last executing test programs:

27.260557168s ago: executing program 2 (id=550):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002, 0x0, 0x2000000}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000))
setxattr$incfs_metadata(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)="1f8dfd6b0c3c672170b0744e15dc48b739f07ac1a2ca01c62174271ede5075da8416fc6800c76cc3aaf6381e96b7b5f8d3fa484f007d59ce229ad1cfb34c72dc41977ee62073ea44d419ec04b2589d437700f26d65397b538a5d8bb960f7ec24c09902239276a42cacbe91bb4f36771fd1fc09d266f12bc4d8a136d62307c2e81aa3bac7724a06664c6ff99ebc2363180d6085fd11", 0x95, 0x3)
fstat(r3, &(0x7f0000000340))

27.139979535s ago: executing program 2 (id=551):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a", 0xe}], 0x1}, 0x84) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a", 0xe}], 0x1}, 0x84)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = userfaultfd(0x80000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="9600bc00", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb00000000000000000000000005000000000000000700000000000000abba5368fe2d5a2e6cee0000000000000700000000000000ff030000000000000100000001"], 0x428}, 0x1, 0x0, 0x0, 0x4000111}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00'})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032cbd7000fedbdf250700000008000500010000000c0017000202aaaaaaaaaaaa080001000100000008000100010000000a0004007670616e330000000a0004007770616e330000000a0004007770616e340000000c0006000200000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
madvise(&(0x7f000055d000/0x3000)=nil, 0x3000, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="8001000010000100fdfffffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000df0b000000000800ffffff7f030000000b00000027bd7000fc3f00000a0004004400000000000000480003"], 0x180}}, 0x0)
userfaultfd(0x80000)
mprotect(&(0x7f00002d6000/0x4000)=nil, 0x4000, 0x2000004)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x86, 0x23, 0x9, 0xdedb, 0x18, "00faec694b00"})
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) (async)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0000000c0009000200aaaaaaaaaaaa05170300fd00000005000300060000000500030040000000050003000900000005000300070000000500030001e0000005000300cc000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)

27.047503251s ago: executing program 2 (id=552):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x2f})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000400)=0x3ff, 0x4)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000500)={0x50, 0x7fff, 0x1d, {0x12, 0xcac}, {0x8000, 0x7}, @ramp={0xfffd, 0x7, {0x2, 0xfffb, 0xeb4d, 0xf7f3}}})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x41)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

27.015459102s ago: executing program 2 (id=554):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2bbd05e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r1, 0x10001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BINDER_FREEZE(r3, 0xc0046209, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x54, 0x13, 0x403, 0x70bd2c, 0x25dfdbff, {0x18, 0xda, 0x5, 0x6, {0x4e21, 0x4e22, [0x8ae3, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xffffffff, 0x7f]}, 0x8, 0x200}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0xb, 0x8, 0x0, 0x5, 0x8800, 0x4, 0xc9, 0x3, 0x2, 0x33, 0x401, 0x7, 0x3, 0xea, 0x5, 0xfffffffffffffd], 0x8000000, 0x285f40})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

26.865440852s ago: executing program 2 (id=556):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0xfff, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xffff7ffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x100, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0xc, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0xfff, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x2, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x8, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0x1, 0x7b8d, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece91657, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7fc, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x6c, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x5, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x7ae, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) (async, rerun: 32)
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x1b0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) (async, rerun: 64)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) (async, rerun: 64)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) (async, rerun: 64)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) (async)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xc, 0x2010, r0, 0x1000) (async)
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (rerun: 64)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async, rerun: 32)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)}) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f00000006c0)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217b309", 0x5a, 0x440dc, 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
unshare(0x22020400) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async, rerun: 32)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@empty}, &(0x7f0000000180)=0x14) (async)
ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"})

26.699499291s ago: executing program 2 (id=559):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x602, 0x0)
ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async)
pwritev(r2, &(0x7f0000002940)=[{&(0x7f0000001940)="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", 0x1000}], 0x1, 0xe9c, 0xa993)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) (async)
readv(0xffffffffffffffff, &(0x7f00000014c0), 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002228000100000000000000c1318300000000171806a0f217dd13ebdac3469f702a1bdde8405059787b635e0eec"], 0x0}, 0x0)

26.55932622s ago: executing program 32 (id=559):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x602, 0x0)
ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async)
pwritev(r2, &(0x7f0000002940)=[{&(0x7f0000001940)="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", 0x1000}], 0x1, 0xe9c, 0xa993)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) (async)
readv(0xffffffffffffffff, &(0x7f00000014c0), 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002228000100000000000000c1318300000000171806a0f217dd13ebdac3469f702a1bdde8405059787b635e0eec"], 0x0}, 0x0)

10.683971063s ago: executing program 4 (id=562):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) (async)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x7, 0x38, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$tipc(0x1e, 0x2, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="9211c0a9bd4b23b78ad3a2b489ed81782a96102f033b30b58de7d5d42a18f68899dc5fd97b9d455b812cd39a7f039605fe3e550755392577a2ff8adb7d4c0d8a27431c", 0x43}], 0x1, &(0x7f0000000240)="dca162b0e0540a7e9c7b54fe42632713be34ae2df042227a0de96edfe79f914625bf41e02deaeaef2a7278ad97392733905c5fbf73c14ff9f06c3c99c1c57dda7fdd0bcd2c87b697c0b89983c0aa83c70a34e811724d83399355db1785f97843e8c0b63163ec78a528b19f0f610f3f517e99c9a7a70949308ae38571ee", 0x7d, 0x88c0}, 0x448c4)
connect$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362) (async)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) (async)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3)
ioctl$RTC_UIE_OFF(r3, 0x7004)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480), 0x24000, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f00000004c0)={0x7, 0x9})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4010)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3}) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000800))
openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f00000008c0)={0x4, 0x0, [{0xa, 0x4, 0x7, 0x1000, 0x5, 0x5}, {0x80000008, 0x5, 0x9, 0x7, 0x1, 0x7fff, 0x2}, {0xb, 0x1, 0x0, 0x1, 0x5, 0xf, 0x6}, {0x0, 0x4, 0x0, 0x8, 0x1ff, 0x0, 0x4b87}]})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10)
flock(r0, 0x1b)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000980)=0x1)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x9, 0x4000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80)) (async)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80))

8.868438009s ago: executing program 4 (id=562):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) (async)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x7, 0x38, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$tipc(0x1e, 0x2, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="9211c0a9bd4b23b78ad3a2b489ed81782a96102f033b30b58de7d5d42a18f68899dc5fd97b9d455b812cd39a7f039605fe3e550755392577a2ff8adb7d4c0d8a27431c", 0x43}], 0x1, &(0x7f0000000240)="dca162b0e0540a7e9c7b54fe42632713be34ae2df042227a0de96edfe79f914625bf41e02deaeaef2a7278ad97392733905c5fbf73c14ff9f06c3c99c1c57dda7fdd0bcd2c87b697c0b89983c0aa83c70a34e811724d83399355db1785f97843e8c0b63163ec78a528b19f0f610f3f517e99c9a7a70949308ae38571ee", 0x7d, 0x88c0}, 0x448c4)
connect$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362) (async)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) (async)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3)
ioctl$RTC_UIE_OFF(r3, 0x7004)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480), 0x24000, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f00000004c0)={0x7, 0x9})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4010)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3}) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000800))
openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f00000008c0)={0x4, 0x0, [{0xa, 0x4, 0x7, 0x1000, 0x5, 0x5}, {0x80000008, 0x5, 0x9, 0x7, 0x1, 0x7fff, 0x2}, {0xb, 0x1, 0x0, 0x1, 0x5, 0xf, 0x6}, {0x0, 0x4, 0x0, 0x8, 0x1ff, 0x0, 0x4b87}]})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10)
flock(r0, 0x1b)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000980)=0x1)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x9, 0x4000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80)) (async)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80))

7.086117054s ago: executing program 0 (id=618):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x4, 0x2, 0x0, 0xd, 0xff, 0xe, 0xe, 0x10, 0x84, 0x1d, 0xe, 0x0, 0x0, 0x9, 0x6, 0x78, 0x12, 0xc0, '\x00', 0x7})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x200000}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}})

6.899154665s ago: executing program 1 (id=621):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000002a00)=0x3, 0x4)
mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000680), 0x3000b2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc0386723, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r3=>0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0xffffffffffffffff, 0x100, 0x3, r3}}}, 0x28)
syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB='ag'], 0x0)

6.898307165s ago: executing program 0 (id=622):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x300}, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000380)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, 0x3000, 0x3})
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee6901020301090224003ba0de2796db0010000904b8070296ecca000905060200020d00060905fecc94"], 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)}], 0x1}, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0x1231, 0x6, 0xfe, 0xd, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x11, 0xfd, 0x0, 0x2, 0x20, 0x0, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x0, 0x7}, 0x14}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="60100400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000100)={0x897, 0x0, [{0x0, 0x8, 0x6, 0x1, 0x6, 0x9ecb, 0x8}]})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r9, 0xc008aec1, &(0x7f00000001c0)={0xa, 0x0, [{0xa, 0x9, 0x7, 0x6, 0x3, 0x1588dfd2, 0x1}, {0x1, 0x0, 0x4, 0x5, 0x200, 0x4, 0x5}, {0x2, 0xc671, 0x3, 0x6, 0x8001, 0x7, 0x9}, {0x6, 0x10, 0x2, 0x8, 0x6, 0x3751, 0x5}, {0xc0000000, 0x2, 0x1, 0x6, 0x7fffffff, 0x4, 0xa}, {0x4, 0x8b, 0x1, 0x5, 0x3000, 0xffff, 0x8}, {0xa, 0x7ff, 0x2, 0x2, 0x9, 0x673e, 0xff}, {0xc0000000, 0xc00000, 0x2, 0x0, 0x9, 0x2, 0x5}, {0x80000019, 0x40, 0x5, 0x2, 0x100, 0x400, 0x2}, {0x6, 0x0, 0x2, 0xfffffff9, 0xf1f, 0x9, 0x5}]})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)

6.856478477s ago: executing program 4 (id=562):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) (async)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x7, 0x38, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$tipc(0x1e, 0x2, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="9211c0a9bd4b23b78ad3a2b489ed81782a96102f033b30b58de7d5d42a18f68899dc5fd97b9d455b812cd39a7f039605fe3e550755392577a2ff8adb7d4c0d8a27431c", 0x43}], 0x1, &(0x7f0000000240)="dca162b0e0540a7e9c7b54fe42632713be34ae2df042227a0de96edfe79f914625bf41e02deaeaef2a7278ad97392733905c5fbf73c14ff9f06c3c99c1c57dda7fdd0bcd2c87b697c0b89983c0aa83c70a34e811724d83399355db1785f97843e8c0b63163ec78a528b19f0f610f3f517e99c9a7a70949308ae38571ee", 0x7d, 0x88c0}, 0x448c4)
connect$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362) (async)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) (async)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3)
ioctl$RTC_UIE_OFF(r3, 0x7004)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480), 0x24000, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f00000004c0)={0x7, 0x9})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4010)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3}) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000800))
openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f00000008c0)={0x4, 0x0, [{0xa, 0x4, 0x7, 0x1000, 0x5, 0x5}, {0x80000008, 0x5, 0x9, 0x7, 0x1, 0x7fff, 0x2}, {0xb, 0x1, 0x0, 0x1, 0x5, 0xf, 0x6}, {0x0, 0x4, 0x0, 0x8, 0x1ff, 0x0, 0x4b87}]})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10)
flock(r0, 0x1b)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000980)=0x1)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x9, 0x4000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80)) (async)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80))

4.94992134s ago: executing program 1 (id=623):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="22f6d91d415301e9f89080e8eedb3a", 0xf}], 0x1, 0x0, 0x3d0}, 0x4000c010)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wg2\x00', 0x0})
sendto$inet6(r1, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x41}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_pid(r4, &(0x7f00000013c0), 0xfffffdef)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={0x2c, r3, 0xd5c15c672e322a81, 0x0, 0x1, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}]}, 0x2c}}, 0x9c281f9f6c1beafa)

