last executing test programs:

17.248682765s ago: executing program 0 (id=476):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = fcntl$dupfd(r0, 0x0, r0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000001c0)="ba5ebc4415fa5f7149406d1ad27c8e52fcdf", &(0x7f0000000140)="a7bf6625b3b88cee74b2c4b54ddb492e04fea748e39779c9edafd03d1b8a5170868b4c267833568aea04ca7bca2d73e1db832382bd8e7035b24572b76d31264a5f"}}, &(0x7f0000000300))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)={0x2, 'bridge0\x00', {0x490}})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_normal', 0x20000, 0xba)
fspick(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x20, 0x1, 0x8)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x2, 0x5b, 0x6, 0xff, 0x10000, 0x5, 0x80000001}, 0x1c)
r4 = socket(0x3, 0x5, 0x2)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000080)={0x16, 0x5}, 0x8)
read$msr(r1, &(0x7f0000000340)=""/4096, 0x1000)

16.417189176s ago: executing program 0 (id=486):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
mknod$loop(&(0x7f0000000480)='./file0\x00', 0xfff, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESHEX=r2])
splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0)

16.399282408s ago: executing program 0 (id=487):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000540)=0x11)
ioctl$KDGKBLED(r2, 0x8924, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000005c0)) (async)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1f, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x13, 0x2}}}}}]}}]}}, 0x0) (async)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000003c0)=0x3, 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'wg2\x00', &(0x7f00000004c0)=@ethtool_cmd={0x1c, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}})
sendto$inet(r1, &(0x7f0000000400)="0400", 0xffec, 0x0, &(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x400, 0x0) (async)
mount$incfs(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x40020, &(0x7f0000000940)=ANY=[]) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async)
r5 = syz_open_dev$hiddev(&(0x7f0000000700), 0xa, 0x62080)
ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, 0x0) (async)
syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x2d, 0x85, {0x85, 0x11, "84c6fe8eaae934c86120664955358089d0058653cd3a2b7f6ae9a807fcd754a4788b90a19f648513280dfeaf823721bc0dc228a5aafd199b44048c34a7ba1c97515c4652f83e973282d97152aa0904a0bcc6538dcb73790830072a2d9695383d002395a23b3e32d6cbb2835efb333ab0d7881284d1ba015bc9394882982ccf43283f98"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f0000000340)={0x44, &(0x7f0000000140)={0x0, 0x15, 0x24, "803a6a6fd8bf5b2a26869d70d322ba0ebf5211503d38d8d56d6d02a970c65ab03560051e"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000200)={0x20, 0x81, 0x3, "4e1edc"}, &(0x7f0000000240)={0x20, 0x82, 0x2, "0e45"}, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)={0x20, 0x84, 0x1, 'L'}, &(0x7f0000000300)={0x20, 0x85, 0x3, "1e1d86"}})

15.227599183s ago: executing program 2 (id=491):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x4}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}}, 0x0)
r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000000380)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='-[}\x00', r3)
add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="b6", 0x1, r3)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4)

15.227274133s ago: executing program 2 (id=492):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000004c0)={0x9})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x5, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x2, 0x2004c8, 0x0, 0x0, 0x36ae, 0x0, 0x6, 0xc, 0x400000000, 0x6, 0xf73b], 0x80a0000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="e83884cb28bd5a3a", 0x8}])
ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f00000003c0)=@generic={0x0, 0x2})
ioctl$TIOCGSERIAL(r3, 0x541e, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f00000000c0))
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000280)={0x2, 0xc7, "bb1f18f111b276f54739a5f0b2a5fe4eb8e39e6652816f6b159440a708226d8f71ee3c6cf3cde1fbe1282b3684d7486f5a708e2bbf23caa97393f0da11d71a55145aecfc76d74fab8b9d4e3960b0c5f8d99bd132fa0fc4911dc851f725a58b2e8bea0db36ae0eca596997442ca9404ca7bad48246954a147b967e53162dd5af56a09f51b3c7064818bc2afbdb08ccc00f96659a4bfb0c5d7979ce7ae75961a7797aec156f049f4a7ddc8c0b5a3574da37fd2b81c6dc6b7e80bb3851a364b0e036efeac8128d78a"})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x81)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000680)={0x3, 0x3, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000440)=@generic={0x2, 0x8001, 0xb7c})
getsockopt$inet_udp_int(r7, 0x11, 0x66, 0x0, &(0x7f0000000140))
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0x3)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, 0x1e, 0x803, 0x70bd2b, 0x25dfdbfb, {0x8}, [@typed={0x16, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2\x00\xf7\x8a'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

14.847423981s ago: executing program 0 (id=494):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000500)={0x8f, 0x0, 0xd})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mount(&(0x7f0000000740)=@md={'/dev/md', @num=0x0}, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', &(0x7f00000007c0)='efs\x00', 0x0, &(0x7f0000000800)='\x00')
r3 = socket(0x11, 0x2, 0x0)
setsockopt(r3, 0x107, 0x1, &(0x7f0000000180)="110000000200060000071a806d8be2", 0xf)
setsockopt(r3, 0x107, 0x2, &(0x7f0000000280), 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5f, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000440)='27', 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x5, 0x7fffffff}]})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@local, 0x80000001, 0x1, 0x1, 0x5, 0x6, 0x5}, 0x20)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="a400000056000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

14.471502407s ago: executing program 0 (id=495):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
mknod$loop(&(0x7f0000000480)='./file0\x00', 0xfff, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESHEX=r2])
splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0)

14.414616323s ago: executing program 0 (id=497):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, {[0xfffffffffffffffa, 0x1, 0x8, 0x7, 0x6, 0x4, 0x75c, 0x5000000000000]}}) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000380)="0f011dff4f0000f22e0f01f90fc770060f01ca0f20e035000020000f22e00f01c2c4c22da943e666ba430066b8ea0066efc4c2e9dc80b56e3cb4b9b80300000f32", 0x41}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffea5, &(0x7f00000000c0)=[{&(0x7f0000000280)="50000000300005040000000000000000000000003c0001003800010009000100676163740000000028000280180002008100000000000000000000000c00030001000000000000200000000000000000", 0x50}], 0x1}, 0x0) (async)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{0xdddd0000, 0x30000, 0xe, 0x0, 0x4, 0x3, 0x5, 0x9, 0x9, 0x9, 0x6, 0x8}, {0xdddd1000, 0xe000, 0xe, 0x4f, 0xa, 0x5, 0x5, 0x1, 0x9, 0x0, 0x8, 0x9}, {0x8080000, 0xf000, 0x0, 0x9, 0x1, 0x1, 0x2, 0x2, 0x6, 0x10, 0xc0, 0x5}, {0x4, 0xfffabfff, 0xd, 0x3b, 0xa, 0x1, 0x3, 0xfb, 0x8, 0x0, 0x9, 0x2}, {0x25000, 0xeeee0000, 0xd, 0x9, 0xf, 0x79, 0xfb, 0x2, 0x81, 0x2e, 0x7f, 0x5}, {0x10000, 0x1000, 0x0, 0x5, 0x4, 0x9, 0x0, 0x7f, 0x0, 0x8, 0x7, 0x6}, {0x50000, 0x0, 0xb, 0x5, 0x8, 0x2, 0x8, 0x3, 0x7, 0x10, 0x0, 0x3}, {0xffffffff, 0x7000, 0x0, 0x12, 0x3, 0x41, 0xbb, 0x7, 0x0, 0x8, 0x3, 0x9}, {0xd000, 0xf}, {0xeeee0000}, 0x8, 0x0, 0xdddd1000, 0x508, 0x4, 0x101, 0x0, [0x9dd, 0x6, 0x2, 0x2]})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0x8000000, 0x30000, 0x0, 0xa8, 0x2, 0x8, 0x6, 0x40, 0xb, 0xc, 0x0, 0x6}, {0xdddd0000, 0x6000, 0xb, 0x1, 0x6, 0x3, 0x1, 0xf3, 0x5, 0x9, 0x0, 0xff}, {0xfec00000, 0x1000, 0xe, 0x2, 0x68, 0x2a, 0x5, 0xf2, 0xf, 0x8d, 0x37, 0xe}, {0x8000000, 0xeeef0000, 0xf, 0x6, 0x10, 0x0, 0xa, 0x8, 0xc, 0x6, 0x40, 0x9}, {0x5000, 0xffc, 0xb, 0x80, 0x6, 0x8, 0x3, 0x1, 0x4a, 0xe, 0xfd, 0xf1}, {0x5000, 0x46000, 0xb, 0x7f, 0x8, 0x9, 0x8, 0x5, 0x4, 0x9, 0x6, 0xe}, {0x41000, 0x25000, 0x8, 0x5, 0x4, 0x81, 0x1, 0xe5, 0x3, 0x81, 0x14, 0x9}, {0x2ffc, 0x2, 0x9, 0x40, 0x8, 0x9, 0x3, 0x7, 0x3, 0x6, 0x2, 0x6}, {0xffc, 0x9}, {0x3006, 0x7a}, 0x11, 0x0, 0xeeee8000, 0x20000, 0x8000, 0x4000, 0x0, [0x1, 0x9, 0x400, 0x9]})

14.301698504s ago: executing program 32 (id=497):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, {[0xfffffffffffffffa, 0x1, 0x8, 0x7, 0x6, 0x4, 0x75c, 0x5000000000000]}}) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000380)="0f011dff4f0000f22e0f01f90fc770060f01ca0f20e035000020000f22e00f01c2c4c22da943e666ba430066b8ea0066efc4c2e9dc80b56e3cb4b9b80300000f32", 0x41}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffea5, &(0x7f00000000c0)=[{&(0x7f0000000280)="50000000300005040000000000000000000000003c0001003800010009000100676163740000000028000280180002008100000000000000000000000c00030001000000000000200000000000000000", 0x50}], 0x1}, 0x0) (async)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{0xdddd0000, 0x30000, 0xe, 0x0, 0x4, 0x3, 0x5, 0x9, 0x9, 0x9, 0x6, 0x8}, {0xdddd1000, 0xe000, 0xe, 0x4f, 0xa, 0x5, 0x5, 0x1, 0x9, 0x0, 0x8, 0x9}, {0x8080000, 0xf000, 0x0, 0x9, 0x1, 0x1, 0x2, 0x2, 0x6, 0x10, 0xc0, 0x5}, {0x4, 0xfffabfff, 0xd, 0x3b, 0xa, 0x1, 0x3, 0xfb, 0x8, 0x0, 0x9, 0x2}, {0x25000, 0xeeee0000, 0xd, 0x9, 0xf, 0x79, 0xfb, 0x2, 0x81, 0x2e, 0x7f, 0x5}, {0x10000, 0x1000, 0x0, 0x5, 0x4, 0x9, 0x0, 0x7f, 0x0, 0x8, 0x7, 0x6}, {0x50000, 0x0, 0xb, 0x5, 0x8, 0x2, 0x8, 0x3, 0x7, 0x10, 0x0, 0x3}, {0xffffffff, 0x7000, 0x0, 0x12, 0x3, 0x41, 0xbb, 0x7, 0x0, 0x8, 0x3, 0x9}, {0xd000, 0xf}, {0xeeee0000}, 0x8, 0x0, 0xdddd1000, 0x508, 0x4, 0x101, 0x0, [0x9dd, 0x6, 0x2, 0x2]})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0x8000000, 0x30000, 0x0, 0xa8, 0x2, 0x8, 0x6, 0x40, 0xb, 0xc, 0x0, 0x6}, {0xdddd0000, 0x6000, 0xb, 0x1, 0x6, 0x3, 0x1, 0xf3, 0x5, 0x9, 0x0, 0xff}, {0xfec00000, 0x1000, 0xe, 0x2, 0x68, 0x2a, 0x5, 0xf2, 0xf, 0x8d, 0x37, 0xe}, {0x8000000, 0xeeef0000, 0xf, 0x6, 0x10, 0x0, 0xa, 0x8, 0xc, 0x6, 0x40, 0x9}, {0x5000, 0xffc, 0xb, 0x80, 0x6, 0x8, 0x3, 0x1, 0x4a, 0xe, 0xfd, 0xf1}, {0x5000, 0x46000, 0xb, 0x7f, 0x8, 0x9, 0x8, 0x5, 0x4, 0x9, 0x6, 0xe}, {0x41000, 0x25000, 0x8, 0x5, 0x4, 0x81, 0x1, 0xe5, 0x3, 0x81, 0x14, 0x9}, {0x2ffc, 0x2, 0x9, 0x40, 0x8, 0x9, 0x3, 0x7, 0x3, 0x6, 0x2, 0x6}, {0xffc, 0x9}, {0x3006, 0x7a}, 0x11, 0x0, 0xeeee8000, 0x20000, 0x8000, 0x4000, 0x0, [0x1, 0x9, 0x400, 0x9]})

