8 (id=1737):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x12a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)
write$cgroup_subtree(r2, &(0x7f0000001480)=ANY=[@ANYBLOB='1-6:5', @ANYRESDEC], 0x31)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000038d2090049babf4139"], 0x18, 0x841}}], 0x1, 0x11)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
close(0x3)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r7 = socket(0x2, 0x3, 0xff)
r8 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880080354803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r9, 0x29, 0x4, 0x7, 0x3, 0x1a, @dev={0xfe, 0x80, '\x00', 0x3b}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x1, 0x3, 0x9}})
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0x7fffffff, &(0x7f00000000c0)=0x4)
close(0x3)

956.062945ms ago: executing program 7 (id=1738):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x41, 0x0)
unshare(0x60000600)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x7, "f0a23923263408"}, &(0x7f0000000200)=0x2f)
write(r0, &(0x7f0000000300)="6a43869c97", 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x3}}]}})

881.971977ms ago: executing program 9 (id=1739):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)

864.147387ms ago: executing program 9 (id=1740):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x10000, 0x7}) (async)
r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write$make_it_fail(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000780)={[{}]})

770.861769ms ago: executing program 8 (id=1741):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000002480)=0x4, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f00000024c0)="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", 0x5ad, 0x44, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup3(r2, r0, 0x80000)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20008044)

770.51668ms ago: executing program 38 (id=1741):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000002480)=0x4, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f00000024c0)="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", 0x5ad, 0x44, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup3(r2, r0, 0x80000)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20008044)

770.436249ms ago: executing program 7 (id=1743):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xfdef)

655.124523ms ago: executing program 7 (id=1744):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x5, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x3, 0xfffffbfc, 0x4, 0xff, 0x0, 0x45, [0x0, 0x2]}})
lsm_set_self_attr(0x69, 0x0, 0x66ee0bd6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x10000000000})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0)
vmsplice(r5, 0x0, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080)
r7 = landlock_create_ruleset(&(0x7f0000000180)={0x8000, 0x1, 0x0, 0x110}, 0x30, 0x0)
landlock_restrict_self(r7, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfff}, 0x1c)

535.337946ms ago: executing program 7 (id=1745):
pipe2$9p(&(0x7f0000000000)={<r0=>0x0, <r1=>0x0}, 0x0)
pipe2$9p(&(0x7f0000000010)={0x0, <r2=>0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000040))
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}})
write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x37cbd41016e687c3, {0x80, 0x0, 0xfffffffffffffffd}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x800, 0x1, 0x200008, 0x0, 0xf, 0x10000, 0x0, 0x0, 0xfffffffffffffffe, 0xbfffffffffffffb6, 0x0, 0x0, 0xfffffffffffffffc}}, 0xa0)

462.820058ms ago: executing program 5 (id=1746):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
io_getevents(0x0, 0x7, 0x0, 0x0, &(0x7f0000001200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0xc, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@index_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}], [{@flag='rw'}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, &(0x7f0000000140)={0x26, 0x0, 0x13})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x13, r4, 0x505c6000)
landlock_restrict_self(r1, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0xe8, 0x10}, 0x18)
faccessat2(r6, &(0x7f00000000c0)='./bus\x00', 0x8c, 0x0)

462.306818ms ago: executing program 5 (id=1747):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x57, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2000, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xfe}}}}}]}}]}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x29c, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x401, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb7}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x45a}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe5}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x40, 0xf5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @local, 0x1}}}}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff26e1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "40a4b9ee3cc42da850a34535454c6ad1e6aae0dc9b1e834970"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "ac91b661306ff60b2ba7c1f132b3171dbd538d00b3c9a50180d92990"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9593}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x4a, 0x3, "4ec1632d3fc9aea259860982efcfb1d7bdfb71a96ac793a3c930c611b6b90516de28381fdb3b9b5414bdfc2f762618462245a81144ba133cfa7ffa92b52f365d2bbaa173731a"}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x10}, 0x40)

410.331159ms ago: executing program 7 (id=1748):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)

319.190032ms ago: executing program 7 (id=1749):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001d002100000000000000000007"], 0x34}}, 0x0)
recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000001680)=""/4104, 0x1008}], 0x2}}], 0x1, 0x40030002, 0x0)
r2 = gettid()
clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000140)={0x77359400}, 0x0)
rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x7101})
syz_usb_connect$uac2(0x0, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x41d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x26, 0xc5}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x1, [0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x3, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x30, 0xa, 0x2}}}}}}}}]}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x4000000)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2d}]}, 0x1c}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
close(0x3)

149.643556ms ago: executing program 0 (id=1742):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c2) (async)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x51)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write(r0, &(0x7f0000000480)='1', 0x1)

2.72931ms ago: executing program 0 (id=1750):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async, rerun: 64)
r4 = gettid() (rerun: 64)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xdbb, 0x37}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x34}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3f}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x2000c001)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc801}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, <r5=>0x0})
fcntl$setown(r3, 0x8, r5)
r6 = signalfd(r0, &(0x7f0000000300)={[0x1]}, 0x8)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r8=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x2, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x12}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2306}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44044}, 0x48080)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x128, r1, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2, 0x7}, {0xc0, 0x2}, {0xe}, {0x1, 0x6}, {0x2, 0x1}, {0x3, 0x3}, {0x8, 0x5}], "d2337717cec91e56"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x4, 0x6}, {0x7, 0x6}, {0xda, 0x5}, {0x1, 0x4}, {0x8, 0x4}, {0x5, 0x7}, {0x3, 0x1}, {0xc, 0x2}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x7}], "ba8785d5da3ea4e3"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x6}, {0x7, 0x5}, {0x7f, 0x6}, {0xb1, 0x5}, {0xa8, 0x5}, {0x56, 0x6}, {0x40, 0x6}, {0xec, 0x5}], "fe94142c8c4e567d"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x3}, {0x5, 0x6}, {0x8, 0x6}, {0x2, 0x6}, {0xc0, 0x7}, {0xb5, 0x1}, {0xd4, 0x6}, {0x4, 0x4}, {0x80, 0x2}, {0x9, 0x7}, {0x1, 0x5}, {0xa9, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x5, 0x4}, {0x81, 0x2}, {0x8, 0x6}], "cf29e5c31d68080f"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xc, 0x6}, {0x9, 0x2}, {0x5, 0x1}, {0x3, 0x7}, {0x6, 0x7}, {0x7, 0x1}, {0xa6, 0x7}, {0x3, 0x1}, {0x40, 0x6}, {0x67}, {0xfa, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0xf, 0x6}, {0x5, 0x4}, {0x87}, {0xd}, {0x1, 0x1}], "e2f3079472298d82"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x2, 0x1}, {0xa}, {0x8e, 0x2}, {0x4, 0x5}, {0x7f, 0x1}, {0x0, 0x7}, {0x4, 0x7}, {0x80, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x8, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0xf, 0x2}, {0x10, 0x5}, {0x0, 0x5}, {0x6, 0x2}, {0x8, 0x2}, {0x6, 0x4}], "832ccbbd1f0ebc40"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf0, 0x1}, {0xfd, 0x6}, {0x9, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x57, 0x4}], "7dc0b897f5e61887"}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) (async)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) (async)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x3ff) (async)
ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000900)=0x3bdfa419) (async)
r9 = openat$cgroup_subtree(r6, &(0x7f0000000940), 0x2, 0x0)
preadv(r9, &(0x7f0000000cc0)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/47, 0x2f}, {&(0x7f0000000a00)=""/150, 0x96}, {&(0x7f0000000ac0)=""/194, 0xc2}, {&(0x7f0000000bc0)=""/74, 0x4a}, {&(0x7f0000000c40)=""/85, 0x55}], 0x6, 0x7f, 0x2) (async)
write$binfmt_format(r6, &(0x7f0000000d40)='-1\x00', 0x3)
bind$bt_hci(r6, &(0x7f0000000d80)={0x1f, 0x0, 0x2}, 0x6) (async)
r10 = ioctl$USERFAULTFD_IOC_NEW(r6, 0xaa00)
ioctl$UFFDIO_WAKE(r10, 0x8010aa02, &(0x7f0000000dc0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async)
r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r11, 0xf501, 0x0) (async, rerun: 64)
close_range(r10, 0xffffffffffffffff, 0x520501c3a2d864d4) (rerun: 64)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000e40)={'xfrm0\x00', @local}) (async)
ioctl$TIOCMGET(r11, 0x5415, &(0x7f0000000e80))

0s ago: executing program 0 (id=1751):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae500"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x0, 0x3, 0xe9, {0xe9, 0x6, "556ace07b671a9047dd1466c804f1eeb86970cb30e9de2f57e30473c75c35fee183c00f7c4ee608b7f19c9efea42372f975592686780ee0262b45ba4da3aa374c00ae5a4557334088ef9344f43511005d0950b522b5aa8f013ab62cb33f885ffd8e68ebe66242a2c27cbe5270cef129b3c88065c0764cca72dfd280579b2751a3a538aceca19356c07483324943d173862367c79b62b2b5943d9e513c44b934b2ced0aa9e225d8423dc1e6cf7c4daf23307b46ea43eedd0ea3ceb8ec9d150229f60913017f7f003fa44b4193c48e1ef3e516ee7a898da1ceede11409596afebd0f0a0f97450372"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000180)={0x0, 0x22, 0x11, {[@local=@item_012={0x2, 0x2, 0x5, "1956"}, @local=@item_012={0x2, 0x2, 0x3, "b762"}, @local=@item_4={0x3, 0x2, 0x9, "ab868967"}, @main=@item_4={0x3, 0x0, 0x8, "7bf93cca"}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x8f, 0x1, {0x22, 0xb8f}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0x14, 0xa8, "2441edb301714ba3800f6a07fec7c13f9036db133f2d35781633e80de4a08e5a241ce9357bb5ac6707b06e15ade12d4f5736ca93d0630ea401730f76ee054949c5350ccbf7ec974eaa271cf1f6028924dbf9cf8f60e8dac0e2887a08d3197e8eaa29831abfde65a8906cd3dc444603f712a6aed2f7828e965c1365af672570930dc716582d88c387852fdf3fd9cd8e86b2748b281d76da1fb69b50e0f06eaee02185da1e56828cab"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x1, 0x7, "2a632bfe8aa99d"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x6}})

kernel console output (not intermixed with test programs):

