last executing test programs:

8.091598653s ago: executing program 2 (id=120):
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1a, 0xa, 0x102, &(0x7f0000000000)="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"})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)=<r0=>0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000004c0)={0xd, 0x8000})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x2c4a80, 0x0)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)=r0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000580), 0x4003)
ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f00000005c0)=0x4)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000600)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000680))
syz_ublk_setup_queues(r1, 0x0, &(0x7f00000006c0)={0x0, 0x1a55, 0x400, 0x0, 0x2a1}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c6d, 0x1000, 0x2, 0x2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x839c, 0x0, 0x1, 0x34a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25ca, 0x4000, 0x1, 0x2f, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9acc, 0x1, 0x0, 0x18b}, <r3=>0xffffffffffffffff}], 0x4, &(0x7f00000019c0)={0x2e, 0x2, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x1, 0x2ff, 0x0, &(0x7f00000009c0)=@buf_4k="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"}}, &(0x7f0000001a40))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x50, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x10}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x6b}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x744, 0x1b}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0xc000)
r5 = syz_open_dev$loop(&(0x7f0000001c00), 0x8, 0x140000)
sync_file_range(r5, 0x1, 0x7, 0x2)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x4d0200, 0x10, 0x15}, 0x18)
openat(r6, &(0x7f0000001cc0)='./file0\x00', 0x0, 0x4e)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000001d00)={0x6, 0x2, "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"})
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000001e40)=[0xfffffff5, 0x6])
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000001f40)={&(0x7f0000001e80), 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8012}, 0x40800)
ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000026c0)={&(0x7f0000001fc0)={0x6e8, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x61}}}}, [@NL80211_ATTR_TX_RATES={0x2ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x8}, {0x4, 0x4}, {0x1, 0x1e}, {0x2, 0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x9}, {0x5, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x4}, {}, {0x2, 0x8}, {0x7, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x3, 0x8, 0x2, 0x6, 0x8000, 0x1, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x12, 0x9, 0x1, 0x4, 0xc, 0x1, 0x40, 0x30, 0x9, 0x16, 0x18, 0x12, 0x9, 0x60, 0x36, 0x0, 0xb, 0x48, 0x6c, 0x24, 0x18, 0x6, 0xb, 0x30, 0x11, 0xc, 0x30, 0x16, 0x24, 0x2, 0x6c]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x1, 0x8, 0x9, 0x4, 0x0, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3dce, 0x80, 0x9, 0x4, 0x3, 0x101, 0x10]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0xb, 0x16, 0x3, 0x36, 0x3, 0x6c, 0x12, 0x18, 0xc, 0x24, 0x30, 0xc, 0x5, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x24, 0xc, 0x12, 0x9, 0x16, 0x1b, 0x36, 0xc, 0x2, 0x6c]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x5}, {0x6, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x4}, {}, {0x4}, {0x3, 0xb}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x6}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x9}, {0x7, 0x7}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x1f}, {0x1, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x4, 0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x3, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x2}, {0x2, 0x2}, {0x2}, {0x1, 0x4}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0x9}, {0x6}, {0x5, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x7, 0xa}, {0x1}, {0x7, 0x4}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x1c}, {0x5, 0x6}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x5}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfd62, 0x7b, 0x9, 0x7, 0xc, 0x2, 0x7, 0x3a]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x4}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x6, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x3}, {0x6}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x4}, {0x2}, {0x3, 0x6}, {0x2, 0x6}, {0x6, 0xa}, {0x2, 0xa}, {0x2, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x6}, {0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x1}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb036, 0x5, 0x6, 0x8, 0x1, 0x10, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x5, 0x3, 0x5, 0x3, 0xfa17, 0x5]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x2, 0x7fff, 0x9, 0x100, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3, 0x1, 0x7, 0x1, 0x3, 0x6]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x7}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x1}, {0x1, 0x3}, {0x7}, {}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x1}, {0x2, 0x9}, {0x0, 0x3}, {0x4}, {0x7, 0x5}, {0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x3, 0x3}, {}, {0x1, 0x5}, {0x4, 0xa}, {0x5, 0x6}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x6}, {}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x7, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x2}, {0x2, 0x9}, {0x3, 0x5}, {0x4, 0xa}, {0x3, 0x9}, {0x1, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x2}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x3, 0x5}, {0x7, 0x8}, {0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x2}, {0x5, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4904, 0x5, 0x1ff, 0x6, 0xb, 0xb]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x2, 0x1b, 0x60, 0x16, 0x1, 0xc, 0x16, 0xc, 0xed5eff20b79965bc, 0x24, 0x1b, 0x16, 0x12, 0x48, 0x24, 0x5, 0x60, 0x6, 0x4, 0x36, 0x1b, 0x24, 0x6, 0x6, 0xb, 0x3, 0x60, 0x30, 0x9, 0x1]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x258, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x9, 0x0, 0x6307, 0x3, 0xa751, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x7, 0xa, 0x690, 0x2, 0x4, 0x51]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd6, 0x1, 0x2, 0x7de, 0x6, 0x5, 0x401, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x12, 0x12, 0x1, 0x34, 0x48, 0x6, 0x3, 0x48, 0x9, 0x18, 0x16, 0x1b, 0x18, 0x1, 0x30, 0x4, 0x12, 0x6c, 0x1, 0x60, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x4, 0x18, 0x5, 0x12, 0x60, 0x4d, 0x30, 0x3, 0x5, 0x2, 0x9, 0x18, 0x1, 0x1b, 0x5, 0x12, 0x4, 0x48, 0x2, 0x9, 0x5, 0x56, 0x6, 0x9, 0x1, 0xb, 0x4, 0x0, 0x3]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x5}, {0x0, 0x3}, {0x2, 0x4}, {0x1}, {0x6, 0xe}, {0x5, 0x6}, {0x5, 0x6}, {0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x2, 0xa}, {0x1, 0x1}, {0x7, 0x5}, {0x5, 0x2}, {0x1, 0x8}, {0x5}, {0x2, 0x7}, {0x5, 0x2}, {0x7, 0x6}, {0x4, 0xa}, {0x4, 0x1}, {0x3, 0x6}, {0x3, 0x7}, {0x4}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x6}, {0x0, 0x7}, {0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x9, 0x4ef3, 0x1, 0xff81, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0xc, 0x5, 0x30, 0x16, 0x69fe4ab88bc0bdd3, 0x48, 0x9, 0x60, 0x5, 0x36, 0x44, 0x18, 0x48, 0x1, 0x9, 0x59, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x5, 0x4, 0x10, 0x0, 0x3ff, 0x3, 0xa]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x0, 0x30, 0xb, 0x4, 0x18, 0x36, 0xc, 0x1, 0x12, 0x12, 0xc, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xffff, 0x717c, 0xa5ef, 0x842, 0x26, 0x53]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x6, 0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x9}, {}, {0x4, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x9}, {0x5, 0x2}, {0x6, 0x9}, {0x6, 0x3}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x7}, {0x3}, {0x0, 0x1}, {0x6, 0x3}, {}, {0x7, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0xa}, {0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x6}, {0x7, 0x3}, {0x4, 0x8}, {0x1}, {0x7, 0xa}, {0x3, 0x2}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x2}, {}, {0x1}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x8}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x4, 0x9}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x4}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1000, 0x9, 0x7, 0x5, 0x4, 0x7]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x14, 0x24, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x1, 0x100, 0x0, 0x8, 0x400, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x675da2fbcfb7fd64}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xb2cd, 0x2, 0x3, 0x81, 0xf9bc, 0x3, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7ff, 0x8, 0x1400, 0x4, 0x7b, 0x1, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xd, 0x5, 0x7fff, 0x400, 0x8001, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x6}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x5}, {0x4, 0x6}, {0x6, 0x6}, {}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x2, 0x5}, {0x1, 0x3}, {0x1}, {0x1, 0x5}, {0x3, 0x9}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x4}, {0x2, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x5}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x3}, {0x5, 0xa}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0x2}, {0x3, 0x1}, {0x6, 0x4}, {0x7, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x3, 0x0, 0x6, 0x1000, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x7fff, 0x3, 0x6, 0x200, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x36, 0x9]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x4, 0x60, 0x4, 0x1b, 0x6, 0x2, 0x36, 0x36, 0x30, 0x48]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x6, 0x5, 0x3, 0x7, 0x5, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x3}, {0x6, 0xa}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x4}, {0x7, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xeac, 0x7, 0x6, 0x8, 0x5, 0x4, 0x7, 0xc8f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0xfff9, 0x469e, 0x7f, 0x5, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x7, 0x2, 0xd, 0x3, 0x8, 0x4fd3]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x7}, {0x4, 0xa}, {0x6, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x3, 0x8}, {0x5}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x38, 0x8, 0x9, 0x400, 0x9, 0x401, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x7, 0x5, 0xe, 0x4, 0x81, 0x3e54]}}]}]}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x4020004}, 0x40814)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002740)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r8, &(0x7f0000002780)='memory.high\x00', 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000027c0)={0x6, 'bridge_slave_1\x00', {0x1}, 0x8})
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000002840)={0x4, "960150922b5d121339fe0662de7ff5df6254e14f08fdd2c048834114cafa262256fc0745f96befba1f3197d0d4e62e5cdf3881a304039851122c686b05de48c62c54839960f87e5f3ada302b9ef786eb12b20549bf12c996d2af6a9022a4ae7965ce982e6447e890b7fce76f23a7365d99f9cc076861a7206f406a489797ba76d1633da293fa17119242f87e7394a19b9c79a600a8861efa957b8c7d23729794d8bfd51eb9cef58f49edc4288734ea2a4190475dfef87189959c4735b71d1f3502c411cd727a90f56fa8e541984714423f58bb10f8663c32e84a29ba287fc49529902884f1aaaa81b96816514f97e64a93af0be757f1e2c5b27c82ec4fb2161dc61c515e633a52dfc8e23acbce8497a630fe50062e0cea120927feb78f05e6dd2217f94cc9ff3dbc7ffaa029bf8eaa01abaaa6073400f83709dddcfbe645d5298dbe2281ebb54296f3b037a9c608ae84f6f3fe248341b541722403a1c5792fe371c5e2b32b9066af0ac496b8e6d6ba56792682841de5091a4b479a074380a782f7ac19938f8628f6877b3bf34801f4745b0a6114fa68f5f1b02df5209491eb1e6b48963e5fc587c2c2d0e8a1dba71d7b9895cebc056d8f92a6439f6e330f972415f244ac4c9753563ba9e96bece4c2efd50eabd68a78c487eadbf25d9e5367a9084f6dc6a71c68a867df3b0ab5110c719743a40c79ca1431848c7957e276d3b6"})

8.022367205s ago: executing program 2 (id=121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x9, 0xa08, 0x54f, 0x3, 0x4, 0xe8c0, 0x80, 0x4, 0x400, 0x9, 0x8, 0x2, 0x0, 0x80000000, 0x5, 0x7], 0xb000, 0x4f1af3943d738ad7})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

7.555008896s ago: executing program 2 (id=124):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5})
getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000001e80))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000980), 0x1, 0x123a00)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000380)=""/83)
io_setup(0x10007, &(0x7f00000000c0))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x4, 0x15, 0x0, 0x1, 0x13, "0062ba7d02000000000000f7ffffff00"})
r3 = syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) (async)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000980), 0x1, 0x123a00) (async)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000380)=""/83) (async)
io_setup(0x10007, &(0x7f00000000c0)) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x4, 0x15, 0x0, 0x1, 0x13, "0062ba7d02000000000000f7ffffff00"}) (async)
syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$uac2(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac2(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)

