last executing test programs:

1m7.459121368s ago: executing program 32 (id=29):
r0 = inotify_init1(0x80000)
close(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb7)
syz_usb_connect$midi(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000403512018240000102030109024700010118980409040000020103000609276e0bc3000fd7020f25010b3d1813da062a56c3efd1de09058c0220006df78014250110"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000100)=0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r3, 0xc138fd08, &(0x7f0000000000)="0400000000000000000000003801")
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000140)={'bridge0\x00', 0x8})

1m4.066354271s ago: executing program 33 (id=48):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x3, 0x3, 0x8, 0x9, 0xd, "2868b6e53b93bebfe61b9932a58eab45564761"})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

1m2.175482947s ago: executing program 34 (id=66):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0xffffffff, 0x40000005, 0x5, 0x2, 0x0, "0066040000e1000000000000000000008000"})
r3 = syz_open_pts(r0, 0xa0200)
r4 = dup3(r3, r0, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0x3, 0x15, "e533991cd00ee11a"})
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_setup(0x7, &(0x7f00000000c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000180)={r7, 0xd})
read$FUSE(r7, &(0x7f0000004800)={0x2020}, 0x2020)

59.651903048s ago: executing program 35 (id=85):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0xffffffff, 0x40000005, 0x5, 0x2, 0x0, "0066040000e1000000000000000000008000"})
r3 = syz_open_pts(r0, 0xa0200)
r4 = dup3(r3, r0, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0x3, 0x15, "e533991cd00ee11a"})
io_setup(0x7, &(0x7f00000000c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000180)={r6, 0xd})
read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020)

57.53205678s ago: executing program 36 (id=104):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000104000000000000060000000000000009000000000000000800000000000000000000000000000000000000000000000000000000002000810000000000003c090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080)

55.611587696s ago: executing program 4 (id=121):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000180)={@any, 0x4, 0x4, 0x87ff, 0x8, 0x1ff, "eb2abf4af26d41e659cc7e5794249c0fedd0a08dd4213425a034c1a1c933740391e01d83d54d77664008463efe22a660ee3b5ae320440f6cbb5684f20d0ba5b6457e1b98c11c914814d2f669cb53df1791620c29b6d120e2774c40d9a7537fda0e6fb9c91f675794e204f61e49566e1a4ae3ca99369774274eb401ff2b82bf17"})

55.611462326s ago: executing program 4 (id=122):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='0', 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6(0xa, 0x1, 0x0)
write$char_usb(r0, &(0x7f0000000300)="c4e2", 0x2)

55.565721817s ago: executing program 4 (id=123):
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB], 0x0)

55.208411746s ago: executing program 37 (id=127):
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FIONREAD(r0, 0x541b, 0x0)
r1 = fsopen(&(0x7f0000000200)='msdos\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x2d, 0x0, 0x80010, 0x0, 0x80, 0x0, 0x200000, 0x0, 0x0, 0x10}}, 0x50)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

54.282229539s ago: executing program 4 (id=135):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x1, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590)
umount2(&(0x7f0000000200)='./file0\x00', 0x1)

53.158846996s ago: executing program 38 (id=144):
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB], 0x0)

52.926804182s ago: executing program 4 (id=147):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000380)=ANY=[])

52.767346226s ago: executing program 4 (id=148):
symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@verity_require}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

52.695800497s ago: executing program 39 (id=148):
symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@verity_require}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

47.039555365s ago: executing program 9 (id=187):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x16, 0x1}, {0x4}, {0x4}, {0x16, 0x1}, {0x3}, {0x2}, {0x6, 0x1}, {0x16, 0x1}, {0x2}, {0x5, 0x1}, {0x36}, {0x3}, {0x18}, {0xc}, {0x1b, 0x1}, {0x30}, {0x2c25f3961e30bb99}, {0x6, 0x1}, {0x2, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4020004}, 0x4044010)

47.039388495s ago: executing program 9 (id=188):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r1, 0x0, 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0)

43.999460369s ago: executing program 9 (id=207):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfe, 0x3})
fcntl$lock(r2, 0x24, &(0x7f00000006c0)={0x0, 0x2, 0xc, 0x5})
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)

43.999268139s ago: executing program 9 (id=208):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x1, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./sys\x00', 0x0, 0x101899, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x1)

43.346293735s ago: executing program 3 (id=213):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090032000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080)

43.328704885s ago: executing program 3 (id=214):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x82, 0x35, 0x74, 0x10, 0x19d2, 0x8056, 0xe941, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0xc0, 0x2, "", [{{0x9, 0x4, 0x5b, 0x8, 0x0, 0xe0, 0x1, 0x3, 0x8}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x6d, 0x0})

42.479617026s ago: executing program 9 (id=220):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000380)=ANY=[@ANYBLOB="a126443169a1d20d729b337a6bc2d72033ff970576644e00"])

42.452639717s ago: executing program 9 (id=221):
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$char_usb(r0, &(0x7f0000000300)="c4e2", 0x2)

42.358319519s ago: executing program 40 (id=221):
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$char_usb(r0, &(0x7f0000000300)="c4e2", 0x2)

42.102739075s ago: executing program 3 (id=227):
r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x8000}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0x18}}, {{&(0x7f0000000d40)={0xa, 0x4e23, 0x4, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000002ac0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x24040802)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000140)=""/165, 0xa5)
socket(0x1f, 0xe, 0x9)
io_setup(0x2, &(0x7f0000000040)=<r4=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
io_submit(r4, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r3, 0x0, 0x0, 0x800, 0x0, 0x6, r3}])
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x802400, 0x17c)
mkdirat(r6, &(0x7f0000000000)='./file0\x00', 0x58)

41.967965039s ago: executing program 3 (id=228):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x408100, 0x120)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x1e5181, 0x10a)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x1)

40.527445354s ago: executing program 3 (id=242):
fstat(0xffffffffffffffff, &(0x7f0000000440))
socket(0x1, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"})

40.492002024s ago: executing program 3 (id=243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004ca000/0x3000)=nil, 0x3000}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

40.357416178s ago: executing program 41 (id=243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004ca000/0x3000)=nil, 0x3000}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

39.619588856s ago: executing program 2 (id=251):
fstat(0xffffffffffffffff, &(0x7f0000000440))
socket(0x1, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"})

39.590177076s ago: executing program 2 (id=252):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x115882, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={<r1=>0x0, 0xe, 0x3, 0x1}) (rerun: 32)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={r1, 0x8, 0x0, [0x7fffffffffffffff, 0x7fff, 0x0, 0x3], [0x4, 0x2, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x1, 0x8, 0x30fa6ab6, 0x75600, 0x9, 0xa0, 0x7, 0xfffffffffffffff7, 0x8, 0x80, 0x5, 0x9, 0xe7b6, 0xaa, 0x80000000, 0x1da9cfd6, 0x6, 0xffffffffffff8696, 0x2, 0x6, 0x3f0, 0x7fff, 0x0, 0x2, 0x6, 0x2, 0x6, 0x3, 0x8000000000000000, 0x1, 0x1, 0x7, 0x7, 0x1, 0x8, 0x3, 0x6, 0x4fac, 0x5580, 0x8, 0x6, 0x24c, 0x401, 0xc8, 0x3a0, 0x4, 0x8, 0x3ff, 0x9, 0x4, 0x101, 0x3, 0x800, 0x0, 0x10001, 0x2, 0x9, 0x7ff, 0x8, 0x4, 0xa6, 0x9, 0x1, 0x2, 0x100, 0x7, 0x61d, 0x7, 0x8, 0x3, 0x9, 0x34, 0x4, 0x100, 0x7fffffff, 0x42, 0x3, 0x1000, 0xca, 0x800, 0xd, 0xfffffffffffffff8, 0x0, 0x1, 0x8, 0x43a, 0x0, 0xb3c6, 0xfffffffffffffffe, 0x123, 0x6, 0xe, 0x3, 0x6, 0x101, 0x1, 0x2, 0x3, 0x6, 0xffff, 0x10000, 0x8, 0x6, 0x4, 0x8, 0x1, 0x2, 0x7, 0x3, 0x2, 0x3, 0x0, 0xfffffffffffff801, 0x900000000000000, 0x8]})

39.570685667s ago: executing program 2 (id=254):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000380)=ANY=[@ANYBLOB="a126443169a1"])

39.506446919s ago: executing program 2 (id=255):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x1, 0x29, 0x7, 0x2, 0x8, 0x319d865c, 0x6, 0x33, 0x1})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r2, 0x40104d05, &(0x7f0000000900)="00000d0000000000000001")
close_range(r0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x3bba4d37a38d6f0a, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100), &(0x7f0000000180)='./file0/../file0\x00', 0x11, 0x1)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='fusectl\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x1, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x0, 0xf2, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x9, 0x0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x2a}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x5, 0x1, 0x5, 0x7, 0x1}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x81, 0x6, "03ef"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x3, 0x2, [0x2, 0x3], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xa0, 0xd, 0x6, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0x5, 0x7, "3f6917ca2ec6567d"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x4, 0xe0, 'g'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x4, 0x80, 0x15, "e18d27e2507b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x83, 0x0, {0x7, 0x25, 0x1, 0xc, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x1002}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x700, 0x6, 0x5, '_'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0xa, 0xf4, "2013bf66"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5, 0xd, "8c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x4, 0xff, {0x7, 0x25, 0x1, 0xc, 0x2, 0x5}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x3, 0x5, 0x3, 0x10, 0x81}, 0xf0, &(0x7f0000000480)={0x5, 0xf, 0xf0, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x0, 0xff0f, 0x467c, [0x0, 0xff0000, 0x0, 0xff3f0f, 0x7]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7e, 0x5, 0x9}, @generic={0xa9, 0x10, 0x1, "1dd3633a7d2de1ebca288ead0c5ada95818957bcf85f08997f5e6355d7a3d5c0fa5bf6762ac9ce5477fdbba1d739a2cefb4c17ed0d371f4eb05344fe72aa16fe9e59a7fdd69590e25ba1b8fd0d993744a0e6c86b1cc3564941803111f77d6311e2dbbe85f83b3e9cfef203b4135b33dd395d47c2509edaf23013e16a8aeb2df19997aedbf6d2416bd0f7a88ccfe967a45a699b357b389d4d1646f66f6b593f12036d87029609"}, @ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0xe, 0x1e, 0x3, [0xfff0, 0xf0, 0x30]}]}, 0x7, [{0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="9703c1b5d9b7aa2dccfc441d9b05c968a3185e426a26b0652911fe735f37025cfe250969b13ea6ced96d4e48c56d0db939d984ec8386d54e6437ce23a102487784e176abd7d216ce8e6bea9262f0401bb2fe0c208bda7c7fc124212460ea5f89450fd6da48ac3f9e6766699edaaab0d254cd9f179cb9b4a8e6c01c556f5b82449f9aa8eda0e4c3fb1cc0ea64e472b617cda1121773799c"]}, {0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "2bb8c4f6b1d536a9072c739f3c1dc3e40b5c5fea670c6a72cce9f5f5eee397ff1e6b4a215e463c95b93c8817e168fddf424df2b718bc484ecaa8c399ce6cd08a0374380351fc8b8fd5263118e78c7df282eb676871b7f0c144d89b987c8ed5fa8d44ad18d67255a909faa74ab9a62f6a69ea71abb3292f93edf42ba0743f02faa50bf630e9fe4e066c9dda8678"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3409}}, {0x23, &(0x7f0000000ac0)=ANY=[@ANYBLOB="23035a1c157986e6547e2d316cba3e92fc22871b99e64ad3d60d419bd1000059d69627c5191efecd5cd3f5f33d7f262d5609d82a02e21fc5363e8e860d00246cd4b59eb67b054ab94d41aee754f7906a33f213bd452b65c401e160dd4698c3db527bca122460ec567aac49fc12f03eb500418f95b30c190c76f77926a9b566347299bc7dc9c1136654d876cf5419d0fe3247c5b46d00601f21feef78e319adc753a744322a41a599056fcd792c21a9cec5cc950abdf989b4f989d54b8320cf1b5593bc92786382f6"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3401}}, {0x97, &(0x7f0000000940)=@string={0x97, 0x3, "91fc4ada902a6ba10ea5ac3ff41d2884abfc8233f3eea35c72caa1e7cbbc957afbe37aac72764f35323d7d1fb577f401a202ef809076a4be561236152eb2c62d158843ea50164898d765530e294b067449f5d3a8531d2b11f9e31b9a799b3fbb8c1f0a770b032d96dcb64eb3c274b58ca2905733121d4e6af3a0edf51a80e9f1aa1b705caafd86fdf7162e2128de6769173366157b"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x2001}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000140)=0x4, 0x4)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x1)

38.127653792s ago: executing program 2 (id=266):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, r0, 0xb522f000)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x141, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x2, 0x7}]}, 0xc, 0x1)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x1001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

38.121571602s ago: executing program 2 (id=267):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4a4, r3, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x32, 0x24, 0x2, 0x18, 0x1d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x4, 0x2, 0x81, 0x1, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x7}, {0x1}, {0x4, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x1}, {0x7}, {0x4, 0x5}, {0x3, 0x8}, {0x7}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x3}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x6}, {0x3}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x2}, {0x6}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x7, 0x1}, {0x5}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x2}, {0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x7}, {0x5, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x2}, {0x4, 0x5}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x6}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x1e}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0x8}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x5, 0x0, 0x1, 0x5724, 0xb]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x0, 0xb, 0x30, 0x16, 0x2, 0x30, 0x6, 0x24, 0x36, 0x6, 0x18, 0x2, 0x4, 0xc, 0x4, 0x24, 0x30, 0x3, 0x18, 0x36, 0xc, 0x6c, 0x24, 0x12, 0xb, 0x18, 0x2, 0x36, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xb, 0xfff6, 0x9, 0x3, 0x9, 0x3, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x18, 0x12, 0x30, 0x16, 0x36, 0xb, 0x6, 0x0, 0x30, 0x30, 0x60, 0x4, 0x16, 0xc, 0xb, 0x4, 0x0, 0x4, 0xc, 0x6c]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x1b, 0xb, 0x3, 0x6c, 0x9, 0x18, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x3}, {}, {0x0, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x6}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x1, 0x40, 0x9, 0x7ff, 0x470]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x629, 0x7, 0x493, 0x200, 0x3, 0x8, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x3ff, 0xda, 0x71, 0xeba9, 0x6, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x25, 0x36, 0x0, 0x1a, 0x6c, 0x36, 0x81d86a3825cf5b09, 0x5d, 0x3, 0x36, 0x10, 0x48, 0x36, 0x4, 0x4, 0x6, 0x18, 0x30, 0xc, 0x12, 0x36, 0x16, 0xb, 0x60, 0x16, 0x75, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe6, 0x8ff1, 0x7ff, 0x8, 0x7, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x18, 0xb, 0x4e, 0x18, 0x48, 0x30]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc00, 0x9, 0x9168, 0x5, 0x9, 0x1]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8, 0x1, 0x4, 0x5, 0x6, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x3, 0xffff, 0x200, 0x3ff, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x6702, 0x0, 0x401, 0x7f, 0xe, 0x1]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4e, 0x60, 0x0, 0x3d, 0x16, 0xc, 0x9, 0x24, 0x30, 0x6e, 0x6c, 0x24, 0x9, 0x16, 0x1, 0x3, 0x1, 0xc, 0x18, 0x9, 0x24, 0x9, 0x3, 0xc, 0x12, 0x6c, 0xc, 0x48]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0x80, 0x6, 0xc, 0x1ff, 0xfff7, 0x9]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x6}, {0x6, 0x9}, {0x4}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x2}, {0x5}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x9, 0x0, 0x2, 0x400, 0xe2, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x2, 0x2e0f, 0x80, 0x4, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0x2, 0x101, 0x6, 0x5, 0xb2e8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4e, 0xc, 0x1b, 0x24, 0x60, 0x24, 0x24, 0x9, 0xc, 0x1c, 0xc, 0x48, 0xb, 0x3, 0x1b, 0x9, 0x6c, 0x1, 0x2, 0xc, 0xa, 0x36, 0x4, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb, 0x7f, 0x9, 0x2, 0xab, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8001, 0x3ff, 0x4, 0x401, 0x1000, 0xfffd, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x1, 0x3ff, 0x3ff, 0xffff, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x3ff, 0x2, 0x0, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="01030800010004000800000186dd060800010180c2000003b61d50fce20fc7fdbabbbbbbbbbbb49bdf2ed73bbf3b7fdfd2e577a8427047d507869a77ce7eaddd26ccac5ecd6aa8d8ec34406b1eb1613755a94f562c9b4c84b9e9f44de997a668597268751a9600ed405b845d090793b1a7d25423db911a251e2d608124b4889b71fd5f1b1e4f052e57b733a78bb60903006953ae8e1d7c9cebf31c94bcc038416e2a2ba0856f9e26574ae6c55f73451e5db4097c419655c38c"], 0x29)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248060000dbb8a1", 0x1e}, {&(0x7f00000001c0)="0400000002e8010000000000007b5dc42de424a935960b225479432d", 0x1c}], 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @loopback}})
socket$inet_udp(0x2, 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
landlock_create_ruleset(0x0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4a4, r3, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x32, 0x24, 0x2, 0x18, 0x1d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x4, 0x2, 0x81, 0x1, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x7}, {0x1}, {0x4, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x1}, {0x7}, {0x4, 0x5}, {0x3, 0x8}, {0x7}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x3}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x6}, {0x3}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x2}, {0x6}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x7, 0x1}, {0x5}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x2}, {0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x7}, {0x5, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x2}, {0x4, 0x5}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x6}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x1e}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0x8}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x5, 0x0, 0x1, 0x5724, 0xb]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x0, 0xb, 0x30, 0x16, 0x2, 0x30, 0x6, 0x24, 0x36, 0x6, 0x18, 0x2, 0x4, 0xc, 0x4, 0x24, 0x30, 0x3, 0x18, 0x36, 0xc, 0x6c, 0x24, 0x12, 0xb, 0x18, 0x2, 0x36, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xb, 0xfff6, 0x9, 0x3, 0x9, 0x3, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x18, 0x12, 0x30, 0x16, 0x36, 0xb, 0x6, 0x0, 0x30, 0x30, 0x60, 0x4, 0x16, 0xc, 0xb, 0x4, 0x0, 0x4, 0xc, 0x6c]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x1b, 0xb, 0x3, 0x6c, 0x9, 0x18, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x3}, {}, {0x0, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x6}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x1, 0x40, 0x9, 0x7ff, 0x470]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x629, 0x7, 0x493, 0x200, 0x3, 0x8, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x3ff, 0xda, 0x71, 0xeba9, 0x6, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x25, 0x36, 0x0, 0x1a, 0x6c, 0x36, 0x81d86a3825cf5b09, 0x5d, 0x3, 0x36, 0x10, 0x48, 0x36, 0x4, 0x4, 0x6, 0x18, 0x30, 0xc, 0x12, 0x36, 0x16, 0xb, 0x60, 0x16, 0x75, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe6, 0x8ff1, 0x7ff, 0x8, 0x7, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x18, 0xb, 0x4e, 0x18, 0x48, 0x30]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc00, 0x9, 0x9168, 0x5, 0x9, 0x1]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8, 0x1, 0x4, 0x5, 0x6, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x3, 0xffff, 0x200, 0x3ff, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x6702, 0x0, 0x401, 0x7f, 0xe, 0x1]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4e, 0x60, 0x0, 0x3d, 0x16, 0xc, 0x9, 0x24, 0x30, 0x6e, 0x6c, 0x24, 0x9, 0x16, 0x1, 0x3, 0x1, 0xc, 0x18, 0x9, 0x24, 0x9, 0x3, 0xc, 0x12, 0x6c, 0xc, 0x48]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0x80, 0x6, 0xc, 0x1ff, 0xfff7, 0x9]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x6}, {0x6, 0x9}, {0x4}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x2}, {0x5}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x9, 0x0, 0x2, 0x400, 0xe2, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x2, 0x2e0f, 0x80, 0x4, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0x2, 0x101, 0x6, 0x5, 0xb2e8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4e, 0xc, 0x1b, 0x24, 0x60, 0x24, 0x24, 0x9, 0xc, 0x1c, 0xc, 0x48, 0xb, 0x3, 0x1b, 0x9, 0x6c, 0x1, 0x2, 0xc, 0xa, 0x36, 0x4, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb, 0x7f, 0x9, 0x2, 0xab, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8001, 0x3ff, 0x4, 0x401, 0x1000, 0xfffd, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x1, 0x3ff, 0x3ff, 0xffff, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x3ff, 0x2, 0x0, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
dup(r4) (async)
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="01030800010004000800000186dd060800010180c2000003b61d50fce20fc7fdbabbbbbbbbbbb49bdf2ed73bbf3b7fdfd2e577a8427047d507869a77ce7eaddd26ccac5ecd6aa8d8ec34406b1eb1613755a94f562c9b4c84b9e9f44de997a668597268751a9600ed405b845d090793b1a7d25423db911a251e2d608124b4889b71fd5f1b1e4f052e57b733a78bb60903006953ae8e1d7c9cebf31c94bcc038416e2a2ba0856f9e26574ae6c55f73451e5db4097c419655c38c"], 0x29) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248060000dbb8a1", 0x1e}, {&(0x7f00000001c0)="0400000002e8010000000000007b5dc42de424a935960b225479432d", 0x1c}], 0x2) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @loopback}}) (async)