14.259712128s ago: executing program 2 (id=499):
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000))
syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2b53, 0x31, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0x9543ff1f4ca95fd6, 0xc, {0x8, 0xb, 0x1, 0x6, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x8000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x5, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xf3, 0x1, {0xa, 0x25, 0x25, 0x8, 0xd, 0xfffb}}}}}}}}]}}, 0x0)

13.104490492s ago: executing program 2 (id=505):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
mknod$loop(&(0x7f0000000480)='./file0\x00', 0xfff, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESHEX=r2])
splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0)

13.078803915s ago: executing program 2 (id=506):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000000000000070000214404c25300000000"], 0x18}, 0x4000014)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000300)={&(0x7f0000000200)=""/212, 0xd4})
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='3', 0x4e)
inotify_init1(0x800)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)

12.861866676s ago: executing program 2 (id=507):
mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000040)={'trans=unix,', {[{@aname={'aname', 0x3d, '9p\x00'}}]}})
lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001080), &(0x7f00000010c0)={'U+', 0x2}, 0x16, 0x2)

4.253768562s ago: executing program 1 (id=554):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, 0x0, 0x0)

4.17169801s ago: executing program 1 (id=555):
socket(0x28, 0x5, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r0, &(0x7f0000000000), 0x4, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r2, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x2, 0x465, 0x0, 0x0, 0x1000, 0x1c9e959d, 0x0, 0x0, 0x106}}}, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_setup_io_uring(0x477c, &(0x7f0000000140)={0x0, 0x4fab, 0x20000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x40001, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b45, 0x1000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x99, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