0.151654][   T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.163409][   T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  190.177872][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.189348][   T31] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  190.195605][   T31] cdc_wdm 7-1:1.0: Unknown control protocol
[  190.389318][   T36] audit: type=1400 audit(1787781408.132:480): avc:  denied  { read write } for  pid=3703 comm="syz.6.1003" name="cdc-wdm0" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  190.389784][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  190.413945][   T36] audit: type=1400 audit(1787781408.132:481): avc:  denied  { open } for  pid=3703 comm="syz.6.1003" path="/dev/cdc-wdm0" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  190.420549][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  190.421470][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  190.457569][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  190.464330][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  190.471061][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  190.477686][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  190.484326][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  190.490592][   T31] usb 7-1: USB disconnect, device number 61
[  190.496692][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  190.496713][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  190.496723][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  190.693141][ T3713] X.509: signatureAlgorithm (103) differs from tbsCertificate.signature (7)
[  190.705598][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1006'.
[  190.778388][ T3715] input: syz0 as /devices/virtual/input/input34
[  191.036183][ T3719] fuse: Bad value for 'fd'
[  191.144694][ T3730] SELinux:  Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped).
[  191.155493][   T36] audit: type=1400 audit(1787781408.903:482): avc:  denied  { relabelto } for  pid=3729 comm="syz.6.1013" name="file0" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0"
[  191.196278][   T36] audit: type=1400 audit(1787781408.903:483): avc:  denied  { associate } for  pid=3729 comm="syz.6.1013" name="file0" dev="tmpfs" ino=617 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_cron_spool_t:s0"
[  191.930907][   T36] audit: type=1400 audit(1787781409.683:484): avc:  denied  { name_bind } for  pid=3751 comm="syz.5.1020" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  191.969403][   T36] audit: type=1400 audit(1787781409.723:485): avc:  denied  { sys_module } for  pid=3758 comm="syz.5.1022" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  191.969698][ T3759] Invalid ELF header magic: != ELF
[  191.990963][   T36] audit: type=1400 audit(1787781409.723:486): avc:  denied  { module_load } for  pid=3758 comm="syz.5.1022" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  192.024258][   T31] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  192.080828][ T3764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3764 comm=syz.6.1024
[  192.188559][   T31] usb 8-1: Using ep0 maxpacket: 16
[  192.195618][   T31] usb 8-1: unable to get BOS descriptor or descriptor too short
[  192.204275][   T31] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64
[  192.214187][   T31] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  192.226065][   T31] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  192.236481][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.245054][   T31] usb 8-1: Product: ﷤䕻멚ꋹ㨾�渨奭钯箥∹秭ᾲ쎸�畡
[  192.254261][   T31] usb 8-1: Manufacturer: 覚컣沦ﶖ�ꢚ�ṩ蛠둟纄泺웷ꌵ親槴뚲胤뵞짰�賀蘲ᮥ鰡抢ꃅꋦ桭�᥄⣕霗﫭
[  192.269785][   T31] usb 8-1: SerialNumber: 镚눖핦鶤䴳餤紵䙜㲬瘅䴌镅뀕���犈炃ූ璛ﾸᎡ峞褵؟�듢�〃屲澔ꂑ㫽彇뼮ᬣ㊰�ꡇﺧ蘦敶찃쪈릯㘶瓭ꇗ碮꧔咜䔌⧣삭�웫ᘭ⣀쾺儃�찜��髜�귿�냀숡�麵ꈳ擋㈕῀�飞㶂祗埡쓧똈힫⚋䇞긌ꎿ苜�玙몄ꃑ秉㬔ᬖ�筙�נּ볢ﬨ毳⽰뫉辵㬡�扚鞫
[  192.307608][ T3745] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  192.315595][ T3745] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  192.368500][    T9] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  192.519819][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.531897][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.543925][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  192.557650][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  192.567332][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.576175][    T9] usb 7-1: config 0 descriptor??
[  192.986574][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  192.995792][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.003288][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.010826][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.018553][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.026000][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.043845][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.054549][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.055270][   T31] usb 8-1: MIDIStreaming interface descriptor not found
[  193.072615][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.076412][   T31] usb 8-1: USB disconnect, device number 23
[  193.088087][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.099169][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  193.115877][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.125141][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.133496][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.144314][ T3772] IPv6: Can't replace route, no match found
[  193.150399][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.158402][    T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  193.166623][    T9] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[  193.180631][    T9] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  193.243698][ T3767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.252489][ T3767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.301963][ T3767] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  193.310848][ T3767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  193.330245][ T3767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  193.421894][   T31] usb 7-1: USB disconnect, device number 62
[  193.588162][ T3800] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  193.595993][ T3800] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  193.603955][ T3800] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  193.697805][  T375] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  193.847714][  T375] usb 3-1: Using ep0 maxpacket: 32
[  193.856444][  T375] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[  193.866023][  T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.874277][  T375] usb 3-1: Product: syz
[  193.878550][  T375] usb 3-1: Manufacturer: syz
[  193.883775][  T375] usb 3-1: SerialNumber: syz
[  194.094099][  T375] usb 3-1: MIDIStreaming interface descriptor not found
[  194.110390][  T375] usb 3-1: USB disconnect, device number 110
[  194.122929][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  194.155520][ T3810] ³þ: renamed from bond_slave_0
[  194.214537][ T3814] fuse: Bad value for 'group_id'
[  194.219950][ T3814] fuse: Bad value for 'group_id'
[  194.419019][ T3823] kvm: MWAIT instruction emulated as NOP!
[  194.585329][ T3836] fuse: Unknown parameter 'ÿ'
[  194.837271][  T375] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  194.853413][   T36] audit: type=1400 audit(1787781412.604:487): avc:  denied  { create } for  pid=3846 comm="syz.5.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  195.008476][  T375] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.018983][  T375] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.030881][  T375] usb 7-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  195.040481][  T375] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.048810][  T375] usb 7-1: Product: syz
[  195.053187][  T375] usb 7-1: Manufacturer: syz
[  195.057929][  T375] usb 7-1: SerialNumber: syz
[  195.268726][  T375] usb 7-1: 0:1 : does not exist
[  195.274217][  T375] usb 7-1: cannot request logical cluster ID: 0 (err: -71)
[  195.282004][  T375] usb 7-1: unit 80 not found!
[  195.322640][  T375] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71
[  195.332998][  T375] usb 7-1: USB disconnect, device number 63
[  195.344319][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  195.360774][    T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  195.527131][    T9] usb 8-1: Using ep0 maxpacket: 32
[  195.537266][    T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  195.545556][    T9] usb 8-1: config 0 has no interface number 0
[  195.554052][    T9] usb 8-1: config 0 interface 184 has no altsetting 0
[  195.564060][ T3867] 9pnet_fd: Insufficient options for proto=fd
[  195.571534][    T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  195.585073][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.588328][ T3869] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1060'.
[  195.593593][    T9] usb 8-1: Product: syz
[  195.607437][    T9] usb 8-1: Manufacturer: syz
[  195.612068][    T9] usb 8-1: SerialNumber: syz
[  195.618059][    T9] usb 8-1: config 0 descriptor??
[  195.629777][    T9] smsc75xx v1.0.0
[  195.665701][   T36] audit: type=1400 audit(1787781413.415:488): avc:  denied  { create } for  pid=3874 comm="syz.5.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  196.016640][  T375] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  196.030606][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  196.041841][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  196.052003][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  196.062898][    T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61
[  196.166585][  T375] usb 7-1: Using ep0 maxpacket: 8
[  196.175228][  T375] usb 7-1: too many configurations: 15, using maximum allowed: 8
[  196.192119][  T375] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  196.203498][  T375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.213619][  T375] usb 7-1: config 0 descriptor??
[  196.221006][  T375] hub 7-1:0.0: Invalid hub with more than one config or interface
[  196.229126][  T375] hub 7-1:0.0: probe with driver hub failed with error -22
[  196.421968][   T31] usb 7-1: USB disconnect, device number 64
[  196.568634][ T3885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1067'.
[  197.316033][   T31] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[  197.467119][   T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  197.478776][   T31] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  197.488113][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.496368][   T31] usb 7-1: Product: syz
[  197.500669][   T31] usb 7-1: Manufacturer: syz
[  197.505321][   T31] usb 7-1: SerialNumber: syz
[  197.512045][   T31] ums-onetouch 7-1:1.0: USB Mass Storage device detected
[  197.536133][ T3920] rust_binder: Error in use_page_slow: ESRCH
[  197.536161][ T3920] rust_binder: use_range failure ESRCH
[  197.542209][ T3920] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  197.548238][ T3920] rust_binder: Failure in copy_transaction_data: ESRCH
[  197.556333][ T3920] rust_binder: 3914:3920 transaction call to 3914:0 failed ESRCH, code 0 size 0-0
[  197.713433][   T31] usb 7-1: USB disconnect, device number 65
[  198.114343][    T9] usb 8-1: USB disconnect, device number 24
[  198.132945][ T3933] overlay: Unknown parameter '/'
[  198.285189][  T375] rust_binder: 3914: undelivered TRANSACTION_ERROR: 29201
[  198.300086][ T3935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  198.326727][   T36] audit: type=1400 audit(1787781416.086:489): avc:  denied  { map } for  pid=3934 comm="syz.6.1081" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  198.455524][    T9] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  198.605381][    T9] usb 8-1: Using ep0 maxpacket: 32
[  198.612336][    T9] usb 8-1: config index 0 descriptor too short (expected 9, got 0)
[  198.620349][    T9] usb 8-1: can't read configurations, error -22
[  198.695337][   T31] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[  198.765270][    T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  198.825292][   T31] usb 7-1: device descriptor read/64, error -71
[  198.925283][    T9] usb 8-1: Using ep0 maxpacket: 32
[  198.931952][    T9] usb 8-1: config index 0 descriptor too short (expected 9, got 0)
[  198.940053][    T9] usb 8-1: can't read configurations, error -22
[  198.946555][    T9] usb usb8-port1: attempt power cycle
[  199.085087][   T31] usb 7-1: device descriptor read/64, error -71
[  199.285082][    T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  199.306011][    T9] usb 8-1: Using ep0 maxpacket: 32
[  199.312878][    T9] usb 8-1: config index 0 descriptor too short (expected 9, got 0)
[  199.321266][  T336] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  199.328972][    T9] usb 8-1: can't read configurations, error -22
[  199.345015][   T31] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[  199.465079][    T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  199.474935][   T31] usb 7-1: device descriptor read/64, error -71
[  199.485437][    T9] usb 8-1: Using ep0 maxpacket: 32
[  199.491302][  T336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.501841][  T336] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  199.515249][    T9] usb 8-1: config index 0 descriptor too short (expected 9, got 0)
[  199.523313][    T9] usb 8-1: can't read configurations, error -22
[  199.529884][    T9] usb usb8-port1: unable to enumerate USB device
[  199.537460][  T336] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  199.547069][  T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.555157][  T336] usb 3-1: Product: syz
[  199.559472][  T336] usb 3-1: Manufacturer: syz
[  199.564165][  T336] usb 3-1: SerialNumber: syz
[  199.645057][ T3959] overlayfs: conflicting options: verity=on,redirect_dir=follow
[  199.724784][   T31] usb 7-1: device descriptor read/64, error -71
[  199.776709][  T336] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  199.789680][  T336] usb 3-1: USB disconnect, device number 111
[  199.834940][   T31] usb usb7-port1: attempt power cycle
[  200.174580][   T31] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[  200.195736][   T31] usb 7-1: device descriptor read/8, error -71
[  200.325739][   T31] usb 7-1: device descriptor read/8, error -71
[  200.564349][   T31] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[  200.585498][   T31] usb 7-1: device descriptor read/8, error -71
[  200.715450][   T31] usb 7-1: device descriptor read/8, error -71
[  200.824397][   T31] usb usb7-port1: unable to enumerate USB device
[  201.127681][ T3991] netlink: 'syz.2.1101': attribute type 58 has an invalid length.
[  201.149597][ T3993] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  201.573883][  T336] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  201.723746][  T336] usb 8-1: Using ep0 maxpacket: 8
[  201.733754][  T336] usb 8-1: config 1 has an invalid interface number: 10 but max is 2
[  201.741939][  T336] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  201.762418][  T336] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  201.771988][  T336] usb 8-1: config 1 has no interface number 0
[  201.785365][  T336] usb 8-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[  201.794913][  T336] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.803031][  T336] usb 8-1: Product: syz
[  201.807578][  T336] usb 8-1: Manufacturer: syz
[  201.812203][  T336] usb 8-1: SerialNumber: syz
[  201.903716][    T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  202.020644][ T4006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.029924][ T4006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.041523][  T336] usb 8-1: USB disconnect, device number 29
[  202.064909][    T9] usb 3-1: config 1 descriptor has 1 excess byte, ignoring
[  202.072249][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  202.086740][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  202.096406][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  202.104822][    T9] usb 3-1: SerialNumber: syz
[  202.113158][    T9] usb 3-1: bad CDC descriptors