4.922499911s ago: executing program 3 (id=625):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c0000003100000056ccab"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
syz_usb_connect$uac1(0x5, 0xbb, &(0x7f00000013c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x70}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x4, 0x1, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x0, 0x5, 0x6, 0xb}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x3, "316182"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x6, "15"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x7, 0x2, "c9b954"}, @as_header={0x7, 0x24, 0x1, 0x3a, 0x93, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x3, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x1, 0x1, {0x7, 0x25, 0x1, 0x83, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x6, "6ca8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x6, 0x5, {0x7, 0x25, 0x1, 0x83, 0x8, 0x2}}}}}}}]}}, &(0x7f00000019c0)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x200, 0x7, 0x6, 0xe, 0x10, 0x4}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x3801}}]})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000340)='cpuset.cpus\x00', 0x2, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x51, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x7, 0x0, 0xfa, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x9, 0x24, 0x6, 0x0, 0x0, "03895e17"}, {0x5, 0x24, 0x0, 0x1b6}, {0xd, 0x24, 0xf, 0x1, 0xdf, 0x8, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x8, 0xb}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0xfe, 0xd9, 0x9, 0x8}, 0x27, &(0x7f0000000640)=ANY=[@ANYBLOB="050f2700e6f72963a50303100b141004a0e7160d2d17b801a109f67799e535abc20b1001082000f7fc020004"], 0x7, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x32, &(0x7f0000000600)=@string={0x32, 0x3, "faf7576115e84257478ec1b2703314fec69cacf6efd9cb31431c3a46bf3b66bfe3e906a90520f625a643a7219355bc9b"}}, {0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="3e03ea1f3019de370c5b3d0fdf6633327a132ba61e584750ae5a3d96a0143661ff946b8b3f8108f7e6af0558c58f0bef86259e0fbc77180e2051f37e1a8842"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3009}}, {0xf2, &(0x7f00000006c0)=@string={0xf2, 0x3, "514faabba75294617933023b2cc0800381e8d84811c4ce5b1b3275fd0a66ff1e37b1ff4f88c78d212e2e42f62427a61883a53e2f08cc9f5832a91275157d7ce3642e97cb7c217f705921d774dc9809a66a76cf5c74249899d1dfb97bb8613c7179014f20cd206a7a1549bad3968a7a0fa91f5bb2938d945978cf75e2b2ccfa12a8d961e87a3392e9f92c96a34e71fb76b432fc417ad0056c5411dec2bbc09fb3baa7a929aa3b1d8e6cfd8fdfb8fbaf648c5a97bc5ae0805813168cccebe998ffa6ad9b07c8bf21c116e8e83e68abdaa009c9801097ea6508c9a705d1f6572d6c03ceca8556d26ad8e4a7de48256fef39"}}]})
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='1-6:5/', @ANYRESOCT=r1, @ANYRESOCT=r2], 0x2c)
syz_usb_connect$cdc_ecm(0x6, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0xbe, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0xfe, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "63c059dd7f1c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x1, 0x9, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x8, 0x7ff}, @dmm={0x7, 0x24, 0x14, 0x5, 0xed9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x60, 0x3, 0x4, 0x2}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x12, 0xad, 0x10, 0x7f}, 0x40, &(0x7f00000000c0)={0x5, 0xf, 0x40, 0x3, [@generic={0xb, 0x10, 0x4, "bd8e2ebf9980c15a"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "8f7afdc660c88e20353211a7f8bd4b46"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x69, 0xf1e, 0x0, [0xc030, 0x3f00, 0x1fe001e, 0x0]}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3c04}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x437}}, {0xcd, &(0x7f0000000180)=@string={0xcd, 0x3, "aba16b00ebf39d5ad383ae3d4b3d554f3318f0e46772057779e0523558171904b7f69fdde311f3c36d64e9b38a17bf8a39adf6389a62e6f6f01397dec8e8f9c0413eec61802a179b157f5ba510f37614c23c95dab669637c30397fa630cb4602d7e1e2f2b62997f4189dc9f964390c42fd00c5f65eaeb345aad144551ec067242bad56c55bdca8ae557832aa640af79898df7713c37a1f3e37107fc4c639caf787e414514e33f799633a1c46438a7288ace72b2da4e47d3bfe4584bf6312e3786085a4e50929142b4c238c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c77}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x441}}, {0x7f, &(0x7f0000000340)=@string={0x7f, 0x3, "5946d4460d9eb39664a7007a2b3dc4f6f3df6db08fb1d382fae7c0338a869b527a4c2fdc478da19e2838cc0d11b830cc5dca325e54f8fcebecdd7c2a07d60d15f3fbf67f637811f107367515ab7580e1760eb61387b7922a469a5b569bfd975269106bd6c5425557851a464a2cb7faf03f81fe1f3792fc69fd6e4201b7"}}]})
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c0000003100000056ccab"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async)
syz_usb_connect$uac1(0x5, 0xbb, &(0x7f00000013c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x70}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x4, 0x1, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x0, 0x5, 0x6, 0xb}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x3, "316182"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x6, "15"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x7, 0x2, "c9b954"}, @as_header={0x7, 0x24, 0x1, 0x3a, 0x93, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x3, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x1, 0x1, {0x7, 0x25, 0x1, 0x83, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x6, "6ca8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x6, 0x5, {0x7, 0x25, 0x1, 0x83, 0x8, 0x2}}}}}}}]}}, &(0x7f00000019c0)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x200, 0x7, 0x6, 0xe, 0x10, 0x4}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x3801}}]}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_int(r1, &(0x7f0000000340)='cpuset.cpus\x00', 0x2, 0x0) (async)
syz_usb_connect$cdc_ecm(0x2, 0x51, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x7, 0x0, 0xfa, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x9, 0x24, 0x6, 0x0, 0x0, "03895e17"}, {0x5, 0x24, 0x0, 0x1b6}, {0xd, 0x24, 0xf, 0x1, 0xdf, 0x8, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x8, 0xb}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0xfe, 0xd9, 0x9, 0x8}, 0x27, &(0x7f0000000640)=ANY=[@ANYBLOB="050f2700e6f72963a50303100b141004a0e7160d2d17b801a109f67799e535abc20b1001082000f7fc020004"], 0x7, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x32, &(0x7f0000000600)=@string={0x32, 0x3, "faf7576115e84257478ec1b2703314fec69cacf6efd9cb31431c3a46bf3b66bfe3e906a90520f625a643a7219355bc9b"}}, {0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="3e03ea1f3019de370c5b3d0fdf6633327a132ba61e584750ae5a3d96a0143661ff946b8b3f8108f7e6af0558c58f0bef86259e0fbc77180e2051f37e1a8842"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3009}}, {0xf2, &(0x7f00000006c0)=@string={0xf2, 0x3, "514faabba75294617933023b2cc0800381e8d84811c4ce5b1b3275fd0a66ff1e37b1ff4f88c78d212e2e42f62427a61883a53e2f08cc9f5832a91275157d7ce3642e97cb7c217f705921d774dc9809a66a76cf5c74249899d1dfb97bb8613c7179014f20cd206a7a1549bad3968a7a0fa91f5bb2938d945978cf75e2b2ccfa12a8d961e87a3392e9f92c96a34e71fb76b432fc417ad0056c5411dec2bbc09fb3baa7a929aa3b1d8e6cfd8fdfb8fbaf648c5a97bc5ae0805813168cccebe998ffa6ad9b07c8bf21c116e8e83e68abdaa009c9801097ea6508c9a705d1f6572d6c03ceca8556d26ad8e4a7de48256fef39"}}]}) (async)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='1-6:5/', @ANYRESOCT=r1, @ANYRESOCT=r2], 0x2c) (async)
syz_usb_connect$cdc_ecm(0x6, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0xbe, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0xfe, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "63c059dd7f1c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x1, 0x9, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x8, 0x7ff}, @dmm={0x7, 0x24, 0x14, 0x5, 0xed9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x60, 0x3, 0x4, 0x2}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x12, 0xad, 0x10, 0x7f}, 0x40, &(0x7f00000000c0)={0x5, 0xf, 0x40, 0x3, [@generic={0xb, 0x10, 0x4, "bd8e2ebf9980c15a"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "8f7afdc660c88e20353211a7f8bd4b46"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x69, 0xf1e, 0x0, [0xc030, 0x3f00, 0x1fe001e, 0x0]}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3c04}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x437}}, {0xcd, &(0x7f0000000180)=@string={0xcd, 0x3, "aba16b00ebf39d5ad383ae3d4b3d554f3318f0e46772057779e0523558171904b7f69fdde311f3c36d64e9b38a17bf8a39adf6389a62e6f6f01397dec8e8f9c0413eec61802a179b157f5ba510f37614c23c95dab669637c30397fa630cb4602d7e1e2f2b62997f4189dc9f964390c42fd00c5f65eaeb345aad144551ec067242bad56c55bdca8ae557832aa640af79898df7713c37a1f3e37107fc4c639caf787e414514e33f799633a1c46438a7288ace72b2da4e47d3bfe4584bf6312e3786085a4e50929142b4c238c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c77}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x441}}, {0x7f, &(0x7f0000000340)=@string={0x7f, 0x3, "5946d4460d9eb39664a7007a2b3dc4f6f3df6db08fb1d382fae7c0338a869b527a4c2fdc478da19e2838cc0d11b830cc5dca325e54f8fcebecdd7c2a07d60d15f3fbf67f637811f107367515ab7580e1760eb61387b7922a469a5b569bfd975269106bd6c5425557851a464a2cb7faf03f81fe1f3792fc69fd6e4201b7"}}]}) (async)

4.831331327s ago: executing program 1 (id=626):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
writev(r0, &(0x7f0000001800)=[{&(0x7f0000000180)="0722029f99cba6bbd0c6ac2b32ec7d035765f903a78b139665a9e5a4e32d41aae474a1ac0058c42a6fc2bc5a5c6c3527a941bb2bd728af86dc8fbf4b22a86eedeb91315673a08461817231e43453fdf348617a138cc51e0519d5cebff043938e4fa4d2f8bde34b4f82e772c63c19af23f2ca98ea0bac3e99b1d96bfef72cd32726c3d9182306be8094eefbf7306b66102bfcdd70c50babdd087546e26fd315958a0325", 0xa3}, {0x0}, {&(0x7f0000001740)}, {&(0x7f0000000300)="445f2063893e6da153e179ecb966186563e06f6f5a62f7677819d183d444fe1b47", 0x21}], 0x4) (async)
writev(r0, &(0x7f0000001800)=[{&(0x7f0000000180)="0722029f99cba6bbd0c6ac2b32ec7d035765f903a78b139665a9e5a4e32d41aae474a1ac0058c42a6fc2bc5a5c6c3527a941bb2bd728af86dc8fbf4b22a86eedeb91315673a08461817231e43453fdf348617a138cc51e0519d5cebff043938e4fa4d2f8bde34b4f82e772c63c19af23f2ca98ea0bac3e99b1d96bfef72cd32726c3d9182306be8094eefbf7306b66102bfcdd70c50babdd087546e26fd315958a0325", 0xa3}, {0x0}, {&(0x7f0000001740)}, {&(0x7f0000000300)="445f2063893e6da153e179ecb966186563e06f6f5a62f7677819d183d444fe1b47", 0x21}], 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
pread64(r2, &(0x7f0000004200)=""/236, 0xec, 0x0)
write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x23ee, 0x56, 0xc0, 0xffff0001}, {0x7, 0x80, 0x5, 0xd5}, {0xeef, 0xbb, 0xc9, 0xbda3}]})
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002840)=[@text16={0x10, 0x0}], 0x1, 0x2f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}})

4.697609784s ago: executing program 3 (id=627):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket(0x2, 0xa, 0x300)
recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="001000070000"], 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000002c0)={0x0, 0x2, 0xd6, {0xd6, 0x31, "29328eab160e5869299b637aced9a156e98a59bad1c9e849eba64fcbf06ba5d759d46f4abae8bb7fd2eca2c1abaef4d3aba065d809ad1c074b3039ed7d937dd9c3bfbfe2e78d1a7d83b88e704276e3b06ea4dc8580b3b67ad7c3f0fc1ee520d7cdf8a27fd8ed24d79df70be9eb049aaa18db5e82d24eacf04476a1842b1425239e36a638674e9d89641be79f0d1b99fa18d5b12f8ad3b6a7cc68c958cb5256415d0f334415d5035d8597dfbbc157c5af9fd2ecf10d157baabb2f60c0656463b332171f3c7c257ecb8e03462daf7355250c03dcfe"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f0000000480)={0x1c, &(0x7f00000003c0)={0x40, 0x6, 0x38, "3189ea464460e28a3ce50a736e360ad6858611ff0432f2804d96e6e1afdd747cf53b092954d5275450c54f482941a6cc3b229a8539158411"}, &(0x7f0000000500)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000440)={0x21, 0x0, 0x3, "8949c9"}})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000001c0)=0x73, 0x4)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0)
write$ppp(r3, &(0x7f00000000c0)="a52abe44ae01f8e8b0626fdf4b90942099269a8a8e4543532129c36b8a6f08121f3a2228b7b020ba2cfc7d303467aa3feb5cf81ae979f3253678eb0e33f0369c70d5752f85d46db531e60c99959fc0a7bb3442463b91c15b95ec9b96f999133e3edb0e6071b49e75c076e6be15a44bc6e39ed4", 0x73)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x8000000000000000}}]})
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000d40)="8b4ff4a01daf0082", 0x8, 0x500c4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)

4.654756517s ago: executing program 4 (id=562):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) (async)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x7, 0x38, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$tipc(0x1e, 0x2, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="9211c0a9bd4b23b78ad3a2b489ed81782a96102f033b30b58de7d5d42a18f68899dc5fd97b9d455b812cd39a7f039605fe3e550755392577a2ff8adb7d4c0d8a27431c", 0x43}], 0x1, &(0x7f0000000240)="dca162b0e0540a7e9c7b54fe42632713be34ae2df042227a0de96edfe79f914625bf41e02deaeaef2a7278ad97392733905c5fbf73c14ff9f06c3c99c1c57dda7fdd0bcd2c87b697c0b89983c0aa83c70a34e811724d83399355db1785f97843e8c0b63163ec78a528b19f0f610f3f517e99c9a7a70949308ae38571ee", 0x7d, 0x88c0}, 0x448c4)
connect$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362) (async)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) (async)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3)
ioctl$RTC_UIE_OFF(r3, 0x7004)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480), 0x24000, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f00000004c0)={0x7, 0x9})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4010)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3}) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000800))
openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f00000008c0)={0x4, 0x0, [{0xa, 0x4, 0x7, 0x1000, 0x5, 0x5}, {0x80000008, 0x5, 0x9, 0x7, 0x1, 0x7fff, 0x2}, {0xb, 0x1, 0x0, 0x1, 0x5, 0xf, 0x6}, {0x0, 0x4, 0x0, 0x8, 0x1ff, 0x0, 0x4b87}]})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10)
flock(r0, 0x1b)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000980)=0x1)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x9, 0x4000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80)) (async)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80))

2.680680593s ago: executing program 0 (id=628):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000026c0)={0xa, 0x4e24, 0x8, @private2, 0x6}, 0x9)
getsockopt$inet6_int(r0, 0x29, 0xa, 0x0, &(0x7f0000002740))

2.680366043s ago: executing program 1 (id=629):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f00000000c0)={@broadcast, @multicast2})
r1 = socket$netlink(0x10, 0x3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ustat(0x801, &(0x7f0000000140))
syz_usb_connect(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0502030109024700010000000009046900000e010000182403010202"], 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8911, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0)
write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\xf6\x1b\xbdv\xda\x01\t'}]}, 0x13)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x5, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108)
write$tun(r4, &(0x7f0000000380)={@val={0x0, 0x600}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0xb, 0x3, 0x0, 0x0, "ef08aee90cdc2e22"}}}}}, 0x26)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)={0x6, 0x0, [{0x300000, 0x5, 0x1, 0x0, @irqchip={0xd099, 0xf}}, {0x1, 0x5, 0x0, 0x0, @adapter={0x4, 0xdef80c2, 0x5, 0x8244, 0x6}}, {0x1000, 0x5, 0x1, 0x0, @irqchip={0x7}}, {0x3, 0x5, 0x0, 0x0, @irqchip={0x8b, 0xb3}}, {0x6, 0x1, 0x0, 0x0, @sint={0xc1, 0x8}}, {0x6, 0x4, 0x0, 0x0, @sint={0x10000}}]})

2.679160883s ago: executing program 3 (id=630):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setresuid(0x0, 0xee00, 0x0)
setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0xffff7fff, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0xffff7fff, 0x4)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x80c, 0x3, 0x1c, 0x7, 0x0, 0x10, 0x3, 0xe9, 0x1, 0x9, 0x4, 0x6}, {0x6, 0x6, 0xa, 0xc1, 0x7, 0x1, 0x47, 0xf1, 0x7, 0x8b, 0x44, 0x7d, 0x3fffffffffe}, {0x7fffffff, 0x4, 0x1, 0x2, 0x5a, 0x9, 0x8, 0xf8, 0x5, 0x6, 0x3, 0x3, 0x4}], 0x800000})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000607"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000772aed408680070bb96cfbda89c4bec90976e89e1a397c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000405240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402a81b2dc7b614dd26471f34e0c8cb9edd11dc325744f159aa77"], 0x0) (async)
r2 = syz_usb_connect(0x3, 0xf5, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000772aed408680070bb96cfbda89c4bec90976e89e1a397c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000405240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402a81b2dc7b614dd26471f34e0c8cb9edd11dc325744f159aa77"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x20, 0x0, 0x90, {0x90, 0x7, "fdb1ba13463771e0bfd9d21d028bd8daaaf39c2160e3a742ed9b03db45328e9369d295fe1f1b92e90819c3ec98052f64cb00b37678cacf6ca714434170ed1d20c0043cc13dcde6c29980e81fc2967da944b11be536def042d64b3c262c1c517bc3549a91c68bd44a09713cfd5890fd56d6a720c59eb628494440b9b75a83094a115b1e8896e31f5a1431a516af38"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x103f}}, &(0x7f0000000200)=ANY=[@ANYBLOB="0022050000003b3f17d155"], &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0xbc1}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x0, 0x7, 0x19, "a739029e12ad719c497b1d359cf7c46a69158fd254917265c4"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x1, 0xfa, "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"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x6}}) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x20, 0x0, 0x90, {0x90, 0x7, "fdb1ba13463771e0bfd9d21d028bd8daaaf39c2160e3a742ed9b03db45328e9369d295fe1f1b92e90819c3ec98052f64cb00b37678cacf6ca714434170ed1d20c0043cc13dcde6c29980e81fc2967da944b11be536def042d64b3c262c1c517bc3549a91c68bd44a09713cfd5890fd56d6a720c59eb628494440b9b75a83094a115b1e8896e31f5a1431a516af38"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x103f}}, &(0x7f0000000200)=ANY=[@ANYBLOB="0022050000003b3f17d155"], &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0xbc1}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x0, 0x7, 0x19, "a739029e12ad719c497b1d359cf7c46a69158fd254917265c4"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x1, 0xfa, "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"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x6}})

2.573539569s ago: executing program 0 (id=631):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r0, 0x0, 0x0, 0xfffffffffffffffd}])
r1 = gettid()
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000002c0)=0x5, 0x4)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x62}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000800)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000)
syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x55af)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3894ccfefe9dccd4}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)}, 0x0)

2.457236346s ago: executing program 0 (id=632):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902270001000000000904"], 0x0)
syz_usb_connect$uac1(0x1, 0xb0, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x3, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x10}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x2, 0xc, 0x3, 0x9, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x1, 0x5}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3, 0xec, "ec"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x6c, 0x9a, {0x7, 0x25, 0x1, 0x1, 0x8, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0x6, 0x54, "575083", 'UON'}, @as_header={0x7, 0x24, 0x1, 0xa, 0x5b}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x4, 0x6, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x5, 0x6, {0x7, 0x25, 0x1, 0x0, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x7f, 0x4, 0xc, 0x28}, 0x31, &(0x7f0000000200)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x1, 0x4, 0xf6, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xfd, 0x3, 0x49}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "67327eab201eacb1e2b021ceb505a6d2"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}]})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0xff, 0x8, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x20004000)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x2, 0x9}, 0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0xfffffffd, 0x25dfdbfd, {{@in=@multicast2, @in=@local, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0xfffffffffffffffd, 0x0, 0xbdf}, {0x7fffffff, 0x3, 0xb}, 0x70bd27, 0x3ffc, 0xa, 0x2, 0x0, 0x44}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040))