38.085721903s ago: executing program 42 (id=267):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4a4, r3, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x32, 0x24, 0x2, 0x18, 0x1d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x4, 0x2, 0x81, 0x1, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x7}, {0x1}, {0x4, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x1}, {0x7}, {0x4, 0x5}, {0x3, 0x8}, {0x7}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x3}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x6}, {0x3}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x2}, {0x6}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x7, 0x1}, {0x5}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x2}, {0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x7}, {0x5, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x2}, {0x4, 0x5}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x6}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x1e}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0x8}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x5, 0x0, 0x1, 0x5724, 0xb]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x0, 0xb, 0x30, 0x16, 0x2, 0x30, 0x6, 0x24, 0x36, 0x6, 0x18, 0x2, 0x4, 0xc, 0x4, 0x24, 0x30, 0x3, 0x18, 0x36, 0xc, 0x6c, 0x24, 0x12, 0xb, 0x18, 0x2, 0x36, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xb, 0xfff6, 0x9, 0x3, 0x9, 0x3, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x18, 0x12, 0x30, 0x16, 0x36, 0xb, 0x6, 0x0, 0x30, 0x30, 0x60, 0x4, 0x16, 0xc, 0xb, 0x4, 0x0, 0x4, 0xc, 0x6c]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x1b, 0xb, 0x3, 0x6c, 0x9, 0x18, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x3}, {}, {0x0, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x6}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x1, 0x40, 0x9, 0x7ff, 0x470]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x629, 0x7, 0x493, 0x200, 0x3, 0x8, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x3ff, 0xda, 0x71, 0xeba9, 0x6, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x25, 0x36, 0x0, 0x1a, 0x6c, 0x36, 0x81d86a3825cf5b09, 0x5d, 0x3, 0x36, 0x10, 0x48, 0x36, 0x4, 0x4, 0x6, 0x18, 0x30, 0xc, 0x12, 0x36, 0x16, 0xb, 0x60, 0x16, 0x75, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe6, 0x8ff1, 0x7ff, 0x8, 0x7, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x18, 0xb, 0x4e, 0x18, 0x48, 0x30]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc00, 0x9, 0x9168, 0x5, 0x9, 0x1]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8, 0x1, 0x4, 0x5, 0x6, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x3, 0xffff, 0x200, 0x3ff, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x6702, 0x0, 0x401, 0x7f, 0xe, 0x1]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4e, 0x60, 0x0, 0x3d, 0x16, 0xc, 0x9, 0x24, 0x30, 0x6e, 0x6c, 0x24, 0x9, 0x16, 0x1, 0x3, 0x1, 0xc, 0x18, 0x9, 0x24, 0x9, 0x3, 0xc, 0x12, 0x6c, 0xc, 0x48]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0x80, 0x6, 0xc, 0x1ff, 0xfff7, 0x9]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x6}, {0x6, 0x9}, {0x4}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x2}, {0x5}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x9, 0x0, 0x2, 0x400, 0xe2, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x2, 0x2e0f, 0x80, 0x4, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0x2, 0x101, 0x6, 0x5, 0xb2e8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4e, 0xc, 0x1b, 0x24, 0x60, 0x24, 0x24, 0x9, 0xc, 0x1c, 0xc, 0x48, 0xb, 0x3, 0x1b, 0x9, 0x6c, 0x1, 0x2, 0xc, 0xa, 0x36, 0x4, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb, 0x7f, 0x9, 0x2, 0xab, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8001, 0x3ff, 0x4, 0x401, 0x1000, 0xfffd, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x1, 0x3ff, 0x3ff, 0xffff, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x3ff, 0x2, 0x0, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="01030800010004000800000186dd060800010180c2000003b61d50fce20fc7fdbabbbbbbbbbbb49bdf2ed73bbf3b7fdfd2e577a8427047d507869a77ce7eaddd26ccac5ecd6aa8d8ec34406b1eb1613755a94f562c9b4c84b9e9f44de997a668597268751a9600ed405b845d090793b1a7d25423db911a251e2d608124b4889b71fd5f1b1e4f052e57b733a78bb60903006953ae8e1d7c9cebf31c94bcc038416e2a2ba0856f9e26574ae6c55f73451e5db4097c419655c38c"], 0x29)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248060000dbb8a1", 0x1e}, {&(0x7f00000001c0)="0400000002e8010000000000007b5dc42de424a935960b225479432d", 0x1c}], 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @loopback}})
socket$inet_udp(0x2, 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
landlock_create_ruleset(0x0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4a4, r3, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x32, 0x24, 0x2, 0x18, 0x1d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x4, 0x2, 0x81, 0x1, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x7}, {0x1}, {0x4, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x1}, {0x7}, {0x4, 0x5}, {0x3, 0x8}, {0x7}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x3}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x6}, {0x3}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x2}, {0x6}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x7, 0x1}, {0x5}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x2}, {0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x7}, {0x5, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x2}, {0x4, 0x5}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x6}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x1e}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0x8}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x5, 0x0, 0x1, 0x5724, 0xb]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x0, 0xb, 0x30, 0x16, 0x2, 0x30, 0x6, 0x24, 0x36, 0x6, 0x18, 0x2, 0x4, 0xc, 0x4, 0x24, 0x30, 0x3, 0x18, 0x36, 0xc, 0x6c, 0x24, 0x12, 0xb, 0x18, 0x2, 0x36, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xb, 0xfff6, 0x9, 0x3, 0x9, 0x3, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x18, 0x12, 0x30, 0x16, 0x36, 0xb, 0x6, 0x0, 0x30, 0x30, 0x60, 0x4, 0x16, 0xc, 0xb, 0x4, 0x0, 0x4, 0xc, 0x6c]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x1b, 0xb, 0x3, 0x6c, 0x9, 0x18, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x3}, {}, {0x0, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x6}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x1, 0x40, 0x9, 0x7ff, 0x470]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x629, 0x7, 0x493, 0x200, 0x3, 0x8, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x3ff, 0xda, 0x71, 0xeba9, 0x6, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x25, 0x36, 0x0, 0x1a, 0x6c, 0x36, 0x81d86a3825cf5b09, 0x5d, 0x3, 0x36, 0x10, 0x48, 0x36, 0x4, 0x4, 0x6, 0x18, 0x30, 0xc, 0x12, 0x36, 0x16, 0xb, 0x60, 0x16, 0x75, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe6, 0x8ff1, 0x7ff, 0x8, 0x7, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x18, 0xb, 0x4e, 0x18, 0x48, 0x30]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc00, 0x9, 0x9168, 0x5, 0x9, 0x1]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8, 0x1, 0x4, 0x5, 0x6, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x3, 0xffff, 0x200, 0x3ff, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x6702, 0x0, 0x401, 0x7f, 0xe, 0x1]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4e, 0x60, 0x0, 0x3d, 0x16, 0xc, 0x9, 0x24, 0x30, 0x6e, 0x6c, 0x24, 0x9, 0x16, 0x1, 0x3, 0x1, 0xc, 0x18, 0x9, 0x24, 0x9, 0x3, 0xc, 0x12, 0x6c, 0xc, 0x48]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0x80, 0x6, 0xc, 0x1ff, 0xfff7, 0x9]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x6}, {0x6, 0x9}, {0x4}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x2}, {0x5}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x9, 0x0, 0x2, 0x400, 0xe2, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x2, 0x2e0f, 0x80, 0x4, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0x2, 0x101, 0x6, 0x5, 0xb2e8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4e, 0xc, 0x1b, 0x24, 0x60, 0x24, 0x24, 0x9, 0xc, 0x1c, 0xc, 0x48, 0xb, 0x3, 0x1b, 0x9, 0x6c, 0x1, 0x2, 0xc, 0xa, 0x36, 0x4, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb, 0x7f, 0x9, 0x2, 0xab, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8001, 0x3ff, 0x4, 0x401, 0x1000, 0xfffd, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x1, 0x3ff, 0x3ff, 0xffff, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x3ff, 0x2, 0x0, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
dup(r4) (async)
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="01030800010004000800000186dd060800010180c2000003b61d50fce20fc7fdbabbbbbbbbbbb49bdf2ed73bbf3b7fdfd2e577a8427047d507869a77ce7eaddd26ccac5ecd6aa8d8ec34406b1eb1613755a94f562c9b4c84b9e9f44de997a668597268751a9600ed405b845d090793b1a7d25423db911a251e2d608124b4889b71fd5f1b1e4f052e57b733a78bb60903006953ae8e1d7c9cebf31c94bcc038416e2a2ba0856f9e26574ae6c55f73451e5db4097c419655c38c"], 0x29) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248060000dbb8a1", 0x1e}, {&(0x7f00000001c0)="0400000002e8010000000000007b5dc42de424a935960b225479432d", 0x1c}], 0x2) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @loopback}}) (async)

30.155685046s ago: executing program 6 (id=337):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000003c00000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080)

30.155578786s ago: executing program 6 (id=338):
syz_usb_connect(0x0, 0x7ff, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="569dec5c76ddeb8541863cad6465edef5484aa26456ce60864b76b5972c2f55d655f7301f98e3160a448a352a90325e26323919f355fd784b8594e9865b4572baeb30950d793229467842f378ace71341d19a4246013c67ebd74791ef0e4529b45791c97572533b540ec70b747281a7c9afaa084575b0d527151ea4027afc3bdcf76bdf470e4f780c8547c15d7746fd73ac775942b2cf1dd537bd45733ed4d8e7864a27e19418a00c09eaa2107b8bedbbc7e0081c51707c44cca5abd1f163edd23f659230c759717c52478894a482468fdd8eec1f1f6b897b12713a071c200be7b514484e1cbbcb6e15b0061c2baf810221ac9097fc7f7e2c244ded998172461d4916d58419e0a7bd27977bd7bb51a1c648d0447edda45f3f9a8e803e3c9f3adc583a7bb8805ae6c7bf7846bf9a6ca212afb9eab9733f15abe0e0c5da93f506d20a1e1526226dbeb93a4d6afad162467bf35243f74a28c37675d4a58fe040ad37cc4b7783f1f68a1943144b33971ea6d5ce33cbfabeb26c597cafc591001ec94db5bba74d683b4d6963041db504211a916d0c4037ee60cc0066e476b62b06725bd943abd249b4ed8fda0b930759dc485db8ab9caa34be1328b1d2cb9238cc7b72622d28098e9f02934b039941dc6be9109fcd886cfcd0314e1f8d04657d531c5a71b248c06ef2b43674b2682f1749bfe6e6af99bb55e0aeb85fff5fd94c89530346946539b5d0c2b3fb513cda2d76911d0370c79fc7553bb8c3e7ad64a634e85bbe87507d87be65905fb7516554a63ceaf835bae7ccfd7bb0b62f730ad41cbf57a018e51a819df55069c7b7d0adc3ca7d5562e4005e702552f5775f5b7b7fe7b05ab919b1d6027cdbea30baebdebf45e5727ebfce52627cc58008ab7762fce50cdcfe4354edc4bcb0e3a1da55d36e450b76cfbefd3ae076c2fe4c9a68fa76dbf5c20209b97a17a734535a6d239d3e5843f61b99ad0ea1a0b4c76bea915c8380afff72111efd601211efbd474e23e0962b1c6a72adca63c627b1ff16144e1848d07c6f1486ac64ecc695d0da7bbc7ad6b8d1db04fb9f8cc7ebe3ba259703f02146311e812dc405fcb893021fdb552a451ae34ea0b6aa32259f59a7232e4e0b58c082a5b19ef948d18df05c7c51e6fcb4b5daaaa66fd90139881189ce6d95508de1ff3073d7a3985b8160bc3baeba652ed10440a0e19a0fca29ae47613952f3d103943af6fdf1063d5cfa714f0aad2d463080af27f7562532175a7a7ef78b198bae2ffe273029392a3c4dd6c835e4150f94b6c7a7b693f370ada1a98c7e4ada305f299be5e16af9a9a11069376bdb30f2cf48160943e23d9e2d1908ea4d744a76249f6d9f8ba388baf3d912af81b003595ed3bb7cdfc169c98eb1a55e575cfd2e4be6c3a7dae907cd292bcfa41a3558b9b5eccca702e7687553bb1c9705823ed6a00c7dad4eb07d0c91e776c18f635c5de9f1cdb8c5ebd72eae9b6ea45897d09ca7381b583f55bcc570a2f2f90f9a271be88e0b02ae6f2a96e10af4c1f9b4f3472678236b15529d37ae3a79b8e5a75547649188ebd9b85250bb80c08588280d686565697a66c25cb3b57aeb218ebfe400e4745bcabe532cbef13497d5f53f857904c7d11cafb5cbc581ceabdfc39db7f483d3eae5f42d94e9d05bb0e19c52936cafad9bd239549953da65597a2a32055795b20d9c4461904c9f287fb4b2ebc2e14d7861c7df466f19885dc3e4b90cba3fe8934f2be1ee104e4afc849a027ea500365d27105aa48e2abd309bfb21c5a208a50b95b0e2cb5fdacb75c6389e91014e8bb7f676211a9e9cd8be18302443da82ccbb962aabf05131d40dd2182e02f3fc4d6c12ecb635fde90e6be2acd8392e0bb911aac912a31bd4876fb9073727d3079857a291af135bf12cc1e5708e648bbc19017d2efa921a892b686010bcd5d89b788322b6bfdfb50af3bda09beaa27d185bb416202498e7fc1d6cae196f9a08a4838a25fab40734babf4db0f9bce1f44b53af6e30f5a0ef43e71b9d1975241ba9e3c457b2899c89265a9c975f9bf1817460e05e8d6c391eb30221d692dd2e1308ebc0a90b9d4a9eed3700778a61d021f361ec90692e04887663f2ccbb6fc298585fe6ba8f552b184c8c21b4ba8e277e49b6fdf4dda45e153bcc56bd1a360bf5f12230f1872bdc6500fb24bd2213cf83d09691b13a686eb8bba5d19865b46eb9ff122a5b11de34bb450af6bd53d8216c52c008d8e2be200f8caaa3ba3a09c56779e28cb985b21a7035005703c33c8fd188e4550ea5890788bfac4958fb02bd3b2bc896aecbdf77aebc709239ef740933c29d464be8a2870e53966261f933cb4f2450771c5575d16e589f0055bda386a5e1329e8cd469ee9e25c5b40faaaeb0292ab3771a839382e88d7e50c472b0ca6b803b7ca0317adbed44a71b121f87a969e6d9da6ac54fc8ecd43ded536542b12ef78d478b675eba099021dee66cc9f74926bb4309401ee9da1a451fd2905927c72c3c3accbeacea14f8a84d03511d11942de752c03e224db1ffa125d0e75c4b638bb33fdd35e8bc1904296ae9600de6b0d14908599080c778411979c651726e9ea28261463d0fee7306418f90bfc27d2192afe72933874c5abccd369edbffbbde0c75884dac5101f54bbac68fa2544dde6d40dadb2fc017a4516db4898d3edd3ff7d75ec15abc30a982ca42ba57f277f5712ea023022e90700cbf790f3a2261c708360b402f0881b5e5c848079cd5868e3e48d5202be7b5dfcae7bb349e1f2a7c422c30961515be1c03f5ee6171589965e4135e3360112fe6d10247b70cc204c1c5aafffa8f5e37b4fa30dbf6b2ff4b65b271b3324f7e9364b8edd2c8a34ebe429cd629840ef0fe2db135d22947b464c1aae093fd564b36106f854f9caf529e86051e45d03c6740f0b42177c8ae056f545f5c6c3b6a8077a9501490e54b303fda22cde9718795193dec33e63526240ac6fe894ce0ab68183b0f28064a1ed740b6d880a4c4cd91ac7817137a50d4e7f5acf03d770f6978c602e06067f8a371e81e74ff0215339e78d35a33062a3dfbe8dc522222709f8f7785b47977a682795ecac58a0792e1222e2d1aa069b318ff89dbb984ff90f24978c6b63cdc1b441cb71f6293477aa93370657c0440a6374b5a4644e8cafc758cb46a8ca62fdde58a8c5bf32a5f46d5f71f837d336430eac81139224cc7557060cc90540a9689aa49a53c98410e97ac2e0cb93a7cfd8d776377d90613e0ad1791d98bac01fa54ea022ff4fd2780c56822288ab78aa75f2448bc856fdf790b2ff544152e9174dd0b6f3466e196e7d39a248a17cb3efb0dbf4289669565d72980617f3372fc16768e5deb27033955fb9d857d00e34c3b5767307b7eae3b50d2f70b439c194ce461ad204b8160201aacf82591ca3c4b59c7f68a22c9677d58a295fb06c9ecc3f9579cac9a8b6eb3786f808df27dd7441a2768ffaaf16aaca34b2a2d7ceaea514f45b2c4dd964141d29bf2043eb4818ccc7e7f81fb24604d6e773ac0d7d1d3308dcdd5048b522da3aa15a8b6363734df5077c06d700d8aa35d516576672c32f642ae634c9f296f2d9ce65df216b258ac02236f30c7e3757d713a7f51fdd7a0e5a18bac91efb9f536b9f5c2d5aded719a737bbd836804085b5af0e69809098d0f31a421290a82306fda086957ba4e460a9827dc56c4e6d8a4d927422d9942f5ae07ae4c6d85263ccef9d62a8e9f206945255e2af31f96079726ac36d3a5dc9622e8daba05c6708cf40b8d3a380bf7bd810592771c749aedcc6b753d6fcee1dedd30a5083664458740eed047bf28e2fdc2f92f7b97738914ab9413d7a8c901a5dd9e390eb9b683821f7160dcc69593fe54a2143db871cdd3c8413c14b8172f24e9757fe067a0601362529205b3943204d95acbb9bde0ed74502439a5204bfab0ac75d2f12f38358792363e83939371ccacb96badfd2848be6ece9f3fd6c8ccff24b7464026503a76cce81a6defc779ebf18bd8c706e82492c0233f8287402a83a16868f639ef6b2e67a230e7f61b864cf1402c6c32523ccef7b54a6935e80e48ec84426171936d37e73c75455ee6c3cfe33b7f01b4468b4a2d7c0168041a4b3253aa1f604af81cbd986c9ede6f5e5d673d821d13668b364005ff2b828e4d3a99326e10f1ab735631c5aff5a9c7779a20c9daefe7919cf9bb5e7a7f41b6e2abef0449877d66ce76b27aa731a944a9ac5dd13505797a2864bed2e2687c2052aed0e2c65f348939e1fdee653961a672536a8eb17bfa132107ed7c14f88d1c8d80f60e30e76844494f90eccfa4c7a7ae134edad3eed2ac20a2e22add505c008e7dd31bf26c307b83799a810ab0937e9b4a49cba336d84b4ab087d54422db45b1aaaa79bf50ed525915d84ce5cbf5c8be7509d41938d676476a0e8bc917a74f125e8c8f9fa3790b5bc16a6bee134c7ff840aa5b1ff373395518daa911abd7432697a9616ed800e17e3bb1f4233ee705e19bd5b5cf5792d85ef07818994336e778eb6ca8d1b3462df8cba62a0e58734ccc9335316a3a67c6925c0b1aece223331a6d382878275d6cb7c9c8a524950de0d74bf11462747a9cfcd60de916ee054f214fdf46bbef0b3ffaa558ca601c908818103fe6753d7bb91427be5963a2a920984130ab23b9a25e68a858dc5c5ca7b5ff7b53ff2dac8edbdd6dfb3500974d80a943f0ed03e298992fa2b2539bba16f1947cd285203024b2396731dbbd1f68ba9dc023cf3b839e88ab6e22da6749e67f77c6740535791ece3fdd65fc868afc31b37f117fb71a680ebbdefc34ca4cab3ac0eefb35fb3da091541a3028fb1dfa154ce76561915019c373dbd5c2c38f9baecd0289254a35def916010bd523a5b62730653d4e2ec59172338d681a597149427db5ecacc54de5a85ac7b36b64679e6b5b158fc973dbbbfb23da333790323109f6da50639779db93f7f1e734b69c99282c09af9b23c2cf62a9ba7e6a77f55d53ac887d6153cf5596763abb47e5f29aedb2b152adf776d8ef1f55ed5e4f0d6a20bab91b0b8b0b5b3f581406c34b9e039a51ee8fad86ab034d428fd8a266a9ebf73cf72535e27d6cb0fdee8594bc17da79a0755f98e464b96e94275597152ec5eb0e084ee53b3596bf8088da37d2f45664007dc4a4ecadcd681dd0ca35914e229a450259e55e89c688b19e09d995265d39b8a3fafda22bb9340aee9b4ae99e9c855f96b3189879ab6483fba119f5aec55d49777c48862788380eee5de1a1197e749c3a495676f54bd8ec32092121f0c06b90fa358c503e594179c523917eb0e786abf5609fbce70511040e8354e3677567a1904bbf4ba86b59dfa9f61a739d928ab401bf7ee2c69b1e6311d307bdaeecc63f09215f14a9fd5e521c54b9a0693f6780f7e2bcd85f3d7b3b1a60ca307230749df2e18322e878130910c93b68597edad642f2e211f13800235078ff806be90d370c4dd124fdbd576646a8e5b15cafe299d06bd4d6502dcd864280b939ce4f5e3c3ea372aeed93ff67d95536847aaa55ef647cf2517b799ac61905cadceececbde45ef5dc7e712e63b63f19583ac17f1a69b292b2dd6dde29b3cca586a42492a558355fe9c36f246c2a6c61863ec2e4d23cd7cb1b194f5c81574ead46c9d5b31f3ada9f070df03f7a7e866c37ddd3b815a9c3020ba00cfad5bb9ee2ebf78c6247e116701ffd6ba78ece9c146d47f16327a2ac585e52aa1816adb8f29c039b4c2ffe14fee447448ce9bcb3c2c7906f15a7c2bb5f6ad0a4258160577c", @ANYRES16], 0x0)