[  202.122029][   T36] audit: type=1400 audit(1787781419.878:490): avc:  denied  { remount } for  pid=4038 comm="syz.6.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  202.122689][ T4039] cgroup: Need name or subsystem set
[  202.287233][   T36] audit: type=1326 audit(1787781420.048:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.5.1127" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa03df9e0d9 code=0x0
[  202.315622][ T4027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.324378][ T4027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.358321][  T413] usb 3-1: USB disconnect, device number 112
[  202.523488][  T310] usb 7-1: new full-speed USB device number 70 using dummy_hcd
[  202.684578][  T310] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 4
[  202.696063][  T310] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023
[  202.709497][  T310] usb 7-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40
[  202.718845][  T310] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.727024][  T310] usb 7-1: Product: syz
[  202.731556][  T310] usb 7-1: Manufacturer: syz
[  202.736190][  T310] usb 7-1: SerialNumber: syz
[  202.833231][  T413] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  202.950175][  T310] usb 7-1: Can't get UAC3 power state for id 10
[  202.958214][  T310] usb 7-1: BAAD HEADSET ADAPTER c_chmask mismatch
[  202.966169][  T310] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  202.979753][  T310] usb 7-1: Audio class v2/v3 interfaces need an interface association
[  202.989259][  T413] usb 8-1: Using ep0 maxpacket: 16
[  202.997243][  T310] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22
[  203.008809][  T413] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[  203.018049][  T413] usb 8-1: config 0 has no interface number 0
[  203.027781][  T310] usb 7-1: USB disconnect, device number 70
[  203.034758][  T413] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  203.043374][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  203.050996][  T413] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  203.083238][  T413] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  203.095546][  T413] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.105069][  T413] usb 8-1: Product: syz
[  203.109871][  T413] usb 8-1: Manufacturer: syz
[  203.115242][  T413] usb 8-1: SerialNumber: syz
[  203.121328][  T413] usb 8-1: config 0 descriptor??
[  203.127169][ T4071] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  203.135766][ T4071] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  203.193068][  T336] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  203.322973][  T336] usb 3-1: device descriptor read/64, error -71
[  203.344502][ T4071] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  203.351813][ T4071] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  203.559751][  T413] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  203.562870][  T336] usb 3-1: device descriptor read/64, error -71
[  203.712774][  T310] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  203.812735][  T336] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  203.862677][  T310] usb 7-1: Using ep0 maxpacket: 8
[  203.869200][  T310] usb 7-1: unable to get BOS descriptor or descriptor too short
[  203.878960][  T310] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  203.888304][  T310] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.896706][  T310] usb 7-1: Product: �
[  203.901306][  T310] usb 7-1: Manufacturer: �
[  203.905944][  T310] usb 7-1: SerialNumber: 泈馜췰탪힓䙎캖喅ᅗ�⧯튨꣬൲䢣룼軙�♶뱿숸㶈戚锠�为奇�潮뺧璊ዄ霆ퟤ亢⇳䧨噲៶윺햊茥⛑stꉕ��᢯㢟᜿⿛鶽潰ᮦ쵶窗襄堯≉๣�㗞맫飒�䮈캇唖铓ⱊ죩r鎽夒氡苦鉽蕠료먆祡
[  203.942678][  T336] usb 3-1: device descriptor read/64, error -71
[  204.139763][  T310] usb 7-1: Unsupported UAC3 BADD profile
[  204.147344][  T310] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  204.158727][  T310] usb 7-1: USB disconnect, device number 71
[  204.168863][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  204.184708][  T336] usb 3-1: device descriptor read/64, error -71
[  204.302578][  T336] usb usb3-port1: attempt power cycle
[  204.467122][  T413] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  204.485399][  T413] asix 8-1:0.34: probe with driver asix failed with error -71
[  204.500907][  T413] usb 8-1: USB disconnect, device number 30
[  204.520229][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.529770][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.645644][  T336] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  204.663258][   T36] audit: type=1400 audit(1787781422.429:492): avc:  denied  { append } for  pid=4090 comm="syz.6.1139" name="ublkc0" dev="devtmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  204.693926][  T336] usb 3-1: device descriptor read/8, error -71
[  204.823519][  T336] usb 3-1: device descriptor read/8, error -71
[  204.862223][  T413] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  204.932181][   T31] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[  204.992139][  T413] usb 8-1: device descriptor read/64, error -71
[  205.062119][  T336] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  205.083272][  T336] usb 3-1: device descriptor read/8, error -71
[  205.092103][   T31] usb 7-1: Using ep0 maxpacket: 8
[  205.098206][   T31] usb 7-1: unable to get BOS descriptor or descriptor too short
[  205.107346][   T31] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  205.116545][   T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.126888][   T31] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  205.136267][   T31] usb 7-1: config 1 has no interface number 1
[  205.142564][   T31] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  205.155410][   T31] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  205.169030][   T31] usb 7-1: config 1 interface 2 has no altsetting 0
[  205.177554][   T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  205.187549][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.196685][   T31] usb 7-1: Product: syz
[  205.200990][   T31] usb 7-1: Manufacturer: syz
[  205.205913][   T31] usb 7-1: SerialNumber: syz
[  205.223132][  T336] usb 3-1: device descriptor read/8, error -71
[  205.262051][  T413] usb 8-1: device descriptor read/64, error -71
[  205.341946][  T336] usb usb3-port1: unable to enumerate USB device
[  205.416204][ T4093] syzkaller1: entered promiscuous mode
[  205.421919][ T4093] syzkaller1: entered allmulticast mode
[  205.431458][ T4093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.442027][ T4093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.488516][   T31] usb 7-1: USB disconnect, device number 72
[  205.511940][  T413] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  205.651899][  T413] usb 8-1: device descriptor read/64, error -71
[  205.891700][  T413] usb 8-1: device descriptor read/64, error -71
[  206.001696][  T413] usb usb8-port1: attempt power cycle
[  206.311476][   T31] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[  206.351542][  T413] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  206.372553][  T413] usb 8-1: device descriptor read/8, error -71
[  206.461430][   T31] usb 7-1: Using ep0 maxpacket: 16
[  206.468055][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.479841][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.489759][   T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  206.502665][   T31] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  206.511816][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.520655][  T413] usb 8-1: device descriptor read/8, error -71
[  206.527126][   T31] usb 7-1: config 0 descriptor??
[  206.771246][  T413] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  206.792428][  T413] usb 8-1: device descriptor read/8, error -71
[  206.814099][   T36] audit: type=1400 audit(1787781424.580:493): avc:  denied  { read append } for  pid=4118 comm="syz.2.1149" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  206.838052][   T36] audit: type=1400 audit(1787781424.580:494): avc:  denied  { open } for  pid=4118 comm="syz.2.1149" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  206.868854][   T36] audit: type=1400 audit(1787781424.630:495): avc:  denied  { map } for  pid=4118 comm="syz.2.1149" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  206.892165][   T36] audit: type=1400 audit(1787781424.630:496): avc:  denied  { execute } for  pid=4118 comm="syz.2.1149" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  206.922110][  T413] usb 8-1: device descriptor read/8, error -71
[  206.934455][   T31] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  206.942033][   T31] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max
[  206.955339][   T31] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001E/input/input36
[  206.970064][   T31] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  207.031194][  T413] usb usb8-port1: unable to enumerate USB device
[  207.264659][  T336] usb 7-1: USB disconnect, device number 73
[  207.353679][ T4129] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1151'.
[  207.711558][ T4150] fuse: Bad value for 'fd'
[  207.790293][ T4156] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  207.790323][ T4156] rust_binder: Read failure Err(EFAULT) in pid:800
[  207.800449][ T4156] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  207.807509][ T4156] rust_binder: Read failure Err(EFAULT) in pid:800
[  207.816765][   T36] audit: type=1400 audit(1787781425.581:497): avc:  denied  { transfer } for  pid=4155 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  207.830727][ T4156] rust_binder: 4155:4156 error while translating object: EINVAL
[  207.850567][ T4156] rust_binder: Failure in copy_transaction_data: EINVAL
[  207.850594][ T4156] rust_binder: 4155:4156 transaction call to 4155:0 failed EINVAL, code 0 size 96-24
[  207.870379][ T4156] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1159'.
[  207.879895][   T31] rust_binder: 4155: undelivered TRANSACTION_ERROR: 29201
[  208.050715][  T375] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[  208.099638][   T36] audit: type=1400 audit(1787781425.861:498): avc:  denied  { create } for  pid=4164 comm="syz.5.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  208.140753][   T31] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  208.200735][  T375] usb 7-1: Using ep0 maxpacket: 16
[  208.207703][  T375] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7
[  208.220446][  T375] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40
[  208.230053][  T375] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.238276][  T375] usb 7-1: Product: syz
[  208.242941][  T375] usb 7-1: Manufacturer: syz
[  208.247541][  T375] usb 7-1: SerialNumber: syz
[  208.256638][  T375] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2
[  208.293733][   T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  208.303606][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.311862][   T31] usb 3-1: Product: syz
[  208.316148][   T31] usb 3-1: Manufacturer: syz
[  208.320896][   T31] usb 3-1: SerialNumber: syz
[  208.461661][  T310] usb 7-1: USB disconnect, device number 74
[  208.850750][  T375] usb 8-1: new low-speed USB device number 35 using dummy_hcd
[  208.980701][  T375] usb 8-1: device descriptor read/64, error -71
[  208.992156][ T4176] tun0: tun_chr_ioctl cmd 1074025675
[  208.997671][ T4176] tun0: persist enabled
[  209.002129][ T4175] tun0: tun_chr_ioctl cmd 1074025675
[  209.007502][ T4175] tun0: persist enabled
[  209.148438][   T31] rtl8150 3-1:1.0: couldn't reset the device
[  209.155079][   T31] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  209.167087][   T31] usb 3-1: USB disconnect, device number 117
[  209.220713][  T375] usb 8-1: device descriptor read/64, error -71
[  209.280761][  T310] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[  209.430734][  T310] usb 7-1: Using ep0 maxpacket: 16
[  209.437394][  T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.449106][  T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  209.459947][  T310] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  209.473270][  T310] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  209.480697][  T375] usb 8-1: new low-speed USB device number 36 using dummy_hcd
[  209.482611][  T310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.499438][  T310] usb 7-1: config 0 descriptor??
[  209.610703][  T375] usb 8-1: device descriptor read/64, error -71
[  209.850717][  T375] usb 8-1: device descriptor read/64, error -71
[  209.909511][  T310] nintendo 0003:057E:2019.001F: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0
[  209.960860][  T375] usb usb8-port1: attempt power cycle
[  210.024005][ T4197] netlink: 'syz.5.1174': attribute type 1 has an invalid length.
[  210.032207][ T4197] netlink: 'syz.5.1174': attribute type 2 has an invalid length.
[  210.086154][ T2568] tipc: Subscription rejected, illegal request
[  210.102584][ T4201] netlink: 'syz.5.1176': attribute type 4 has an invalid length.
[  210.112786][ T4201] netlink: 'syz.5.1176': attribute type 4 has an invalid length.
[  210.310738][  T375] usb 8-1: new low-speed USB device number 37 using dummy_hcd
[  210.332112][  T375] usb 8-1: device descriptor read/8, error -71
[  210.461779][  T375] usb 8-1: device descriptor read/8, error -71
[  210.700692][  T375] usb 8-1: new low-speed USB device number 38 using dummy_hcd
[  210.721774][  T375] usb 8-1: device descriptor read/8, error -71
[  210.740735][   T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  210.851858][  T375] usb 8-1: device descriptor read/8, error -71
[  210.892092][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.903284][   T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  210.912656][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.922206][   T10] usb 3-1: config 0 descriptor??
[  210.960896][  T375] usb usb8-port1: unable to enumerate USB device
[  211.026261][  T310] nintendo 0003:057E:2019.001F: Failed to set baudrate (ret=-71), continuing anyway
[  211.038118][  T310] nintendo 0003:057E:2019.001F: Failed handshake; ret=-71
[  211.047065][  T310] nintendo 0003:057E:2019.001F: Failed to initialize controller; ret=-71
[  211.065305][  T310] nintendo 0003:057E:2019.001F: probe - fail = -71
[  211.072492][  T310] nintendo 0003:057E:2019.001F: probe with driver nintendo failed with error -71
[  211.090553][  T310] usb 7-1: USB disconnect, device number 75
[  211.131312][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  211.143432][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  211.166200][   T10] usb 3-1: USB disconnect, device number 118
[  211.640767][   T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  211.653412][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1185'.
[  211.794863][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.810753][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  211.830412][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.842447][   T10] usb 3-1: config 0 descriptor??
[  212.210734][  T310] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  212.267799][ T4258] netlink: 'syz.5.1194': attribute type 58 has an invalid length.
[  212.310788][   T31] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[  212.360742][  T310] usb 8-1: Using ep0 maxpacket: 16
[  212.368025][  T310] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  212.376542][  T310] usb 8-1: config 0 has no interface number 0
[  212.382738][  T310] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.393985][  T310] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.403994][  T310] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  212.413153][  T310] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.422053][  T310] usb 8-1: config 0 descriptor??
[  212.471777][   T31] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.483163][   T31] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  212.496053][   T31] usb 7-1: config 0 interface 0 has no altsetting 0
[  212.502910][   T31] usb 7-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00
[  212.512087][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.520975][   T31] usb 7-1: config 0 descriptor??
[  212.661158][   T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[  212.669007][   T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37