2.287823616s ago: executing program 4 (id=562):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) (async)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x7, 0x38, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$tipc(0x1e, 0x2, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="9211c0a9bd4b23b78ad3a2b489ed81782a96102f033b30b58de7d5d42a18f68899dc5fd97b9d455b812cd39a7f039605fe3e550755392577a2ff8adb7d4c0d8a27431c", 0x43}], 0x1, &(0x7f0000000240)="dca162b0e0540a7e9c7b54fe42632713be34ae2df042227a0de96edfe79f914625bf41e02deaeaef2a7278ad97392733905c5fbf73c14ff9f06c3c99c1c57dda7fdd0bcd2c87b697c0b89983c0aa83c70a34e811724d83399355db1785f97843e8c0b63163ec78a528b19f0f610f3f517e99c9a7a70949308ae38571ee", 0x7d, 0x88c0}, 0x448c4)
connect$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362) (async)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) (async)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3)
ioctl$RTC_UIE_OFF(r3, 0x7004)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480), 0x24000, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f00000004c0)={0x7, 0x9})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4010)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3}) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000800))
openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f00000008c0)={0x4, 0x0, [{0xa, 0x4, 0x7, 0x1000, 0x5, 0x5}, {0x80000008, 0x5, 0x9, 0x7, 0x1, 0x7fff, 0x2}, {0xb, 0x1, 0x0, 0x1, 0x5, 0xf, 0x6}, {0x0, 0x4, 0x0, 0x8, 0x1ff, 0x0, 0x4b87}]})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10)
flock(r0, 0x1b)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000980)=0x1)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x9, 0x4000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80)) (async)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80))

241.369166ms ago: executing program 0 (id=633):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002bc0), 0x1, 0x0)
write$selinux_validatetrans(r1, 0x0, 0xfdea)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x4, 0xd)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000c5", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf250100000000000008410000004c00180000005862726f6164636173742d6c696e6b000000000000000000000000000000000014f7696b967200000000000000000000000000000000000000000000000000000000000000000000000000de7f8dcfdd0ba575f6e9a63f5cac00"], 0x68}, 0x1, 0x0, 0x0, 0x240448c0}, 0x20000000)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000000))
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x6, 0x2, 0x1}, 'syz1\x00', 0xa})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00R'], 0x20}}, 0x20000884)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r6)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="32e5eca4ee7ef33a252d2662d8ce8650f1df739fb811b25324ed7e3798e07ec61c9cad1b937481f7a5650246de9907e484"], 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xadaaecb10c808eff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x22004004}, 0x2004c005)
syz_usb_connect(0x3, 0x35, &(0x7f0000000200)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4010203010902230001046b40090904e40c81ffe7bb04082403010600000009050702"], 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x7, 0xc, 0x2040000, 0x3, 0xfffffffd, 0x80000000}})
r8 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0xa100)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f0000000180)={0xf4d, 0x7fffffffffffffff, 0xb, 0x7fff})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r9, 0x43403d0e, &(0x7f0000000040))

240.579466ms ago: executing program 1 (id=634):
r0 = getpgrp(0xffffffffffffffff)
gettid()
syz_clone(0x548cd100, &(0x7f0000000000)="9a9de8b58cff0a1adef7c7a45f4ad1dc66c5eb93488a03308bd0a36b4d1dcae4cc4e5681398f777a8a556e83d310e0804c0533b72ab1c5b77c315ba5f457db865afc1f0cdf0e7e91246466709a268b0a0f7b2d2da8757362947d824b8c3adf41725edd4171fa6b746dc31f501f077f513232ca297ac08b0cae1f577ebf0687ee10ec0baca156c8f0ac9ce231c7c0fd02b992227b45de25a729f1fd32f382e795e52147775ec4f881d0d4631421fcff8f6e4c67362116a3b0b5d10de9bce00fe65c59130c3dac5f9a89e4e6315624e37facbdd0623be6d75464744d0c720474a1aad9f43f6e1a29898f56636c244ddd6bba1106e1e9ad", 0xf6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2900f8ead24ecd27ee836b3919536b8d7b574a7f27f29861c9318c632615dfbd6861be5f10d7acac214929ee4119") (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x80008, &(0x7f00000001c0)={[{@uuid_auto}, {@redirect_dir_off}, {@verity_require}]})
ptrace(0x4208, r0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
close_range(r1, r2, 0x2) (async)
accept4(r2, 0x0, 0x0, 0x80000)

240.420296ms ago: executing program 3 (id=635):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x1000, @empty}, 0x1c)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="256710e0afd6c88a1bd58e63a7b2ca5e8d6b4ef4724f4211deb63f680593e944af5548b6f645c94706acd1a5cf", 0x2d}, {&(0x7f0000000080)="dced96d817ba4858df8d5c92a26955dcb86a2fc01e0cd038459f9144ad5c8e72a7092ed1904440ca6aedd584d1ae99ba58d0234be9c1c33243fb3fd569ff410667941b813d8c586501710885567459ef60279cc43e3719d1e695507c88e67c652221416e6fe9209ca42f16e09c2e2873c7bbf60070516d35cc905920620a8bd3b9b9a56a4d7e5f10f2aab21dfd3b2fb0c4ba21959be07d09c17ca487fd305e3d655e708dac01", 0xa6}, {&(0x7f0000000240)="a8ed506f9262303426fd361de9e116d715273bc202fe4ec97fd03609c0507f9bb0f2d2fa9bb5e0df5ba86fb686dd9ab7d073dfdb90ede426bbb959473b4c3e5f89a79bb38772f4d89666296fdd530cc89ff9ef2d1b658cecdf618d4e994f36ecfa3962300fd38a362ed074cc5deb355883e0fd23281c9c3cd0fe54078455ae77da81ee78fc610ef8472bb3ac6f97d3b27e83e47963a19a7ded21d4577cd94105be0c8e5cd28e37de00e2a5cf9aaa00300dfb22a0d4515424a68578d89f6ac982d2186a02a2c8d445546866dac6bfc894aa50644c895283307e37932ba298429eb31359b681e2652f05f8994bce48b6", 0xef}], 0x3, &(0x7f0000000380)="6a6b2bd59a94e7c760a4df0e7b84c63dfcdd35ac0c144721389187aa537c0d9b9626600d3638df93eef68d4024ca6e0fe9a070f47b915401535583cb2e36280408e74a293c545a1b8348a30116d724805e3dcc66e49aa36369df96cf071ac11c89639c1c3ebdfc55b1c4daff15595129fa4b11196e19858a4644724e0d1c198927d8c5391ac3059a58af5c86dc2b83", 0x8f, 0x20000000}, 0x40001)
bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

163.424381ms ago: executing program 3 (id=636):
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket(0x2, 0x3, 0x67)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='pimreg1\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r0, &(0x7f0000000180)="194de600", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
socket(0xb, 0xa, 0x1)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

161.555231ms ago: executing program 1 (id=637):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0024170000001722731ecebf6bd5a54f1a41090fe0564a5a6d9d740604"], &(0x7f0000000100)=ANY=[@ANYBLOB="00030000000004204404"]}, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x20, 0xc, 0x61, "23bed8cf8c7d7f306e14f1f0c2f8470a0d43ab41724694e052152e0281038301def97ae4551ec2dd8407aae9bc0364dc0dc787d42938f12c3d83003f4deaeac296d3f18fa01b0a8df30de35368ade53f77c2e2c68da99a684afc7a3622e05559dc"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x0, 0x1c, {0x1a, "208b30c171ae9d7d33fed9ba427242bc5f9afba5528bc453cfdc"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x1}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000040)=0x1)
close_range(r3, r3, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r5 = socket(0x28, 0x2, 0x7f)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r7, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x44fd4b3b}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
fchdir(r6)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r9=>0x0})
sendto$packet(r4, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r9, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32)
ioctl$PPPIOCSMRU(r11, 0x40047452, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400010025bd7000000000000b00"], 0x14}}, 0x24004084)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0)

16.52644ms ago: executing program 3 (id=638):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = open(&(0x7f00000003c0)='./file2\x00', 0x40041, 0x8c)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x127f, 0x3)

0s ago: executing program 4 (id=562):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) (async)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x7, 0x38, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$tipc(0x1e, 0x2, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="9211c0a9bd4b23b78ad3a2b489ed81782a96102f033b30b58de7d5d42a18f68899dc5fd97b9d455b812cd39a7f039605fe3e550755392577a2ff8adb7d4c0d8a27431c", 0x43}], 0x1, &(0x7f0000000240)="dca162b0e0540a7e9c7b54fe42632713be34ae2df042227a0de96edfe79f914625bf41e02deaeaef2a7278ad97392733905c5fbf73c14ff9f06c3c99c1c57dda7fdd0bcd2c87b697c0b89983c0aa83c70a34e811724d83399355db1785f97843e8c0b63163ec78a528b19f0f610f3f517e99c9a7a70949308ae38571ee", 0x7d, 0x88c0}, 0x448c4)
connect$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362) (async)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1362)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) (async)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3)
ioctl$RTC_UIE_OFF(r3, 0x7004)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480), 0x24000, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f00000004c0)={0x7, 0x9})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4010)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3}) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000007c0)={0x800, 0x3})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000800))
openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x110040, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f00000008c0)={0x4, 0x0, [{0xa, 0x4, 0x7, 0x1000, 0x5, 0x5}, {0x80000008, 0x5, 0x9, 0x7, 0x1, 0x7fff, 0x2}, {0xb, 0x1, 0x0, 0x1, 0x5, 0xf, 0x6}, {0x0, 0x4, 0x0, 0x8, 0x1ff, 0x0, 0x4b87}]})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10)
flock(r0, 0x1b)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000980)=0x1)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r7 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x9, 0x4000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80)) (async)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000c80))

kernel console output (not intermixed with test programs):