27.071385151s ago: executing program 6 (id=360):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x22000)
syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffffff, 0x44040) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r0], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
waitid(0x0, 0x0, &(0x7f0000000340), 0x40000000, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x4040)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) (async)
r2 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
getsockname$packet(r2, 0x0, &(0x7f00000001c0))
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001800090200000000080000000240e3ff"], 0x1c}}, 0x0)
pidfd_send_signal(r1, 0x22, &(0x7f00000000c0)={0xe, 0x5e8de391, 0x8}, 0x0)

27.070955401s ago: executing program 6 (id=361):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000080)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x10000})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2})
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8)
r5 = gettid()
tkill(r5, 0x12)
r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00')
pread64$ublk_ch(r7, &(0x7f0000000540), 0x1000, 0x6)
read(r6, &(0x7f0000000740)=""/377, 0x179)
fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x9})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0)

26.384879548s ago: executing program 6 (id=365):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000380)=ANY=[@ANYBLOB="a126443169"])

26.31507166s ago: executing program 6 (id=366):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000010400000000000006000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000200081000000000000000980ffffff00000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080)

26.209926792s ago: executing program 43 (id=366):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000010400000000000006000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000200081000000000000000980ffffff00000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080)

12.062148627s ago: executing program 1 (id=468):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00')
read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x160e)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)

12.044087207s ago: executing program 1 (id=469):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="20000066f9b53bf67a0123c36824461c77547ad4136ed2fddfc75566460240257dbaeaa7302c4a346e33ad111971ee0c34d46de74fcc22f26bf0a3f3a05e22316bc9dc2da154c3f95bd3be37388d886ab92b92676c7fb6a6d1c9dafb27c05d52549d4bc6b64adbbebce734962dfde034894b98c2c4ef6cd23befb5607a49c0461422b0de2bf25bd7c156afb4e0022cdd0a0378832ec002083f2cec33f67cbe9a66407242c8ab161609e3c448c6d2c7ca67c563b1454205493e911c17bac4b2834116a89ca69f8e5c713497e3a2ecef3d736313ec4299de279364eb1839e5acef2789"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r4, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880)
sendto$inet6(r4, &(0x7f0000000300), 0x48, 0x3b00, 0x0, 0xfffffffffffffdfd)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x1d, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20004010)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=ANY=[], 0x1c}, {&(0x7f0000000a80)={0x1d0, 0x2b, 0x1, 0x70bd25, 0x25dfdbfd, "", [@typed={0xb3, 0x4a, 0x0, 0x0, @str='\xc55\x80\xa2\x95U\xf0\x95\x95\xc3\xa8\xfd&\x05\xc6\x04u\xb5\b\x83Y\xc5\'\xe0\'\xdbPN\b\xc5\xb2y\'\x1c\xa9\xb9\xb5\x0eZ&\xaf;\x99\x9a\xbd~\xf3Xn}\x00\x80^b\xf12\xd1\x14O\xf5\xd4\xbc\xf0\xd64w\x81\x88\xf8\x15\xe7dqc\xd9\xf6\xa3N\xbdt\x1ax\x8a\xf8\xd4\x92\x10S\xdd\xe1\x15\xa5\x1c\xf4\n!Q\xf9\a\xa8G\xad\xa7Z3\x01l\xb4H\x1c\xa9\xde>G[\xeb\x04Iy\x82>\xa2\x98\x87\xb3\xe8\x86\xec\x1f\xb7l\xea\xf2T\xe0\x96\xfb\x02\x9b\xa2w\xd6\xf3]\xebgG\x8b\x1d\a\xf6.\xe8Tz\x17i%\x9f\x01\x00\x00\x00y\xfd\x15@\x00\x00\x00\x00\x00\x00\x00\x00'}, @typed={0xac, 0x156, 0x0, 0x0, @binary="1357c124190b3bcb1cdefd6f4bf959dbe8770907fc456fa32c20d7724ae75b8fda139dae45f2b10249624e42bd266f2ba74ffd7cf4a7e74c18f86bf5f37c3d60cfa061bab3fe0f2415d4c61ddd5037744df206a91a9ee537177d39b025ec3d118f9eb6b82f4fd607d310e2e09584df1dca20d30114000909d5fb1fe5b5321ace0674e04568e59a935dd9d97ca5ca53926afd37edbdef86b7e23e27adc2f1e0c1bf92c9554ae9e445"}, @generic="661ee8f43dbedbc99f09b1595caa2fb6f6756c39cb636cbb85f425714da9456a075e2c5f2bf22c4620823707b5fc3b2619d727217896988ae714da18bc83cdbe045d60dd4bc472a163158599fe17bdfd3f838796e25eb8d15b842948f72f48"]}, 0x1d0}], 0x2, 0x0, 0x0, 0x4000041}, 0x44000050)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000004c0)={@multicast1, 0x530655387fa6b9f7, 0x0, 0x40, 0x0, [{@remote}, {@multicast2}, {@broadcast}, {@initdev}]}})
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_REGISTER(r6, 0x401870c8, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00!', 0x7}], 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2000040000000010a809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
accept(r2, &(0x7f0000000000)=@tipc=@name, &(0x7f00000000c0)=0x80)
r8 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'vlan0\x00'})

9.01665313s ago: executing program 1 (id=483):
syz_usb_connect$midi(0x5, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000f6dfaf14c26ba8ff0203010902260001028190be09440000010103202400000000060002e8e50905000000000000000000"], 0x0)

5.992615414s ago: executing program 1 (id=494):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x61, 0x3})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x1, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000243000/0x2000)=nil, 0x2000}, 0x2})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000))
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000140)={0x933, 0xfffffffd, 0x10000, 0xfffffffd})
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000001, 0x4, 0x0, 0x8001, 0x9, 0x2, 0x875}]})
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000280)={&(0x7f0000000000)=0x10004, 0xfffffffd, &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000200)})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)

5.835054868s ago: executing program 1 (id=496):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", '\x00', "9b1f80001b00"}, 0x38)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=<r8=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r9)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x0)
syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1467, 0x0, 0x2, 0xb5}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10, 0x0, 0x31c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x40000, 0x4, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x1040021d, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r7, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x100}, 0xc0c0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000030305000000000000000000010000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0)
add_key(&(0x7f0000000d80)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0)

5.681554942s ago: executing program 1 (id=498):
setfsgid(0xee00) (async)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)=<r1=>0x0) (async, rerun: 64)
read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020) (rerun: 64)
getuid() (async)
statx(r0, &(0x7f0000002780)='./file0\x00', 0x800, 0x2, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYRESDEC=r2, @ANYRES64=r1]) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101, 0xffffffffffffffff}) (async)
mmap$binder(&(0x7f0000c75000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x98b, 0x2}, @fd={0x66642a85, 0x0, r6}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 64)
read$FUSE(r4, &(0x7f000000c2c0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020) (rerun: 64)
syz_fuse_handle_req(r4, &(0x7f0000002140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c392a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bc1c2745f5f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x400000000000003, 0xfffffffd, 0x0, {0x0, 0x800000008, 0x0, 0x1, 0xd1, 0x2, 0x1, 0x2, 0x1, 0x2000, 0x0, r8, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async, rerun: 32)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (rerun: 32)
r11 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12) (async)
syz_ublk_add_dev(r10, 0x0, r11, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=<r14=>0x0)
syz_ublk_setup_queues(r13, r14, &(0x7f0000000180)={0x0, 0x8427, 0x20, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async)
write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x2, 0x1001a}}, 0x50)
r15 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x8000]}, 0x8, 0x800)
open_tree(r15, &(0x7f00000002c0)='./file1\x00', 0x8800)

5.597381714s ago: executing program 44 (id=498):
setfsgid(0xee00) (async)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)=<r1=>0x0) (async, rerun: 64)
read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020) (rerun: 64)
getuid() (async)
statx(r0, &(0x7f0000002780)='./file0\x00', 0x800, 0x2, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYRESDEC=r2, @ANYRES64=r1]) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101, 0xffffffffffffffff}) (async)
mmap$binder(&(0x7f0000c75000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x98b, 0x2}, @fd={0x66642a85, 0x0, r6}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 64)
read$FUSE(r4, &(0x7f000000c2c0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020) (rerun: 64)
syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x400000000000003, 0xfffffffd, 0x0, {0x0, 0x800000008, 0x0, 0x1, 0xd1, 0x2, 0x1, 0x2, 0x1, 0x2000, 0x0, r8, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async, rerun: 32)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (rerun: 32)
r11 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12) (async)
syz_ublk_add_dev(r10, 0x0, r11, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=<r14=>0x0)
syz_ublk_setup_queues(r13, r14, &(0x7f0000000180)={0x0, 0x8427, 0x20, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async)
write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x2, 0x1001a}}, 0x50)
r15 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x8000]}, 0x8, 0x800)
open_tree(r15, &(0x7f00000002c0)='./file1\x00', 0x8800)

4.058503801s ago: executing program 5 (id=521):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "1b9ef443231b33f7", "1737d9df2ac526c7e90bb1f7404df64e", "3f0511c2", "533addbc23c4426a"}, 0x28)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400)

4.003432713s ago: executing program 5 (id=522):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x8)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x80, 0x0, 0xe688, 0x14, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x4, 0x29, 0x0, @private}}}}) (async, rerun: 32)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x50001, 0x0, {[0x3, 0x1f8, 0x83, 0x4, 0x3, 0x8, 0x1, 0x4]}}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80800)
setsockopt$packet_int(r8, 0x107, 0x35bb7e09567119a2, &(0x7f0000000100)=0x6, 0x4) (async)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async, rerun: 64)
sendmsg$nl_netfilter(r7, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x4804}, 0x4000010) (rerun: 64)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x244480, 0x49)
symlinkat(&(0x7f0000000140)='./file0\x00', r10, &(0x7f0000000240)='./file0\x00') (async)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) (async, rerun: 64)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (rerun: 64)
r11 = socket$netlink(0x10, 0x3, 0x0)
writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='loginuid\x00')
close(r12)

3.900598145s ago: executing program 5 (id=523):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcd9df251100000024000980080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x2, 0x80006, 0x1)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000085247110040000102030109022c000101fe10810904000002010300060905f10a40000fd702042501000905"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
ptrace(0x8, r2)
kcmp(r2, r2, 0x3, r3, r3)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcd9df251100000024000980080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket(0x2, 0x80006, 0x1) (async)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) (async)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async)
syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000085247110040000102030109022c000101fe10810904000002010300060905f10a40000fd702042501000905"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async)
ptrace(0x8, r2) (async)
kcmp(r2, r2, 0x3, r3, r3) (async)

3.663594841s ago: executing program 5 (id=524):
futex(0x0, 0x9, 0x2, 0x0, 0x0, 0x0) (async)
futex(0x0, 0x9, 0x2, 0x0, 0x0, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0xd4, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x3001}}, {0xfffffffffffffc76, &(0x7f00000000c0)=ANY=[]}]})

2.143600588s ago: executing program 5 (id=534):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x6, 0x4)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x890)

2.093511759s ago: executing program 5 (id=535):
fcntl$getflags(0xffffffffffffffff, 0x401)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000000004058040f5000000000000109022400010000e80b090400100103000200092100800001226103090581038936010a701125ba7dffe553b9a8efe25d7152e1f3b9deebd74a79ca350698548f19498cf1c9880259999a6dd266"], 0x0)
r1 = socket(0x8000000010, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x804)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x20000000)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000040)=0xc65d, 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'vlan1\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f00000006c0)="b396", 0x2, 0x4884, &(0x7f0000000240)={0x11, 0x1c, r5, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x25a5, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x28, r9, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0xc080)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000100)={0x2c, r13, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', <r15=>r5, 0x4, 0x5, 0x2, 0x7, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x80, 0x120, 0x734}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x480c1}, 0x8014)
readv(r3, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0})

2.090370079s ago: executing program 7 (id=536):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000280)={0xb9dc, 0x5, 0x4, 0x7fff, 0x1, 0x0, [{0x8001, 0x3, 0x0, '\x00', 0x105}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
dup3(r3, r4, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xfc, 0x2, 0xf}, @ptr={0x70742a85, 0x0, 0x0, 0x68, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

1.931444713s ago: executing program 7 (id=537):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0)
mmap(&(0x7f0000814000/0x3000)=nil, 0x3000, 0x2000002, 0x13, r2, 0xb5233000) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x141, 0x0) (async)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000080)=0x1001) (async)
r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x88)
r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0)
syz_usb_connect$midi(0x2, 0x3e, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x4, 0xc0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x8, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0xac, 0x2, {0x4}}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0xa1, 0x7, 0x7, {0x4}}}]}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async)
sendfile(r5, r5, 0x0, 0xa004) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async, rerun: 64)
r8 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000b"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000107}]})
mkdir(&(0x7f0000000300)='./bus\x00', 0x63)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]}) (async)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) (async)
ioctl$XFS_IOC_SWAPEXT(r6, 0xc0c0586d, &(0x7f00000004c0)={0x0, r6, r7, 0x7f, 0x1, '\x00', {0x6, 0x1, 0x401, 0x2, 0x6, 0x10001, 0x401, 0x5de31653, {0x4, 0x18}, {0x6, 0x8000}, {0xbe70, 0x6}, 0x2, 0x81, 0x5, 0x42, 0x8, 0x4, 0x3, 0xff35, 0x2b38, 0x6, '\x00', 0x320, 0x80, 0x4, 0xbb64}}) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000100)={0x2, 0x0, [{0xa, 0x2, 0x0, 0x0, @msi={0x2, 0x7f, 0x5, 0x5}}, {0x7, 0x5, 0x0, 0x0, @sint={0x0, 0x1}}]}) (async, rerun: 32)
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x7, 0x2, 0x0, 0x0, @sint={0x50, 0x26}}]}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1.873160944s ago: executing program 7 (id=538):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60000, 0x4) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60000, 0x4)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000ffdbdf250b0000fc00004e2300000000ffdfffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="0100000003000000fdffffff000000000800030011000020"], 0x8e}}, 0x20004010)
setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4)

1.815188376s ago: executing program 7 (id=539):
r0 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="d0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="bc940f", 0x3}], 0x1}}], 0x3, 0x4000001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000100000000000008010000001400020077673100000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000de6b2085474990fbc408354e833f0174b3db96557039f67b12f502ffe5c205cb492b6de17e83d7716562cd2d80fdf88ebba17d41ab535a57127b7d640111c4e048d1042083c71f5a227a49d72b4326c36947ddc3078515d49bfd62a1e2bbe72a37841026c3db3a32f248b0a0b4aa8ee5a7c44d4400d4ffcba48b9c97432113ae2c110a6724721e9c95628100e5a764a5af122153c8195722895c69e79b2c94b481"], 0x4c}}, 0x4)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x190, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xce, 0x4, "f86f30b2a1cf8dd2bb91ce7c5621864d38e45f0da84a5451f85ba84c311fb5bdce103ad3268c761a96d95cb61dec880beb677a7361a73731915842e5096ef4627811501b11f39daa12ce229b8903d24d0212185949a30f84c206f591b7f9bcb3b8c9ece979fb31196ffd980d968f12a62329574367cdfa43257f760a0493b5514033ff95c119a802eaad5bff7d46986ca070c63d5d887eb77d052f58a62367334a7ec56b81785a8ccafc378747112a1010262be93ac2f2a22bd111da040ada09b24d0d0b05a380d59f9c"}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "dc6272dbbdbcaca73b18da350386d1d80540dbb55471c1095840ac6f18cd4f0e1c74b8737db63ebe3c0234475371c1abfa7651b7a4fd75797e1c93e1ea7d3ef3411dff9b4a7d2692a62821fdd860665176a4f7132ff794c0e4ac2c0eac0455e1b15c74bd11dd286a9daf244f3d156cf47295221510ccda3e1781bb18b030a0d72cbbe96e5319c87d3e77cccedd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})

1.491433954s ago: executing program 8 (id=540):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x180, 0xfffffffe, 0x2f8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x400, 0xffffffff, 0x97}}], 0x1, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/264, 0x108}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000280)=""/198, 0xd1}, {&(0x7f00000018c0)=""/223, 0xdf}, {&(0x7f00000019c0)=""/134, 0x86}, {&(0x7f0000000040)=""/166, 0xa6}], 0x8}, 0xffffffff}], 0x4000000000001e1, 0x2100, 0x0)

1.424024485s ago: executing program 8 (id=541):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000010400000000000006000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000200081000000000000000900ffffff80000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080)