5.259866179s ago: executing program 0 (id=140):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x18, 0x5, 0x3, 0x7, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_lifetime={0x4, 0x2, 0x9, 0x8, 0x8009, 0x8}, @sadb_x_sec_ctx={0x1, 0x18, 0x4, 0x67}]}, 0x38}}, 0x400c050)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x294, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "4c8fabedcb06e2e86429e54d2c63d89e8f4e4dcd8bee5a340d3a6d45392022cfcc42de0997f44dcd11b7cb8d1d98270a8f2d5c85388bd5615f2c5196960dc7200a9b610606edc4bbc7817b5913ac58e7789be2ac2aa2e938c785a564e602c9d03a82eab5681cd2309c8ccacce348594a1ecfddd53fa0817bc58096e937d5e1dfcb5734d9f2405a4c3c2f6c9912579392ff25690cc1b78ebcda26209b26ec48b4ad285ef0fa8e08e816aef1ad2e26351ae28d5bcaf10de930605e8afc8a250cfc9a4724262dc8404dbe4d54e918d0ab25b19ea93196c516087c43"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x24, 0x5, "14d547e6a74bb719aa733c29451a7e08f91aa7ee19acf3b025f09652f197e4c6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "ea3a18fed66077a16cb2b8b0908a92b25016ec3a5fdc84575b2bc5976c72d8b76818ab5f3e42293d88e4d811188cbb1675cfac9a27109c811aefa1c69e719b4c73c926610fe690df9f6a97784a95c181cf57afe4fc2c181140202f96a7865428b71178c851347542529a12d6c4c5b216d56a657c1f03d81257d61a4dacae025aa78d7812917e89d061b05442cda8b1ee864050c46dfadc67bd6517cf625fc7b91b85277b585ffa39327f25f5504ecef9adf7bfa8bd099f2f18f52e514f11e55e04af0b31c2e24ada0db2c0b3dfa9c05b8af1dd2fb49e508be80f69999fb14fd2bed1"}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0xf38a, 0x6, 0x9, 0x0, 0x0, <r4=>0xffffffffffffffff})
sched_setscheduler(r4, 0x3, &(0x7f0000000580)=0x8d)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x220, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0xb, 0x1, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x5, 0x9, 0x200, 0x2, 0x0, 0x4, 0x692]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0xa}, {0x1, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {}, {0x5, 0x7}, {0x4, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ec3, 0xfff, 0x800, 0x3, 0x2, 0x4, 0x9, 0x15]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x96b, 0x9, 0x8, 0x69a4, 0x0, 0x54a0, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffed, 0x36, 0xf13, 0xfffd, 0xfff9, 0xc, 0x87be, 0x9]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0xc, 0x2, 0x18, 0xb, 0x1b, 0x1b, 0x3, 0x6, 0x48, 0x6c, 0x6c, 0x4, 0x2, 0x5, 0x2, 0x24, 0x5]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x9}, {0x4, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x2}, {0x2, 0x5}, {0x5, 0x9}, {0x2, 0x6}, {0x2, 0x5}, {0x1}, {0x4, 0xa}, {0x1}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x5}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7a2, 0x5, 0x1, 0x9, 0x7, 0x101, 0x1]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x300, 0xc04, 0x7, 0xc, 0x3, 0x3, 0x2, 0xa19c]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x2, 0x8, 0x2, 0x7fff, 0x82, 0x3]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x1b, 0x18, 0x12, 0x9, 0x5, 0x30, 0x60, 0xc, 0x2, 0x48, 0x2, 0x2, 0x6, 0x18, 0x36, 0x6c, 0x16, 0xb, 0x26, 0x2, 0x1b, 0x1b]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x5, 0x3}, {0x3, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0xa}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x8}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x7}, {0x0, 0x8}, {0x3, 0x5}, {0x5, 0x7}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x8}, {0x4, 0x9}, {0x7, 0x8}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x8}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x5}, {0x6, 0x5}]}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4814}, 0x81)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004010)
pipe2(&(0x7f0000000a40)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4080)
fcntl$lock(r7, 0x5, &(0x7f0000000a80)={0x1, 0x0, 0x8000000000000001, 0x8, r4})
syz_ublk_setup_io_uring(0x30b6, &(0x7f0000000ac0)={0x0, 0xb712, 0x10000, 0x3, 0x152, 0x0, r9}, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0))
stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
mount$overlay(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x875084, &(0x7f0000000d40)={[{@verity_off}, {@metacopy_off}], [{@euid_lt={'euid<', r10}}, {@obj_role={'obj_role', 0x3d, '@{o^-:-'}}]})
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r7)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000e00)={'xfrm0\x00'})
sendfile(r7, r7, &(0x7f0000000e40)=0x6, 0x80000000)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000e80)={0x1, 'macvtap0\x00', {}, 0x4})
pipe2(&(0x7f0000000ec0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x80)
epoll_pwait(r8, &(0x7f0000000f00)=[{}, {}], 0x2, 0x92, &(0x7f0000000f40)={[0x495]}, 0x8)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r12)
sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r13, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000010c0))
r14 = syz_create_resource$binfmt(&(0x7f0000001100)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r14, 0x41, 0x1ff)
close_range(0xffffffffffffffff, r11, 0x2)

5.19433675s ago: executing program 0 (id=141):
syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008630731204000010203010902600003010440f60904000000010100000a240100000a000201020904010000000000000904010101010200000905010910000609010725010c7705000904020000010201010200000905820940000c020607250100000100000000000000"], 0x0)
syz_usb_connect(0x5, 0x3b2, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x0, 0x9f, 0xfa, 0x40, 0x66b, 0x2203, 0x6a1c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a0, 0x2, 0x1, 0x7, 0x40, 0x7, "", [{{0x9, 0x4, 0xcc, 0xf, 0x5, 0xbe, 0x41, 0x5f, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x36}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0x52, 0xfff, 0x6, 0x1}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x7, 0x0, "f1ef6a60a7"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x405, 0x3, 0x80, 0xce0, 0x7f, 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0xc, "2fbff7"}]}], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x3, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0x7, 0x4, 0x0, 0xbe, 0x6, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc1, 0x4e}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x10, 0x5, 0x4, [@generic={0x26, 0x4, "dce35598bad5c80a3309cafa7dd3ac6361ed8a80b5012a5e725e84a4448f5d6f33c5503b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2a, 0x400}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x9c, 0xf5, [@generic={0xa, 0x22, "149101014fcf4abb"}]}}]}}, {{0x9, 0x4, 0xb3, 0x3f, 0x9, 0x3, 0x3e, 0x2, 0x29, [], [{{0x9, 0x5, 0x5, 0xc, 0x200, 0x5, 0x9, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x4, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x63}]}}, {{0x9, 0x5, 0x88, 0x2, 0x8, 0x8, 0xe, 0x6c, [@generic={0x45, 0xd, "8e6a2ea021fe18ba25ad1f67656577ddc062492958419786b5c548d7e665a8c3cea0f72719a6f52fa285df7625e3cc88193962ea3b53a6628b6e0d261effed8ac723b4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1a, 0x101}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x2, 0x2, 0x7, [@generic={0xe5, 0xb, "2446ea344afe13ceedb8bd437a918c910dd4391f0c9980f60bd890cc427972f7cd02dbaacc196a1bc2319fb1f104df4a10980b1187daed0e3ed2c09a1b38e4e05a6322485aded4fdb9ad1f78a7741bbf9c4b86a92dfce97f73d2f7b3f91d4f3e459f8e15479bdeb27d2f74038ba8ad531f6d1dd993448da5cc3bacec2133f408c792d4d7b95315bf127262f197bb8459b4ad1d078a81c1aeb3a548969768fbf7f7aa3eb4d8a876be2bcbbf015541d492b8ec3cf5e9e7263186fef37b1f10fd7c3c1bdea0c0cf9220c0a9fbc8a3dfa60e345e54f24150866d6439ea14b10292d7a05422"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x0, 0x3, 0xff, 0x2}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x0, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6a, 0xfffe}, @generic={0x63, 0xb, "c538fe4d5d27c16eb3138144733b86859869e05c2f432f5bbb23a997413930bf5e415b634851774c548ec1fd040b150b6695a1ae02c399297ea14d1138999da820ea7c07c6d29d146a71059e046c746baaa7f382acd2af726a2238736ac9586df3"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x4, 0x7f, 0x52}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x3, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x5, 0x10, 0x9, [@generic={0xce, 0x2, "c48d38748b07f32a636fdd69e73f8773aa64e98aab187c6ab3db14ae35c148341ba71fe4183023e3369e6db7fa11424e750922f81e86e5ac6c4bc0cb5289e5f416d8b1225369f39752078a8929c9aaa7735babf822de6e9260a8e5eaa85be8398a09560c8af73bb5e2e333305cd9210ef3ea55c689deadaac5d1f4feb54de74373341ecce09298a48de2eb282b14c34c77a89d81dd006f8fd9cf06edfa2ba1b0d7da3e4f2727f5e78a8699118620c1e392d2f301e819e9cf4a535bcf065b9a20a17d59cec8ac19de2ea5dd81"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x367}]}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x1, 0xc7, 0x6, 0x8, 0x7e}, 0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="050f5e00050a1003020e000703004007100290097f96141004108f48573f94eb5526fc93cb67bfc21fc820100a0f050000401a000007cf00ff00003f000000c00000073f0000f03f000014100401e4270954820149a009314181ecf2e39d"], 0x2, [{0x98, &(0x7f0000000500)=@string={0x98, 0x3, "b9657b98c1c0cd4ddcf7c98da5b37332a6b37b3c56d22de323d8b156369f4f86922cc05f6f6a1a9bd885138a9eea288e9ee4b20283c412ddc1ab622fa3d3781f63887dd93a4ec66d6ae029b8165efbc6ff6e332d11c6425bb60212104a916d77fd84cf1dbd113e13c821199e17aa09717bead65eaf5138ef5fc313cfb88305305375dd6442236cedcaac9e5a173bea4bd8f242ab0754"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2c01}}]})

4.514483296s ago: executing program 2 (id=145):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x3c, 0x0}, 0x7}], 0x1, 0x40000103, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x80)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x60}, 0x1, 0x7}, 0x4084)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0)
syz_usb_disconnect(r3)
syz_usb_control_io$lan78xx(r3, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x40, 0x3, 0xa9, {0xa9, 0xb, "9788d902d0c8a742e72e27d72fb31052ca60b172a32f915e4b86ae42b83c0b5fb05eb76540d134986079f03b8cef789e0f5a68ee1bddd5b4e098bcc95ac9dec90aacdfbd27609706ef886577de3f24c05c2e4b1b2e490c67d60d9714216993d52d54f108906a3f30dcbbb6d87a414dbd53a726774cb3555cb1d29be75cb3aa18a5517c7dcfeea6e47fa24c2484c91ad77fa5f383e423ba920fd7d86d725e9ad982fe8fbb379c1b"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000000940)={0x34, &(0x7f00000007c0)={0x0, 0x15, 0x2d, "6fcd01449601e84957112e66eba59e4b694fb8d2d6ad454246804180d0d6b73b4be0c7eab70f5f2eb3872da0e7"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0xc0, 0xa1, 0x4, 0xf}, &(0x7f00000008c0)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000900)={0xc0, 0xa2, 0x2f, "acabf91b472c2ea5e526eda4b123d17120597606726fd13a3da5a6d3940476e3d4fa883dc9c8539dfd5c2ecab4d771"}})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x3}, 0xe}], 0x1, 0x40000000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xfe, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0xe, 0xfffffff7, 0x0, 0xff, 0xe, 0x81})
chdir(&(0x7f0000000140)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0)
rename(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @loopback, 0xfff}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0xa8}, 0x20000014)

3.9004142s ago: executing program 0 (id=148):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfc)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.765055564s ago: executing program 0 (id=150):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x7fff, 0x5, "00620400064a8db42b21c8e5ff1a00"})
r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
pwritev(r2, &(0x7f0000000280)=[{&(0x7f0000000000)="2d74115fd9", 0x2}], 0x1, 0x4, 0xa)
syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d0423084839010203010902"], 0x0)
r3 = syz_open_pts(r1, 0xc0000)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x11)
shutdown(r0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@initdev, @in6}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xfffffd36)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x340, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xb, "", [{{0x9, 0x4, 0x0, 0x13, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x85, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x2f, {0x2f, 0x23, "1ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a477975a81c7f29ce7c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x105843, 0x0)
ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

3.00830691s ago: executing program 1 (id=153):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x9, 0xa08, 0x54f, 0x3, 0x4, 0xe8c0, 0x80, 0x4, 0x400, 0x9, 0x8, 0x2, 0x0, 0x80000000, 0x5, 0x7], 0xb000, 0x4f1af3943d738ad7})
ioctl$KVM_RUN(r2, 0xae80, 0x300)

2.848090604s ago: executing program 1 (id=154):
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xb) (async)
r1 = socket$netlink(0x10, 0x3, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x80000000, 0x4) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x80000000, 0x4)
socket(0x840000000002, 0x3, 0xff) (async)
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000080)=0x9, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10)
sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x3, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000b00)="1667dbca63e151d2a42d020949b4d03863a664469252181d", 0x18}], 0x1}}], 0x1, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001e00030e2bbd7000000000000a0000001600a83674bd5f2de63bd4c53ad87f3a5fa9e200f78a0000"], 0x2c}}, 0x0)

2.836528325s ago: executing program 1 (id=155):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5a0c3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe)