 T1085] netlink: 'syz.0.226': attribute type 1 has an invalid length.
[   62.326410][ T1087] mmap: syz.1.227 (1087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   62.589470][  T342] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   62.619506][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   62.669475][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   62.739546][  T342] usb 1-1: Using ep0 maxpacket: 16
[   62.746120][  T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.757132][  T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.759587][    T9] usb 3-1: device descriptor read/64, error -71
[   62.767886][  T342] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   62.782497][  T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.792328][  T342] usb 1-1: config 0 descriptor??
[   62.799484][   T10] usb 2-1: device descriptor read/64, error -71
[   63.009492][    T9] usb 3-1: device descriptor read/64, error -71
[   63.039654][   T10] usb 2-1: device descriptor read/64, error -71
[   63.200888][  T342] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0
[   63.215622][  T342] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0
[   63.222661][  T342] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0
[   63.229745][  T342] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0
[   63.236587][  T342] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0
[   63.245043][  T342] savu 0003:1E7D:2D5A.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[   63.249970][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   63.289514][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   63.411211][    T9] usb 3-1: device descriptor read/64, error -71
[   63.418579][ T1089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.429477][   T10] usb 2-1: device descriptor read/64, error -71
[   63.441127][ T1089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.466401][  T407] usb 1-1: USB disconnect, device number 31
[   63.489993][ T1108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.518864][ T1108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.659596][    T9] usb 3-1: device descriptor read/64, error -71
[   63.669540][   T10] usb 2-1: device descriptor read/64, error -71
[   63.769744][    T9] usb usb3-port1: attempt power cycle
[   63.771664][   T36] kauditd_printk_skb: 182 callbacks suppressed
[   63.771716][   T36] audit: type=1400 audit(1770699416.730:562): avc:  denied  { ioctl } for  pid=1090 comm="syz.2.229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.791312][   T10] usb usb2-port1: attempt power cycle
[   63.808002][   T36] audit: type=1400 audit(1770699416.730:563): avc:  denied  { ioctl } for  pid=1090 comm="syz.2.229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.838148][   T36] audit: type=1400 audit(1770699416.750:564): avc:  denied  { ioctl } for  pid=1093 comm="syz.1.230" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.862911][   T36] audit: type=1400 audit(1770699416.770:565): avc:  denied  { ioctl } for  pid=1112 comm="syz.0.236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.888049][   T36] audit: type=1400 audit(1770699416.830:566): avc:  denied  { ioctl } for  pid=1090 comm="syz.2.229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.912904][   T36] audit: type=1400 audit(1770699416.830:567): avc:  denied  { ioctl } for  pid=1090 comm="syz.2.229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.939535][  T407] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[   63.948199][   T36] audit: type=1400 audit(1770699416.900:568): avc:  denied  { ioctl } for  pid=1112 comm="syz.0.236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.009938][   T36] audit: type=1400 audit(1770699416.970:569): avc:  denied  { ioctl } for  pid=1112 comm="syz.0.236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.070204][   T36] audit: type=1400 audit(1770699417.030:570): avc:  denied  { ioctl } for  pid=1090 comm="syz.2.229" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.099451][   T36] audit: type=1400 audit(1770699417.030:571): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   64.111607][  T407] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   64.143548][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   64.151501][  T407] usb 1-1: config 0 interface 0 has no altsetting 0
[   64.158337][  T407] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[   64.168970][   T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   64.178088][  T407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.188497][    T9] usb 3-1: device descriptor read/8, error -71
[   64.197063][  T407] usb 1-1: config 0 descriptor??
[   64.207450][   T10] usb 2-1: device descriptor read/8, error -71
[   64.215381][ T1113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   64.317304][ T1117] sit0: entered promiscuous mode
[   64.324667][ T1117] netlink: 'syz.3.238': attribute type 1 has an invalid length.
[   64.325002][    T9] usb 3-1: device descriptor read/8, error -71
[   64.332834][ T1117] __nla_validate_parse: 80 callbacks suppressed
[   64.332887][ T1117] netlink: 1 bytes leftover after parsing attributes in process `syz.3.238'.
[   64.349265][   T10] usb 2-1: device descriptor read/8, error -71
[   64.480380][ T1120] No source specified
[   64.577269][ T1125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.585854][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[   64.593919][ T1125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.602877][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   64.635516][    T9] usb 3-1: device descriptor read/8, error -71
[   64.652037][   T10] usb 2-1: device descriptor read/8, error -71
[   64.697811][ T1113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'.
[   64.771153][    T9] usb 3-1: device descriptor read/8, error -71
[   64.781356][   T10] usb 2-1: device descriptor read/8, error -71
[   64.880072][    T9] usb usb3-port1: unable to enumerate USB device
[   64.889618][   T10] usb usb2-port1: unable to enumerate USB device
[   64.912080][  T407] usbhid 1-1:0.0: can't add hid device: -71
[   64.918122][  T407] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   64.927762][  T407] usb 1-1: USB disconnect, device number 32
[   65.234442][ T1131] SELinux:  policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c
[   65.244900][ T1131] SELinux: failed to load policy
[   65.321618][ T1136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.330256][ T1136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.681369][ T1158] syzkaller1: entered promiscuous mode
[   65.689433][ T1158] syzkaller1: entered allmulticast mode
[   65.881982][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[   65.934389][ T1174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.943457][ T1174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.958806][ T1176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.967605][ T1176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.979454][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   66.139535][    T9] usb 2-1: Using ep0 maxpacket: 16
[   66.139540][  T342] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[   66.154196][    T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[   66.162607][    T9] usb 2-1: config 1 has no interface number 0
[   66.168722][    T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   66.178816][    T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   66.188896][    T9] usb 2-1: config 1 interface 105 has no altsetting 0
[   66.198381][    T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   66.207668][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.215716][    T9] usb 2-1: Product: syz
[   66.220155][    T9] usb 2-1: Manufacturer: syz
[   66.224986][    T9] usb 2-1: SerialNumber: syz
[   66.231938][ T1160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   66.239558][ T1160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   66.301404][  T342] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.311360][  T342] usb 3-1: config 0 interface 0 has no altsetting 0
[   66.318054][  T342] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   66.327174][  T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.336817][  T342] usb 3-1: config 0 descriptor??
[   66.453068][ T1160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   66.453121][ T1160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232
[   66.468011][    T9] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71
[   66.490477][    T9] usb 2-1: USB disconnect, device number 31
[   66.765698][  T342] kovaplus 0003:1E7D:2D50.000D: ignoring exceeding usage max
[   66.774988][  T342] kovaplus 0003:1E7D:2D50.000D: item fetching failed at offset 6/7
[   66.783176][  T342] kovaplus 0003:1E7D:2D50.000D: parse failed
[   66.789314][  T342] kovaplus 0003:1E7D:2D50.000D: probe with driver kovaplus failed with error -22
[   66.983787][  T371] usb 3-1: USB disconnect, device number 29
[   67.256373][ T1198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'.
[   67.429313][ T1213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.439447][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[   67.446946][ T1213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.507763][ T1218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'.
[   67.522662][ T1218] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   67.622771][    T9] usb 3-1: Using ep0 maxpacket: 16
[   67.630094][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.640867][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   67.651119][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   67.666961][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   67.677552][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.686265][    T9] usb 3-1: Product: syz
[   67.691176][    T9] usb 3-1: Manufacturer: syz
[   67.695827][    T9] usb 3-1: SerialNumber: syz
[   67.911430][    T9] cdc_ncm 3-1:1.0: skipping garbage
[   67.916744][    T9] cdc_ncm 3-1:1.0: skipping garbage
[   67.923377][    T9] cdc_ncm 3-1:1.0: skipping garbage
[   67.928639][    T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[   67.929795][ T1169] Bluetooth: hci0: command 0x1003 tx timeout
[   67.941535][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   67.949053][    T9] cdc_ncm 3-1:1.0: bind() failure
[   67.976333][    T9] usb 3-1: USB disconnect, device number 30
[   68.009452][  T371] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[   68.175842][  T371] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.189541][  T371] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.206122][  T371] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   68.229130][  T371] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   68.242130][  T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.251090][  T371] usb 2-1: Product: syz
[   68.255370][  T371] usb 2-1: Manufacturer: syz
[   68.260895][  T371] usb 2-1: SerialNumber: syz
[   68.339512][   T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   68.474624][ T1226] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   68.499548][   T10] usb 1-1: Using ep0 maxpacket: 8
[   68.511141][   T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[   68.529450][   T10] usb 1-1: config 0 has no interface number 0
[   68.544008][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   68.557651][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.566644][   T10] usb 1-1: Product: syz
[   68.576669][   T10] usb 1-1: Manufacturer: syz
[   68.586048][   T10] usb 1-1: SerialNumber: syz
[   68.597905][   T10] usb 1-1: config 0 descriptor??
[   68.606226][ T1257] netlink: 'syz.3.283': attribute type 4 has an invalid length.
[   68.796208][   T36] kauditd_printk_skb: 679 callbacks suppressed
[   68.796229][   T36] audit: type=1400 audit(1770699421.750:1251): avc:  denied  { write } for  pid=1263 comm="syz.3.284" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   68.841933][   T36] audit: type=1400 audit(1770699421.750:1252): avc:  denied  { create } for  pid=1263 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   68.843622][ T1236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.879892][ T1236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.888537][   T10] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[   68.895516][   T10] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized!
[   68.902682][  T357] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[   68.913706][   T36] audit: type=1400 audit(1770699421.750:1253): avc:  denied  { write } for  pid=1263 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   68.940860][   T10] usb 1-1: USB disconnect, device number 33
[   68.947704][   T36] audit: type=1400 audit(1770699421.790:1254): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   69.000299][   T36] audit: type=1400 audit(1770699421.790:1255): avc:  denied  { open } for  pid=295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   69.024675][   T36] audit: type=1400 audit(1770699421.790:1256): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   69.033530][ T1266] syzkaller0: entered promiscuous mode
[   69.050261][   T36] audit: type=1400 audit(1770699421.800:1257): avc:  denied  { ioctl } for  pid=1254 comm="syz.2.282" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.066271][ T1266] syzkaller0: entered allmulticast mode
[   69.086615][   T36] audit: type=1400 audit(1770699421.800:1258): avc:  denied  { read write } for  pid=1235 comm="syz.0.276" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.112697][ T1226] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   69.119578][  T357] usb 3-1: Using ep0 maxpacket: 32
[   69.129303][  T357] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.129621][   T36] audit: type=1400 audit(1770699421.800:1259): avc:  denied  { open } for  pid=1235 comm="syz.0.276" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.151474][  T357] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.179057][   T36] audit: type=1400 audit(1770699421.800:1260): avc:  denied  { ioctl } for  pid=1235 comm="syz.0.276" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.206946][  T357] usb 3-1: config 0 interface 0 has no altsetting 0
[   69.214739][  T357] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[   69.224923][  T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.245480][  T357] usb 3-1: config 0 descriptor??
[   69.325748][  T371] cdc_ncm 2-1:1.0: bind() failure
[   69.332418][  T371] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[   69.340897][  T371] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[   69.362152][  T371] usb 2-1: USB disconnect, device number 32
[   69.393655][ T1269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.402376][ T1269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.427196][ T1269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.449707][ T1269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.657071][  T357] uclogic 0003:5543:0005.000E: No inputs registered, leaving
[   69.667206][  T357] uclogic 0003:5543:0005.000E: hidraw0: USB HID v0.04 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0
[   69.749514][  T342] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   69.863000][ T1259] random: crng reseeded on system resumption
[   69.886292][   T10] usb 3-1: USB disconnect, device number 31
[   69.919165][  T342] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.935906][  T342] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.959432][  T342] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   69.984756][  T342] usb 1-1: config 0 interface 0 has no altsetting 0
[   69.992198][  T342] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[   70.003289][  T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.014338][  T342] usb 1-1: config 0 descriptor??
[   70.412977][  T342] usbhid 1-1:0.0: can't add hid device: -71
[   70.419025][  T342] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   70.458311][  T342] usb 1-1: USB disconnect, device number 34
[   70.850071][ T1313] x_tables: duplicate underflow at hook 4
[   70.945443][ T1318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.954392][ T1318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.999467][  T342] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   71.169920][  T342] usb 1-1: Using ep0 maxpacket: 16
[   71.185809][  T342] usb 1-1: config 1 has too many interfaces: 33, using maximum allowed: 32
[   71.200126][  T342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 33
[   71.209233][  T342] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.232247][ T1319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.244895][  T342] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8
[   71.256016][ T1319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.278693][  T342] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   71.292270][  T342] usb 1-1: config 1 interface 0 has no altsetting 0
[   71.300524][  T342] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.310175][  T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   71.323816][  T342] usb 1-1: SerialNumber: syz
[   71.336600][ T1309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.377438][ T1330] netlink: 'syz.2.304': attribute type 46 has an invalid length.
[   71.385584][ T1330] netlink: 'syz.2.304': attribute type 28 has an invalid length.
[   71.419470][  T371] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[   71.548894][ T1309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.571044][  T371] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   71.579443][  T371] usb 2-1: config 0 has no interface number 0
[   71.585603][  T371] usb 2-1: config 0 interface 41 has no altsetting 0
[   71.594432][  T371] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   71.603659][  T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.611734][  T371] usb 2-1: Product: syz
[   71.615975][  T371] usb 2-1: Manufacturer: syz
[   71.620654][  T371] usb 2-1: SerialNumber: syz
[   71.626650][  T371] usb 2-1: config 0 descriptor??
[   71.966348][  T342] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[   72.050322][  T371] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[   72.070128][  T371] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   72.091662][  T371] usb 2-1: USB disconnect, device number 33
[   72.409467][   T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[   72.570405][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   72.585188][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   72.599904][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   72.616009][  T407] usb 1-1: USB disconnect, device number 35
[   72.627108][  T407] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[   72.639197][   T10] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[   72.649083][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.684033][   T10] usb 3-1: config 0 descriptor??
[   72.698916][ T1337] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[   73.118951][ T1337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.135714][ T1366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'.
[   73.149629][ T1337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.381931][ T1393] SELinux:  policydb magic number 0x3000d02 does not match expected magic number 0xf97cff8c
[   73.392410][ T1393] SELinux: failed to load policy
[   73.459075][ T1337] can0: slcan on ttyS3.
[   73.493785][ T1397] kvm: kvm [1394]: vcpu6, guest rIP: 0xfff0 Unhandled RDMSR(0x4000006f)
[   73.506510][ T1397] overlay: Bad value for 'verity'
[   73.513006][ T1337] can0 (unregistered): slcan off ttyS3.
[   73.522658][   T10] wacom 0003:056A:005B.000F: unknown main item tag 0x0
[   73.530661][   T10] wacom 0003:056A:005B.000F: unknown main item tag 0x0
[   73.537769][   T10] wacom 0003:056A:005B.000F: item fetching failed at offset 2/5
[   73.546891][   T10] wacom 0003:056A:005B.000F: parse failed
[   73.553402][   T10] wacom 0003:056A:005B.000F: probe with driver wacom failed with error -22
[   73.732743][  T357] usb 3-1: USB disconnect, device number 32
[   73.799462][   T36] kauditd_printk_skb: 951 callbacks suppressed
[   73.799482][   T36] audit: type=1400 audit(1770699426.750:2212): avc:  denied  { write } for  pid=1402 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.827007][   T36] audit: type=1400 audit(1770699426.760:2213): avc:  denied  { read } for  pid=1402 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.848078][   T36] audit: type=1400 audit(1770699426.760:2214): avc:  denied  { write } for  pid=1402 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.909567][   T36] audit: type=1400 audit(1770699426.870:2215): avc:  denied  { read write } for  pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   73.939490][   T36] audit: type=1400 audit(1770699426.870:2216): avc:  denied  { read write open } for  pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   73.978564][   T36] audit: type=1400 audit(1770699426.870:2217): avc:  denied  { ioctl } for  pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.004461][   T36] audit: type=1400 audit(1770699426.890:2218): avc:  denied  { create } for  pid=1406 comm="syz.1.317" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   74.026090][   T36] audit: type=1400 audit(1770699426.890:2219): avc:  denied  { ioctl } for  pid=1406 comm="syz.1.317" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12219 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   74.052886][   T36] audit: type=1400 audit(1770699426.890:2220): avc:  denied  { create } for  pid=1406 comm="syz.1.317" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   74.074430][   T36] audit: type=1400 audit(1770699426.890:2221): avc:  denied  { ioctl } for  pid=1406 comm="syz.1.317" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12220 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   74.125473][ T1411] raw_sendmsg: syz.3.318 forgot to set AF_INET. Fix it!
[   74.179444][  T357] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[   74.319467][  T357] usb 2-1: device descriptor read/64, error -71