1.388368476s ago: executing program 8 (id=542):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
close(r0)
syz_usb_connect$uac2(0x0, 0x98, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000083512028040000102030109028600030180e007080b0101010a204f0904000000010120000924010200032600c511240806060001020002000200feff03000c2403fd0004a80206f9ff0a090401000001022000090401010101022000090501094000050400082501810909020009040200000102"], 0x0)
syz_usb_connect(0x3, 0x52, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="a9280c60910efaa0b7d6453055a5db3875915bac31a22b768970899273b75490c80b4b7aed159cad9192dbbb6a88e473a1fa6575f73f55d4655844e5b5ffc590875526e4199a51c909c3b86770e950e6be5a71cb5826842d9b0793a6cda390fc383e774269e49228325416a5c117befad38077900e7c48b69552924967fc130b1fccbcb0294bb4f8903753993bb06012a5019b84c14c75d489c762afacc2b0014d60aab62e3362b06b41ded9ac59ea3b04a5219bac08e9692a9b8f68806ed401b8", @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="e79edf0d79d0e24d9e1d78dcd0640c9a4b23eee38ccadfbd8a04f0", @ANYBLOB="14600ef15621e4bb7f6f91fb7814394726ddf2f50896c7a2983c3e07ef72787ca9ed2f34f6487b5025cc27411fd95b50b3d9ba18e54ecd20cacb20523af2dcd0289f1ce862d4752a4bb6dbf47e578257b27cd86b3607ac12b095c935a24c3c23ee1c5828c744762a23d9ce2c66dc209d295a72d8f524724ac5cc8a704cffffa112a826c5dd2518ed556cee3c26a93d09000000000000003e64723ac3d0f5d02b71f5f18344a8bf115aa6372c1b75125c3bdd7de3ff61d116af3035b30bbf5192a06140acf5072b934e6770ccb35c9f4305ec3ea4ea731fa649511e8567befa5b1a0000", @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
userfaultfd(0x801)
creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (async)
close(r0) (async)
syz_usb_connect$uac2(0x0, 0x98, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000083512028040000102030109028600030180e007080b0101010a204f0904000000010120000924010200032600c511240806060001020002000200feff03000c2403fd0004a80206f9ff0a090401000001022000090401010101022000090501094000050400082501810909020009040200000102"], 0x0) (async)
syz_usb_connect(0x3, 0x52, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="a9280c60910efaa0b7d6453055a5db3875915bac31a22b768970899273b75490c80b4b7aed159cad9192dbbb6a88e473a1fa6575f73f55d4655844e5b5ffc590875526e4199a51c909c3b86770e950e6be5a71cb5826842d9b0793a6cda390fc383e774269e49228325416a5c117befad38077900e7c48b69552924967fc130b1fccbcb0294bb4f8903753993bb06012a5019b84c14c75d489c762afacc2b0014d60aab62e3362b06b41ded9ac59ea3b04a5219bac08e9692a9b8f68806ed401b8", @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="e79edf0d79d0e24d9e1d78dcd0640c9a4b23eee38ccadfbd8a04f0", @ANYBLOB="14600ef15621e4bb7f6f91fb7814394726ddf2f50896c7a2983c3e07ef72787ca9ed2f34f6487b5025cc27411fd95b50b3d9ba18e54ecd20cacb20523af2dcd0289f1ce862d4752a4bb6dbf47e578257b27cd86b3607ac12b095c935a24c3c23ee1c5828c744762a23d9ce2c66dc209d295a72d8f524724ac5cc8a704cffffa112a826c5dd2518ed556cee3c26a93d09000000000000003e64723ac3d0f5d02b71f5f18344a8bf115aa6372c1b75125c3bdd7de3ff61d116af3035b30bbf5192a06140acf5072b934e6770ccb35c9f4305ec3ea4ea731fa649511e8567befa5b1a0000", @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) (async)
userfaultfd(0x801) (async)

1.163482532s ago: executing program 7 (id=545):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
r5 = syz_ublk_setup_io_uring(0x7c8, &(0x7f00000000c0)={0x0, 0x6884, 0x2, 0x3, 0x1a, 0x0, r4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0))
r6 = memfd_secret(0x0)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xdeeb, 0x20000, 0x3, 0x255, 0x0, r5}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x4, 0x0, 0x0}}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vlan1\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000a40)='\t', 0x1, 0x240058d4, &(0x7f0000000300)={0x11, 0x8100, r9, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040))
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x122, {0x0, 0x0, 0x0, 0x4, 0x2}})

1.138505782s ago: executing program 0 (id=546):
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40)
quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000201, 0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, 0x0) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
dup2(r11, r11) (async)
dup2(r11, r11)
syz_ublk_setup_queues(r10, r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x3e2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0xbc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000000000)=@buf)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x0)

995.024536ms ago: executing program 0 (id=547):
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f00000007c0)={&(0x7f0000000040)=0x81, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000780)})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)

899.511048ms ago: executing program 7 (id=548):
syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800002010000000904004001020d"], 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040))
syz_usb_connect$uac1(0x4, 0xf0, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x5, 0x40, 0x68, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x38}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x401, 0x1, 0x6, 0x8, 0x81, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x404, 0x1, 0x5, 0x6}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xe, 0x9, "956d456b23"}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x6, 0x40, "3cda64f8bc30"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xa0, 0x1, 0x6}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x9, 0x31, "8f675260610abe"}, @as_header={0x7, 0x24, 0x1, 0xe0, 0x10, 0x1002}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xb51, 0xa, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x8, 0x4, 0xd, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x2, 0xb, {0x7, 0x25, 0x1, 0x8, 0xd8, 0xdaa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7b, 0x80, 0x6, 0xb9, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xf, 0x9, 0x0, 0xfe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x356b, 0xfffa, 0xfa, 0xfe}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xc, 0x33, 0x4, {0x7, 0x25, 0x1, 0x8, 0x7, 0x9}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x81, 0x3, 0x4, 0x8, 0xfa}, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="050f3f000403100b0710021af806001410040ad0c026057fc46eb302da6960125d3e621c100a02040000000f00000030000000000050db496bb03cb59f8e95baea161a00b98bca18e727326d5343a0be44eca634a5128308a96d5158f057234c"], 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}, {0xa2, &(0x7f0000000200)=ANY=[@ANYBLOB="a203699dede32ee3c45fffffffffffffffff42384cfcfbe58b01426e58186cde1605e7d288ec2397a4ce6e5f88133d52f2cb2f47474268faae39fa5d09a11992a32c7c0090a5b4fdbbafb035ca78b1f0b932ae76cbf9400aa283a8824e22dc993c6c8dfa38b2dbf22f4e51da0a63efb9b4aafc5446e257c50cee469c5df453b633d143528624e57d3a1c04db069dff842ef856d49f00"/162]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x409}}]})

635.768845ms ago: executing program 8 (id=549):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x600, 0x0)
open(&(0x7f0000000a40)='.\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x138}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0xd9c, 0x4)

603.899935ms ago: executing program 8 (id=550):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090080ffffff000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080)

539.656297ms ago: executing program 8 (id=551):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000018c0)=ANY=[@ANYBLOB="400606"], 0x0, 0x0})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000140)=0x7, 0x4)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f046389e1f10009041f81fe00000e000000000000000800b9520f000100", 0x24)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

146.709127ms ago: executing program 0 (id=552):
r0 = socket(0x22, 0x1, 0xffffffff)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)

92.030788ms ago: executing program 0 (id=553):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x890)

3.59109ms ago: executing program 0 (id=554):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400)

0s ago: executing program 0 (id=555):
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
sync()
open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x0)
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()

kernel console output (not intermixed with test programs):