2.794659096s ago: executing program 1 (id=156):
fallocate(0xffffffffffffffff, 0x0, 0x22001, 0x8)
r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x7, 0x604001)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000380))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
timer_create(0x1, &(0x7f0000001340)={0x0, 0x2f, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001380)=<r2=>0x0)
timer_gettime(r2, &(0x7f00000013c0))
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xffffffffffffffff}]})
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r9=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', r9, 0x4, 0x7, 0x4f, 0x7, 0x28, @remote, @mcast1, 0x8, 0x10, 0x64, 0x8}})
syz_clone(0x900000, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000003440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000300)='./file1\x00', 0x44842, 0x2a1b763e1b14909b)

2.644105639s ago: executing program 1 (id=157):
r0 = inotify_init()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xfe, 0x0, 0xa1a}]}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='_oo int x', 0x9)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

2.61314317s ago: executing program 1 (id=159):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
socket$tipc(0x1e, 0x5, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.582464931s ago: executing program 32 (id=159):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
socket$tipc(0x1e, 0x5, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.364088296s ago: executing program 3 (id=162):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x9, 0xa08, 0x54f, 0x3, 0x4, 0xe8c0, 0x80, 0x4, 0x400, 0x9, 0x8, 0x2, 0x0, 0x80000000, 0x5, 0x7], 0xb000, 0x4f1af3943d738ad7})
ioctl$KVM_RUN(r2, 0xae80, 0x2000000)

2.324299837s ago: executing program 0 (id=163):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0)
writev(r0, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="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", 0x1000}], 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'sit0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x18, r3}, 0x10)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@empty, @multicast2, r3}, 0xc)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f00004ec000/0x4000)=nil, 0x4000})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r4, &(0x7f0000000000)='7', 0x1)
r5 = socket$inet6(0xa, 0x80002, 0x0)
fsetxattr(r5, &(0x7f0000000000)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2.229912699s ago: executing program 3 (id=164):
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
futex(&(0x7f0000000180)=0x2, 0x7, 0x1, &(0x7f0000000280), 0x0, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.918193996s ago: executing program 0 (id=165):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
kcmp(0x0, 0x0, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)

1.520280485s ago: executing program 4 (id=160):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x200, 0x5b9c91e777613a4)
utimensat(r0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='./binderfs/binder0\x00', &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0xffffffffffffff9c)
write(0xffffffffffffffff, &(0x7f0000000200)="3720ad56096fbbf2b15556f88f38e103376e91a0e14ed3a653d901abf5914d47dfd4a2d8c1ce1a58023f430e6e3e52f0b38a0e4bee4449b27bb94fa74b66ab24d4ffae1f6382b7bbcfce65e2f99a5a4696550291d4f8fddc54b8de73c6791e30d3bddd04a6a1268080a9c0436c1cbad6374264f2ceb27d135321b51df581df", 0x7f)
lstat(&(0x7f0000000280)='./proc/thread-self/fail-nth\x00', &(0x7f00000002c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)

1.006028047s ago: executing program 2 (id=166):
r0 = socket$inet6(0xa, 0x800, 0x44039)
pipe2$9p(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000580)={0x5, {{0xa, 0x4e22, 0xc3, @dev={0xfe, 0x80, '\x00', 0x1a}}}, {{0xa, 0x4e21, 0x7, @private0, 0x8}}}, 0x108)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="140000f8ffffff00000000009c30a894d832767301000000"], 0x18}}], 0x2, 0x0)
readv(r1, 0x0, 0x0)
getsockopt$MRT6(r0, 0x29, 0xcf, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x111202, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x111202, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000140), 0x2) (async)
setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000140), 0x2)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6)
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000240)="0199523f8ec38cf84a1dc5ef26cbf2f95d45bd30f791ecbf2cc2073045a7169c5d7a5d6c809214bd0c26b69776057bb74390b4f3073cd48fc4f09bb03a7696680569501530b60c4466336ec8b1ee6b62db2201d6abe39847d9a5a79c81ef1488dbb502bc6d2fea36085e68d4797737114a661652149b3ac0ff76378610ac15d5524e86f77004bace137fb2170dfcb1d9078d83ea0bbd94cacf618c8e083028", 0x9f}, {&(0x7f0000000300)="bb0c3b1e91f28a4e3cb5efb191ef489e4ad7eca6f0c3f16867949bd04d30affcdeec4334398704b6c7237feafd826d6357a159365bb2c9c526ce5589e39e603433218f469c76f3bfbbf2acb2ebcda7f43d708b2b8c6a17031eaae5e20e4d14e47bc510dc11d224573e2f3bc849db360c66a58070a6b763eca8eed56c", 0x7c}, {&(0x7f0000000400)="4e1ec95d80fe8def4ac40b29637c69ce2897a806e6058921ffbedb777b08325fe9cf2aafae48f39008876c9c3b356372cdbed836f4f1391f67801de528ed5853bb6184f5dc3be9bbd72dac2237daa467b98c147b48e641934fe5c60ff287c8d2925b87904575c9dffa9765f503527f893f67f38592bece7bd2bd5c954313899362148cafcfe647ca", 0x88}], 0x3)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="0f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d900b80c0000000f23c00f21b3f8f801000f000f23f8ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x66}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000080))

965.783698ms ago: executing program 3 (id=167):
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0)
syz_usb_connect$uac1(0x1, 0xc0, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x0, 0x40, 0x9f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x45}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x1, 0x8, "e8ef"}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x4, "45014e66"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, 0x4, [0x5, 0x4, 0x2328d91521b2eed8, 0x6], 0x1}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x5, "4d2e4fe6"}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x1, "3ecc4ebdf0"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xc5c, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0x4, 0xb1, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfb, 0x7, 'Y', '\r'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x8, 0x8, {0x7, 0x25, 0x1, 0xc, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xd, 0xff, 0x3, {0x7, 0x25, 0x1, 0x4, 0x0, 0x7}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0x90, 0x6, 0xff, 0x2}, 0xfd, &(0x7f0000000140)={0x5, 0xf, 0xfd, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x101, 0xf, 0xdf56, [0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x52, 0x8, 0x0, 0x0, 0xda}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x1, 0x24, 0x6, 0xea}, @generic={0xd2, 0x10, 0x4, "d7522264efd0b12c6be2765275d50232667d4e73f274b9ae28de0a1b615fb8b8122a5ee92c5a51e5cc0034ad290c4ce9cdcc1256bc47027e5b5dc4245c68b8426a4635066493527fc6354242195ca5e2f1c32f602804881a5525e19779ec661e2fc70829cca09c7fe748ee7476c340084b36f1b501025294b7698652d518c523d981e6200d79f630c1d68ba31568c0d28010c4076d5e205abc24d1085bf773e19803935d0e84385d997664e4210d81d095a687e2578168aaf688aa05e1044ed569b26769d3d22757e40ee38c30c862"}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42d}}, {0xdb, &(0x7f0000000280)=@string={0xdb, 0x3, "dbc2439a0854c14de6bb2adee74f84e158bc48464ca048f02715676d2b14798728a821fc21ea401cdd0e721aed316a2774b3c683695b406becb21e209798853d61ea34aa164d2d98ff3b1b0821edf52cc80bf02dac800872506ece447bb363f081793a981994acb40c116df7c0188dccfc62865fea7249c558f6b725c1f442fa2f7793dcf89a878ca4028747f749fe6f5604fe618d7d3b938f6def372f6bf2b7da9ad06c9f7959f83f126edc524e745b6657ea7df4afd7ad371c1af95768eef212d8921d1777ef950ab3c6f196c6aa7942bbe3ea42b92c7c75"}}, {0xa7, &(0x7f0000000380)=@string={0xa7, 0x3, "b243bfcf75bca074556d7b756e807bf5c0ce904b63dd3e4687d82d4df4714d9299450e8c5cbdda672632fd54cb4166b2f00896fbe12a4e95537fb01cc6711657076655e75f8200353827adcb9c2ad2eb55b8054e4ee5474ca97c21ca136e392364fc4802dd65c62d6063f25a12100ce672f91a5722c8972efe638c531768348c4fb78a82ca23d44f65f9aba86e29a851062be37adf9d5b53151d1d443f74c5cdefd57398b5"}}, {0x79, &(0x7f0000000440)=ANY=[@ANYBLOB="7903b529a7e391a36b9470047ac54276e9fb7e18bb3670d55419d1b5bcb773b7db25bfe9bfd4042fa09fe0e7e6ba396b8bafb48614ec38af1399b7ce0f2ce83ae4dd11ca6f99c08daa7867f8d87ab4a4792e9caac6a2e8dcd216b90d750edba750be0e3ca047bba742f32e0ac2564816ca557f010027ba8210"]}]})
syz_usb_connect$uac1(0x4, 0xc9, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x5, 0x73a47574bc774cdd, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa0e8, 0x2e}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0x7, '3F!'}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x1, 0x3, 0xfb}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x4, 0x6, [0x3, 0x8, 0x5, 0x5, 0xa, 0x5], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xdf, 0x7, 0x2, {0x7, 0x25, 0x1, 0xc, 0xf3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x9, 0x3, "fa9e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8, 0x81, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x9ef, 0x5, 0xf}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x5ab, 0x3, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x39, 0x8, 0x4, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf, 0x1, 0x4, {0x7, 0x25, 0x1, 0x8, 0x3d, 0x1}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0x0, 0x6, 0x8, 0xff, 0x8}, 0x56, &(0x7f0000000680)={0x5, 0xf, 0x56, 0x4, [@generic={0x38, 0x10, 0x2, "d82c01e6284756be1fc48fd355c94cfc44ed57aa3de98593dade7d22eabe4d311891bc3ffe9851092c3c6666a0e24b2bdc9bdc73e5"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0xa7, 0x40, 0x6, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x3, 0x6, 0x6, 0x1, 0x2}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x820}}, {0x82, &(0x7f0000000740)=@string={0x82, 0x3, "ca92ca6545f7b179ba0f3f1b6b7e2f349a61293952239f9364a23f4e7d40441d4796c793eaf8f5d54a91bc3f4517b3a9b84b1eede48afdcb7b28df0a7982b659f1e893b7f4cdcfb6839d9a967eb888a46a97631c29e98cc9b90c2ab527f4e09b7db71a38d59d9eb9604a92e8216560560a32d411aaa827f8036d6f0917c41c8b"}}, {0x2f, &(0x7f0000000800)=@string={0x2f, 0x3, "73e81a453ab801446986aeaa51e058fa594dcb877404d1fe68150475d086a13dcb5916ce8ba03bf6f2516d4eba"}}, {0xdb, &(0x7f0000000840)=@string={0xdb, 0x3, "6806aad5f82983e8eb9df4f865be670812f94077c45630cd3b2e3b749659242ac3cf76dfe2b5428ab0bb2998b5c6179e8eb477fefbe2c98084ea9e2d0b9c84bf966be18090880dea69bd95b948822bbc1ea8930f3b1ad2a6aa08cf5846744134df7459413f583f4720652864b113fbc2ea0a7439a699d0869b5171dcf39131ea8584cbe65a90094f01a279bddfa4a514ec7b7189aeaf975f10744395d4995d5bf5bbb92b06fb43b82940f8b97a4d3fd8212d6039aceb095a2fa768601fff89e5166ade3a618600c82d6b1cefa48c65a64700a8db8342a8b1cb"}}]})

779.966822ms ago: executing program 2 (id=168):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))
fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f00000000c0))
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
setuid(r1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x800, 0x81, 0x1, 0x0, 0x0, "54594b93008ae876e596e6153b681e347fff75", 0x800, 0xffffc437})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40300, 0x25)
readahead(r2, 0x0, 0x9)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x57}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x4000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000480)={0x87, 0x5, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x71e}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0x7c}]}, 0x38)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000004c0)={{&(0x7f0000e0f000/0x3000)=nil, 0x3000}})
mmap(&(0x7f0000eda000/0x3000)=nil, 0x3000, 0x1800002, 0x110, r2, 0xcc9d6000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000500))
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f5, 0x20, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40008021}, 0x20000000)
r6 = syz_io_uring_setup(0x6264, &(0x7f0000000640)={0x0, 0xce93, 0x20, 0x3, 0x1d3, 0x0, r2}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740))
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000f2c000/0x3000)=nil, 0x3000, 0x11)
setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000780)="692471caa5a054455a5a2da22e1df84b1a8c62088935d05ea4cf49735f637ecb75e77512fe132538ebca4d57ce33d446e372bbcd25ab678884f3de4b908070ea245fefcfe1d05ed2f54a174f21968bb9731af2596ae7886abcc8f4da28e15b16b8e9c1e30377386bf8d1c6d06ab93106a4b3f794606dbba0da0ad97fc6f0ae8fd377c3b5f4be18ca38f3231bf2eb29de829ce31a8dfc", 0x96)
tee(r5, r6, 0xc46d, 0x2)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0x6, 0x86e5, 0x2, 0x1, 0x1}})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000880))
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x20, 0xbe, "b9c4c792d258760a6e88f4024db8eb81f55d74b8cdc9510a3c1b471f"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40111}, 0x48000)