3.491533507s ago: executing program 1 (id=559):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
r1 = syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x68, &(0x7f00000003c0)={0x5, 0xf, 0x68, 0x4, [@generic={0x1f, 0x10, 0x1, "024e525bc8c462b5ca45244ca7611801e89ad9b04af4381adb92d158"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "9f99ef775f31232c504e78c2eff3965f"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x9}, @generic={0x29, 0x10, 0x3, "35fce89b365d640a93a416345b9e9dd92b89011a075182d605623f3110e8a202ca62e26bf62b"}]}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0xf0b, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x7, 0xaa, 0xd8, 0x8, 0x1901, 0x198, 0xa592, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef9, 0x3, 0x2, 0x9, 0x40, 0x9, "", [{{0x9, 0x4, 0x60, 0x0, 0xe, 0xbc, 0x16, 0xeb, 0x6, [@generic={0xe5, 0xd, "4febf1776341126013c7aaecbad63cbd56830dc4142814197aebb4656904e231d0cd97254e7ca1b720946973680b7dfe01900dc47d4c336da0f18924e523a9afa3d8ec77c7dd45c4a357b6191e99d12a47f2f3c2f59fa208a8dcfeae0120eb589d3a71c280d16dcf5881cd609edf69bf8e1c55301736f36cf23509bacc98c1743b842aa8ebb964659393f9c606706d669c1e2833eddee8afbbf8d9ff70fd350e0c5e1bcc79afa0833199cfb5a072327f3df362e49c2d3d4df52f87e5801e35a69de83d8caf85783968a36fad112ed5d5dcbbd599181830a8fc3ae86fa633419415dd67"}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x7, 0xfe, 0x7f}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x1, 0x25, 0x2d, [@generic={0xc3, 0x2, "3982864f43580762e9630b079ad2fb9f01ed37256b44a0a33cde42e99485681bc68fe681c4c742606023ac4cd000ee93114464c9baac574531e133a12ab8996eebbe597e2a5b12b31e87e317dbff02c5e22c850599bfb32dde74390e88a5c55ec29cc93ef1698acce9bcf9c11f8e442bc31895a86acaf2ec8ce33a57b3b771bb1c2da732bb033efc369565abbfbfc923cb09f91df661f3d2058fb9b2820ac8693320e6fa7ad775d95e9837bce2ab74af95f1d0ed806ca34b51a2e9995e04c7421f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x4}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0xd, 0x10, 0xe4, [@generic={0xd9, 0x10, "a5820a6c97252eb8bc9013b7b9ff9bf2f0a07eb73cb4531c1b1e7321eea1e043e6962e0c8c60c66299763e8edcae08d527e0f1b463eb366c974cfc6a25fad753002caf0e9dc4344201f4240c0eb674839303886440663ee0ae8765aa0de39460f5e4ee557b3c2a7ba37c02c0ee7801ca302ce00447d305f1f9cb628e5263d68d347c8d95e639e76c89ef66704bc28964c416d3d52e1aa95713c4c409a5e0bd232a54d3cfd66d409136f2238ac77e94405c9293ac0fe39a40bbd62555efb4466f374d9a1c6264cd65d8142885cab386dd11b1eec111cd4c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0xcb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x10, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x67c9}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xd8, 0x0, 0x1}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x0, 0x5, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x1, 0xb, 0x0, [@generic={0xdd, 0xd, "d21d433401f37042b238ebabd6700573637828248631c21fd0cca234b4a8f802589f6446593f1358f3465c3cf0a8f928f1aad1ef95a67369f4ec4675c93e07ffdc980eb988cc2e3d45a45804cc0f0550a29f5bb4df9128f2c528b77605e71c5f97f971f01b7a5aa14cc26156f784481d218fa484da258a9f0c64f82346f78066ee101a0faaa3d56f1a762fc4f47d03a2b65fef3c950df61d7e5e099b38e1d74f9d1cba7cdc4c2c546c72f016c9c5a314214f776bfd51992955ad5264e16a4a259ef989d8fbd699f93b1963a86889b80a8d51fc56cda8d18c78657c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x80, 0xff, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xc}, @generic={0x78, 0xf, "7c2a27c861e8553107b328d5521482762366a1255062eeffd513753aa6a1c465e6f1c71ce67390e5882d96245d32e88e61f69478f96b8a3cca1b601e2151cbc4e63eee76acf78311157ac6455d46f8742d66d9481fedba8571379a1146a2f385ede826378bb1a73c6924c5245c5c5d46a659570bb737"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x80, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x1, 0x5, 0xff, [@generic={0x5b, 0x24, "af9737e888fe1b6a11156d075d2427975bfd9e2467840531db37d85f1e82e8a6f22489e0d495f92411f2d195d3d2b7e71edc18792b2eb46c407a3b4790f8390ff7121ff8782ae092ad5d698f12beab414527f800609fcfa636"}, @generic={0x59, 0xf, "c96ee0b15b5e2a774a390b6d53d3cbb9bfee14bf9fda013cbf8ceeae469011d3b1ca0113366423e8071a40e2e7eeaabbfdc051374bd1a9709d51ec0a0b3fbe8628a6eb420949fb93e93442664be3a5ee99a6156e1d844d"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xf8, 0xe, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x5, 0x7f, 0x3a, [@generic={0x8d, 0x22, "ab4ad75518e33a53a678a91b74895dcee76cfb0c957141f9e375545366ca52371e2af275285abb878130356de4aab33738e44a24a7c27eaeaf32df8cc6c77584a1fb4e4e34327e3e1984c9131e4f29647713b57031805c873ee90e7cdc9fa62c6a5b18af1c5e8c08c875d50d9f122fe3a1ca3c1fb26f2596a34ccd47cdd73e773c6cfa3e939a9ee192e4ce"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x9c, 0x9, 0x3, [@generic={0x39, 0xb, "01af323ca9accba53fe4ae1672dc0c74fa79c373fba6b25d4bddcd5e3c08eb01fdb69e205911e155b6bd4bc7b54e56717795ef47ae6022"}, @generic={0x8e, 0x6, "665884175303a67c358247a78fe38557b86419508ee63c5e299ab6ae55b3d5ac01d135d7e3eaa59bda744031820818a280842785f4e5213724063f007dd0022848a10d604344869d9b478251b2115b5f7ca62145e7e533b564bbc49f2793078aa24172be1253d413a8db06efe4fd362ffbd44d4af988b6f2564ff618e63725a46b10c23b560433a907836b09"}]}}]}}, {{0x9, 0x4, 0x0, 0x8, 0x8, 0xde, 0x5c, 0xb4, 0x12, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "7a4f3df0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x9, 0x1c}, {0x6, 0x24, 0x1a, 0x3, 0x9}, [@country_functional={0x12, 0x24, 0x7, 0x5, 0x9c1, [0x8, 0x1, 0x1cd, 0xfffc, 0x2, 0x8]}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "829a4ad92f"}, {0x5, 0x24, 0x0, 0x36}, {0xd, 0x24, 0xf, 0x1, 0x73, 0x40, 0x3, 0xfa}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xba}, @mdlm={0x15, 0x24, 0x12, 0x19}, @acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x6e, 0xe, [0x8, 0x2]}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x0, 0x2}]}], [{{0x9, 0x5, 0x0, 0x3, 0x8, 0x47, 0x5, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x1, 0xbe, 0x4, [@generic={0xfb, 0x23, "973a9aca0ebd6dd41a3d23682cec40d9c91f240627c0c1c542ee1aadd78d77595e95c102429bd39e8f75e663379f62b5bf0cc62727307daade5c7a63222f3bcb79de7e3a91a3687512eb60ee3f57a3e6f4510b9213a356b0192bd5e33fba11f4d909b1fe5750ae4d2bdb31f7337b0d93af1a4dc59e4938ca7017aaa015f8af7a00e84d141c93a081a6374878397e8b95d3f3d36d322605aab60cd8b7da1d1d021fc39aa1594b4ea20e60a72c2a7fdfaf14920898b654a6f26f4ee86cd66eeab662153a746513221185bd961a522daab927f4aec14a75cfb0993ce0309c39a29394f92cab8cd51dd0c358f3eea99c97d155d09dda14a67ce20a"}, @generic={0xa0, 0x31, "210d6d5a622fc7bf97c9b18efb227ee9d3909efdb7c4f13f23df650a79f9c220738fab3c9bb3c6aa605f14ef6b6bd0616010113f32aa1998aa0605073345f63ddc3db69174d2bf7d1b49d5b99baa18da3a24c6d2581d9369977582f2f96e53e565d57f8791186d8c4fc6f6615b850c18fab9680346fd9f823deaf77e1f0dfd290dcfdc3c34789599c45170d4847a4ac5d9189939a53a41a378ab33271ec3"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x9, 0x6, 0x9, [@generic={0x73, 0x21, "1e717acb0772d65a168aa9d9d9e4bbc8d2ab7d168c05e5bf016a3e907c86399181589272e534f96d90a7953a3e159f4e161ad0932dcf213cadc6cc877c52f603e256a592d59a476eda458ae873be744965ea6b65a7ede109e7ce13a516b6e9679769d367ceaf205f63b98cf6ebad08e5cc"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0xf6, 0x1, 0x8, [@generic={0x80, 0x23, "84a08b27c34252750433833f2c37d18d00a16e32d238730a6cfc4048565b5ca7fc9e84d9b5e3a1d9fcfb03d6e58d1569a12296e0d4cc0af034f60cb9de57f1142874a01050f3284414a93ca21a4c2d0467eb8acb05b8fa6f4e6d50755473ae3f0baf4165c9566cf220cb88a1a9c538a7c1c0b3465328762944bcbab29677"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x9, 0x80, 0x9, [@generic={0x86, 0x3, "6ac5b33d5dd839f070651e353c30c969d745ac3791e4fe9b98ab4c8544e82fdab0b4759fd6d3afbecbfe8e772caa78233afcbd5f3dab9828e1dfa31867ec018f00f22f897fa63590588483215ec485f4ac0ea051a34ef9c1b54b622841f527dce14566915b3d1991db0ebfd2fde86ba8129cada6ac15e31402eb48316c5bb0f20a1b67f5"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x7, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}, @generic={0x1b, 0x24, "4a282a2d4d0be6025a3684e4a38659e4f91feb1ed0eed6ff68"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x40, 0x80, 0xa5, [@generic={0x67, 0x21, "a21694795f3cabe8606059ad738a0bd5ba1e58d81a86c3b158783f42177d804c71e2cdff7bab06bc00a298be071211026f1564b2bf5c9efeb9848a8d595a9ea55a3ce18b935cecabe262cb784398cf2cf0bb53c4d812d47ca8253a314428cebd4f60ecb152"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x0, 0x60, 0x2}}]}}, {{0x9, 0x4, 0xdf, 0xc, 0xc, 0x92, 0x1a, 0x69, 0xed, [@hid_hid={0x9, 0x21, 0xaa4, 0x32, 0x1, {0x22, 0x62d}}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0xff, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}, @generic={0x4b, 0x7, "ba47c0aa13bb4d215dfaf6125595a445341fb48c4f6d6a3c123ad08b3a43645092de01f0cc5cc88edfb8aec68d4012d3eb2b5f656ef95a420a94ad4cc9c6cf619add0899836fa017fa"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xb}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x20fc}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x3, 0x8, 0x8}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x9, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}, @generic={0x82, 0x6, "a3a51887fc097823b07fa25eb4346bd7579bedb704ef605d81aadd95ab3364222e577ffc44ab1ea9f1d7eec5a7884f0ce9734a70054d9c10f6c736961331a6f1b32cfe752d4660dd072c1e1968ae9139ee32aa30c76cb8e54a4a843ee7304173788e0e3efc3c6c614eeaeaa9c9c42980c4a3c9d7f0065c732d681dc442d7b05e"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x1, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x1}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x6, 0x40, 0x7, [@generic={0x6b, 0x21, "0e8dd6aebcb0c03c18f8e2f06494f560fb80f98df3b3557882cabee8f05d2d9672be9fc85904a1eb4f27e3c12f19564b317c0d2934a2f6d7ffc447b8a057abe8c0b8c12b8740934fab9c9e25cfa967ab2183ef67727e835648c62d9782cf5f3e2a0a177616f7d5d31b"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x1, 0x1, 0xa, [@generic={0x7f, 0xe, "f86f17dd3f0e0b164f9737b817ce52b6842c0c61a637cb27be1f9319396d1d242611007cd58801551180e94c6dca776246dd294d53e39ae44ad7d946f67d8cd6b19ede0f742dd66a82e79435bdf32cd74e2f4a7364b081ce24727aaf1fbbbcc090cd37f4ba8499e02028d8be079c0e96ebe7155c26aa33a9f9c94dee9f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x0, 0x5, 0x40}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x1, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x7}, @generic={0xee, 0x7, "ed277f644728a6f55ba96770d371d1f7956dbdabb35b0f4cc2f00abcf4e43cd4c4658d3da5f43a567dffc9c500b20ce0808406ce2c5cb8ad477ed61a791af573ea4270387defb7b45c7971607603fa274dc01b34a893dd8a3ebbb9341dd83613e9b9a746c5ace8c29a11d83f4d094867bb922b1d390a8377bee945bcfce9634d5c5e18ddfa76a274b93098399d1a351d2e75ab4ee81543870fc11934be3655b8fd5b493f32523ee4d703eacf6cde31672c3c5cbdb37fb7a78a7b28545a43480fb77d58cfb749754ab65e6f1a49652c7beab5a1ec46aecab376d9c354a18a130b003be3f950db29f813edd401"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0xd2, 0x6, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xc000}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x1, 0x46, 0xc6, [@generic={0x8b, 0x21, "6f07bb4d4ef5df6690e7766dd9cd43c5cad0c730408a24ec134c3cf6d6979e32bcf668952dde133d610ba9cfd59802b266ebe92f4d12ec7be1b4d3da28715972aeb015b38d71c770b4c546fec06de95533cbe1024fb1a434e82b343b0cddb9526dc9287ec0095c394ac7f9b931140110863396fa763433602dc73269b776e521003f64ed0669768ead"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0xfc02}]}}]}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x4, 0x6, 0xb8, 0xff, 0xe3}, 0x69, &(0x7f0000001640)={0x5, 0xf, 0x69, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x2, 0x2}, @generic={0x45, 0x10, 0x4, "bbaa8b733b15b7306142aa9f46d7645948656f3b00717e2bd67d027a2fa8083079ca9afd2b6f62eba2ebaadedd0262bdb6b0561d09809347a1dc9591c2955bcfc84e"}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x81, 0x0, 0x1c8, [0xffc030, 0xc0c0, 0x0]}]}, 0x4, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x1809}}, {0x31, &(0x7f0000001740)=@string={0x31, 0x3, "bf990fc74aba9bdbf851a807c329aa7ddd478a6a28c7e14e42f3ee208e5e10f3bbc9f179449a48538dce5dcea6dd95"}}, {0x2, &(0x7f0000001780)=@string={0x2}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x8, 0x8, {0x8, 0x21, "74097b8562e1"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0xb, "28add4eb"}, @global=@item_4={0x3, 0x1, 0x6, "4de2162c"}, @local=@item_4={0x3, 0x2, 0x9, "fb29d2f7"}, @global=@item_012={0x0, 0x1, 0xa}, @global=@item_4={0x3, 0x1, 0x5, "aac4e876"}, @main=@item_012={0x2, 0x0, 0xc, "4cdd"}, @local=@item_4={0x3, 0x2, 0x0, "9d23aa71"}, @global=@item_4={0x3, 0x1, 0xb, "a303133b"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xce76, 0x0, 0x1, {0x22, 0xdac}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="2000a40000000e69d3f8d4510d9f49b27a80aaa6fbda02ec27545801c8a3f055987c3f2268a6da239f0d1817ef8b2d5eafff2df0c2448f488683ae15ae437729304ed40d497a08c54e8573e9c6795c21122fb59f63d3bf089460b8490c1e194ff414b873fecb5c549d559165a053c936a00cd2f4e18dd95eb9e9893db961f7cc71346ce1a40530aee7e804be3f428eecbccc724b7c24c0ab048d625cf7c094f04557b6e9140d67eb6821"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x1, 0x68, "35f40e42de25d5c02866087d5959c8b148461fe2326b0ebd16093d8b9d5f64783dc68d263dd36e56ccdbeb4eb88e41e773fc575324df01dc11463ae3324d1a4e9db883a76e3991d4f75ee72cdefef88745d9da01c8bc98628d27e0798ffd12496a447600278aa1c4"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x7}})
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f0000000240)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

2.086279385s ago: executing program 4 (id=564):
unshare(0x20000)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x48)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800006, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}]}})
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020)
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='my_tracefs/events/task/task_rename/enable\x00', &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000040)='virtiofs\x00', 0x7a, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='nodev\x00', 0x600401, 0x0)
write(r2, &(0x7f0000000500)='oom_score_adj < 100\x00', 0x13)
unshare(0x20000)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)='1\x00', 0x1)
close(r3)
prctl$PR_SET_NAME(0xf, &(0x7f0000000800)='new_name\x00')

1.955768678s ago: executing program 4 (id=565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
fsetxattr(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="218878f58f977c6e45c8a9dc09cfd0f0a626f072882d10ce450000000000000000000000000000000bce5e4f381fe37f23627416011018f757362b157e172419e69db9a6ba75ec5d63d36cab8feac87bd6032a0b3167a7fc9e13167bdf8a4db62559059cbc6041cf"], 0x0, 0x0, 0x3) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, &(0x7f0000000240), 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000280), 0xf00) (async)
close(r1) (async)
syz_fuse_handle_req(r0, &(0x7f00000016c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008808836900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b00", 0x2000, &(0x7f00000036c0)={&(0x7f0000003780)={0x50, 0x0, 0xfffffffffffffffc, {0x7, 0x29, 0x7, 0x22110079, 0xf3a, 0xfffd, 0x2, 0x8, 0x0, 0x0, 0x6, 0x1008}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
fchmodat(0xffffffffffffff9c, &(0x7f0000003800)='./file0\x00', 0x2)

1.407716112s ago: executing program 1 (id=571):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0xb3544c, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x8, 0x80000000)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xbfbb, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='@\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000024c0))
mknodat(r4, &(0x7f0000002500)='./file0\x00', 0x8000, 0x101)
setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v3={0x3000000, [{0x3}, {0xff, 0x6}], r6}, 0x18, 0x2)

1.307791392s ago: executing program 1 (id=572):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