[   74.572342][  T357] usb 2-1: device descriptor read/64, error -71
[   74.579437][  T407] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[   74.629447][  T371] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   74.632295][ T1433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.650449][ T1433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.740446][  T407] usb 3-1: not running at top speed; connect to a high speed hub
[   74.749026][  T407] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   74.758199][  T407] usb 3-1: config 1 has no interface number 1
[   74.764449][  T407] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   74.778993][  T407] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   74.788122][  T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.796340][  T407] usb 3-1: Product: syz
[   74.800653][  T407] usb 3-1: Manufacturer: syz
[   74.805438][  T407] usb 3-1: SerialNumber: syz
[   74.809612][  T371] usb 1-1: Using ep0 maxpacket: 8
[   74.820317][  T357] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[   74.829457][  T371] usb 1-1: unable to get BOS descriptor or descriptor too short
[   74.839581][  T371] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[   74.848000][  T371] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   74.858308][  T371] usb 1-1: config 4 has no interface number 0
[   74.866654][  T371] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[   74.875969][  T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.884141][  T371] usb 1-1: Product: syz
[   74.888357][  T371] usb 1-1: Manufacturer: syz
[   74.893140][  T371] usb 1-1: SerialNumber: syz
[   74.969488][  T357] usb 2-1: device descriptor read/64, error -71
[   75.018745][ T1422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.027960][ T1422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.031994][ T1420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.046942][ T1420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.108410][  T371] usb 1-1: Found UVC 0.00 device syz (04f2:b746)
[   75.119653][  T371] usb 1-1: No valid video chain found.
[   75.129444][  T371] usb 1-1: USB disconnect, device number 36
[   75.210067][  T357] usb 2-1: device descriptor read/64, error -71
[   75.320217][  T357] usb usb2-port1: attempt power cycle
[   75.659443][  T357] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[   75.691464][  T357] usb 2-1: device descriptor read/8, error -71
[   75.729101][ T1439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.737763][ T1439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.786494][ T1444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.796309][ T1444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.821067][  T357] usb 2-1: device descriptor read/8, error -71
[   75.889444][  T408] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[   76.040471][  T408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.051603][  T408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.061453][  T408] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   76.069578][  T357] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[   76.070888][  T408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.087698][  T408] usb 1-1: config 0 descriptor??
[   76.103536][  T357] usb 2-1: device descriptor read/8, error -71
[   76.241648][  T357] usb 2-1: device descriptor read/8, error -71
[   76.351060][  T357] usb usb2-port1: unable to enumerate USB device
[   76.389955][ T1448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.401084][ T1448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.500646][  T408] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[   76.510203][  T408] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[   76.700647][  T408] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE
[   77.023918][ T1454] netlink: 'syz.3.333': attribute type 10 has an invalid length.
[   77.061663][ T1456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.071430][ T1456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.110680][ T1456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.119296][ T1456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.324140][  T407] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[   77.349448][  T357] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[   77.350679][  T407] usb 3-1: USB disconnect, device number 33
[   77.458949][  T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   77.510272][ T1437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.518925][ T1437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.526947][  T357] usb 2-1: Using ep0 maxpacket: 32
[   77.536855][  T371] usb 1-1: USB disconnect, device number 37
[   77.548683][  T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.560666][  T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.572357][  T357] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   77.582915][  T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.601089][  T357] usb 2-1: config 0 descriptor??
[   77.612037][  T357] hub 2-1:0.0: USB hub found
[   77.729524][  T407] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[   77.812479][  T357] hub 2-1:0.0: 3 ports detected
[   77.879466][  T407] usb 3-1: Using ep0 maxpacket: 32
[   77.886788][  T407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.899052][  T407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.909812][  T407] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   77.923909][  T407] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   77.934251][  T407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.945457][  T407] usb 3-1: config 0 descriptor??
[   78.167476][ T1459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.188127][ T1459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.319459][  T371] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[   78.419472][ T1459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.430459][  T357] usb 2-1: USB disconnect, device number 38
[   78.452532][ T1459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.489482][  T371] usb 1-1: Using ep0 maxpacket: 16
[   78.515898][  T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.543893][  T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.566599][  T371] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[   78.575813][  T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.589543][  T371] usb 1-1: config 0 descriptor??
[   78.697856][  T407] usbhid 3-1:0.0: can't add hid device: -71
[   78.717714][  T407] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   78.735182][  T407] usb 3-1: USB disconnect, device number 34
[   78.814712][ T1468] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[   78.862717][   T36] kauditd_printk_skb: 327 callbacks suppressed
[   78.862737][   T36] audit: type=1400 audit(1770699431.820:2549): avc:  denied  { read write } for  pid=1467 comm="syz.3.338" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   78.864538][ T1468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.889590][   T36] audit: type=1400 audit(1770699431.820:2550): avc:  denied  { open } for  pid=1467 comm="syz.3.338" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   78.894005][ T1468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.927022][   T36] audit: type=1400 audit(1770699431.820:2551): avc:  denied  { ioctl } for  pid=1467 comm="syz.3.338" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   78.957132][   T36] audit: type=1400 audit(1770699431.900:2552): avc:  denied  { create } for  pid=1467 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   78.982156][   T36] audit: type=1400 audit(1770699431.940:2553): avc:  denied  { read write } for  pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   79.007111][   T36] audit: type=1400 audit(1770699431.940:2554): avc:  denied  { read write open } for  pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   79.014324][ T1471] deleting an unspecified loop device is not supported.
[   79.038565][   T36] audit: type=1400 audit(1770699431.940:2555): avc:  denied  { ioctl } for  pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   79.065330][  T371] playstation 0003:054C:05C4.0011: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0
[   79.078023][   T36] audit: type=1400 audit(1770699431.960:2556): avc:  denied  { ioctl } for  pid=1465 comm="syz.0.337" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   79.108365][   T36] audit: type=1400 audit(1770699431.960:2557): avc:  denied  { ioctl } for  pid=1465 comm="syz.0.337" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   79.134165][   T36] audit: type=1400 audit(1770699431.970:2558): avc:  denied  { create } for  pid=1470 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.233216][  T371] playstation 0003:054C:05C4.0011: Invalid byte count transferred, expected 16 got 0
[   79.242896][  T371] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 pairing info: -22
[   79.252376][  T371] playstation 0003:054C:05C4.0011: Failed to get MAC address from DualShock4
[   79.261338][  T371] playstation 0003:054C:05C4.0011: Failed to create dualshock4.
[   79.270367][  T371] playstation 0003:054C:05C4.0011: probe with driver playstation failed with error -22
[   79.306939][  T407] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[   79.459433][  T407] usb 2-1: Using ep0 maxpacket: 32
[   79.470764][  T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.497280][  T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.507228][  T407] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   79.517666][  T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.531652][  T407] usb 2-1: config 0 descriptor??
[   79.546824][  T407] hub 2-1:0.0: USB hub found
[   79.706165][ T1485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   79.706208][ T1485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312
[   79.750165][  T407] hub 2-1:0.0: 1 port detected
[   79.900953][ T1492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.917573][ T1492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.974850][  T407] hub 2-1:0.0: hub_hub_status failed (err = -71)
[   79.989463][  T407] hub 2-1:0.0: config failed, can't get hub status (err -71)
[   80.009451][  T407] usbhid 2-1:0.0: can't add hid device: -71
[   80.019946][  T407] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   80.060320][  T407] usb 2-1: USB disconnect, device number 39
[   80.193975][ T1500] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   80.208316][ T1500] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   80.426762][ T1511] netlink: 'syz.2.351': attribute type 4 has an invalid length.
[   80.617853][ T1520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.626579][ T1520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.639433][    T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[   80.801772][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   80.813339][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024
[   80.826732][    T9] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[   80.835928][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.844007][    T9] usb 2-1: Product: syz
[   80.848232][    T9] usb 2-1: Manufacturer: syz
[   80.852899][    T9] usb 2-1: SerialNumber: syz
[   80.860233][    T9] usb 2-1: config 0 descriptor??
[   80.869977][    T9] usb 2-1: Found UVC 0.00 device syz (18ec:3288)
[   80.876387][    T9] usb 2-1: No valid video chain found.
[   81.078735][  T408] usb 2-1: USB disconnect, device number 40
[   81.189023][  T407] usb 1-1: USB disconnect, device number 38
[   81.249476][    T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[   81.419466][    T9] usb 3-1: Using ep0 maxpacket: 8
[   81.427244][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   81.436972][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   81.451292][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   81.461823][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   81.472257][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[   81.484013][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[   81.500543][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   81.520460][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 128
[   81.534372][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   81.549822][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.566163][    T9] usb 3-1: Product: syz
[   81.570562][    T9] usb 3-1: Manufacturer: syz
[   81.575320][    T9] usb 3-1: SerialNumber: syz
[   81.581446][    T9] usb 3-1: config 0 descriptor??
[   81.598598][ T1526] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[   81.607391][ T1526] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[   81.627450][    T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12
[   81.688635][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   81.759518][  T371] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[   81.820471][   T31] usb 3-1: USB disconnect, device number 35
[   81.859642][  T357] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[   81.909564][  T371] usb 1-1: Using ep0 maxpacket: 8
[   81.916222][  T371] usb 1-1: config index 0 descriptor too short (expected 30482, got 18)
[   81.924953][  T371] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[   81.933917][  T371] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101
[   81.945439][  T371] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[   81.954628][  T371] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[   81.963236][  T371] usb 1-1: Product: syz
[   81.967532][  T371] usb 1-1: Manufacturer: syz
[   81.973534][  T371] usb 1-1: config 0 descriptor??
[   81.980799][  T371] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   81.988924][  T371] usb 1-1: Detected FT2232C/D
[   82.020908][  T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.032002][  T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.041832][  T357] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   82.054879][  T357] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   82.064094][  T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.073571][  T357] usb 2-1: config 0 descriptor??
[   82.195594][  T371] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   82.205012][  T371] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   82.216946][  T371] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   82.226355][  T371] usb 1-1: USB disconnect, device number 39
[   82.233763][  T371] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   82.244019][  T371] ftdi_sio 1-1:0.0: device disconnected
[   82.286911][  T357] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[   82.328756][  T357] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   82.370388][  T357] usb 2-1: USB disconnect, device number 41
[   82.474846][ T1540] fido_id[1540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   82.732523][ T1548] tipc: Can't bind to reserved service type 1
[   82.839438][  T407] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[   82.868185][ T1558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.366'.
[   82.880242][ T1558] netlink: 'syz.0.366': attribute type 4 has an invalid length.
[   82.926974][ T1560] netlink: 108 bytes leftover after parsing attributes in process `syz.0.367'.
[   82.939253][    C0] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96
[   82.989445][  T407] usb 3-1: Using ep0 maxpacket: 16
[   82.996695][  T407] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[   83.005920][  T407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.019364][  T407] usb 3-1: config 0 descriptor??
[   83.028546][  T407] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   83.036762][  T407] usb 3-1: Detected FT2233HP
[   83.231637][ T1566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.241046][ T1566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.251150][  T407] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   83.258514][  T407] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   83.266991][  T407] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   83.278174][  T407] usb 3-1: USB disconnect, device number 36
[   83.286243][  T407] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   83.295835][  T407] ftdi_sio 3-1:0.0: device disconnected
[   83.309479][  T357] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[   83.471130][  T357] usb 2-1: unable to get BOS descriptor or descriptor too short
[   83.480077][  T357] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.490298][  T357] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[   83.506659][  T357] usb 2-1: string descriptor 0 read error: -22
[   83.512961][  T357] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   83.522069][  T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.533853][  T357] usb 2-1: config 0 descriptor??
[   83.553955][  T357] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[   83.595554][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   83.764555][  T357] usb 2-1: USB disconnect, device number 42
[   83.869417][   T36] kauditd_printk_skb: 536 callbacks suppressed
[   83.869434][   T36] audit: type=1400 audit(1770699436.820:3095): avc:  denied  { read } for  pid=1576 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   83.952038][   T36] audit: type=1400 audit(1770699436.830:3096): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   84.004276][   T36] audit: type=1400 audit(1770699436.830:3097): avc:  denied  { read write open } for  pid=294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   84.079431][   T36] audit: type=1400 audit(1770699436.830:3098): avc:  denied  { ioctl } for  pid=294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   84.115229][ T1587] audit: audit_backlog=65 > audit_backlog_limit=64
[   84.122813][ T1583] audit: audit_backlog=65 > audit_backlog_limit=64
[   84.139489][ T1587] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   84.147581][   T36] audit: type=1400 audit(1770699436.830:3099): avc:  denied  { read } for  pid=1576 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   84.159572][ T1587] audit: backlog limit exceeded
[   84.174426][   T36] audit: type=1400 audit(1770699436.840:3100): avc:  denied  { write } for  pid=1576 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   84.200568][ T1588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.217487][ T1588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.309441][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[   84.360505][ T1595] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   84.373317][ T1595] overlayfs: missing 'lowerdir'
[   84.417180][ T1598] futex_wake_op: syz.0.379 tries to shift op by 32; fix this program
[   84.479451][    T9] usb 3-1: device descriptor read/64, error -71
[   84.729527][    T9] usb 3-1: device descriptor read/64, error -71
[   84.824949][ T1610] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.385'.
[   84.859496][  T371] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[   84.920739][ T1616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.929441][ T1616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.969495][    T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[   85.021189][  T371] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.031514][  T371] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.044498][  T371] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.053628][  T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.061668][  T371] usb 1-1: Product: syz
[   85.065858][  T371] usb 1-1: Manufacturer: syz
[   85.070774][  T371] usb 1-1: SerialNumber: syz
[   85.084287][  T371] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[   85.091787][  T371] cdc_ncm 1-1:1.0: bind() failure
[   85.109940][    T9] usb 3-1: device descriptor read/64, error -71
[   85.349659][    T9] usb 3-1: device descriptor read/64, error -71
[   85.461302][    T9] usb usb3-port1: attempt power cycle
[   85.663421][ T1633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.672188][ T1633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.799538][    T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[   85.821042][    T9] usb 3-1: device descriptor read/8, error -71
[   85.950972][    T9] usb 3-1: device descriptor read/8, error -71
[   86.189496][    T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[   86.211192][    T9] usb 3-1: device descriptor read/8, error -71
[   86.320191][  T371] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[   86.347559][    T9] usb 3-1: device descriptor read/8, error -71
[   86.469553][    T9] usb usb3-port1: unable to enumerate USB device
[   86.489449][  T371] usb 2-1: Using ep0 maxpacket: 32
[   86.498967][  T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.511115][  T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.521915][  T371] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   86.531627][  T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.546166][  T371] usb 2-1: config 0 descriptor??
[   86.559468][  T371] hub 2-1:0.0: USB hub found
[   86.595885][ T1647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.609617][ T1647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.640550][ T1647] fuse: Unknown parameter 'NâÑø'
[   86.754661][  T371] hub 2-1:0.0: 6 ports detected
[   86.760282][  T371] hub 2-1:0.0: insufficient power available to use all downstream ports
[   87.159861][  T371] usb 2-1: USB disconnect, device number 43
[   87.471147][ T1662] syzkaller0: entered promiscuous mode
[   87.476804][ T1662] syzkaller0: entered allmulticast mode
[   87.594982][  T371] usb 1-1: USB disconnect, device number 40
[   87.648860][ T1666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.662981][ T1666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.799486][  T357] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[   87.949524][  T357] usb 3-1: Using ep0 maxpacket: 16