769.086782ms ago: executing program 33 (id=168):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000))
fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f00000000c0))
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
setuid(r1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x800, 0x81, 0x1, 0x0, 0x0, "54594b93008ae876e596e6153b681e347fff75", 0x800, 0xffffc437})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40300, 0x25)
readahead(r2, 0x0, 0x9)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x57}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x4000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000480)={0x87, 0x5, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x71e}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0x7c}]}, 0x38)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000004c0)={{&(0x7f0000e0f000/0x3000)=nil, 0x3000}})
mmap(&(0x7f0000eda000/0x3000)=nil, 0x3000, 0x1800002, 0x110, r2, 0xcc9d6000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000500))
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f5, 0x20, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40008021}, 0x20000000)
r6 = syz_io_uring_setup(0x6264, &(0x7f0000000640)={0x0, 0xce93, 0x20, 0x3, 0x1d3, 0x0, r2}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740))
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000f2c000/0x3000)=nil, 0x3000, 0x11)
setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000780)="692471caa5a054455a5a2da22e1df84b1a8c62088935d05ea4cf49735f637ecb75e77512fe132538ebca4d57ce33d446e372bbcd25ab678884f3de4b908070ea245fefcfe1d05ed2f54a174f21968bb9731af2596ae7886abcc8f4da28e15b16b8e9c1e30377386bf8d1c6d06ab93106a4b3f794606dbba0da0ad97fc6f0ae8fd377c3b5f4be18ca38f3231bf2eb29de829ce31a8dfc", 0x96)
tee(r5, r6, 0xc46d, 0x2)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0x6, 0x86e5, 0x2, 0x1, 0x1}})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000880))
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x20, 0xbe, "b9c4c792d258760a6e88f4024db8eb81f55d74b8cdc9510a3c1b471f"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40111}, 0x48000)

184.445496ms ago: executing program 3 (id=170):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121000, 0x81)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000850)
r1 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x101400, 0x44, 0x31}, 0x18)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, <r3=>0x0}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0x10, 0x3, {0x9, @struct={0x3, 0x81}, <r4=>0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x4, 0x5, 0x1e, @usage=0x10, 0x8, 0xf, [0x2, 0xde, 0x10001, 0xd, 0x7fff, 0x7ff]}, {0xd444, @struct={0x2, 0x3}, 0x0, 0x5, 0xeaa4, 0x4c, 0x100000000, 0x1d7c95c5, 0x8, @usage=0x2ccb, 0x3, 0x65, [0x100000001, 0x0, 0x5, 0x2, 0x81b, 0x4]}, {0x57b, @struct={0x400, 0x1}, 0x0, 0x0, 0x5, 0x1000, 0x2, 0x6, 0x8, @usage=0x7, 0x8, 0x4, [0x401, 0x9, 0x401, 0x3ff, 0x2, 0xffffffff00000000]}, {0x81, 0x2, 0x7}})
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000008c0)={{r0}, r3, 0x8, @unused=[0x10001, 0x7ff, 0x6, 0x1c31], @devid=r4}) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001900), r0) (rerun: 64)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002580)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002540)={&(0x7f0000001940)={0xbd8, r5, 0x2fb7f68e43ae40e9, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0xb84, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "687dd4b7e51d3d8fa16cb14d5a6a37662d93cf11c0f15fdc01ea595813fa16f0"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}]}, {0x37c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ALLOWEDIPS={0x2e4, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0e7b89322fdad535e18e5c82d2adf1c1e7924cda05a07d481421210cb575846a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ba4dea8a91ae53125acbda5ff0866c2fd6a681f6c7a1011f30be86b8f464d63a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @private0, 0x8}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "67140cb95a619643a0edcdd77e5c642e2957caaa4a225dcac91c7aaf05be331d"}]}, {0x72c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x6a0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x4b, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xcd2d}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe1fb}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600), r0)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x54, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x2c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x9, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d4}, 0x2800)
write(r0, &(0x7f0000002840)="2695ee939a0d2590", 0x8)
sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f0000002880)=@data_c2h={{0x7, 0x0, 0x18, 0x80, 0xdf}, 0x4, 0x9, 0x3, 0x3, "540adaa2"}, 0x80, 0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940), r0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002a00)={'gretap0\x00', &(0x7f0000002980)={'gretap0\x00', <r8=>0x0, 0x18, 0x700, 0x8, 0x4, {{0x18, 0x4, 0x3, 0x7, 0x60, 0x65, 0x0, 0xb6, 0x29, 0x0, @loopback, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x2e, 0x3, 0x2, [{@multicast1, 0x80000001}, {@remote, 0x8}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@private=0xa010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x9}, {@empty, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @noop, @end]}}}}}) (async)
getsockname$packet(r2, &(0x7f0000002a40)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002a80)=0x14) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002ac0)={'vxcan1\x00', <r10=>0x0}) (async, rerun: 64)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002b00)={<r11=>0x0, @multicast1, @private}, &(0x7f0000002b40)=0xc)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000002b80)={@ipv4={""/10, ""/2, @private}, <r12=>0x0}, &(0x7f0000002bc0)=0x14) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002cc0)={'syztnl2\x00', &(0x7f0000002c00)={'syztnl0\x00', <r13=>0x0, 0x7800, 0x1, 0xa, 0x3, {{0x1a, 0x4, 0x3, 0x4, 0x68, 0x67, 0x0, 0x38, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x44, 0x3, 0x7, [{@loopback}, {@private=0xa010100, 0x10000}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7fffffff}, {@multicast2, 0x9}, {@empty, 0x9}]}, @rr={0x7, 0x13, 0xe4, [@loopback, @empty, @multicast2, @loopback]}, @rr={0x7, 0x13, 0xce, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101]}, @noop]}}}}})
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000002d00)={@empty, <r14=>0x0}, &(0x7f0000002d40)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000003000)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002d80)={0x234, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) (async)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), r0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x50, r15, 0x102, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd8, 0x34}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xc}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000031c0)=0x3)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003280)={'syztnl1\x00', &(0x7f0000003200)={'tunl0\x00', <r16=>r10, 0x7800, 0x40, 0x4, 0xc, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x65, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@ssrr={0x89, 0xb, 0x4a, [@remote, @rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0x4f, [@broadcast, @rand_addr=0x221a, @multicast1]}]}}}}})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000032c0)={r16, 0x1, 0x6}, 0x10) (async)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x8dd5ebd853dbde0b}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x2400800d)

109.932948ms ago: executing program 3 (id=171):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x9, 0xa08, 0x54f, 0x3, 0x4, 0xe8c0, 0x80, 0x4, 0x400, 0x9, 0x8, 0x2, 0x0, 0x80000000, 0x5, 0x7], 0xb000, 0x4f1af3943d738ad7})
ioctl$KVM_RUN(r2, 0xae80, 0x3000000)