1.307389112s ago: executing program 1 (id=573):
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000b80)='dev\x00', &(0x7f0000000bc0)='devtmpfs\x00', 0x208008, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='dev/ttyUSB0\x00', 0x2, 0x0)
r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x4, 0x2, 0xe9b, 0x8, 0xf, 0x7f, 0x44233, 0x7, 0x7d, 0x942, 0x8, 0x1004, 0xe, 0x5, 0x0, 0xfffffdfffffffffd], 0x9000})
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000680)={0xc9, 0x0, 0xc})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x2f)
r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000200)={0x0, 0xfffffffd, 0x0, 0x1, 0x10000}, &(0x7f0000000280)=<r9=>0x0, &(0x7f00000002c0)=<r10=>0x0, &(0x7f0000000300)=<r11=>0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000340)={0x2e, 0x50, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x204}}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffd}, 0x1c)
ioctl$BLKROTATIONAL(r0, 0x5415, 0x0)

1.137671838s ago: executing program 4 (id=574):
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x187)
socket(0x1000000000000010, 0x80802, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000280)=<r1=>0x0)
r2 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0xa)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r1, 0x0, 0x0, 0x1, &(0x7f0000000300)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000600)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000000)={0x0, 0x9d, 0x80, 0x1, 0x30b}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5447, 0x2, 0x1, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x102b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4005, 0x2000, 0x1, 0x271}}], 0x1, 0x0, 0x0)

281.575813ms ago: executing program 4 (id=575):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="0ecea02513d4bea704e34d94a008c499a27f5ca5d945ef321c179fbcc63c078f377c36a839c025a9dbbf9ec4ff48d511d4c7dd8445ba7a8b02cf14f9b767a4894b2d572ff60b6a99f7dc4715d10e6003bb93c716eb03", 0x56}], 0x1}, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)='O', 0x5c8, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$vga_arbiter(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='lock '], 0x9)
open(&(0x7f0000000300)='./file0\x00', 0x24142, 0xd1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./tracing\x00', &(0x7f0000000580)='devpts\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000001240)="723a732f70202e2f66696c65303a300c5c56c33e08a13d", 0x17)

203.77794ms ago: executing program 4 (id=576):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0)
add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b6579302017093232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a07953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000019480)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000194c0)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000019500)='./file0\x00', &(0x7f0000019540), 0x8, &(0x7f0000019580)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
pwrite64(r2, &(0x7f00000001c0)="c6", 0x1, 0x7)
write$binfmt_format(r2, &(0x7f0000000000)='1\x00', 0x2)
linkat(0xffffffffffffff9c, &(0x7f00000195c0)='./file0\x00', r2, &(0x7f0000019600)='./file0/file2\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019680)='./file0/file2\x00', 0x2081, 0x8)

202.60529ms ago: executing program 4 (id=577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x8, 0x4, 0x1, [0xffffffffffffff01]}})
r4 = getpgrp(0x0)
r5 = gettid()
rt_tgsigqueueinfo(r4, r5, 0x1f, &(0x7f0000000040)={0x26, 0x1, 0x10004})
rt_tgsigqueueinfo(r4, r5, 0x36, &(0x7f00000000c0)={0xa, 0x8, 0x29b})
r6 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000)
r7 = epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001580)='./dev\x00', &(0x7f00000015c0)='devtmpfs\x00', 0x4010, 0x0)
r8 = syz_usb_connect(0x0, 0x39, &(0x7f0000001600)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001640)='./dev/ttyUSB0\x00', 0x12df00, 0x0)
syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x45, &(0x7f0000001680)=ANY=[@ANYBLOB="0200003dd75097c1fa"])
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r6, &(0x7f00000001c0)={r7, r3, 0x5})
sendmsg$nl_generic(r2, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x114c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

202.32598ms ago: executing program 3 (id=578):
r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x2802, 0x0)
unshare(0x64000600)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0xa, &(0x7f00000001c0)={0xd, 0x8, 0x8})
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x4, 0x0, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000180))
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925001900fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
mlockall(0x7)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x4, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x397)

131.414097ms ago: executing program 3 (id=579):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '3\x00'}}})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="900100a3", @ANYRES16=r3, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x20008000}, 0x240040d1)
ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@thin_pool={0x0, 0xae31dba5a188249a, 0x0, 0x68, 'thin-pool\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '2048', 0x20, 0x0, ' 0'}}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)

85.797262ms ago: executing program 3 (id=580):
r0 = memfd_create(&(0x7f00000004c0)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0)
write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '\t\t'}]}, 0xe)
execveat(r0, &(0x7f0000000600)='\x00', 0x0, 0x0, 0x1000) (async)
r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60)
accept4$nfc_llcp(r1, 0x0, &(0x7f0000000140), 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000001680)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async)
mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xfffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil) (async)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00')
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, 0x80000000, 0x7) (async)
syz_clone(0x1000000, &(0x7f0000000180), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)='n_y')

15.746928ms ago: executing program 3 (id=581):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

14.202679ms ago: executing program 3 (id=582):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64=r0], 0x1c}}, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x10, r0, 0x86a45000)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
getpeername(r1, 0x0, &(0x7f0000000340))

0s ago: executing program 3 (id=583):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r3, &(0x7f0000000200)='27', 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
clock_gettime(0x0, &(0x7f0000000740)={<r5=>0x0, <r6=>0x0})
ppoll(&(0x7f0000000700)=[{r2, 0x80}, {r1, 0xa200}, {r4, 0x40}, {r1, 0x108}, {r1, 0x444}, {r1, 0x80}], 0x6, &(0x7f0000000780)={r5, r6+60000000}, &(0x7f00000007c0)={[0x10000]}, 0x8)
r7 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0xc028ae92, &(0x7f00000000c0)={0x5, 0xfffffff7})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x20940, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x244, 0x10, 0x633, 0x70bd2a, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x4000, 0x0, 0x2, 0x0, 0x20, 0x4}, {@in=@multicast1, 0x4d6, 0x32}, @in=@remote, {0x3, 0x40000000000, 0xffffffffffffffff, 0x2dcd}, {0x1}, {0x0, 0x4}, 0x70bd2d, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x109, 0x1, {{'md5\x00'}, 0x608, "0498ca21f393923701165587653a00352f04bb8bf03c13d94392c48ab428878066917948a5f537a9f0340f36e00f2e7f46ea45f4c6355a713c645482da292239eb9c9d336c567fedd03fb2258963f629559b5b4fb9d636998cd1befad6c48e638236717c8f3171ed999b46cde552fbe0b043d84a454edec17ed5152beeb9293140be2479ec1201f51d6cab04e9c31d448f4f8c7d8a5dc7b299beb35fd31686e585f759f6619f455c70c8bd10e2aee354b06c23619ba5c63e7c463896b6dd3cf483"}}]}, 0x244}, 0x1, 0x0, 0x0, 0x24000884}, 0x0)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)

kernel console output (not intermixed with test programs):