[   87.956358][  T357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.966914][  T371] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[   87.974658][  T357] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   87.983579][   T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[   87.993566][  T357] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.002820][  T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.011835][  T357] usb 3-1: Product: syz
[   88.016120][  T357] usb 3-1: Manufacturer: syz
[   88.020879][  T357] usb 3-1: SerialNumber: syz
[   88.079685][ T1676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.089263][ T1676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.119503][   T31] usb 2-1: device descriptor read/64, error -71
[   88.141422][  T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11
[   88.153579][  T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49672, setting to 1024
[   88.164964][  T371] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   88.174110][  T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.183584][  T371] usb 1-1: config 0 descriptor??
[   88.229542][ T1664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'.
[   88.244760][  T357] usb 3-1: 0:2 : does not exist
[   88.251807][  T357] usb 3-1: unit 9 not found!
[   88.258670][  T357] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4)
[   88.269761][  T357] usb 3-1: USB disconnect, device number 41
[   88.303270][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   88.379441][   T31] usb 2-1: device descriptor read/64, error -71
[   88.593824][  T371] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor
[   88.604188][  T371] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input17
[   88.621671][   T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[   88.664670][ T1680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.674478][ T1680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.696918][  T371] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   88.769470][   T31] usb 2-1: device descriptor read/64, error -71
[   88.880110][   T36] kauditd_printk_skb: 503 callbacks suppressed
[   88.880128][   T36] audit: type=1400 audit(1770699441.840:3572): avc:  denied  { ioctl } for  pid=1673 comm="syz.1.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   88.922479][   T36] audit: type=1400 audit(1770699441.840:3573): avc:  denied  { ioctl } for  pid=1673 comm="syz.1.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   88.947831][    C1] usb 1-1: input irq status -75 received
[   88.949850][   T36] audit: type=1400 audit(1770699441.870:3574): avc:  denied  { ioctl } for  pid=1673 comm="syz.1.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   88.982416][   T36] audit: type=1400 audit(1770699441.880:3575): avc:  denied  { ioctl } for  pid=1673 comm="syz.1.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.008176][   T36] audit: type=1400 audit(1770699441.880:3576): avc:  denied  { ioctl } for  pid=1673 comm="syz.1.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.059454][   T31] usb 2-1: device descriptor read/64, error -71
[   89.066069][   T36] audit: type=1400 audit(1770699441.890:3577): avc:  denied  { ioctl } for  pid=1673 comm="syz.1.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.104075][   T36] audit: type=1400 audit(1770699441.890:3578): avc:  denied  { ioctl } for  pid=1673 comm="syz.1.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.129608][   T36] audit: type=1400 audit(1770699441.900:3579): avc:  denied  { ioctl } for  pid=1665 comm="syz.0.404" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.159911][   T36] audit: type=1400 audit(1770699441.960:3580): avc:  denied  { ioctl } for  pid=1673 comm="syz.1.406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.171331][   T31] usb usb2-port1: attempt power cycle
[   89.185034][   T36] audit: type=1400 audit(1770699442.000:3581): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   89.266095][ T1692] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=1692 comm=syz.3.412
[   89.327027][ T1692] netlink: 104 bytes leftover after parsing attributes in process `syz.3.412'.
[   89.559503][   T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[   89.581088][   T31] usb 2-1: device descriptor read/8, error -71
[   89.709447][  T357] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[   89.718398][   T31] usb 2-1: device descriptor read/8, error -71
[   89.860596][  T357] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.872551][  T357] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   89.882668][  T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.890747][  T357] usb 3-1: Product: syz
[   89.895058][  T357] usb 3-1: Manufacturer: syz
[   89.899836][  T357] usb 3-1: SerialNumber: syz
[   89.907067][  T357] usb 3-1: config 0 descriptor??
[   89.959498][   T31] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[   89.980924][   T31] usb 2-1: device descriptor read/8, error -71
[   90.110948][   T31] usb 2-1: device descriptor read/8, error -71
[   90.119662][  T357] usb 3-1: bad CDC descriptors
[   90.136128][  T357] usb 3-1: unsupported MDLM descriptors
[   90.151270][  T357] usb 3-1: USB disconnect, device number 42
[   90.249574][   T31] usb usb2-port1: unable to enumerate USB device
[   90.356848][ T1704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1704 comm=syz.3.416
[   90.519542][ T1713] netlink: 68 bytes leftover after parsing attributes in process `syz.3.418'.
[   90.663919][    T9] usb 1-1: USB disconnect, device number 41
[   90.903523][ T1735] can0: slcan on ttyS3.
[   90.959452][ T1735] can0 (unregistered): slcan off ttyS3.
[   91.000079][ T1742] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   91.030407][ T1743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.060834][ T1743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.292494][ T1758] can0: slcan on ptm1.
[   91.360442][ T1761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'.
[   91.443043][ T1767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'.
[   91.704321][ T1786] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   91.786274][ T1754] can0 (unregistered): slcan off ptm1.
[   91.859436][   T31] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[   92.039445][   T31] usb 3-1: Using ep0 maxpacket: 32
[   92.065912][   T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   92.093139][   T31] usb 3-1: config 0 has no interface number 0
[   92.106736][   T31] usb 3-1: config 0 interface 184 has no altsetting 0
[   92.137198][   T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   92.147054][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.168908][   T31] usb 3-1: Product: syz
[   92.174622][   T31] usb 3-1: Manufacturer: syz
[   92.180176][   T31] usb 3-1: SerialNumber: syz
[   92.189076][   T31] usb 3-1: config 0 descriptor??
[   92.203095][   T31] smsc75xx v1.0.0
[   92.399501][  T357] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[   92.559449][  T357] usb 1-1: Using ep0 maxpacket: 16
[   92.567324][  T357] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   92.576496][  T357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.584612][  T357] usb 1-1: Product: syz
[   92.588822][  T357] usb 1-1: Manufacturer: syz
[   92.593681][  T357] usb 1-1: SerialNumber: syz
[   92.612599][  T357] r8152-cfgselector 1-1: Unknown version 0x0000
[   92.623593][  T357] r8152-cfgselector 1-1: config 0 descriptor??
[   92.821953][   T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   92.842307][   T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   92.859453][   T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   92.870010][   T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   92.879458][   T31] usb 3-1: USB disconnect, device number 43
[   92.972510][ T1836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.981265][ T1836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.056569][    T9] r8152-cfgselector 1-1: USB disconnect, device number 42
[   93.109457][  T371] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[   93.259501][  T371] usb 2-1: Using ep0 maxpacket: 16
[   93.266113][  T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.278109][  T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.288785][  T371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   93.302663][  T371] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   93.312981][  T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.329718][  T371] usb 2-1: config 0 descriptor??
[   93.542385][ T1834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.552399][ T1834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.805421][  T371] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0014/input/input18
[   93.820182][ T1856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'.
[   93.850609][  T371] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   93.893337][   T36] kauditd_printk_skb: 1007 callbacks suppressed
[   93.893356][   T36] audit: type=1400 audit(1770699446.850:4589): avc:  denied  { ioctl } for  pid=1849 comm="syz.0.456" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   93.949438][   T36] audit: type=1400 audit(1770699446.860:4590): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=686 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   93.979438][   T31] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[   93.988243][   T36] audit: type=1400 audit(1770699446.860:4591): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=686 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   93.989545][  T668] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[   94.021572][   T36] audit: type=1400 audit(1770699446.890:4592): avc:  denied  { read } for  pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=686 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.069565][  T407] usb 2-1: USB disconnect, device number 48
[   94.082650][   T36] audit: type=1400 audit(1770699446.890:4593): avc:  denied  { read open } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=686 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.126173][   T36] audit: type=1400 audit(1770699446.890:4594): avc:  denied  { ioctl } for  pid=1853 comm="syz.2.458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.152444][   T36] audit: type=1400 audit(1770699446.940:4595): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=686 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.153194][ T1863] overlayfs: missing 'lowerdir'
[   94.180232][   T36] audit: type=1400 audit(1770699446.940:4596): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=686 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.211032][  T668] usb 3-1: device descriptor read/64, error -71
[   94.219749][   T31] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[   94.227820][   T31] usb 1-1: config 1 has no interface number 0
[   94.243889][   T36] audit: type=1400 audit(1770699447.000:4597): avc:  denied  { ioctl } for  pid=1849 comm="syz.0.456" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.255711][   T31] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[   94.283677][   T36] audit: type=1400 audit(1770699447.010:4598): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   94.329419][   T31] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[   94.352550][ T1866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.361034][   T31] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   94.370021][ T1866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.387152][ T1866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.393492][   T31] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[   94.397057][ T1866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.416091][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.425124][   T31] usb 1-1: Product: syz
[   94.429325][   T31] usb 1-1: Manufacturer: syz
[   94.434046][   T31] usb 1-1: SerialNumber: syz
[   94.446437][ T1851] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   94.453898][  T668] usb 3-1: device descriptor read/64, error -71
[   94.461472][ T1851] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   94.699512][  T668] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[   94.829475][  T668] usb 3-1: device descriptor read/64, error -71
[   95.042538][ T1882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.051676][ T1882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.069487][  T668] usb 3-1: device descriptor read/64, error -71
[   95.189943][  T668] usb usb3-port1: attempt power cycle
[   95.529540][  T668] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[   95.551099][  T668] usb 3-1: device descriptor read/8, error -71
[   95.690065][  T668] usb 3-1: device descriptor read/8, error -71
[   95.834228][ T1895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.851185][ T1895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.949524][  T668] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[   95.971170][  T668] usb 3-1: device descriptor read/8, error -71
[   96.101564][  T668] usb 3-1: device descriptor read/8, error -71
[   96.172218][ T1909] netlink: 'syz.1.477': attribute type 16 has an invalid length.
[   96.180320][ T1909] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.477'.
[   96.209578][  T668] usb usb3-port1: unable to enumerate USB device
[   96.429432][    T9] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[   96.592023][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[   96.610633][    T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.629490][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[   96.645238][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[   96.658424][ T1920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.664846][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.683465][    T9] usb 2-1: Product: syz
[   96.687839][    T9] usb 2-1: Manufacturer: syz
[   96.693294][    T9] usb 2-1: SerialNumber: syz
[   96.694843][  T668] usb 1-1: USB disconnect, device number 43
[   96.704412][ T1920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.737405][ T1923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.764987][ T1923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.915480][    T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[   96.931207][    T9] usb 2-1: USB disconnect, device number 49
[   97.101057][ T1934] netlink: 'syz.0.484': attribute type 4 has an invalid length.
[   97.129508][  T668] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[   97.283953][  T668] usb 3-1: Using ep0 maxpacket: 16
[   97.293791][  T668] usb 3-1: unable to get BOS descriptor or descriptor too short
[   97.309947][  T668] usb 3-1: unable to read config index 0 descriptor/start: -71
[   97.323071][  T668] usb 3-1: can't read configurations, error -71
[   97.487833][ T1945] netlink: 'syz.1.488': attribute type 4 has an invalid length.
[   97.495703][ T1945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[   97.602838][ T1954] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000008'
[   97.607402][ T1953] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000008'
[   97.761699][ T1958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'.
[   97.799481][  T371] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[   97.879482][  T407] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[   97.976627][  T371] usb 1-1: config 127 has an invalid interface number: 201 but max is 0
[   97.987656][  T371] usb 1-1: config 127 has no interface number 0
[   97.994056][  T371] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=98.9f
[   98.003422][  T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.041835][  T407] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[   98.052907][  T407] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.064123][  T407] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.073953][  T407] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   98.087065][  T407] usb 2-1: config 0 interface 0 has no altsetting 0
[   98.093896][  T407] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[   98.107930][  T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.118196][  T407] usb 2-1: config 0 descriptor??
[   98.171442][  T668] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[   98.232151][  T371] usb 1-1: string descriptor 0 read error: -71
[   98.249917][  T371] dm9601 1-1:127.201: probe with driver dm9601 failed with error -22
[   98.267817][  T371] sr9700 1-1:127.201: probe with driver sr9700 failed with error -22
[   98.279903][  T371] usb 1-1: USB disconnect, device number 44
[   98.339440][  T668] usb 3-1: Using ep0 maxpacket: 32
[   98.348511][  T668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.360728][  T668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.371267][  T668] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   98.381080][  T668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.391305][  T668] usb 3-1: config 0 descriptor??
[   98.420962][  T668] hub 3-1:0.0: USB hub found
[   98.603770][  T668] hub 3-1:0.0: 1 port detected
[   98.690152][  T407] ryos 0003:1E7D:3138.0015: item fetching failed at offset 3/5
[   98.697970][  T407] ryos 0003:1E7D:3138.0015: parse failed
[   98.704809][  T407] ryos 0003:1E7D:3138.0015: probe with driver ryos failed with error -22
[   98.922127][   T36] kauditd_printk_skb: 777 callbacks suppressed
[   98.922146][   T36] audit: type=1400 audit(1770699451.880:5376): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   98.952509][  T371] usb 2-1: USB disconnect, device number 50
[   98.987837][   T36] audit: type=1400 audit(1770699451.880:5377): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.018459][   T36] audit: type=1400 audit(1770699451.880:5378): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.021147][ T1973] netlink: 72 bytes leftover after parsing attributes in process `syz.0.500'.
[   99.047236][   T36] audit: type=1400 audit(1770699451.980:5379): avc:  denied  { create } for  pid=1972 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   99.108078][   T36] audit: type=1400 audit(1770699451.980:5380): avc:  denied  { ioctl } for  pid=1960 comm="syz.2.495" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   99.135742][   T36] audit: type=1400 audit(1770699451.980:5381): avc:  denied  { ioctl } for  pid=1960 comm="syz.2.495" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   99.169213][   T36] audit: type=1400 audit(1770699451.980:5382): avc:  denied  { write } for  pid=1972 comm="syz.0.500" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   99.194291][   T36] audit: type=1400 audit(1770699451.980:5383): avc:  denied  { open } for  pid=1972 comm="syz.0.500" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   99.220141][   T36] audit: type=1400 audit(1770699451.980:5384): avc:  denied  { write } for  pid=1972 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   99.223883][   T31] hub 3-1:0.0: activate --> -90
[   99.241058][   T36] audit: type=1400 audit(1770699451.980:5385): avc:  denied  { write } for  pid=1972 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   99.319443][  T668] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[   99.335844][ T1978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.345951][ T1978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.469453][  T668] usb 1-1: Using ep0 maxpacket: 8
[   99.477937][  T668] usb 1-1: unable to get BOS descriptor or descriptor too short
[   99.487256][  T668] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   99.496075][  T668] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.506335][  T668] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   99.515387][  T668] usb 1-1: config 1 has no interface number 1
[   99.521861][  T668] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   99.548629][  T668] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   99.562048][  T668] usb 1-1: config 1 interface 2 has no altsetting 0
[   99.571940][  T668] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   99.581703][  T668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.589844][  T668] usb 1-1: Product: syz
[   99.594172][  T668] usb 1-1: Manufacturer: syz
[   99.598833][  T668] usb 1-1: SerialNumber: syz
[   99.815548][  T668] usb 1-1: USB disconnect, device number 45
[   99.860689][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   99.922959][  T371] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  100.044264][ T1993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'.
[  100.069460][  T371] usb 2-1: device descriptor read/64, error -71
[  100.257899][ T1999] 9pnet_fd: Insufficient options for proto=fd
[  100.309437][  T371] usb 2-1: device descriptor read/64, error -71
[  100.489841][   T31] usb 3-1-port1: config error
[  100.497407][   T31] usb 3-1-port1: cannot disable (err = -32)
[  100.517404][   T31] hub 3-1:0.0: hub_ext_port_status failed (err = -32)
[  100.569433][  T371] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  100.719438][  T371] usb 2-1: device descriptor read/64, error -71
[  100.726115][ T2028] futex_wake_op: syz.3.519 tries to shift op by -1; fix this program
[  100.736957][ T2028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.749338][ T2028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.829523][   T31] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  100.947407][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  100.954286][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  100.960961][  T668] usb 3-1: USB disconnect, device number 49
[  100.967619][   T31] usb 1-1: device descriptor read/64, error -71
[  100.974184][  T371] usb 2-1: device descriptor read/64, error -71
[  100.979739][ T2032] Bluetooth: hci0: Frame reassembly failed (-90)
[  101.089798][  T371] usb usb2-port1: attempt power cycle
[  101.219453][   T31] usb 1-1: device descriptor read/64, error -71
[  101.345607][ T2036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2036 comm=syz.3.522
[  101.358668][ T2037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2037 comm=syz.3.522
[  101.377015][ T2036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.385678][ T2036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.429533][  T371] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  101.450769][  T371] usb 2-1: device descriptor read/8, error -71
