last executing test programs:

2m12.48148063s ago: executing program 0 (id=7):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
unshare(0x60000600)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0xaa6a85454e105fde, "7157e3ee"}, @global=@item_012={0x1, 0x1, 0x4, 'v'}]}}, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2m10.688869332s ago: executing program 0 (id=13):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x1000001c})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x4, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0x5, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}], 0x1, 0xbff, 0x43, 0x0, 0xc, 0x6e})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m10.556084621s ago: executing program 0 (id=14):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$tipc(0x1e, 0x5, 0x0)
mount$cgroup(0x0, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000180)={[{@clone_children}]})
bind$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10)
ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff)
listen(r2, 0x0)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0}, 0x80)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x440c1)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
r6 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x40, 0x4000000}}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x177)
r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000100)=0x7)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRESDEC=r3, @ANYRES8=r3, @ANYRES32=r0, @ANYRES64=r3, @ANYRES16=r1])
r9 = accept4(r2, 0x0, 0x0, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x24048001)
r11 = dup2(r0, r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000001000030000000300000018000180040002800f0001006574683a6e69637685924b"], 0x2c}}, 0x4000880)

2m10.425836909s ago: executing program 0 (id=15):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
truncate(0x0, 0x5)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB="010067653d6e657665722c00"])
fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) (async)
r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000080)={0x1008, r3}, 0x0)
socket$inet6(0xa, 0x80001, 0x0) (async)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="01fb721f4c623cdcad351d3063a1319d37172427e8d0b56f24911052cda9b3b690178787e47a5e55a190ecf35c7d86aa2189bd346fdfef3aea5db7d544ddf3f728652dbde32f0bfbcf573ea95e2085a14e47eda86c2c8e197242c7d41ca8c4ceb7633335e8b7177e2678aca74c71b44699bf3b7b042975352837d7fa3cbaf6a172ed7e53ede484c43bed76834b698aaf680fe1111d9c3c8d3787a6b6c54436821b7d98832f612c97fb040323fda8399edd6c25573d02ba1bc7", @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="dae8dd", @ANYRESOCT=r0, @ANYRES8=r5, @ANYRESOCT=r5], 0x190)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = epoll_create1(0x0)
epoll_pwait(r6, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r9, &(0x7f0000000100)=@abs={0x27}, 0x6e)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b8000001000f01725900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffcec}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_GET_LAPIC(r10, 0x8400ae8e, &(0x7f0000000280))
ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000280)={0x0, 0x0, {[0x7, 0x2000000000000000, 0x3, 0x80000001, 0x1, 0xfffffffffffffffb, 0x7f, 0x6]}}) (async)
ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000280)={0x0, 0x0, {[0x7, 0x2000000000000000, 0x3, 0x80000001, 0x1, 0xfffffffffffffffb, 0x7f, 0x6]}})

2m9.555360839s ago: executing program 0 (id=20):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00')
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x5, 0x3, 0x0, 0x8}, {0x0, 0x3, 0x5, 0xe7}, {0x6d9, 0xa4, 0x69, 0x77}]}, 0x10)

2m9.494114092s ago: executing program 0 (id=22):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_macvtap\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}})
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000380)="0f01bf0f00660f38802f66b9800000c064660f6b1e000166350100000066b81f0000000f23c00f21f8663503000c4f42f8badbc7a0a037a9000f66b9a40b000066b8099d40c966ba000000000f3001d1ee0f20e066e10000fcc90f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x77}], 0x1, 0x69, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r6, 0xee01, 0x0)
keyctl$setperm(0x5, r6, 0x30925)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x303802, 0x0)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000000000/0x400000)=nil)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000540)="3ef30fbdfc0f015800520f01c366b99809000066b80000000066ba000000000f30ba4000eded640f195986ba4300b82600eff20f2b5957", 0x37}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="2b64657669636573202b68750400746c6220c26370756163637420ab91e2c1728ffccc09f40cc23fb20740f8928f3e40ec882f7ea0c11d5f529f1ebf681b8190ee71eebbc5a05ddb154be8d5757d19ceb282da27ab0d2c7ecb83ae2e531272b2cb796218a29261e2c552e270756e0174d6064ca8cbba1988fe5fae4b679d36dc7ae3590f6576d656f8ea3502ed21e66620933d75ca"], 0x1b)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)

2m9.470651095s ago: executing program 32 (id=22):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_macvtap\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}})
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000380)="0f01bf0f00660f38802f66b9800000c064660f6b1e000166350100000066b81f0000000f23c00f21f8663503000c4f42f8badbc7a0a037a9000f66b9a40b000066b8099d40c966ba000000000f3001d1ee0f20e066e10000fcc90f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x77}], 0x1, 0x69, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r6, 0xee01, 0x0)
keyctl$setperm(0x5, r6, 0x30925)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x303802, 0x0)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000000000/0x400000)=nil)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000540)="3ef30fbdfc0f015800520f01c366b99809000066b80000000066ba000000000f30ba4000eded640f195986ba4300b82600eff20f2b5957", 0x37}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="2b64657669636573202b68750400746c6220c26370756163637420ab91e2c1728ffccc09f40cc23fb20740f8928f3e40ec882f7ea0c11d5f529f1ebf681b8190ee71eebbc5a05ddb154be8d5757d19ceb282da27ab0d2c7ecb83ae2e531272b2cb796218a29261e2c552e270756e0174d6064ca8cbba1988fe5fae4b679d36dc7ae3590f6576d656f8ea3502ed21e66620933d75ca"], 0x1b)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)

1m23.431808728s ago: executing program 2 (id=415):
r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) (async, rerun: 32)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) (rerun: 32)
open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x18)
poll(&(0x7f0000000000)=[{r0, 0xd010}], 0x1, 0x9)

1m22.592129785s ago: executing program 2 (id=419):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x1, 0x20, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd}, {0x6, 0x24, 0x1a, 0x1000}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x2, 0x8001}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_usb_connect$uac2(0x5, 0xdc, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0xe, 0x50, 0xe, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x20, 0x2f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xcf6f, 0x7, 0x20, 0x3f}, [@extension_unit={0xd, 0x24, 0x9, 0x4, 0x0, 0x3, "ce091face783"}, @extension_unit={0xa, 0x24, 0x9, 0x5, 0x5, 0x2, "84cf53"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0xfc, 0x7, "9740"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}, @as_header={0x10, 0x24, 0x1, 0x2, 0x8, 0x3, 0x1, 0xfc, 0x5, 0xa}, @as_header={0x10, 0x24, 0x1, 0x86, 0xbc, 0x3, 0x2, 0xaf, 0x9, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0xb}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x55}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x5, 0x0, {0x8, 0x25, 0x1, 0x0, 0xf, 0x9, 0xfb62}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7d, 0x4, 0xed, 0x0, "7cc6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0xe, 0x4, {0x8, 0x25, 0x1, 0x82, 0x3f, 0x7, 0x2}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x2, 0x9, 0x4, 0x0, 0x1}, 0x6c, &(0x7f0000000300)={0x5, 0xf, 0x6c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x6, 0x8, 0xff, 0x6}, @generic={0x4c, 0x10, 0xb, "734b6ec9332b04ec6bae5e7befc52b61af5f34b208c7adefed997aa9c51e7eef20fc47493859891e9d37c01950006b48a65735f794b01bd3421ecd2401919836fa0036c9a312c1e411"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}, {0x2a, &(0x7f00000003c0)=@string={0x2a, 0x3, "22edbe7bcd60aa9c4e18a07cd34f6ec2cc6b500c5726b0a8f75d08154d457faba549d16021e5815d"}}, {0x7, &(0x7f0000000400)=@string={0x7, 0x3, "b558b8c76d"}}, {0x74, &(0x7f0000000480)=@string={0x74, 0x3, "52491320d3d8acde968e8a4c6a11e067a7dc6ad00283c0dfc40c91dec1cdce1b032183c0101228a78d2e7f718c478234acea1d958f3eb27734a1fec9015e0fb60a3904c9442e0e2dd93694a7511716c0dc78164833b1a34d5f3b91f784755d6b722304e9587e4df4189d63841a3ed63c670e"}}, {0xc8, &(0x7f0000000500)=@string={0xc8, 0x3, "1633701a8ca134e559b5571f4d974c42df466725965a0d36d88f2ec1e265c6ca53aeee3186367051c11329b7f6c32138b4efb59dc80600597e9864039d1c76ad6bdfd5ff024e7d7cc6f679d663eed9dfde8c1c83c34c54d34a3075fbe20f3ffd75633a0153493a4119943c486a49846c466d1bcbee6f556ac792b39745a0cf14f9f2ccb7184dff1fd8b66a5c2473ac5800664211dd2e25e4503260ef960f6561625d1909f9ac01884c17370c395b64a4d5bdb173d712a29ebddebc5d18bb65f5331bb89c8664"}}]})
syz_usb_control_io$uac2(r1, &(0x7f00000007c0)={0x14, &(0x7f0000000680)={0x40, 0x31, 0xaf, {0xaf, 0xc, "8251442815d736c401cac4558b5e03b07192e3dfbd39f2fa1198aa7426114c8aca3845ca1473793a6e77a8e8b0118582a61f30eec3cb7af40f48b3974587feea7e12b634a2079b859fa5dcf6635cab7f9e1db9b7772f0211c794d4ded38279c37550da294b58793901e41c9374b50d57f234bb9bccb06b1903794d2b4d5550afc738bf81a9ac65c00e71ee5daa1643c8003927da933e0167e838a4688eb65424778df3a288ac0397b1e8766c2f"}}, &(0x7f0000000740)={0x0, 0x3, 0x47, @string={0x47, 0x3, "413ea6db6beebdaaa659362fe6249e12375d644d00f1c5a820249811882be76a7d55adc2d35b52fbe178242c743f4263aef5e38e645575c37a43799b6442cf351249aee866"}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x0, 0x16, 0x1e, "e10586659ef7f77447902f0e979432abd0f24207c7858aa31a98f0e1713f"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x78}, &(0x7f0000000980)={0x20, 0x81, 0x2, "900f"}, &(0x7f00000009c0)={0x20, 0x82, 0x2, "1c52"}, &(0x7f0000000a00)={0x20, 0x83, 0x1, '.'}, &(0x7f0000000a40)={0x20, 0x84, 0x1, 'D'}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "717c1b"}})

1m21.133742063s ago: executing program 2 (id=433):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{0x400000b1, 0x0, 0x4}, {0x9a1, 0x0, 0x9}, {0xab9, 0x0, 0x9}]})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0)

1m21.051720099s ago: executing program 2 (id=435):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x1}, 0x9})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
prctl$PR_SET_SECUREBITS(0x1c, 0x1)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x10000)
mkdir(&(0x7f0000000100)='./bus\x00', 0x147)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x1}, 0x9}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x1) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x10000) (async)
mkdir(&(0x7f0000000100)='./bus\x00', 0x147) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) (async)

1m20.950234906s ago: executing program 2 (id=436):
r0 = socket(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00')
exit(0x1ff)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_clone(0x848080, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x33}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1m20.88923561s ago: executing program 2 (id=438):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xff86}], 0x20, 0x5405, 0x0, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='fusectl\x00', 0x10, 0x0)

1m20.814741145s ago: executing program 33 (id=438):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xff86}], 0x20, 0x5405, 0x0, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='fusectl\x00', 0x10, 0x0)

32.261680259s ago: executing program 5 (id=855):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x1000001c})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x0, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2020006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0xa, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x800041, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x1, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x100601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x8, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4000004, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x4, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0x5, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}], 0x1, 0xbff, 0x43, 0x0, 0xc, 0x6e})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r5)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

31.324090142s ago: executing program 5 (id=861):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)={0x2, 0x0, [{0x7, 0x1000, 0x4, 0xe, 0x1003}, {0x1, 0xf, 0x5, 0xb5, 0x6}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="640100004a0005181b01ccae"], 0x164}}, 0x40014)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, {0xa, 0x4e23, 0x2, @loopback, 0x9}, 0x1, {[0x3, 0xfffffffb, 0x3, 0x997, 0xffff, 0x3e, 0x0, 0x1]}}, 0x5c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0)
r7 = eventfd2(0x6, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0x8, 0x30000, 0x4, r7, 0x9})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

31.20220377s ago: executing program 5 (id=862):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xa4}}, 0x48040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4}]}]}]}, 0x38}}, 0x0)

31.20163311s ago: executing program 5 (id=863):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRESOCT], 0x0)

29.815042064s ago: executing program 5 (id=868):
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r3, @ANYRES32=r2, @ANYRES8=r3, @ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="fb5a2314fd8ed6011cbaf2faf1b4ae773e81c454dbc17f0e87dc68a4ccc60986e8348cae288c4c05e7da966e6b7dfd45763cab9505c0739b67471118e1f9b96755e151c3b20940cab4", @ANYBLOB="fb898b97e3ff36de3b12c81baec9ca030befa4c030818bf81ddfc800423a749fc7b64cc9de83e97941b50bbcb49bf82aebe11ddcab87ec0166bdb58bac7727b83f76db2670ab7557d507047fa0075ba8611cc15df9ed5a933a9f504578a267beaf5a142db0e22d156fe2f150fc87a2cab0cc66b6c1b785596d12eaf535944619f43eddc9c20c9ed7105ca12196f85800f1110f8c26382531af639b0471abc9f875e445cc2017f145211856b247776165cd0b52fad81232c5318ad238f1ae27", @ANYRESOCT, @ANYRES32], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
r4 = epoll_create(0x7)
r5 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x60000000})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x4})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x4)
write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x540)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000012000126000000000700074e23000000000000000000194b1cec000000000001000000fdffffff00000100"/56, @ANYRES32=0x0, @ANYBLOB="00000000ff7f00000700"], 0x4c}, 0x1, 0x0, 0x0, 0x20000193}, 0x40000)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf8, 0x2e, 0x400, 0x70bd28, 0x25dfdbfd, {0x16}, [@generic="7e7b9ba2bf30be530d38c041026fed58e02f564bc48289eed4345161ad62e2ae8a6f5b1c630ceb87f477eb8841", @generic="4c0e3b61d8fccb1285fa73df82d3d1cee1c8cc79bf28bcbadecf18724d2fc3c6179cfadf7facb7dbadded166e2dd4922f1236fb8a18bab0bb95264680908c59b7b6c60decef66e6aedcbfa98e523bc4b14b283ed4870b9baced0d0ca9fed2cb0edb8bb563f52ba6389b867023fadf8934b8abe71defa624fb255e87a06680ec0ee7425cc43e907c9bea2f47737816a84c96bc8c9c6681e6e8edf0be66c938c92c59308019b15aff80a3aab6458a2583bb623d8ab28b94b"]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004c}, 0x61)

29.674985153s ago: executing program 5 (id=872):
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@afid={'afid', 0x3d, 0x6}}], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@afid={'afid', 0x3d, 0x6}}], [], 0x6b}})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
dup(r3) (async)
r4 = dup(r3)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x3d13, 0x0) (async)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x3d13, 0x0)
openat2(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x8000, 0x8e}, 0x18)

14.581835314s ago: executing program 34 (id=872):
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@afid={'afid', 0x3d, 0x6}}], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@afid={'afid', 0x3d, 0x6}}], [], 0x6b}})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
dup(r3) (async)
r4 = dup(r3)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x3d13, 0x0) (async)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x3d13, 0x0)
openat2(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x8000, 0x8e}, 0x18)

3.661145063s ago: executing program 4 (id=1057):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'bridge_slave_0\x00', &(0x7f0000000140)=@ethtool_perm_addr})