508][  T827] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   68.921642][ T1115] fuse: Bad value for 'group_id'
[   68.924296][  T827] usb 1-1: Product: syz
[   68.929446][ T1115] fuse: Bad value for 'group_id'
[   68.933166][  T827] usb 1-1: Manufacturer: syz
[   68.948117][  T827] hub 1-1:4.0: USB hub found
[   69.145384][  T677] hid (null): global environment stack underflow
[   69.151899][  T677] hid (null): global environment stack underflow
[   69.158330][  T677] hid (null): report_id 39952 is invalid
[   69.160099][  T827] hub 1-1:4.0: config failed, can't read hub descriptor (err -22)
[   69.173892][  T677] cypress 0003:04B4:07B1.0007: global environment stack underflow
[   69.181831][  T677] cypress 0003:04B4:07B1.0007: item 0 2 1 11 parsing failed
[   69.189601][  T677] cypress 0003:04B4:07B1.0007: parse failed
[   69.193695][  T827] usb 1-1: USB disconnect, device number 16
[   69.196323][  T677] cypress 0003:04B4:07B1.0007: probe with driver cypress failed with error -22
[   69.243948][ T1127] input: syz1 as /devices/virtual/input/input5
[   69.252088][ T1127] netlink: 72 bytes leftover after parsing attributes in process `syz.3.254'.
[   69.352071][  T677] usb 2-1: USB disconnect, device number 22
[   69.465079][ T1138] fuse: Bad value for 'group_id'
[   69.470139][ T1138] fuse: Bad value for 'group_id'
[   69.611920][   T45] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[   69.762910][   T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   69.773971][   T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.784795][   T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   69.793907][   T45] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   69.802280][   T45] usb 1-1: Product: syz
[   69.806523][   T45] usb 1-1: Manufacturer: syz
[   69.813283][   T45] hub 1-1:4.0: USB hub found
[   70.013354][   T45] hub 1-1:4.0: config failed, hub has too many ports! (err -19)
[   70.081914][  T677] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   70.233039][  T677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.244086][  T677] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   70.255744][  T677] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   70.264878][  T677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.272928][  T677] usb 3-1: Product: syz
[   70.277126][  T677] usb 3-1: Manufacturer: syz
[   70.281737][  T677] usb 3-1: SerialNumber: syz
[   70.288428][  T677] cdc_mbim 3-1:1.0: skipping garbage
[   70.321997][   T45] usb 1-1: USB disconnect, device number 17
[   70.488014][ T1147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   70.763856][ T1160] fuse: Bad value for 'group_id'
[   70.768877][ T1160] fuse: Bad value for 'group_id'
[   70.898398][ T1172] netlink: 104 bytes leftover after parsing attributes in process `syz.0.274'.
[   70.907956][ T1176] incfs: Options parsing error. -22
[   70.913404][ T1176] incfs: mount failed -22
[   70.978502][ T1181] batadv_slave_0: entered promiscuous mode
[   71.003630][ T1181] batadv_slave_0: left promiscuous mode
[   71.096940][ T1147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   71.104488][  T677] cdc_mbim 3-1:1.0: setting rx_max = 16384
[   71.141916][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   71.291912][    T9] usb 4-1: Using ep0 maxpacket: 8
[   71.299240][    T9] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.310399][    T9] usb 4-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   71.314467][ T1147] ./dev/sda1: Can't lookup blockdev
[   71.323428][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[   71.335263][    T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   71.345751][  T677] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[   71.346429][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.360404][  T677] wwan wwan0: port wwan0mbim0 attached
[   71.366969][    T9] usb 4-1: config 0 descriptor??
[   71.371691][  T677] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, b6:ef:58:e9:b6:8b
[   71.387218][  T677] usb 3-1: USB disconnect, device number 17
[   71.393638][  T677] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[   71.444549][  T677] wwan wwan0: port wwan0mbim0 disconnected
[   71.535790][ T1183] futex_wake_op: syz.0.277 tries to shift op by 144; fix this program
[   71.558681][ T1187] futex_wake_op: syz.0.277 tries to shift op by 144; fix this program
[   71.605654][ T1194] netlink: 'syz.0.279': attribute type 12 has an invalid length.
[   71.628539][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   71.628556][   T36] audit: type=1400 audit(1792745852.760:1404): avc:  denied  { create } for  pid=1195 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   71.663959][   T36] audit: type=1400 audit(1792745852.790:1405): avc:  denied  { setopt } for  pid=1195 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   71.684028][   T36] audit: type=1400 audit(1792745852.790:1406): avc:  denied  { write } for  pid=1195 comm="syz.0.280" path="socket:[15421]" dev="sockfs" ino=15421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   71.777708][    T9] hid (null): global environment stack underflow
[   71.784158][    T9] hid (null): global environment stack underflow
[   71.792012][    T9] hid (null): report_id 39952 is invalid
[   71.798676][    T9] cypress 0003:04B4:07B1.0008: global environment stack underflow
[   71.807084][    T9] cypress 0003:04B4:07B1.0008: item 0 2 1 11 parsing failed
[   71.814640][    T9] cypress 0003:04B4:07B1.0008: parse failed
[   71.820639][    T9] cypress 0003:04B4:07B1.0008: probe with driver cypress failed with error -22
[   71.838425][   T36] audit: type=1400 audit(1792745852.970:1407): avc:  denied  { getopt } for  pid=1204 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   71.869699][   T36] audit: type=1400 audit(1792745853.000:1408): avc:  denied  { map } for  pid=1206 comm="syz.1.284" path="socket:[15456]" dev="sockfs" ino=15456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.893271][   T36] audit: type=1400 audit(1792745853.000:1409): avc:  denied  { read } for  pid=1206 comm="syz.1.284" path="socket:[15456]" dev="sockfs" ino=15456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.980943][  T677] usb 4-1: USB disconnect, device number 16
[   72.530746][ T1216] tipc: Trying to set illegal importance in message
[   72.549200][   T36] audit: type=1400 audit(1792745853.680:1410): avc:  denied  { mount } for  pid=1220 comm="syz.3.289" name="/" dev="ramfs" ino=15221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   72.754835][   T36] audit: type=1400 audit(1792745853.890:1411): avc:  denied  { mounton } for  pid=1227 comm="syz.3.291" path="/75/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   72.780878][   T36] audit: type=1400 audit(1792745853.910:1412): avc:  denied  { write } for  pid=1227 comm="syz.3.291" name="snmp6" dev="proc" ino=4026532614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   72.835713][   T36] audit: type=1400 audit(1792745853.970:1413): avc:  denied  { bind } for  pid=1231 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   73.171936][   T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   73.323397][   T45] usb 3-1: unable to get BOS descriptor or descriptor too short
[   73.331950][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.343578][   T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   73.355575][   T45] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[   73.362814][  T827] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   73.374500][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.382777][   T45] usb 3-1: Product: syz
[   73.387209][   T45] usb 3-1: Manufacturer: syz
[   73.392112][   T45] usb 3-1: SerialNumber: syz
[   73.477826][ T1248] syz.3.300 (1248): /proc/1247/oom_adj is deprecated, please use /proc/1247/oom_score_adj instead.
[   73.531903][  T827] usb 1-1: Using ep0 maxpacket: 8
[   73.542625][  T827] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.553732][  T827] usb 1-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   73.566737][  T827] usb 1-1: config 0 interface 0 has no altsetting 0
[   73.573395][  T827] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   73.582639][  T827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.591478][  T827] usb 1-1: config 0 descriptor??
[   73.607584][   T45] usb 3-1: MIDIStreaming interface descriptor not found
[   73.625053][   T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   73.637919][   T45] usb 3-1: USB disconnect, device number 18
[   73.649436][  T924] udevd[924]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   73.721899][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   73.861919][    T9] usb 4-1: device descriptor read/64, error -71
[   73.998530][  T827] hid (null): global environment stack underflow
[   74.004986][  T827] hid (null): global environment stack underflow
[   74.011348][  T827] hid (null): report_id 39952 is invalid
[   74.018143][  T827] cypress 0003:04B4:07B1.0009: global environment stack underflow
[   74.026023][  T827] cypress 0003:04B4:07B1.0009: item 0 2 1 11 parsing failed
[   74.033618][  T827] cypress 0003:04B4:07B1.0009: parse failed
[   74.039537][  T827] cypress 0003:04B4:07B1.0009: probe with driver cypress failed with error -22
[   74.101937][    T9] usb 4-1: device descriptor read/64, error -71
[   74.121939][   T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   74.162567][ T1252] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[   74.201038][  T677] usb 1-1: USB disconnect, device number 18
[   74.271903][   T45] usb 2-1: Using ep0 maxpacket: 16
[   74.278013][   T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.288247][   T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.299210][   T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.308982][   T45] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   74.321885][   T45] usb 2-1: config 0 interface 0 has no altsetting 0
[   74.328522][   T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[   74.337690][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.346357][   T45] usb 2-1: config 0 descriptor??
[   74.353975][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   74.491901][    T9] usb 4-1: device descriptor read/64, error -71
[   74.731897][    T9] usb 4-1: device descriptor read/64, error -71
[   74.756127][   T45] logitech-djreceiver 0003:046D:C53A.000A: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0
[   74.842132][    T9] usb usb4-port1: attempt power cycle
[   74.863175][ T1265] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.307' sets config #32767
[   75.111936][  T409] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[   75.181919][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   75.203018][    T9] usb 4-1: device descriptor read/8, error -71
[   75.261900][  T409] usb 1-1: Using ep0 maxpacket: 8
[   75.268188][  T409] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   75.276642][  T409] usb 1-1: config 179 has no interface number 0
[   75.282979][  T409] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   75.294225][  T409] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   75.305629][  T409] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   75.316927][  T409] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[   75.327087][  T409] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   75.340474][  T409] usb 1-1: config 179 interface 65 has no altsetting 0
[   75.347411][  T409] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   75.356505][  T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.365252][    T9] usb 4-1: device descriptor read/8, error -71
[   75.375549][  T409] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6
[   75.508310][  T409] usb 2-1: USB disconnect, device number 23
[   75.611961][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   75.633059][    T9] usb 4-1: device descriptor read/8, error -71
[   75.763030][    T9] usb 4-1: device descriptor read/8, error -71
[   75.871997][    T9] usb usb4-port1: unable to enumerate USB device
[   76.058663][ T1273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.309'.
[   76.079507][ T1275] netlink: 'syz.1.310': attribute type 4 has an invalid length.
[   76.087273][ T1275] netlink: 17 bytes leftover after parsing attributes in process `syz.1.310'.
[   76.096748][ T1275] netlink: 'syz.1.310': attribute type 5 has an invalid length.
[   76.105699][ T1275] FAULT_INJECTION: forcing a failure.
[   76.105699][ T1275] name failslab, interval 1, probability 0, space 0, times 0