[  101.459450][   T31] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  101.580843][  T371] usb 2-1: device descriptor read/8, error -71
[  101.589619][   T31] usb 1-1: device descriptor read/64, error -71
[  101.819455][  T371] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  101.829488][   T31] usb 1-1: device descriptor read/64, error -71
[  101.841301][  T371] usb 2-1: device descriptor read/8, error -71
[  101.939659][   T31] usb usb1-port1: attempt power cycle
[  101.975166][  T371] usb 2-1: device descriptor read/8, error -71
[  102.100019][  T371] usb usb2-port1: unable to enumerate USB device
[  102.166217][ T2053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.176139][ T2053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.279675][   T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  102.301317][   T31] usb 1-1: device descriptor read/8, error -71
[  102.431319][   T31] usb 1-1: device descriptor read/8, error -71
[  102.669510][   T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  102.691174][   T31] usb 1-1: device descriptor read/8, error -71
[  102.719451][ T2057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.728060][ T2057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.821438][   T31] usb 1-1: device descriptor read/8, error -71
[  102.930108][   T31] usb usb1-port1: unable to enumerate USB device
[  102.969542][ T1169] Bluetooth: hci0: command 0x1003 tx timeout
[  102.969542][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  102.989918][  T407] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  103.149443][  T407] usb 2-1: Using ep0 maxpacket: 16
[  103.156354][  T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.168121][  T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.177974][  T407] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  103.190870][  T407] usb 2-1: New USB device found, idVendor=56f8, idProduct=07da, bcdDevice= 0.00
[  103.200068][  T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.210425][  T407] usb 2-1: config 0 descriptor??
[  103.299933][ T2067] fuse: Bad value for 'fd'
[  103.499626][ T2073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.508330][ T2073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.638692][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.666343][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.676441][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.684693][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.693537][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.702117][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.710447][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.718240][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.729171][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.738592][  T407] hid-multitouch 0003:56F8:07DA.0016: unknown main item tag 0x0
[  103.751658][  T407] hid-multitouch 0003:56F8:07DA.0016: hidraw0: USB HID v0.00 Device [HID 56f8:07da] on usb-dummy_hcd.1-1/input0
[  103.842077][  T407] usb 2-1: USB disconnect, device number 55
[  103.944874][   T36] kauditd_printk_skb: 618 callbacks suppressed
[  103.944895][   T36] audit: type=1400 audit(1770699456.900:6003): avc:  denied  { create } for  pid=2085 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  103.954758][ T2086] +$<¶: renamed from bridge0 (while UP)
[  103.996363][   T36] audit: type=1400 audit(1770699456.900:6004): avc:  denied  { setopt } for  pid=2085 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  104.016385][   T36] audit: type=1400 audit(1770699456.900:6005): avc:  denied  { create } for  pid=2085 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  104.037003][   T36] audit: type=1400 audit(1770699456.900:6006): avc:  denied  { write } for  pid=2085 comm="syz.2.540" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  104.079598][   T36] audit: type=1400 audit(1770699456.950:6007): avc:  denied  { ioctl } for  pid=2083 comm="syz.0.539" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  104.109557][   T31] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  104.128625][   T36] audit: type=1400 audit(1770699456.950:6008): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  104.178144][   T36] audit: type=1400 audit(1770699456.950:6009): avc:  denied  { read write open } for  pid=294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  104.217141][   T36] audit: type=1400 audit(1770699456.950:6010): avc:  denied  { ioctl } for  pid=294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  104.242693][   T36] audit: type=1400 audit(1770699457.020:6011): avc:  denied  { ioctl } for  pid=2083 comm="syz.0.539" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  104.290615][   T36] audit: type=1400 audit(1770699457.020:6012): avc:  denied  { read } for  pid=2087 comm="syz.2.541" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  104.299925][   T31] usb 1-1: Using ep0 maxpacket: 32
[  104.347619][   T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  104.355884][   T31] usb 1-1: config 0 has no interface number 0
[  104.367070][   T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  104.379459][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.387628][   T31] usb 1-1: Product: syz
[  104.411383][   T31] usb 1-1: Manufacturer: syz
[  104.419145][   T31] usb 1-1: SerialNumber: syz
[  104.450238][   T31] usb 1-1: config 0 descriptor??
[  104.464476][   T31] smsc95xx v2.0.0
[  104.473369][ T2102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.497225][ T2102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.649736][  T407] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  104.749470][  T408] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  104.799513][  T407] usb 3-1: Using ep0 maxpacket: 16
[  104.806556][  T407] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  104.814977][  T407] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.825258][  T407] usb 3-1: config 0 has no interface number 0
[  104.834087][  T407] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  104.843226][  T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.851283][  T407] usb 3-1: Product: syz
[  104.855556][  T407] usb 3-1: Manufacturer: syz
[  104.860327][  T407] usb 3-1: SerialNumber: syz
[  104.866140][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  104.866841][  T407] usb 3-1: config 0 descriptor??
[  104.880330][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  104.897842][  T407] usb 3-1: Found UVC 0.00 device syz (046c:14e8)
[  104.904382][  T407] usb 3-1: No valid video chain found.
[  104.914106][  T408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.923945][  T408] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[  104.933572][  T408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.944210][  T408] usb 2-1: config 0 descriptor??
[  105.096133][  T407] usb 3-1: USB disconnect, device number 50
[  105.294346][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  105.325616][   T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  105.345825][   T31] usb 1-1: USB disconnect, device number 50
[  105.360475][ T2110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.369341][ T2110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.383147][  T408] wacom 0003:056A:0003.0017: Unknown device_type for 'HID 056a:0003'. Assuming pen.
[  105.405843][ T2110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.421696][  T408] wacom 0003:056A:0003.0017: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.1-1/input0
[  105.435884][ T2110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.460200][  T408] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0017/input/input20
[  105.587275][  T408] usb 2-1: USB disconnect, device number 56
[  105.815322][ T2119] input: syz1 as /devices/virtual/input/input23
[  106.141404][  T330] bridge_slave_1: left allmulticast mode
[  106.163264][  T330] bridge_slave_1: left promiscuous mode
[  106.168970][  T330] +$<¶: port 2(bridge_slave_1) entered disabled state
[  106.189635][  T330] bridge_slave_0: left allmulticast mode
[  106.226353][  T330] bridge_slave_0: left promiscuous mode
[  106.232192][  T330] +$<¶: port 1(bridge_slave_0) entered disabled state
[  106.258188][ T2136] fuse: Unknown parameter 'grup_id'
[  106.356067][ T2138] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.391486][  T371] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  106.436669][  T330] veth1_macvtap: left promiscuous mode
[  106.442375][  T330] veth0_vlan: left promiscuous mode
[  106.599437][  T371] usb 1-1: Using ep0 maxpacket: 32
[  106.619513][  T371] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  106.627764][  T371] usb 1-1: config 0 has no interface number 0
[  106.649570][  T371] usb 1-1: config 0 interface 184 has no altsetting 0
[  106.658569][  T371] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  106.672924][  T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.681249][  T371] usb 1-1: Product: syz
[  106.685449][  T371] usb 1-1: Manufacturer: syz
[  106.690215][  T371] usb 1-1: SerialNumber: syz
[  106.697289][  T371] usb 1-1: config 0 descriptor??
[  106.725743][  T371] smsc75xx v1.0.0
[  107.136855][  T371] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  107.156898][  T371] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  107.167097][  T371] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  107.183871][  T371] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  107.208513][  T371] usb 1-1: USB disconnect, device number 51
[  107.357012][ T2168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.367086][ T2168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.382040][ T2168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.390975][ T2168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.886071][ T2174] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.888129][ T2174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'.
[  107.970203][ T2178] 9pnet_fd: Insufficient options for proto=fd
[  108.329569][  T371] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  108.480795][  T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.493172][  T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.503476][  T371] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  108.512684][  T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.522226][  T371] usb 2-1: config 0 descriptor??
[  108.936236][  T371] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0
[  108.949737][  T371] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0
[  108.958230][  T371] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0
[  108.966825][  T371] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0
[  108.974782][  T371] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0
[  109.144869][   T36] kauditd_printk_skb: 502 callbacks suppressed
[  109.144892][   T36] audit: type=1400 audit(1770699462.100:6515): avc:  denied  { ioctl } for  pid=2189 comm="syz.1.574" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  109.346587][   T36] audit: type=1400 audit(1770699462.300:6516): avc:  denied  { ioctl } for  pid=2189 comm="syz.1.574" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  109.352525][  T371] hid-led 0003:27B8:01ED.0018: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0
[  109.371847][   T36] audit: type=1400 audit(1770699462.300:6517): avc:  denied  { ioctl } for  pid=2189 comm="syz.1.574" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  109.426604][  T371] hid-led 0003:27B8:01ED.0018: ThingM blink(1) initialized
[  109.506325][   T36] audit: type=1400 audit(1770699462.460:6518): avc:  denied  { read } for  pid=2212 comm="syz.0.578" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  109.550975][   T36] audit: type=1400 audit(1770699462.460:6519): avc:  denied  { open } for  pid=2212 comm="syz.0.578" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  109.573608][ T2191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.599617][ T2191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.612719][   T36] audit: type=1400 audit(1770699462.480:6520): avc:  denied  { execmem } for  pid=2211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  109.627960][   T31] usb 2-1: USB disconnect, device number 57
[  109.645348][   T36] audit: type=1400 audit(1770699462.480:6521): avc:  denied  { ioctl } for  pid=2212 comm="syz.0.578" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  109.673249][   T36] audit: type=1400 audit(1770699462.490:6522): avc:  denied  { read write } for  pid=2212 comm="syz.0.578" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  109.708920][   T36] audit: type=1400 audit(1770699462.490:6523): avc:  denied  { open } for  pid=2212 comm="syz.0.578" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  109.779422][   T36] audit: type=1400 audit(1770699462.490:6524): avc:  denied  { ioctl } for  pid=2212 comm="syz.0.578" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  109.902134][ T2215] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2816 sclass=netlink_xfrm_socket pid=2215 comm=syz.0.580
[  110.969712][  T408] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  111.029515][  T407] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  111.119522][  T408] usb 1-1: Using ep0 maxpacket: 8
[  111.127180][  T408] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  111.137078][  T408] usb 1-1: config 1 has no interface number 1
[  111.143288][  T408] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  111.156674][  T408] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  111.170027][  T408] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.179118][  T408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.187309][  T407] usb 2-1: Using ep0 maxpacket: 16
[  111.192530][  T408] usb 1-1: Product: syz
[  111.196722][  T408] usb 1-1: Manufacturer: syz
[  111.201535][  T408] usb 1-1: SerialNumber: syz
[  111.207701][  T407] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  111.218683][  T407] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.229219][  T407] usb 2-1: config 0 has no interface number 0
[  111.235401][  T407] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  111.247240][  T407] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  111.258628][  T407] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  111.269618][  T407] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  111.279779][  T407] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  111.293175][  T407] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  111.302487][  T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.312594][  T407] usb 2-1: config 0 descriptor??
[  111.320327][ T2232] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  111.372242][  T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  111.423487][  T408] usb 1-1: 2:1: cannot set freq 15828157 to ep 0x82
[  111.438810][  T408] usb 1-1: USB disconnect, device number 52
[  111.476906][  T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  111.529462][  T407] usb 2-1: USB disconnect, device number 58
[  112.788242][ T2243] netlink: 'syz.0.585': attribute type 16 has an invalid length.
[  112.801097][ T2243] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.585'.
[  113.099443][   T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  113.249466][   T31] usb 1-1: Using ep0 maxpacket: 8
[  113.255838][   T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  113.264620][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.274765][   T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.285989][   T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.295224][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.303474][   T31] usb 1-1: Product: syz
[  113.307669][   T31] usb 1-1: Manufacturer: syz
[  113.312368][   T31] usb 1-1: SerialNumber: syz
[  113.950770][ T2250] SELinux:  policydb magic number 0x3000d02 does not match expected magic number 0xf97cff8c
[  113.961140][ T2250] SELinux: failed to load policy
[  114.207797][   T36] kauditd_printk_skb: 380 callbacks suppressed
[  114.207816][   T36] audit: type=1400 audit(1770699467.160:6905): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  114.240037][   T36] audit: type=1400 audit(1770699467.160:6906): avc:  denied  { read write open } for  pid=295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  114.266272][   T36] audit: type=1400 audit(1770699467.160:6907): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.294448][   T36] audit: type=1400 audit(1770699468.250:6908): avc:  denied  { read } for  pid=2257 comm="syz.3.589" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.319924][   T36] audit: type=1400 audit(1770699468.250:6909): avc:  denied  { open } for  pid=2257 comm="syz.3.589" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.343763][   T36] audit: type=1400 audit(1770699468.250:6910): avc:  denied  { ioctl } for  pid=2257 comm="syz.3.589" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.382868][   T36] audit: type=1400 audit(1770699468.280:6911): avc:  denied  { execmem } for  pid=2256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  115.403630][   T36] audit: type=1400 audit(1770699468.330:6912): avc:  denied  { read write } for  pid=2257 comm="syz.3.589" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.435607][   T36] audit: type=1400 audit(1770699468.330:6913): avc:  denied  { open } for  pid=2257 comm="syz.3.589" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.496345][   T36] audit: type=1400 audit(1770699468.330:6914): avc:  denied  { ioctl } for  pid=2257 comm="syz.3.589" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.540802][ T2260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.560724][ T2260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.792265][   T31] usb 1-1: 0:2 : does not exist
[  115.809501][   T31] usb 1-1: USB disconnect, device number 53
[  115.860636][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  116.907815][ T2267] incfs: Error accessing: ./file0.
[  116.927299][ T2266] 9pnet_fd: Insufficient options for proto=fd
[  116.933969][ T2267] incfs: mount failed -20
[  118.443092][ T2288] netlink: 'syz.1.597': attribute type 27 has an invalid length.
[  118.467005][ T2288] overlayfs: empty lowerdir
[  118.969553][  T668] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  119.119512][  T668] usb 1-1: Using ep0 maxpacket: 32
[  119.125979][  T668] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  119.134320][  T668] usb 1-1: config 0 has no interface number 0
[  119.140538][  T668] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  119.150620][  T668] usb 1-1: config 0 interface 196 has no altsetting 0
[  119.159556][  T668] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  119.168837][  T668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.177115][  T668] usb 1-1: Product: syz
[  119.181369][  T668] usb 1-1: Manufacturer: syz
[  119.186032][  T668] usb 1-1: SerialNumber: syz
[  119.192278][  T668] usb 1-1: config 0 descriptor??
[  119.198244][ T2306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  119.292782][   T36] kauditd_printk_skb: 208 callbacks suppressed
[  119.292801][   T36] audit: type=1400 audit(1770699472.250:7123): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.324144][   T36] audit: type=1400 audit(1770699472.250:7124): avc:  denied  { read write open } for  pid=295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.350073][   T36] audit: type=1400 audit(1770699472.250:7125): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.408471][   T36] audit: type=1400 audit(1770699472.360:7126): avc:  denied  { ioctl } for  pid=2305 comm="syz.0.603" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.609696][ T2306] Invalid ELF header type: 2 != 1
[  119.614862][   T36] audit: type=1400 audit(1770699472.560:7127): avc:  denied  { sys_module } for  pid=2305 comm="syz.0.603" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  119.614957][ T2310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.642129][ T2306] Invalid ELF header type: 2 != 1
[  119.644691][   T36] audit: type=1400 audit(1770699472.570:7128): avc:  denied  { module_load } for  pid=2305 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  119.658843][ T2306] Invalid ELF header type: 2 != 1
[  119.670989][ T2310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.682596][   T36] audit: type=1400 audit(1770699472.570:7129): avc:  denied  { ioctl } for  pid=2305 comm="syz.0.603" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.699302][ T2306] Invalid ELF header type: 2 != 1
[  119.711119][   T36] audit: type=1400 audit(1770699472.570:7130): avc:  denied  { read write } for  pid=2305 comm="syz.0.603" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.715583][ T2306] Invalid ELF header type: 2 != 1
[  119.739481][   T36] audit: type=1400 audit(1770699472.570:7131): avc:  denied  { read write open } for  pid=2305 comm="syz.0.603" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.745136][ T2306] Invalid ELF header type: 2 != 1
[  119.768903][   T36] audit: type=1400 audit(1770699472.570:7132): avc:  denied  { ioctl } for  pid=2305 comm="syz.0.603" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.774623][ T2306] Invalid ELF header type: 2 != 1
[  119.802810][ T2306] Invalid ELF header type: 2 != 1
[  119.808558][ T2306] Invalid ELF header type: 2 != 1
[  119.814528][ T2306] Invalid ELF header type: 2 != 1
[  119.819693][  T668] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  119.821454][ T2306] Invalid ELF header type: 2 != 1
[  119.832609][  T668] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached
[  119.837605][ T2306] Invalid ELF header type: 2 != 1
[  119.846287][ T2306] Invalid ELF header type: 2 != 1
[  119.853108][ T2306] Invalid ELF header type: 2 != 1
[  119.859073][ T2306] Invalid ELF header type: 2 != 1
[  119.866124][ T2306] Invalid ELF header type: 2 != 1
[  119.873792][ T2306] Invalid ELF header type: 2 != 1
[  119.880735][ T2306] Invalid ELF header type: 2 != 1
[  119.886626][ T2306] Invalid ELF header type: 2 != 1