[  212.928993][   T31] usbhid 7-1:0.0: can't add hid device: -71
[  212.935215][   T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  212.944376][   T31] usb 7-1: USB disconnect, device number 76
[  212.964926][   T10] usb 3-1: USB disconnect, device number 119
[  212.964972][    C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  213.031438][  T310] input: HID 28bd:0071 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0071.0020/input/input38
[  213.044130][  T310] input: HID 28bd:0071 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0071.0020/input/input39
[  213.060762][  T310] uclogic 0003:28BD:0071.0020: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.7-1/input1
[  213.233273][ T4245] ip6gre0: mtu less than device minimum
[  213.242139][ T4245] syz.7.1190: attempt to access beyond end of device
[  213.242139][ T4245] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  213.255416][ T4245] exFAT-fs (loop7): unable to read boot sector
[  213.261701][ T4245] exFAT-fs (loop7): failed to read boot sector
[  213.267909][ T4245] exFAT-fs (loop7): failed to recognize exfat type
[  213.276170][   T31] usb 8-1: USB disconnect, device number 39
[  213.460818][   T36] audit: type=1400 audit(1787781431.231:499): avc:  denied  { unlink } for  pid=2127 comm="syz-executor" name="ublkc0" dev="devtmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  213.640474][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.647783][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.655670][ T4292] bridge_slave_0: entered allmulticast mode
[  213.664178][ T4292] bridge_slave_0: entered promiscuous mode
[  213.671943][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.679242][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.687458][ T4292] bridge_slave_1: entered allmulticast mode
[  213.694093][ T4292] bridge_slave_1: entered promiscuous mode
[  213.700535][  T312] bridge_slave_1: left allmulticast mode
[  213.707087][  T312] bridge_slave_1: left promiscuous mode
[  213.712799][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.720994][  T312] bridge_slave_0: left allmulticast mode
[  213.726827][  T312] bridge_slave_0: left promiscuous mode
[  213.732644][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.740703][  T310] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  213.845662][  T312] veth1_macvtap: left promiscuous mode
[  213.851526][  T312] veth0_vlan: left promiscuous mode
[  213.902590][  T310] usb 3-1: unable to get BOS descriptor or descriptor too short
[  213.911629][  T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.922145][  T310] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  213.931621][  T310] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  213.945709][  T310] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  213.959258][  T310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  213.970463][  T310] usb 3-1: config 1 interface 1 has no altsetting 0
[  213.971304][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.979614][  T310] usb 3-1: string descriptor 0 read error: -22
[  213.984330][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.984464][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.984482][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.013668][ T2568] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.013834][  T310] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  214.030206][  T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.030319][ T2568] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.052760][ T2568] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.059842][ T2568] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.069753][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.076855][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.105754][ T4292] veth0_vlan: entered promiscuous mode
[  214.117931][ T4292] veth1_macvtap: entered promiscuous mode
[  214.140775][   T31] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  214.253014][ T4290] bridge0: port 3(veth0_to_bridge) entered blocking state
[  214.264598][ T4290] bridge0: port 3(veth0_to_bridge) entered disabled state
[  214.272519][ T4290] veth0_to_bridge: entered allmulticast mode
[  214.279391][ T4290] veth0_to_bridge: entered promiscuous mode
[  214.285705][ T4290] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.298235][   T31] usb 8-1: Using ep0 maxpacket: 16
[  214.298397][ T4290] bridge0: port 3(veth0_to_bridge) entered blocking state
[  214.304550][   T31] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.310575][ T4290] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  214.322060][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.337321][   T31] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  214.338256][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.347282][   T31] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  214.365055][   T31] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  214.379915][  T310] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  214.389981][   T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  214.400739][   T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  214.409672][   T31] usb 8-1: SerialNumber: syz
[  214.417863][ T4299] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  214.427671][ T4299] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  214.439153][   T31] hub 8-1:1.0: bad descriptor, ignoring hub
[  214.440248][   T36] audit: type=1400 audit(1787781432.201:500): avc:  denied  { setopt } for  pid=4312 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  214.445410][   T31] hub 8-1:1.0: probe with driver hub failed with error -5
[  214.473627][ T4313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=4313 comm=syz.5.1212
[  214.491804][ T4318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4318 comm=syz.8.1214
[  214.528609][ T4323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4323 comm=syz.5.1215
[  214.544729][ T4323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4323 comm=syz.5.1215
[  214.639243][ T4299] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  214.646667][ T4299] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  214.711144][  T310] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  214.725135][  T310] usb 3-1: USB disconnect, device number 120
[  214.760755][  T413] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  214.890793][  T413] usb 9-1: device descriptor read/64, error -71
[  215.056664][   T31] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42
[  215.072325][ T4329] netlink: 57 bytes leftover after parsing attributes in process `syz.5.1217'.
[  215.130772][  T413] usb 9-1: device descriptor read/64, error -71
[  215.291441][    C0] cdc_ether 8-1:1.0 usb0: CDC: unexpected notification 68!
[  215.299647][    C0] cdc_ether 8-1:1.0 usb0: CDC: unexpected notification 03!
[  215.370734][  T413] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  215.501144][  T413] usb 9-1: device descriptor read/64, error -71
[  215.517377][ T4299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.526068][ T4299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.750729][  T413] usb 9-1: device descriptor read/64, error -71
[  215.860908][  T413] usb usb9-port1: attempt power cycle
[  216.201023][  T413] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  216.222272][  T413] usb 9-1: device descriptor read/8, error -71
[  216.320749][   T31] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  216.352031][  T413] usb 9-1: device descriptor read/8, error -71
[  216.472003][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.482777][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  216.492018][   T31] usb 3-1: config 1 has no interface number 0
[  216.498360][   T31] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.509615][   T31] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  216.520718][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  216.530429][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.538966][   T31] usb 3-1: Product: syz
[  216.543459][   T31] usb 3-1: Manufacturer: syz
[  216.548088][   T31] usb 3-1: SerialNumber: syz
[  216.590707][  T413] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  216.612057][  T413] usb 9-1: device descriptor read/8, error -71
[  216.741765][  T413] usb 9-1: device descriptor read/8, error -71
[  216.850850][  T413] usb usb9-port1: unable to enumerate USB device
[  216.904110][   T10] usb 8-1: USB disconnect, device number 40
[  216.910955][   T10] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device
[  216.988141][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1232'.
[  216.999634][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1232'.
[  217.444695][ T4413] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1236'.
[  217.640144][   T36] audit: type=1400 audit(1787781435.401:501): avc:  denied  { mount } for  pid=4420 comm="syz.8.1239" name="/" dev="ramfs" ino=37305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  217.960763][  T336] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  218.003987][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.014055][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.112141][  T336] usb 9-1: config 0 has an invalid interface number: 5 but max is 0
[  218.121004][  T336] usb 9-1: config 0 has no interface number 0
[  218.127772][  T336] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  218.138716][  T336] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.149199][  T336] usb 9-1: config 0 descriptor??
[  218.420731][    T9] usb 8-1: new full-speed USB device number 41 using dummy_hcd
[  218.581888][    T9] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  218.593571][    T9] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  218.607618][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  218.615773][    T9] usb 8-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00
[  218.625222][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.634559][    T9] usb 8-1: config 0 descriptor??
[  218.844063][    T9] lenovo 0003:04B3:3103.0021: unknown main item tag 0x6
[  218.851351][    T9] lenovo 0003:04B3:3103.0021: unknown main item tag 0x3
[  218.858660][    T9] lenovo 0003:04B3:3103.0021: item fetching failed at offset 22/24
[  218.867831][    T9] lenovo 0003:04B3:3103.0021: hid_parse failed
[  218.876538][    T9] lenovo 0003:04B3:3103.0021: probe with driver lenovo failed with error -22
[  219.044516][   T45] usb 8-1: USB disconnect, device number 41
[  219.099060][   T31] cdc_ncm 3-1:1.1: bind() failure
[  219.108965][   T31] usb 3-1: USB disconnect, device number 121
[  219.313325][ T4464] 9p: Unknown Cache mode or invalid value dev/kvm
[  219.514176][   T36] audit: type=1400 audit(1787781437.281:502): avc:  denied  { read } for  pid=4473 comm="syz.5.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  219.535303][ T4475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1257'.
[  219.570565][ T4479] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1259'.
[  219.586777][   T36] audit: type=1400 audit(1787781437.351:503): avc:  denied  { read } for  pid=4476 comm="syz.7.1258" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  219.603644][ T4479] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1259'.
[  219.618992][ T4479] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1259'.
[  219.628099][ T4479] netlink: 'syz.5.1259': attribute type 6 has an invalid length.
[  219.636047][ T4479] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1259'.
[  219.680779][   T31] usb 3-1: new low-speed USB device number 122 using dummy_hcd
[  219.810751][   T31] usb 3-1: device descriptor read/64, error -71
[  220.010731][  T310] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  220.050737][   T31] usb 3-1: device descriptor read/64, error -71
[  220.160904][  T310] usb 8-1: Using ep0 maxpacket: 16
[  220.166944][  T310] usb 8-1: no configurations
[  220.172375][  T310] usb 8-1: can't read configurations, error -22
[  220.290715][   T31] usb 3-1: new low-speed USB device number 123 using dummy_hcd
[  220.300738][  T310] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  220.430734][   T31] usb 3-1: device descriptor read/64, error -71
[  220.450746][  T310] usb 8-1: Using ep0 maxpacket: 16
[  220.456581][  T310] usb 8-1: no configurations
[  220.461369][  T310] usb 8-1: can't read configurations, error -22
[  220.468054][  T310] usb usb8-port1: attempt power cycle
[  220.592832][    T9] usb 9-1: USB disconnect, device number 6
[  220.610686][ T4491] syzkaller1: entered promiscuous mode
[  220.616592][ T4491] syzkaller1: entered allmulticast mode
[  220.670839][   T31] usb 3-1: device descriptor read/64, error -71
[  220.780886][   T31] usb usb3-port1: attempt power cycle
[  220.810715][  T310] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  220.831148][  T310] usb 8-1: Using ep0 maxpacket: 16
[  220.836791][  T310] usb 8-1: no configurations
[  220.841587][  T310] usb 8-1: can't read configurations, error -22
[  220.970733][  T310] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[  220.990775][    T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  220.991183][  T310] usb 8-1: Using ep0 maxpacket: 16
[  221.004751][  T310] usb 8-1: no configurations
[  221.009977][  T310] usb 8-1: can't read configurations, error -22
[  221.016762][  T310] usb usb8-port1: unable to enumerate USB device
[  221.120726][   T31] usb 3-1: new low-speed USB device number 124 using dummy_hcd
[  221.141939][   T31] usb 3-1: device descriptor read/8, error -71
[  221.150766][    T9] usb 9-1: Using ep0 maxpacket: 32
[  221.158297][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  221.169356][    T9] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  221.179149][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.187896][    T9] usb 9-1: Product: syz
[  221.192672][    T9] usb 9-1: Manufacturer: syz
[  221.198084][    T9] usb 9-1: SerialNumber: syz
[  221.271938][   T31] usb 3-1: device descriptor read/8, error -71
[  221.510737][   T31] usb 3-1: new low-speed USB device number 125 using dummy_hcd
[  221.531787][   T31] usb 3-1: device descriptor read/8, error -71
[  221.610802][    T9] usb 9-1: unit 0 not found!
[  221.616818][    T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  221.631747][    T9] usb 9-1: unit 0 not found!
[  221.641592][    T9] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22
[  221.661970][    T9] usb 9-1: unit 0 not found!
[  221.662461][   T31] usb 3-1: device descriptor read/8, error -71
[  221.670526][    T9] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -22
[  221.689167][    T9] usb 9-1: USB disconnect, device number 7
[  221.698868][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  221.763374][   T36] audit: type=1400 audit(1787781439.531:504): avc:  denied  { create } for  pid=4509 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  221.790897][   T31] usb usb3-port1: unable to enumerate USB device
[  222.360761][    T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  222.493041][   T36] audit: type=1400 audit(1787781440.261:505): avc:  denied  { connect } for  pid=4516 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  222.510707][    T9] usb 9-1: Using ep0 maxpacket: 8
[  222.520025][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.530702][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  222.542006][    T9] usb 9-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  222.551802][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.559831][    T9] usb 9-1: Product: syz
[  222.564174][    T9] usb 9-1: Manufacturer: syz
[  222.568966][    T9] usb 9-1: SerialNumber: syz
[  222.781110][ T4512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.798929][ T4512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.823729][    T9] usb 9-1: invalid UAC_HEADER (v1)
[  222.832695][    T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  222.843990][    T9] usb 9-1: USB disconnect, device number 8
[  222.855029][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  223.180724][   T31] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[  223.282561][ T4526] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1275'.