[   76.118342][ T1275] CPU: 1 UID: 0 PID: 1275 Comm: syz.1.310 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[   76.118372][ T1275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   76.118392][ T1275] Call Trace:
[   76.118399][ T1275]  <TASK>
[   76.118407][ T1275]  __dump_stack+0x21/0x30
[   76.118447][ T1275]  dump_stack_lvl+0x140/0x1c0
[   76.118481][ T1275]  ? __cfi_dump_stack_lvl+0x10/0x10
[   76.118515][ T1275]  ? futex_wake+0x666/0x950
[   76.118544][ T1275]  dump_stack+0x19/0x20
[   76.118575][ T1275]  should_fail_ex+0x3c2/0x510
[   76.118597][ T1275]  ? __se_sys_futex_waitv+0x20d/0x720
[   76.118622][ T1275]  should_failslab+0xac/0x100
[   76.118644][ T1275]  __kmalloc_noprof+0x69/0x510
[   76.118675][ T1275]  ? hrtimer_start_range_ns+0x123f/0x2030
[   76.118698][ T1275]  ? __se_sys_futex_waitv+0x20d/0x720
[   76.118721][ T1275]  __se_sys_futex_waitv+0x20d/0x720
[   76.118746][ T1275]  ? mutex_unlock+0x90/0x240
[   76.118774][ T1275]  ? __x64_sys_futex_waitv+0xf0/0xf0
[   76.118799][ T1275]  ? __se_sys_futex+0x13c/0x320
[   76.118822][ T1275]  ? fput+0x1a4/0x230
[   76.118847][ T1275]  ? __cfi_ksys_write+0x10/0x10
[   76.118911][ T1275]  ? __kasan_check_write+0x18/0x20
[   76.118945][ T1275]  ? fpregs_restore_userregs+0x11c/0x260
[   76.118980][ T1275]  __x64_sys_futex_waitv+0xc3/0xf0
[   76.119005][ T1275]  x64_sys_call+0x2dc4/0x2ee0
[   76.119030][ T1275]  do_syscall_64+0x57/0xf0
[   76.119054][ T1275]  ? clear_bhb_loop+0x50/0xa0
[   76.119087][ T1275]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   76.119119][ T1275] RIP: 0033:0x7f1202d9f559
[   76.119139][ T1275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.119160][ T1275] RSP: 002b:00007f1203bf0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1
[   76.119186][ T1275] RAX: ffffffffffffffda RBX: 00007f1203025fa0 RCX: 00007f1202d9f559
[   76.119206][ T1275] RDX: 0000000000000000 RSI: 000000000000000c RDI: 00002000000068c0
[   76.119221][ T1275] RBP: 00007f1202e36b20 R08: 0000000000000001 R09: 0000000000000000
[   76.119237][ T1275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.119251][ T1275] R13: 00007f1203026038 R14: 00007f1203025fa0 R15: 00007ffc4ce4b9c8
[   76.119271][ T1275]  </TASK>
[   76.621926][  T677] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   76.771888][  T677] usb 2-1: Using ep0 maxpacket: 16
[   76.771891][  T409] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   76.785714][  T677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.796636][  T677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.806412][  T677] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   76.819232][  T677] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   76.828311][  T677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.837072][  T677] usb 2-1: config 0 descriptor??
[   76.881894][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   76.931887][  T409] usb 3-1: Using ep0 maxpacket: 8
[   76.938115][  T409] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.949206][  T409] usb 3-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.962256][  T409] usb 3-1: config 0 interface 0 has no altsetting 0
[   76.968882][  T409] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   76.978062][  T409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.986772][  T409] usb 3-1: config 0 descriptor??
[   77.061898][    T9] usb 4-1: Using ep0 maxpacket: 8
[   77.068094][    T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.079037][    T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.088803][    T9] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.101615][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[   77.108267][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[   77.117357][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.126131][    T9] usb 4-1: config 0 descriptor??
[   77.253015][  T677] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input7
[   77.266252][  T677] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   77.394764][  T409] hid (null): global environment stack underflow
[   77.401149][  T409] hid (null): global environment stack underflow
[   77.407552][  T409] hid (null): report_id 39952 is invalid
[   77.414438][  T409] cypress 0003:04B4:07B1.000C: global environment stack underflow
[   77.422326][  T409] cypress 0003:04B4:07B1.000C: item 0 2 1 11 parsing failed
[   77.429799][  T409] cypress 0003:04B4:07B1.000C: parse failed
[   77.435764][  T409] cypress 0003:04B4:07B1.000C: probe with driver cypress failed with error -22
[   77.535058][    T9] input: HID 046d:c623 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C623.000D/input/input8
[   77.596397][  T677] usb 3-1: USB disconnect, device number 19
[   77.864913][  T677] usb 1-1: USB disconnect, device number 19
[   77.873168][  T677] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   77.909248][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   77.909265][   T36] audit: type=1400 audit(1792745859.040:1430): avc:  denied  { listen } for  pid=1294 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   77.935581][   T36] audit: type=1400 audit(1792745859.060:1431): avc:  denied  { shutdown } for  pid=1294 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   78.223533][   T36] audit: type=1400 audit(1792745859.360:1432): avc:  denied  { create } for  pid=1304 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   78.363637][    T9] logitech 0003:046D:C623.000D: input,hiddev96,hidraw1: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0
[   78.491918][  T677] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   78.645962][  T677] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[   78.656024][  T677] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 13
[   78.670235][  T677] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.679369][  T677] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=1
[   78.687396][  T677] usb 3-1: Manufacturer: syz
[   78.692051][  T677] usb 3-1: SerialNumber: syz
[   78.698419][ T1310] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   78.906448][ T1310] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   79.162607][   T36] audit: type=1400 audit(1792745860.300:1433): avc:  denied  { execute } for  pid=1317 comm="syz.3.323" name="file0" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   79.184874][   T36] audit: type=1400 audit(1792745860.300:1434): avc:  denied  { execute_no_trans } for  pid=1317 comm="syz.3.323" path="/79/file0" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   79.221987][   T36] audit: type=1400 audit(1792745860.350:1435): avc:  denied  { mounton } for  pid=1319 comm="syz.3.324" path="/80/file0" dev="tmpfs" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   79.268573][ T1324] ./dev/sda1: Can't lookup blockdev
[   79.313774][   T36] audit: type=1400 audit(1792745860.450:1436): avc:  denied  { wake_alarm } for  pid=1327 comm="syz.0.328" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   79.328505][  T677] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[   79.357941][   T36] audit: type=1400 audit(1792745860.490:1437): avc:  denied  { map } for  pid=1329 comm="syz.0.329" path="socket:[16887]" dev="sockfs" ino=16887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.382874][   T36] audit: type=1400 audit(1792745860.490:1438): avc:  denied  { read } for  pid=1329 comm="syz.0.329" path="socket:[16887]" dev="sockfs" ino=16887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.402037][   T45] usb 2-1: reset high-speed USB device number 24 using dummy_hcd
[   79.424484][   T45] usb 2-1: device reset changed ep0 maxpacket size!
[   79.431974][  T409] usb 2-1: USB disconnect, device number 24
[   79.532919][ T1310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.551991][ T1310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.568999][  T677] usb 3-1: USB disconnect, device number 20
[   79.579351][  T677] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[   79.583520][  T409] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   79.681929][   T45] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[   79.692065][   T31] usb 4-1: reset high-speed USB device number 21 using dummy_hcd
[   79.773034][  T409] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.783327][  T409] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   79.794801][  T409] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[   79.804096][  T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.813362][ T1316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   79.821290][  T409] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[   79.862376][   T31] usb 4-1: device firmware changed
[   79.867782][  T408] usb 4-1: USB disconnect, device number 21
[   79.874517][   T45] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   79.885614][   T45] usb 1-1: config 1 interface 0 has no altsetting 0
[   79.896607][   T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   79.905720][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.913743][   T45] usb 1-1: Product: syz
[   79.917914][   T45] usb 1-1: Manufacturer: syz
[   79.922545][   T45] usb 1-1: SerialNumber: syz
[   79.928083][ T1335] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   80.023068][  T408] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   80.033082][ T1316] FAULT_INJECTION: forcing a failure.
[   80.033082][ T1316] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   80.046204][ T1316] CPU: 0 UID: 0 PID: 1316 Comm: syz.1.322 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[   80.046238][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   80.046252][ T1316] Call Trace:
[   80.046259][ T1316]  <TASK>
[   80.046267][ T1316]  __dump_stack+0x21/0x30
[   80.046304][ T1316]  dump_stack_lvl+0x140/0x1c0
[   80.046327][ T1316]  ? __cfi_dump_stack_lvl+0x10/0x10
[   80.046365][ T1316]  ? vfs_write+0xbcf/0xfd0
[   80.046397][ T1316]  dump_stack+0x19/0x20
[   80.046427][ T1316]  should_fail_ex+0x3c2/0x510
[   80.046450][ T1316]  should_fail+0xf/0x20
[   80.046462][ T1316]  should_fail_usercopy+0x1e/0x30
[   80.046478][ T1316]  strncpy_from_user+0x29/0x280
[   80.046493][ T1316]  __se_sys_add_key+0xdc/0x4b0
[   80.046538][ T1316]  ? __x64_sys_add_key+0xf0/0xf0
[   80.046574][ T1316]  ? __kasan_check_write+0x18/0x20
[   80.046601][ T1316]  ? fpregs_restore_userregs+0x11c/0x260
[   80.046622][ T1316]  __x64_sys_add_key+0xc3/0xf0
[   80.046658][ T1316]  x64_sys_call+0x195f/0x2ee0
[   80.046681][ T1316]  do_syscall_64+0x57/0xf0
[   80.046702][ T1316]  ? clear_bhb_loop+0x50/0xa0
[   80.046735][ T1316]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   80.046755][ T1316] RIP: 0033:0x7f1202d9f559
[   80.046767][ T1316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.046780][ T1316] RSP: 002b:00007f1203bf0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   80.046812][ T1316] RAX: ffffffffffffffda RBX: 00007f1203025fa0 RCX: 00007f1202d9f559
[   80.046829][ T1316] RDX: 0000200000003580 RSI: 0000000000000000 RDI: 0000200000003540
[   80.046844][ T1316] RBP: 00007f1202e36b20 R08: ffffffffffffffff R09: 0000000000000000
[   80.046859][ T1316] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[   80.046878][ T1316] R13: 00007f1203026038 R14: 00007f1203025fa0 R15: 00007ffc4ce4b9c8
[   80.046891][ T1316]  </TASK>
[   80.241929][  T408] usb 4-1: Using ep0 maxpacket: 8
[   80.248270][   T45] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 3 proto 3 vid 0x0525 pid 0xA4A8
[   80.261195][  T408] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.272526][   T45] usb 1-1: USB disconnect, device number 20
[   80.279510][   T36] audit: type=1400 audit(1792745861.410:1439): avc:  denied  { create } for  pid=1362 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   80.279561][   T45] usblp0: removed
[   80.303067][  T408] usb 4-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   80.327040][  T408] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.333922][  T408] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   80.345489][  T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.355115][  T408] usb 4-1: config 0 descriptor??
[   80.363182][ T1316] netlink: 328 bytes leftover after parsing attributes in process `syz.1.322'.
[   80.415287][   T31] usb 2-1: USB disconnect, device number 25
[   80.773378][  T408] hid (null): global environment stack underflow
[   80.779820][  T408] hid (null): global environment stack underflow
[   80.786211][  T408] hid (null): report_id 39952 is invalid