    T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   45.478568][    T9] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40
[   45.488165][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.496412][    T9] usb 6-1: Product: syz
[   45.500772][    T9] usb 6-1: Manufacturer: syz
[   45.505508][    T9] usb 6-1: SerialNumber: syz
[   45.534370][  T377] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   45.685618][  T377] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   45.694161][  T377] usb 2-1: config 0 has no interface number 0
[   45.700517][  T377] usb 2-1: config 0 interface 41 has no altsetting 0
[   45.709163][  T377] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   45.720248][  T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.729461][  T377] usb 2-1: Product: syz
[   45.733950][  T377] usb 2-1: Manufacturer: syz
[   45.738855][  T377] usb 2-1: SerialNumber: syz
[   45.744155][    T9] usb 6-1: unit 4 not found!
[   45.749722][  T377] usb 2-1: config 0 descriptor??
[   45.825599][  T812] =======================================================
[   45.825599][  T812] WARNING: The mand mount option has been deprecated and
[   45.825599][  T812]          and is ignored by this kernel. Remove the mand
[   45.825599][  T812]          option from the mount to silence this warning.
[   45.825599][  T812] =======================================================
[   45.828331][    T9] usb 6-1: USB disconnect, device number 6
[   45.918914][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.044169][  T381] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   46.124106][  T319] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   46.194678][  T381] usb 10-1: Using ep0 maxpacket: 32
[   46.201826][  T381] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10
[   46.216421][  T381] usb 10-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice= 0.40
[   46.225967][  T381] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.234149][  T381] usb 10-1: Product: syz
[   46.238803][  T381] usb 10-1: Manufacturer: syz
[   46.243819][  T381] usb 10-1: SerialNumber: syz
[   46.278786][  T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.290000][  T319] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[   46.299767][  T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.461177][  T381] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2
[   46.474256][  T381] usb 10-1: USB disconnect, device number 3
[   46.486471][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.519559][  T815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.528371][  T815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.580198][  T377] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   46.618830][  T319] usbhid 4-1:1.0: can't add hid device: -71
[   46.625314][  T319] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[   46.634578][  T319] usb 4-1: USB disconnect, device number 6
[   46.797660][  T377] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   46.808475][  T377] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[   46.818497][  T377] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   46.828394][  T377] usb 2-1: USB disconnect, device number 5
[   47.149100][   T36] kauditd_printk_skb: 14 callbacks suppressed
[   47.149118][   T36] audit: type=1400 audit(1786619663.324:221): avc:  denied  { write } for  pid=834 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.151945][  T835] program syz.3.177 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   47.211313][   T36] audit: type=1400 audit(1786619663.384:222): avc:  denied  { mount } for  pid=838 comm="syz.3.179" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   47.328242][   T36] audit: type=1400 audit(1786619663.504:223): avc:  denied  { write } for  pid=842 comm="syz.1.181" name="igmp6" dev="proc" ino=4026532529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   47.330651][  T843] 9pnet_fd: Insufficient options for proto=fd
[   47.359777][  T844] 9pnet_fd: Insufficient options for proto=fd
[   47.454112][  T377] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[   47.484097][  T381] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   47.594233][  T377] usb 4-1: device descriptor read/64, error -71
[   47.654112][  T381] usb 6-1: Using ep0 maxpacket: 16
[   47.660896][  T381] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.671461][  T381] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.682370][  T381] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   47.691599][  T381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.699685][  T381] usb 6-1: Product: syz
[   47.703869][  T381] usb 6-1: Manufacturer: syz
[   47.708666][  T381] usb 6-1: SerialNumber: syz
[   47.844126][  T377] usb 4-1: device descriptor read/64, error -71
[   47.921617][  T381] usb 6-1: 0:2 : does not exist
[   47.938795][  T381] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[   47.964182][  T381] usb 6-1: USB disconnect, device number 7
[   47.985677][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   48.084175][  T377] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[   48.214239][  T377] usb 4-1: device descriptor read/64, error -71
[   48.284149][   T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   48.364168][  T319] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[   48.436481][   T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.447844][   T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[   48.457064][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.464157][  T377] usb 4-1: device descriptor read/64, error -71
[   48.494242][  T319] usb 10-1: device descriptor read/64, error -71
[   48.508461][   T36] audit: type=1400 audit(1786619664.684:224): avc:  denied  { bind } for  pid=864 comm="syz.5.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.574474][  T377] usb usb4-port1: attempt power cycle
[   48.680374][  T856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.689497][  T856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.734107][  T319] usb 10-1: device descriptor read/64, error -71
[   48.786901][   T45] usbhid 2-1:1.0: can't add hid device: -71
[   48.792972][   T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   48.802386][   T45] usb 2-1: USB disconnect, device number 6
[   48.914215][  T377] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   48.935896][  T377] usb 4-1: device descriptor read/8, error -71
[   48.974113][  T319] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[   49.075436][  T377] usb 4-1: device descriptor read/8, error -71
[   49.104128][  T319] usb 10-1: device descriptor read/64, error -71
[   49.324122][  T377] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[   49.344137][  T319] usb 10-1: device descriptor read/64, error -71
[   49.345354][  T377] usb 4-1: device descriptor read/8, error -71
[   49.379163][  T881] netlink: 128 bytes leftover after parsing attributes in process `syz.1.196'.
[   49.379174][   T36] audit: type=1400 audit(1786619665.554:225): avc:  denied  { write } for  pid=880 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   49.410582][  T881] tmpfs: Unknown parameter 'noinode32'
[   49.410590][   T36] audit: type=1400 audit(1786619665.584:226): avc:  denied  { mounton } for  pid=880 comm="syz.1.196" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   49.454316][  T319] usb usb10-port1: attempt power cycle
[   49.456928][   T36] audit: type=1400 audit(1786619665.634:227): avc:  denied  { create } for  pid=882 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   49.495228][  T377] usb 4-1: device descriptor read/8, error -71
[   49.507348][   T36] audit: type=1400 audit(1786619665.684:229): avc:  denied  { getopt } for  pid=882 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   49.527739][   T36] audit: type=1400 audit(1786619665.684:228): avc:  denied  { setopt } for  pid=882 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   49.604346][  T377] usb usb4-port1: unable to enumerate USB device
[   49.794444][  T319] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[   49.815402][  T319] usb 10-1: device descriptor read/8, error -71
[   49.884089][  T377] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   49.945716][  T319] usb 10-1: device descriptor read/8, error -71
[   50.014111][  T377] usb 6-1: device descriptor read/64, error -71
[   50.194098][  T319] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[   50.215380][  T319] usb 10-1: device descriptor read/8, error -71
[   50.250212][   T36] audit: type=1400 audit(1786619666.424:230): avc:  denied  { map } for  pid=890 comm="syz.3.200" path="socket:[9093]" dev="sockfs" ino=9093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   50.254811][  T377] usb 6-1: device descriptor read/64, error -71
[   50.355308][  T319] usb 10-1: device descriptor read/8, error -71
[   50.464319][  T319] usb usb10-port1: unable to enumerate USB device
[   50.524139][  T377] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   50.594138][  T380] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   50.654199][  T377] usb 6-1: device descriptor read/64, error -71
[   50.745549][  T380] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.756732][  T380] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[   50.766406][  T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.914660][  T377] usb 6-1: device descriptor read/64, error -71
[   50.979993][  T900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.988773][  T900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.034434][  T377] usb usb6-port1: attempt power cycle
[   51.044136][  T380] usbhid 4-1:1.0: can't add hid device: -71
[   51.050208][  T380] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[   51.059439][  T380] usb 4-1: USB disconnect, device number 11
[   51.374111][  T377] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   51.395645][  T377] usb 6-1: device descriptor read/8, error -71
[   51.525724][  T377] usb 6-1: device descriptor read/8, error -71
[   51.534246][  T381] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[   51.688650][  T381] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   51.700467][  T381] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.710585][  T381] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   51.720383][  T381] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.731213][  T381] hub 10-1:4.0: USB hub found
[   51.774112][  T377] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   51.795540][  T377] usb 6-1: device descriptor read/8, error -71
[   51.927839][  T377] usb 6-1: device descriptor read/8, error -71
[   51.936702][  T381] hub 10-1:4.0: 2 ports detected
[   51.944078][  T381] usb 10-1: selecting invalid altsetting 1
[   51.950370][  T381] hub 10-1:4.0: Using single TT (err -22)
[   52.054125][  T377] usb usb6-port1: unable to enumerate USB device
[   52.094497][  T382] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   52.137983][  T381] hub 10-1:4.0: hub_hub_status failed (err = -71)
[   52.145214][  T381] hub 10-1:4.0: config failed, can't get hub status (err -71)
[   52.164796][  T381] usb 10-1: USB disconnect, device number 8
[   52.264098][  T382] usb 4-1: Using ep0 maxpacket: 16
[   52.270701][  T382] usb 4-1: unable to get BOS descriptor or descriptor too short
[   52.279367][  T382] usb 4-1: config 9 has an invalid interface number: 91 but max is 0
[   52.287576][  T382] usb 4-1: config 9 has no interface number 0
[   52.293662][  T382] usb 4-1: config 9 interface 91 has no altsetting 0
[   52.302119][  T382] usb 4-1: New USB device found, idVendor=19d2, idProduct=8056, bcdDevice=e9.41
[   52.311232][  T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.319287][  T382] usb 4-1: Product: syz
[   52.323760][  T382] usb 4-1: Manufacturer: syz
[   52.328395][  T382] usb 4-1: SerialNumber: syz
[   52.334379][  T377] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   52.485687][  T377] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   52.497024][  T377] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.508356][  T377] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   52.517656][  T377] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   52.526178][  T377] usb 2-1: Product: syz
[   52.530352][  T377] usb 2-1: Manufacturer: syz
[   52.539561][  T377] hub 2-1:4.0: USB hub found
[   52.548243][  T382] usb 4-1: bad CDC descriptors
[   52.555831][  T382] usb 4-1: USB disconnect, device number 12
[   52.796862][  T472] bridge_slave_1: left allmulticast mode
[   52.802693][  T472] bridge_slave_1: left promiscuous mode
[   52.808536][  T472] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.818581][  T472] bridge_slave_0: left allmulticast mode
[   52.828917][  T377] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[   52.829782][  T472] bridge_slave_0: left promiscuous mode
[   52.846176][  T472] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.864792][  T377] usb 2-1: USB disconnect, device number 7
[   52.991065][  T472] veth1_macvtap: left promiscuous mode
[   52.996953][  T472] veth0_vlan: left promiscuous mode
[   53.136490][  T942] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.143713][  T942] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.151483][  T942] bridge_slave_0: entered allmulticast mode
[   53.157933][  T942] bridge_slave_0: entered promiscuous mode
[   53.165094][  T942] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.172156][  T942] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.179891][  T942] bridge_slave_1: entered allmulticast mode
[   53.186780][  T942] bridge_slave_1: entered promiscuous mode
[   53.255934][  T942] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.263563][  T942] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.271020][  T942] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.278192][  T942] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.294089][  T377] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   53.316913][  T429] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.325250][  T429] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.342269][  T476] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.349463][  T476] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.359552][  T476] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.366881][  T476] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.423029][  T942] veth0_vlan: entered promiscuous mode
[   53.437718][  T942] veth1_macvtap: entered promiscuous mode
[   53.466273][  T377] usb 6-1: unable to get BOS descriptor or descriptor too short
[   53.478939][  T377] usb 6-1: config 1 has an invalid interface number: 150 but max is 2
[   53.494425][  T382] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[   53.496165][  T377] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.513825][  T377] usb 6-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[   53.522883][  T377] usb 6-1: config 1 has no interface number 3
[   53.529434][  T377] usb 6-1: too many endpoints for config 1 interface 150 altsetting 235: 245, using maximum allowed: 30
[   53.544835][  T377] usb 6-1: config 1 interface 150 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 245
[   53.559081][  T377] usb 6-1: config 1 interface 150 has no altsetting 0
[   53.567920][  T377] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   53.577600][  T377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.586225][  T377] usb 6-1: Product: syz
[   53.590409][  T377] usb 6-1: Manufacturer: syz
[   53.595149][  T377] usb 6-1: SerialNumber: syz
[   53.645733][  T382] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   53.657100][  T382] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.667417][  T382] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   53.676670][  T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.693159][  T382] hub 4-1:4.0: USB hub found
[   53.808151][  T377] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   53.823404][  T377] usb 6-1: USB disconnect, device number 12
[   53.846221][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   53.864343][   T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   53.893528][  T382] hub 4-1:4.0: 2 ports detected
[   53.898663][  T382] usb 4-1: selecting invalid altsetting 1
[   53.904797][  T382] hub 4-1:4.0: Using single TT (err -22)
[   54.050917][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   54.058913][   T45] usb 2-1: no configurations
[   54.063606][   T45] usb 2-1: can't read configurations, error -22
[   54.096320][  T382] hub 4-1:4.0: hub_hub_status failed (err = -71)
[   54.102874][  T382] hub 4-1:4.0: config failed, can't get hub status (err -71)
[   54.124725][  T382] usb 4-1: USB disconnect, device number 13
[   54.566437][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   54.566458][   T36] audit: type=1400 audit(1786619670.744:240): avc:  denied  { append } for  pid=977 comm="syz.1.239" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   54.597128][  T382] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   54.687918][  T476] bridge_slave_1: left allmulticast mode
[   54.694887][  T476] bridge_slave_1: left promiscuous mode
[   54.700720][  T476] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.714411][  T476] bridge_slave_0: left allmulticast mode
[   54.724044][  T476] bridge_slave_0: left promiscuous mode
[   54.729724][  T476] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.744320][  T382] usb 6-1: device descriptor read/64, error -71
[   54.776189][   T36] audit: type=1400 audit(1786619670.954:241): avc:  denied  { watch } for  pid=979 comm="syz.2.240" path="/6" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   54.897115][  T476] veth1_macvtap: left promiscuous mode
[   54.902661][  T476] veth0_vlan: left promiscuous mode
[   54.994451][  T382] usb 6-1: device descriptor read/64, error -71
[   55.140878][  T990] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.148206][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.156384][  T990] bridge_slave_0: entered allmulticast mode
[   55.162851][  T990] bridge_slave_0: entered promiscuous mode
[   55.171695][  T990] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.178881][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.186314][  T990] bridge_slave_1: entered allmulticast mode
[   55.192963][  T990] bridge_slave_1: entered promiscuous mode
[   55.255134][  T990] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.262395][  T990] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.270217][  T990] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.277990][  T990] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.286409][  T382] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   55.313253][  T457] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.321110][  T457] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.332854][  T472] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.340028][  T472] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.351577][  T457] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.358838][  T457] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.395331][  T990] veth0_vlan: entered promiscuous mode
[   55.410219][  T990] veth1_macvtap: entered promiscuous mode
[   55.424363][  T382] usb 6-1: device descriptor read/64, error -71
[   55.642864][   T36] audit: type=1400 audit(1786619671.814:242): avc:  denied  { read write } for  pid=1014 comm="syz.2.255" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   55.666827][  T382] usb 6-1: device descriptor read/64, error -71
[   55.667342][   T36] audit: type=1400 audit(1786619671.814:243): avc:  denied  { open } for  pid=1014 comm="syz.2.255" path="/11/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   55.701340][   T36] audit: type=1400 audit(1786619671.814:244): avc:  denied  { ioctl } for  pid=1014 comm="syz.2.255" path="/11/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   55.784519][  T382] usb usb6-port1: attempt power cycle
[   55.816170][ T1022] fuse: Unknown parameter '�$
'
[   55.884270][  T377] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   55.906694][   T36] audit: type=1326 audit(1786619672.084:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.1.259" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff4e39e0d9 code=0x0
[   55.934131][    T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   56.008219][   T36] audit: type=1326 audit(1786619672.184:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.1.259" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff4e39e0d9 code=0x0
[   56.036713][  T377] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   56.047981][  T377] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.058406][  T377] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   56.067746][  T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.080700][  T377] hub 3-1:4.0: USB hub found
[   56.099797][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[   56.107641][    T9] usb 7-1: no configurations
[   56.111197][ T1031] netlink: 'syz.1.259': attribute type 22 has an invalid length.
[   56.112379][    T9] usb 7-1: can't read configurations, error -22
[   56.124975][ T1031] rust_binder: Failure in copy_transaction_data: EFAULT
[   56.126448][ T1031] rust_binder: 1028:1031 transaction call to 1028:0 failed EFAULT, code 0 size 63-24
[   56.143220][  T382] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   56.148704][   T36] audit: type=1400 audit(1786619672.324:247): avc:  denied  { sqpoll } for  pid=1028 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   56.175624][  T382] usb 6-1: device descriptor read/8, error -71
[   56.278575][  T377] hub 3-1:4.0: 2 ports detected
[   56.284108][  T377] usb 3-1: selecting invalid altsetting 1
[   56.290265][  T377] hub 3-1:4.0: Using single TT (err -22)
[   56.305320][  T382] usb 6-1: device descriptor read/8, error -71
[   56.479589][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.488588][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.544134][  T382] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   56.565258][  T382] usb 6-1: device descriptor read/8, error -71
[   56.695310][  T382] usb 6-1: device descriptor read/8, error -71
[   56.739278][   T45] rust_binder: 1028: undelivered TRANSACTION_ERROR: 29201
[   56.762564][ T1038] incfs: Options parsing error. -22
[   56.768176][ T1038] incfs: mount failed -22
[   56.814492][  T382] usb usb6-port1: unable to enumerate USB device
[   56.910464][ T1047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[   57.005521][  T377] hub 3-1:4.0: hub_hub_status failed (err = -71)
[   57.014965][  T377] hub 3-1:4.0: config failed, can't get hub status (err -71)
[   57.044774][  T377] usb 3-1: USB disconnect, device number 5
[   57.231000][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.238997][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.247040][ T1050] bridge_slave_0: entered allmulticast mode
[   57.253403][ T1050] bridge_slave_0: entered promiscuous mode
[   57.260532][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.270082][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.277483][ T1050] bridge_slave_1: entered allmulticast mode
[   57.284625][ T1050] bridge_slave_1: entered promiscuous mode
[   57.309412][ T1057] netlink: 44 bytes leftover after parsing attributes in process `syz.6.270'.
[   57.369581][ T1061] FAULT_INJECTION: forcing a failure.
[   57.369581][ T1061] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   57.394236][ T1061] CPU: 1 UID: 0 PID: 1061 Comm: syz.5.272 Not tainted syzkaller #0 a7accba8f927d2da86bfebad1065c65ec20b626d
[   57.394271][ T1061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   57.394289][ T1061] Call Trace:
[   57.394297][ T1061]  <TASK>
[   57.394308][ T1061]  __dump_stack+0x21/0x30
[   57.394342][ T1061]  dump_stack_lvl+0x140/0x1c0
[   57.394369][ T1061]  ? __cfi_dump_stack_lvl+0x10/0x10
[   57.394399][ T1061]  dump_stack+0x19/0x20
[   57.394433][ T1061]  should_fail_ex+0x3c2/0x510
[   57.394458][ T1061]  should_fail+0xf/0x20
[   57.394479][ T1061]  should_fail_usercopy+0x1e/0x30
[   57.394504][ T1061]  _copy_from_user+0x20/0xa0
[   57.394533][ T1061]  proc_control_compat+0xb2/0x190
[   57.394555][ T1061]  ? proc_submiturb+0x1c0/0x1c0
[   57.394574][ T1061]  ? mutex_lock+0x97/0x1d0
[   57.394604][ T1061]  ? __kasan_check_read+0x15/0x20
[   57.394626][ T1061]  ? ring_buffer_unlock_commit+0x473/0x5e0
[   57.394651][ T1061]  usbdev_ioctl+0x13d8/0x2120
[   57.394670][ T1061]  ? __cfi_usbdev_ioctl+0x10/0x10
[   57.394690][ T1061]  ? bpf_lsm_file_ioctl+0xd/0x20
[   57.394715][ T1061]  ? security_file_ioctl+0x3e/0x110
[   57.394747][ T1061]  ? __cfi_usbdev_ioctl+0x10/0x10
[   57.394766][ T1061]  __se_sys_ioctl+0x135/0x1b0
[   57.394792][ T1061]  __x64_sys_ioctl+0x7f/0xa0
[   57.394816][ T1061]  x64_sys_call+0x1878/0x2ee0
[   57.394836][ T1061]  do_syscall_64+0x57/0xf0
[   57.394861][ T1061]  ? clear_bhb_loop+0x50/0xa0
[   57.394890][ T1061]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   57.394917][ T1061] RIP: 0033:0x7f9310d9e0d9
[   57.394936][ T1061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.394956][ T1061] RSP: 002b:00007f9311c3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   57.394990][ T1061] RAX: ffffffffffffffda RBX: 00007f9311025fa0 RCX: 00007f9310d9e0d9
[   57.395008][ T1061] RDX: 0000200000000380 RSI: 00000000c0105500 RDI: 0000000000000003
[   57.395023][ T1061] RBP: 00007f9311c3f090 R08: 0000000000000000 R09: 0000000000000000
[   57.395039][ T1061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.395053][ T1061] R13: 00007f9311026038 R14: 00007f9311025fa0 R15: 00007ffd868b3f38
[   57.395072][ T1061]  </TASK>
[   57.405800][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.636527][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.644349][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.651406][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.689220][  T476] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.696896][  T476] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.708211][  T472] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.715394][  T472] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.729997][  T457] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.737465][  T457] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.756253][  T472] bridge_slave_1: left allmulticast mode
[   57.765924][  T472] bridge_slave_1: left promiscuous mode
[   57.771596][  T472] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.786294][  T472] bridge_slave_0: left allmulticast mode
[   57.793309][  T472] bridge_slave_0: left promiscuous mode
[   57.800538][  T472] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.985726][  T472] veth1_macvtap: left promiscuous mode
[   57.993163][  T472] veth0_vlan: left promiscuous mode
[   58.007602][   T36] audit: type=1400 audit(1786619674.184:248): avc:  denied  { create } for  pid=1076 comm="syz.6.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.028216][   T36] audit: type=1400 audit(1786619674.184:249): avc:  denied  { connect } for  pid=1076 comm="syz.6.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.115495][ T1050] veth0_vlan: entered promiscuous mode
[   58.134158][ T1050] veth1_macvtap: entered promiscuous mode
[   58.186352][ T1089] FAULT_INJECTION: forcing a failure.
[   58.186352][ T1089] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.199773][ T1089] CPU: 0 UID: 0 PID: 1089 Comm: syz.0.281 Not tainted syzkaller #0 a7accba8f927d2da86bfebad1065c65ec20b626d
[   58.199806][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   58.199820][ T1089] Call Trace:
[   58.199827][ T1089]  <TASK>
[   58.199835][ T1089]  __dump_stack+0x21/0x30
[   58.199864][ T1089]  dump_stack_lvl+0x140/0x1c0
[   58.199888][ T1089]  ? __cfi_dump_stack_lvl+0x10/0x10
[   58.199921][ T1089]  ? check_stack_object+0x138/0x150
[   58.199945][ T1089]  dump_stack+0x19/0x20
[   58.199970][ T1089]  should_fail_ex+0x3c2/0x510
[   58.199991][ T1089]  should_fail+0xf/0x20
[   58.200012][ T1089]  should_fail_usercopy+0x1e/0x30