3.613957125s ago: executing program 4 (id=1058):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e20, @local}})
sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000080)="0f21e324a4450895031d7ffaa8ebbec49a90b343f5075467a368929ac9bcb0a4333ac0be0a47ba227e2717874a5ed5493f448646a9601aa8ee5ff9d0cc6724a06743ffeefbe3f3d74bb739a027e2bd50b2e94ef2fc3e0dbab129b4f3cc17202e879dd38d947e340ec0cb73b5dcf46079ac1368222be8ff08d279492bbfc93aefa87e3d20a0aa1d7706ffc291ec759ba7825009e21e5ba88ec8aa0c1de998ab4aef5ce1572e8f5e7a5f5c002373ebce4d2818d70e2b6667501a6fd8301895feebd3e9dd982b3d49762fbb9c79c3b92a08cd5e8be9fa5d269e1d1b0d17b814f5b01f6c730086481b", 0xe7}, {&(0x7f0000000180)="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", 0xfd}, {&(0x7f0000000280)="fe7620f08b761aef41cea884876bd513beb975c687c001090a852959c6396dcb91d3fb13e5649ca595ea1746e32385b887c46629e0829430c496e030b78a2dee57ce8c2e19fc454c3ac352b25a8a1541e2dc60eb0ed5bbd836c1a6f4cea9b4349ff756b46729acaa1a71d13801d0080dc67eb76c2f347810d42cc2ba4c125eb1c81a56831dfcc53bc162093d49f0317c18022a6be52e67408538974be9a78e654a4637ea90fcaf4cd6", 0xa9}, {&(0x7f0000000340)="c3904792460adcecdcd3c5f3145397e3e19c24d6655da891e0b37e313b82bd4f", 0x20}, {&(0x7f0000000380)="afd410aa9323d4b013ef52c9d51dc9ededbf998b2a4f0b9ddaede360663f367b32544a621e6227", 0x27}, {&(0x7f00000003c0)="115f8acbbe7ee37440d41e725c7acd35bd5301c315c9f3c7e70ecc3b7ad2fc47705e07fee6c8d53632a44314b0d9d81735ec91a9e0a945fca969faffb84d7a3dc12760bc", 0x44}, {&(0x7f0000000440)="314a7e9132ade01f19bff306ced4a63b0510e381de3868b94cc10b6e06af88567288064647e993c2e0188e6cf5af93a05876bf4fa003d06e6d1f8b70281c4e7cb251a3385d81399012e93dc1cbd8635c7996a1015a2dea77df428033bf3c3d49a04817d1ed0c4eab5e9a960936590ba89633657b4605707d690a6d8999be1b694b3b52014308834e70c70aa624136a96412ab70ac76931eb3324640a18ce3e5f1d8e50a5c1a29cde638019f23d6c8ce9c6d5e04895159b28d8f3fd024fd9acbaa81b85cea0564e8f5e341bb1f76883b4a848d1d5b356a6004c77e762febef60d863adc5bdf7bdc9047e880672979f1856d000804cd867b91517e6c5093920934dee01ce7b36cdcbf2faa14dfdfdcf53281b41559bbf5ff7f1772f44025b67da4b126016ef7f928aa88f54592dadcc2470fe74f8e0748f29d48097254a6627b2474548aa4b33da9665884656e93aed4d540187b83baf2b1fe26f319f54cf9c6bb2a05c4bafda07a243a32f5dbbdd47e1f25003426a7a9e5856d048e64b2ea8eaba0ede7cca5f2b08aee3a436f59a2cbe1e703a88135bb19587a338157b983c432b198aed5068da5f24e3d61aefb4a4b576148fa36d329e22116facb0399ccd2d72ffec071444462715d3714c092966bf3c5840761a1664a62e3f618fd4d1b3fe91250dab1883188e18209c6cb22256dca1e31ceff30908fcce211be9e301667b11ff92a580f6b616975b2e5ac870ec55d7e40fe7e0fec1820d18f34e09d5dbf697255d387b635c2343c6b73b856efa9448cbff23ce8caf6701be6fc4379a2b1f979b42b643ee0210ad3349a1c354fa877cedd4e895d01b7e7277fe5218072d00620bfaaae309b12cbbe1af9e8c9f334cccb0e87a3f36659c6e545a0fb8a452af1a82c477b0f3a6bc59efc718313458be6215f3c88d076611daa79aa6b8ba81e7e338a3b06036f4c2c41b8f44d2f1ddf3dc952990903f0048435ce7020eb3894ec9f7919e74222d440bbac04015da575680a957a0676b5c2cc7ccac0ae7faeffb72f17854a6a25b4bb2aed9d3d10b8b28114c95ba21bb91dbc06e714df9a60858a596ed68fa2cc6ef34cfc03fc0abd002d86ff41bf6eaa94395c72b4348534c96d79030f9fd55d7c7755ed402c49211167b2442a86dd5c350eab24cd72774cfd307f681bd1b8c55a3e589b4d26bc6a281ff981b8f9ebba72738840852eaf3f838757eac502f539c1e6913c5fc4fd76a551bb351865a4301b293eb35b1f9e4697e5f2cd7d7e9d1c11e1bc2ad87ad74c8d3ad9f8ba4ec401d8b3cf105017e68e6aff3aab03f0c57adcb9a20fe83e195f7e5f97af0ef6f8b46e721f5aad4147f6d80a438e0c97a97d153fb72ba92df56a58baedd39fc09028a742454a10b6ebeb501556f2621ff92640b006bf3a1a504a90e7bad898bb06837d2feeab4456c1d4ea6319c39f622fc0ac6bf967960f2ae6b7e7d253a4aab885ee85ee17ff9dc8dd94302c46708504d01cf170713347cbf1288ef28164b00520c05f6d6dea8e48880b23b88df5b3b8653eb71872f0ef97e4161b614d684c6147913c4f17397d3c231b471823dac7654c23e7256eed0c3d749d01c75669d4ee0d599276c61dfc21bcdf18a68ebccf9a66655795b16bb10f478b24a5e5096649938c2cc7b86d511d894506ee055cf92ee50cace8692c86668e0638dc893461f17c610439873169b0e9659e1e415d3f920a802c8d184276347cc3a418ca3200fe0344fa85572634731f5b00e6344faefbfcee453eb6cd24fc77d27274927a33965a44ea2ab12ac5c26ec9c372f6de9b2a52afbee7e3f97474a012b4b5b3cca2523445e23a69888247bed25760ec3ae7cd8dc6aa32f2185d433d469fc5a64de73ac69c99bc311fb2f5cba857a578cbced5b9dbea4c0aabfa46fa0a1fed132f116dd521449f2c528a4f1d6f6f8a38dd0a19d03bdd385313443b3d51a24759e34872f986805adaa2724106e21604d6f53f316a84ae7fb6f3661e3324915cd1149a2bcf75117c6223e2fe0c780b8cc1b6c22ba3d2e4c814df2abb46a83f88a6fe47b3a05994ed6d98dbc5e9155d22a18b2a9ab363f241984b2fdf553b21d337a6016fad34bedfe838e1bdcc61b6719649cf1c10e400245dd2fe81005a35f8a08313b0d3afbd568fcdb3b266760d1e78823fad7314e6fa12f0442440cd607381ecd65098c5ce199524416b4cab5542c24a76206874fc0de4977deca079c02bffadcb1074d00bf443a9044894529c9128c6470e7a76a358f64b6ffd85b2632f3e33d25252e9c99690616cce315e23e38d755fd21a401aac353c7c70070442c22fe39690085629f538f1db21d06d7de9b8dee7188feaf6f18d226d646994d4976987fb5ff2c9f21c69453bef2957dd1f5284cc0069878e836c51bbc71528d959f50e180abce022fc02921b4dd78ec063636e6394d7877e03da7ad55063ebddb38c767a38f445d9b95f956decbe6ee2af90064168d405c96f4b99472949f0079b7bfc9263a83cacb992aef088c607483a559ab1f9bc80982782153442b89e529653d974bb0e774e6d2b7ba12e8adfeca2d0c07fe1d0c552e75c0c59bd2ef0c41f75c2497a6462f95434180a9d48a05ff57aaea8c8feba0ec2c167a57b1b06c72e0b5b5ca25265a15583bb0dddc74925590eda5d250111d0ad9005d50de1e513d6af30c89418fc7a8434b7843b435f642efd17b02456b2881b0d953419676f3224379f19adb528a627104018380cc1394c63385cb53adc16fcc8648b36f94944f14e63f2a222ae27bad6f6a1d83784b212360027e9459a18750f46ce589e7ad51a46abe15c1a58e259a54dbbdb3279f0b4a9cba8e4bda3c590acc5b3a01050cab3c42b3211dee5812c932e9754a1547dc9523d2735368d05c198bc6a36300690ef389d4e5252516d05bf5edb1e5816c1f4227e74271e01b9e7b95a5af669abb32448d22f2c168fa43a1f3dc9251fe5615a6845de595e6487572732990bf77d9900788d5e7c78bb109d8f751a0cf128253fb14a08cfb6385fb445c7e04eab27bca646e52af6eacf2a65d1d17022b83628d52126503108140a5e1bb1a424b4048a64dbc92725f462a7cbc412dec86b04005bea7eae942459819d73803e9eeb70f17880368aaf9e0472a75d3432bd941d2cd266ae360ce23d5a5cf65367a8dc7947e2f5cc90303f6e8f5067eb689ec61c638ef82dc4714711496f7b13b1256f0611593ba42b9aaeafc02ed5e7b5ddf8ee6f1c38902b9c986c69ed7e4ff5ad7d7bad72d76a47e31558890753b40a42c5f169f35d9c3125dad154477f94ae3e0935ca4d6b9cb6696df7ba187c274719654b5b432b8a3b0432e0fff0d4676612162681dc56fba886960b1d1a0517bb601340b8ef9a2a861bfc10e393b2c4b7d3aa44be79192506164705a58b2fe6f56a2d98c98d66c5c6fbbb3db787712b8e9f127d569d986ba0b59302693f77264fedc514f90513849125e0022469336a8ef9cf33320cb6472000f9c6ae0458815e05e710c9ff52dd5b8bc06eb102ac334214a2a8f4dc022f424e085dc18e147a8eab0841a845f9a6f0e6e2c88a9de69b04cf0ef9409a2e12db799aee395ab0944cbee6a953749198596677c5ab8893611eaf263cdfbe802a334e4abf273fe41f272d31308de472ff548d7d2ece994e220da9bc9b0baf9e3ff94c7dbc2afa953a70e1b7f9ea74191381730c328867de30c857692fff1f6f5d9b1ae9b30c921e6cbc076793f0d31a7d31df149bccb6d7704eeb66a32ff18ce87cd96d6915a2f28de210e96c39e1f78e4d241801ec5fe68add5e16e0bc126096f1dd8b6077d6c43b50ad8574d7bfe276c4ff191b5990721031476b5f14719372000ae1f1a0b4de4d768021f572e356be17d738597af4cb39cf092da4b70fe47dd3455bebd483d31d55fb4aca7e150353604b6213bcdc40b99f43af92a6840f20cbe4498a944fafc46470d40f542b19dca600d21b8bacdaef32372ed721d3aa1b48f76ae96c09bcc61eb2cc530f466cb637158ba41c1e924bc804a6791282b0022f94fc0d7f3585b6c1d3c6202904dd62b0405dc72ca60d4660dfe8c853261844ad3022cc615d4f930ec046d94c38b09bfa338653a18be2141939821506c83e626146379ea3206ae1b213ddd0978d8dbe0e57aac2b19537a0ccec45b4baa47dadf7ba1cd21969862da442aa7124e89c9c9a24be8a504c3e2b4e66d406512dba8bfd5a0b37355fa72d714587234eaf9b1a8dfc1ac4845278962021c4e06e8c095dd55edcdee5aadbc1a4fda2f7321dd4ab788f83127246ae62bc6878a1671680a308f44dcc5233028fa66457a898b908a046ace76df3c7b93dbe34a3061b0a7239dca0c6811fe42d38f41948f7d773b106a708661cec193cffdac05ac02f1175ae0440734c33319921f7d0464fbf0b29a1e9125c87aa66d08986cfcc06bb5716b9dc4a2e9621dd3a5a0546893b3de4bf72aa25f5ce54f4be6d4334fc2597cc62e3e944f3ae9385aa09414b6910f978c792efdf750537f142778b6faee97f36cc860a8c14d5bc47d0a78283e53028d3b7ff2103eda439f89a4e850e72a991944637b684d8cb1d6fb8fa32b5fac4d96cabeb6a11f6d7ed0ccff619d7e8b614db9818f3fb662f6776e05ba60a8dfec1651a5681ed60c93dcc35b81fbade5f0992b3c68903effbe93681ff0f42dc4f604a8d45a3220fa75cc54434d711c36c1a2b2b09ab279d8722d21430bde02916ea72c9891115fa4176eb1dfd4221beff07bcf0854c03f33b9fc03691fa258bd8d63265d6fa6753302973ea3865a663ecd3ce2cf586329cf0d6592b35fa5adf2031d434bdbaaf66b942fccc6d91341eab0fe800076a150e61d711badd1f0f870c6b03829af974e90fcc25d1730ee8c57b93aa7bf727ebecf43abca7044a518fd8ed5d987dc76753407cca8e30876a4c39564118652f44d04e02888ca80ecbe7bee1412f406b3cd77956ff84d233b5ca008d18ce0c32a1af99f857ee8209f6a78043a199a6709dbd18c59e17ac47ecbf47a23f1311109ec07933c3f9d9fbc92c0347a62f4dea478e3f472761d066e4482e7d1ad58a9fae59440603f2b5795e35111cb545b906c5ec21da9a69355182c097a2f4cf9fe8edf4dfeb51acc1fbe418f01ddc686914cf1566814e23f3f972c6f3ee56d66dca4733a6642b03919cbd4ffba6dc6f72a16da08fb89097e9699d61fb2aa30e115d8131859e7034c086da2cf61ec0eea80fd031fb7a1310949e7acfb71de1b287da6cc11c406547c94354378487bc4b65098372965a0b462dd316574b2f041775c7f5fd751eb624937610a58a1e15b3c38a25132443c1f6cfdd0bf07f8b442519845eea6aff0008c61d9cc6c47955abbdeba7a7e78b3ace79f1b8e027b60f28a3338473795f954699302d1ce81b5a3e3515fe43fa72cd127fe76e73be978ddee5d1c212abaf0021948660a9229a2805409c96854751d6f90b8d621449ecb4ce39b46cf55398baf60f40de8081fdbd4a518c48b732ab2109cc7cd9432283d1a2f16d03caff9c034e3235d6c1263d7c9c798fdaef8f6ba85fdaa3602a6926d1e51a9a3ef5c261cdc055c992b34b6df42d1f2657c2a770bb6d77e245d933b20f463bab030bd1bcb1a50aba2952a5ea83b7acef2d9cea902b9ead6fa6400b52b4b1d198a67449f085404087b336892063c2d1252daf3f71ea23b6c795bbb5731f1d1dd99986ea36fe9e15de64175c830ede1e8d6e6eb790d17316aee218596ef54cd2a9d89ce2a3323f19ca8190cd85", 0x1000}], 0x7, &(0x7f00000014c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x30}, 0x4008000)
r1 = socket$netlink(0x10, 0x3, 0x7)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x30, r2, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x41d4a19f, 0x3109, 0xffffffff, 0x1000}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x10)
clock_gettime(0x0, &(0x7f0000002d40)={<r3=>0x0, <r4=>0x0})
recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000001680)=@pppol2tpv3={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/106, 0x6a}, 0x8}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000017c0)=""/53, 0x35}, {&(0x7f0000001800)=""/135, 0x87}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/97, 0x61}, {&(0x7f0000002940)=""/116, 0x74}, {&(0x7f00000029c0)=""/86, 0x56}], 0x6, &(0x7f0000002ac0)=""/165, 0xa5}, 0x10000}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002b80)=""/10, 0xa}], 0x1, &(0x7f0000002c00)=""/70, 0x46}, 0x2}], 0x3, 0x2000, &(0x7f0000002d80)={r3, r4+60000000})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000002dc0)=0x2, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x10, 0x4)
clock_getres(0x3, &(0x7f0000002e00))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000002e40), 0x8000, 0x0)
setxattr$security_selinux(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), &(0x7f0000002f00)='system_u:object_r:semanage_read_lock_t:s0\x00', 0x2a, 0x3)
clock_nanosleep(0x1, 0x0, &(0x7f0000002f40)={0x77359400}, &(0x7f0000002f80))
llistxattr(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)=""/226, 0xe2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003100), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1d)
utimes(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={{0x77359400}, {0x77359400}})
ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f00000031c0))
rt_sigtimedwait(&(0x7f00000032c0)={[0x4]}, &(0x7f0000003300), &(0x7f0000003380), 0x8)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000033c0), 0x56000, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000003400)={'bond_slave_1\x00'})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000003740)={'ip6tnl0\x00', &(0x7f0000003440)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x9, 0x2, 0x8, 0x7fff, 0xa645, 0x9, 0x2, 0x8, 0x6, 0xa, 0x4, 0x9, 0x3, 0x9407, 0x8001, 0x3, 0x8, 0x0, 0x3ff, 0x80b, 0x10000, 0x8, 0x5, 0x401, 0x3, 0x8, 0x4, 0x6, 0x7fffffff, 0x2, 0x0, 0x8, 0x6, 0x5, 0xa0000, 0x4, 0x7, 0x0, 0x2, 0x7ff, 0x1, 0x63, 0xfff, 0x7, 0x4, 0xeb, 0x4, 0x0, 0x4, 0x1, 0xc, 0x2, 0x0, 0x1c6f, 0x2, 0xfff, 0xffffff44, 0xa, 0x800, 0x9, 0x5, 0x9, 0x2, 0x0, 0x1, 0xc7a, 0x6, 0x1, 0xa, 0x7, 0x11, 0x6, 0x2ea, 0x200, 0x4, 0x4, 0x6, 0x3, 0xd1, 0x0, 0xd83, 0x0, 0x6b, 0x6, 0x4439efed, 0x401, 0x7fff, 0x0, 0x6, 0x7, 0x2, 0x200, 0x2, 0x0, 0x0, 0x9, 0xe, 0xbf, 0x8, 0x101, 0x2, 0x6, 0x1825600, 0xfffeffff, 0x80, 0xc82, 0x7fff, 0x9, 0x6, 0x7, 0x5, 0x7fffffff, 0x400, 0x6, 0x2, 0x1, 0x1, 0x3199, 0x5, 0x400, 0xe, 0xab, 0x4, 0x4, 0x5, 0x99, 0x101], "f088eb35d11d52873117ed96cc7e847d3ba9b79e227e5597f9bce9407019c515c427d3ac389645d31e6cd089fab28b51d7fbcec8a69b5a43215b77feb5da2bfaa9ddc4ed3d99ff5f9e032643f97a00cc96f40d3e9fcd7e3bd03a384091e62d818794731d5e1ce571cd2a80bc721c44dabbdccf7768afe2d12481aff856a83c699dcd657514a89d68522b615634ee21ef91803e1582b3899bc8dde66678edd0461a5e00aa21e6448f4a1028a82e1763dda67b8e6c89368b5e4da6be63925096a099db13c82fa0"}})
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x24, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x48}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000003900), 0x111400, 0x0)
r11 = getuid()
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003940)=<r12=>0x0)
mount$9p_fd(0x0, &(0x7f0000003880)='./file0\x00', &(0x7f00000038c0), 0x2000000, &(0x7f0000003980)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_user}, {@afid={'afid', 0x3d, 0x36}}, {@noxattr}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, '!*!>}'}}], [{@uid_eq={'uid', 0x3d, r11}}, {@uid_gt}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6erspan0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',[!$\'!{'}}, {@pcr={'pcr', 0x3d, 0x27}}, {@subj_user}, {@uid_gt={'uid>', r12}}, {@fsname={'fsname', 0x3d, '\x00'}}]}})

2.760824823s ago: executing program 4 (id=1059):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000)
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000)

2.66629026s ago: executing program 4 (id=1060):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
pipe2(&(0x7f0000001cc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001b00), 0x400, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x2204803, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d72656164e8f72961686561642c63616368653d30"])
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
dup3(r5, r0, 0x80000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async)
pipe2(&(0x7f0000001cc0), 0x800) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000001b00), 0x400, 0x0) (async)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x2204803, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d72656164e8f72961686561642c63616368653d30"]) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) (async)
syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) (async)
dup3(r5, r0, 0x80000) (async)

2.597091424s ago: executing program 4 (id=1061):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "193c434c8370fe93", "c52eee4199babfc0f8fc09b69a8d0f00005e35dca46a0ca7096be938ffc600", "715d70a4", "a66abe38fdd95990"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e100dc40030450f846a48502000109021200010000f00009047bc105271a3e87cf6c2d0e401b467bb938e6591041ddc26a"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000057c0)='./file0\x00', 0x11)
lsetxattr$system_posix_acl(&(0x7f0000005b80)='./file0\x00', &(0x7f0000005bc0)='system.posix_acl_access\x00', &(0x7f0000005c80)={{}, {0x1, 0x1}, [{}], {}, [], {}, {0x20, 0x6}}, 0x2c, 0x3)
chmod(&(0x7f0000005e80)='./file0\x00', 0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff004)
close_range(r0, 0xffffffffffffffff, 0x0)

1.574353234s ago: executing program 1 (id=1065):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b803a"], 0x24}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x40, 0x4)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