0s ago: executing program 3 (id=172):
setns(0xffffffffffffffff, 0x10000000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async, rerun: 32)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x1a8) (async, rerun: 32)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async, rerun: 64)
r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 64)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) (async)
r3 = inotify_init1(0x1c0800)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x4, 0x3, 0x1, 0x0, '-'}}, 0x2a) (async)
getrandom(0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async)
close(r3) (async)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00')
exit(0xf) (async)
getdents64(r4, 0x0, 0x0) (async)
fchdir(r0) (async)
getcwd(0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}}) (async, rerun: 64)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r5) (rerun: 64)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts.
[   28.221258][   T36] audit: type=1400 audit(1788915711.239:64): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.222350][  T286] cgroup: Unknown subsys name 'net'
[   28.244136][   T36] audit: type=1400 audit(1788915711.239:65): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.271585][   T36] audit: type=1400 audit(1788915711.269:66): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.271789][  T286] cgroup: Unknown subsys name 'devices'
[   28.380913][  T286] cgroup: Unknown subsys name 'hugetlb'
[   28.386543][  T286] cgroup: Unknown subsys name 'rlimit'
[   28.479126][   T36] audit: type=1400 audit(1788915711.499:67): avc:  denied  { setattr } for  pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.502612][   T36] audit: type=1400 audit(1788915711.499:68): avc:  denied  { mounton } for  pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.527616][   T36] audit: type=1400 audit(1788915711.499:69): avc:  denied  { mount } for  pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.562290][  T288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.571158][   T36] audit: type=1400 audit(1788915711.589:70): avc:  denied  { relabelto } for  pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.597171][   T36] audit: type=1400 audit(1788915711.589:71): avc:  denied  { write } for  pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   28.677500][   T36] audit: type=1400 audit(1788915711.689:72): avc:  denied  { read } for  pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.678058][  T286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.703125][   T36] audit: type=1400 audit(1788915711.689:73): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.503420][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.510917][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.518105][  T295] bridge_slave_0: entered allmulticast mode
[   29.524515][  T295] bridge_slave_0: entered promiscuous mode
[   29.532433][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.539512][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.546584][  T295] bridge_slave_1: entered allmulticast mode
[   29.552947][  T295] bridge_slave_1: entered promiscuous mode
[   29.582266][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.589440][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.596501][  T293] bridge_slave_0: entered allmulticast mode
[   29.602839][  T293] bridge_slave_0: entered promiscuous mode
[   29.612253][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.619345][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.626508][  T293] bridge_slave_1: entered allmulticast mode
[   29.632822][  T293] bridge_slave_1: entered promiscuous mode
[   29.677560][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.684689][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.691980][  T296] bridge_slave_0: entered allmulticast mode
[   29.698164][  T296] bridge_slave_0: entered promiscuous mode
[   29.707225][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.714314][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.721442][  T296] bridge_slave_1: entered allmulticast mode
[   29.727585][  T296] bridge_slave_1: entered promiscuous mode
[   29.760966][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.768045][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.775274][  T294] bridge_slave_0: entered allmulticast mode
[   29.781497][  T294] bridge_slave_0: entered promiscuous mode
[   29.793197][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.800346][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.807432][  T294] bridge_slave_1: entered allmulticast mode
[   29.814084][  T294] bridge_slave_1: entered promiscuous mode
[   29.931325][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.938436][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.945805][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.952856][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.964973][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.972060][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.979349][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.986484][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.011613][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.018832][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.026115][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.033207][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.041766][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.048965][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.057307][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.064817][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.113957][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.121710][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.131061][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.139575][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.161969][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.169074][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.176606][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.183695][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.199135][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.206207][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.225647][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.232731][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.249452][  T296] veth0_vlan: entered promiscuous mode
[   30.277803][  T296] veth1_macvtap: entered promiscuous mode
[   30.293496][  T293] veth0_vlan: entered promiscuous mode
[   30.311607][  T295] veth0_vlan: entered promiscuous mode
[   30.317276][  T294] veth0_vlan: entered promiscuous mode
[   30.330957][  T293] veth1_macvtap: entered promiscuous mode
[   30.359227][  T295] veth1_macvtap: entered promiscuous mode
[   30.367961][  T294] veth1_macvtap: entered promiscuous mode
[   30.378189][  T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.448095][  T314] overlayfs: disabling nfs_export due to verity=require
[   30.465091][  T314] overlayfs: missing 'lowerdir'
[   30.468383][  T319] rust_binder: Failure in copy_transaction_data: EINVAL
[   30.471169][  T319] rust_binder: 316:319 transaction call to 316:0 failed EINVAL, code 0 size 57-24
[   30.471359][  T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   30.479706][   T31] rust_binder: 316: undelivered TRANSACTION_ERROR: 29201
[   30.547404][  T322] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.708555][  T335] capability: warning: `syz.0.9' uses 32-bit capabilities (legacy support in use)
[   30.789226][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   30.901961][  T346] Need at least one configuration in g1.
[   30.907804][  T346] udc dummy_udc.0: failed to start g1: -22
[   30.914950][  T346] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[   30.926287][  T346] UDC core: g1: couldn't find an available UDC or it's busy
[   30.939213][   T10] usb 3-1: Using ep0 maxpacket: 32
[   30.947746][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.961503][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.977630][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   30.988884][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.001182][   T10] usb 3-1: config 0 descriptor??
[   31.414788][   T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0
[   31.434880][   T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0
[   31.442098][   T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0
[   31.450708][   T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0
[   31.461031][   T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0
[   31.471159][   T10] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[   31.615000][  T324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.623631][  T324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.633453][   T10] koneplus 0003:1E7D:2D51.0001: couldn't init struct koneplus_device
[   31.642804][   T10] koneplus 0003:1E7D:2D51.0001: couldn't install mouse
[   31.651107][   T10] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -71
[   31.661853][   T10] usb 3-1: USB disconnect, device number 2
[   31.679765][  T373] FAULT_INJECTION: forcing a failure.
[   31.679765][  T373] name failslab, interval 1, probability 0, space 0, times 1
[   31.692769][  T373] CPU: 1 UID: 0 PID: 373 Comm: syz.1.22 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc
[   31.692805][  T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   31.692825][  T373] Call Trace:
[   31.692832][  T373]  <TASK>
[   31.692840][  T373]  __dump_stack+0x21/0x30
[   31.692881][  T373]  dump_stack_lvl+0x140/0x1c0
[   31.692908][  T373]  ? __cfi_dump_stack_lvl+0x10/0x10
[   31.692934][  T373]  ? do_futex+0x32a/0x510
[   31.692958][  T373]  dump_stack+0x19/0x20
[   31.692993][  T373]  should_fail_ex+0x3c2/0x510
[   31.693017][  T373]  should_failslab+0xac/0x100
[   31.693043][  T373]  kmem_cache_alloc_noprof+0x42/0x410
[   31.693063][  T373]  ? getname_flags+0xcc/0x6b0
[   31.693085][  T373]  getname_flags+0xcc/0x6b0
[   31.693104][  T373]  ? __kasan_check_write+0x18/0x20
[   31.693124][  T373]  __x64_sys_mkdirat+0x7e/0xa0
[   31.693148][  T373]  x64_sys_call+0x2ba8/0x2ee0
[   31.693166][  T373]  do_syscall_64+0x57/0xf0
[   31.693192][  T373]  ? clear_bhb_loop+0x50/0xa0
[   31.693216][  T373]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   31.693238][  T373] RIP: 0033:0x7f25e799e159
[   31.693262][  T373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   31.693278][  T373] RSP: 002b:00007f25e885a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   31.693307][  T373] RAX: ffffffffffffffda RBX: 00007f25e7c25fa0 RCX: 00007f25e799e159
[   31.693323][  T373] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   31.693336][  T373] RBP: 00007f25e7a3503b R08: 0000000000000000 R09: 0000000000000000
[   31.693349][  T373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.693362][  T373] R13: 00007f25e7c26038 R14: 00007f25e7c25fa0 R15: 00007ffd405b0f68
[   31.693380][  T373]  </TASK>
[   31.831247][    T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   31.978957][  T311] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   32.028999][    T9] usb 1-1: Invalid ep0 maxpacket: 64
[   32.129881][  T311] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   32.142902][  T311] usb 2-1: config 0 interface 0 has no altsetting 0
[   32.149652][  T311] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[   32.158895][    T9] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   32.159019][  T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.175137][  T311] usb 2-1: config 0 descriptor??
[   32.303800][  T380] loop3: detected capacity change from 0 to 7
[   32.310031][    T9] usb 1-1: Invalid ep0 maxpacket: 64
[   32.315734][    T9] usb usb1-port1: attempt power cycle
[   32.321703][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.330957][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.339289][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.348412][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.356273][  T380]  loop3: unable to read partition table
[   32.362279][  T380] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õÖ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[   32.375192][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.384341][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.392500][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.401694][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.409610][  T315]  loop3: unable to read partition table
[   32.417512][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.426742][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.437074][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.446279][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.454522][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.463857][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.472250][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.481420][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.490182][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   32.499393][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[   32.597268][  T394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   32.609066][  T311] ryos 0003:1E7D:3232.0002: report_id 3238645963 is invalid
[   32.617680][  T311] ryos 0003:1E7D:3232.0002: item 0 4 1 8 parsing failed
[   32.624945][  T311] ryos 0003:1E7D:3232.0002: parse failed
[   32.631187][  T311] ryos 0003:1E7D:3232.0002: probe with driver ryos failed with error -22
[   32.658971][    T9] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[   32.689280][    T9] usb 1-1: Invalid ep0 maxpacket: 64
[   32.812069][   T45] usb 2-1: USB disconnect, device number 2
[   32.838864][    T9] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[   32.859236][    T9] usb 1-1: Invalid ep0 maxpacket: 64
[   32.864648][    T9] usb usb1-port1: unable to enumerate USB device
[   32.941158][  T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   33.098924][  T311] usb 3-1: Using ep0 maxpacket: 32
[   33.105173][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.116184][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.125990][  T311] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   33.135044][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.143621][  T311] usb 3-1: config 0 descriptor??
[   33.238887][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   33.321574][   T36] kauditd_printk_skb: 134 callbacks suppressed
[   33.321597][   T36] audit: type=1400 audit(1788915716.339:208): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.329539][  T412] =======================================================
[   33.329539][  T412] WARNING: The mand mount option has been deprecated and
[   33.329539][  T412]          and is ignored by this kernel. Remove the mand
[   33.329539][  T412]          option from the mount to silence this warning.
[   33.329539][  T412] =======================================================
[   33.382676][   T36] audit: type=1400 audit(1788915716.399:209): avc:  denied  { mount } for  pid=411 comm="syz.1.36" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   33.388487][  T412] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   33.412320][    T9] usb 4-1: Using ep0 maxpacket: 8
[   33.418440][    T9] usb 4-1: config 0 has no interfaces?
[   33.419724][   T36] audit: type=1400 audit(1788915716.429:210): avc:  denied  { ioctl } for  pid=411 comm="syz.1.36" path="socket:[4445]" dev="sockfs" ino=4445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.430364][  T412] overlayfs: failed to look up (tracing) for ino (-66)
[   33.448522][   T36] audit: type=1400 audit(1788915716.449:211): avc:  denied  { write } for  pid=411 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.457168][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[   33.483913][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.492062][    T9] usb 4-1: Product: syz
[   33.496337][    T9] usb 4-1: Manufacturer: syz
[   33.500983][    T9] usb 4-1: SerialNumber: syz
[   33.506876][    T9] usb 4-1: config 0 descriptor??
[   33.511552][   T36] audit: type=1400 audit(1788915716.529:212): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   33.541680][   T36] audit: type=1400 audit(1788915716.559:213): avc:  denied  { mounton } for  pid=413 comm="syz.1.37" path="/7/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   33.576406][  T420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   33.588262][  T311] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[   33.595724][  T311] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[   33.602942][  T311] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[   33.610184][  T311] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[   33.617318][  T311] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0