[   58.200032][ T1089]  _copy_to_user+0x24/0xa0
[   58.200057][ T1089]  simple_read_from_buffer+0xed/0x160
[   58.200083][ T1089]  proc_fail_nth_read+0x1aa/0x220
[   58.200111][ T1089]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   58.200136][ T1089]  ? bpf_lsm_file_permission+0xd/0x20
[   58.200162][ T1089]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   58.200188][ T1089]  vfs_read+0x288/0xc70
[   58.200208][ T1089]  ? rb_commit+0x753/0x7b0
[   58.200231][ T1089]  ? __cfi_vfs_read+0x10/0x10
[   58.200250][ T1089]  ? __kasan_check_write+0x18/0x20
[   58.200269][ T1089]  ? mutex_lock+0x97/0x1d0
[   58.200296][ T1089]  ? __cfi_mutex_lock+0x10/0x10
[   58.200326][ T1089]  ksys_read+0x145/0x260
[   58.200345][ T1089]  ? __cfi_ksys_read+0x10/0x10
[   58.200365][ T1089]  ? trace_event_raw_event_sys_enter+0xf5/0x130
[   58.200396][ T1089]  __x64_sys_read+0x7f/0x90
[   58.200417][ T1089]  x64_sys_call+0x2638/0x2ee0
[   58.200434][ T1089]  do_syscall_64+0x57/0xf0
[   58.200456][ T1089]  ? clear_bhb_loop+0x50/0xa0
[   58.200482][ T1089]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   58.200507][ T1089] RIP: 0033:0x7fde28b5e90e
[   58.200526][ T1089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   58.200545][ T1089] RSP: 002b:00007fde299a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   58.200570][ T1089] RAX: ffffffffffffffda RBX: 00007fde299a66c0 RCX: 00007fde28b5e90e
[   58.200587][ T1089] RDX: 000000000000000f RSI: 00007fde299a60a0 RDI: 0000000000000004
[   58.200602][ T1089] RBP: 00007fde299a6090 R08: 0000000000000000 R09: 0000000000000000
[   58.200617][ T1089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.200631][ T1089] R13: 00007fde28e26038 R14: 00007fde28e25fa0 R15: 00007ffc840767d8
[   58.200647][ T1089]  </TASK>
[   58.224217][   T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   58.606035][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   58.617471][   T45] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32
[   58.627697][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   58.646108][   T45] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[   58.656708][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.667556][   T45] usb 2-1: Product: syz
[   58.671775][   T45] usb 2-1: Manufacturer: syz
[   58.683731][   T45] usb 2-1: SerialNumber: syz
[   58.691091][ T1084] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   58.834312][  T382] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[   58.864099][  T380] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   58.911353][   T45] usb 2-1: MIDIStreaming interface descriptor not found
[   58.922746][   T45] usb 2-1: USB disconnect, device number 10
[   58.964199][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   58.986401][  T382] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.998188][  T382] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   59.010920][  T382] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   59.020250][  T382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.026319][  T380] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00
[   59.029076][  T382] usb 6-1: Product: syz
[   59.038793][  T380] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   59.042434][  T382] usb 6-1: Manufacturer: syz
[   59.051192][  T380] usb 1-1: Product: syz
[   59.055531][  T382] usb 6-1: SerialNumber: syz
[   59.065681][  T380] ftdi_sio 1-1:5.0: FTDI USB Serial Device converter detected
[   59.078237][  T382] cdc_mbim 6-1:1.0: skipping garbage
[   59.084450][  T380] usb 1-1: Detected FT4233HP
[   59.265633][ T1106] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[   59.278557][ T1101] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   59.326049][  T380] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   59.334969][  T380] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   59.343283][  T380] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   59.358591][  T380] usb 1-1: USB disconnect, device number 11
[   59.374768][  T380] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   59.375689][ T1118] netlink: 24 bytes leftover after parsing attributes in process `syz.6.294'.
[   59.392303][  T380] ftdi_sio 1-1:5.0: device disconnected
[   59.734134][  T377] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   59.784189][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   59.884428][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   59.884449][   T36] audit: type=1400 audit(1786619676.064:255): avc:  denied  { shutdown } for  pid=1132 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   59.911512][ T1101] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   59.912948][   T36] audit: type=1400 audit(1786619676.064:256): avc:  denied  { read } for  pid=1132 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   59.919490][  T382] cdc_mbim 6-1:1.0: setting tx_max = 48
[   59.941829][  T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.945719][  T382] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[   59.956318][    T9] usb 7-1: Using ep0 maxpacket: 16
[   59.963598][  T382] wwan wwan0: port wwan0mbim0 attached
[   59.968157][  T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.975627][  T382] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 96:ca:62:7c:7c:dd
[   59.984463][  T377] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   60.007111][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.018363][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   60.036368][  T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.044724][   T36] audit: type=1400 audit(1786619676.214:257): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   60.066118][    T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   60.077377][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.086253][  T377] usb 2-1: config 0 descriptor??
[   60.094234][   T36] audit: type=1400 audit(1786619676.214:258): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.112060][    T9] usb 7-1: config 0 descriptor??
[   60.118498][   T36] audit: type=1400 audit(1786619676.214:259): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2159 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.155970][   T36] audit: type=1400 audit(1786619676.214:260): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2159 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.179744][   T36] audit: type=1400 audit(1786619676.214:261): avc:  denied  { getattr } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2159 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.204825][   T36] audit: type=1400 audit(1786619676.264:262): avc:  denied  { read } for  pid=1137 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.228297][   T36] audit: type=1400 audit(1786619676.264:263): avc:  denied  { open } for  pid=1137 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.253605][   T36] audit: type=1400 audit(1786619676.264:264): avc:  denied  { getattr } for  pid=1137 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.323084][  T149] 8021q: adding VLAN 0 to HW filter on device wwan0
[   60.506764][  T377] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -32
[   60.686635][  T377] usb 6-1: USB disconnect, device number 17
[   60.696227][  T377] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[   60.744986][ T1154] netlink: 17 bytes leftover after parsing attributes in process `syz.0.303'.
[   60.785650][ T1154] netlink: 'syz.0.303': attribute type 4 has an invalid length.
[   60.800482][  T377] wwan wwan0: port wwan0mbim0 disconnected
[   60.962560][ T1170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.972342][ T1170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.144097][  T382] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   61.294081][  T382] usb 1-1: Using ep0 maxpacket: 16
[   61.301144][  T382] usb 1-1: unable to get BOS descriptor or descriptor too short
[   61.310015][  T382] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.320389][  T382] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   61.331362][  T382] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   61.353503][  T382] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   61.362848][  T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.371451][  T382] usb 1-1: Product: syz
[   61.376022][  T382] usb 1-1: Manufacturer: syz
[   61.380788][  T382] usb 1-1: SerialNumber: syz
[   61.472914][ T1204] x_tables: duplicate underflow at hook 1
[   61.503539][ T1207] usb usb9: usbfs: process 1207 (syz.5.308) did not claim interface 63 before use
[   61.894127][  T377] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[   62.045499][  T377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.056906][  T377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.067112][  T377] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   62.076641][  T377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.086709][  T377] usb 6-1: config 0 descriptor??
[   62.197296][  T382] usb 1-1: Audio class v2/v3 interfaces need an interface association
[   62.205823][  T382] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   62.219588][  T382] usb 1-1: USB disconnect, device number 12
[   62.235295][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   62.495041][  T380] usb 2-1: USB disconnect, device number 11
[   62.539375][  T377] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   62.548268][  T377] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   62.561101][    T9] usbhid 7-1:0.0: can't add hid device: -71
[   62.567608][  T377] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   62.574897][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   62.582842][  T377] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   62.591984][    T9] usb 7-1: USB disconnect, device number 5
[   62.598013][  T377] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   62.610745][  T377] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   62.618423][  T377] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   62.627586][  T377] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0
[   62.747115][ T1228] overlayfs: failed to resolve './file1': -2
[   62.974226][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   62.983413][  T377] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device
[   62.992017][  T377] pyra 0003:1E7D:2CF6.0005: couldn't install mouse
[   63.000138][  T377] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71
[   63.010694][  T377] usb 6-1: USB disconnect, device number 18
[   63.024256][  T382] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[   63.144119][    T9] usb 7-1: Using ep0 maxpacket: 8
[   63.150800][    T9] usb 7-1: config index 0 descriptor too short (expected 1307, got 27)
[   63.159736][    T9] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[   63.168160][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.178636][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[   63.185388][  T382] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[   63.190237][    T9] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[   63.195900][  T382] usb 1-1: config 0 has no interface number 0
[   63.206219][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.224170][    T9] usb 7-1: Product: syz
[   63.228581][    T9] usb 7-1: Manufacturer: syz
[   63.230581][  T382] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   63.235188][    T9] usb 7-1: SerialNumber: syz
[   63.248708][  T382] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   63.250807][    T9] usb 7-1: config 0 descriptor??
[   63.260354][  T382] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[   63.277321][    T9] hub 7-1:0.0: bad descriptor, ignoring hub
[   63.287027][    T9] hub 7-1:0.0: probe with driver hub failed with error -5
[   63.302073][  T382] usb 1-1: config 0 interface 2 has no altsetting 0
[   63.314504][  T382] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[   63.318973][ T1236] netlink: 'syz.1.321': attribute type 3 has an invalid length.
[   63.324233][  T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.342902][  T382] usb 1-1: Product: syz
[   63.347776][  T382] usb 1-1: Manufacturer: syz
[   63.352962][  T382] usb 1-1: SerialNumber: syz
[   63.360280][  T382] usb 1-1: config 0 descriptor??
[   63.371168][ T1230] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   63.378972][ T1230] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   63.545165][ T1246] MTRR 1 not used
[   63.594283][  T380] usb 7-1: USB disconnect, device number 6
[   63.598382][  T382] usb 1-1: USB disconnect, device number 13
[   63.629383][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   63.654232][   T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   63.804145][   T31] usb 2-1: Using ep0 maxpacket: 32
[   63.810828][   T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   63.819222][   T31] usb 2-1: config 0 has no interface number 0
[   63.825565][   T31] usb 2-1: config 0 interface 184 has no altsetting 0
[   63.834286][   T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   63.843356][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.851875][   T31] usb 2-1: Product: syz
[   63.856161][   T31] usb 2-1: Manufacturer: syz
[   63.860867][   T31] usb 2-1: SerialNumber: syz
[   63.866860][   T31] usb 2-1: config 0 descriptor??
[   63.872970][   T31] smsc75xx v1.0.0
[   63.994597][  T380] rust_binder: 1223: undelivered transaction 20, process died
[   64.014117][  T380] rust_binder: 1223: undelivered TRANSACTION_COMPLETE
[   64.285145][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   64.307191][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[   64.318563][   T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   64.339053][   T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32
[   64.424074][   T45] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[   64.594602][   T45] usb 6-1: too many configurations: 72, using maximum allowed: 8
[   64.619371][   T45] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[   64.634023][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.645270][   T45] usb 6-1: config 0 descriptor??
[   64.854697][ T1259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.874951][ T1259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.885461][    T9] usb 6-1: USB disconnect, device number 19
[   65.284084][   T45] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   65.415617][   T36] kauditd_printk_skb: 26 callbacks suppressed
[   65.415653][   T36] audit: type=1400 audit(1786619681.594:291): avc:  denied  { getattr } for  pid=1282 comm="syz.5.340" path="pid:[4026532306]" dev="nsfs" ino=4026532306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   65.454108][   T45] usb 7-1: device descriptor read/64, error -71
[   65.694240][   T45] usb 7-1: device descriptor read/64, error -71
[   65.734051][  T382] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[   65.816968][   T36] audit: type=1400 audit(1786619681.994:292): avc:  denied  { write } for  pid=1298 comm="syz.0.346" path="socket:[14435]" dev="sockfs" ino=14435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   65.885494][  T382] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[   65.898532][  T382] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.909195][  T382] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   65.922539][  T382] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   65.931799][  T382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.940608][   T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   65.950267][  T382] usb 6-1: config 0 descriptor??
[   65.957775][  T382] usb-storage 6-1:0.0: USB Mass Storage device detected
[   65.966127][  T382] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[   66.114538][   T45] usb 7-1: device descriptor read/64, error -71
[   66.159428][  T382] usb 6-1: USB disconnect, device number 20
[   66.214213][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   66.354117][   T45] usb 7-1: device descriptor read/64, error -71
[   66.374074][    T9] usb 1-1: Using ep0 maxpacket: 16
[   66.380908][    T9] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[   66.389712][    T9] usb 1-1: config 1 has no interface number 0
[   66.395910][    T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   66.406152][    T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   66.416309][    T9] usb 1-1: config 1 interface 105 has no altsetting 0
[   66.425709][    T9] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   66.434894][    T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   66.438817][  T382] usb 2-1: USB disconnect, device number 12
[   66.443329][    T9] usb 1-1: Product: syz
[   66.454769][    T9] usb 1-1: Manufacturer: syz
[   66.459908][    T9] usb 1-1: SerialNumber: syz
[   66.470757][ T1303] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   66.474526][   T45] usb usb7-port1: attempt power cycle
[   66.483701][ T1303] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   66.613422][   T36] audit: type=1400 audit(1786619682.784:293): avc:  denied  { write } for  pid=1309 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   66.824136][   T45] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   66.845358][   T45] usb 7-1: device descriptor read/8, error -71
[   66.886878][ T1303] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   66.894393][ T1303] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   66.975427][   T45] usb 7-1: device descriptor read/8, error -71
[   66.984088][  T382] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[   67.134073][  T382] usb 6-1: Using ep0 maxpacket: 8
[   67.140617][  T382] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   67.150078][  T382] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   67.160647][  T382] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[   67.170068][  T382] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   67.180245][  T382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.224290][   T45] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   67.245499][   T45] usb 7-1: device descriptor read/8, error -71
[   67.303452][    T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   67.314770][    T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   67.326409][    T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   67.339219][    T9] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d8:cf:b1:9a:d8:1a
[   67.356795][    T9] usb 1-1: USB disconnect, device number 14
[   67.363433][    T9] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   67.392325][   T45] usb 7-1: device descriptor read/8, error -71
[   67.397990][   T36] audit: type=1400 audit(1786619683.574:294): avc:  denied  { map } for  pid=1313 comm="syz.5.350" path="socket:[13591]" dev="sockfs" ino=13591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   67.442244][    T9] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   67.463428][    T9] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   67.473901][    T9] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   67.514347][   T45] usb usb7-port1: unable to enumerate USB device
[   67.846122][   T36] audit: type=1400 audit(1786619684.024:295): avc:  denied  { setopt } for  pid=1326 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.893447][ T1331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'.
[   67.909892][ T1332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'.
[   68.077667][   T36] audit: type=1400 audit(1786619684.244:296): avc:  denied  { mounton } for  pid=1337 comm="syz.1.359" path="/58/mnt" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   68.109065][   T36] audit: type=1400 audit(1786619684.264:297): avc:  denied  { read } for  pid=1342 comm="syz.6.360" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   68.134207][   T36] audit: type=1400 audit(1786619684.264:298): avc:  denied  { open } for  pid=1342 comm="syz.6.360" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   68.194568][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   68.344144][    T9] usb 1-1: Using ep0 maxpacket: 32
[   68.351240][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.367760][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.378516][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   68.387929][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.398511][    T9] usb 1-1: config 0 descriptor??
[   68.405475][    T9] hub 1-1:0.0: USB hub found
[   68.474119][  T377] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   68.608164][    T9] hub 1-1:0.0: 1 port detected
[   68.624088][  T377] usb 2-1: Using ep0 maxpacket: 8
[   68.632364][  T377] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.643459][  T377] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[   68.653066][  T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.662257][  T377] usb 2-1: config 0 descriptor??
[   68.668246][  T377] usb 2-1: bad CDC descriptors
[   68.794737][   T36] audit: type=1400 audit(1786619684.974:299): avc:  denied  { unmount } for  pid=990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   68.857782][  T424] bridge_slave_1: left allmulticast mode
[   68.864422][  T424] bridge_slave_1: left promiscuous mode
[   68.870678][  T424] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.879864][  T424] bridge_slave_0: left allmulticast mode
[   68.893053][   T45] usb 2-1: USB disconnect, device number 13
[   68.902285][  T424] bridge_slave_0: left promiscuous mode
[   68.912870][  T424] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.061406][  T424] veth1_macvtap: left promiscuous mode
[   69.067401][  T424] veth0_vlan: left promiscuous mode
[   69.189601][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.197397][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.204806][ T1364] bridge_slave_0: entered allmulticast mode
[   69.211257][ T1364] bridge_slave_0: entered promiscuous mode
[   69.218982][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.226664][    T9] hub 1-1:0.0: activate --> -90
[   69.226719][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.239229][ T1364] bridge_slave_1: entered allmulticast mode
[   69.245814][ T1364] bridge_slave_1: entered promiscuous mode
[   69.279837][   T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   69.328187][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.335505][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.343021][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.350244][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.385531][  T458] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.393066][  T458] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.407188][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.414445][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.425703][  T458] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.433096][  T458] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.434268][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.454296][   T45] usb 2-1: Using ep0 maxpacket: 32
[   69.463638][   T45] usb 2-1: too many configurations: 114, using maximum allowed: 8
[   69.471890][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.482064][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[   69.504386][   T45] usb 2-1: can't read configurations, error -61
[   69.526496][ T1364] veth0_vlan: entered promiscuous mode
[   69.546169][ T1364] veth1_macvtap: entered promiscuous mode
[   69.575297][   T36] audit: type=1400 audit(1786619685.754:300): avc:  denied  { mount } for  pid=1364 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.644104][   T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   69.691757][   T31] usb 6-1: USB disconnect, device number 21
[   69.713226][  T382] usb 1-1: USB disconnect, device number 15
[   69.716500][ T1371] netlink: 'syz.5.369': attribute type 4 has an invalid length.
[   69.728241][ T1371] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.369'.
[   69.804263][   T45] usb 2-1: Using ep0 maxpacket: 32
[   69.809970][   T45] usb 2-1: too many configurations: 114, using maximum allowed: 8
[   69.819879][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[   69.828035][   T45] usb 2-1: can't read configurations, error -61
[   69.834892][   T45] usb usb2-port1: attempt power cycle
[   70.174316][   T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   70.194669][   T45] usb 2-1: Using ep0 maxpacket: 32
[   70.200427][   T45] usb 2-1: too many configurations: 114, using maximum allowed: 8
[   70.213941][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[   70.221934][   T45] usb 2-1: can't read configurations, error -61
[   70.354266][   T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   70.384948][   T45] usb 2-1: Using ep0 maxpacket: 32
[   70.390649][   T45] usb 2-1: too many configurations: 114, using maximum allowed: 8
[   70.400145][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[   70.408523][   T45] usb 2-1: can't read configurations, error -61
[   70.415250][   T45] usb usb2-port1: unable to enumerate USB device
[   70.544120][  T382] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   70.564346][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   70.704218][  T382] usb 8-1: Using ep0 maxpacket: 8
[   70.715025][  T382] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.726807][    T9] usb 1-1: Using ep0 maxpacket: 16
[   70.726807][  T382] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.726835][  T382] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.757033][  T382] usb 8-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00
[   70.764746][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.767007][  T382] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.777752][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.795941][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   70.799728][  T382] usb 8-1: config 0 descriptor??
[   70.809119][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   70.823627][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.833220][    T9] usb 1-1: config 0 descriptor??
[   71.222046][  T382] input: HID 046d:c20a as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:046D:C20A.0006/input/input11
[   71.238417][  T382] logitech 0003:046D:C20A.0006: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c20a] on usb-dummy_hcd.7-1/input0
[   71.250912][  T382] logitech 0003:046D:C20A.0006: missing HID_OUTPUT_REPORT 0
[   71.255688][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   71.267347][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   71.275086][    T9] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max
[   71.285199][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   71.300409][    T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   71.310712][    T9] microsoft 0003:045E:07DA.0007: unsupported Resolution Multiplier 0
[   71.325284][    T9] microsoft 0003:045E:07DA.0007: implement() called with n (56) > 32! (kworker/0:0)
[   71.432888][   T36] audit: type=1400 audit(1786619687.604:301): avc:  denied  { write } for  pid=1385 comm="syz.7.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.455031][    T9] microsoft 0003:045E:07DA.0007: unsupported Resolution Multiplier 0
[   71.464855][    T9] microsoft 0003:045E:07DA.0007: No inputs registered, leaving
[   71.473419][    T9] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   71.473654][   T45] usb 8-1: USB disconnect, device number 5
[   71.487060][    T9] microsoft 0003:045E:07DA.0007: no inputs found
[   71.501619][    T9] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[   71.624275][  T382] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[   71.667399][    T9] usb 1-1: USB disconnect, device number 16
[   71.775481][  T382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.786764][  T382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.797011][  T382] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   71.806161][  T382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.815351][  T382] usb 6-1: config 0 descriptor??