1.573986104s ago: executing program 1 (id=1066):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001700)={0x2020}, 0x2020)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x800000000000001})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1d}, @ptr={0x70742a85, 0x0, 0x0, 0xf0, 0x0, 0x26}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x36}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000bc0)=ANY=[@ANYBLOB="121110030b000020630701204000010203010902700003010f207f0904000000010100000a240102000a0002010209040100000102000009040101010102000009240201010007040007240197050300090501094000"], &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001000010002000000fedbdf250c0000000700000000000000040011800c00100004"], 0x2c}], 0x1}, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x80, 0xfe, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0xe, 0x1, {0x22, 0x464}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x8, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf9, 0x2, 0x9e}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xc, 0x2e, 0x4, 0x8, 0x4}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xb5, "ec39baed736f3909927ea580f840538f"}]}, 0x3, [{0x3c, &(0x7f00000000c0)=@string={0x3c, 0x3, "8ee1b6b83ca5cea14645225881258c039d360004130dbce15f1414650e48dd4b2aff3235ede0e54725a79f0b1159f0f9789a28ca0ff983453949"}}, {0x47, &(0x7f0000000100)=@string={0x47, 0x3, "66a9b343423e0837a09ee318bf4519a37f199a58f56e387a28dec21b4b30e2b11fd364b99d1cdaf23243e7036cd2989e372509a0b3921978c1b9acb7c2a898dba964b8b5e1"}}, {0x58, &(0x7f0000000180)=@string={0x58, 0x3, "f8feb0dda0cf03b4e1b879415936ebbd0a50fd9985e7d2176a3dcc6ab2ba00449f472f4dceff56eb8d443b674a7b2246ff99accc182b43405a2116b068d1702db7f37b9061b45fc80bae05952036514cf791223a3b0f"}}]})
syz_usb_control_io$hid(r5, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x0, 0x10, 0xea, {0xea, 0x10, "1f3ca92440e78d242b52a5e5f492cfd36e6d6b64b70ad2a929db9709fb331c3591c847d46e0ed32c28831f5f0f4ef487a31d7a3da131f918173fe2c474fb37e13e393c598c9cb99525869ce085e7618382e1a8b731e11b20ab5a61e23b40aa0a16203a9913c8cc87c884f6d5934380b35a2bc1fe58e8b08a845d3e3ac0be29cc41df9ddbee29f97b51a79bffaf37784698e6a992c9dc4d8adaa2cbc4adf0d232558169a2848421a80d0186f99fc12eaaab3f1b3a9e3152f130b11a906cf25b23e767dea3a9426459b569159eb96b46ea370a4803ff2b6eb632467c38aed93d62d29b026ea6c33b29"}}, &(0x7f0000000640)={0x0, 0x3, 0xee, @string={0xee, 0x3, "bbd1cd5de59f80e9daae329a9d70816435c73dd9cd8e728baa5367eb4055bde20bed25060148396f6d9c2032d7707842ed4382fb550f92f79b7306018d7223a3df8df286bd099bea530e267cf4257817c64fdbb8841eaf9f3b539d6a87b66a02c7cb2eaeb615a3bcd822842a0182bb142536aebf58f76ba915808f1fb9a55da184dd5b58cd77fe6e47fee5d5117e676005b2d9f98fb5d0e948bc8c8415c7ee35e244df395e5e6ff92d5541dbe1e3425c7303e5c6b8abdc7b61f0fa46089fe5f71978a968a47793365d1bc1e6425b6c400c30927703db29ec865607f4c13bd187def0c2ce3e79790769cdfa94"}}, &(0x7f00000003c0)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x3, "e98db602"}, @global=@item_012={0x2, 0x1, 0x6, "0001"}, @main=@item_4={0x3, 0x0, 0x8, "400920fa"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x1, "6085a24b"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xfa, 0x1, {0x22, 0xc6}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0x5, "9971a34908"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x99}, &(0x7f0000000540)={0x20, 0x1, 0x45, "74a2c25f93c423c6088f64577ce698c3a7abbb25bf8b26c1cb124341484403348a72185a30b44bfd4b721e112f88a105fb7e9c75a840b8d5e73658a26cf3d7beda1c77ec28"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xd2}})

1.323415621s ago: executing program 6 (id=1073):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setresgid(0xee00, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', &(0x7f0000002680), 0x2000)

1.322367811s ago: executing program 6 (id=1074):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x170}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
sendto(r0, &(0x7f0000000000)="7e0771bb673c8394c617f77399493b49018fa24ed09e0359a533fe6c6ac21126c8201eef568d81e2c7608e310bb3a13f2684d8082d3a8b2ffa97da160f5dc875643da664e9c63c29f699d261d1d72bb4558ccae272153c789f408c7cb1609998fcb34c3bd89ef02fb3baa091e5d96bd05004602d26f8a28e721ae85b3ff5c124d3fa9c87fed20da5b48bc804", 0x8c, 0x40010, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x2, 0xcf5}}, 0x80)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x11a, 0x4, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000021c0)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0xffff, {0xf, 0x6, "db02a9", 0xfffe, 0x2b, 0x1, @private0, @local, [], "9be868efb35ec398"}}}}}}}}, 0x72)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
sendto$packet(r1, &(0x7f0000001fc0)="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", 0x1000, 0xc840, &(0x7f0000002fc0)={0x11, 0xf6, 0x0, 0x1, 0x2}, 0x14)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x170}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async)
creat(&(0x7f0000000000)='./bus\x00', 0x0) (async)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async)
sendto(r0, &(0x7f0000000000)="7e0771bb673c8394c617f77399493b49018fa24ed09e0359a533fe6c6ac21126c8201eef568d81e2c7608e310bb3a13f2684d8082d3a8b2ffa97da160f5dc875643da664e9c63c29f699d261d1d72bb4558ccae272153c789f408c7cb1609998fcb34c3bd89ef02fb3baa091e5d96bd05004602d26f8a28e721ae85b3ff5c124d3fa9c87fed20da5b48bc804", 0x8c, 0x40010, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x2, 0xcf5}}, 0x80) (async)
socket(0x10, 0x803, 0x0) (async)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x11a, 0x4, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
dup(r4) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r2, &(0x7f00000021c0)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0xffff, {0xf, 0x6, "db02a9", 0xfffe, 0x2b, 0x1, @private0, @local, [], "9be868efb35ec398"}}}}}}}}, 0x72) (async)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
sendto$packet(r1, &(0x7f0000001fc0)="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", 0x1000, 0xc840, &(0x7f0000002fc0)={0x11, 0xf6, 0x0, 0x1, 0x2}, 0x14) (async)

1.18101366s ago: executing program 4 (id=1076):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$incfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async)
syz_usb_connect$uac1(0x1, 0x9a, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000140)={0x48, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x41e}}, {0x0, &(0x7f0000000080)=@string={0x0, 0x3, "11f061bb43fbd8f0e59ba0662658802be519ef2559c6cfdc417ab26f7916b9d2cad915e4bd45612eefb65fd1dc6e8095b92d791e020bac751a9675ff33e8d544a46c30c4d9c85c480a19ed6add59ca07b13e1f6b73ddc1317b81283f007d1d257d31e80e851662b31ed6bfb5687c047055c8aaaf6ccb6de91e53281a556c40a652cc3beb04bd318105dfdb46fcc0bc1cac711501a190a5fe"}}]})

1.156586692s ago: executing program 6 (id=1077):
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x80)
ioctl$RTC_SET_TIME(r0, 0x40187014, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x28, 0x19, 0x229, 0x0, 0x25dfdbfd, {0xff}, [@typed={0x8, 0x800, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x8}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@multicast1}]}, 0x28}}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100))
ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x0, "6fb6dd728772ea6a84fd4e0a3b6453af52381e1f7c7486410b3b0a2f2055e1d616da58744c503dcb4b4aa2de0114418d0749140df9b97dd76fdacf9919a1fbf9"})
ioctl$RTC_AIE_OFF(r0, 0x7002)

1.094241526s ago: executing program 6 (id=1078):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0)

1.092759066s ago: executing program 6 (id=1079):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000)
ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000)

1.078997987s ago: executing program 6 (id=1080):
syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be5406d04230848390102030109025200010000000009044000000e0400070003"], 0x0) (async)
syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be5406d04230848390102030109025200010000000009044000000e0400070003"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x800})

1.04364498s ago: executing program 1 (id=1081):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc2200, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400"], 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4)
readlink(&(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)=""/164, 0xa4)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000240)=0xc500225)
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1, 0x6, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x90, 0x5, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0xc9c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x1, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x1, 0x8}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x10, 0x4, 0x4, 0x8, 0x8}, 0x1b3, &(0x7f0000000580)={0x5, 0xf, 0x1b3, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "90aaae75c409039fc1c405e972e25633"}, @generic={0xf7, 0x10, 0x1, "402a144da191dae61ce95309926f1dedc9c1a147ac4314a345084a55106e2c18a0d953ee1a4baca705df83fa3f0e9578de52084a9a8eb00f9ae9afa9ee43b4c9163b85ab6aa6072ce5a5a6044fbe9cf69b95267788e0b531617db99d910691e0c8e12cf38b608094c02e4a4c75fa86d00f37b43dc4aea45b1361232562297dc6e2e2627f6179ec70d21367b8404c21e3d2cf3ef28b6f954a4e216ecd62fc684145436f1560c09038b78cb239c1c2d1fb297a52c71217d8ab496ce9d23262f0b64d29cb5060a7465f646a3ce6be9af392e537bd52430b25c7376b49b4511fc8b1a4c642a9038ccc26d84d34872da2e64930a6f619"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0xff}, @generic={0x85, 0x10, 0x1, "dc29ddabf3b5ec11f2eb23675339f9f5b830ad855dd7c6a0ab261d26d675fb8b94e71771d7bd4141e4f4b2ba28b91a033ef1e479d64b2cb86e93ca78d833bbf0a4aba0623dcd5d94ef7da2018dad866b0d8913de5ddf03e45e2b66bf699fa42e6024ab6c1b4cf928c91914cb639472f79a42fc8fdd5adb80f424e27a8a5b8b16c810"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "7a9638301239c49caa0a0b6e04843024"}]}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x616}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x43f}}, {0x1d, &(0x7f00000007c0)=@string={0x1d, 0x3, "139999a6a2c3e341168f832e33b6d7d2e9f5286195baaac05e324f"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x438}}]})
listen(r4, 0x5)
writev(r3, &(0x7f0000000380)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebcf83f661b0000008000f0fffeffe809005300fff5dd000000100001000a0c100000000200ff333020", 0x58}], 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
fgetxattr(r0, &(0x7f0000000440)=@known='system.sockprotoname\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4)
r8 = fcntl$dupfd(r7, 0x406, r7)
write$P9_RLOCK(r8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900"}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

518.342605ms ago: executing program 1 (id=1086):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x11, r0, 0xe1048000)
madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000002680)={0x20, 0x14, 0x9, 0x2, 0x25dfdbfc, {0x8}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x890}, 0x4000)

447.72734ms ago: executing program 1 (id=1089):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05}]})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(r1, r0, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

437.89443ms ago: executing program 1 (id=1090):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mlock(&(0x7f0000003000/0x4000)=nil, 0x4000)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

398.993653ms ago: executing program 3 (id=1091):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x2}, 0x20)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0xf0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x1)
llistxattr(&(0x7f00000010c0)='./file0\x00', &(0x7f0000000140)=""/27, 0x1b)
getsockopt$inet6_int(r1, 0x29, 0x38, 0x0, &(0x7f0000000380))
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2)
getsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f0000000400))
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x2}, 0x20) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
creat(&(0x7f0000000180)='./file0\x00', 0xf0) (async)
lsetxattr$trusted_overlay_upper(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x1) (async)
llistxattr(&(0x7f00000010c0)='./file0\x00', &(0x7f0000000140)=""/27, 0x1b) (async)
getsockopt$inet6_int(r1, 0x29, 0x38, 0x0, &(0x7f0000000380)) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) (async)
getsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000100), &(0x7f00000001c0)=0x4) (async)
getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, &(0x7f0000000400)) (async)

306.39506ms ago: executing program 3 (id=1092):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10)
close(r0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10)

305.050339ms ago: executing program 3 (id=1093):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="59e5000000000000d2ff00000000000004000000", @ANYRES32=r0])
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
msync(&(0x7f000066d000/0x2000)=nil, 0x2000, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x7fffffff, 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x0, 0x11f)
write$vga_arbiter(r3, &(0x7f0000000000)=@unlock_all, 0xb)
syz_io_uring_setup(0x24e5, &(0x7f0000003400)={0x0, 0x7, 0x4, 0x0, 0x1d3}, &(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000000000))
r4 = accept(r3, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80)
setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000001c0)=0x26, 0x4)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="59e5000000000000d2ff00000000000004000000", @ANYRES32=r0]) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
msync(&(0x7f000066d000/0x2000)=nil, 0x2000, 0x6) (async)
socket$packet(0x11, 0x2, 0x300) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x7fffffff, 0x4) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x0, 0x11f) (async)
write$vga_arbiter(r3, &(0x7f0000000000)=@unlock_all, 0xb) (async)
syz_io_uring_setup(0x24e5, &(0x7f0000003400)={0x0, 0x7, 0x4, 0x0, 0x1d3}, &(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000000000)) (async)
accept(r3, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80) (async)
setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000001c0)=0x26, 0x4) (async)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) (async)

303.96126ms ago: executing program 3 (id=1094):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x1000001c})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0x101, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x9, 0xf9a5, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0x2, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x2, 0x2, 0x809, 0x2, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0xf, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x1ff, 0x7, 0xf1, 0x6, 0x1, 0x3, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000002, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x106, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d25, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x3f, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x5, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x6, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x9, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x4, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0x5, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000}], 0x1, 0xbff, 0x43, 0x0, 0xc, 0x6e})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000580)={0x20, 0x5, 0x7})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x3, 0x11, 0x100, 0x7ff, 0x400, 0x1, 0xc, 0xfffffffffffffe00, 0xffffffff, 0x100000000, 0x9, 0xbab2, 0x6d0c315, 0x80000004, 0xeede], 0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x0, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r12, 0x12, 0x3, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

90.024454ms ago: executing program 3 (id=1095):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x389c83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000)
ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000240))
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
mprotect(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x7)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000840)
chdir(&(0x7f00000001c0)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x34927e, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0)
r8 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1000002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
sendfile(r8, r7, 0x0, 0xbc44)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=1096):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x170}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20008040)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

kernel console output (not intermixed with test programs):

ysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  429.344996][ T2130] random: crng reseeded on system resumption
[  429.445008][  T595] logitech-djreceiver 0003:046D:C534.000F: unknown main item tag 0x2
[  429.453253][  T595] logitech-djreceiver 0003:046D:C534.000F: item fetching failed at offset 3/5
[  429.462616][  T595] logitech-djreceiver 0003:046D:C534.000F: logi_dj_probe: parse failed
[  429.471280][  T595] logitech-djreceiver 0003:046D:C534.000F: probe with driver logitech-djreceiver failed with error -22
[  429.662984][   T36] audit: type=1400 audit(1775829088.401:493): avc:  denied  { create } for  pid=2137 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  429.684324][   T36] audit: type=1400 audit(1775829088.401:494): avc:  granted  { setsecparam } for  pid=2137 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  429.691486][  T307] usb 2-1: USB disconnect, device number 41
[  429.704281][   T36] audit: type=1400 audit(1775829088.401:495): avc:  denied  { ioctl } for  pid=2137 comm="syz.3.577" path="socket:[21095]" dev="sockfs" ino=21095 ioctlcmd=0x6e86 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  429.742122][  T306] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  429.872121][  T306] usb 6-1: device descriptor read/64, error -71
[  429.963139][ T2149] netlink: 'syz.4.580': attribute type 63 has an invalid length.
[  429.971638][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  429.981547][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  429.989510][ T2149] netlink: 5 bytes leftover after parsing attributes in process `syz.4.580'.
[  429.998758][ T2149] gretap0: entered allmulticast mode
[  430.004533][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.012641][ T2149] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  430.013581][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.036865][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.044415][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.052067][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.059618][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.067865][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.075404][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.083080][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.091042][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.099124][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.106685][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.114563][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.122153][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.130166][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.137709][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.145678][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.153317][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.162454][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.170017][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.177956][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.185857][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.194068][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.201544][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.209140][   T66] tipc: Node number set to 1
[  430.214491][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.222599][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.230476][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.253411][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.271072][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.291025][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.299491][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.307537][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.315549][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.323405][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.330989][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.348650][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.362125][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.374743][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.388466][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.396311][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.404108][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.411744][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.419529][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.427535][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.435344][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.443389][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.451120][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.459248][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.467786][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.475688][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.483787][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.491525][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.499805][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.508563][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.512277][  T306] usb 6-1: device descriptor read/64, error -71
[  430.518130][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.530111][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.537840][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.545751][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.553489][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.561136][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.569238][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.577091][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.584794][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.592647][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.600591][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.608654][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.616630][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.624587][  T327] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  430.632718][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.640571][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.648813][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.666588][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.682996][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.690749][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.698609][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.706612][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.714570][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.722329][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.729759][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.737435][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.745041][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.752706][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.760133][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.767721][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.775248][  T306] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  430.775271][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.775327][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.799320][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.807047][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.814732][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.822429][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.830390][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.837982][  T327] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  430.847133][  T327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.855269][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.863197][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.870848][  T327] usb 2-1: config 0 descriptor??
[  430.876023][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.883533][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.891606][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.899162][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.906658][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.914337][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.922087][  T306] usb 6-1: device descriptor read/64, error -71
[  430.922722][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.936865][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.944591][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.952329][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.961497][  T307] hid-generic 0FED:0800:0004.0010: unknown main item tag 0x0
[  430.970051][  T307] hid-generic 0FED:0800:0004.0010: hidraw0: <UNKNOWN> HID vffffff.fa Device [syz1] on syz1
[  430.999863][ T2163] fido_id[2163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  431.059673][ T2167] netlink: 188 bytes leftover after parsing attributes in process `syz.3.584'.
[  431.070799][ T2167] SELinux:  policydb magic number 0xfff does not match expected magic number 0xf97cff8c
[  431.080763][ T2167] SELinux: failed to load policy
[  431.115773][ T1651] Bluetooth: hci0: Frame reassembly failed (-84)
[  431.167454][   T36] audit: type=1400 audit(1775829089.901:496): avc:  denied  { watch_reads } for  pid=2169 comm="syz.3.586" path="/233" dev="tmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  431.190131][  T306] usb 6-1: device descriptor read/64, error -71
[  431.302298][  T306] usb usb6-port1: attempt power cycle
[  431.600734][  T327] usb 2-1: Cannot read MAC address
[  431.606675][  T327] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  431.622090][  T327] usb 2-1: USB disconnect, device number 42
[  431.642332][  T306] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  431.663425][  T306] usb 6-1: device descriptor read/8, error -71
[  431.793406][  T306] usb 6-1: device descriptor read/8, error -71
[  431.962098][  T327] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  432.032175][  T306] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  432.053368][  T306] usb 6-1: device descriptor read/8, error -71
[  432.112113][  T327] usb 2-1: Using ep0 maxpacket: 32
[  432.118725][  T327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  432.129219][  T327] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  432.139880][  T327] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[  432.149082][  T327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.157458][  T327] usb 2-1: Product: syz
[  432.161663][  T327] usb 2-1: Manufacturer: syz
[  432.166330][  T327] usb 2-1: SerialNumber: syz
[  432.193234][  T306] usb 6-1: device descriptor read/8, error -71
[  432.302354][  T306] usb usb6-port1: unable to enumerate USB device
[  432.377598][  T327] usb 2-1: 1:1 : bogus bTerminalLink 10
[  432.389618][  T327] usb 2-1: USB disconnect, device number 43
[  432.404104][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  432.622108][  T595] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  432.782094][  T595] usb 5-1: Using ep0 maxpacket: 32
[  432.788695][  T595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.800339][  T595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.811066][  T595] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  432.820514][  T595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.830533][  T595] usb 5-1: config 0 descriptor??
[  432.844938][  T595] hub 5-1:0.0: USB hub found
[  432.922911][ T2190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2190 comm=syz.1.593
[  432.985700][ T2192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[  433.043374][  T595] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  433.174698][   T36] audit: type=1326 audit(1775829091.911:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f104899c819 code=0x0
[  433.182523][   T55] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  433.203835][  T467] Bluetooth: hci0: command 0x1003 tx timeout
[  433.227307][   T36] audit: type=1326 audit(1775829091.961:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.254383][   T36] audit: type=1326 audit(1775829091.981:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.279687][   T36] audit: type=1326 audit(1775829091.981:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.304373][   T36] audit: type=1326 audit(1775829091.981:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.328929][   T36] audit: type=1326 audit(1775829091.981:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.353400][   T36] audit: type=1326 audit(1775829091.981:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.377414][   T36] audit: type=1326 audit(1775829091.981:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.401194][   T36] audit: type=1326 audit(1775829091.981:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.424839][   T36] audit: type=1326 audit(1775829091.981:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f104899c819 code=0x7ffc0000
[  433.455854][  T595] hid-generic 0003:046D:C31C.0011: item fetching failed at offset 0/1
[  433.464510][  T595] hid-generic 0003:046D:C31C.0011: probe with driver hid-generic failed with error -22
[  433.722122][  T307] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  433.762456][  T595] usb 5-1: USB disconnect, device number 39
[  433.768898][ T2204] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  433.812618][ T2208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.821257][ T2208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.873215][  T307] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  433.881430][  T307] usb 6-1: config 0 has no interface number 0
[  433.887697][  T307] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  433.899060][  T307] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.910071][  T307] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  433.923188][  T307] usb 6-1: config 0 interface 1 has no altsetting 0
[  433.929845][  T307] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  433.939244][  T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.948003][  T307] usb 6-1: config 0 descriptor??
[  434.013110][ T2210] input: syz0 as /devices/virtual/input/input17
[  434.036574][ T2212] fuse: blksize only supported for fuseblk
[  434.343867][ T2227] Invalid logical block size (764640)
[  434.366611][ T2230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.375301][ T2230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.384603][ T2230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.393212][ T2230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.412154][  T595] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  434.442182][  T327] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  434.558154][  T307] input: HID 145f:0212 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:145F:0212.0012/input/input18
[  434.569864][  T595] usb 2-1: Using ep0 maxpacket: 32
[  434.576534][  T595] usb 2-1: config 8 has an invalid interface number: 74 but max is 0
[  434.576707][  T307] input: HID 145f:0212 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:145F:0212.0012/input/input19
[  434.586999][  T595] usb 2-1: config 8 has no interface number 0
[  434.606847][  T595] usb 2-1: config 8 interface 74 has no altsetting 0
[  434.613997][  T307] uclogic 0003:145F:0212.0012: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.5-1/input1
[  434.625926][  T327] usb 5-1: Using ep0 maxpacket: 8
[  434.632916][  T595] usb 2-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=ec.1a
[  434.643098][  T327] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  434.651541][  T327] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  434.652215][  T595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.664310][  T327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  434.676749][  T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  434.678407][  T595] usb 2-1: Product: syz
[  434.688643][  T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  434.707324][  T595] usb 2-1: Manufacturer: syz
[  434.712336][  T595] usb 2-1: SerialNumber: syz
[  434.724192][  T327] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  434.733748][  T327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.741979][  T327] usb 5-1: Product: syz
[  434.746313][  T327] usb 5-1: Manufacturer: syz
[  434.751036][  T327] usb 5-1: SerialNumber: syz
[  434.756607][  T327] usb 5-1: config 0 descriptor??
[  434.762626][  T327] hub 5-1:0.0: bad descriptor, ignoring hub
[  434.768373][  T309] usb 6-1: USB disconnect, device number 15
[  434.768581][  T327] hub 5-1:0.0: probe with driver hub failed with error -5
[  434.788531][  T327] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20
[  434.923267][ T2222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.932783][ T2222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.943297][  T595] usb 2-1: bad CDC descriptors
[  434.951605][  T595] usb 2-1: USB disconnect, device number 44
[  435.016544][  T309] usb 5-1: USB disconnect, device number 40
[  435.255586][ T2251] overlayfs: failed to resolve './file2': -2
[  435.302080][ T2257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.310728][ T2257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.409317][ T2259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.618'.
[  435.551166][ T2268] netlink: 148 bytes leftover after parsing attributes in process `syz.4.621'.
[  435.560373][ T2268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'.
[  435.569398][ T2268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'.
[  435.702129][  T595] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[  435.832793][  T595] usb 2-1: device descriptor read/64, error -71
[  435.840628][ T2271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.849977][ T2271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.072128][  T595] usb 2-1: device descriptor read/64, error -71
[  436.112182][  T307] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  436.263368][  T307] usb 5-1: config index 0 descriptor too short (expected 65472, got 45)
[  436.273520][  T307] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  436.282927][  T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.291034][  T307] usb 5-1: Product: syz
[  436.295366][  T307] usb 5-1: Manufacturer: syz
[  436.300023][  T307] usb 5-1: SerialNumber: syz
[  436.312117][  T595] usb 2-1: new low-speed USB device number 46 using dummy_hcd
[  436.376757][ T2277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.385673][ T2277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.442152][  T595] usb 2-1: device descriptor read/64, error -71
[  436.482196][  T309] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  436.633380][  T309] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  436.642969][  T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.654311][  T309] usb 6-1: config 0 descriptor??
[  436.682127][  T595] usb 2-1: device descriptor read/64, error -71
[  436.792337][  T595] usb usb2-port1: attempt power cycle
[  436.993073][ T2281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.003527][ T2281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.142158][  T595] usb 2-1: new low-speed USB device number 47 using dummy_hcd
[  437.163327][  T595] usb 2-1: device descriptor read/8, error -71
[  437.293311][  T595] usb 2-1: device descriptor read/8, error -71
[  437.533259][  T595] usb 2-1: new low-speed USB device number 48 using dummy_hcd
[  437.573092][  T595] usb 2-1: device descriptor read/8, error -71
[  437.611876][ T2292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.621470][ T2292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.632186][ T2292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.642009][ T2292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.713213][  T595] usb 2-1: device descriptor read/8, error -71
[  437.832350][  T595] usb usb2-port1: unable to enumerate USB device
[  438.291466][   T36] kauditd_printk_skb: 445 callbacks suppressed
[  438.291493][   T36] audit: type=1400 audit(1775829097.021:952): avc:  denied  { write } for  pid=2297 comm="syz.3.630" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  438.482086][   T36] audit: type=1400 audit(1775829097.211:953): avc:  denied  { accept } for  pid=2304 comm="syz.1.632" lport=55667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  438.555974][  T327] usb 5-1: USB disconnect, device number 41
[  438.952165][   T66] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  439.012235][  T327] usb 5-1: new low-speed USB device number 42 using dummy_hcd
[  439.082139][   T66] usb 2-1: device descriptor read/64, error -71
[  439.163652][  T327] usb 5-1: unable to get BOS descriptor or descriptor too short
[  439.175041][  T327] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0
[  439.186099][  T327] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  439.199500][  T327] usb 5-1: string descriptor 0 read error: -22
[  439.206094][  T327] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[  439.215970][  T327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.322119][   T66] usb 2-1: device descriptor read/64, error -71
[  439.361253][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.370027][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.379641][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.388726][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.434563][ T2338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.444205][ T2338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.562130][   T66] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  439.679958][  T309] usb 6-1: Cannot set autoneg
[  439.689226][  T309] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  439.702138][   T66] usb 2-1: device descriptor read/64, error -71
[  439.708900][  T309] usb 6-1: USB disconnect, device number 16
[  439.952144][   T66] usb 2-1: device descriptor read/64, error -71
[  440.002167][  T309] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  440.062421][   T66] usb usb2-port1: attempt power cycle
[  440.153466][  T309] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.164024][  T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  440.175587][  T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.185784][  T309] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  440.199032][  T309] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  440.208460][  T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.219139][  T309] usb 6-1: config 0 descriptor??
[  440.402140][   T66] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  440.423364][   T66] usb 2-1: device descriptor read/8, error -71
[  440.434678][  T309] usbhid 6-1:0.0: can't add hid device: -71
[  440.440745][  T309] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  440.452193][  T309] usb 6-1: USB disconnect, device number 17
[  440.583340][   T66] usb 2-1: device descriptor read/8, error -71
[  440.828020][   T66] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  440.853296][   T66] usb 2-1: device descriptor read/8, error -71
[  440.983282][   T66] usb 2-1: device descriptor read/8, error -71
[  441.093153][   T66] usb usb2-port1: unable to enumerate USB device
[  441.179128][ T2362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.188591][ T2362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.232213][  T307] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  441.730862][ T2366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2366 comm=syz.1.648
[  441.732538][  T327] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  441.754673][ T2366] netlink: 27 bytes leftover after parsing attributes in process `syz.1.648'.
[  441.771356][  T327] usb 5-1: USB disconnect, device number 42
[  441.936786][ T2378] binder: Unknown parameter 'context�'
[  441.953817][ T2380] .N: renamed from veth0_to_bond (while UP)