[  223.291908][ T4526] IPv6: NLM_F_CREATE should be specified when creating new route
[  223.322785][   T36] audit: type=1326 audit(1787781441.091:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.2.1277" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1bc99e0d9 code=0x0
[  223.352499][ T4540] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  223.382513][   T31] usb 8-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[  223.393375][   T31] usb 8-1: config 192 has 0 interfaces, different from the descriptor's value: 1
[  223.404782][   T31] usb 8-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3
[  223.414221][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.423060][   T31] usb 8-1: Product: syz
[  223.427579][   T31] usb 8-1: Manufacturer: syz
[  223.432273][   T31] usb 8-1: SerialNumber: syz
[  223.630788][    T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  223.649134][   T31] usb 8-1: USB disconnect, device number 46
[  223.760748][    T9] usb 9-1: device descriptor read/64, error -71
[  223.840754][  T375] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  223.990758][  T375] usb 3-1: Using ep0 maxpacket: 32
[  223.997251][  T375] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  224.006121][  T375] usb 3-1: config 2 has no interface number 0
[  224.012297][    T9] usb 9-1: device descriptor read/64, error -71
[  224.018906][  T375] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  224.029071][  T375] usb 3-1: config 2 interface 88 has no altsetting 0
[  224.037338][  T375] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  224.046833][  T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  224.055801][  T375] usb 3-1: Product: syz
[  224.060734][  T375] usb 3-1: Manufacturer: syz
[  224.065446][  T375] usb 3-1: SerialNumber: syz
[  224.071319][ T4564] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  224.250698][    T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  224.355862][ T4579] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  224.390707][    T9] usb 9-1: device descriptor read/64, error -71
[  224.598444][ T4597] input: syz0 as /devices/virtual/input/input40
[  224.605392][  T375] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  224.616448][  T375] asix 3-1:2.88: probe with driver asix failed with error -71
[  224.629116][  T375] usb 3-1: USB disconnect, device number 126
[  224.635528][    T9] usb 9-1: device descriptor read/64, error -71
[  224.750823][    T9] usb usb9-port1: attempt power cycle
[  225.100799][    T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  225.132018][    T9] usb 9-1: device descriptor read/8, error -71
[  225.271944][    T9] usb 9-1: device descriptor read/8, error -71
[  225.440766][   T31] usb 8-1: new full-speed USB device number 47 using dummy_hcd
[  225.490727][  T375] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  225.510747][    T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  225.531862][    T9] usb 9-1: device descriptor read/8, error -71
[  225.559447][   T36] audit: type=1400 audit(1787781443.321:507): avc:  denied  { associate } for  pid=4600 comm="syz.5.1294" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  225.582297][ T4623] netlink: 'syz.5.1302': attribute type 21 has an invalid length.
[  225.594530][ T4623] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1302'.
[  225.614012][   T31] usb 8-1: unable to get BOS descriptor or descriptor too short
[  225.622273][   T31] usb 8-1: not running at top speed; connect to a high speed hub
[  225.637527][   T31] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  225.653140][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.663239][    T9] usb 9-1: device descriptor read/8, error -71
[  225.666448][   T31] usb 8-1: Product: syz
[  225.671836][  T375] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  225.673954][   T31] usb 8-1: Manufacturer: syz
[  225.681934][  T375] usb 3-1: config 0 interface 0 altsetting 150 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  225.686596][   T31] usb 8-1: SerialNumber: syz
[  225.720682][  T375] usb 3-1: config 0 interface 0 has no altsetting 0
[  225.727708][  T375] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  225.737167][  T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.746319][  T375] usb 3-1: config 0 descriptor??
[  225.770819][    T9] usb usb9-port1: unable to enumerate USB device
[  225.912459][   T31] usb 8-1: 1:1 : bogus bTerminalLink 3
[  225.918453][   T31] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  225.934197][   T31] usb 8-1: USB disconnect, device number 47
[  225.952483][  T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  226.037024][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.046107][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.056188][  T375] usb 3-1: string descriptor 0 read error: -71
[  226.063546][  T375] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  226.072394][  T375] usb 3-1: USB disconnect, device number 127
[  226.216436][ T4633] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1305'.
[  226.592739][ T4648] netlink: 'syz.2.1312': attribute type 63 has an invalid length.
[  226.601295][ T4648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1312'.
[  226.793560][  T375] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  226.840244][ T4658] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1316'.
[  226.850054][ T4658] netlink: 'syz.5.1316': attribute type 58 has an invalid length.
[  226.991931][  T375] usb 9-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  227.005541][  T375] usb 9-1: config 1 interface 0 has no altsetting 0
[  227.011333][ T4667] netlink: 178 bytes leftover after parsing attributes in process `syz.2.1320'.
[  227.014009][  T375] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.031335][  T375] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.039558][  T375] usb 9-1: Product: syz
[  227.049613][  T375] usb 9-1: Manufacturer: syz
[  227.054418][  T375] usb 9-1: SerialNumber: syz
[  227.263244][  T375] usb 9-1: bad CDC descriptors
[  227.270112][  T375] usb 9-1: USB disconnect, device number 13
[  227.307054][ T4681] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1324'.
[  227.334041][   T36] audit: type=1400 audit(1787781445.101:508): avc:  denied  { accept } for  pid=4683 comm="syz.7.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  227.368607][ T4689] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1326'.
[  227.446253][ T4708] netlink: 'syz.7.1332': attribute type 4 has an invalid length.
[  227.455100][ T4708] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1332'.
[  227.700725][    T9] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[  227.850751][    T9] usb 8-1: Using ep0 maxpacket: 16
[  227.857304][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.867935][    T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  227.878234][    T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  227.887894][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.896116][    T9] usb 8-1: Product: syz
[  227.900292][    T9] usb 8-1: Manufacturer: syz
[  227.905108][    T9] usb 8-1: SerialNumber: syz
[  228.010700][   T31] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  228.114710][    T9] usb 8-1: 0:2 : does not exist
[  228.124198][    T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  228.137430][    T9] usb 8-1: USB disconnect, device number 48
[  228.149999][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  228.160683][   T31] usb 9-1: Using ep0 maxpacket: 16
[  228.172933][   T31] usb 9-1: config 166 has an invalid interface number: 177 but max is 1
[  228.182313][   T31] usb 9-1: config 166 has an invalid interface number: 34 but max is 1
[  228.191316][   T31] usb 9-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config
[  228.202291][   T31] usb 9-1: config 166 has no interface number 0
[  228.209114][   T31] usb 9-1: config 166 has no interface number 1
[  228.215751][   T31] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  228.227360][   T31] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  228.238489][   T31] usb 9-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  228.252412][   T31] usb 9-1: config 166 interface 177 has no altsetting 0
[  228.259448][   T31] usb 9-1: config 166 interface 34 has no altsetting 0
[  228.268388][   T31] usb 9-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  228.278325][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.286708][   T31] usb 9-1: Product: syz
[  228.291027][   T31] usb 9-1: Manufacturer: syz
[  228.295812][   T31] usb 9-1: SerialNumber: syz
[  228.650700][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  228.681049][ T4739] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1344'.
[  228.694358][   T36] audit: type=1400 audit(1787781446.461:509): avc:  denied  { write } for  pid=4738 comm="syz.7.1344" name="usb_gadget" dev="configfs" ino=2210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  228.722034][   T36] audit: type=1400 audit(1787781446.461:510): avc:  denied  { add_name } for  pid=4738 comm="syz.7.1344" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  228.754986][   T36] audit: type=1400 audit(1787781446.461:511): avc:  denied  { create } for  pid=4738 comm="syz.7.1344" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  228.775684][   T36] audit: type=1400 audit(1787781446.461:512): avc:  denied  { create } for  pid=4738 comm="syz.7.1344" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  228.800697][    T9] usb 3-1: device descriptor read/64, error -71
[  228.922401][   T31] usb 9-1: Found UVC 0.00 device syz (0bda:0138)
[  228.929130][   T31] usb 9-1: No valid video chain found.
[  229.040724][    T9] usb 3-1: device descriptor read/64, error -71
[  229.132300][   T36] audit: type=1400 audit(1787781446.901:513): avc:  denied  { write } for  pid=4718 comm="syz.8.1336" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  229.202331][   T31] usb 9-1: USB disconnect, device number 14
[  229.280725][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  229.410702][    T9] usb 3-1: device descriptor read/64, error -71
[  229.650803][    T9] usb 3-1: device descriptor read/64, error -71
[  229.760874][    T9] usb usb3-port1: attempt power cycle
[  229.766641][   T36] audit: type=1326 audit(1787781447.531:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4746 comm="syz.8.1347" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fe3d9e0d9 code=0x0
[  229.813219][ T4748] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[  230.130700][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  230.152047][    T9] usb 3-1: device descriptor read/8, error -71
[  230.281791][    T9] usb 3-1: device descriptor read/8, error -71
[  230.530727][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  230.551851][    T9] usb 3-1: device descriptor read/8, error -71
[  230.674158][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.686776][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.695124][    T9] usb 3-1: device descriptor read/8, error -71
[  230.740812][   T10] usb 8-1: new low-speed USB device number 49 using dummy_hcd
[  230.810798][    T9] usb usb3-port1: unable to enumerate USB device
[  230.889855][ T4777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.900927][ T4777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.910672][   T10] usb 8-1: Invalid ep0 maxpacket: 64
[  231.040699][   T10] usb 8-1: new low-speed USB device number 50 using dummy_hcd
[  231.190728][   T10] usb 8-1: Invalid ep0 maxpacket: 64
[  231.196712][   T10] usb usb8-port1: attempt power cycle
[  231.260721][  T375] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  231.422885][  T375] usb 9-1: unable to get BOS descriptor or descriptor too short
[  231.441334][  T375] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.453722][  T375] usb 9-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  231.468506][  T375] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  231.477538][  T375] usb 9-1: Product: syz
[  231.482115][  T375] usb 9-1: Manufacturer: syz
[  231.489766][  T375] usb 9-1: Found UVC 1.00 device syz (8086:0ad2)
[  231.496761][ T4793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.505491][ T4793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.540727][   T10] usb 8-1: new low-speed USB device number 51 using dummy_hcd
[  231.571053][   T10] usb 8-1: Invalid ep0 maxpacket: 64
[  231.710726][   T10] usb 8-1: new low-speed USB device number 52 using dummy_hcd
[  231.731317][   T10] usb 8-1: Invalid ep0 maxpacket: 64
[  231.736763][   T10] usb usb8-port1: unable to enumerate USB device
[  231.810718][   T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  231.897758][  T375] usb 9-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  231.910158][  T375] uvcvideo 9-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  231.920001][  T375] uvcvideo 9-1:1.1: Failed to initialize the device (-71).
[  231.929335][  T375] usb 9-1: USB disconnect, device number 15
[  231.973669][   T31] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  231.983620][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.991928][   T31] usb 3-1: Product: syz
[  231.996227][   T31] usb 3-1: Manufacturer: syz
[  232.001302][   T31] usb 3-1: SerialNumber: syz
[  232.092449][ T4810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1368'.
[  232.102111][   T36] audit: type=1400 audit(1787781449.871:515): avc:  denied  { read } for  pid=4809 comm="syz.5.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  232.211203][   T31] usb 3-1: USB disconnect, device number 6
[  232.780532][ T4843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.790035][ T4843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.800673][   T36] audit: type=1400 audit(1787781450.561:516): avc:  denied  { read } for  pid=4841 comm="syz.2.1377" name="file0" dev="tmpfs" ino=1806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  232.824098][   T36] audit: type=1400 audit(1787781450.571:517): avc:  denied  { open } for  pid=4841 comm="syz.2.1377" path="/322/file0" dev="tmpfs" ino=1806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  232.847851][   T36] audit: type=1400 audit(1787781450.571:518): avc:  denied  { ioctl } for  pid=4841 comm="syz.2.1377" path="/322/file0" dev="tmpfs" ino=1806 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  233.020714][   T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  233.150718][   T31] usb 3-1: device descriptor read/64, error -71
[  233.390688][   T31] usb 3-1: device descriptor read/64, error -71
[  233.622285][ T4861] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1382'.
[  233.630682][   T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  233.780670][   T31] usb 3-1: device descriptor read/64, error -71
[  234.030697][   T31] usb 3-1: device descriptor read/64, error -71
[  234.141212][   T31] usb usb3-port1: attempt power cycle
[  234.490794][   T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  234.511705][   T31] usb 3-1: device descriptor read/8, error -71
[  234.642099][   T31] usb 3-1: device descriptor read/8, error -71
[  234.649356][ T4888] 9pnet_fd: Insufficient options for proto=fd
[  234.658454][   T36] audit: type=1400 audit(1787781452.421:519): avc:  denied  { map } for  pid=4887 comm="syz.5.1392" path="socket:[39665]" dev="sockfs" ino=39665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  234.760788][  T375] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  234.890739][   T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  234.911838][   T31] usb 3-1: device descriptor read/8, error -71
[  234.911968][  T375] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  234.929760][  T375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.941115][  T375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.951060][  T375] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  234.965951][  T375] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  234.975526][  T375] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  234.983856][  T375] usb 9-1: Manufacturer: syz
[  234.989559][  T375] usb 9-1: config 0 descriptor??
[  235.041946][   T31] usb 3-1: device descriptor read/8, error -71
[  235.150886][   T31] usb usb3-port1: unable to enumerate USB device