[   72.097605][ T1414] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[   72.191593][ T1425] netlink: 'syz.0.389': attribute type 14 has an invalid length.
[   72.414164][    T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[   72.424530][  T382] usbhid 6-1:0.0: can't add hid device: -71
[   72.430811][  T382] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   72.440309][  T382] usb 6-1: USB disconnect, device number 22
[   72.565212][    T9] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[   72.575829][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   72.586837][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   72.596522][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.604723][    T9] usb 2-1: Product: syz
[   72.608895][    T9] usb 2-1: Manufacturer: syz
[   72.613565][    T9] usb 2-1: SerialNumber: syz
[   72.721612][ T1429] capability: warning: `syz.0.391' uses deprecated v2 capabilities in a way that may be insecure
[   72.726056][ T1428] netlink: 80 bytes leftover after parsing attributes in process `syz.7.390'.
[   72.744202][ T1430] netlink: 80 bytes leftover after parsing attributes in process `syz.7.390'.
[   72.755252][   T36] audit: type=1400 audit(1786619688.934:302): avc:  denied  { create } for  pid=1426 comm="syz.7.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   72.967661][ T1445] netlink: 'syz.5.397': attribute type 3 has an invalid length.
[   72.978936][ T1446] netlink: 'syz.5.397': attribute type 3 has an invalid length.
[   72.994323][  T377] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[   73.019937][   T36] audit: type=1400 audit(1786619689.194:303): avc:  denied  { read } for  pid=1449 comm="syz.5.398" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   73.043456][   T36] audit: type=1400 audit(1786619689.194:304): avc:  denied  { open } for  pid=1449 comm="syz.5.398" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   73.044147][  T380] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   73.103710][   T36] audit: type=1400 audit(1786619689.274:305): avc:  denied  { map } for  pid=1449 comm="syz.5.398" path="socket:[14049]" dev="sockfs" ino=14049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   73.128632][   T36] audit: type=1400 audit(1786619689.284:306): avc:  denied  { ioctl } for  pid=1449 comm="syz.5.398" path="socket:[14049]" dev="sockfs" ino=14049 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   73.165097][  T377] usb 8-1: unable to get BOS descriptor or descriptor too short
[   73.174819][  T377] usb 8-1: not running at top speed; connect to a high speed hub
[   73.183839][  T377] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[   73.203011][  T377] usb 8-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40
[   73.212521][  T380] usb 1-1: device descriptor read/64, error -71
[   73.219299][  T377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.227705][  T377] usb 8-1: Product: syz
[   73.232076][  T377] usb 8-1: Manufacturer: syz
[   73.236830][  T377] usb 8-1: SerialNumber: syz
[   73.351130][    T9] usb 2-1: 0:2 : does not exist
[   73.364168][    T9] usb 2-1: unit 9 not found!
[   73.376874][    T9] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4)
[   73.389644][    T9] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4)
[   73.401881][    T9] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4)
[   73.413777][    T9] usb 2-1: 4:0: cannot get min/max values for control 7 (id 4)
[   73.424336][    T9] usb 2-1: 4:0: cannot get min/max values for control 8 (id 4)
[   73.434754][    T9] usb 2-1: 4:0: cannot get min/max values for control 9 (id 4)
[   73.445947][    T9] usb 2-1: 4:0: cannot get min/max values for control 10 (id 4)
[   73.461513][  T377] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   73.468399][  T380] usb 1-1: device descriptor read/64, error -71
[   73.475428][    T9] usb 2-1: USB disconnect, device number 18
[   73.482696][  T377] usb 8-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[   73.491298][  T377] usb 8-1: 2:1: All rates were zero
[   73.510941][  T377] usb 8-1: USB disconnect, device number 6
[   73.529412][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   73.714415][  T380] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   73.829687][ T1460] netlink: 'syz.5.402': attribute type 10 has an invalid length.
[   73.837995][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   73.861105][  T380] usb 1-1: device descriptor read/64, error -71
[   73.991146][   T36] audit: type=1400 audit(1786619690.164:307): avc:  denied  { setopt } for  pid=1465 comm="syz.7.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   74.020449][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.031731][   T36] audit: type=1400 audit(1786619690.184:308): avc:  denied  { write } for  pid=1465 comm="syz.7.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   74.051650][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   74.062045][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   74.075797][   T36] audit: type=1400 audit(1786619690.184:309): avc:  denied  { read } for  pid=1465 comm="syz.7.405" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   74.087594][ T1471] netlink: 'syz.7.406': attribute type 16 has an invalid length.
[   74.098459][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[   74.105626][ T1471] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.406'.
[   74.114449][  T380] usb 1-1: device descriptor read/64, error -71
[   74.130032][  T377] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[   74.138291][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.146656][    T9] usb 2-1: Product: syz
[   74.155431][    T9] usb 2-1: Manufacturer: syz
[   74.160130][    T9] usb 2-1: SerialNumber: syz
[   74.168521][    T9] usb 2-1: Found UVC 1.00 device syz (046d:0821)
[   74.174979][    T9] usb 2-1: No valid video chain found.
[   74.254305][  T380] usb usb1-port1: attempt power cycle
[   74.304195][  T377] usb 6-1: Using ep0 maxpacket: 8
[   74.311728][  T377] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   74.323705][  T377] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   74.335314][  T377] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[   74.346773][  T377] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   74.356053][  T377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.364186][  T377] usb 6-1: Product: ц
[   74.368769][  T377] usb 6-1: Manufacturer: 涍嗋꺢ꍳ餧흯쀝ⷘ쌚⦢㌅珄즷쿁镎歍饧ꤠ՜⫻鎝컘耠×Ӄ鉖鋐묾ꮹ㔬坚␒错隒А阎操容ꃎঊ꟟✼취捱⒒罷Ϋ鴍蟢﶑첆ʝ哑鉕榷굒޻ꎗ汷笈活࿪请쇭샰㟭湭ᔤ夡Έ䗐쨡鹕ꦊ⁣꓉胞橪뀰Ꟁ염ᾕ䯔ﱋ㡠⓮뜎ᚻ蜺纉㽠ﱿ䚋᷒莙췕鰤뉌
[   74.402312][  T377] usb 6-1: SerialNumber: שּׂꝶ༃耸䅩昽ㆷ࿫㭏柼ᤶ﷼뮏靖饔酀䠣斑麺㨅⪓䷃￴臅ᎌꅥ款톸곦햏ꭴਟ둲溴ᯉⓐ疜ﶼ襙靍뙓୅谛鴱毕ﯡ矨轕毀鄨룯淞㔞ᇱ㗥ৣ푳뫤ꏼ䎂䡊ꌈ㞈屳踃꡽莍찉䖮㕐᎞⿽删惰塓ධဨ킆到콘椅驴폕숪ꏼ霺蒻ሪᝋ挙䋨윖䝲ጲꩣ龾句喝뭶頲䎟얼齙ൣ
[   74.604174][  T380] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   74.625308][  T380] usb 1-1: device descriptor read/8, error -71
[   74.644605][ T1460] Invalid logical block size (-1)
[   74.655690][  T377] cdc_ncm 6-1:1.0: bind() failure
[   74.661773][  T377] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[   74.669409][  T377] cdc_ncm 6-1:1.1: bind() failure
[   74.677597][  T377] usb 6-1: USB disconnect, device number 23
[   74.755891][  T380] usb 1-1: device descriptor read/8, error -71
[   74.895396][  T377] usb 2-1: USB disconnect, device number 19
[   74.994553][  T380] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   75.015450][  T380] usb 1-1: device descriptor read/8, error -71
[   75.066282][   T36] audit: type=1400 audit(1786619691.244:310): avc:  denied  { write } for  pid=1483 comm="syz.7.410" path="socket:[15319]" dev="sockfs" ino=15319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   75.145351][  T380] usb 1-1: device descriptor read/8, error -71
[   75.214578][ T1489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.412'.
[   75.234641][  T377] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   75.256212][  T380] usb usb1-port1: unable to enumerate USB device
[   75.384173][  T377] usb 2-1: Using ep0 maxpacket: 16
[   75.391068][  T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.403433][  T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.413280][  T377] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   75.426585][  T377] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   75.435672][  T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.444556][  T377] usb 2-1: config 0 descriptor??
[   75.584132][   T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[   75.653663][  T377] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[   75.662935][  T377] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   75.674730][  T377] microsoft 0003:045E:07DA.0008: no inputs found
[   75.681082][  T377] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[   75.734157][   T10] usb 6-1: Using ep0 maxpacket: 32
[   75.741748][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.752063][   T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8
[   75.761878][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9
[   75.773003][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   75.789046][   T10] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[   75.798273][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.806397][   T10] usb 6-1: Product: syz
[   75.810764][   T10] usb 6-1: Manufacturer: syz
[   75.815457][   T10] usb 6-1: SerialNumber: syz
[   75.822966][ T1502] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   75.846538][ T1505] netlink: 68 bytes leftover after parsing attributes in process `syz.0.418'.
[   75.856792][  T784] usb 2-1: USB disconnect, device number 20
[   75.859588][ T1507] netlink: 'syz.7.419': attribute type 1 has an invalid length.
[   75.870786][ T1507] netlink: 'syz.7.419': attribute type 2 has an invalid length.
[   75.879401][ T1507] netlink: 48 bytes leftover after parsing attributes in process `syz.7.419'.
[   75.896282][ T1509] SELinux:  policydb string  does not match my string SE Linux
[   75.914104][ T1509] SELinux: failed to load policy
[   76.181918][   T10] usb 6-1: MIDIStreaming interface descriptor not found
[   76.205755][   T10] usb 6-1: USB disconnect, device number 24
[   76.254101][  T377] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[   76.279939][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   76.405705][  T377] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   76.419770][  T377] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   76.441029][  T377] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   76.460489][  T377] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   76.483374][  T377] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   76.492856][  T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.500992][  T377] usb 1-1: Product: syz
[   76.515037][  T377] usb 1-1: Manufacturer: syz
[   76.519918][  T377] usb 1-1: SerialNumber: syz
[   76.527806][ T1515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   76.714149][  T784] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   76.744181][ T1515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   76.751382][ T1515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   76.770707][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   76.770726][   T36] audit: type=1400 audit(1786619692.944:317): avc:  denied  { mounton } for  pid=1535 comm="syz.5.429" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.804699][   T36] audit: type=1400 audit(1786619692.984:318): avc:  denied  { ioctl } for  pid=1535 comm="syz.5.429" path="socket:[15685]" dev="sockfs" ino=15685 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   76.852875][   T36] audit: type=1400 audit(1786619692.984:319): avc:  denied  { ioctl } for  pid=1535 comm="syz.5.429" path="socket:[15687]" dev="sockfs" ino=15687 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.904075][  T784] usb 2-1: Using ep0 maxpacket: 16
[   76.927316][  T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.993112][  T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   77.011169][  T784] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   77.024843][  T784] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   77.038575][  T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.058761][  T784] usb 2-1: config 0 descriptor??
[   77.074155][   T36] audit: type=1400 audit(1786619693.244:320): avc:  denied  { map } for  pid=1545 comm="syz.7.433" path="/dev/sda1" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   77.111357][ T1548] tipc: Started in network mode
[   77.116578][ T1548] tipc: Node identity 726016d01b63, cluster identity 4711
[   77.138782][ T1548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.171893][ T1548] syzkaller0: entered promiscuous mode
[   77.177665][ T1548] syzkaller0: entered allmulticast mode
[   77.184129][ T1548] tipc: Resetting bearer <eth:syzkaller0>
[   77.212611][ T1548] tipc: Resetting bearer <eth:syzkaller0>
[   77.236490][ T1548] tipc: Disabling bearer <eth:syzkaller0>
[   77.384125][ T1515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   77.393519][ T1515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   77.402192][ T1553] fuse: Bad value for 'rootmode'
[   77.417330][ T1553] fuse: Bad value for 'user_id'
[   77.422300][ T1553] fuse: Bad value for 'user_id'
[   77.496335][  T784] nintendo 0003:057E:2019.0009: item fetching failed at offset 4/5
[   77.505713][  T784] nintendo 0003:057E:2019.0009: HID parse failed
[   77.512544][  T784] nintendo 0003:057E:2019.0009: probe - fail = -22
[   77.520497][  T784] nintendo 0003:057E:2019.0009: probe with driver nintendo failed with error -22
[   77.544232][   T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[   77.655577][  T377] cdc_ncm 1-1:1.0: failed to get mac address
[   77.661984][  T377] cdc_ncm 1-1:1.0: bind() failure
[   77.669910][  T377] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[   77.678815][  T377] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[   77.689283][  T377] usb 1-1: USB disconnect, device number 21
[   77.695419][   T10] usb 6-1: Using ep0 maxpacket: 32
[   77.707007][  T380] usb 2-1: USB disconnect, device number 21
[   77.714050][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[   77.724529][   T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   77.733508][   T10] usb 6-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config
[   77.743923][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.754690][   T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[   77.763827][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.774978][   T10] usb 6-1: Product: syz
[   77.779462][   T10] usb 6-1: Manufacturer: syz
[   77.784598][   T10] usb 6-1: SerialNumber: syz
[   77.996117][   T10] usb 6-1: 0:1 : does not exist
[   78.002394][   T10] usb 6-1: 0:2 : does not exist
[   78.017379][   T10] usb 6-1: USB disconnect, device number 25
[   78.026855][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   78.230337][ T1560] syz.7.438: attempt to access beyond end of device
[   78.230337][ T1560] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[   78.252955][ T1560] exFAT-fs (loop7): unable to read boot sector
[   78.259527][ T1560] exFAT-fs (loop7): failed to read boot sector
[   78.274264][ T1560] exFAT-fs (loop7): failed to recognize exfat type
[   78.391270][   T36] audit: type=1400 audit(1786619694.564:321): avc:  denied  { accept } for  pid=1569 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   78.424081][   T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   78.544146][  T784] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   78.554139][   T10] usb 1-1: device descriptor read/64, error -71
[   78.714204][  T784] usb 8-1: Using ep0 maxpacket: 8
[   78.722313][  T784] usb 8-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[   78.731454][  T784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.740231][  T784] usb 8-1: Product: syz
[   78.744179][  T380] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   78.745671][  T784] usb 8-1: Manufacturer: syz
[   78.757503][  T784] usb 8-1: SerialNumber: syz
[   78.804190][   T10] usb 1-1: device descriptor read/64, error -71
[   78.804196][   T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[   78.894102][  T380] usb 2-1: Using ep0 maxpacket: 16
[   78.900727][  T380] usb 2-1: config 186 has an invalid interface number: 84 but max is 4
[   78.909089][  T380] usb 2-1: config 186 has 1 interface, different from the descriptor's value: 5
[   78.918538][  T380] usb 2-1: config 186 has no interface number 0
[   78.926679][  T380] usb 2-1: config 186 interface 84 has no altsetting 0
[   78.934166][   T31] usb 6-1: device descriptor read/64, error -71
[   78.935808][  T380] usb 2-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=91.33
[   78.950844][  T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.959383][  T380] usb 2-1: Product: syz
[   78.964101][  T380] usb 2-1: Manufacturer: syz
[   78.969064][  T380] usb 2-1: SerialNumber: syz
[   78.970740][  T784] usb 8-1: failed waiting for Axe-Fx III to boot: -71
[   78.983158][  T784] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71
[   78.994396][  T784] usb 8-1: USB disconnect, device number 7
[   79.054140][   T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   79.174149][   T31] usb 6-1: device descriptor read/64, error -71
[   79.179246][  T380] usb 2-1: Found UVC 0.00 device syz (18ec:3188)
[   79.187601][   T10] usb 1-1: device descriptor read/64, error -71
[   79.194254][  T380] usb 2-1: No valid video chain found.
[   79.201722][  T380] usb 2-1: USB disconnect, device number 22
[   79.414093][   T31] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[   79.424139][   T10] usb 1-1: device descriptor read/64, error -71
[   79.490101][   T36] audit: type=1400 audit(1786619695.664:322): avc:  denied  { accept } for  pid=1576 comm="syz.7.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   79.496309][ T1577] netlink: 'syz.7.445': attribute type 8 has an invalid length.
[   79.517605][ T1577] netlink: 48 bytes leftover after parsing attributes in process `syz.7.445'.
[   79.534527][   T10] usb usb1-port1: attempt power cycle
[   79.554236][   T31] usb 6-1: device descriptor read/64, error -71
[   79.794184][   T31] usb 6-1: device descriptor read/64, error -71
[   79.814892][   T36] audit: type=1400 audit(1786619695.994:323): avc:  denied  { create } for  pid=1584 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   79.904334][   T31] usb usb6-port1: attempt power cycle
[   80.264078][   T31] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[   80.285490][   T31] usb 6-1: device descriptor read/8, error -71
[   80.415679][   T31] usb 6-1: device descriptor read/8, error -71
[   80.677991][   T31] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[   80.705507][   T31] usb 6-1: device descriptor read/8, error -71
[   80.806186][   T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   80.836190][   T10] usb 1-1: device descriptor read/8, error -71
[   80.848743][   T31] usb 6-1: device descriptor read/8, error -71
[   80.966765][   T31] usb usb6-port1: unable to enumerate USB device
[   80.975548][   T10] usb 1-1: device descriptor read/8, error -71
[   81.214110][  T377] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[   81.221771][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   81.254150][   T31] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[   81.385318][  T377] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.395780][  T377] usb 2-1: config 0 interface 0 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   81.408953][  T377] usb 2-1: config 0 interface 0 has no altsetting 0
[   81.415734][  T377] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00
[   81.424906][  T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.433708][  T377] usb 2-1: config 0 descriptor??
[   81.437464][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.440486][  T377] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   81.452570][   T31] usb 8-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[   81.467638][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.479380][   T31] usb 8-1: Product: syz
[   81.484112][   T31] usb 8-1: Manufacturer: syz
[   81.489001][   T31] usb 8-1: SerialNumber: syz
[   81.497792][   T31] usb 8-1: config 0 descriptor??
[   81.504779][   T31] plusb 8-1:0.0: probe with driver plusb failed with error -22
[   81.618030][ T1621] pim6reg1: entered promiscuous mode
[   81.623737][ T1621] pim6reg1: entered allmulticast mode
[   81.659030][   T36] audit: type=1400 audit(1786619697.834:324): avc:  denied  { setopt } for  pid=1596 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   81.660811][ T1597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'.
[   81.690576][   T10] usb 1-1: device not accepting address 25, error -71
[   81.698041][   T10] usb usb1-port1: unable to enumerate USB device
[   81.724088][ T1599] can0: slcan on ttyS3.
[   81.766205][ T1597] wireguard: wg2: Could not create IPv4 socket
[   81.794257][  T377] usb 2-1: USB disconnect, device number 23
[   82.004138][   T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   82.164095][   T10] usb 1-1: Using ep0 maxpacket: 32
[   82.172282][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   82.181605][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.192677][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.204051][   T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40
[   82.213619][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.222582][   T10] usb 1-1: Product: syz
[   82.227499][   T10] usb 1-1: Manufacturer: syz
[   82.232321][   T10] usb 1-1: SerialNumber: syz
[   82.245845][   T10] usb 1-1: 0:1 : does not exist
[   82.259512][   T10] usb 1-1: 0:2 : does not exist
[   82.286971][ T1642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.308536][ T1642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.321828][ T1642] netlink: 20 bytes leftover after parsing attributes in process `syz.7.461'.
[   82.418013][   T45] usb 8-1: USB disconnect, device number 8
[   82.458383][   T10] usb 1-1: 3:0: failed to get current value for ch 0 (-22)
[   82.476820][   T10] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3)
[   82.490558][   T10] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3)
[   82.505253][ T1625] can0 (unregistered): slcan off ttyS3.
[   82.508658][   T10] usb 1-1: USB disconnect, device number 26
[   82.528684][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   82.968676][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   82.981267][   T36] audit: type=1400 audit(1786619699.154:325): avc:  denied  { lock } for  pid=1680 comm="syz.0.465" path="socket:[16110]" dev="sockfs" ino=16110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   83.018681][   T36] audit: type=1400 audit(1786619699.204:326): avc:  denied  { watch_reads } for  pid=1677 comm="syz.1.464" path="/83" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   83.294115][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   83.384161][  T380] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   83.445283][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.456744][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.466719][   T10] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   83.476021][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.485026][   T10] usb 1-1: config 0 descriptor??
[   83.514123][  T380] usb 2-1: device descriptor read/64, error -71
[   83.634272][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   83.641334][ T1623] Bluetooth: hci0: command 0x1003 tx timeout
[   83.764150][  T380] usb 2-1: device descriptor read/64, error -71
[   83.778811][   T36] audit: type=1400 audit(1786619699.954:327): avc:  denied  { connect } for  pid=1697 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   83.910769][   T36] audit: type=1400 audit(1786619700.084:328): avc:  denied  { read } for  pid=1682 comm="syz.0.466" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   84.004213][  T380] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   84.012378][   T10] hid (null): bogus close delimiter
[   84.020341][   T10] hid-led 0003:27B8:01ED.000A: bogus close delimiter
[   84.027883][   T10] hid-led 0003:27B8:01ED.000A: item 0 0 2 10 parsing failed
[   84.037056][   T10] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -22
[   84.144103][  T380] usb 2-1: device descriptor read/64, error -71
[   84.194233][  T377] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[   84.265459][   T10] usb 1-1: USB disconnect, device number 27
[   84.345317][  T377] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.356056][  T377] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   84.367397][  T377] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[   84.376663][  T377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.384763][  T380] usb 2-1: device descriptor read/64, error -71
[   84.391405][  T377] usb 6-1: Product: syz
[   84.395938][  T377] usb 6-1: Manufacturer: syz
[   84.400617][  T377] usb 6-1: SerialNumber: syz
[   84.504275][  T380] usb usb2-port1: attempt power cycle
[   84.608633][  T377] usb 6-1: 0:1 : does not exist
[   84.615037][  T377] usb 6-1: unit 6 not found!
[   84.619705][  T377] usb 6-1: unit 2 not found!
[   84.627975][  T377] usb 6-1: USB disconnect, device number 30
[   84.636215][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   84.844142][  T380] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   84.865430][  T380] usb 2-1: device descriptor read/8, error -71
[   84.995830][  T380] usb 2-1: device descriptor read/8, error -71
[   85.024133][   T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   85.146349][ T1711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.476'.
[   85.154425][   T10] usb 1-1: device descriptor read/64, error -71
[   85.234074][  T380] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   85.270625][  T380] usb 2-1: device descriptor read/8, error -71
[   85.296554][   T36] audit: type=1400 audit(1786619701.474:329): avc:  denied  { accept } for  pid=1718 comm="syz.5.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   85.343611][   T36] audit: type=1400 audit(1786619701.514:330): avc:  denied  { watch } for  pid=1747 comm="syz.5.480" path="/93/debug/kvm" dev="debugfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   85.394237][   T10] usb 1-1: device descriptor read/64, error -71
[   85.405922][  T380] usb 2-1: device descriptor read/8, error -71
[   85.514345][  T380] usb usb2-port1: unable to enumerate USB device
[   85.634208][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   85.734097][   T45] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[   85.764111][   T10] usb 1-1: device descriptor read/64, error -71
[   85.884161][   T45] usb 6-1: Using ep0 maxpacket: 8
[   85.890956][   T45] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.902748][   T45] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   85.918075][   T45] usb 6-1: config 0 interface 0 has no altsetting 0
[   85.925082][   T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[   85.934161][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.942900][   T45] usb 6-1: config 0 descriptor??
[   86.014121][   T10] usb 1-1: device descriptor read/64, error -71
[   86.124279][   T10] usb usb1-port1: attempt power cycle
[   86.351711][   T45] usb 6-1: string descriptor 0 read error: -71
[   86.360591][   T45] usbhid 6-1:0.0: can't add hid device: -71
[   86.367052][   T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   86.376583][   T45] usb 6-1: USB disconnect, device number 31
[   86.434194][  T784] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   86.464134][   T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   86.485610][   T10] usb 1-1: device descriptor read/8, error -71
[   86.574153][  T381] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   86.585435][  T784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.597318][  T784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.607132][  T784] usb 8-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00