[  441.972876][ T2385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.981590][ T2385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.082257][  T327] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  442.112174][   T46] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  442.232177][  T327] usb 5-1: Using ep0 maxpacket: 16
[  442.242230][   T46] usb 2-1: device descriptor read/64, error -71
[  442.243529][  T327] usb 5-1: config 8 has an invalid interface number: 188 but max is 0
[  442.271123][  T327] usb 5-1: config 8 has no interface number 0
[  442.282268][  T327] usb 5-1: config 8 interface 188 altsetting 211 bulk endpoint 0x8 has invalid maxpacket 64
[  442.296547][  T327] usb 5-1: config 8 interface 188 altsetting 211 endpoint 0x7 has invalid maxpacket 927, setting to 64
[  442.311675][  T327] usb 5-1: config 8 interface 188 has no altsetting 0
[  442.324269][  T327] usb 5-1: New USB device found, idVendor=15b8, idProduct=6002, bcdDevice=14.77
[  442.336329][  T327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.345077][  T327] usb 5-1: Product: syz
[  442.349779][  T327] usb 5-1: Manufacturer: syz
[  442.354781][  T327] usb 5-1: SerialNumber: syz
[  442.362229][ T2368] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  442.498246][   T46] usb 2-1: device descriptor read/64, error -71
[  442.513446][ T2387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.522022][ T2387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.576771][  T327] usb 5-1: USB disconnect, device number 43
[  442.742174][   T46] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  442.872268][   T46] usb 2-1: device descriptor read/64, error -71
[  443.012226][  T595] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  443.122128][   T46] usb 2-1: device descriptor read/64, error -71
[  443.162101][  T595] usb 6-1: Using ep0 maxpacket: 16
[  443.169158][  T595] usb 6-1: unable to get BOS descriptor or descriptor too short
[  443.178618][  T595] usb 6-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config
[  443.189179][  T595] usb 6-1: config 161 has 0 interfaces, different from the descriptor's value: 3
[  443.200090][  T595] usb 6-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  443.209781][  T595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.218019][  T595] usb 6-1: Product: ⠁
[  443.222338][  T595] usb 6-1: Manufacturer: 뒼ͥ஘ᛕﶶᵾอ⥦᏷伦ᰵ腦컓遄Ⰵ甛焚暼䖰傚䡤㠲軷먂僶埲鵊逽볷膺
[  443.236678][  T595] usb 6-1: SerialNumber: syz
[  443.242010][   T46] usb usb2-port1: attempt power cycle
[  443.268134][ T2408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.276875][ T2408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.304846][   T36] audit: type=1400 audit(1775829102.041:954): avc:  denied  { bind } for  pid=2410 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  443.452272][  T595] usb 6-1: USB disconnect, device number 19
[  443.582242][   T46] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  443.603241][   T46] usb 2-1: device descriptor read/8, error -71
[  443.733527][   T46] usb 2-1: device descriptor read/8, error -71
[  443.816073][ T2416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.824942][ T2416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.972144][   T46] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  443.993460][   T46] usb 2-1: device descriptor read/8, error -71
[  444.123566][   T46] usb 2-1: device descriptor read/8, error -71
[  444.232367][   T46] usb usb2-port1: unable to enumerate USB device
[  444.351074][ T2423] fuse: Bad value for 'fd'
[  444.367782][   T36] audit: type=1400 audit(1775829103.101:955): avc:  denied  { listen } for  pid=2426 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  444.392144][ T1567] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  444.403703][ T2429] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=252 sclass=netlink_xfrm_socket pid=2429 comm=syz.3.670
[  444.420234][ T2429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.429095][ T2429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.459454][ T2429] kvm: vcpu 0: requested 58 ns lapic timer period limited to 200000 ns
[  444.471976][   T36] audit: type=1400 audit(1775829103.201:956): avc:  denied  { mount } for  pid=2428 comm="syz.3.670" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  444.532119][ T1567] usb 5-1: device descriptor read/64, error -71
[  444.772170][ T1567] usb 5-1: device descriptor read/64, error -71
[  444.827066][ T2460] netlink: 68 bytes leftover after parsing attributes in process `syz.1.675'.
[  444.863097][   T36] audit: type=1400 audit(1775829103.601:957): avc:  denied  { search } for  pid=2463 comm="syz.1.677" name="/" dev="configfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.885767][   T36] audit: type=1400 audit(1775829103.601:958): avc:  denied  { setattr } for  pid=2463 comm="syz.1.677" name="/" dev="configfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  445.032136][  T307] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  445.039865][ T1567] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  445.172158][ T1567] usb 5-1: device descriptor read/64, error -71
[  445.194965][  T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.213401][  T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.222305][   T46] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  445.232187][  T307] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  445.241441][  T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.255396][  T307] usb 6-1: config 0 descriptor??
[  445.372150][   T46] usb 2-1: device descriptor read/64, error -71
[  445.422135][ T1567] usb 5-1: device descriptor read/64, error -71
[  445.532201][ T1567] usb usb5-port1: attempt power cycle
[  445.612080][   T46] usb 2-1: device descriptor read/64, error -71
[  445.826528][ T2485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.835200][ T2485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.852230][   T46] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  445.872179][ T1567] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  445.881492][  T307] usbhid 6-1:0.0: can't add hid device: -71
[  445.888002][  T307] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  445.897412][  T307] usb 6-1: USB disconnect, device number 20
[  445.903477][ T1567] usb 5-1: device descriptor read/8, error -71
[  445.992117][   T46] usb 2-1: device descriptor read/64, error -71
[  446.033459][ T1567] usb 5-1: device descriptor read/8, error -71
[  446.232172][   T46] usb 2-1: device descriptor read/64, error -71
[  446.272210][ T1567] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  446.293446][ T1567] usb 5-1: device descriptor read/8, error -71
[  446.342323][   T46] usb usb2-port1: attempt power cycle
[  446.361241][ T2487] can0: slcan on ptm1.
[  446.367526][ T2487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.371711][   T36] audit: type=1400 audit(1775829105.101:959): avc:  denied  { search } for  pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.381579][ T2487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.419843][   T36] audit: type=1400 audit(1775829105.151:960): avc:  denied  { shutdown } for  pid=2486 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  446.429000][ T2487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.459266][ T1567] usb 5-1: device descriptor read/8, error -71
[  446.470434][   T36] audit: type=1400 audit(1775829105.211:961): avc:  denied  { read } for  pid=2493 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.488589][ T2487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.503193][   T36] audit: type=1400 audit(1775829105.211:962): avc:  denied  { open } for  pid=2493 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.529172][   T36] audit: type=1400 audit(1775829105.211:963): avc:  denied  { getattr } for  pid=2493 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.572229][ T1567] usb usb5-port1: unable to enumerate USB device
[  446.572352][ T2489] can0 (unregistered): slcan off ptm1.
[  446.682595][   T46] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  446.703241][   T46] usb 2-1: device descriptor read/8, error -71
[  446.712230][  T595] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  446.833303][   T46] usb 2-1: device descriptor read/8, error -71
[  446.863438][  T595] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  446.874802][  T595] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.885100][  T595] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  446.898233][  T595] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  446.907454][  T595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.916801][  T595] usb 6-1: config 0 descriptor??
[  447.072122][   T46] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  447.093419][   T46] usb 2-1: device descriptor read/8, error -71
[  447.233261][   T46] usb 2-1: device descriptor read/8, error -71
[  447.339568][  T595] hid-multitouch 0003:0457:07DA.0013: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0
[  447.354094][   T46] usb usb2-port1: unable to enumerate USB device
[  447.370282][ T2532] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  447.548962][ T2559] overlay: Unknown parameter 'smackfsdef'
[  447.566154][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.575150][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.584657][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.593575][  T595] usb 6-1: USB disconnect, device number 21
[  447.596175][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.613075][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.622283][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.702164][  T307] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  447.852196][  T307] usb 5-1: Using ep0 maxpacket: 32
[  447.859659][  T307] usb 5-1: unable to get BOS descriptor or descriptor too short
[  447.868422][  T307] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  447.881677][  T307] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  447.891198][  T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.899891][  T307] usb 5-1: Product: syz
[  447.904504][  T307] usb 5-1: Manufacturer: syz
[  447.909163][  T307] usb 5-1: SerialNumber: syz
[  447.949180][ T2567] /dev/rnullb0: Can't open blockdev
[  448.122065][  T307] usb 5-1: 1:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  448.130768][  T307] usb 5-1: found format II with max.bitrate = 634, frame size=84
[  448.138824][ T2569] SELinux:  Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped).
[  448.149086][  T307] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  448.154482][ T2569] overlayfs: workdir and upperdir must be separate subtrees
[  448.159735][  T307] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  448.178400][  T307] usb 5-1: USB disconnect, device number 48
[  448.210103][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  448.282150][  T595] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  448.410076][ T2583] netlink: 64 bytes leftover after parsing attributes in process `syz.3.708'.
[  448.422310][  T595] usb 2-1: device descriptor read/64, error -71
[  448.492186][ T1567] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  448.645166][ T1567] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  448.654456][ T1567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.662746][ T1567] usb 6-1: Product: syz
[  448.666946][ T1567] usb 6-1: Manufacturer: syz
[  448.671653][ T1567] usb 6-1: SerialNumber: syz
[  448.672238][  T595] usb 2-1: device descriptor read/64, error -71
[  448.683557][ T1567] r8152-cfgselector 6-1: Unknown version 0x0000
[  448.690279][ T1567] r8152-cfgselector 6-1: config 0 descriptor??
[  448.872122][   T46] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  448.905921][ T1567] r8152-cfgselector 6-1: USB disconnect, device number 22
[  448.923069][  T595] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  449.024059][   T46] usb 5-1: unable to get BOS descriptor or descriptor too short
[  449.032157][   T46] usb 5-1: not running at top speed; connect to a high speed hub
[  449.040643][   T46] usb 5-1: config 129 has an invalid interface number: 80 but max is 0
[  449.049203][   T46] usb 5-1: config 129 has an invalid interface number: 5 but max is 0
[  449.057456][   T46] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  449.066692][  T595] usb 2-1: device descriptor read/64, error -71
[  449.073033][   T46] usb 5-1: config 129 has no interface number 0
[  449.079309][   T46] usb 5-1: config 129 has no interface number 1
[  449.085688][   T46] usb 5-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  449.099502][   T46] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  449.110515][   T46] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  449.123816][   T46] usb 5-1: config 129 interface 80 has no altsetting 0
[  449.131137][   T46] usb 5-1: config 129 interface 5 has no altsetting 0
[  449.141751][   T46] usb 5-1: string descriptor 0 read error: -22
[  449.148061][   T46] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  449.157551][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.170446][   T46] usb 5-1: MIDIStreaming interface descriptor not found
[  449.228331][ T2599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.237416][ T2599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.247724][ T2599] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  449.322125][  T595] usb 2-1: device descriptor read/64, error -71
[  449.367927][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.376678][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.385003][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.394224][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.402677][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.411363][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.419414][ T2600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.428037][ T2601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.428452][ T2600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.442234][ T2601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.452206][  T595] usb usb2-port1: attempt power cycle
[  449.459457][   T46] usb 5-1: USB disconnect, device number 49
[  449.473862][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.482536][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.712136][ T1567] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  449.769889][ T2607] sock: sock_timestamping_bind_phc: sock not bind to device
[  449.792261][  T595] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  449.814915][  T595] usb 2-1: device descriptor read/8, error -71
[  449.862153][ T1567] usb 6-1: Using ep0 maxpacket: 16
[  449.868981][ T1567] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  449.880374][ T1567] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  449.898400][ T1567] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40
[  449.907900][ T1567] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  449.916445][ T1567] usb 6-1: Product: syz
[  449.920659][ T1567] usb 6-1: Manufacturer: syz
[  449.928224][ T1567] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  449.943231][  T595] usb 2-1: device descriptor read/8, error -71
[  449.980390][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.990493][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.129793][   T46] usb 6-1: USB disconnect, device number 23
[  450.182266][  T595] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  450.203389][  T595] usb 2-1: device descriptor read/8, error -71
[  450.333226][  T595] usb 2-1: device descriptor read/8, error -71
[  450.442239][  T595] usb usb2-port1: unable to enumerate USB device
[  450.531376][ T2620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.541454][ T2620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.932169][   T46] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  451.001011][ T2630] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  451.090374][   T46] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  451.101595][  T595] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  451.109324][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.118123][   T46] usb 6-1: Product: syz
[  451.122788][   T46] usb 6-1: Manufacturer: syz
[  451.127605][   T46] usb 6-1: SerialNumber: syz
[  451.139770][ T2642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.150713][ T2642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.273359][  T595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.284430][  T595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.294352][  T595] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  451.303640][  T595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.313019][  T595] usb 5-1: config 0 descriptor??
[  451.349938][ T2624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.358614][ T2624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.387508][   T46] rtl8150 6-1:1.0: couldn't reset the device
[  451.393705][   T46] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[  451.403369][   T46] usb 6-1: USB disconnect, device number 24
[  451.675079][ T2648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.684067][ T2648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.705892][ T2650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.731'.
[  451.721588][  T595] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  451.729077][  T595] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  451.736112][  T595] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  451.743402][  T595] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  451.750327][  T595] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  451.757222][  T595] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  451.764101][  T595] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0
[  451.771896][  T595] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[  451.920782][  T595] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device
[  451.928845][  T595] pyra 0003:1E7D:2CF6.0014: couldn't install mouse
[  451.936473][  T595] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -32
[  451.946818][  T595] usb 5-1: USB disconnect, device number 50
[  452.142144][   T66] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  452.292080][   T66] usb 6-1: Using ep0 maxpacket: 8
[  452.343694][   T66] usb 6-1: unable to get BOS descriptor or descriptor too short
[  452.352667][   T66] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  452.363352][   T66] usb 6-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  452.375153][   T66] usb 6-1: config 12 interface 0 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0
[  452.385457][   T66] usb 6-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  452.398670][   T66] usb 6-1: config 12 interface 0 has no altsetting 0
[  452.407405][   T66] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  452.417113][   T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.426529][   T66] usb 6-1: Product: syz
[  452.435167][   T66] usb 6-1: Manufacturer: syz
[  452.443531][   T66] usb 6-1: SerialNumber: syz
[  452.565626][ T2684] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  452.574218][ T2684] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  452.653557][   T66] usb 6-1: selecting invalid altsetting 0
[  452.664075][   T66] snd-usb-audio 6-1:12.0: probe with driver snd-usb-audio failed with error -12
[  452.678269][   T66] usb 6-1: USB disconnect, device number 25
[  452.692001][  T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  452.842122][   T46] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  452.993377][   T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  453.003780][   T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  453.014159][   T46] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  453.023606][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  453.031980][   T46] usb 5-1: SerialNumber: syz
[  453.243662][   T36] kauditd_printk_skb: 8 callbacks suppressed
[  453.243699][   T36] audit: type=1400 audit(1775829111.981:972): avc:  denied  { create } for  pid=2683 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  453.264170][ T2692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.271607][   T36] audit: type=1400 audit(1775829111.991:973): avc:  denied  { read } for  pid=2691 comm="syz.3.746" name="file0" dev="tmpfs" ino=1714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  453.274225][   T46] usb 5-1: 0:2 : does not exist
[  453.280601][ T2692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.316449][   T46] usb 5-1: USB disconnect, device number 51
[  453.327978][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  453.421307][ T2699] netlink: 'syz.1.748': attribute type 6 has an invalid length.
[  453.430295][ T2699] netlink: 148 bytes leftover after parsing attributes in process `syz.1.748'.
[  453.439669][ T2699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[  453.448594][ T2699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[  453.452412][  T306] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  453.592131][  T306] usb 6-1: device descriptor read/64, error -71
[  453.838139][  T306] usb 6-1: device descriptor read/64, error -71
[  453.853743][ T2733] fuse: Unknown parameter 'group_id00000000000000000000'
[  453.861644][ T2735] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  453.951084][   T66] kernel write not supported for file [eventfd] (pid: 66 comm: kworker/0:2)
[  453.960480][ T2740] usb usb9: usbfs: process 2740 (syz.3.763) did not claim interface 6 before use
[  454.092134][  T306] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  454.102136][  T595] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  454.252100][  T595] usb 5-1: device descriptor read/64, error -71
[  454.258684][  T306] usb 6-1: device descriptor read/64, error -71
[  454.492109][  T595] usb 5-1: device descriptor read/64, error -71
[  454.502273][  T306] usb 6-1: device descriptor read/64, error -71
[  454.612258][  T306] usb usb6-port1: attempt power cycle
[  454.732101][  T595] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  454.862373][  T595] usb 5-1: device descriptor read/64, error -71
[  454.898484][ T2759] fuse: Unknown parameter 'group_id00000000000000000000'
[  454.949963][ T2763] fuse: Unknown parameter 'fd� ����"{�s�ڤ�<'
[  454.962230][  T306] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  454.985315][ T2774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.994832][ T2774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.008604][  T306] usb 6-1: device descriptor read/8, error -71
[  455.102131][  T595] usb 5-1: device descriptor read/64, error -71
[  455.109649][ T2783] overlayfs: failed to clone upperpath
[  455.143356][  T306] usb 6-1: device descriptor read/8, error -71
[  455.212227][  T595] usb usb5-port1: attempt power cycle
[  455.382200][  T306] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  455.403601][  T306] usb 6-1: device descriptor read/8, error -71
[  455.521575][ T2785] fuse: Unknown parameter 'group_id00000000000000000000'
[  455.533234][  T306] usb 6-1: device descriptor read/8, error -71
[  455.549531][   T36] audit: type=1400 audit(1775829114.281:974): avc:  denied  { connect } for  pid=2786 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  455.552332][  T595] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  455.577254][ T2787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.586216][ T2787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.593929][  T595] usb 5-1: device descriptor read/8, error -71
[  455.644498][  T306] usb usb6-port1: unable to enumerate USB device
[  455.664781][ T2796] overlayfs: failed to clone upperpath
[  455.698405][   T36] audit: type=1400 audit(1775829114.431:975): avc:  denied  { create } for  pid=2800 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  455.733201][  T595] usb 5-1: device descriptor read/8, error -71
[  455.972110][  T595] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  455.993703][  T595] usb 5-1: device descriptor read/8, error -71