[  235.398290][  T375] appleir 0003:05AC:8243.0022: item fetching failed at offset 0/1
[  235.423599][  T375] appleir 0003:05AC:8243.0022: parse failed
[  235.429890][  T375] appleir 0003:05AC:8243.0022: probe with driver appleir failed with error -22
[  235.601285][  T375] usb 9-1: USB disconnect, device number 16
[  235.828670][ T4894] veth1_macvtap: left promiscuous mode
[  235.834514][ T4894] macsec0: entered allmulticast mode
[  235.841512][ T4894] veth1_macvtap: entered promiscuous mode
[  235.847264][ T4894] veth1_macvtap: entered allmulticast mode
[  235.854767][ T4894] macsec0: left allmulticast mode
[  235.860028][ T4894] veth1_macvtap: left allmulticast mode
[  236.125605][ T4903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  236.133370][ T4903] IPv6: NLM_F_CREATE should be set when creating new route
[  236.140724][ T4903] IPv6: NLM_F_CREATE should be set when creating new route
[  236.221149][   T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  236.380953][   T31] usb 3-1: Using ep0 maxpacket: 8
[  236.391053][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  236.407928][   T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7
[  236.421587][   T31] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40
[  236.430894][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.439184][   T31] usb 3-1: Product: syz
[  236.444130][   T31] usb 3-1: Manufacturer: syz
[  236.448820][   T31] usb 3-1: SerialNumber: syz
[  236.657170][   T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  236.666992][   T31] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71
[  236.676846][   T31] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71
[  236.686881][   T31] usb 3-1: USB disconnect, device number 11
[  236.829967][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1402'.
[  237.185180][ T4939] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1407'.
[  237.522364][   T36] audit: type=1400 audit(1787781455.281:520): avc:  denied  { read write } for  pid=4946 comm="syz.7.1410" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  237.554997][   T36] audit: type=1400 audit(1787781455.281:521): avc:  denied  { open } for  pid=4946 comm="syz.7.1410" path="/111/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  237.583069][   T36] audit: type=1400 audit(1787781455.291:522): avc:  denied  { add_name } for  pid=4942 comm="syz.8.1409" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  237.610709][   T36] audit: type=1400 audit(1787781455.291:523): avc:  denied  { create } for  pid=4942 comm="syz.8.1409" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1
[  237.726464][ T4958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1413'.
[  238.278393][ T4971] 9pnet_virtio: no channels available for device syz
[  238.750800][  T413] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  238.921752][  T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  238.932957][  T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  238.944164][  T413] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  238.953687][  T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.962452][  T413] usb 3-1: config 0 descriptor??
[  238.967781][ T4988] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  239.178123][ T4988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4988 comm=syz.2.1424
[  239.220827][   T45] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  239.370735][   T45] usb 9-1: Using ep0 maxpacket: 8
[  239.377537][   T45] usb 9-1: unable to get BOS descriptor or descriptor too short
[  239.386188][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  239.397390][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  239.408325][  T413] uclogic 0003:28BD:0078.0023: interface is invalid, ignoring
[  239.417713][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  239.429056][   T45] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  239.439110][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  239.448777][   T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  239.460785][   T45] usb 9-1: string descriptor 0 read error: -22
[  239.467040][   T45] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  239.472605][ T5003] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1430'.
[  239.476529][   T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.494431][   T45] usb 9-1: config 0 descriptor??
[  239.499761][ T5001] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  239.522038][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  239.599172][   T45] usb 3-1: USB disconnect, device number 12
[  239.708423][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.717214][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.726102][  T413] usb 9-1: USB disconnect, device number 17
[  240.246460][ T5029] 9pnet_fd: Insufficient options for proto=fd
[  240.269616][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1441'.
[  240.279013][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1441'.
[  240.290305][ T2571] veth0_to_bridge: left allmulticast mode
[  240.296450][ T2571] veth0_to_bridge: left promiscuous mode
[  240.302871][ T2571] bridge0: port 3(veth0_to_bridge) entered disabled state
[  240.311004][ T2571] bridge_slave_1: left allmulticast mode
[  240.317081][ T2571] bridge_slave_1: left promiscuous mode
[  240.323002][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.331117][ T2571] bridge_slave_0: left allmulticast mode
[  240.337069][ T2571] bridge_slave_0: left promiscuous mode
[  240.342868][ T2571] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.453317][ T5033] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.460572][ T5033] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.468198][ T5033] bridge_slave_0: entered allmulticast mode
[  240.474957][ T5033] bridge_slave_0: entered promiscuous mode
[  240.482659][ T2571] veth1_macvtap: left promiscuous mode
[  240.488491][ T2571] veth0_vlan: left promiscuous mode
[  240.555079][ T5033] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.562259][ T5033] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.569467][ T5033] bridge_slave_1: entered allmulticast mode
[  240.579287][ T5033] bridge_slave_1: entered promiscuous mode
[  240.639856][ T5033] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.647021][ T5033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.654445][ T5033] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.661679][ T5033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.683646][ T2564] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.691679][ T2564] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.701566][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.708821][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.721717][  T443] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.728839][  T443] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.766314][ T5033] veth0_vlan: entered promiscuous mode
[  240.791706][ T5033] veth1_macvtap: entered promiscuous mode
[  240.807586][   T36] audit: type=1400 audit(1787781458.571:524): avc:  denied  { watch watch_reads } for  pid=5045 comm="syz.7.1446" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  240.884643][ T5051] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1447'.
[  240.950383][ T5062] overlayfs: failed to clone lowerpath
[  240.979468][ T5053] kvm: kvm [5052]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  240.989481][ T5053] kvm: kvm [5052]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  241.100791][   T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  241.272607][   T10] usb 10-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  241.288713][   T10] usb 10-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00
[  241.298688][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.310384][   T10] usb 10-1: Product: syz
[  241.315025][   T10] usb 10-1: Manufacturer: syz
[  241.319733][   T10] usb 10-1: SerialNumber: syz
[  241.595278][ T5079] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1457'.
[  241.642113][   T10] usb 10-1: USB disconnect, device number 2
[  241.668009][   T36] audit: type=1400 audit(1787781459.431:525): avc:  denied  { ioctl } for  pid=5085 comm="syz.8.1460" path="pid:[4026532301]" dev="nsfs" ino=4026532301 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  242.157636][   T36] audit: type=1400 audit(1787781459.921:526): avc:  denied  { lock } for  pid=5094 comm="syz.9.1461" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  242.529975][ T5106] incfs: Options parsing error. -22
[  242.535311][ T5106] incfs: mount failed -22
[  242.850720][  T375] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  243.002009][  T375] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  243.011396][  T375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.020377][  T375] usb 9-1: config 0 descriptor??
[  243.290693][   T10] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  243.444352][   T10] usb 10-1: unable to get BOS descriptor or descriptor too short
[  243.453242][   T10] usb 10-1: not running at top speed; connect to a high speed hub
[  243.462077][   T10] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  243.470957][   T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.481387][   T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.491797][   T10] usb 10-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  243.501080][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.509200][   T10] usb 10-1: Product: syz
[  243.513563][   T10] usb 10-1: Manufacturer: syz
[  243.518460][   T10] usb 10-1: SerialNumber: syz
[  243.735706][   T10] usb 10-1: Audio class v2/v3 interfaces need an interface association
[  243.745937][   T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  243.756297][   T10] usb 10-1: USB disconnect, device number 3
[  243.763491][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  244.036001][  T375] usb 9-1: Cannot set autoneg
[  244.040815][  T375] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  244.053543][  T375] usb 9-1: USB disconnect, device number 18
[  244.480756][   T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  244.599354][ T5146] 9pnet_fd: Insufficient options for proto=fd
[  244.630900][   T31] usb 10-1: Using ep0 maxpacket: 32
[  244.637619][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.649208][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.659808][   T31] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  244.669607][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.678596][   T31] usb 10-1: config 0 descriptor??
[  244.685272][   T31] hub 10-1:0.0: USB hub found
[  244.885373][   T31] hub 10-1:0.0: 1 port detected
[  245.089223][   T31] hub 10-1:0.0: hub_hub_status failed (err = -71)
[  245.098448][   T31] hub 10-1:0.0: config failed, can't get hub status (err -71)
[  245.110340][   T31] usbhid 10-1:0.0: can't add hid device: -71
[  245.119238][   T31] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  245.151229][   T31] usb 10-1: USB disconnect, device number 4
[  245.224320][ T5154] overlayfs: failed to clone upperpath
[  245.490721][   T45] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  245.620111][   T36] audit: type=1400 audit(1787781463.381:527): avc:  denied  { write } for  pid=5157 comm="syz.9.1483" name="idVendor" dev="configfs" ino=43090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  245.620684][   T45] usb 9-1: device descriptor read/64, error -71
[  245.645825][   T36] audit: type=1400 audit(1787781463.381:528): avc:  denied  { open } for  pid=5157 comm="syz.9.1483" path="/5/config/usb_gadget/g_uac2/idVendor" dev="configfs" ino=43090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  245.682754][ T5158] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  245.900905][   T45] usb 9-1: device descriptor read/64, error -71
[  245.954608][   T36] audit: type=1326 audit(1787781463.721:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.5.1480" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03df9e0d9 code=0x7fc00000
[  246.035633][ T5173] netlink: 'syz.5.1487': attribute type 27 has an invalid length.
[  246.106782][ T5175] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3795657396 (242922073344 ns) > initial count (53003242880 ns). Using initial count to start timer.
[  246.129486][   T36] audit: type=1400 audit(1787781463.891:530): avc:  denied  { map } for  pid=5174 comm="syz.9.1488" path="/proc/29/net/softnet_stat" dev="proc" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  246.156736][   T45] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  246.293102][ T5189] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1493'.
[  246.303235][   T45] usb 9-1: device descriptor read/64, error -71
[  246.303522][ T5189] tipc: Invalid UDP bearer configuration
[  246.310129][ T5189] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  246.340133][ T5193] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  246.340155][ T5193] rust_binder: Read failure Err(EFAULT) in pid:42
[  246.358172][ T5193] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  246.365775][ T5193] rust_binder: Read failure Err(EFAULT) in pid:42
[  246.375456][ T5193] rust_binder: Failure in copy_transaction_data: EINVAL
[  246.384217][ T5193] rust_binder: 5192:5193 transaction call to 5192:0 failed EINVAL, code 0 size 24-24
[  246.403804][   T31] rust_binder: 5192: undelivered TRANSACTION_ERROR: 29201
[  246.550798][   T45] usb 9-1: device descriptor read/64, error -71
[  246.660811][  T375] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  246.660893][   T45] usb usb9-port1: attempt power cycle
[  246.696737][   T36] audit: type=1400 audit(1787781464.461:531): avc:  denied  { watch watch_reads } for  pid=5198 comm="syz.5.1497" path="/388/file0" dev="tmpfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  246.783142][ T5209] veth1_macvtap: left promiscuous mode
[  246.788898][ T5209] macsec0: entered promiscuous mode
[  246.794708][ T5209] macsec0: entered allmulticast mode
[  246.801965][ T5209] veth1_macvtap: entered promiscuous mode
[  246.808642][ T5209] veth1_macvtap: entered allmulticast mode
[  246.814903][  T375] usb 10-1: Using ep0 maxpacket: 32
[  246.820937][ T5209] macsec0: left promiscuous mode
[  246.826229][ T5209] macsec0: left allmulticast mode
[  246.831436][ T5209] veth1_macvtap: left allmulticast mode
[  246.837459][  T375] usb 10-1: unable to get BOS descriptor or descriptor too short
[  246.853045][  T375] usb 10-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config
[  246.874016][  T375] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.891990][  T375] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  246.901592][  T375] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.909832][  T375] usb 10-1: Product: syz
[  246.917264][  T375] usb 10-1: Manufacturer: syz
[  246.923616][  T375] usb 10-1: SerialNumber: syz
[  247.010771][   T45] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  247.031960][   T45] usb 9-1: device descriptor read/8, error -71
[  247.135450][  T375] usb 10-1: MIDIStreaming interface descriptor not found
[  247.145625][  T375] usb 10-1: USB disconnect, device number 5
[  247.153370][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  247.171155][   T45] usb 9-1: device descriptor read/8, error -71
[  247.410791][   T45] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  247.431876][   T45] usb 9-1: device descriptor read/8, error -71
[  247.562101][   T45] usb 9-1: device descriptor read/8, error -71
[  247.670783][   T45] usb usb9-port1: unable to enumerate USB device
[  247.727866][ T2567] Bluetooth: hci0: Frame reassembly failed (-84)
[  247.735091][ T5233] Bluetooth: hci0: Frame reassembly failed (-84)
[  248.255463][ T5241] x_tables: unsorted underflow at hook 2
[  248.282126][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.301461][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.580768][   T45] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  248.730831][   T45] usb 9-1: Using ep0 maxpacket: 16
[  248.738686][   T45] usb 9-1: New USB device found, idVendor=0499, idProduct=1014, bcdDevice= 0.40
[  248.748363][   T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.756504][   T45] usb 9-1: Product: syz