[   80.792964][  T408] cypress 0003:04B4:07B1.000E: global environment stack underflow
[   80.800904][  T408] cypress 0003:04B4:07B1.000E: item 0 2 1 11 parsing failed
[   80.808404][  T408] cypress 0003:04B4:07B1.000E: parse failed
[   80.814390][  T408] cypress 0003:04B4:07B1.000E: probe with driver cypress failed with error -22
[   80.976414][  T408] usb 4-1: USB disconnect, device number 22
[   81.361919][   T31] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[   81.512679][   T31] usb 2-1: not running at top speed; connect to a high speed hub
[   81.521372][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.531909][   T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[   81.542079][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   81.543501][   T31] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 156, using maximum allowed: 30
[   81.563249][   T31] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 156
[   81.577707][   T31] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[   81.586819][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.594856][   T31] usb 2-1: Product: syz
[   81.599090][   T31] usb 2-1: Manufacturer: syz
[   81.603755][   T31] usb 2-1: SerialNumber: syz
[   81.701899][    T9] usb 3-1: Using ep0 maxpacket: 8
[   81.708220][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   81.719420][    T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.732223][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   81.738879][    T9] usb 3-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00
[   81.747959][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.756696][    T9] usb 3-1: config 0 descriptor??
[   81.815252][   T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   81.832012][   T31] usb 2-1: USB disconnect, device number 26
[   82.166131][    T9] input: HID 0c16:0003 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0C16:0003.000F/input/input9
[   82.187476][    T9] gyration 0003:0C16:0003.000F: input,hiddev96,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.2-1/input0
[   82.366219][ T1391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.375205][ T1391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.636988][  T408] usb 3-1: USB disconnect, device number 21
[   82.661926][   T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   82.781947][  T409] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   82.813356][   T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   82.825071][   T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   82.836158][   T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   82.846045][   T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   82.855194][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.931889][  T409] usb 4-1: Using ep0 maxpacket: 8
[   82.938078][  T409] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.949395][  T409] usb 4-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   82.962700][  T409] usb 4-1: config 0 interface 0 has no altsetting 0
[   82.969388][  T409] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   82.978500][  T409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.989988][  T409] usb 4-1: config 0 descriptor??
[   83.067777][   T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[   83.075633][   T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input10
[   83.087258][   T31] usb 2-1: USB disconnect, device number 27
[   83.247916][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   83.247936][ T1441] rust_binder: 1440:1441 error while translating object: EINVAL
[   83.247946][   T36] audit: type=1400 audit(1792745864.380:1447): avc:  denied  { transfer } for  pid=1440 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   83.280888][ T1441] rust_binder: 1440:1441 transaction call to 1440:0 failed EINVAL, code 4294967293 size 80-24 line thread.rs:867
[   83.293708][    T9] rust_binder: 1440: undelivered TRANSACTION_ERROR: 29201
[   83.311020][    T9] rust_binder: 1442: undelivered TRANSACTION_COMPLETE
[   83.318014][    T9] rust_binder: 1442: undelivered TRANSACTION_COMPLETE
[   83.329292][   T31] rust_binder: 1442: undelivered transaction 15, process died
[   83.337545][   T31] rust_binder: 1442: undelivered transaction 14, process died
[   83.373822][ T1449] FAULT_INJECTION: forcing a failure.
[   83.373822][ T1449] name fail_futex, interval 1, probability 0, space 0, times 0
[   83.387231][ T1449] CPU: 0 UID: 0 PID: 1449 Comm: syz.2.358 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[   83.387266][ T1449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   83.387290][ T1449] Call Trace:
[   83.387298][ T1449]  <TASK>
[   83.387305][ T1449]  __dump_stack+0x21/0x30
[   83.387346][ T1449]  dump_stack_lvl+0x140/0x1c0
[   83.387381][ T1449]  ? __cfi_dump_stack_lvl+0x10/0x10
[   83.387414][ T1449]  ? stack_trace_save+0xaa/0x100
[   83.387446][ T1449]  dump_stack+0x19/0x20
[   83.387480][ T1449]  should_fail_ex+0x3c2/0x510
[   83.387502][ T1449]  should_fail+0xf/0x20
[   83.387522][ T1449]  get_futex_key+0x178/0x940
[   83.387544][ T1449]  ? __cfi_get_futex_key+0x10/0x10
[   83.387566][ T1449]  futex_wake+0x150/0x950
[   83.387588][ T1449]  ? __kasan_check_read+0x15/0x20
[   83.387614][ T1449]  ? perf_event_namespaces+0x19c/0x8e0
[   83.387636][ T1449]  ? __cfi_perf_event_namespaces+0x10/0x10
[   83.387657][ T1449]  ? cred_has_capability+0x296/0x3a0
[   83.387685][ T1449]  ? __cfi_futex_wake+0x10/0x10
[   83.387709][ T1449]  ? __cfi_copy_pid_ns+0x10/0x10
[   83.387731][ T1449]  do_futex+0x37d/0x510
[   83.387749][ T1449]  ? irqentry_exit+0x4a/0x60
[   83.387779][ T1449]  ? __cfi_do_futex+0x10/0x10
[   83.387801][ T1449]  __se_sys_futex+0x13c/0x320
[   83.387822][ T1449]  ? fput+0x1a4/0x230
[   83.387842][ T1449]  ? __x64_sys_futex+0x110/0x110
[   83.387861][ T1449]  ? __x64_sys_setns+0x80/0x80
[   83.387881][ T1449]  __x64_sys_futex+0xe9/0x110
[   83.387903][ T1449]  x64_sys_call+0x227f/0x2ee0
[   83.387923][ T1449]  do_syscall_64+0x57/0xf0
[   83.387942][ T1449]  ? clear_bhb_loop+0x50/0xa0
[   83.387970][ T1449]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   83.387997][ T1449] RIP: 0033:0x7fdbc099f559
[   83.388016][ T1449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.388034][ T1449] RSP: 002b:00007fdbc18770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   83.388058][ T1449] RAX: ffffffffffffffda RBX: 00007fdbc0c25fa8 RCX: 00007fdbc099f559
[   83.388075][ T1449] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdbc0c25fac
[   83.388090][ T1449] RBP: 00007fdbc0c25fa0 R08: 4000000000000000 R09: 0000000000000000
[   83.388106][ T1449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.388119][ T1449] R13: 00007fdbc0c26038 R14: 00007ffdd3020e00 R15: 00007ffdd3020ee8
[   83.388139][ T1449]  </TASK>
[   83.628753][  T409] hid (null): global environment stack underflow
[   83.635325][  T409] hid (null): global environment stack underflow
[   83.641696][  T409] hid (null): report_id 39952 is invalid
[   83.648395][  T409] cypress 0003:04B4:07B1.0010: global environment stack underflow
[   83.656429][  T409] cypress 0003:04B4:07B1.0010: item 0 2 1 11 parsing failed
[   83.664136][  T409] cypress 0003:04B4:07B1.0010: parse failed
[   83.670097][  T409] cypress 0003:04B4:07B1.0010: probe with driver cypress failed with error -22
[   83.691296][ T1453] loop1: detected capacity change from 0 to 8
[   83.711753][ T1455] loop6: detected capacity change from 0 to 8
[   83.848139][  T408] usb 4-1: USB disconnect, device number 23
[   83.880052][   T36] audit: type=1400 audit(1792745865.010:1448): avc:  denied  { create } for  pid=1474 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   84.306704][   T36] audit: type=1400 audit(1792745865.440:1449): avc:  denied  { nlmsg_write } for  pid=1483 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.473225][   T36] audit: type=1400 audit(1792745865.610:1450): avc:  denied  { bind } for  pid=1506 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.493719][ T1507] netlink: 44 bytes leftover after parsing attributes in process `syz.3.376'.
[   84.517828][   T36] audit: type=1400 audit(1792745865.640:1451): avc:  denied  { setopt } for  pid=1506 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   84.574791][ T1520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'.
[   84.586672][ T1520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.377'.
[   84.723384][ T1529] page size migration: [1529 (syz.0.378)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma
[   84.824454][   T36] audit: type=1400 audit(1792745865.960:1452): avc:  denied  { setattr } for  pid=1543 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   84.902853][ T1509] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint
[   84.920782][ T1509] pci 0000:00:04.0: BAR 0 [io  0xc040-0xc07f]
[   84.929579][ T1509] pci 0000:00:04.0: BAR 1 [mem 0xfe801000-0xfe80107f]
[   84.965369][ T1509] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f]: assigned
[   84.975254][ T1509] pci 0000:00:04.0: BAR 0 [io  0xc040-0xc07f]: assigned
[   84.990126][ T1509] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver
[   92.013621][ T1586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'.
[   92.024813][ T1588] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   92.047533][ T1588] overlayfs: overlapping lowerdir path
[   92.079144][   T36] audit: type=1400 audit(1792745873.210:1453): avc:  denied  { write } for  pid=1595 comm="syz.2.387" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[   92.090774][ T1601] input input11: cannot allocate more than FF_MAX_EFFECTS effects
[   92.103988][    T9] kernel read not supported for file /kmsg (pid: 9 comm: kworker/0:0)
[   92.139280][ T1612] fuse: Bad value for 'group_id'
[   92.144643][   T36] audit: type=1400 audit(1792745873.270:1454): avc:  denied  { mounton } for  pid=1595 comm="syz.2.387" path="/99/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   92.167028][ T1612] fuse: Bad value for 'group_id'
[   92.196125][   T36] audit: type=1400 audit(1792745873.330:1455): avc:  denied  { read write } for  pid=1613 comm="syz.0.392" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.223151][   T36] audit: type=1400 audit(1792745873.350:1456): avc:  denied  { open } for  pid=1613 comm="syz.0.392" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.314927][   T36] audit: type=1400 audit(1792745873.350:1457): avc:  denied  { ioctl } for  pid=1613 comm="syz.0.392" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.452093][   T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   92.645431][   T45] usb 1-1: unable to get BOS descriptor or descriptor too short
[   92.672601][   T45] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[   92.686731][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.695913][   T45] usb 1-1: Product: syz
[   92.700508][   T45] usb 1-1: Manufacturer: syz
[   92.710679][   T45] usb 1-1: SerialNumber: syz
[   92.857780][ T1643] fuse: Bad value for 'group_id'
[   92.862839][ T1643] fuse: Bad value for 'group_id'
[   92.936143][   T45] usb 1-1: MIDIStreaming interface descriptor not found
[   92.945449][   T45] usb 1-1: USB disconnect, device number 21
[   92.954905][ T1597] udevd[1597]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   93.112019][  T409] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[   93.132015][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[   93.241902][  T409] usb 3-1: device descriptor read/64, error -71
[   93.283189][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   93.292966][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   93.304355][    T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   93.313512][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.321511][    T9] usb 4-1: Product: syz
[   93.325774][    T9] usb 4-1: Manufacturer: syz
[   93.330410][    T9] usb 4-1: SerialNumber: syz
[   93.337318][    T9] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[   93.345563][    T9] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   93.345563][    T9]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   93.511904][  T409] usb 3-1: device descriptor read/64, error -71
[   93.621096][ T1661] netlink: 'syz.0.407': attribute type 4 has an invalid length.
[   93.640421][ T1661] netlink: 'syz.0.407': attribute type 4 has an invalid length.
[   93.649158][ T1661] FAULT_INJECTION: forcing a failure.
[   93.649158][ T1661] name failslab, interval 1, probability 0, space 0, times 0