[  456.123230][  T595] usb 5-1: device descriptor read/8, error -71
[  456.213277][ T2807] fuse: Bad value for 'user_id'
[  456.219570][ T2807] fuse: Bad value for 'user_id'
[  456.232284][  T595] usb usb5-port1: unable to enumerate USB device
[  456.405245][ T2827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.414131][ T2827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.763708][ T2836] fuse: Bad value for 'user_id'
[  456.768689][ T2836] fuse: Bad value for 'user_id'
[  456.944041][ T2851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.956270][ T2851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.142125][ T1567] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  457.293418][ T1567] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  457.301781][ T1567] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  457.311169][ T1567] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  457.321755][ T2858] fuse: Bad value for 'user_id'
[  457.321808][ T2858] fuse: Bad value for 'user_id'
[  457.332106][ T1567] usb 6-1: config 220 has no interface number 2
[  457.338428][ T1567] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  457.342581][  T306] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  457.352652][ T1567] usb 6-1: config 220 interface 0 has no altsetting 0
[  457.366709][ T1567] usb 6-1: config 220 interface 76 has no altsetting 0
[  457.373839][ T1567] usb 6-1: config 220 interface 1 has no altsetting 0
[  457.382602][ T1567] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  457.392371][ T1567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.400592][ T1567] usb 6-1: Product: syz
[  457.405008][ T1567] usb 6-1: Manufacturer: syz
[  457.409842][ T1567] usb 6-1: SerialNumber: syz
[  457.436296][   T36] audit: type=1400 audit(1775829116.171:976): avc:  denied  { write } for  pid=2866 comm="syz.1.810" name="file0" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  457.534183][  T306] usb 5-1: unable to get BOS descriptor or descriptor too short
[  457.543227][  T306] usb 5-1: unable to read config index 0 descriptor/start: -71
[  457.550882][  T306] usb 5-1: can't read configurations, error -71
[  457.623666][ T1567] usb 6-1: selecting invalid altsetting 0
[  457.629577][ T1567] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  457.636304][ T1567] usb 6-1: No valid video chain found.
[  457.646451][ T1567] usb 6-1: USB disconnect, device number 30
[  458.165267][ T2887] fuse: Bad value for 'fd'
[  458.250007][ T2889] incfs: Error accessing: ./file0.
[  458.322133][ T2889] incfs: mount failed -2
[  458.975773][ T2924] fuse: Bad value for 'fd'
[  458.993311][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.000681][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.122115][ T1567] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  459.130791][ T2934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.139479][ T2934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.273202][ T1567] usb 6-1: config 0 has an invalid interface number: 200 but max is 0
[  459.281411][ T1567] usb 6-1: config 0 has no interface number 0
[  459.287817][ T1567] usb 6-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85
[  459.299577][ T1567] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 12336, setting to 64
[  459.310828][ T1567] usb 6-1: config 0 interface 200 has no altsetting 0
[  459.313152][  T306] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  459.320329][ T1567] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  459.335398][ T1567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.343464][ T1567] usb 6-1: Product: syz
[  459.347774][ T1567] usb 6-1: Manufacturer: syz
[  459.352484][ T1567] usb 6-1: SerialNumber: syz
[  459.358159][ T1567] usb 6-1: config 0 descriptor??
[  459.473505][  T306] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  459.483977][  T306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  459.494000][  T306] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  459.503196][  T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  459.511707][  T306] usb 5-1: SerialNumber: syz
[  459.665129][   T36] audit: type=1400 audit(1775829118.401:977): avc:  denied  { ioctl } for  pid=2938 comm="syz.3.831" path="socket:[26622]" dev="sockfs" ino=26622 ioctlcmd=0x5826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  459.705870][   T36] audit: type=1400 audit(1775829118.441:978): avc:  denied  { getopt } for  pid=2938 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  459.744397][ T2941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.753105][ T2941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.885826][  T306] usb 5-1: 0:2 : does not exist
[  459.895744][  T306] usb 5-1: USB disconnect, device number 58
[  459.911614][  T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  459.937068][ T2948] netlink: 17 bytes leftover after parsing attributes in process `syz.4.834'.
[  459.946344][ T2950] netlink: 'syz.4.834': attribute type 4 has an invalid length.
[  460.279358][ T2963] netlink: 277 bytes leftover after parsing attributes in process `syz.3.839'.
[  460.288877][ T2964] netlink: 277 bytes leftover after parsing attributes in process `syz.3.839'.
[  460.303963][   T36] audit: type=1400 audit(1775829119.041:979): avc:  denied  { connect } for  pid=2962 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  460.332127][  T306] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  460.462144][  T306] usb 5-1: device descriptor read/64, error -71
[  460.523425][ T2973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.532329][ T2973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.702378][  T306] usb 5-1: device descriptor read/64, error -71
[  460.942135][  T306] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  461.065375][ T2982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.074083][ T2982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.082129][  T306] usb 5-1: device descriptor read/64, error -71
[  461.322141][  T306] usb 5-1: device descriptor read/64, error -71
[  461.432288][  T306] usb usb5-port1: attempt power cycle
[  461.772111][  T306] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  461.793164][  T306] usb 5-1: device descriptor read/8, error -71
[  461.838378][ T1567] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input23
[  461.858324][    C1] usb 6-1: hanwang_irq - nonzero urb status received: -71
[  461.865682][    C1] usb 6-1: hanwang_irq - urb shutting down with status: -2
[  461.866577][ T1567] usb 6-1: USB disconnect, device number 31
[  461.931143][  T306] usb 5-1: device descriptor read/8, error -71
[  462.037962][ T2995] fuse: Bad value for 'fd'
[  462.066646][   T36] audit: type=1400 audit(1775829120.801:980): avc:  denied  { name_bind } for  pid=2996 comm="syz.5.853" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  462.182087][  T306] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  462.223214][  T306] usb 5-1: device descriptor read/8, error -71
[  462.353316][  T306] usb 5-1: device descriptor read/8, error -71
[  462.472281][  T306] usb usb5-port1: unable to enumerate USB device
[  462.658209][ T3013] fuseblk: Bad value for 'source'
[  463.038170][   T36] audit: type=1400 audit(1775829121.771:981): avc:  denied  { map } for  pid=3016 comm="syz.4.860" path="socket:[27983]" dev="sockfs" ino=27983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  463.062215][   T36] audit: type=1400 audit(1775829121.771:982): avc:  granted  { setsecparam } for  pid=3016 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  463.382109][   T46] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  463.422147][  T309] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  463.532175][   T46] usb 5-1: Using ep0 maxpacket: 8
[  463.539064][   T46] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  463.549017][   T46] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  463.557538][   T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  463.566717][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  463.578265][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  463.588277][  T309] usb 6-1: Using ep0 maxpacket: 8
[  463.594717][  T309] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  463.603181][  T309] usb 6-1: config 179 has no interface number 0
[  463.609575][   T46] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  463.619025][  T309] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  463.630469][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.638777][  T309] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  463.650824][   T46] usb 5-1: Product: syz
[  463.656955][   T46] usb 5-1: Manufacturer: syz
[  463.661610][   T46] usb 5-1: SerialNumber: syz
[  463.666470][  T309] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 14129, setting to 64
[  463.678853][   T46] usb 5-1: config 0 descriptor??
[  463.687157][  T309] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  463.700840][  T309] usb 6-1: config 179 interface 65 has no altsetting 0
[  463.701416][   T46] hub 5-1:0.0: bad descriptor, ignoring hub
[  463.714704][  T309] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  463.723801][   T46] hub 5-1:0.0: probe with driver hub failed with error -5
[  463.731898][   T46] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24
[  463.741264][  T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.903530][   T46] usb 5-1: USB disconnect, device number 63
[  463.954909][   T66] usb 6-1: USB disconnect, device number 32
[  464.667462][ T3042] netlink: 'syz.4.869': attribute type 4 has an invalid length.
[  464.982206][   T66] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  465.132111][   T66] usb 6-1: Using ep0 maxpacket: 32
[  465.138962][   T66] usb 6-1: unable to get BOS descriptor or descriptor too short
[  465.147633][   T66] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  465.156380][   T66] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  465.166808][   T66] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  465.176195][   T66] usb 6-1: config 128 has no interface number 0
[  465.182576][   T66] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  465.194101][   T66] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  465.204615][   T66] usb 6-1: config 128 interface 127 has no altsetting 0
[  465.213437][   T66] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  465.222847][   T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.230855][   T66] usb 6-1: Product: syz
[  465.235128][   T66] usb 6-1: Manufacturer: syz
[  465.240019][   T66] usb 6-1: SerialNumber: syz
[  465.926084][ T3076] overlayfs: failed to clone upperpath
[  465.961075][   T36] audit: type=1400 audit(1775829124.691:983): avc:  denied  { relabelfrom } for  pid=3077 comm="syz.1.879" name="UDPv6" dev="sockfs" ino=29541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  465.984934][ T3078] SELinux:  Context system_u:object_r:ld_so_t:s0 is not valid (left unmapped).
[  466.014748][   T36] audit: type=1400 audit(1775829124.731:984): avc:  denied  { relabelto } for  pid=3077 comm="syz.1.879" name="UDPv6" dev="sockfs" ino=29541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:ld_so_t:s0"
[  466.216343][   T36] audit: type=1326 audit(1775829124.951:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.1.881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f104899c819 code=0x0
[  468.025155][ T3090] fuse: blksize only supported for fuseblk
[  468.326536][   T36] audit: type=1400 audit(1775829127.061:986): avc:  denied  { mounton } for  pid=3097 comm="syz.3.886" path="/syzcgroup/unified/syz3" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1
[  468.731334][ T3113] SELinux:  Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped).
[  468.741320][   T36] audit: type=1400 audit(1775829127.471:987): avc:  denied  { relabelto } for  pid=3112 comm="syz.4.890" name="160" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:sshd_var_run_t:s0"
[  468.767871][   T36] audit: type=1400 audit(1775829127.471:988): avc:  denied  { associate } for  pid=3112 comm="syz.4.890" name="160" dev="tmpfs" ino=890 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_var_run_t:s0"
[  468.870552][   T36] audit: type=1326 audit(1775829127.601:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3119 comm="syz.4.892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd903b9c819 code=0x0
[  469.206750][ T3122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.215625][ T3122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.237735][ T3124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'.
[  469.741403][   T36] audit: type=1400 audit(1775829128.471:990): avc:  denied  { accept } for  pid=3135 comm="syz.3.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  469.867597][ T3147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.876323][ T3147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.885510][ T3147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.894240][ T3147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.962109][ T1567] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  470.112071][ T1567] usb 5-1: Using ep0 maxpacket: 16
[  470.118265][ T1567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.129420][ T1567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.139690][ T1567] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  470.149570][ T1567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.158604][ T1567] usb 5-1: config 0 descriptor??
[  470.321379][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  470.543811][ T1567] usbhid 5-1:0.0: can't add hid device: -71
[  470.562116][ T1567] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  470.572173][ T1567] usb 5-1: USB disconnect, device number 64
[  470.922088][ T1567] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  471.062092][ T1567] usb 5-1: device descriptor read/64, error -71
[  471.302132][ T1567] usb 5-1: device descriptor read/64, error -71
[  471.552100][ T1567] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  471.692088][ T1567] usb 5-1: device descriptor read/64, error -71
[  471.932126][ T1567] usb 5-1: device descriptor read/64, error -71
[  472.052121][ T1567] usb usb5-port1: attempt power cycle
[  472.273566][ T3171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.282325][ T3171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.392204][ T1567] usb 5-1: new full-speed USB device number 67 using dummy_hcd
[  472.413542][ T1567] usb 5-1: device descriptor read/8, error -71
[  472.543269][ T1567] usb 5-1: device descriptor read/8, error -71
[  472.782248][ T1567] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  472.804216][ T1567] usb 5-1: device descriptor read/8, error -71
[  472.933709][ T1567] usb 5-1: device descriptor read/8, error -71
[  473.042283][ T1567] usb usb5-port1: unable to enumerate USB device
[  473.383543][ T3176] fuse: Bad value for 'rootmode'
[  473.401202][ T3178] fuse: Bad value for 'rootmode'
[  473.992601][  T306] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  474.153397][  T306] usb 5-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  474.164733][  T306] usb 5-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  474.178379][  T306] usb 5-1: config 0 interface 0 has no altsetting 0
[  474.185542][  T306] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  474.195266][  T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.205361][  T306] usb 5-1: config 0 descriptor??
[  474.216420][ T3190] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  474.431096][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.440956][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.448507][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.455984][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.463473][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.471006][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.478410][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.485810][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.493368][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.500886][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.508449][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.516150][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.523535][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.530903][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.538393][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.545985][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.553423][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.560667][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.570767][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.582990][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.590932][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.599534][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.606848][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.614056][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.621330][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.628817][ T3194] SELinux: security_context_str_to_sid (=5���]�S9q#���) failed with errno=-22
[  474.629569][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.646677][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.653919][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.661069][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.668168][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.675285][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.682344][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.689700][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.697345][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.704505][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.711733][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.718820][  T306] waltop 0003:172F:0034.0015: unknown main item tag 0x0
[  474.731503][  T306] waltop 0003:172F:0034.0015: hidraw0: USB HID v0.20 Device [HID 172f:0034] on usb-dummy_hcd.4-1/input0
[  474.747160][  T306] usb 5-1: USB disconnect, device number 69
[  474.756827][ T3201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.767782][ T3200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.775852][ T3198] fido_id[3198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  474.779133][ T3201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.799367][ T3200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.156550][ T3203] fuse: Bad value for 'rootmode'
[  475.466527][   T36] audit: type=1326 audit(1775829134.201:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.3.925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33b059c819 code=0x0
[  475.503263][ T1567] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  475.652116][ T1567] usb 5-1: Using ep0 maxpacket: 16
[  475.658872][ T1567] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  475.669116][ T1567] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  475.680219][ T1567] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  475.689395][ T1567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.697537][ T1567] usb 5-1: Product: syz
[  475.701984][ T1567] usb 5-1: Manufacturer: syz
[  475.706667][ T1567] usb 5-1: SerialNumber: syz
[  475.914113][ T1567] usb 5-1: 0:2 : does not exist
[  475.919170][ T1567] usb 5-1: unit 6 not found!
[  475.926238][ T1567] usb 5-1: USB disconnect, device number 70
[  475.938579][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  476.298638][   T36] audit: type=1326 audit(1775829135.031:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b059c819 code=0x7fc00000
[  476.322504][   T36] audit: type=1326 audit(1775829135.031:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f33b059c819 code=0x7fc00000
[  476.346446][   T36] audit: type=1326 audit(1775829135.031:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b059c819 code=0x7fc00000
[  476.480096][ T3227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.525686][ T3227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.556476][   T36] audit: type=1400 audit(1775829135.291:995): avc:  denied  { lock } for  pid=3226 comm="syz.3.929" path="socket:[31544]" dev="sockfs" ino=31544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  476.625386][ T3235] fuse: Unknown parameter 'use00000000000000000000'
[  476.652714][ T3237] netlink: 'syz.1.932': attribute type 1 has an invalid length.
[  477.562123][  T309] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  477.712235][  T309] usb 5-1: Using ep0 maxpacket: 8
[  477.718966][  T309] usb 5-1: unable to get BOS descriptor or descriptor too short
[  477.729802][  T309] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  477.739490][  T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.748014][  T309] usb 5-1: Product: syz
[  477.752546][  T309] usb 5-1: Manufacturer: syz
[  477.757361][  T309] usb 5-1: SerialNumber: syz
[  477.758775][ T3261] fuse: Unknown parameter 'use00000000000000000000'
[  477.973292][  T309] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  477.981917][  T309] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  477.988233][  T309] usb 5-1: 1:1 : invalid channels 0
[  477.993939][  T309] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  478.004271][  T309] usb 5-1: USB disconnect, device number 71
[  478.017339][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  478.377012][ T3268] netlink: 68 bytes leftover after parsing attributes in process `syz.1.943'.
[  478.521897][ T3273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'.
[  478.579655][   T36] audit: type=1400 audit(1775829137.311:996): avc:  denied  { map } for  pid=3280 comm="syz.4.947" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  478.812110][  T309] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  478.942113][  T309] usb 5-1: device descriptor read/64, error -71
[  479.182160][  T309] usb 5-1: device descriptor read/64, error -71
[  479.422358][  T309] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  479.494010][ T3287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  479.552272][  T309] usb 5-1: device descriptor read/64, error -71
[  479.569920][ T3292] netlink: 252 bytes leftover after parsing attributes in process `syz.3.951'.
[  479.579388][ T3293] netlink: 252 bytes leftover after parsing attributes in process `syz.3.951'.
[  479.589772][ T3292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.598490][ T3292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.792163][  T309] usb 5-1: device descriptor read/64, error -71
[  479.910471][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.917922][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.922955][  T309] usb usb5-port1: attempt power cycle
[  479.925638][ T3298] bridge_slave_0: entered allmulticast mode
[  479.937300][ T3298] bridge_slave_0: entered promiscuous mode
[  479.944008][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.951087][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.958613][ T3298] bridge_slave_1: entered allmulticast mode
[  479.965083][ T3298] bridge_slave_1: entered promiscuous mode
[  480.016688][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.023815][ T3298] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.031137][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.038348][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.060623][ T1653] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.068551][ T1653] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.079678][ T1651] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.087003][ T1651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.096587][ T1653] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.103746][ T1653] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.134935][ T3303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.145567][ T3303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.151474][ T3298] veth0_vlan: entered promiscuous mode