[  248.760837][   T45] usb 9-1: Manufacturer: syz
[  248.765453][   T45] usb 9-1: SerialNumber: syz
[  248.974304][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1518'.
[  248.998311][   T45] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2
[  249.011350][   T45] usb 9-1: USB disconnect, device number 23
[  249.033593][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  249.504696][   T36] audit: type=1400 audit(1787781467.271:532): avc:  denied  { map } for  pid=5247 comm="syz.8.1520" path="/60/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  249.669795][ T5255] overlayfs: conflicting options: nfs_export=on,index=off
[  249.740781][  T723] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  249.740864][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  249.783361][   T45] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[  249.920740][   T45] usb 9-1: device descriptor read/64, error -71
[  250.160693][   T45] usb 9-1: device descriptor read/64, error -71
[  250.223991][ T5272] overlayfs: failed to clone upperpath
[  250.400735][   T45] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  250.530743][   T45] usb 9-1: device descriptor read/64, error -71
[  250.560768][   T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  250.712229][   T10] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  250.746923][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.758811][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.768999][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  250.783500][   T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  250.790702][   T45] usb 9-1: device descriptor read/64, error -71
[  250.793040][   T10] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  250.807498][   T10] usb 10-1: Manufacturer: syz
[  250.812797][   T10] usb 10-1: config 0 descriptor??
[  250.900904][   T45] usb usb9-port1: attempt power cycle
[  251.220228][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.229578][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.240695][   T45] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[  251.244826][   T10] usbhid 10-1:0.0: can't add hid device: -71
[  251.258462][   T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  251.268419][   T10] usb 10-1: USB disconnect, device number 6
[  251.274652][   T45] usb 9-1: device descriptor read/8, error -71
[  251.411996][   T45] usb 9-1: device descriptor read/8, error -71
[  251.650714][   T45] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[  251.650716][   T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  251.672058][   T45] usb 9-1: device descriptor read/8, error -71
[  251.802236][   T45] usb 9-1: device descriptor read/8, error -71
[  251.823635][   T10] usb 10-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40
[  251.833982][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.842937][   T10] usb 10-1: Product: syz
[  251.848098][   T10] usb 10-1: Manufacturer: syz
[  251.853197][   T10] usb 10-1: SerialNumber: syz
[  251.910896][   T45] usb usb9-port1: unable to enumerate USB device
[  252.067015][   T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71
[  252.081570][   T10] usb 10-1: USB disconnect, device number 7
[  252.096228][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  252.584707][   T36] audit: type=1326 audit(1787781470.351:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.8.1537" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fe3d9e0d9 code=0x0
[  252.856521][ T5315] netlink: 679 bytes leftover after parsing attributes in process `syz.9.1543'.
[  252.881017][   T36] audit: type=1400 audit(1787781470.651:534): avc:  denied  { watch } for  pid=5319 comm="syz.9.1544" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  253.722951][   T36] audit: type=1400 audit(1787781471.491:535): avc:  denied  { mounton } for  pid=5345 comm="syz.8.1550" path="/68/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  253.745447][ T5346] FAULT_INJECTION: forcing a failure.
[  253.745447][ T5346] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  253.758900][ T5346] CPU: 1 UID: 0 PID: 5346 Comm: syz.8.1550 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5
[  253.758933][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.758946][ T5346] Call Trace:
[  253.758953][ T5346]  <TASK>
[  253.758960][ T5346]  __dump_stack+0x21/0x30
[  253.759097][ T5346]  dump_stack_lvl+0x140/0x1c0
[  253.759122][ T5346]  ? __cfi_dump_stack_lvl+0x10/0x10
[  253.759149][ T5346]  dump_stack+0x19/0x20
[  253.759173][ T5346]  should_fail_ex+0x3c2/0x510
[  253.759297][ T5346]  should_fail+0xf/0x20
[  253.759319][ T5346]  should_fail_usercopy+0x1e/0x30
[  253.759345][ T5346]  strncpy_from_user+0x29/0x280
[  253.759390][ T5346]  getname_flags+0x106/0x6b0
[  253.759471][ T5346]  getname+0x1b/0x30
[  253.759491][ T5346]  do_sys_openat2+0xda/0x1d0
[  253.759559][ T5346]  ? fput+0x1a4/0x230
[  253.759607][ T5346]  ? do_sys_open+0x100/0x100
[  253.759634][ T5346]  ? __cfi_ksys_write+0x10/0x10
[  253.759656][ T5346]  __x64_sys_openat+0x13a/0x170
[  253.759683][ T5346]  x64_sys_call+0xe69/0x2ee0
[  253.759702][ T5346]  do_syscall_64+0x57/0xf0
[  253.759796][ T5346]  ? clear_bhb_loop+0x50/0xa0
[  253.759851][ T5346]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  253.759873][ T5346] RIP: 0033:0x7f5fe3d9e0d9
[  253.759892][ T5346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.759911][ T5346] RSP: 002b:00007f5fe4cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  253.759935][ T5346] RAX: ffffffffffffffda RBX: 00007f5fe4025fa0 RCX: 00007f5fe3d9e0d9
[  253.759952][ T5346] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  253.759967][ T5346] RBP: 00007f5fe3e35024 R08: 0000000000000000 R09: 0000000000000000
[  253.759981][ T5346] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  253.759993][ T5346] R13: 00007f5fe4026038 R14: 00007f5fe4025fa0 R15: 00007ffeaabcb7f8
[  253.760010][ T5346]  </TASK>
[  253.998691][   T36] audit: type=1400 audit(1787781471.751:536): avc:  denied  { map } for  pid=5351 comm="syz.8.1552" path="socket:[44883]" dev="sockfs" ino=44883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  254.018080][ T5361] syzkaller1: entered promiscuous mode
[  254.029522][ T5361] syzkaller1: entered allmulticast mode
[  254.440740][   T10] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  254.590707][   T10] usb 9-1: Using ep0 maxpacket: 32
[  254.597360][   T10] usb 9-1: config 6 has an invalid interface number: 20 but max is 0
[  254.605610][   T10] usb 9-1: config 6 has no interface number 0
[  254.612103][   T10] usb 9-1: config 6 interface 20 has no altsetting 0
[  254.620152][   T10] usb 9-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=4a.71
[  254.629429][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.637757][   T10] usb 9-1: Product: syz
[  254.642035][   T10] usb 9-1: Manufacturer: syz
[  254.646650][   T10] usb 9-1: SerialNumber: syz
[  254.856379][   T10] usb 9-1: bad CDC descriptors
[  254.861741][   T10] cdc_acm 9-1:6.20: Zero length descriptor references
[  254.868731][   T10] cdc_acm 9-1:6.20: probe with driver cdc_acm failed with error -22
[  254.878040][   T10] usb 9-1: USB disconnect, device number 28
[  254.965361][   T36] audit: type=1400 audit(1787781472.731:537): avc:  denied  { mounton } for  pid=5381 comm="syz.9.1562" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[  255.240765][    T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  255.311178][ T5393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1565'.
[  255.329833][   T36] audit: type=1400 audit(1787781473.091:538): avc:  denied  { bind } for  pid=5394 comm="syz.5.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  255.373145][    T9] usb 10-1: device descriptor read/64, error -71
[  255.406353][ T5405] loop0: detected capacity change from 0 to 1
[  255.432621][ T5405]  loop0:
[  255.460674][ T5412] TCP: TCP_TX_DELAY enabled
[  255.465855][ T5412] rust_binder: 5411:5412 error while translating object: EINVAL
[  255.473864][ T5412] rust_binder: Failure in copy_transaction_data: EINVAL
[  255.473893][ T5412] rust_binder: 5411:5412 transaction call to 5411:0 failed EINVAL, code 0 size 96-24
[  255.491737][ T5412] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  255.502673][  T413] rust_binder: 5411: undelivered TRANSACTION_ERROR: 29201
[  255.620840][    T9] usb 10-1: device descriptor read/64, error -71
[  255.750714][  T413] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  255.860855][    T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  255.900752][  T413] usb 9-1: Using ep0 maxpacket: 8
[  255.907381][  T413] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.918618][ T5422] overlayfs: failed to clone upperpath
[  255.919045][  T413] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  255.936490][  T413] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.950216][  T413] usb 9-1: config 0 interface 0 has no altsetting 0
[  255.957389][  T413] usb 9-1: New USB device found, idVendor=172f, idProduct=1338, bcdDevice= 0.00
[  255.967167][  T413] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.985223][  T413] usb 9-1: config 0 descriptor??
[  255.996291][    T9] usb 10-1: device descriptor read/64, error -71
[  256.004064][ T5417] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  256.031533][ T5432] syzkaller1: entered promiscuous mode
[  256.038363][ T5432] syzkaller1: entered allmulticast mode
[  256.048698][ T5432] fuse: Bad value for 'fd'
[  256.059268][   T36] audit: type=1400 audit(1787781473.821:539): avc:  denied  { remove_name } for  pid=5431 comm="syz.7.1580" name="g1" dev="configfs" ino=39990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  256.090057][   T36] audit: type=1400 audit(1787781473.821:540): avc:  denied  { rmdir } for  pid=5431 comm="syz.7.1580" name="g1" dev="configfs" ino=39990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  256.250742][    T9] usb 10-1: device descriptor read/64, error -71
[  256.360994][    T9] usb usb10-port1: attempt power cycle
[  256.417232][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.427735][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.436725][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.446021][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.454295][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.462888][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.470519][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.478240][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.486553][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.494314][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.501860][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.509789][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.517351][  T413] hid-generic 0003:172F:1338.0024: unknown main item tag 0x0
[  256.525168][  T413] hid-generic 0003:172F:1338.0024: unbalanced collection at end of report description
[  256.535167][  T413] hid-generic 0003:172F:1338.0024: probe with driver hid-generic failed with error -22
[  256.537891][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1582'.
[  256.622322][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1574'.
[  256.634110][ T5417] netlink: 1228 bytes leftover after parsing attributes in process `syz.8.1574'.
[  256.700755][    T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  256.722109][    T9] usb 10-1: device descriptor read/8, error -71
[  256.851955][    T9] usb 10-1: device descriptor read/8, error -71
[  257.090765][    T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  257.112188][    T9] usb 10-1: device descriptor read/8, error -71
[  257.181965][ T5448] Line length is too long: Should be less than 4094
[  257.242389][    T9] usb 10-1: device descriptor read/8, error -71
[  257.333935][ T5459] kvm: kvm [5458]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  257.342761][ T5459] kvm: kvm [5458]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  257.360788][    T9] usb usb10-port1: unable to enumerate USB device
[  257.360830][ T5459] kvm_intel: kvm [5458]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  257.379430][ T5459] kvm: kvm [5458]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1
[  257.388275][ T5459] kvm: kvm [5458]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1
[  257.508309][ T5459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.517392][ T5459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.159404][ T5499] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  258.167173][ T5499] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  258.174619][ T5499] tipc: New replicast peer: 255.255.255.255
[  258.181903][ T5499] tipc: Enabled bearer <udp:syz2>, priority 9
[  258.238715][   T36] audit: type=1400 audit(1787781476.001:541): avc:  denied  { name_bind } for  pid=5514 comm="syz.5.1605" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  258.288553][   T36] audit: type=1400 audit(1787781476.051:542): avc:  denied  { mount } for  pid=5521 comm="syz.9.1607" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  258.925920][   T36] audit: type=1400 audit(1787781476.691:543): avc:  denied  { read } for  pid=5536 comm="syz.9.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  259.136296][ T5543] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1613'.
[  259.841230][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1620'.
[  259.929565][ T5573] input: syz1 as /devices/virtual/input/input41
[  260.431210][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.439952][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.730747][  T413] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  260.882027][  T413] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.893568][  T413] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.904068][  T413] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  260.913553][  T413] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.922436][  T413] usb 10-1: config 0 descriptor??
[  261.155376][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.164998][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.165010][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.165148][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.530714][ T5590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.539363][ T5590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.547940][  T413] usbhid 10-1:0.0: can't add hid device: -71
[  261.554376][  T413] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  261.563734][  T413] usb 10-1: USB disconnect, device number 12
[  261.824014][ T5628] overlayfs: failed to clone upperpath
[  261.930473][ T5629] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1638'.
[  262.426395][ T5647] overlayfs: failed to clone upperpath
[  262.983423][   T36] audit: type=1400 audit(1787781480.751:544): avc:  denied  { setcheckreqprot } for  pid=5663 comm="syz.9.1657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  263.250915][   T45] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  263.390739][   T45] usb 10-1: device descriptor read/64, error -71
[  263.484855][   T36] audit: type=1400 audit(1787781481.251:545): avc:  denied  { setattr } for  pid=5683 comm="syz.5.1667" name="" dev="pipefs" ino=8720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  263.640757][   T45] usb 10-1: device descriptor read/64, error -71
[  263.701750][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.718509][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.880731][   T45] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  264.010700][   T45] usb 10-1: device descriptor read/64, error -71
[  264.075547][ T5708] netlink: 'syz.5.1676': attribute type 4 has an invalid length.
[  264.250762][   T45] usb 10-1: device descriptor read/64, error -71
[  264.276013][ T5712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.284847][ T5712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.360837][   T45] usb usb10-port1: attempt power cycle
[  264.700733][   T45] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  264.721930][   T45] usb 10-1: device descriptor read/8, error -71
[  264.844156][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.853004][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.854991][   T45] usb 10-1: device descriptor read/8, error -71