[   33.625322][  T311] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[   33.656805][   T36] audit: type=1400 audit(1788915716.669:214): avc:  denied  { write } for  pid=423 comm="syz.1.39" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   33.679422][   T36] audit: type=1400 audit(1788915716.689:215): avc:  denied  { read } for  pid=423 comm="syz.1.39" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.702338][   T36] audit: type=1400 audit(1788915716.689:216): avc:  denied  { remount } for  pid=423 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   33.787842][  T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.796476][  T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.805341][  T311] koneplus 0003:1E7D:2D51.0003: couldn't init struct koneplus_device
[   33.813589][  T311] koneplus 0003:1E7D:2D51.0003: couldn't install mouse
[   33.820988][  T311] koneplus 0003:1E7D:2D51.0003: probe with driver koneplus failed with error -71
[   33.832409][  T311] usb 3-1: USB disconnect, device number 3
[   33.989129][    T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   34.141216][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[   34.150655][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.158679][    T9] usb 2-1: Product: syz
[   34.163099][    T9] usb 2-1: Manufacturer: syz
[   34.167724][    T9] usb 2-1: SerialNumber: syz
[   34.323901][   T36] audit: type=1400 audit(1788915717.339:217): avc:  denied  { nlmsg_write } for  pid=430 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.378123][  T426] netlink: 'syz.1.40': attribute type 29 has an invalid length.
[   34.531208][    T9] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[   34.540316][    T9] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   34.546723][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[   34.556452][    T9] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[   34.564054][    T9] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   34.570496][    T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[   34.580585][    T9] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[   34.588047][    T9] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   34.594210][   T62] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   34.605291][    T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[   34.617322][    T9] usb 2-1: USB disconnect, device number 3
[   34.628612][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.712958][  T441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.721640][  T441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.758929][   T62] usb 3-1: Using ep0 maxpacket: 32
[   34.765646][   T62] usb 3-1: unable to get BOS descriptor or descriptor too short
[   34.774232][   T62] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   34.784545][   T62] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   34.795815][   T62] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   34.805203][   T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.813293][   T62] usb 3-1: Product: syz
[   34.817551][   T62] usb 3-1: Manufacturer: syz
[   34.822225][   T62] usb 3-1: SerialNumber: syz
[   34.958852][   T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   35.034853][   T62] usb 3-1: selecting invalid altsetting 1
[   35.043166][   T62] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   35.054021][   T62] usb 3-1: USB disconnect, device number 4
[   35.067624][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   35.098921][   T45] usb 1-1: device descriptor read/64, error -71
[   35.208923][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   35.338866][   T45] usb 1-1: device descriptor read/64, error -71
[   35.368869][    T9] usb 2-1: Using ep0 maxpacket: 8
[   35.375236][    T9] usb 2-1: config 0 has an invalid interface number: 151 but max is 1
[   35.384338][    T9] usb 2-1: config 0 has no interface number 1
[   35.390568][    T9] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   35.401533][    T9] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[   35.413235][    T9] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[   35.424558][    T9] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[   35.435541][    T9] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   35.448660][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[   35.460237][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024
[   35.471384][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[   35.482835][    T9] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[   35.493209][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.501585][    T9] usb 2-1: Product: syz
[   35.506113][    T9] usb 2-1: Manufacturer: syz
[   35.511278][    T9] usb 2-1: SerialNumber: syz
[   35.516634][    T9] usb 2-1: config 0 descriptor??
[   35.522361][  T449] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[   35.567619][  T456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   35.579763][   T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   35.718872][   T45] usb 1-1: device descriptor read/64, error -71
[   35.958914][   T45] usb 1-1: device descriptor read/64, error -71
[   36.030174][   T10] usb 4-1: USB disconnect, device number 2
[   36.069194][   T45] usb usb1-port1: attempt power cycle
[   36.197095][  T471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'.
[   36.231741][  T474] netlink: 232 bytes leftover after parsing attributes in process `syz.2.54'.
[   36.379497][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   36.408893][   T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   36.430779][   T45] usb 1-1: device descriptor read/8, error -71
[   36.508924][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   36.528874][   T10] usb 4-1: Using ep0 maxpacket: 32
[   36.536253][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.547288][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.557636][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   36.567462][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.571334][   T45] usb 1-1: device descriptor read/8, error -71
[   36.579817][   T10] usb 4-1: config 0 descriptor??
[   36.671226][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.682543][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   36.689483][    T9] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[   36.698758][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.709048][    T9] usb 3-1: config 0 descriptor??
[   36.819001][   T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   36.840828][   T45] usb 1-1: device descriptor read/8, error -71
[   36.971745][   T45] usb 1-1: device descriptor read/8, error -71
[   36.995322][   T10] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   37.003177][   T10] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   37.011914][   T10] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   37.019233][   T10] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   37.026548][   T10] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   37.035616][   T10] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0
[   37.088865][   T45] usb usb1-port1: unable to enumerate USB device
[   37.208778][  T465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.223099][  T465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.237481][   T10] koneplus 0003:1E7D:2D51.0004: couldn't init struct koneplus_device
[   37.247478][  T476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.258756][   T10] koneplus 0003:1E7D:2D51.0004: couldn't install mouse
[   37.267109][  T476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.275798][   T10] koneplus 0003:1E7D:2D51.0004: probe with driver koneplus failed with error -71
[   37.292006][   T10] usb 4-1: USB disconnect, device number 3
[   37.530581][    T9] usbhid 3-1:0.0: can't add hid device: -71
[   37.543591][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   37.555358][    T9] usb 3-1: USB disconnect, device number 5
[   37.863046][  T485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   37.913481][   T10] usb 2-1: USB disconnect, device number 4
[   38.118861][   T45] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[   38.239916][  T499] rust_binder: 498:499 got reply transaction with no transaction stack
[   38.260281][  T499] rust_binder: 498:499 transaction reply to 0:0 failed EINVAL, code 0 size 0-0
[   38.278917][   T45] usb 1-1: device descriptor read/64, error -71
[   38.287007][  T310] rust_binder: 498: undelivered TRANSACTION_ERROR: 29201
[   38.338035][   T36] kauditd_printk_skb: 204 callbacks suppressed
[   38.338054][   T36] audit: type=1400 audit(1788915721.349:422): avc:  denied  { mounton } for  pid=503 comm="syz.1.66" path="/15/sys" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   38.389852][   T36] audit: type=1400 audit(1788915721.399:423): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.414690][   T36] audit: type=1400 audit(1788915721.399:424): avc:  denied  { read write open } for  pid=295 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.440868][   T36] audit: type=1400 audit(1788915721.399:425): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.466413][   T36] audit: type=1400 audit(1788915721.439:426): avc:  denied  { read } for  pid=505 comm="syz.1.67" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   38.488845][   T36] audit: type=1400 audit(1788915721.439:427): avc:  denied  { read open } for  pid=505 comm="syz.1.67" path="net:[4026532307]" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   38.520815][   T36] audit: type=1400 audit(1788915721.439:428): avc:  denied  { create } for  pid=505 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   38.540696][   T36] audit: type=1400 audit(1788915721.439:429): avc:  denied  { accept } for  pid=505 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   38.560378][   T36] audit: type=1400 audit(1788915721.439:430): avc:  denied  { create } for  pid=505 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.580369][   T45] usb 1-1: device descriptor read/64, error -71
[   38.587325][  T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   38.590081][   T36] audit: type=1400 audit(1788915721.439:431): avc:  denied  { read } for  pid=505 comm="syz.1.67" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.618508][  T508] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   38.738859][  T310] usb 3-1: Using ep0 maxpacket: 32
[   38.746754][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.758292][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.770429][  T310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   38.798883][  T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.818870][   T45] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[   38.839071][  T310] usb 3-1: config 0 descriptor??
[   38.878903][  T519] capability: warning: `syz.3.71' uses deprecated v2 capabilities in a way that may be insecure
[   38.947684][  T521] syzkaller1: entered promiscuous mode
[   38.958900][  T521] syzkaller1: entered allmulticast mode
[   38.988901][   T45] usb 1-1: device descriptor read/64, error -71
[   39.047362][  T526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[   39.208849][  T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   39.238891][   T45] usb 1-1: device descriptor read/64, error -71
[   39.271879][  T310] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0
[   39.292242][  T310] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0
[   39.309097][  T310] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0
[   39.316669][  T310] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0
[   39.325241][  T310] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0
[   39.345433][  T310] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[   39.356948][  T311] usb 4-1: device descriptor read/64, error -71
[   39.368982][   T45] usb usb1-port1: attempt power cycle
[   39.485161][  T502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.499374][  T502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.521927][  T310] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device
[   39.557814][  T310] koneplus 0003:1E7D:2D51.0005: couldn't install mouse
[   39.577505][  T310] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -71
[   39.598205][  T310] usb 3-1: USB disconnect, device number 6
[   39.618857][  T311] usb 4-1: device descriptor read/64, error -71
[   39.718877][   T45] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[   39.742274][   T45] usb 1-1: device descriptor read/8, error -71
[   39.858953][  T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   39.880732][   T45] usb 1-1: device descriptor read/8, error -71
[   39.998940][  T311] usb 4-1: device descriptor read/64, error -71
[   40.091946][  T560] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   40.119341][   T45] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[   40.140833][   T45] usb 1-1: device descriptor read/8, error -71
[   40.188851][   T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   40.238893][  T311] usb 4-1: device descriptor read/64, error -71
[   40.270806][   T45] usb 1-1: device descriptor read/8, error -71
[   40.349328][  T311] usb usb4-port1: attempt power cycle
[   40.360332][   T31] usb 2-1: not running at top speed; connect to a high speed hub
[   40.369914][   T31] usb 2-1: config 192 has an invalid interface number: 48 but max is 0
[   40.378563][   T31] usb 2-1: config 192 has an invalid descriptor of length 1, skipping remainder of the config
[   40.389666][   T45] usb usb1-port1: unable to enumerate USB device
[   40.396840][   T31] usb 2-1: config 192 has no interface number 0
[   40.403159][   T31] usb 2-1: config 192 interface 48 altsetting 0 endpoint 0xC has invalid maxpacket 1008, setting to 64
[   40.414441][   T31] usb 2-1: config 192 interface 48 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   40.430837][   T31] usb 2-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice= 0.7a
[   40.439977][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.447977][   T31] usb 2-1: Product: syz
[   40.452297][   T31] usb 2-1: Manufacturer: syz
[   40.457079][   T31] usb 2-1: SerialNumber: syz
[   40.668951][   T31] ftdi_sio 2-1:192.48: FTDI USB Serial Device converter detected
[   40.678284][   T31] usb 2-1: Detected SIO
[   40.685362][   T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   40.693466][  T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   40.702191][   T31] usb 2-1: USB disconnect, device number 5
[   40.709598][   T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   40.719295][   T31] ftdi_sio 2-1:192.48: device disconnected
[   40.732710][  T311] usb 4-1: device descriptor read/8, error -71
[   40.872295][  T311] usb 4-1: device descriptor read/8, error -71
[   40.914547][  T570] ./dev/sda1: Can't lookup blockdev
[   41.083742][  T579] 9pnet_fd: Insufficient options for proto=fd
[   41.108897][  T311] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   41.134228][  T311] usb 4-1: device descriptor read/8, error -71
[   41.271939][  T311] usb 4-1: device descriptor read/8, error -71
[   41.328858][   T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   41.379455][  T311] usb usb4-port1: unable to enumerate USB device
[   41.438885][   T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   41.479709][   T45] usb 1-1: Using ep0 maxpacket: 32
[   41.492616][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.504351][   T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.517877][   T45] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[   41.531425][   T45] usb 1-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0
[   41.539588][   T45] usb 1-1: Manufacturer: syz
[   41.545453][   T45] usb 1-1: config 0 descriptor??
[   41.588839][   T31] usb 3-1: Using ep0 maxpacket: 32
[   41.602484][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.627804][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.637893][   T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   41.664562][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.666577][  T595] veth1: entered allmulticast mode
[   41.684514][   T31] usb 3-1: config 0 descriptor??
[   41.685923][  T596] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.91'.
[   41.719969][  T594] veth1: left allmulticast mode
[   41.765293][  T579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.779018][  T579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.072697][   T45] hid (null): invalid report_size 1869505638
[   42.090387][   T45] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0006/input/input4
[   42.104325][   T45] input: syz Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0006/input/input5
[   42.118636][   T45] uclogic 0003:5543:0042.0006: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.0-1/input0
[   42.135694][   T31] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[   42.158868][   T31] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[   42.173013][   T31] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[   42.180769][   T31] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[   42.187931][   T31] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[   42.203198][   T31] koneplus 0003:1E7D:2D51.0007: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[   42.229953][  T429] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   42.281495][   T62] usb 1-1: USB disconnect, device number 14
[   42.349783][  T583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.369063][  T583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.393405][   T31] koneplus 0003:1E7D:2D51.0007: couldn't init struct koneplus_device