[   86.616421][  T784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.625539][  T784] usb 8-1: config 0 descriptor??
[   86.625601][   T10] usb 1-1: device descriptor read/8, error -71
[   86.704143][  T381] usb 2-1: device descriptor read/64, error -71
[   86.874150][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   86.897044][   T10] usb 1-1: device descriptor read/8, error -71
[   86.954102][  T381] usb 2-1: device descriptor read/64, error -71
[   87.035359][   T10] usb 1-1: device descriptor read/8, error -71
[   87.042456][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.051652][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.054381][  T784] apple 0003:05AC:024F.000B: invalid report_size -68386629
[   87.060346][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.069671][  T784] apple 0003:05AC:024F.000B: item 0 4 1 7 parsing failed
[   87.078201][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.084061][  T784] apple 0003:05AC:024F.000B: parse failed
[   87.091726][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.097341][  T784] apple 0003:05AC:024F.000B: probe with driver apple failed with error -22
[   87.105145][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.121846][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.130993][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.139696][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.148401][  T380] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[   87.154412][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.156505][   T10] usb usb1-port1: unable to enumerate USB device
[   87.204127][  T381] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   87.314179][  T380] usb 6-1: Using ep0 maxpacket: 32
[   87.320753][  T380] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[   87.329236][  T380] usb 6-1: config 0 has no interface number 0
[   87.335458][  T381] usb 2-1: device descriptor read/64, error -71
[   87.341827][  T380] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[   87.352970][  T380] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   87.364471][  T380] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[   87.373553][  T380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.381863][  T380] usb 6-1: Product: syz
[   87.386250][  T380] usb 6-1: Manufacturer: syz
[   87.390885][  T380] usb 6-1: SerialNumber: syz
[   87.396533][  T380] usb 6-1: config 0 descriptor??
[   87.574126][  T381] usb 2-1: device descriptor read/64, error -71
[   87.609768][  T380] usb 6-1: USB disconnect, device number 32
[   87.684273][  T381] usb usb2-port1: attempt power cycle
[   88.024135][  T381] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   88.045292][  T381] usb 2-1: device descriptor read/8, error -71
[   88.175714][  T381] usb 2-1: device descriptor read/8, error -71
[   88.384137][  T784] usb 6-1: new low-speed USB device number 33 using dummy_hcd
[   88.414115][  T381] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   88.435378][  T381] usb 2-1: device descriptor read/8, error -71
[   88.537327][  T784] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.547790][  T784] usb 6-1: config 0 interface 0 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   88.561238][  T784] usb 6-1: config 0 interface 0 has no altsetting 0
[   88.568335][  T784] usb 6-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00
[   88.575402][  T381] usb 2-1: device descriptor read/8, error -71
[   88.577536][  T784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.593543][  T784] usb 6-1: config 0 descriptor??
[   88.602166][  T784] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[   88.694402][  T381] usb usb2-port1: unable to enumerate USB device
[   88.807568][ T1785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'.
[   88.824731][ T1785] wireguard: wg2: Could not create IPv4 socket
[   88.832079][  T381] usb 6-1: USB disconnect, device number 33
[   89.114098][  T380] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   89.199930][  T784] usb 8-1: USB disconnect, device number 9
[   89.246183][ T1792] /dev/nullb0: Can't lookup blockdev
[   89.265340][  T380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   89.275753][  T380] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   89.288184][  T380] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   89.297961][  T380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.307902][  T380] usb 1-1: Product: syz
[   89.312091][  T380] usb 1-1: Manufacturer: syz
[   89.324118][  T380] usb 1-1: SerialNumber: syz
[   89.401194][ T1800] netlink: 9 bytes leftover after parsing attributes in process `syz.7.495'.
[   89.419482][ T1800] gretap0: entered promiscuous mode
[   89.429507][ T1796] netlink: 5 bytes leftover after parsing attributes in process `syz.7.495'.
[   89.440170][ T1796] 0��{X��: renamed from gretap0
[   89.452721][ T1796] 0��{X��: left promiscuous mode
[   89.461606][ T1796] 0��{X��: entered allmulticast mode
[   89.468866][ T1796] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   89.539088][  T380] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   89.606814][ T1818] mmap: syz.7.500 (1818) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   89.620531][ T1818] netlink: 28 bytes leftover after parsing attributes in process `syz.7.500'.
[   89.635910][  T381] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[   89.649161][   T36] audit: type=1400 audit(1786619705.824:331): avc:  denied  { create } for  pid=1816 comm="syz.7.500" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   89.674021][   T36] audit: type=1400 audit(1786619705.824:332): avc:  denied  { link } for  pid=1816 comm="syz.7.500" name="#9" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   89.697671][   T36] audit: type=1400 audit(1786619705.824:333): avc:  denied  { rename } for  pid=1816 comm="syz.7.500" name="#a" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   89.746915][  T426] bridge_slave_1: left allmulticast mode
[   89.752867][  T426] bridge_slave_1: left promiscuous mode
[   89.774167][  T426] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.795062][  T426] bridge_slave_0: left allmulticast mode
[   89.800764][  T426] bridge_slave_0: left promiscuous mode
[   89.809599][  T380] usb 1-1: USB disconnect, device number 32
[   89.821889][  T426] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.823601][  T381] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   89.842547][  T380] usblp0: removed
[   89.854050][  T381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.869044][  T381] usb 6-1: Product: syz
[   89.873668][  T381] usb 6-1: SerialNumber: syz
[   89.979563][ T1837] wireguard: wg2: Could not create IPv4 socket
[   89.988290][   T36] audit: type=1400 audit(1786619706.164:334): avc:  denied  { unmount } for  pid=1050 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   90.016073][  T426] veth1_macvtap: left promiscuous mode
[   90.029352][  T426] veth0_vlan: left promiscuous mode
[   90.091062][  T381] usb 6-1: MIDIStreaming interface descriptor not found
[   90.108941][  T381] usb 6-1: USB disconnect, device number 34
[   90.120750][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   90.147311][   T36] audit: type=1400 audit(1786619706.324:335): avc:  denied  { sqpoll } for  pid=1838 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   90.196280][ T1827] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.204150][ T1827] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.211679][ T1827] bridge_slave_0: entered allmulticast mode
[   90.218601][ T1827] bridge_slave_0: entered promiscuous mode
[   90.227099][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.234966][ T1827] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.242688][ T1827] bridge_slave_1: entered allmulticast mode
[   90.249917][ T1827] bridge_slave_1: entered promiscuous mode
[   90.338869][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.346411][ T1827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.353943][ T1827] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.361076][ T1827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.405218][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.416967][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.429318][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.436480][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.448247][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.455567][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.493106][ T1827] veth0_vlan: entered promiscuous mode
[   90.508045][ T1827] veth1_macvtap: entered promiscuous mode
[   90.556939][ T1854] netlink: 9 bytes leftover after parsing attributes in process `syz.8.499'.
[   90.567296][ T1854] gretap0: entered promiscuous mode
[   90.654038][   T36] audit: type=1400 audit(1786619706.824:336): avc:  denied  { create } for  pid=1861 comm="syz.5.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   90.654075][ T1862] netlink: 'syz.5.512': attribute type 12 has an invalid length.
[   90.684212][   T36] audit: type=1400 audit(1786619706.824:337): avc:  denied  { bind } for  pid=1861 comm="syz.5.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   90.708586][   T36] audit: type=1400 audit(1786619706.864:338): avc:  denied  { read write } for  pid=1861 comm="syz.5.512" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[   90.733501][   T36] audit: type=1400 audit(1786619706.864:339): avc:  denied  { open } for  pid=1861 comm="syz.5.512" path="/101/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[   90.763501][   T36] audit: type=1400 audit(1786619706.864:340): avc:  denied  { create } for  pid=1861 comm="syz.5.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   91.044231][  T784] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   91.085538][   T45] rust_binder: 45:45 release transaction 23 in, still active
[   91.164089][  T382] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   91.174180][  T380] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   91.195383][  T784] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.208744][  T784] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.219797][  T784] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   91.229322][  T784] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.239277][  T784] usb 9-1: Product: syz
[   91.243473][  T784] usb 9-1: Manufacturer: syz
[   91.248584][  T784] usb 9-1: SerialNumber: syz
[   91.287499][ T1890] netlink: 24 bytes leftover after parsing attributes in process `syz.5.523'.
[   91.324222][  T382] usb 8-1: Using ep0 maxpacket: 16
[   91.330850][  T382] usb 8-1: config 1 has an invalid interface number: 105 but max is 0
[   91.334149][  T380] usb 1-1: Using ep0 maxpacket: 32
[   91.339426][  T382] usb 8-1: config 1 has no interface number 0
[   91.346517][  T380] usb 1-1: unable to get BOS descriptor or descriptor too short
[   91.351250][  T382] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   91.359782][  T380] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[   91.368927][  T382] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   91.379413][  T380] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12336, setting to 64
[   91.389636][  T382] usb 8-1: config 1 interface 105 has no altsetting 0
[   91.403188][  T380] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[   91.410825][  T382] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   91.416865][  T380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.425762][  T382] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   91.433787][  T380] usb 1-1: Product: syz
[   91.441884][  T382] usb 8-1: Product: syz
[   91.446150][  T380] usb 1-1: Manufacturer: syz
[   91.450202][  T382] usb 8-1: Manufacturer: syz
[   91.460539][  T380] usb 1-1: SerialNumber: syz
[   91.462792][  T382] usb 8-1: SerialNumber: syz
[   91.468080][ T1890] netlink: 24 bytes leftover after parsing attributes in process `syz.5.523'.
[   91.472063][  T784] usb 9-1: cannot find UAC_HEADER
[   91.489706][  T784] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[   91.504184][ T1878] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[   91.513567][ T1878] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[   91.527455][  T784] usb 9-1: USB disconnect, device number 4
[   91.538745][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   91.564468][   T31] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[   91.736413][ T1878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.519'.
[   91.914568][   T31] usb 6-1: device descriptor read/64, error -71
[   91.952504][ T1878] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[   91.962517][  T380] usb 1-1: USB disconnect, device number 33
[   91.964591][ T1878] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[   92.175721][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[   92.185087][   T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[   92.196305][  T382] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[   92.208826][  T382] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71
[   92.223101][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[   92.235744][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.243901][   T31] usb 6-1: Product: syz
[   92.249721][  T382] usb 8-1: USB disconnect, device number 10
[   92.259979][   T31] usb 6-1: SerialNumber: syz
[   92.469112][   T31] usb 6-1: BAAD HEADSET c_chmask mismatch
[   92.477519][   T31] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[   92.489948][   T31] usb 6-1: USB disconnect, device number 35
[   92.519385][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   92.535629][  T380] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   92.695390][  T380] usb 9-1: config 1 has an invalid interface number: 32 but max is 2
[   92.704093][  T380] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.715128][  T380] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   92.724279][  T380] usb 9-1: config 1 has no interface number 1
[   92.729472][   T31] rust_binder: 31:31 release transaction 25 in, still active
[   92.730693][  T380] usb 9-1: config 1 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[   92.755663][  T380] usb 9-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40
[   92.768298][  T380] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.777539][  T380] usb 9-1: Product: syz
[   92.782327][  T380] usb 9-1: Manufacturer: syz
[   92.793538][  T380] usb 9-1: SerialNumber: syz
[   92.824062][  T382] usb 1-1: new high-speed USB device number 34 using dummy_hcd
Stopping sshd: stopped /usr/sbin/sshd (pid 203)
OK
Stopping crond: [   93.007082][ T1907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.024499][  T382] usb 1-1: too many configurations: 65, using maximum allowed: 8
[   93.031116][ T1907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
stopped /usr/sbin/crond (pid 194)
[   93.062039][ T1907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.073805][  T382] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
OK
[   93.092224][ T1907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.100744][  T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.112158][  T380] usb 9-1: Audio class v2/v3 interfaces need an interface association
[   93.126126][  T382] usb 1-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[   93.134234][  T380] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[   93.134901][ T1936] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   93.143674][  T382] usb 1-1: No valid video chain found.
[   93.161117][ T1936] rust_binder: 1935:1936 got transaction to invalid handle 1
[   93.167141][  T380] usb 9-1: USB disconnect, device number 5
[   93.169888][ T1936] rust_binder: 1935:1936 transaction call to 0:0 failed ENOENT, code 0 size 104-24
[   93.186413][  T382] rust_binder: 1935: undelivered TRANSACTION_ERROR: 29201
[   93.197548][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 148)
Stopping network: [   93.328639][   T10] usb 1-1: USB disconnect, device number 34
[   93.364048][   T31] usb 6-1: new high-speed USB device number 36 using dummy_hcd
OK
Stopping iptables: OK
Stopping system message bus: [   93.535656][   T31] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[   93.547208][   T31] usb 6-1: config 0 interface 0 has no altsetting 0
[   93.553832][   T31] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[   93.563174][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.572266][   T31] usb 6-1: config 0 descriptor??
[   93.578265][ T1934] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
done
[   93.667132][ T1968] futex_wake_op: syz.8.540 tries to shift op by 144; fix this program
[   93.794588][ T1934] netlink: 68 bytes leftover after parsing attributes in process `syz.5.535'.
killall: can't kill pid 813: No such process
[   93.884386][ T1981] wireguard: wg2: Could not create IPv4 socket
Stopping klogd: OK
Stopping acpid: [   93.992339][  T381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[   94.007978][  T381] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   94.064077][   T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[   94.077332][   T31] hid (null): unknown global tag 0xe
[   94.089324][   T31] input: HID 0458:500f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:500F.000D/input/input13
[   94.112585][   T31] input: HID 0458:500f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:500F.000D/input/input14
[   94.136576][   T31] kye 0003:0458:500F.000D: input,hiddev96,hidraw1: USB HID v80.00 Device [HID 0458:500f] on usb-dummy_hcd.5-1/input0
[   94.224073][   T10] usb 9-1: Using ep0 maxpacket: 8
[   94.234900][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.248243][   T10] usb 9-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[   94.258674][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.266827][   T10] usb 9-1: Product: syz
[   94.271020][   T10] usb 9-1: Manufacturer: syz
[   94.275719][   T10] usb 9-1: SerialNumber: syz
[   94.486477][ T1977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.495117][ T1977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.504282][ T1977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.505342][  T381] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   94.513116][ T1977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.537590][   T10] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   94.545119][   T10] usb 9-1: unit 2 not found!
[   94.549598][ T2010] x_tables: unsorted entry at hook 2
[   94.550209][   T10] usb 9-1: 6:0: failed to get current value for ch 0 (-71)
[   94.602109][   T10] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71
[   94.615644][   T10] usb 9-1: USB disconnect, device number 6
[   94.656638][  T381] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.667081][  T381] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   94.676506][  T381] usb 8-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.689646][  T381] usb 8-1: config 1 interface 0 has no altsetting 0
[   94.698256][  T381] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   94.707645][  T381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.715734][  T381] usb 8-1: Product: syz
[   94.719905][  T381] usb 8-1: Manufacturer: syz
[   94.724568][  T381] usb 8-1: SerialNumber: syz
[   94.904107][   T10] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[   94.987925][  T381] usb 8-1: USB disconnect, device number 11
[   95.037310][   T36] kauditd_printk_skb: 30 callbacks suppressed
[   95.037330][   T36] audit: type=1400 audit(1786619711.214:371): avc:  denied  { create } for  pid=2016 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   95.065590][   T10] usb 9-1: config 0 has an invalid interface number: 41 but max is 0
OK
[   95.084062][   T10] usb 9-1: config 0 has no interface number 0
[   95.094048][   T10] usb 9-1: config 0 interface 41 has no altsetting 0
Stopping syslogd: [   95.115014][   T10] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   95.124206][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.132324][   T10] usb 9-1: Product: syz
[   95.136550][   T10] usb 9-1: Manufacturer: syz
[   95.141170][   T10] usb 9-1: SerialNumber: syz
[   95.149573][   T10] usb 9-1: config 0 descriptor??
stopped /sbin/syslogd (pid 92)
OK
[   95.177350][   T36] audit: type=1400 audit(1786619711.354:372): avc:  denied  { read write } for  pid=1050 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   95.205234][   T36] audit: type=1400 audit(1786619711.354:373): avc:  denied  { open } for  pid=1050 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   95.233427][   T36] audit: type=1400 audit(1786619711.354:374): avc:  denied  { ioctl } for  pid=1050 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
umount: can't remount debugfs read-only
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[   95.504096][   T36] audit: type=1400 audit(1786619711.654:375): avc:  denied  { write } for  pid=286 comm="syz-executor" path="pipe:[3260]" dev="pipefs" ino=3260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
Connection to 10.128.0.239 closed by remote host.
[   95.579099][  T312] usb 6-1: USB disconnect, device number 36
[   95.857608][  T435] bridge_slave_1: left allmulticast mode
[   95.863333][  T435] bridge_slave_1: left promiscuous mode
[   95.869059][  T435] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.877627][  T435] bridge_slave_0: left allmulticast mode
[   95.883303][  T435] bridge_slave_0: left promiscuous mode
[   95.889166][  T435] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.898814][   T10] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[   95.930272][   T10] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71
[   95.968941][   T10] usb 9-1: USB disconnect, device number 7
[   96.018897][  T435] veth1_macvtap: left promiscuous mode
[   96.024580][  T435] veth0_vlan: left promiscuous mode
[   96.208899][  T435] bridge_slave_1: left allmulticast mode
[   96.214837][  T435] bridge_slave_1: left promiscuous mode
[   96.220452][  T435] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.228336][  T435] bridge_slave_0: left allmulticast mode
[   96.234372][  T435] bridge_slave_0: left promiscuous mode
[   96.240001][  T435] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.247929][  T435] bridge_slave_1: left allmulticast mode
[   96.253571][  T435] bridge_slave_1: left promiscuous mode
[   96.259383][  T435] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.267075][  T435] bridge_slave_0: left allmulticast mode
[   96.272745][  T435] bridge_slave_0: left promiscuous mode
[   96.279064][  T435] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.287171][  T435] bridge_slave_1: left allmulticast mode
[   96.292810][  T435] bridge_slave_1: left promiscuous mode
[   96.298793][  T435] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.306652][  T435] bridge_slave_0: left allmulticast mode
[   96.312296][  T435] bridge_slave_0: left promiscuous mode
[   96.318043][  T435] bridge0: port 1(bridge_slave_0) entered disabled state
Sent SIGKILL to all processes
Requesting system poweroff
[   96.638030][  T435] tipc: Left network mode
[   96.649885][  T435] veth1_macvtap: left promiscuous mode
[   96.655556][  T435] veth0_vlan: left promiscuous mode
[   96.661558][  T435] veth0_vlan: left promiscuous mode
[   96.667338][  T435] veth1_macvtap: left promiscuous mode
[   96.672960][  T435] veth0_vlan: left promiscuous mode
[   97.227030][  T435] ------------[ cut here ]------------
[   97.232546][  T435] WARNING: CPU: 0 PID: 435 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140
[   97.242786][  T435] Modules linked in:
[   97.246844][  T435] CPU: 0 UID: 0 PID: 435 Comm: kworker/u8:18 Not tainted syzkaller #0 a7accba8f927d2da86bfebad1065c65ec20b626d
[   97.258711][  T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   97.268828][  T435] Workqueue: netns cleanup_net
[   97.273605][  T435] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140
[   97.279647][  T435] Code: e8 c1 5b d6 fc 4b 83 3c 3e 00 75 19 e8 45 97 7d fc 49 81 ff f8 07 00 00 74 1b e8 37 97 7d fc 49 83 c7 08 eb c9 e8 2c 97 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
[   97.299319][  T435] RSP: 0018:ffffc9000fc97b90 EFLAGS: 00010293
[   97.305433][  T435] RAX: ffffffff8509da94 RBX: ffff88812455d8c0 RCX: ffff8881344ddf00
[   97.313404][  T435] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881299f47e0
[   97.321419][  T435] RBP: ffffc9000fc97bb0 R08: ffffffff87d428e7 R09: 1ffffffff0fa851c
[   97.329455][  T435] R10: dffffc0000000000 R11: fffffbfff0fa851d R12: dffffc0000000000
[   97.337646][  T435] R13: dffffc0000000000 R14: ffff8881299f4000 R15: 00000000000007e0
[   97.345806][  T435] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   97.354827][  T435] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.361482][  T435] CR2: 0000001b2e52421c CR3: 00000000074aa000 CR4: 00000000003526b0
[   97.369814][  T435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   97.377948][  T435] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   97.386224][  T435] Call Trace:
[   97.389520][  T435]  <TASK>
[   97.392457][  T435]  cleanup_net+0x6bd/0xc90
[   97.396991][  T435]  ? __cfi_cleanup_net+0x10/0x10
[   97.401940][  T435]  ? kick_pool+0xb9/0x540
[   97.406422][  T435]  process_scheduled_works+0x7f7/0x1060
[   97.411975][  T435]  worker_thread+0xc99/0x13f0
[   97.416712][  T435]  kthread+0x2c7/0x360
[   97.420795][  T435]  ? __cfi_worker_thread+0x10/0x10
[   97.425958][  T435]  ? __cfi_kthread+0x10/0x10
[   97.430548][  T435]  ret_from_fork+0x67/0xa0
[   97.435004][  T435]  ? __cfi_kthread+0x10/0x10
[   97.439592][  T435]  ret_from_fork_asm+0x1a/0x30
[   97.444383][  T435]  </TASK>
[   97.447404][  T435] ---[ end trace 0000000000000000 ]---
[   97.453366][  T435] ------------[ cut here ]------------
[   97.458913][  T435] WARNING: CPU: 1 PID: 435 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140
[   97.469280][  T435] Modules linked in:
[   97.473172][  T435] CPU: 1 UID: 0 PID: 435 Comm: kworker/u8:18 Tainted: G        W          syzkaller #0 a7accba8f927d2da86bfebad1065c65ec20b626d
[   97.486715][  T435] Tainted: [W]=WARN
[   97.490563][  T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   97.501612][  T435] Workqueue: netns cleanup_net
[   97.506658][  T435] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140
[   97.512902][  T435] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 96 7d fc 49 81 ff f8 07 00 00 74 1b e8 e2 96 7d fc 49 83 c7 08 eb c5 e8 d7 96 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 96 7d fc 5b 41 5c 41 5e 41
[   97.533102][  T435] RSP: 0018:ffffc9000fc97b90 EFLAGS: 00010293
[   97.533725][ T2032] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   97.539451][  T435] RAX: ffffffff8509dae9 RBX: ffff8881299f4800 RCX: ffff8881344ddf00
[   97.554103][  T435] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881299f4808
[   97.554812][ T2032] ACPI: PM: Preparing to enter system sleep state S5
[   97.562185][  T435] RBP: ffffc9000fc97bb0 R08: ffffffff87d428e7 R09: 1ffffffff0fa851c
[   97.569207][ T2032] kvm: exiting hardware virtualization
[   97.577169][  T435] R10: dffffc0000000000 R11: fffffbfff0fa851d R12: dffffc0000000000
[   97.577188][  T435] R13: dffffc0000000000 R14: ffff8881299f4000 R15: 0000000000000008
[   97.577208][  T435] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   97.577226][  T435] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.577241][  T435] CR2: 00005555907ae8a8 CR3: 000000010ab7c000 CR4: 00000000003526b0
[   97.577259][  T435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   97.590850][ T2032] reboot: Power down
[   97.635201][  T435] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   97.635225][  T435] Call Trace:
[   97.635234][  T435]  <TASK>
[   97.635245][  T435]  cleanup_net+0x6bd/0xc90
[   97.635275][  T435]  ? __cfi_cleanup_net+0x10/0x10
[   97.659182][  T435]  ? kick_pool+0xb9/0x540
[   97.659221][  T435]  process_scheduled_works+0x7f7/0x1060
[   97.659245][  T435]  worker_thread+0xc99/0x13f0
[   97.659268][  T435]  kthread+0x2c7/0x360
[   97.659288][  T435]  ? __cfi_worker_thread+0x10/0x10
serialport: VM disconnected.