[  119.893513][ T2306] Invalid ELF header type: 2 != 1
[  119.899296][ T2306] Invalid ELF header type: 2 != 1
[  119.906240][ T2306] Invalid ELF header type: 2 != 1
[  119.912869][ T2306] Invalid ELF header type: 2 != 1
[  119.918660][ T2306] Invalid ELF header type: 2 != 1
[  119.925626][ T2306] Invalid ELF header type: 2 != 1
[  119.932177][ T2306] Invalid ELF header type: 2 != 1
[  119.939230][ T2306] Invalid ELF header magic: != ELF
[  119.946520][ T2310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.955894][ T2306] Invalid ELF header magic: != ELF
[  119.962505][ T2310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.972172][ T2306] Invalid ELF header magic: != ELF
[  119.980209][ T2306] Invalid ELF header magic: != ELF
[  119.994563][  T407] usb 1-1: USB disconnect, device number 54
[  120.060574][  T407] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected
[  120.238092][ T2318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.254498][ T2318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.529501][  T407] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  120.549495][   T31] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  120.679508][   T31] usb 2-1: device descriptor read/64, error -71
[  120.691389][  T407] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.701765][  T407] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.712378][  T407] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  120.721545][  T407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  120.729625][  T407] usb 1-1: SerialNumber: syz
[  120.919433][   T31] usb 2-1: device descriptor read/64, error -71
[  120.939305][  T407] usb 1-1: 0:2 : does not exist
[  120.958806][  T407] usb 1-1: USB disconnect, device number 55
[  120.996990][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  121.159497][   T31] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  121.289587][   T31] usb 2-1: device descriptor read/64, error -71
[  121.529530][   T31] usb 2-1: device descriptor read/64, error -71
[  121.639690][   T31] usb usb2-port1: attempt power cycle
[  121.979706][   T31] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  122.027763][   T31] usb 2-1: device descriptor read/8, error -71
[  122.119860][ T2332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.148762][ T2332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.166004][   T31] usb 2-1: device descriptor read/8, error -71
[  122.419428][   T31] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  122.441046][   T31] usb 2-1: device descriptor read/8, error -71
[  122.571718][   T31] usb 2-1: device descriptor read/8, error -71
[  122.679749][   T31] usb usb2-port1: unable to enumerate USB device
[  123.910790][ T2348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.919865][ T2348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.109570][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  124.269503][    T9] usb 2-1: Using ep0 maxpacket: 32
[  124.276321][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  124.283064][    T9] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  124.292314][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.302105][    T9] usb 2-1: config 0 descriptor??
[  124.308553][   T36] kauditd_printk_skb: 251 callbacks suppressed
[  124.308574][   T36] audit: type=1400 audit(1770699477.260:7384): avc:  denied  { ioctl } for  pid=2339 comm="syz.1.613" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.342757][   T36] audit: type=1400 audit(1770699477.260:7385): avc:  denied  { ioctl } for  pid=2339 comm="syz.1.613" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.368401][   T36] audit: type=1400 audit(1770699477.260:7386): avc:  denied  { ioctl } for  pid=2339 comm="syz.1.613" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.393645][   T36] audit: type=1400 audit(1770699477.260:7387): avc:  denied  { ioctl } for  pid=2339 comm="syz.1.613" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.418728][   T31] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  124.418772][   T36] audit: type=1400 audit(1770699477.300:7388): avc:  denied  { ioctl } for  pid=2340 comm="syz.0.612" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.451255][   T36] audit: type=1400 audit(1770699477.390:7389): avc:  denied  { ioctl } for  pid=2340 comm="syz.0.612" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.477244][   T36] audit: type=1400 audit(1770699477.390:7390): avc:  denied  { ioctl } for  pid=2340 comm="syz.0.612" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.503492][   T36] audit: type=1400 audit(1770699477.430:7391): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  124.528569][   T36] audit: type=1400 audit(1770699477.430:7392): avc:  denied  { read write open } for  pid=295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  124.554458][   T36] audit: type=1400 audit(1770699477.430:7393): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  124.601408][   T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  124.612589][   T31] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.622882][   T31] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  124.636325][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[  124.643035][   T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  124.652316][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.662301][   T31] usb 1-1: config 0 descriptor??
[  124.785155][    T9] elecom 0003:056E:00FE.0019: hidraw0: USB HID v4.0a Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0
[  124.984029][    T9] usb 2-1: USB disconnect, device number 63
[  125.075524][   T31] apple 0003:05AC:027D.001A: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.0-1/input0
[  125.274345][  T407] usb 1-1: USB disconnect, device number 56
[  125.903184][ T2356] overlayfs: statfs failed on './file0'
[  125.913151][ T2356] 9pnet_fd: Insufficient options for proto=fd
[  126.239553][  T407] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  126.289529][  T668] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  126.390729][  T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  126.400489][  T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  126.413518][  T407] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  126.419708][  T668] usb 1-1: device descriptor read/64, error -71
[  126.422889][  T407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.437123][  T407] usb 2-1: Product: syz
[  126.441391][  T407] usb 2-1: Manufacturer: syz
[  126.446011][  T407] usb 2-1: SerialNumber: syz
[  126.452488][  T407] usb 2-1: config 0 descriptor??
[  126.659513][  T668] usb 1-1: device descriptor read/64, error -71
[  126.670754][  T407] usb 2-1: USB disconnect, device number 64
[  126.712094][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  126.899526][  T668] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  127.029522][  T668] usb 1-1: device descriptor read/64, error -71
[  127.269552][  T668] usb 1-1: device descriptor read/64, error -71
[  127.379611][  T668] usb usb1-port1: attempt power cycle
[  127.719522][  T668] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  127.740980][  T668] usb 1-1: device descriptor read/8, error -71
[  127.871378][  T668] usb 1-1: device descriptor read/8, error -71
[  127.977206][ T2379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'.
[  128.059838][ T2384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.068419][ T2384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.111812][  T668] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  128.122192][ T2379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.140987][ T2379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.163601][  T668] usb 1-1: device descriptor read/8, error -71
[  128.207862][ T2390] syz.3.627 uses obsolete (PF_INET,SOCK_PACKET)
[  128.313075][  T668] usb 1-1: device descriptor read/8, error -71
[  128.419618][  T668] usb usb1-port1: unable to enumerate USB device
[  130.209400][   T36] kauditd_printk_skb: 212 callbacks suppressed
[  130.209421][   T36] audit: type=1400 audit(1770699483.160:7606): avc:  denied  { execmem } for  pid=2392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  130.256599][ T2399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.279413][   T36] audit: type=1400 audit(1770699483.200:7607): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.286254][ T2399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.369419][   T36] audit: type=1400 audit(1770699483.200:7608): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.429416][   T36] audit: type=1400 audit(1770699483.200:7609): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.475803][ T2412] audit: audit_backlog=65 > audit_backlog_limit=64
[  130.482502][   T36] audit: type=1400 audit(1770699483.210:7610): avc:  denied  { create } for  pid=2396 comm="syz.3.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  130.483093][ T2413] audit: audit_backlog=65 > audit_backlog_limit=64
[  130.502151][ T2412] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64
[  130.516645][   T36] audit: type=1400 audit(1770699483.210:7611): avc:  denied  { create } for  pid=2394 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  130.529633][    T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  130.536794][ T2412] audit: backlog limit exceeded
[  130.709529][    T9] usb 2-1: Using ep0 maxpacket: 16
[  130.715951][    T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  130.724298][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.734826][    T9] usb 2-1: config 0 has no interface number 0
[  130.743712][    T9] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  130.752861][    T9] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3
[  130.761228][    T9] usb 2-1: Product: syz
[  130.765422][    T9] usb 2-1: Manufacturer: syz
[  130.770095][    T9] usb 2-1: SerialNumber: syz
[  130.775945][    T9] usb 2-1: config 0 descriptor??
[  130.783435][    T9] usb 2-1: Found UVC 0.00 device syz (046c:14e8)
[  130.790898][    T9] uvcvideo 2-1:0.105: Entity type for entity Output 1 was not initialized!
[  130.799611][  T407] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  130.807263][    T9] usb 2-1: Failed to create links for entity 1
[  130.813540][    T9] usb 2-1: Failed to register entities (-22).
[  130.971551][  T407] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  130.979802][  T407] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.993845][  T407] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  131.003059][  T407] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  131.003637][  T668] usb 2-1: USB disconnect, device number 65
[  131.012866][  T407] usb 1-1: Product: syz
[  131.029412][  T407] usb 1-1: Manufacturer: syz
[  131.034084][  T407] usb 1-1: SerialNumber: syz
[  131.041545][  T407] usb 1-1: config 0 descriptor??
[  131.049213][  T407] hub 1-1:0.0: bad descriptor, ignoring hub
[  131.057501][  T407] hub 1-1:0.0: probe with driver hub failed with error -5
[  131.074744][  T407] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  131.118276][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  131.253446][ T2413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.262021][ T2413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.379585][  T407] usb 1-1: USB disconnect, device number 61
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=4 req=562 state=3 status=67 (errno 9: Bad file descriptor)
[  132.989631][    T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  133.039427][  T668] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  133.047953][  T407] usb 4-1: USB disconnect, device number 23
[  133.281995][ T2407] bridge_slave_1: left allmulticast mode
[  133.287798][ T2407] bridge_slave_1: left promiscuous mode
[  133.309510][ T2407] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.320154][ T2407] bridge_slave_0: left allmulticast mode
[  133.325858][ T2407] bridge_slave_0: left promiscuous mode
[  133.331584][ T2407] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.339984][ T2407] bridge_slave_1: left allmulticast mode
[  133.345761][ T2407] bridge_slave_1: left promiscuous mode
[  133.351644][ T2407] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.359682][ T2407] bridge_slave_0: left allmulticast mode
[  133.365985][ T2407] bridge_slave_0: left promiscuous mode
[  133.389516][ T2407] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.574590][ T2407] veth1_macvtap: left promiscuous mode
[  133.580201][ T2407] veth0_vlan: left promiscuous mode
[  133.585782][ T2407] veth1_macvtap: left promiscuous mode
[  133.591577][ T2407] veth0_vlan: left promiscuous mode
[  133.971670][ T2407] ------------[ cut here ]------------
[  133.977363][ T2407] WARNING: CPU: 0 PID: 2407 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140
[  133.987578][ T2407] Modules linked in:
[  133.991595][ T2407] CPU: 0 UID: 0 PID: 2407 Comm: kworker/u8:9 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d
[  134.003924][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  134.014079][ T2407] Workqueue: netns cleanup_net
[  134.019094][ T2407] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140
[  134.025206][ T2407] Code: e8 41 3c db fc 4b 83 3c 3e 00 75 19 e8 e5 70 83 fc 49 81 ff f8 07 00 00 74 1b e8 d7 70 83 fc 49 83 c7 08 eb c9 e8 cc 70 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
[  134.044918][ T2407] RSP: 0018:ffffc90000e3fb90 EFLAGS: 00010293
[  134.051069][ T2407] RAX: ffffffff85042c44 RBX: ffff888128388000 RCX: ffff88811925cc00
[  134.059136][ T2407] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104714000
[  134.067319][ T2407] RBP: ffffc90000e3fbb0 R08: 0000000000000003 R09: 0000000000000004
[  134.075410][ T2407] R10: dffffc0000000000 R11: fffff520001c7f04 R12: dffffc0000000000
[  134.083456][ T2407] R13: dffffc0000000000 R14: ffff888104714000 R15: 0000000000000000
[  134.091605][ T2407] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  134.101074][ T2407] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.107699][ T2407] CR2: 00007ffe7ddb1ffc CR3: 000000010bfea000 CR4: 00000000003526b0
[  134.115854][ T2407] Call Trace:
[  134.119156][ T2407]  <TASK>
[  134.122175][ T2407]  cleanup_net+0x6c0/0xc90
[  134.126626][ T2407]  ? __cfi_cleanup_net+0x10/0x10
[  134.131648][ T2407]  ? kick_pool+0xb9/0x550
[  134.136182][ T2407]  process_scheduled_works+0x7d4/0x1020
[  134.141813][ T2407]  worker_thread+0xc70/0x10b0
[  134.146532][ T2407]  kthread+0x2c9/0x370
[  134.150792][ T2407]  ? __cfi_worker_thread+0x10/0x10
[  134.156066][ T2407]  ? __cfi_kthread+0x10/0x10
[  134.160764][ T2407]  ret_from_fork+0x67/0xa0
[  134.165212][ T2407]  ? __cfi_kthread+0x10/0x10
[  134.169876][ T2407]  ret_from_fork_asm+0x1a/0x30
[  134.174676][ T2407]  </TASK>
[  134.177714][ T2407] ---[ end trace 0000000000000000 ]---
[  134.183747][ T2407] ------------[ cut here ]------------
[  134.189519][ T2407] WARNING: CPU: 0 PID: 2407 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140
[  134.199777][ T2407] Modules linked in:
[  134.203790][ T2407] CPU: 0 UID: 0 PID: 2407 Comm: kworker/u8:9 Tainted: G        W          syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d
[  134.217398][ T2407] Tainted: [W]=WARN
[  134.221294][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  134.231442][ T2407] Workqueue: netns cleanup_net
[  134.236340][ T2407] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140
[  134.242479][ T2407] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 70 83 fc 49 81 ff f8 07 00 00 74 1b e8 82 70 83 fc 49 83 c7 08 eb c5 e8 77 70 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 70 83 fc 5b 41 5c 41 5e 41
[  134.262748][ T2407] RSP: 0018:ffffc90000e3fb90 EFLAGS: 00010293
[  134.268832][ T2407] RAX: ffffffff85042c99 RBX: ffff888104714800 RCX: ffff88811925cc00
[  134.276970][ T2407] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104714810
[  134.285124][ T2407] RBP: ffffc90000e3fbb0 R08: 0000000000000003 R09: 0000000000000004
[  134.293715][ T2407] R10: dffffc0000000000 R11: fffff520001c7f04 R12: dffffc0000000000
[  134.301818][ T2407] R13: dffffc0000000000 R14: ffff888104714000 R15: 0000000000000010
[  134.309846][ T2407] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  134.318893][ T2407] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.325724][ T2407] CR2: 00007ffe7ddb1ffc CR3: 00000000074a8000 CR4: 00000000003526b0
[  134.333795][ T2407] Call Trace:
[  134.337149][ T2407]  <TASK>
[  134.340163][ T2407]  cleanup_net+0x6c0/0xc90
[  134.344633][ T2407]  ? __cfi_cleanup_net+0x10/0x10
[  134.349653][ T2407]  ? kick_pool+0xb9/0x550
[  134.354024][ T2407]  process_scheduled_works+0x7d4/0x1020
[  134.359730][ T2407]  worker_thread+0xc70/0x10b0
[  134.364449][ T2407]  kthread+0x2c9/0x370
[  134.368609][ T2407]  ? __cfi_worker_thread+0x10/0x10
[  134.373879][ T2407]  ? __cfi_kthread+0x10/0x10
[  134.378494][ T2407]  ret_from_fork+0x67/0xa0
[  134.382984][ T2407]  ? __cfi_kthread+0x10/0x10
[  134.387605][ T2407]  ret_from_fork_asm+0x1a/0x30
[  134.392550][ T2407]  </TASK>
[  134.395588][ T2407] ---[ end trace 0000000000000000 ]---
[  134.404922][ T2407] ------------[ cut here ]------------
[  134.410487][ T2407] WARNING: CPU: 1 PID: 2407 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310
[  134.420316][ T2407] Modules linked in:
[  134.424254][ T2407] CPU: 1 UID: 0 PID: 2407 Comm: kworker/u8:9 Tainted: G        W          syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d
[  134.437913][ T2407] Tainted: [W]=WARN
[  134.441772][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  134.452064][ T2407] Workqueue: netns cleanup_net
[  134.456897][ T2407] RIP: 0010:xfrm_state_fini+0x2be/0x310
[  134.462889][ T2407] Code: 3c 20 00 74 08 48 89 df e8 7f 05 f6 fc 48 8b 3b e8 17 44 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 3a 9e fc <0f> 0b e9 b0 fd ff ff e8 06 3a 9e fc 0f 0b e9 18 fe ff ff e8 fa 39
[  134.483013][ T2407] RSP: 0018:ffffc90000e3fb70 EFLAGS: 00010293
[  134.489124][ T2407] RAX: ffffffff84e962fe RBX: ffff888128388000 RCX: ffff88811925cc00
[  134.497376][ T2407] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811925cc00
[  134.505625][ T2407] RBP: ffffc90000e3fb98 R08: ffffffff87d351c7 R09: 1ffffffff0fa6a38
[  134.513727][ T2407] R10: dffffc0000000000 R11: fffffbfff0fa6a39 R12: 1ffffffff0fa6788
[  134.521854][ T2407] R13: dffffc0000000000 R14: ffff888128388c00 R15: dffffc0000000000
[  134.530099][ T2407] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  134.539174][ T2407] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.545974][ T2407] CR2: 0000000000000003 CR3: 000000010cb3e000 CR4: 00000000003526b0
[  134.554135][ T2407] Call Trace:
[  134.557440][ T2407]  <TASK>
[  134.560577][ T2407]  xfrm_net_exit+0x31/0x80
[  134.565089][ T2407]  cleanup_net+0x6c0/0xc90
[  134.569956][ T2407]  ? __cfi_cleanup_net+0x10/0x10
[  134.574929][ T2407]  ? kick_pool+0xb9/0x550
[  134.579282][ T2407]  process_scheduled_works+0x7d4/0x1020
[  134.584971][ T2407]  worker_thread+0xc70/0x10b0
[  134.589749][ T2407]  kthread+0x2c9/0x370
[  134.593942][ T2407]  ? __cfi_worker_thread+0x10/0x10
[  134.599086][ T2407]  ? __cfi_kthread+0x10/0x10
[  134.603798][ T2407]  ret_from_fork+0x67/0xa0
[  134.608288][ T2407]  ? __cfi_kthread+0x10/0x10
[  134.612974][ T2407]  ret_from_fork_asm+0x1a/0x30
[  134.617787][ T2407]  </TASK>
[  134.620910][ T2407] ---[ end trace 0000000000000000 ]---
[  134.702448][ T2407] bridge_slave_1: left allmulticast mode
[  134.708411][ T2407] bridge_slave_1: left promiscuous mode
[  134.714169][ T2407] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.721941][ T2407] bridge_slave_0: left allmulticast mode
[  134.727592][ T2407] bridge_slave_0: left promiscuous mode
[  134.733577][ T2407] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.842724][ T2407] veth0_vlan: left promiscuous mode
[  135.126162][ T2407] ------------[ cut here ]------------
[  135.131760][ T2407] WARNING: CPU: 1 PID: 2407 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310
[  135.141390][ T2407] Modules linked in:
[  135.145316][ T2407] CPU: 1 UID: 0 PID: 2407 Comm: kworker/u8:9 Tainted: G        W          syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d
[  135.158660][ T2407] Tainted: [W]=WARN
[  135.162538][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  135.172770][ T2407] Workqueue: netns cleanup_net
[  135.177667][ T2407] RIP: 0010:xfrm_state_fini+0x2be/0x310
[  135.183383][ T2407] Code: 3c 20 00 74 08 48 89 df e8 7f 05 f6 fc 48 8b 3b e8 17 44 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 3a 9e fc <0f> 0b e9 b0 fd ff ff e8 06 3a 9e fc 0f 0b e9 18 fe ff ff e8 fa 39
[  135.203206][ T2407] RSP: 0018:ffffc90000e3fb70 EFLAGS: 00010293
[  135.209312][ T2407] RAX: ffffffff84e962fe RBX: ffff88812cea11c0 RCX: ffff88811925cc00
[  135.217587][ T2407] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811925cc00
[  135.225649][ T2407] RBP: ffffc90000e3fb98 R08: ffffffff87d351c7 R09: 1ffffffff0fa6a38
[  135.233794][ T2407] R10: dffffc0000000000 R11: fffffbfff0fa6a39 R12: 1ffffffff0fa6788
[  135.242205][ T2407] R13: dffffc0000000000 R14: ffff88812cea1dc0 R15: dffffc0000000000
[  135.250284][ T2407] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  135.259355][ T2407] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.266147][ T2407] CR2: 0000000000000003 CR3: 000000010634e000 CR4: 00000000003526b0
[  135.274227][ T2407] Call Trace:
[  135.277542][ T2407]  <TASK>
[  135.280547][ T2407]  xfrm_net_exit+0x31/0x80
[  135.285012][ T2407]  cleanup_net+0x6c0/0xc90
[  135.289613][ T2407]  ? __cfi_cleanup_net+0x10/0x10
[  135.294600][ T2407]  ? kick_pool+0xb9/0x550
[  135.298941][ T2407]  process_scheduled_works+0x7d4/0x1020
[  135.304585][ T2407]  worker_thread+0xc70/0x10b0
[  135.309320][ T2407]  kthread+0x2c9/0x370
[  135.313488][ T2407]  ? __cfi_worker_thread+0x10/0x10
[  135.318650][ T2407]  ? __cfi_kthread+0x10/0x10
[  135.323372][ T2407]  ret_from_fork+0x67/0xa0
[  135.327956][ T2407]  ? __cfi_kthread+0x10/0x10
[  135.332668][ T2407]  ret_from_fork_asm+0x1a/0x30
[  135.337488][ T2407]  </TASK>
[  135.340599][ T2407] ---[ end trace 0000000000000000 ]---