[   42.414057][  T429] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.435106][   T31] koneplus 0003:1E7D:2D51.0007: couldn't install mouse
[   42.436867][  T429] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[   42.446859][   T31] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -71
[   42.460780][  T614] fido_id[614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   42.465473][   T31] usb 3-1: USB disconnect, device number 7
[   42.485674][  T429] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[   42.518057][  T429] usb 2-1: Product: syz
[   42.525076][  T429] usb 2-1: Manufacturer: syz
[   42.539514][  T429] usb 2-1: Found UVC 1.00 device syz (225a:e1d4)
[   42.738058][  T429] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   42.749599][  T429] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[   42.758580][  T429] uvcvideo 2-1:1.1: Failed to initialize the device (-71).
[   42.767884][  T429] usb 2-1: USB disconnect, device number 6
[   42.776411][  T525] udevd[525]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory
[   43.359316][   T36] kauditd_printk_skb: 894 callbacks suppressed
[   43.359333][   T36] audit: type=1400 audit(1788915726.379:1326): avc:  denied  { ioctl } for  pid=633 comm="syz.2.103" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.392024][   T36] audit: type=1400 audit(1788915726.399:1327): avc:  denied  { ioctl } for  pid=636 comm="syz.0.104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.418871][   T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   43.427046][   T36] audit: type=1400 audit(1788915726.439:1328): avc:  denied  { ioctl } for  pid=633 comm="syz.2.103" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.453574][   T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   43.454636][   T36] audit: type=1400 audit(1788915726.439:1329): avc:  denied  { ioctl } for  pid=633 comm="syz.2.103" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.485917][   T36] audit: type=1400 audit(1788915726.489:1330): avc:  denied  { ioctl } for  pid=633 comm="syz.2.103" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.512050][   T36] audit: type=1400 audit(1788915726.489:1331): avc:  denied  { ioctl } for  pid=636 comm="syz.0.104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.537138][   T36] audit: type=1400 audit(1788915726.489:1332): avc:  denied  { ioctl } for  pid=636 comm="syz.0.104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.561946][   T36] audit: type=1400 audit(1788915726.489:1333): avc:  denied  { ioctl } for  pid=636 comm="syz.0.104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.586808][   T36] audit: type=1400 audit(1788915726.539:1334): avc:  denied  { read write } for  pid=638 comm="syz.1.105" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.610256][   T36] audit: type=1400 audit(1788915726.539:1335): avc:  denied  { read write open } for  pid=638 comm="syz.1.105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.641609][   T31] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[   43.650843][   T45] usb 3-1: unable to get BOS descriptor or descriptor too short
[   43.658675][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.668914][   T31] usb 1-1: config 0 descriptor??
[   43.673991][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.684831][   T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   43.696679][   T31] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   43.705152][   T31] ftdi_sio ttyUSB0: unknown device type: 0xc698
[   43.715714][   T45] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[   43.724897][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.734585][   T45] usb 3-1: Product: syz
[   43.739525][   T45] usb 3-1: Manufacturer: syz
[   43.744605][   T45] usb 3-1: SerialNumber: syz
[   43.901998][  T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.910807][  T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.920079][   T31] usb 1-1: USB disconnect, device number 15
[   43.926555][   T31] ftdi_sio 1-1:0.0: device disconnected
[   43.965412][  T634] rust_binder: 633:634 no such ref 0
[   43.971551][  T634] rust_binder: 633:634 got transaction to invalid handle 4
[   43.978933][  T635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.979160][  T634] rust_binder: 633:634 transaction call to 0:0 failed ENOENT, code 0 size 80-24
[   43.996880][  T635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.006573][  T311] rust_binder: 633: undelivered TRANSACTION_ERROR: 29201
[   44.014560][   T45] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[   44.029804][   T45] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[   44.041465][   T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   44.051509][   T45] usb 3-1: USB disconnect, device number 8
[   44.134768][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.328964][   T62] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   44.488856][   T62] usb 2-1: Using ep0 maxpacket: 32
[   44.497050][   T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.509096][   T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.531775][   T62] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   44.548879][   T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.562363][   T62] usb 2-1: config 0 descriptor??
[   44.859064][  T429] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   44.982140][   T62] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[   44.998877][   T62] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[   45.006389][   T62] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[   45.015002][   T62] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[   45.022755][   T62] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[   45.034549][  T429] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   45.047791][  T429] usb 3-1: config 0 has no interfaces?
[   45.055844][   T62] koneplus 0003:1E7D:2D51.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[   45.068171][  T429] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   45.079800][  T429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.091049][  T429] usb 3-1: config 0 descriptor??
[   45.191903][  T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.214017][  T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.248875][   T62] koneplus 0003:1E7D:2D51.0008: couldn't init struct koneplus_device
[   45.268898][   T62] koneplus 0003:1E7D:2D51.0008: couldn't install mouse
[   45.289175][   T62] koneplus 0003:1E7D:2D51.0008: probe with driver koneplus failed with error -71
[   45.335170][  T649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.354309][   T62] usb 2-1: USB disconnect, device number 7
[   45.361623][  T649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.374185][  T429] usb 3-1: USB disconnect, device number 9
[   45.548848][   T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   45.702989][   T45] usb 4-1: unable to get BOS descriptor or descriptor too short
[   45.713967][   T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.727823][   T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   45.753199][   T45] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   45.765327][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.774123][   T45] usb 4-1: Product: syz
[   45.778420][   T45] usb 4-1: Manufacturer: syz
[   45.783171][   T45] usb 4-1: SerialNumber: syz
[   46.038780][  T676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'.
[   46.070307][  T660] Zero length message leads to an empty skb
[   46.078915][  T429] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   46.146524][  T679] overlayfs: conflicting options: verity=on,redirect_dir=follow
[   46.244008][  T662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.260984][  T662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.319953][  T662] ªªªªªª: renamed from vlan0 (while UP)
[   46.344442][  T429] usb 2-1: unable to get BOS descriptor or descriptor too short
[   46.364113][  T429] usb 2-1: unable to read config index 0 descriptor/start: -71
[   46.386997][  T429] usb 2-1: can't read configurations, error -71
[   46.557139][  T690] FAULT_INJECTION: forcing a failure.
[   46.557139][  T690] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   46.579782][  T690] CPU: 1 UID: 0 PID: 690 Comm: syz.2.121 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc
[   46.579811][  T690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   46.579818][  T690] Call Trace:
[   46.579823][  T690]  <TASK>
[   46.579829][  T690]  __dump_stack+0x21/0x30
[   46.579850][  T690]  dump_stack_lvl+0x140/0x1c0
[   46.579864][  T690]  ? __cfi_dump_stack_lvl+0x10/0x10
[   46.579883][  T690]  ? check_stack_object+0x138/0x150
[   46.579907][  T690]  dump_stack+0x19/0x20
[   46.579921][  T690]  should_fail_ex+0x3c2/0x510
[   46.579934][  T690]  should_fail+0xf/0x20
[   46.579944][  T690]  should_fail_usercopy+0x1e/0x30
[   46.579957][  T690]  _copy_to_user+0x24/0xa0
[   46.579972][  T690]  simple_read_from_buffer+0xed/0x160
[   46.579987][  T690]  proc_fail_nth_read+0x1aa/0x220
[   46.580003][  T690]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   46.580018][  T690]  ? bpf_lsm_file_permission+0xd/0x20
[   46.580032][  T690]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   46.580047][  T690]  vfs_read+0x28b/0xc70
[   46.580059][  T690]  ? __cfi_vfs_read+0x10/0x10
[   46.580069][  T690]  ? __kasan_check_write+0x18/0x20
[   46.580080][  T690]  ? mutex_lock+0x97/0x1d0
[   46.580091][  T690]  ? __cfi_mutex_lock+0x10/0x10
[   46.580103][  T690]  ksys_read+0x145/0x260
[   46.580114][  T690]  ? __cfi_ksys_read+0x10/0x10
[   46.580125][  T690]  ? __kasan_check_write+0x18/0x20
[   46.580135][  T690]  ? fput+0x1a4/0x230
[   46.580148][  T690]  ? __kasan_check_read+0x15/0x20
[   46.580158][  T690]  __x64_sys_read+0x7f/0x90
[   46.580168][  T690]  x64_sys_call+0x2638/0x2ee0
[   46.580178][  T690]  do_syscall_64+0x57/0xf0
[   46.580193][  T690]  ? clear_bhb_loop+0x50/0xa0
[   46.580205][  T690]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   46.580216][  T690] RIP: 0033:0x7fdf1635e98e
[   46.580228][  T690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   46.580237][  T690] RSP: 002b:00007fdf14de2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   46.580250][  T690] RAX: ffffffffffffffda RBX: 00007fdf14de36c0 RCX: 00007fdf1635e98e
[   46.580258][  T690] RDX: 000000000000000f RSI: 00007fdf14de30a0 RDI: 0000000000000006
[   46.580265][  T690] RBP: 00007fdf14de3090 R08: 0000000000000000 R09: 0000000000000000
[   46.580271][  T690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.580278][  T690] R13: 00007fdf16626038 R14: 00007fdf16625fa0 R15: 00007ffee8607698
[   46.580287][  T690]  </TASK>
[   46.998944][  T311] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   47.037609][  T695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   47.158862][  T311] usb 1-1: Using ep0 maxpacket: 32
[   47.184188][  T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.218118][   T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   47.226281][  T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.254013][  T311] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   47.263784][  T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.279131][  T311] usb 1-1: config 0 descriptor??
[   47.299382][  T713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=713 comm=syz.3.129
[   47.372695][  T713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'.
[   47.383264][  T713] netlink: 'syz.3.129': attribute type 2 has an invalid length.
[   47.417418][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[   47.433054][   T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   47.448885][   T31] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   47.459728][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.473344][   T31] usb 3-1: Product: syz
[   47.477975][   T31] usb 3-1: Manufacturer: syz
[   47.488215][   T31] usb 3-1: SerialNumber: syz
[   47.528852][  T429] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   47.678850][  T429] usb 2-1: Using ep0 maxpacket: 32
[   47.700275][  T429] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024
[   47.700344][  T311] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0
[   47.719720][  T311] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0
[   47.728063][   T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   47.744152][  T311] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0
[   47.759160][  T429] usb 2-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40
[   47.768902][  T311] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0
[   47.779666][  T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.787554][  T311] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0
[   47.788840][  T429] usb 2-1: Product: syz
[   47.811601][  T311] koneplus 0003:1E7D:2D51.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0
[   47.823001][  T429] usb 2-1: Manufacturer: syz
[   47.837078][  T429] usb 2-1: SerialNumber: syz
[   47.897958][  T732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.910318][  T732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.921779][  T311] koneplus 0003:1E7D:2D51.0009: couldn't init struct koneplus_device
[   47.931662][  T311] koneplus 0003:1E7D:2D51.0009: couldn't install mouse
[   47.940682][   T31] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   47.964188][  T311] koneplus 0003:1E7D:2D51.0009: probe with driver koneplus failed with error -71
[   47.982732][  T311] usb 1-1: USB disconnect, device number 16
[   48.429244][   T36] kauditd_printk_skb: 2074 callbacks suppressed
[   48.429274][   T36] audit: type=1400 audit(1788915731.449:3410): avc:  denied  { read write } for  pid=293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.486985][   T36] audit: type=1400 audit(1788915731.449:3411): avc:  denied  { read write open } for  pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.526458][   T36] audit: type=1400 audit(1788915731.449:3412): avc:  denied  { ioctl } for  pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.565577][   T36] audit: type=1400 audit(1788915731.499:3413): avc:  denied  { read write } for  pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.579454][  T738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.634495][  T738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.659699][  T429] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[   48.680773][   T36] audit: type=1400 audit(1788915731.499:3414): avc:  denied  { read write open } for  pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.702175][  T429] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[   48.737736][   T36] audit: type=1400 audit(1788915731.499:3415): avc:  denied  { ioctl } for  pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.770530][  T429] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[   48.808664][   T36] audit: type=1400 audit(1788915731.499:3416): avc:  denied  { create } for  pid=734 comm="syz.0.134" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   48.828230][  T429] usb 2-1: USB disconnect, device number 9
[   48.919734][   T36] audit: type=1400 audit(1788915731.539:3417): avc:  denied  { read } for  pid=734 comm="syz.0.134" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   48.994145][   T36] audit: type=1400 audit(1788915731.539:3418): avc:  denied  { read open } for  pid=734 comm="syz.0.134" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   49.068328][   T36] audit: type=1400 audit(1788915731.539:3419): avc:  denied  { read write } for  pid=734 comm="syz.0.134" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   49.124781][  T525] udevd[525]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   49.528874][   T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   49.698859][   T31] usb 1-1: Using ep0 maxpacket: 8
[   49.714333][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.747919][   T31] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[   49.759728][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.767796][   T31] usb 1-1: Product: syz
[   49.773298][   T31] usb 1-1: Manufacturer: syz
[   49.778123][   T31] usb 1-1: SerialNumber: syz
[   49.928583][   T10] usb 3-1: USB disconnect, device number 10
[   49.963737][  T429] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   49.999905][  T765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.017151][  T765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.074143][   T31] usb 1-1: USB disconnect, device number 17
[   50.150645][  T429] usb 2-1: Using ep0 maxpacket: 32
[   50.177674][  T429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.218146][  T429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.237584][  T429] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   50.246915][  T429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.267310][  T429] usb 2-1: config 0 descriptor??
[   50.294314][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   50.418929][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   50.558868][   T10] usb 3-1: device descriptor read/64, error -71
[   50.730264][  T429] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0