[  480.166522][ T3298] veth1_macvtap: entered promiscuous mode
[  480.262206][  T309] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  480.283192][  T309] usb 5-1: device descriptor read/8, error -71
[  480.313873][ T3311] fuse: Unknown parameter 'user_i00000000000000000000'
[  480.413515][  T309] usb 5-1: device descriptor read/8, error -71
[  480.522313][   T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  480.652173][  T309] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  480.673667][  T309] usb 5-1: device descriptor read/8, error -71
[  480.680095][   T46] usb 7-1: unable to get BOS descriptor or descriptor too short
[  480.688977][   T46] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  480.698241][   T46] usb 7-1: config 255 has an invalid descriptor of length 159, skipping remainder of the config
[  480.709523][   T46] usb 7-1: config 255 has 3 interfaces, different from the descriptor's value: 255
[  480.719544][   T46] usb 7-1: config 255 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[  480.731181][   T46] usb 7-1: config 255 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  480.745223][ T3315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.749176][   T46] usb 7-1: string descriptor 0 read error: -22
[  480.754860][ T3315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.764110][   T46] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  480.773644][ T3315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.782439][   T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.787136][ T3315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.802738][ T3315] netlink: 124 bytes leftover after parsing attributes in process `syz.3.958'.
[  480.811051][  T309] usb 5-1: device descriptor read/8, error -71
[  480.922356][  T309] usb usb5-port1: unable to enumerate USB device
[  481.222127][   T46] snd-usb-audio 7-1:255.0: probe with driver snd-usb-audio failed with error -71
[  481.235458][   T46] usb 7-1: USB disconnect, device number 2
[  481.328800][ T3320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.337915][ T3320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.353374][   T36] audit: type=1400 audit(1775829140.091:997): avc:  denied  { setattr } for  pid=3319 comm="syz.3.960" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  481.902167][ T3332] netlink: 32 bytes leftover after parsing attributes in process `syz.1.964'.
[  481.992112][  T307] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  482.102149][   T46] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  482.152087][  T307] usb 5-1: Using ep0 maxpacket: 16
[  482.158934][  T307] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.170533][  T307] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.180783][  T307] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  482.194645][  T307] usb 5-1: config 0 interface 0 has no altsetting 0
[  482.198871][ T3335] fuse: Unknown parameter 'user_i00000000000000000000'
[  482.201549][  T307] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  482.217802][  T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.227425][  T307] usb 5-1: config 0 descriptor??
[  482.239393][   T36] audit: type=1400 audit(1775829140.971:998): avc:  denied  { relabelfrom } for  pid=3336 comm="syz.1.966" name="AF_VSOCK" dev="sockfs" ino=31906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  482.239426][ T3337] SELinux:  Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped).
[  482.240968][ T3337] netlink: 'syz.1.966': attribute type 16 has an invalid length.
[  482.263881][   T36] audit: type=1400 audit(1775829140.971:999): avc:  denied  { relabelto } for  pid=3336 comm="syz.1.966" name="AF_VSOCK" dev="sockfs" ino=31906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=vsock_socket permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0"
[  482.315559][   T46] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[  482.324833][   T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.333728][   T46] usb 7-1: Product: syz
[  482.337969][   T46] usb 7-1: Manufacturer: syz
[  482.343600][   T46] usb 7-1: SerialNumber: syz
[  482.440593][ T3327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.450447][ T3327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.672805][  T307] hid (null): report_id 3970951689 is invalid
[  482.678993][  T307] hid (null): usage index exceeded
[  482.864088][  T307] usb 5-1: USB disconnect, device number 76
[  483.068770][   T46] usb 7-1: MIDIStreaming interface descriptor not found
[  483.084919][   T46] usb 7-1: USB disconnect, device number 3
[  483.097145][  T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  483.355125][ T3357] fuse: Unknown parameter 'user_id00000000000000000000'
[  483.392109][   T46] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  483.542091][   T46] usb 7-1: Using ep0 maxpacket: 16
[  483.548582][   T46] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  483.557547][   T46] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.568047][   T46] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  483.578737][   T46] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  483.589300][   T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.597672][   T46] usb 7-1: Product: syz
[  483.601868][   T46] usb 7-1: Manufacturer: syz
[  483.606583][   T46] usb 7-1: SerialNumber: syz
[  483.642104][  T309] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  483.793550][  T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.804682][  T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.814543][  T309] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  483.825394][  T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.834429][  T309] usb 5-1: config 0 descriptor??
[  484.027116][   T46] usb 7-1: 0:2 : does not exist
[  484.243957][  T309] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0
[  484.251556][  T309] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  484.322217][  T309] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected
[  484.330690][  T309] hid-steam 0003:28DE:1142.0017: No HID_FEATURE_REPORT submitted -  nothing to read
[  484.350675][  T309] hid-steam 0003:28DE:1142.0018: unknown main item tag 0x0
[  484.359078][  T309] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  484.457479][   T36] audit: type=1400 audit(1775829143.191:1000): avc:  denied  { shutdown } for  pid=3378 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  484.502145][ T3386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.511983][ T3386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.721185][   T66] usb 5-1: USB disconnect, device number 77
[  484.730180][   T66] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected
[  484.814538][ T3396] FAULT_INJECTION: forcing a failure.
[  484.814538][ T3396] name failslab, interval 1, probability 0, space 0, times 0
[  484.827526][ T3396] CPU: 0 UID: 0 PID: 3396 Comm: syz.3.988 Not tainted syzkaller #0 a2fb3ed8c3bd0f53318b258069d3c0dc388d3ecc
[  484.827565][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  484.827582][ T3396] Call Trace:
[  484.827598][ T3396]  <TASK>
[  484.827607][ T3396]  __dump_stack+0x21/0x30
[  484.827661][ T3396]  dump_stack_lvl+0x140/0x1c0
[  484.827691][ T3396]  ? __cfi_dump_stack_lvl+0x10/0x10
[  484.827726][ T3396]  ? __kasan_check_write+0x18/0x20
[  484.827750][ T3396]  ? copy_mm+0x2f7/0x1d70
[  484.827770][ T3396]  dump_stack+0x19/0x20
[  484.827810][ T3396]  should_fail_ex+0x3d7/0x530
[  484.827840][ T3396]  should_failslab+0xac/0x100
[  484.827862][ T3396]  kmem_cache_alloc_noprof+0x42/0x410
[  484.827893][ T3396]  ? alloc_pid+0xa5/0xba0
[  484.827910][ T3396]  ? __asan_memcpy+0x5a/0x80
[  484.827948][ T3396]  alloc_pid+0xa5/0xba0
[  484.827972][ T3396]  copy_process+0x1409/0x32a0
[  484.828001][ T3396]  ? __cfi_copy_process+0x10/0x10
[  484.828030][ T3396]  ? __kmalloc_cache_noprof+0x23c/0x470
[  484.828054][ T3396]  ? __kasan_check_write+0x18/0x20
[  484.828076][ T3396]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  484.828134][ T3396]  vhost_task_create+0x1f7/0x400
[  484.828160][ T3396]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  484.828188][ T3396]  ? __cfi_vhost_task_create+0x10/0x10
[  484.828204][ T3396]  ? __cfi_vhost_task_fn+0x10/0x10
[  484.828219][ T3396]  ? __kasan_check_write+0x18/0x20
[  484.828260][ T3396]  ? mutex_lock+0x97/0x1d0
[  484.828287][ T3396]  ? __cfi_mutex_lock+0x10/0x10
[  484.828311][ T3396]  ? kernel_text_address+0xa9/0xe0
[  484.828342][ T3396]  kvm_mmu_post_init_vm+0x161/0x300
[  484.828370][ T3396]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0
[  484.828416][ T3396]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  484.828446][ T3396]  ? kstrtoull+0x13b/0x1e0
[  484.828473][ T3396]  ? kstrtouint+0x78/0xf0
[  484.828499][ T3396]  ? ioctl_has_perm+0x1bc/0x500
[  484.828521][ T3396]  ? __asan_memcpy+0x5a/0x80
[  484.828560][ T3396]  ? ioctl_has_perm+0x408/0x500
[  484.828590][ T3396]  ? has_cap_mac_admin+0xd0/0xd0
[  484.828618][ T3396]  ? __kasan_check_write+0x18/0x20
[  484.828648][ T3396]  ? mutex_lock_killable+0x97/0x1d0
[  484.828667][ T3396]  ? __cfi_mutex_lock_killable+0x10/0x10
[  484.828687][ T3396]  ? proc_fail_nth_write+0x184/0x220
[  484.828730][ T3396]  kvm_vcpu_ioctl+0xa48/0x1000
[  484.828765][ T3396]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  484.828799][ T3396]  ? __cfi_vfs_write+0x10/0x10
[  484.828821][ T3396]  ? __kasan_check_write+0x18/0x20
[  484.828858][ T3396]  ? mutex_unlock+0x90/0x240
[  484.828884][ T3396]  ? __cfi_mutex_unlock+0x10/0x10
[  484.828908][ T3396]  ? __fget_files+0x2c5/0x340
[  484.828936][ T3396]  ? __fget_files+0x2c5/0x340
[  484.828951][ T3396]  ? bpf_lsm_file_ioctl+0xd/0x20
[  484.828968][ T3396]  ? security_file_ioctl+0x3e/0x110
[  484.828988][ T3396]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  484.829034][ T3396]  __se_sys_ioctl+0x132/0x1b0
[  484.829057][ T3396]  __x64_sys_ioctl+0x7f/0xa0
[  484.829079][ T3396]  x64_sys_call+0x1878/0x2ee0
[  484.829108][ T3396]  do_syscall_64+0x57/0xf0
[  484.829132][ T3396]  ? clear_bhb_loop+0x50/0xa0
[  484.829175][ T3396]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  484.829209][ T3396] RIP: 0033:0x7f33b059c819
[  484.829232][ T3396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.829252][ T3396] RSP: 002b:00007f33b1459028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  484.829271][ T3396] RAX: ffffffffffffffda RBX: 00007f33b0815fa0 RCX: 00007f33b059c819
[  484.829284][ T3396] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  484.829310][ T3396] RBP: 00007f33b1459090 R08: 0000000000000000 R09: 0000000000000000
[  484.829327][ T3396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.829342][ T3396] R13: 00007f33b0816038 R14: 00007f33b0815fa0 R15: 00007ffd8ef025e8
[  484.829361][ T3396]  </TASK>
[  484.861176][   T46] usb 7-1: USB disconnect, device number 4
[  485.283480][ T3402] netlink: 'syz.4.990': attribute type 16 has an invalid length.
[  485.297760][   T36] audit: type=1400 audit(1775829144.031:1001): avc:  denied  { append } for  pid=3403 comm="syz.3.991" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  485.321405][ T3404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.991'.
[  485.400788][ T3407] tmpfs: Unknown parameter 'usrquota'
[  485.429046][   T36] audit: type=1400 audit(1775829144.161:1002): avc:  denied  { accept } for  pid=3414 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  485.429691][ T3415] netlink: 'syz.3.995': attribute type 1 has an invalid length.
[  485.721326][ T3429] FAULT_INJECTION: forcing a failure.
[  485.721326][ T3429] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  485.735091][ T3429] CPU: 1 UID: 0 PID: 3429 Comm: syz.3.1000 Not tainted syzkaller #0 a2fb3ed8c3bd0f53318b258069d3c0dc388d3ecc
[  485.735129][ T3429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  485.735144][ T3429] Call Trace:
[  485.735152][ T3429]  <TASK>
[  485.735161][ T3429]  __dump_stack+0x21/0x30
[  485.735196][ T3429]  dump_stack_lvl+0x140/0x1c0
[  485.735225][ T3429]  ? __cfi_dump_stack_lvl+0x10/0x10
[  485.735256][ T3429]  dump_stack+0x19/0x20
[  485.735284][ T3429]  should_fail_ex+0x3d7/0x530
[  485.735315][ T3429]  should_fail_alloc_page+0xec/0x110
[  485.735340][ T3429]  __alloc_pages_noprof+0x1c0/0x7e0
[  485.735371][ T3429]  ? kernel_text_address+0xa9/0xe0
[  485.735400][ T3429]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  485.735429][ T3429]  ? unwind_get_return_address+0x51/0x90
[  485.735458][ T3429]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  485.735488][ T3429]  get_free_pages_noprof+0x14/0x40
[  485.735516][ T3429]  kasan_populate_vmalloc_pte+0x4c/0x170
[  485.735549][ T3429]  __apply_to_page_range+0x7c2/0xd00
[  485.735588][ T3429]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[  485.735622][ T3429]  ? do_syscall_64+0x57/0xf0
[  485.735662][ T3429]  ? apply_to_page_range+0x60/0x60
[  485.735698][ T3429]  ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10
[  485.735732][ T3429]  apply_to_page_range+0x3f/0x60
[  485.735766][ T3429]  kasan_populate_vmalloc+0x64/0x80
[  485.735800][ T3429]  alloc_vmap_area+0x1e6a/0x26c0
[  485.735832][ T3429]  ? kasan_save_alloc_info+0x40/0x50
[  485.735863][ T3429]  ? __kasan_kmalloc+0x96/0xb0
[  485.735886][ T3429]  ? vm_map_ram+0xdc0/0xdc0
[  485.735913][ T3429]  __get_vm_area_node+0x201/0x3d0
[  485.735942][ T3429]  __vmalloc_node_range_noprof+0x30e/0x1480
[  485.735973][ T3429]  ? copy_process+0x55a/0x32a0
[  485.736004][ T3429]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  485.736035][ T3429]  ? kasan_save_alloc_info+0x40/0x50
[  485.736073][ T3429]  ? __kasan_slab_alloc+0x73/0x90
[  485.736096][ T3429]  ? arch_dup_task_struct+0x5b/0xe0
[  485.736142][ T3429]  ? __asan_memcpy+0x5a/0x80
[  485.736174][ T3429]  dup_task_struct+0x5d6/0xd80
[  485.736201][ T3429]  ? copy_process+0x55a/0x32a0
[  485.736228][ T3429]  ? _raw_spin_lock_irq+0x93/0x120
[  485.736263][ T3429]  ? copy_process+0x32a0/0x32a0
[  485.736290][ T3429]  ? __kasan_check_write+0x18/0x20
[  485.736322][ T3429]  copy_process+0x55a/0x32a0
[  485.736360][ T3429]  ? __cfi_copy_process+0x10/0x10
[  485.736387][ T3429]  ? __kmalloc_cache_noprof+0x23c/0x470
[  485.736422][ T3429]  ? __kasan_check_write+0x18/0x20
[  485.736454][ T3429]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  485.736480][ T3429]  vhost_task_create+0x1f7/0x400
[  485.736502][ T3429]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  485.736530][ T3429]  ? __cfi_vhost_task_create+0x10/0x10
[  485.736554][ T3429]  ? __cfi_vhost_task_fn+0x10/0x10
[  485.736577][ T3429]  ? __kasan_check_write+0x18/0x20
[  485.736608][ T3429]  ? mutex_lock+0x97/0x1d0
[  485.736634][ T3429]  ? __cfi_mutex_lock+0x10/0x10
[  485.736660][ T3429]  ? kernel_text_address+0xa9/0xe0
[  485.736691][ T3429]  kvm_mmu_post_init_vm+0x161/0x300
[  485.736723][ T3429]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0
[  485.736756][ T3429]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  485.736813][ T3429]  ? kstrtoull+0x13b/0x1e0
[  485.736842][ T3429]  ? kstrtouint+0x78/0xf0
[  485.736869][ T3429]  ? ioctl_has_perm+0x1bc/0x500
[  485.736900][ T3429]  ? __asan_memcpy+0x5a/0x80
[  485.736932][ T3429]  ? ioctl_has_perm+0x408/0x500
[  485.736963][ T3429]  ? has_cap_mac_admin+0xd0/0xd0
[  485.736993][ T3429]  ? __kasan_check_write+0x18/0x20
[  485.737024][ T3429]  ? mutex_lock_killable+0x97/0x1d0
[  485.737058][ T3429]  ? __cfi_mutex_lock_killable+0x10/0x10
[  485.737087][ T3429]  ? proc_fail_nth_write+0x184/0x220
[  485.737118][ T3429]  kvm_vcpu_ioctl+0xa48/0x1000
[  485.737154][ T3429]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  485.737190][ T3429]  ? __cfi_vfs_write+0x10/0x10
[  485.737223][ T3429]  ? __kasan_check_write+0x18/0x20
[  485.737255][ T3429]  ? mutex_unlock+0x90/0x240
[  485.737282][ T3429]  ? __cfi_mutex_unlock+0x10/0x10
[  485.737309][ T3429]  ? __fget_files+0x2c5/0x340
[  485.737332][ T3429]  ? __fget_files+0x2c5/0x340
[  485.737402][ T3429]  ? bpf_lsm_file_ioctl+0xd/0x20
[  485.737427][ T3429]  ? security_file_ioctl+0x3e/0x110
[  485.737456][ T3429]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  485.737491][ T3429]  __se_sys_ioctl+0x132/0x1b0
[  485.737514][ T3429]  __x64_sys_ioctl+0x7f/0xa0
[  485.737536][ T3429]  x64_sys_call+0x1878/0x2ee0
[  485.737571][ T3429]  do_syscall_64+0x57/0xf0
[  485.737606][ T3429]  ? clear_bhb_loop+0x50/0xa0
[  485.737630][ T3429]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  485.737666][ T3429] RIP: 0033:0x7f33b059c819
[  485.737688][ T3429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.737710][ T3429] RSP: 002b:00007f33b1459028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  485.737737][ T3429] RAX: ffffffffffffffda RBX: 00007f33b0815fa0 RCX: 00007f33b059c819
[  485.737756][ T3429] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  485.737772][ T3429] RBP: 00007f33b1459090 R08: 0000000000000000 R09: 0000000000000000
[  485.737788][ T3429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  485.737804][ T3429] R13: 00007f33b0816038 R14: 00007f33b0815fa0 R15: 00007ffd8ef025e8
[  485.737826][ T3429]  </TASK>
[  485.737961][ T3429] syz.3.1000: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  485.982833][   T66] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  485.986041][ T3429] ,cpuset=
[  486.156167][   T66] usb 7-1: unable to get BOS descriptor or descriptor too short
[  486.159412][ T3429] syz3
[  486.167909][   T66] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  486.169062][ T3429] ,mems_allowed=0
[  486.174922][   T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.177913][ T3429] 
[  486.177926][ T3429] CPU: 1 UID: 0 PID: 3429 Comm: syz.3.1000 Not tainted syzkaller #0 a2fb3ed8c3bd0f53318b258069d3c0dc388d3ecc
[  486.177996][ T3429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  486.178062][ T3429] Call Trace:
[  486.178096][ T3429]  <TASK>
[  486.178133][ T3429]  __dump_stack+0x21/0x30
[  486.178230][ T3429]  dump_stack_lvl+0x140/0x1c0
[  486.178297][ T3429]  ? __cfi_dump_stack_lvl+0x10/0x10
[  486.178376][ T3429]  dump_stack+0x19/0x20
[  486.178442][ T3429]  warn_alloc+0x1e7/0x2c0
[  486.178518][ T3429]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  486.178608][ T3429]  ? __cfi_warn_alloc+0x10/0x10
[  486.178680][ T3429]  ? kfree+0x158/0x440
[  486.178756][ T3429]  ? __get_vm_area_node+0x21a/0x3d0
[  486.178832][ T3429]  __vmalloc_node_range_noprof+0x333/0x1480
[  486.178920][ T3429]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  486.178996][ T3429]  ? kasan_save_alloc_info+0x40/0x50
[  486.179080][ T3429]  ? __kasan_slab_alloc+0x73/0x90
[  486.179135][ T3429]  ? arch_dup_task_struct+0x5b/0xe0
[  486.179213][ T3429]  ? __asan_memcpy+0x5a/0x80
[  486.179291][ T3429]  dup_task_struct+0x5d6/0xd80
[  486.179356][ T3429]  ? copy_process+0x55a/0x32a0
[  486.179444][ T3429]  ? _raw_spin_lock_irq+0x93/0x120
[  486.179565][ T3429]  ? copy_process+0x32a0/0x32a0
[  486.179629][ T3429]  ? __kasan_check_write+0x18/0x20
[  486.179706][ T3429]  copy_process+0x55a/0x32a0
[  486.179782][ T3429]  ? __cfi_copy_process+0x10/0x10
[  486.179847][ T3429]  ? __kmalloc_cache_noprof+0x23c/0x470
[  486.179933][ T3429]  ? __kasan_check_write+0x18/0x20
[  486.180003][ T3429]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  486.180159][ T3429]  vhost_task_create+0x1f7/0x400
[  486.180213][ T3429]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  486.180315][ T3429]  ? __cfi_vhost_task_create+0x10/0x10
[  486.180370][ T3429]  ? __cfi_vhost_task_fn+0x10/0x10
[  486.180424][ T3429]  ? __kasan_check_write+0x18/0x20
[  486.180501][ T3429]  ? mutex_lock+0x97/0x1d0
[  486.180567][ T3429]  ? __cfi_mutex_lock+0x10/0x10
[  486.180630][ T3429]  ? kernel_text_address+0xa9/0xe0
[  486.180698][ T3429]  kvm_mmu_post_init_vm+0x161/0x300
[  486.180782][ T3429]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0
[  486.180890][ T3429]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  486.180979][ T3429]  ? kstrtoull+0x13b/0x1e0
[  486.181056][ T3429]  ? kstrtouint+0x78/0xf0
[  486.181123][ T3429]  ? ioctl_has_perm+0x1bc/0x500
[  486.181199][ T3429]  ? __asan_memcpy+0x5a/0x80
[  486.181268][ T3429]  ? ioctl_has_perm+0x408/0x500
[  486.181344][ T3429]  ? has_cap_mac_admin+0xd0/0xd0
[  486.181420][ T3429]  ? __kasan_check_write+0x18/0x20
[  486.181482][ T3429]  ? mutex_lock_killable+0x97/0x1d0
[  486.181555][ T3429]  ? __cfi_mutex_lock_killable+0x10/0x10
[  486.181622][ T3429]  ? proc_fail_nth_write+0x184/0x220
[  486.181699][ T3429]  kvm_vcpu_ioctl+0xa48/0x1000
[  486.181786][ T3429]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  486.181872][ T3429]  ? __cfi_vfs_write+0x10/0x10
[  486.181950][ T3429]  ? __kasan_check_write+0x18/0x20
[  486.182047][ T3429]  ? mutex_unlock+0x90/0x240
[  486.182113][ T3429]  ? __cfi_mutex_unlock+0x10/0x10
[  486.182185][ T3429]  ? __fget_files+0x2c5/0x340
[  486.182256][ T3429]  ? __fget_files+0x2c5/0x340
[  486.182314][ T3429]  ? bpf_lsm_file_ioctl+0xd/0x20
[  486.182371][ T3429]  ? security_file_ioctl+0x3e/0x110
[  486.182445][ T3429]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  486.182530][ T3429]  __se_sys_ioctl+0x132/0x1b0
[  486.182586][ T3429]  __x64_sys_ioctl+0x7f/0xa0
[  486.182630][ T3429]  x64_sys_call+0x1878/0x2ee0
[  486.182661][ T3429]  do_syscall_64+0x57/0xf0
[  486.182711][ T3429]  ? clear_bhb_loop+0x50/0xa0
[  486.182779][ T3429]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  486.182881][ T3429] RIP: 0033:0x7f33b059c819
[  486.182935][ T3429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.183004][ T3429] RSP: 002b:00007f33b1459028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  486.183079][ T3429] RAX: ffffffffffffffda RBX: 00007f33b0815fa0 RCX: 00007f33b059c819
[  486.183125][ T3429] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  486.183168][ T3429] RBP: 00007f33b1459090 R08: 0000000000000000 R09: 0000000000000000
[  486.183211][ T3429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.183247][ T3429] R13: 00007f33b0816038 R14: 00007f33b0815fa0 R15: 00007ffd8ef025e8
[  486.183312][ T3429]  </TASK>
[  486.183477][ T3429] Mem-Info:
[  486.202101][   T66] usb 7-1: Product: syz
[  486.249157][ T3429] active_anon:25577 inactive_anon:1 isolated_anon:0
[  486.249157][ T3429]  active_file:18456 inactive_file:2622 isolated_file:0
[  486.249157][ T3429]  unevictable:0 dirty:121 writeback:0
[  486.249157][ T3429]  slab_reclaimable:6220 slab_unreclaimable:72096
[  486.249157][ T3429]  mapped:30101 shmem:16615 pagetables:1170
[  486.249157][ T3429]  sec_pagetables:6 bounce:0
[  486.249157][ T3429]  kernel_misc_reclaimable:0
[  486.249157][ T3429]  free:1479507 free_pcp:12698 free_cma:0
[  486.256826][   T66] usb 7-1: Manufacturer: syz
[  486.279439][ T3429] Node 0 active_anon:102308kB inactive_anon:4kB active_file:73824kB inactive_file:10488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120404kB dirty:484kB writeback:0kB shmem:66460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6008kB pagetables:4680kB sec_pagetables:24kB all_unreclaimable? no
[  486.291872][   T66] usb 7-1: SerialNumber: syz
[  486.298864][ T3429] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963356kB mlocked:0kB bounce:0kB free_pcp:5192kB local_pcp:0kB free_cma:0kB
[  486.381083][   T36] audit: type=1400 audit(1775829145.111:1003): avc:  denied  { setopt } for  pid=3440 comm="syz.1.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  486.382991][ T3429] lowmem_reserve[]: 0
[  486.397628][   T36] audit: type=1400 audit(1775829145.121:1004): avc:  denied  { accept } for  pid=3440 comm="syz.1.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  486.925999][ T3429]  3921 3921
[  486.929577][ T3429] Normal free:2975644kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102380kB inactive_anon:4kB active_file:73824kB inactive_file:10496kB unevictable:0kB writepending:492kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:29880kB local_pcp:27536kB free_cma:0kB
[  486.965075][ T3429] lowmem_reserve[]: 0 0 0