[  265.100824][   T45] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  265.121934][   T45] usb 10-1: device descriptor read/8, error -71
[  265.251980][   T45] usb 10-1: device descriptor read/8, error -71
[  265.360900][   T45] usb usb10-port1: unable to enumerate USB device
[  265.380523][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1686'.
[  265.573395][ T5736] input: syz1 as /devices/virtual/input/input43
[  265.604979][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.613621][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.712609][ T5744] 9pnet_fd: Insufficient options for proto=fd
[  266.104029][   T36] audit: type=1400 audit(1787781483.871:546): avc:  denied  { lock } for  pid=5750 comm="syz.9.1695" path="socket:[48478]" dev="sockfs" ino=48478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  266.168624][ T5760] batadv_slave_0: entered promiscuous mode
[  266.175343][ T5759] batadv_slave_0: left promiscuous mode
[  266.400728][  T413] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  266.552096][  T413] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.563548][  T413] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  266.575614][  T413] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  266.585707][  T413] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.595321][  T413] usb 10-1: Product: syz
[  266.599682][  T413] usb 10-1: Manufacturer: syz
[  266.604575][  T413] usb 10-1: SerialNumber: syz
[  266.612879][  T413] cdc_mbim 10-1:1.0: skipping garbage
[  266.813785][ T5758] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  267.078536][ T5770] 9pnet_fd: Insufficient options for proto=fd
[  267.101264][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.110160][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.223858][   T36] audit: type=1400 audit(1787781484.991:547): avc:  denied  { read } for  pid=5757 comm="syz.9.1699" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  267.449683][ T5758] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  267.457707][  T413] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device
[  267.464850][  T413] wwan wwan0: port wwan0mbim0 attached
[  267.472244][  T413] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 92:e0:9d:98:1e:2b
[  267.587486][  T149] 8021q: adding VLAN 0 to HW filter on device wwan0
[  267.635899][   T36] audit: type=1400 audit(1787781485.401:548): avc:  denied  { ioctl } for  pid=5788 comm="syz.8.1704" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  267.664962][   T45] usb 10-1: USB disconnect, device number 17
[  267.679567][   T45] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM
[  267.681045][ T5791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.704427][ T5791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.737267][   T45] wwan wwan0: port wwan0mbim0 disconnected
[  268.209123][   T36] audit: type=1400 audit(1787781485.971:549): avc:  denied  { create } for  pid=5818 comm="syz.9.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  268.413507][ T5828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.423366][ T5828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.540709][ T2889] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  268.701964][ T2889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  268.713275][ T2889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  268.724366][ T2889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  268.734525][ T2889] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  268.748565][ T2889] usb 10-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  268.758813][ T2889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.763745][ T5830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5830 comm=syz.5.1710
[  268.768487][ T2889] usb 10-1: config 0 descriptor??
[  268.795011][ T5832] 9pnet_fd: Insufficient options for proto=fd
[  269.194611][ T2889] nintendo 0003:057E:2019.0025: unknown main item tag 0x0
[  269.202527][ T2889] nintendo 0003:057E:2019.0025: unknown main item tag 0x0
[  269.209967][ T2889] nintendo 0003:057E:2019.0025: unknown main item tag 0x0
[  269.217360][ T2889] nintendo 0003:057E:2019.0025: unknown main item tag 0x0
[  269.224727][ T2889] nintendo 0003:057E:2019.0025: unknown main item tag 0x0
[  269.232986][ T2889] nintendo 0003:057E:2019.0025: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.9-1/input0
[  269.300868][ T2889] nintendo 0003:057E:2019.0025: Failed to get joycon info; ret=-90
[  269.309056][ T2889] nintendo 0003:057E:2019.0025: Failed to retrieve controller info; ret=-90
[  269.323257][ T2889] nintendo 0003:057E:2019.0025: Failed to initialize controller; ret=-90
[  269.333699][ T2889] nintendo 0003:057E:2019.0025: probe - fail = -90
[  269.340324][ T2889] nintendo 0003:057E:2019.0025: probe with driver nintendo failed with error -90
[  269.397098][ T2889] usb 10-1: USB disconnect, device number 18
[  269.927665][ T5849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5849 comm=syz.9.1717
[  269.940736][ T5849] fuse: Bad value for 'fd'
[  270.002546][ T5852] serio: Serial port ptm0
[  270.380728][   T45] usb 10-1: new full-speed USB device number 19 using dummy_hcd
[  270.417251][ T5862] 9pnet_fd: Insufficient options for proto=fd
[  270.510707][   T45] usb 10-1: device descriptor read/64, error -71
[  270.750724][   T45] usb 10-1: device descriptor read/64, error -71
[  270.990685][   T45] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[  271.120708][   T45] usb 10-1: device descriptor read/64, error -71
[  271.360728][   T45] usb 10-1: device descriptor read/64, error -71
[  271.470843][   T45] usb usb10-port1: attempt power cycle
[  271.810751][   T45] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  271.832087][   T45] usb 10-1: device descriptor read/8, error -71
[  271.962175][   T45] usb 10-1: device descriptor read/8, error -71
[  272.200758][   T45] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[  272.222373][   T45] usb 10-1: device descriptor read/8, error -71
[  272.305117][ T5870] 9pnet_fd: Insufficient options for proto=fd
[  272.352099][   T45] usb 10-1: device descriptor read/8, error -71
[  272.460806][   T45] usb usb10-port1: unable to enumerate USB device
[  272.468387][ T5876] netlink: 'syz.8.1725': attribute type 3 has an invalid length.
[  272.523344][ T5880] veth1_to_bond: entered allmulticast mode
[  272.529614][ T5879] veth1_to_bond: left allmulticast mode
[  272.896488][ T5883] batadv_slave_1: entered promiscuous mode
[  273.063007][ T5887] 9pnet: Could not find request transport: fdrfd9o=0x0000000000000035
[  273.130484][   T36] audit: type=1400 audit(1787781490.891:550): avc:  denied  { create } for  pid=5891 comm="syz.8.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  273.159700][ T5894] 9pnet_fd: Insufficient options for proto=fd
[  273.190387][ T5896] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  273.209640][   T36] audit: type=1400 audit(1787781490.971:551): avc:  denied  { write } for  pid=4292 comm="syz-executor" name="/" dev="incremental-fs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  273.240070][   T36] audit: type=1400 audit(1787781490.971:552): avc:  denied  { remove_name } for  pid=4292 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  273.265071][   T36] audit: type=1400 audit(1787781490.971:553): avc:  denied  { unlink } for  pid=4292 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  273.382744][ T2889] usb 9-1: USB disconnect, device number 29
[  273.528470][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.535654][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.546449][ T5911] bridge_slave_0: entered allmulticast mode
[  273.559981][ T5911] bridge_slave_0: entered promiscuous mode
[  273.567173][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.574474][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.581809][ T5911] bridge_slave_1: entered allmulticast mode
[  273.588286][ T5911] bridge_slave_1: entered promiscuous mode
[  273.601618][   T45] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  273.639841][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.647113][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.654474][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.661546][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.680838][ T5881] batadv_slave_1: left promiscuous mode
[  273.702828][  T127] bridge_slave_1: left allmulticast mode
[  273.708929][  T127] bridge_slave_1: left promiscuous mode
[  273.715195][  T127] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.725158][  T127] bridge_slave_0: left allmulticast mode
[  273.731136][  T127] bridge_slave_0: left promiscuous mode
[  273.738268][  T127] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.770703][   T45] usb 10-1: Using ep0 maxpacket: 32
[  273.777465][   T45] usb 10-1: config 0 has an invalid interface number: 196 but max is 0
[  273.785925][   T45] usb 10-1: config 0 has no interface number 0
[  273.793192][   T45] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  273.803793][   T45] usb 10-1: config 0 interface 196 has no altsetting 0
[  273.817057][   T45] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  273.826694][   T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.837981][   T45] usb 10-1: Product: syz
[  273.838061][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.842367][   T45] usb 10-1: Manufacturer: syz
[  273.854344][   T45] usb 10-1: SerialNumber: syz
[  273.854824][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.864538][   T45] usb 10-1: config 0 descriptor??
[  273.872008][ T5906] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  273.890262][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.897646][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.907135][  T127] veth1_macvtap: left promiscuous mode
[  273.913457][  T127] veth0_vlan: left promiscuous mode
[  273.961608][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1749'.
[  273.972040][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.979213][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.012150][ T5911] veth0_vlan: entered promiscuous mode
[  274.033620][ T5911] veth1_macvtap: entered promiscuous mode
[  274.086285][   T45] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  274.095581][   T45] ipheth 10-1:0.196: probe with driver ipheth failed with error -22
[  274.183963][ T5940] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
[  274.197827][ T5940] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  274.206429][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.0.1751 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5
[  274.217976][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  274.228159][ T5940] RIP: 0010:dummy_udc_start+0xd1/0x1f0
[  274.233760][ T5940] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 f4 be cd fd eb 0c e8 ed be cd fd eb 05 e8 e6 be cd fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 90 9d 26 fe 4d 8b 36 4c 89 f7 e8
[  274.253490][ T5940] RSP: 0018:ffffc9000855f818 EFLAGS: 00010246
[  274.259572][ T5940] RAX: 0000000000000000 RBX: ffff8881441fc010 RCX: ffff888102ffa600
[  274.268002][ T5940] RDX: 0000000000000000 RSI: ffffffff87a4b480 RDI: 0000000000000003
[  274.276070][ T5940] RBP: ffffc9000855f840 R08: ffff888102ffa600 R09: 0000000000000004
[  274.284244][ T5940] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000
[  274.292409][ T5940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
[  274.300490][ T5940] FS:  00007f64820a76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  274.309427][ T5940] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.316024][ T5940] CR2: 00007f6481187240 CR3: 0000000115470000 CR4: 00000000003526b0
[  274.324367][ T5940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  274.332377][ T5940] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  274.340458][ T5940] Call Trace:
[  274.343882][ T5940]  <TASK>
[  274.346822][ T5940]  ? __cfi_dummy_udc_start+0x10/0x10
[  274.352396][ T5940]  gadget_bind_driver+0x3e1/0x9c0
[  274.357426][ T5940]  ? __cfi_gadget_bind_driver+0x10/0x10
[  274.362971][ T5940]  really_probe+0x2e1/0x8b0
[  274.367638][ T5940]  __driver_probe_device+0x193/0x280
[  274.372998][ T5940]  driver_probe_device+0x54/0x3f0
[  274.378169][ T5940]  __driver_attach+0x422/0x5e0
[  274.382959][ T5940]  bus_for_each_dev+0x249/0x2d0
[  274.387911][ T5940]  ? __cfi___driver_attach+0x10/0x10
[  274.393251][ T5940]  ? __cfi_bus_for_each_dev+0x10/0x10
[  274.399114][ T5940]  ? __kasan_kmalloc+0x96/0xb0
[  274.403946][ T5940]  ? _raw_spin_unlock+0x45/0x60
[  274.408953][ T5940]  ? klist_add_tail+0x1dd/0x220
[  274.413837][ T5940]  driver_attach+0x46/0x50
[  274.418359][ T5940]  bus_add_driver+0x393/0x730
[  274.423123][ T5940]  driver_register+0x2b7/0x3c0
[  274.428025][ T5940]  usb_gadget_register_driver_owner+0xfc/0x270
[  274.434379][ T5940]  raw_ioctl+0x144c/0x37a0
[  274.438894][ T5940]  ? __cfi_raw_ioctl+0x10/0x10
[  274.443662][ T5940]  ? selinux_file_ioctl+0x732/0x1480
[  274.449044][ T5940]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  274.454584][ T5940]  ? bpf_lsm_file_ioctl+0xd/0x20
[  274.459587][ T5940]  ? security_file_ioctl+0x3e/0x110
[  274.464821][ T5940]  ? __cfi_raw_ioctl+0x10/0x10
[  274.469587][ T5940]  __se_sys_ioctl+0x135/0x1b0
[  274.474307][ T5940]  __x64_sys_ioctl+0x7f/0xa0
[  274.478901][ T5940]  x64_sys_call+0x1878/0x2ee0
[  274.483661][ T5940]  do_syscall_64+0x57/0xf0
[  274.488105][ T5940]  ? clear_bhb_loop+0x50/0xa0
[  274.492802][ T5940]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  274.498742][ T5940] RIP: 0033:0x7f648119dd6b
[  274.503170][ T5940] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  274.522976][ T5940] RSP: 002b:00007f64820a4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  274.531506][ T5940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f648119dd6b
[  274.539494][ T5940] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  274.547495][ T5940] RBP: 00007f64820a5fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  274.555563][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.563549][ T5940] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000
[  274.571535][ T5940]  </TASK>
[  274.574564][ T5940] Modules linked in:
[  274.578842][ T5940] ---[ end trace 0000000000000000 ]---
[  274.589445][   T36] audit: type=1400 audit(1787781492.341:554): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  274.590675][ T5940] RIP: 0010:dummy_udc_start+0xd1/0x1f0
[  274.613622][   T36] audit: type=1400 audit(1787781492.351:555): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.619686][ T5940] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 f4 be cd fd eb 0c e8 ed be cd fd eb 05 e8 e6 be cd fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 90 9d 26 fe 4d 8b 36 4c 89 f7 e8
[  274.660181][   T36] audit: type=1400 audit(1787781492.351:556): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.666866][ T5940] RSP: 0018:ffffc9000855f818 EFLAGS: 00010246
[  274.681798][   T36] audit: type=1400 audit(1787781492.351:557): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  274.683468][ T5940] 
[  274.687948][   T36] audit: type=1400 audit(1787781492.351:558): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  274.708725][ T5940] RAX: 0000000000000000 RBX: ffff8881441fc010 RCX: ffff888102ffa600
[  274.712087][   T36] audit: type=1400 audit(1787781492.351:559): avc:  denied  { append open } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  274.731829][ T5940] RDX: 0000000000000000 RSI: ffffffff87a4b480 RDI: 0000000000000003
[  274.771282][ T5940] RBP: ffffc9000855f840 R08: ffff888102ffa600 R09: 0000000000000004
[  274.779582][ T5940] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000
[  274.788108][ T5940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
[  274.796199][ T5940] FS:  00007f64820a76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  274.805193][ T5940] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.811978][ T5940] CR2: 00007f5fe77bbfd8 CR3: 0000000115470000 CR4: 00000000003526b0
[  274.820085][ T5940] Kernel panic - not syncing: Fatal exception
[  274.826820][ T5940] Kernel Offset: disabled
[  274.831145][ T5940] Rebooting in 86400 seconds..