[   50.748687][  T429] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0
[   50.770119][  T429] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0
[   50.784423][  T429] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0
[   50.801802][  T429] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0
[   50.811733][   T10] usb 3-1: device descriptor read/64, error -71
[   50.824058][  T429] koneplus 0003:1E7D:2D51.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[   50.872354][   T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   50.889182][   T45] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[   50.897588][   T45] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   50.937599][  T429] koneplus 0003:1E7D:2D51.000A: couldn't init struct koneplus_device
[   50.957790][  T429] koneplus 0003:1E7D:2D51.000A: couldn't install mouse
[   50.982139][  T429] koneplus 0003:1E7D:2D51.000A: probe with driver koneplus failed with error -71
[   51.010157][  T429] usb 2-1: USB disconnect, device number 10
[   51.048845][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   51.068950][  T458] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   51.189006][   T10] usb 3-1: device descriptor read/64, error -71
[   51.225196][  T808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.233889][  T808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.244469][  T808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'.
[   51.252862][  T458] usb 1-1: config 0 has no interfaces?
[   51.262343][  T458] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[   51.272083][  T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.280416][  T458] usb 1-1: Product: syz
[   51.284647][  T458] usb 1-1: Manufacturer: syz
[   51.289416][  T458] usb 1-1: SerialNumber: syz
[   51.296398][  T458] usb 1-1: config 0 descriptor??
[   51.458862][   T10] usb 3-1: device descriptor read/64, error -71
[   51.520617][  T798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.533429][  T798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.569425][  T458] usb 1-1: USB disconnect, device number 18
[   51.569526][   T10] usb usb3-port1: attempt power cycle
[   51.938953][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   51.988418][   T10] usb 3-1: device descriptor read/8, error -71
[   52.049057][  T825] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.059786][  T825] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.068913][  T825] bridge_slave_0: entered allmulticast mode
[   52.076347][  T825] bridge_slave_0: entered promiscuous mode
[   52.092785][  T825] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.110090][  T825] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.117497][  T825] bridge_slave_1: entered allmulticast mode
[   52.142150][  T825] bridge_slave_1: entered promiscuous mode
[   52.142657][   T10] usb 3-1: device descriptor read/8, error -71
[   52.234891][  T837] FAULT_INJECTION: forcing a failure.
[   52.234891][  T837] name failslab, interval 1, probability 0, space 0, times 0
[   52.264985][  T837] CPU: 0 UID: 0 PID: 837 Comm: syz.0.163 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc
[   52.265017][  T837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.265029][  T837] Call Trace:
[   52.265035][  T837]  <TASK>
[   52.265042][  T837]  __dump_stack+0x21/0x30
[   52.265074][  T837]  dump_stack_lvl+0x140/0x1c0
[   52.265096][  T837]  ? __cfi_dump_stack_lvl+0x10/0x10
[   52.265120][  T837]  dump_stack+0x19/0x20
[   52.265143][  T837]  should_fail_ex+0x3c2/0x510
[   52.265165][  T837]  ? security_sk_alloc+0x65/0x260
[   52.265191][  T837]  should_failslab+0xac/0x100
[   52.265216][  T837]  __kmalloc_noprof+0x69/0x510
[   52.265235][  T837]  ? kasan_save_alloc_info+0x3a/0x50
[   52.265253][  T837]  ? security_sk_alloc+0x65/0x260
[   52.265278][  T837]  ? __kasan_slab_alloc+0x73/0x90
[   52.265302][  T837]  security_sk_alloc+0x65/0x260
[   52.265328][  T837]  sk_prot_alloc+0x123/0x3a0
[   52.265352][  T837]  ? bpf_lsm_inode_alloc_security+0xd/0x20
[   52.265375][  T837]  sk_alloc+0x40/0x590
[   52.265398][  T837]  ? inode_init_always_gfp+0x76e/0x9e0
[   52.265424][  T837]  inet6_create+0x5a8/0x11c0
[   52.265451][  T837]  __sock_create+0x3a5/0x810
[   52.265470][  T837]  __sys_socket+0xe1/0x1c0
[   52.265490][  T837]  __x64_sys_socket+0x7e/0x90
[   52.265509][  T837]  x64_sys_call+0x2608/0x2ee0
[   52.265527][  T837]  do_syscall_64+0x57/0xf0
[   52.265553][  T837]  ? clear_bhb_loop+0x50/0xa0
[   52.265574][  T837]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   52.265594][  T837] RIP: 0033:0x7f1eadb9e159
[   52.265611][  T837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.265629][  T837] RSP: 002b:00007f1eaeb06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   52.265652][  T837] RAX: ffffffffffffffda RBX: 00007f1eade25fa0 RCX: 00007f1eadb9e159
[   52.265667][  T837] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 000000000000000a
[   52.265681][  T837] RBP: 00007f1eadc3503b R08: 0000000000000000 R09: 0000000000000000
[   52.265694][  T837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.265704][  T837] R13: 00007f1eade26038 R14: 00007f1eade25fa0 R15: 00007fff7df48d48
[   52.265720][  T837]  </TASK>
[   52.310328][  T825] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.448855][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   52.454691][  T825] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.520970][  T825] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.528064][  T825] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.602628][  T546] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.614795][  T546] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.632583][   T10] usb 3-1: device descriptor read/8, error -71
[   52.657503][  T664] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.664731][  T664] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.690186][  T664] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.697475][  T664] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.779405][   T10] usb 3-1: device descriptor read/8, error -71
[   52.786358][  T825] veth0_vlan: entered promiscuous mode
[   52.828630][  T825] veth1_macvtap: entered promiscuous mode
[   52.889288][   T10] usb usb3-port1: unable to enumerate USB device
[   52.933528][  T664] bridge_slave_1: left allmulticast mode
[   52.944774][  T664] bridge_slave_1: left promiscuous mode
[   52.951774][  T664] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.961925][  T664] bridge_slave_0: left allmulticast mode
[   52.967806][  T664] bridge_slave_0: left promiscuous mode
[   52.989049][  T664] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.143879][  T664] veth1_macvtap: left promiscuous mode
[   53.157944][  T664] veth0_vlan: left promiscuous mode
[   53.458207][   T36] kauditd_printk_skb: 583 callbacks suppressed
[   53.458226][   T36] audit: type=1400 audit(1788915736.469:4003): avc:  denied  { execmem } for  pid=845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   53.523781][   T36] audit: type=1400 audit(1788915736.539:4004): avc:  denied  { read write } for  pid=846 comm="syz.3.167" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   53.569318][  T664] bridge_slave_1: left allmulticast mode
[   53.575215][  T664] bridge_slave_1: left promiscuous mode
[   53.580904][  T664] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.598911][   T36] audit: type=1400 audit(1788915736.539:4005): avc:  denied  { read write } for  pid=846 comm="syz.3.167" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   53.623051][  T664] bridge_slave_0: left allmulticast mode
[   53.625073][   T36] audit: type=1400 audit(1788915736.539:4006): avc:  denied  { read write } for  pid=846 comm="syz.3.167" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   53.638853][  T664] bridge_slave_0: left promiscuous mode
[   53.678869][   T36] audit: type=1400 audit(1788915736.679:4007): avc:  denied  { execmem } for  pid=848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   53.688965][  T664] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.710315][   T36] audit: type=1400 audit(1788915736.679:4008): avc:  denied  { execmem } for  pid=849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   53.749121][   T36] audit: type=1400 audit(1788915736.719:4009): avc:  denied  { execmem } for  pid=850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   53.787657][   T36] audit: type=1400 audit(1788915736.759:4010): avc:  denied  { execmem } for  pid=851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   53.822091][   T36] audit: type=1400 audit(1788915736.799:4011): avc:  denied  { execmem } for  pid=852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   53.850001][   T36] audit: type=1400 audit(1788915736.819:4012): avc:  denied  { execmem } for  pid=853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   53.893866][  T664] veth1_macvtap: left promiscuous mode
[   53.900347][  T664] veth0_vlan: left promiscuous mode
[   54.827808][   T62] usb 4-1: USB disconnect, device number 8
[   54.916066][  T540] bridge_slave_1: left allmulticast mode
[   54.928854][  T540] bridge_slave_1: left promiscuous mode
[   54.937905][  T540] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.959587][  T540] bridge_slave_0: left allmulticast mode
[   54.966258][  T540] bridge_slave_0: left promiscuous mode
[   54.973982][  T540] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.070833][  T540] veth1_macvtap: left promiscuous mode
[   55.076376][  T540] veth0_vlan: left promiscuous mode
[   55.249868][  T540] ------------[ cut here ]------------
[   55.255576][  T540] WARNING: CPU: 0 PID: 540 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140
[   55.267481][  T540] Modules linked in:
[   55.271443][  T540] CPU: 0 UID: 0 PID: 540 Comm: kworker/u8:12 Not tainted syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc
[   55.283578][  T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   55.294345][  T540] Workqueue: netns cleanup_net
[   55.299355][  T540] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140
[   55.305875][  T540] Code: e8 d1 d4 d5 fc 4b 83 3c 3e 00 75 19 e8 55 fa 7c fc 49 81 ff f8 07 00 00 74 1b e8 47 fa 7c fc 49 83 c7 08 eb c9 e8 3c fa 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
[   55.328708][  T540] RSP: 0018:ffffc9000d9dfb90 EFLAGS: 00010293
[   55.334873][  T540] RAX: ffffffff850a7d24 RBX: ffff88812f782380 RCX: ffff888117b4b900
[   55.343633][  T540] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103fe4000
[   55.352527][  T540] RBP: ffffc9000d9dfbb0 R08: ffffffff87d435c7 R09: 1ffffffff0fa86b8
[   55.362685][  T540] R10: dffffc0000000000 R11: fffffbfff0fa86b9 R12: dffffc0000000000
[   55.371462][  T540] R13: dffffc0000000000 R14: ffff888103fe4000 R15: 0000000000000000
[   55.384885][  T540] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   55.397151][  T540] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   55.406226][  T540] CR2: 00007f2e93c4e0ad CR3: 000000010e708000 CR4: 00000000003526b0
[   55.420601][  T540] Call Trace:
[   55.424670][  T540]  <TASK>
[   55.431140][  T540]  cleanup_net+0x6bd/0xc90
[   55.437330][  T540]  ? __cfi_cleanup_net+0x10/0x10
[   55.443380][  T540]  ? kick_pool+0xb9/0x540
[   55.449191][  T540]  process_scheduled_works+0x7f4/0x1060
[   55.456496][  T540]  worker_thread+0xc99/0x13f0
[   55.463360][  T540]  kthread+0x2c4/0x360
[   55.468588][  T540]  ? __cfi_worker_thread+0x10/0x10
[   55.479898][  T540]  ? __cfi_kthread+0x10/0x10
[   55.486706][  T540]  ret_from_fork+0x64/0xa0
[   55.491931][  T540]  ? __cfi_kthread+0x10/0x10
[   55.496760][  T540]  ret_from_fork_asm+0x1a/0x30
[   55.502378][  T540]  </TASK>
[   55.505668][  T540] ---[ end trace 0000000000000000 ]---
[   55.512088][  T540] ------------[ cut here ]------------
[   55.518423][  T540] WARNING: CPU: 0 PID: 540 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140
[   55.529313][  T540] Modules linked in:
[   55.533229][  T540] CPU: 0 UID: 0 PID: 540 Comm: kworker/u8:12 Tainted: G        W          syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc
[   55.547109][  T540] Tainted: [W]=WARN
[   55.550974][  T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   55.561939][  T540] Workqueue: netns cleanup_net
[   55.566963][  T540] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140
[   55.573186][  T540] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 fa 7c fc 49 81 ff f8 07 00 00 74 1b e8 f2 f9 7c fc 49 83 c7 08 eb c5 e8 e7 f9 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 f9 7c fc 5b 41 5c 41 5e 41
[   55.593539][  T540] RSP: 0018:ffffc9000d9dfb90 EFLAGS: 00010293
[   55.600278][  T540] RAX: ffffffff850a7d79 RBX: ffff888103fe4800 RCX: ffff888117b4b900
[   55.608565][  T540] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103fe4810
[   55.617510][  T540] RBP: ffffc9000d9dfbb0 R08: ffffffff87d435c7 R09: 1ffffffff0fa86b8
[   55.627075][  T540] R10: dffffc0000000000 R11: fffffbfff0fa86b9 R12: dffffc0000000000
[   55.636379][  T540] R13: dffffc0000000000 R14: ffff888103fe4000 R15: 0000000000000010
[   55.646879][  T540] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   55.656571][  T540] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   55.664014][  T540] CR2: 00007f2e93c4e0ad CR3: 000000010e708000 CR4: 00000000003526b0
[   55.672214][  T540] Call Trace:
[   55.675587][  T540]  <TASK>
[   55.678891][  T540]  cleanup_net+0x6bd/0xc90
[   55.683790][  T540]  ? __cfi_cleanup_net+0x10/0x10
[   55.689855][  T540]  ? kick_pool+0xb9/0x540
[   55.694756][  T540]  process_scheduled_works+0x7f4/0x1060
[   55.701450][  T540]  worker_thread+0xc99/0x13f0
[   55.707332][  T540]  kthread+0x2c4/0x360
[   55.711559][  T540]  ? __cfi_worker_thread+0x10/0x10
[   55.716698][  T540]  ? __cfi_kthread+0x10/0x10
[   55.723381][  T540]  ret_from_fork+0x64/0xa0
[   55.731473][  T540]  ? __cfi_kthread+0x10/0x10
[   55.738614][  T540]  ret_from_fork_asm+0x1a/0x30
[   55.744294][  T540]  </TASK>
[   55.747413][  T540] ---[ end trace 0000000000000000 ]---
[   55.756574][  T540] ------------[ cut here ]------------
[   55.762148][  T540] WARNING: CPU: 0 PID: 540 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310
[   55.772187][  T540] Modules linked in:
[   55.776123][  T540] CPU: 0 UID: 0 PID: 540 Comm: kworker/u8:12 Tainted: G        W          syzkaller #0 6f2d7458894aba4127f3ede48a844fbc689668cc
[   55.790099][  T540] Tainted: [W]=WARN
[   55.794180][  T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   55.805100][  T540] Workqueue: netns cleanup_net
[   55.809928][  T540] RIP: 0010:xfrm_state_fini+0x2be/0x310
[   55.815726][  T540] Code: 3c 20 00 74 08 48 89 df e8 ef 92 f0 fc 48 8b 3b e8 07 84 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 b8 97 fc <0f> 0b e9 b0 fd ff ff e8 56 b8 97 fc 0f 0b e9 18 fe ff ff e8 4a b8
[   55.836756][  T540] RSP: 0018:ffffc9000d9dfb70 EFLAGS: 00010293
[   55.843235][  T540] RAX: ffffffff84efbefe RBX: ffff88812f782380 RCX: ffff888117b4b900
[   55.851391][  T540] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888117b4b900
[   55.859710][  T540] RBP: ffffc9000d9dfb98 R08: ffffffff87d435c7 R09: 1ffffffff0fa86b8
[   55.867879][  T540] R10: dffffc0000000000 R11: fffffbfff0fa86b9 R12: 1ffffffff0fa840c
[   55.876039][  T540] R13: dffffc0000000000 R14: ffff88812f782f80 R15: dffffc0000000000
[   55.884211][  T540] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   55.894108][  T540] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   55.901513][  T540] CR2: 00007f2e93c4e0ad CR3: 000000010e708000 CR4: 00000000003526b0
[   55.909832][  T540] Call Trace:
[   55.913158][  T540]  <TASK>
[   55.916093][  T540]  xfrm_net_exit+0x31/0x80
[   55.920564][  T540]  cleanup_net+0x6bd/0xc90
[   55.925096][  T540]  ? __cfi_cleanup_net+0x10/0x10
[   55.930140][  T540]  ? kick_pool+0xb9/0x540
[   55.934496][  T540]  process_scheduled_works+0x7f4/0x1060
[   55.940111][  T540]  worker_thread+0xc99/0x13f0
[   55.944832][  T540]  kthread+0x2c4/0x360
[   55.949034][  T540]  ? __cfi_worker_thread+0x10/0x10
[   55.954359][  T540]  ? __cfi_kthread+0x10/0x10
[   55.959045][  T540]  ret_from_fork+0x64/0xa0
[   55.963780][  T540]  ? __cfi_kthread+0x10/0x10
[   55.968396][  T540]  ret_from_fork_asm+0x1a/0x30
[   55.973431][  T540]  </TASK>
[   55.977264][  T540] ---[ end trace 0000000000000000 ]---
[   56.020483][  T540] bridge_slave_1: left allmulticast mode
[   56.026548][  T540] bridge_slave_1: left promiscuous mode
[   56.032886][  T540] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.041080][  T540] bridge_slave_0: left allmulticast mode
[   56.046717][  T540] bridge_slave_0: left promiscuous mode
[   56.052546][  T540] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.060360][  T540] bridge_slave_1: left allmulticast mode
[   56.065992][  T540] bridge_slave_1: left promiscuous mode
[   56.071696][  T540] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.079162][  T540] bridge_slave_0: left allmulticast mode
[   56.084998][  T540] bridge_slave_0: left promiscuous mode
[   56.090772][  T540] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.242302][  T540] veth1_macvtap: left promiscuous mode
[   56.250245][  T540] veth0_vlan: left promiscuous mode
[   56.256771][  T540] veth1_macvtap: left promiscuous mode
[   56.264035][  T540] veth0_vlan: left promiscuous mode