[  486.969562][ T3429] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  486.985975][ T3429] Normal: 187*4kB (UE) 52*8kB (UME) 45*16kB (UE) 100*32kB (UME) 39*64kB (UME) 48*128kB (UME) 36*256kB (UME) 21*512kB (UME) 9*1024kB (UME) 6*2048kB (UM) 713*4096kB (UM) = 2975644kB
[  487.004931][ T3429] 37692 total pagecache pages
[  487.009699][ T3429] 2 pages in swap cache
[  487.014162][ T3429] Free swap  = 124200kB
[  487.018426][ T3429] Total swap = 124996kB
[  487.022920][ T3429] 2097051 pages RAM
[  487.026854][ T3429] 0 pages HighMem/MovableOnly
[  487.033017][ T3429] 352246 pages reserved
[  487.037390][ T3429] 0 pages cma reserved
[  487.046111][ T3429] Memory allocations:
[  487.050181][ T3429]          0 B        0 init/main.c:1477 func:do_initcalls
[  487.057653][ T3429]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  487.065833][ T3429]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  487.073651][ T3429]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  487.081691][ T3429]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  487.089892][ T3429]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  487.098566][ T3429]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  487.106751][ T3429]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  487.115522][ T3429]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  487.123537][ T3429]          0 B        0 init/initramfs.c:101 func:find_link
[  487.282071][ T1567] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  487.307999][   T36] audit: type=1400 audit(1775829146.041:1005): avc:  denied  { listen } for  pid=3457 comm="syz.3.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  487.432069][ T1567] usb 5-1: Using ep0 maxpacket: 16
[  487.438675][ T1567] usb 5-1: unable to get BOS descriptor or descriptor too short
[  487.447472][ T1567] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  487.460226][ T1567] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  487.469532][ T1567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.477786][ T1567] usb 5-1: Product: syz
[  487.482214][ T1567] usb 5-1: Manufacturer: syz
[  487.486992][ T1567] usb 5-1: SerialNumber: syz
[  487.515595][ T3460] netlink: 'syz.1.1012': attribute type 12 has an invalid length.
[  487.584410][   T66] usb 7-1: 1:1: cannot get freq at ep 0x1
[  487.600572][   T66] usb 7-1: USB disconnect, device number 5
[  487.613734][  T531] udevd[531]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  487.720035][ T3482] syzkaller0: entered allmulticast mode
[  487.726462][ T3482] syzkaller0: entered promiscuous mode
[  488.108250][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.118124][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.215010][ T1567] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  488.226112][ T1567] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  488.244680][ T3482] syzkaller0: left promiscuous mode
[  488.250227][ T3482] syzkaller0: left allmulticast mode
[  488.260789][ T1567] usb 5-1: USB disconnect, device number 78
[  488.277954][   T36] audit: type=1400 audit(1775829147.011:1006): avc:  denied  { ioctl } for  pid=3492 comm="syz.1.1023" path="socket:[33851]" dev="sockfs" ino=33851 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  488.615139][ T1567] hid (null): global environment stack underflow
[  488.625405][ T1567] hid (null): nested delimiters
[  488.630431][ T1567] hid (null): unknown global tag 0xe
[  488.635927][ T1567] hid (null): unknown global tag 0xd
[  488.643306][ T1567] hid (null): usage index exceeded
[  488.649372][ T1567] hid-generic 0001:075E:0008.0019: unknown main item tag 0xe
[  488.656967][ T1567] hid-generic 0001:075E:0008.0019: unknown main item tag 0x0
[  488.665443][ T1567] hid-generic 0001:075E:0008.0019: global environment stack underflow
[  488.674004][ T1567] hid-generic 0001:075E:0008.0019: item 0 1 1 11 parsing failed
[  488.681879][ T1567] hid-generic 0001:075E:0008.0019: probe with driver hid-generic failed with error -22
[  488.877477][   T36] audit: type=1400 audit(1775829147.611:1007): avc:  denied  { create } for  pid=3526 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  488.977128][ T3546] netlink: 'syz.1.1044': attribute type 28 has an invalid length.
[  489.082073][ T1567] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  489.098374][ T3557] rust_binder: Write failure EINVAL in pid:51
[  489.099725][ T3557] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1048'.
[  489.117356][   T36] audit: type=1400 audit(1775829147.851:1008): avc:  denied  { map } for  pid=3556 comm="syz.6.1048" path="socket:[34177]" dev="sockfs" ino=34177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  489.243231][ T1567] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  489.251314][ T1567] usb 5-1: config 0 has no interface number 0
[  489.257503][ T1567] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  489.268965][ T1567] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.279114][ T1567] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  489.292256][ T1567] usb 5-1: config 0 interface 1 has no altsetting 0
[  489.298991][ T1567] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  489.308527][ T1567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.318166][ T1567] usb 5-1: config 0 descriptor??
[  489.334365][ T3559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.344003][ T3559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.611980][ T3565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1051'.
[  489.621103][ T3565] tipc: Invalid UDP bearer configuration
[  489.621137][ T3565] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  489.649911][   T36] audit: type=1326 audit(1775829148.381:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.1.1052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104899c819 code=0x0
[  489.688958][ T3569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  489.848749][ T3575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.858331][ T3575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.929313][ T1567] input: HID 145f:0212 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.001A/input/input27
[  489.955717][ T1567] input: HID 145f:0212 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.001A/input/input28
[  489.963485][ T3579] netlink: 'syz.3.1055': attribute type 6 has an invalid length.
[  489.988233][ T3579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.999253][ T1567] uclogic 0003:145F:0212.001A: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.4-1/input1
[  490.014597][ T3579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.027234][ T3579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.054237][ T3579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.065511][ T3579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.081932][ T3579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.142134][  T307] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  490.187426][   T46] usb 5-1: USB disconnect, device number 79
[  490.272096][  T307] usb 7-1: device descriptor read/64, error -71
[  490.522083][  T307] usb 7-1: device descriptor read/64, error -71
[  490.772068][  T307] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  490.912118][  T307] usb 7-1: device descriptor read/64, error -71
[  491.152136][  T307] usb 7-1: device descriptor read/64, error -71
[  491.274251][  T307] usb usb7-port1: attempt power cycle
[  491.612076][  T307] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  491.633256][  T307] usb 7-1: device descriptor read/8, error -71
[  491.709073][   T36] audit: type=1400 audit(1775829150.441:1010): avc:  denied  { append } for  pid=3591 comm="syz.4.1060" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  491.733302][ T3592] 9p: Unknown Cache mode or invalid value read��)ahead
[  491.783143][  T307] usb 7-1: device descriptor read/8, error -71
[  492.032101][  T307] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  492.053215][  T307] usb 7-1: device descriptor read/8, error -71
[  492.062134][   T46] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  492.192077][  T307] usb 7-1: device descriptor read/8, error -71
[  492.223823][   T46] usb 5-1: config 0 has an invalid interface number: 123 but max is 0
[  492.232703][   T46] usb 5-1: config 0 has no interface number 0
[  492.238972][   T46] usb 5-1: config 0 interface 123 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  492.252988][   T46] usb 5-1: config 0 interface 123 has no altsetting 0
[  492.261452][   T46] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  492.271210][   T46] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  492.279917][   T46] usb 5-1: Product: syz
[  492.284681][   T46] usb 5-1: Manufacturer: syz
[  492.291252][   T46] usb 5-1: config 0 descriptor??
[  492.302689][  T307] usb usb7-port1: unable to enumerate USB device
[  492.616371][   T46] ftdi_sio 5-1:0.123: FTDI USB Serial Device converter detected
[  492.640986][   T46] ftdi_sio ttyUSB0: unknown device type: 0xa446
[  492.656712][   T46] usb 5-1: USB disconnect, device number 80
[  492.720514][   T46] ftdi_sio 5-1:0.123: device disconnected
[  492.731911][ T3603] overlayfs: conflicting options: userxattr,redirect_dir=on
[  492.757250][ T3607] fuse: Bad value for 'fd'
[  492.808941][ T3614] netlink: 'syz.1.1065': attribute type 27 has an invalid length.
[  492.844324][ T3616] netlink: 'syz.1.1066': attribute type 16 has an invalid length.
[  493.036241][ T3626] netlink: 'syz.3.1071': attribute type 46 has an invalid length.
[  493.073983][ T3630] fuse: Bad value for 'fd'
[  493.105513][ T3634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.114967][ T3634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.126054][ T3634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.135687][ T3634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.146267][ T3634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.155804][ T3634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.338637][ T3650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.347403][ T3650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.502121][  T307] usb 5-1: new low-speed USB device number 81 using dummy_hcd
[  493.622083][ T1567] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  493.632250][  T307] usb 5-1: device descriptor read/64, error -71
[  493.678424][ T3654] fuse: Unknown parameter '0x0000000000000003'
[  493.711551][   T36] audit: type=1400 audit(1775829152.441:1011): avc:  denied  { append } for  pid=3657 comm="syz.3.1084" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  493.774501][ T1567] usb 7-1: config 0 has an invalid interface number: 64 but max is 0
[  493.782803][ T1567] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  493.793041][ T1567] usb 7-1: config 0 has no interface number 0
[  493.801196][ T1567] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  493.811747][ T1567] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.820304][ T1567] usb 7-1: Product: syz
[  493.825026][ T1567] usb 7-1: Manufacturer: syz
[  493.829698][ T1567] usb 7-1: SerialNumber: syz
[  493.835232][ T1567] usb 7-1: config 0 descriptor??
[  493.872186][  T307] usb 5-1: device descriptor read/64, error -71
[  494.047471][ T1567] usb 7-1: USB disconnect, device number 10
[  494.068384][ T3682] batadv_slave_1: entered promiscuous mode
[  494.075004][ T3681] batadv_slave_1: left promiscuous mode
[  494.112089][  T307] usb 5-1: new low-speed USB device number 82 using dummy_hcd
[  494.155932][ T3689] kvm_intel: kvm [3688]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xc305
[  494.166956][ T3689] kvm: kvm [3688]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x9500
[  494.242198][  T307] usb 5-1: device descriptor read/64, error -71
[  494.325814][   T36] audit: type=1400 audit(1775829153.061:1012): avc:  denied  { mounton } for  pid=3692 comm="syz.3.1095" path="/410/file0/bus" dev="ramfs" ino=35929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  494.327563][ T3693] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  494.356220][ T3693] overlayfs: failed to set xattr on upper
[  494.362091][ T3693] overlayfs: ...falling back to redirect_dir=nofollow.
[  494.369084][ T3693] overlayfs: ...falling back to uuid=null.
[  494.375034][ T3693] overlayfs: conflicting lowerdir path
[  494.388702][   T36] audit: type=1400 audit(1775829153.121:1013): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  494.409186][  T291] ------------[ cut here ]------------
[  494.414825][  T291] WARNING: CPU: 0 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110
[  494.423102][  T291] Modules linked in:
[  494.427089][  T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 a2fb3ed8c3bd0f53318b258069d3c0dc388d3ecc
[  494.438964][  T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  494.449370][  T291] RIP: 0010:drop_nlink+0xce/0x110
[  494.454588][  T291] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c2 d4 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[  494.475075][  T291] RSP: 0018:ffffc9000b64fc40 EFLAGS: 00010293
[  494.481187][  T291] RAX: ffffffff81f1d5fe RBX: ffff888116716080 RCX: ffff8881242e4c00
[  494.489605][  T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  494.498002][  T291] RBP: ffffc9000b64fc68 R08: 0000000000000003 R09: 0000000000000004
[  494.506078][  T291] R10: dffffc0000000000 R11: fffff520016c9f80 R12: dffffc0000000000
[  494.514141][  T291] R13: 1ffff11022ce2c19 R14: ffff8881167160c8 R15: 0000000000000000
[  494.522228][  T291] FS:  0000555588fc3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  494.531215][  T291] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  494.537876][  T291] CR2: 0000555588ff69c8 CR3: 0000000121016000 CR4: 00000000003526b0
[  494.546568][  T291] Call Trace:
[  494.549872][  T291]  <TASK>
[  494.552873][  T291]  simple_rmdir+0x153/0x260
[  494.557607][  T291]  vfs_rmdir+0x3e3/0x560
[  494.562163][  T291]  incfs_kill_sb+0x109/0x230
[  494.567464][  T291]  deactivate_locked_super+0xd5/0x2a0
[  494.572962][  T291]  deactivate_super+0xb8/0xe0
[  494.577962][  T291]  cleanup_mnt+0x406/0x4a0
[  494.582608][  T291]  __cleanup_mnt+0x1d/0x40
[  494.587269][  T291]  task_work_run+0x1e8/0x260
[  494.592161][  T291]  ? __cfi_task_work_run+0x10/0x10
[  494.597933][  T291]  ? __x64_sys_umount+0x12e/0x180
[  494.603512][  T291]  ? __cfi___x64_sys_umount+0x10/0x10
[  494.609370][  T291]  ? fpregs_restore_userregs+0x11c/0x260
[  494.615278][  T291]  resume_user_mode_work+0x35/0x50
[  494.620540][  T291]  syscall_exit_to_user_mode+0x63/0xb0
[  494.626240][  T291]  do_syscall_64+0x63/0xf0
[  494.630773][  T291]  ? clear_bhb_loop+0x50/0xa0
[  494.635772][  T291]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  494.641727][  T291] RIP: 0033:0x7f33b059da57
[  494.646392][  T291] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  494.666208][  T291] RSP: 002b:00007ffd8eeff678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  494.674911][  T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f33b059da57
[  494.682991][  T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8eeff730
[  494.691097][  T291] RBP: 00007ffd8eeff730 R08: 00007ffd8ef00730 R09: 00000000ffffffff
[  494.699342][  T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8ef00820
[  494.707557][  T291] R13: 00007f33b0632048 R14: 0000000000078b10 R15: 00007ffd8ef029e0
[  494.715664][  T291]  </TASK>
[  494.718723][  T291] ---[ end trace 0000000000000000 ]---
[  494.724526][  T291] ==================================================================
[  494.732982][  T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[  494.739273][  T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291
[  494.747356][  T291] 
[  494.749704][  T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G        W          syzkaller #0 a2fb3ed8c3bd0f53318b258069d3c0dc388d3ecc
[  494.749732][  T291] Tainted: [W]=WARN
[  494.749739][  T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  494.749751][  T291] Call Trace:
[  494.749758][  T291]  <TASK>
[  494.749767][  T291]  __dump_stack+0x21/0x30
[  494.749794][  T291]  dump_stack_lvl+0x140/0x1c0
[  494.749816][  T291]  ? __cfi_dump_stack_lvl+0x10/0x10
[  494.749839][  T291]  print_report+0x3d/0x70
[  494.749872][  T291]  kasan_report+0x162/0x1a0
[  494.749890][  T291]  ? ihold+0x24/0x70
[  494.749905][  T291]  ? _raw_spin_unlock+0x45/0x60
[  494.749930][  T291]  ? ihold+0x24/0x70
[  494.749945][  T291]  kasan_check_range+0x25a/0x2b0
[  494.749963][  T291]  __kasan_check_write+0x18/0x20
[  494.749986][  T291]  ihold+0x24/0x70
[  494.750000][  T291]  vfs_rmdir+0x26a/0x560
[  494.750024][  T291]  incfs_kill_sb+0x109/0x230
[  494.750048][  T291]  deactivate_locked_super+0xd5/0x2a0
[  494.750067][  T291]  deactivate_super+0xb8/0xe0
[  494.750086][  T291]  cleanup_mnt+0x406/0x4a0
[  494.750102][  T291]  __cleanup_mnt+0x1d/0x40
[  494.750117][  T291]  task_work_run+0x1e8/0x260
[  494.750137][  T291]  ? __cfi_task_work_run+0x10/0x10
[  494.750156][  T291]  ? __x64_sys_umount+0x12e/0x180
[  494.750179][  T291]  ? __cfi___x64_sys_umount+0x10/0x10
[  494.750199][  T291]  ? fpregs_restore_userregs+0x11c/0x260
[  494.750248][  T291]  resume_user_mode_work+0x35/0x50
[  494.750272][  T291]  syscall_exit_to_user_mode+0x63/0xb0
[  494.750294][  T291]  do_syscall_64+0x63/0xf0
[  494.750320][  T291]  ? clear_bhb_loop+0x50/0xa0
[  494.750337][  T291]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  494.750363][  T291] RIP: 0033:0x7f33b059da57
[  494.750378][  T291] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  494.750392][  T291] RSP: 002b:00007ffd8eeff678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  494.750410][  T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f33b059da57
[  494.750423][  T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8eeff730
[  494.750433][  T291] RBP: 00007ffd8eeff730 R08: 00007ffd8ef00730 R09: 00000000ffffffff
[  494.750446][  T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8ef00820
[  494.750458][  T291] R13: 00007f33b0632048 R14: 0000000000078b10 R15: 00007ffd8ef029e0
[  494.750473][  T291]  </TASK>
[  494.750479][  T291] ==================================================================
[  494.999111][  T291] Disabling lock debugging due to kernel taint
[  495.002324][  T307] usb 5-1: device descriptor read/64, error -71
[  495.005535][  T291] BUG: kernel NULL pointer dereference, address: 0000000000000168
[  495.019352][   T36] audit: type=1400 audit(1775829153.751:1014): avc:  denied  { read } for  pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  495.019470][  T291] #PF: supervisor write access in kernel mode
[  495.041724][   T36] audit: type=1400 audit(1775829153.751:1015): avc:  denied  { search } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.047445][  T291] #PF: error_code(0x0002) - not-present page
[  495.047484][  T291] PGD 8000000131b15067 
[  495.070572][   T36] audit: type=1400 audit(1775829153.751:1016): avc:  denied  { write } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.075052][  T291] P4D 8000000131b15067 PUD 0 
[  495.075081][  T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  495.080498][   T36] audit: type=1400 audit(1775829153.751:1017): avc:  denied  { add_name } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  495.100891][  T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G    B   W          syzkaller #0 a2fb3ed8c3bd0f53318b258069d3c0dc388d3ecc
[  495.100935][  T291] Tainted: [B]=BAD_PAGE, [W]=WARN
[  495.100946][  T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  495.100980][  T291] RIP: 0010:ihold+0x2a/0x70
[  495.101017][  T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 ad cb 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 bd
[  495.101037][  T291] RSP: 0018:ffffc9000b64fca0 EFLAGS: 00010246
[  495.107083][   T36] audit: type=1400 audit(1775829153.751:1018): avc:  denied  { create } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  495.111800][  T291] 
[  495.111810][  T291] RAX: ffff8881242e4c00 RBX: 0000000000000000 RCX: ffff8881242e4c00
[  495.111832][  T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  495.133659][   T36] audit: type=1400 audit(1775829153.751:1019): avc:  denied  { append open } for  pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  495.145792][  T291] RBP: ffffc9000b64fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128
[  495.145816][  T291] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88811671608c
[  495.145834][  T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  495.163714][  T307] usb usb5-port1: attempt power cycle
[  495.166105][  T291] FS:  0000555588fc3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  495.293196][  T291] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  495.299904][  T291] CR2: 0000000000000168 CR3: 0000000121016000 CR4: 00000000003526b0
[  495.307994][  T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  495.316082][  T291] DR3: fffffffffffffffc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  495.324093][  T291] Call Trace:
[  495.327386][  T291]  <TASK>
[  495.330335][  T291]  vfs_rmdir+0x26a/0x560
[  495.334603][  T291]  incfs_kill_sb+0x109/0x230
[  495.339284][  T291]  deactivate_locked_super+0xd5/0x2a0
[  495.344676][  T291]  deactivate_super+0xb8/0xe0
[  495.349369][  T291]  cleanup_mnt+0x406/0x4a0
[  495.353954][  T291]  __cleanup_mnt+0x1d/0x40
[  495.358381][  T291]  task_work_run+0x1e8/0x260
[  495.363016][  T291]  ? __cfi_task_work_run+0x10/0x10
[  495.368498][  T291]  ? __x64_sys_umount+0x12e/0x180
[  495.373906][  T291]  ? __cfi___x64_sys_umount+0x10/0x10
[  495.379390][  T291]  ? fpregs_restore_userregs+0x11c/0x260
[  495.385037][  T291]  resume_user_mode_work+0x35/0x50
[  495.390318][  T291]  syscall_exit_to_user_mode+0x63/0xb0
[  495.395835][  T291]  do_syscall_64+0x63/0xf0
[  495.400368][  T291]  ? clear_bhb_loop+0x50/0xa0
[  495.405077][  T291]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  495.411097][  T291] RIP: 0033:0x7f33b059da57
[  495.415527][  T291] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  495.435177][  T291] RSP: 002b:00007ffd8eeff678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  495.443645][  T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f33b059da57
[  495.451719][  T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8eeff730
[  495.459711][  T291] RBP: 00007ffd8eeff730 R08: 00007ffd8ef00730 R09: 00000000ffffffff
[  495.467828][  T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8ef00820
[  495.476044][  T291] R13: 00007f33b0632048 R14: 0000000000078b10 R15: 00007ffd8ef029e0
[  495.484471][  T291]  </TASK>
[  495.487519][  T291] Modules linked in:
[  495.491522][  T291] CR2: 0000000000000168
[  495.495698][  T291] ---[ end trace 0000000000000000 ]---
[  495.501210][  T291] RIP: 0010:ihold+0x2a/0x70
[  495.505868][  T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 ad cb 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 bd
[  495.525674][  T291] RSP: 0018:ffffc9000b64fca0 EFLAGS: 00010246
[  495.531852][  T291] RAX: ffff8881242e4c00 RBX: 0000000000000000 RCX: ffff8881242e4c00
[  495.539847][  T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  495.548005][  T291] RBP: ffffc9000b64fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128
[  495.556088][  T291] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88811671608c
[  495.564090][  T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  495.572292][  T291] FS:  0000555588fc3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  495.581322][  T291] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  495.588159][  T291] CR2: 0000000000000168 CR3: 0000000121016000 CR4: 00000000003526b0
[  495.596255][  T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  495.604255][  T291] DR3: fffffffffffffffc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  495.612286][  T291] Kernel panic - not syncing: Fatal exception
[  495.619484][  T291] Kernel Offset: disabled
[  495.623831][  T291] Rebooting in 86400 seconds..