[   93.662140][ T1661] CPU: 0 UID: 0 PID: 1661 Comm: syz.0.407 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[   93.662178][ T1661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   93.662195][ T1661] Call Trace:
[   93.662202][ T1661]  <TASK>
[   93.662212][ T1661]  __dump_stack+0x21/0x30
[   93.662258][ T1661]  dump_stack_lvl+0x140/0x1c0
[   93.662295][ T1661]  ? __cfi_dump_stack_lvl+0x10/0x10
[   93.662345][ T1661]  dump_stack+0x19/0x20
[   93.662380][ T1661]  should_fail_ex+0x3c2/0x510
[   93.662405][ T1661]  should_failslab+0xac/0x100
[   93.662430][ T1661]  __kmalloc_cache_noprof+0x41/0x470
[   93.662466][ T1661]  ? fib_insert_alias+0x4e0/0x1200
[   93.662494][ T1661]  fib_insert_alias+0x4e0/0x1200
[   93.662520][ T1661]  ? kmem_cache_alloc_noprof+0x1e2/0x410
[   93.662556][ T1661]  fib_table_insert+0x843/0x1ef0
[   93.662582][ T1661]  ? do_syscall_64+0x57/0xf0
[   93.662608][ T1661]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   93.662644][ T1661]  ? consume_skb+0x65/0x1a0
[   93.662672][ T1661]  fib_add_ifaddr+0xa58/0xdc0
[   93.662709][ T1661]  ? vfs_writev+0x4a5/0xe90
[   93.662734][ T1661]  ? __cfi_fib_add_ifaddr+0x10/0x10
[   93.662774][ T1661]  ? kmem_cache_free+0x1bd/0x4f0
[   93.662808][ T1661]  ? __kfree_skb+0x18f/0x210
[   93.662836][ T1661]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   93.662863][ T1661]  ? __wake_up+0x169/0x190
[   93.662896][ T1661]  ? consume_skb+0x91/0x1a0
[   93.662926][ T1661]  ? downgrade_write+0x470/0x470
[   93.662956][ T1661]  fib_inetaddr_event+0x161/0x320
[   93.662993][ T1661]  ? __cfi_fib_inetaddr_event+0x10/0x10
[   93.663030][ T1661]  notifier_call_chain+0x106/0x2b0
[   93.663058][ T1661]  blocking_notifier_call_chain+0x6a/0x90
[   93.663086][ T1661]  __inet_insert_ifa+0x857/0xa80
[   93.663126][ T1661]  ? inet_rcu_free_ifa+0xe0/0xe0
[   93.663162][ T1661]  ? inet_alloc_ifa+0x5e/0x1c0
[   93.663197][ T1661]  ? __asan_memcpy+0x5a/0x80
[   93.663230][ T1661]  inetdev_event+0xd87/0x1240
[   93.663252][ T1661]  ? __cfi_inetdev_event+0x10/0x10
[   93.663274][ T1661]  ? cfg802154_netdev_notifier_call+0xe5/0x930
[   93.663300][ T1661]  ? arp_netdev_event+0xd8/0x2c0
[   93.663341][ T1661]  ? __cfi_inetdev_event+0x10/0x10
[   93.663363][ T1661]  notifier_call_chain+0x106/0x2b0
[   93.663390][ T1661]  raw_notifier_call_chain+0x31/0x40
[   93.663418][ T1661]  __dev_notify_flags+0x318/0x5a0
[   93.663456][ T1661]  ? __cfi___dev_notify_flags+0x10/0x10
[   93.663500][ T1661]  ? __dev_change_flags+0x4ec/0x6c0
[   93.663543][ T1661]  ? __cfi___dev_change_flags+0x10/0x10
[   93.663575][ T1661]  dev_change_flags+0xe7/0x1b0
[   93.663605][ T1661]  do_setlink+0xb7b/0x41e0
[   93.663629][ T1661]  ? __cfi__printk+0x10/0x10
[   93.663656][ T1661]  ? nlmsg_parse_deprecated_strict+0x130/0x130
[   93.663685][ T1661]  ? __nla_validate+0x70/0x70
[   93.663714][ T1661]  ? is_bpf_text_address+0x17b/0x1a0
[   93.663758][ T1661]  ? kernel_text_address+0xa9/0xe0
[   93.663791][ T1661]  ? __kernel_text_address+0x11/0x40
[   93.663824][ T1661]  rtnl_setlink+0x32d/0x4c0
[   93.663857][ T1661]  ? __cfi_rtnl_setlink+0x10/0x10
[   93.663889][ T1661]  ? is_bpf_text_address+0x17b/0x1a0
[   93.663915][ T1661]  ? cgroup_rstat_updated+0x144/0x800
[   93.663946][ T1661]  ? kernel_text_address+0xa9/0xe0
[   93.663989][ T1661]  ? __kasan_check_write+0x18/0x20
[   93.664020][ T1661]  ? mutex_lock+0x97/0x1d0
[   93.664047][ T1661]  ? __cfi_mutex_lock+0x10/0x10
[   93.664074][ T1661]  ? ns_capable+0x90/0xf0
[   93.664096][ T1661]  ? netlink_net_capable+0x129/0x160
[   93.664122][ T1661]  ? __cfi_rtnl_setlink+0x10/0x10
[   93.664155][ T1661]  rtnetlink_rcv_msg+0x8be/0xa40
[   93.664177][ T1661]  ? __asan_memcpy+0x5a/0x80
[   93.664216][ T1661]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[   93.664241][ T1661]  ? avc_has_perm+0x155/0x240
[   93.664276][ T1661]  netlink_rcv_skb+0x24a/0x4e0
[   93.664305][ T1661]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[   93.664339][ T1661]  ? __cfi_netlink_rcv_skb+0x10/0x10
[   93.664368][ T1661]  ? selinux_netlink_send+0x7df/0x8b0
[   93.664397][ T1661]  ? netlink_autobind+0x1c0/0x1c0
[   93.664430][ T1661]  ? is_vmalloc_addr+0x11/0x40
[   93.664454][ T1661]  rtnetlink_rcv+0x20/0x30
[   93.664475][ T1661]  netlink_unicast+0x8bf/0xa70
[   93.664504][ T1661]  netlink_sendmsg+0x7d1/0xad0
[   93.664535][ T1661]  ? __cfi_netlink_sendmsg+0x10/0x10
[   93.664566][ T1661]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[   93.664600][ T1661]  ? security_socket_sendmsg+0x3d/0x100
[   93.664633][ T1661]  ? __cfi_netlink_sendmsg+0x10/0x10
[   93.664664][ T1661]  sock_write_iter+0x445/0x490
[   93.664686][ T1661]  ? __cfi_sock_write_iter+0x10/0x10
[   93.664708][ T1661]  ? selinux_file_permission+0x8a4/0xb60
[   93.664741][ T1661]  do_iter_readv_writev+0x629/0x820
[   93.664775][ T1661]  ? vfs_iter_read+0x5e0/0x5e0
[   93.664810][ T1661]  ? bpf_lsm_file_permission+0xd/0x20
[   93.664832][ T1661]  vfs_writev+0x4a5/0xe90
[   93.664856][ T1661]  ? do_writev+0x2e0/0x2e0
[   93.664881][ T1661]  ? file_init_path+0x434/0x590
[   93.664908][ T1661]  do_writev+0x151/0x2e0
[   93.664930][ T1661]  ? vfs_readv+0xa00/0xa00
[   93.664953][ T1661]  ? __kasan_check_write+0x18/0x20
[   93.664982][ T1661]  ? fpregs_restore_userregs+0x11c/0x260
[   93.665013][ T1661]  __x64_sys_writev+0x81/0x90
[   93.665047][ T1661]  x64_sys_call+0x1fbb/0x2ee0
[   93.665070][ T1661]  do_syscall_64+0x57/0xf0
[   93.665092][ T1661]  ? clear_bhb_loop+0x50/0xa0
[   93.665123][ T1661]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   93.665151][ T1661] RIP: 0033:0x7f859b99f559
[   93.665170][ T1661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.665190][ T1661] RSP: 002b:00007f859c7d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   93.665214][ T1661] RAX: ffffffffffffffda RBX: 00007f859bc25fa0 RCX: 00007f859b99f559
[   93.665231][ T1661] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000006
[   93.665246][ T1661] RBP: 00007f859ba36b20 R08: 0000000000000000 R09: 0000000000000000
[   93.665260][ T1661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.665273][ T1661] R13: 00007f859bc26038 R14: 00007f859bc25fa0 R15: 00007ffebe051848
[   93.665292][ T1661]  </TASK>
[   94.271099][   T36] audit: type=1400 audit(1792745875.400:1458): avc:  denied  { map } for  pid=1663 comm="syz.0.408" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.322002][  T409] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[   94.461869][  T409] usb 3-1: device descriptor read/64, error -71
[   94.543185][    T9] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -5
[   94.552615][    T9] usb 4-1: USB disconnect, device number 24
[   94.701932][  T409] usb 3-1: device descriptor read/64, error -71
[   94.822104][  T409] usb usb3-port1: attempt power cycle
[   94.978049][   T36] audit: type=1400 audit(1792745876.110:1459): avc:  denied  { mounton } for  pid=1670 comm="syz.3.410" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.027384][ T1673] fuse: Bad value for 'group_id'
[   95.032459][ T1673] fuse: Bad value for 'group_id'
[   95.100542][   T36] audit: type=1400 audit(1792745876.230:1460): avc:  denied  { read } for  pid=1674 comm="syz.3.412" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   95.139292][   T36] audit: type=1400 audit(1792745876.230:1461): avc:  denied  { open } for  pid=1674 comm="syz.3.412" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   95.181905][   T36] audit: type=1400 audit(1792745876.240:1462): avc:  denied  { write } for  pid=1674 comm="syz.3.412" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   95.211895][  T409] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[   95.232418][  T409] usb 3-1: device descriptor read/8, error -71
[   95.372459][  T409] usb 3-1: device descriptor read/8, error -71
[   95.481908][   T45] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   95.541909][    T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   95.631893][   T45] usb 2-1: Using ep0 maxpacket: 16
[   95.638247][   T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.648403][   T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.658052][   T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   95.667163][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   95.675258][   T45] usb 2-1: SerialNumber: syz
[   95.682233][   T45] usb 2-1: 0:2 : does not exist
[   95.701876][    T9] usb 1-1: Using ep0 maxpacket: 16
[   95.708192][    T9] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[   95.716501][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.726735][    T9] usb 1-1: config 0 has no interface number 0
[   95.732956][    T9] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[   95.742837][    T9] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   95.752782][    T9] usb 1-1: config 0 interface 98 has no altsetting 0
[   95.761048][    T9] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[   95.770156][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.778192][    T9] usb 1-1: Product: syz
[   95.782417][    T9] usb 1-1: Manufacturer: syz
[   95.787064][    T9] usb 1-1: SerialNumber: syz
[   95.792594][    T9] usb 1-1: config 0 descriptor??
[   95.797930][ T1687] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   95.805182][ T1687] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   95.896263][   T52] Bluetooth: hci0: Frame reassembly failed (-84)
[   95.902618][ T1694] FAULT_INJECTION: forcing a failure.
[   95.902618][ T1694] name failslab, interval 1, probability 0, space 0, times 0
[   95.902677][ T1694] CPU: 1 UID: 0 PID: 1694 Comm: syz.2.418 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[   95.902710][ T1694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   95.902745][ T1694] Call Trace:
[   95.902774][ T1694]  <TASK>
[   95.902809][ T1694]  __dump_stack+0x21/0x30
[   95.902933][ T1694]  dump_stack_lvl+0x140/0x1c0
[   95.903025][ T1694]  ? __cfi_dump_stack_lvl+0x10/0x10
[   95.903136][ T1694]  dump_stack+0x19/0x20
[   95.903222][ T1694]  should_fail_ex+0x3c2/0x510
[   95.903282][ T1694]  ? security_prepare_creds+0x66/0x260
[   95.903373][ T1694]  should_failslab+0xac/0x100
[   95.903428][ T1694]  __kmalloc_noprof+0x69/0x510
[   95.903529][ T1694]  ? security_prepare_creds+0x66/0x260
[   95.903614][ T1694]  ? memset_orig+0x7b/0xb0
[   95.903655][ T1694]  security_prepare_creds+0x66/0x260
[   95.903735][ T1694]  prepare_creds+0x46d/0x6b0
[   95.903803][ T1694]  lookup_user_key+0x359/0x1230
[   95.903859][ T1694]  ? __cfi_lookup_user_key+0x10/0x10
[   95.903914][ T1694]  ? __cfi_lookup_user_key_possessed+0x10/0x10
[   95.903980][ T1694]  ? memdup_user+0xb1/0x170
[   95.904060][ T1694]  ? strndup_user+0x40/0xd0
[   95.904115][ T1694]  __se_sys_add_key+0x317/0x4b0
[   95.904234][ T1694]  ? __x64_sys_add_key+0xf0/0xf0
[   95.904335][ T1694]  ? __kasan_check_write+0x18/0x20
[   95.904400][ T1694]  ? fpregs_restore_userregs+0x11c/0x260
[   95.904474][ T1694]  __x64_sys_add_key+0xc3/0xf0
[   95.904549][ T1694]  x64_sys_call+0x195f/0x2ee0
[   95.904604][ T1694]  do_syscall_64+0x57/0xf0
[   95.904654][ T1694]  ? clear_bhb_loop+0x50/0xa0
[   95.904726][ T1694]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   95.904779][ T1694] RIP: 0033:0x7fdbc099f559
[   95.904813][ T1694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.904880][ T1694] RSP: 002b:00007fdbc1877028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   95.904936][ T1694] RAX: ffffffffffffffda RBX: 00007fdbc0c25fa0 RCX: 00007fdbc099f559
[   95.904974][ T1694] RDX: 0000000000000000 RSI: 0000200000019500 RDI: 00002000000193c0
[   95.905011][ T1694] RBP: 00007fdbc0a36b20 R08: fffffffffffffffe R09: 0000000000000000
[   95.905050][ T1694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.905080][ T1694] R13: 00007fdbc0c26038 R14: 00007fdbc0c25fa0 R15: 00007ffdd3020ee8
[   95.905165][ T1694]  </TASK>
[   96.077558][ T1697] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   96.155347][ T1697] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   96.408393][   T45] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[   96.418645][   T45] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[   96.429533][   T45] usb 2-1: USB disconnect, device number 28
[   96.439004][ T1698] udevd[1698]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   96.860692][ T1705] fuse: Bad value for 'user_id'
[   96.865765][ T1705] fuse: Bad value for 'user_id'
[   97.121892][   T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[   97.201883][  T409] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[   97.271885][   T10] usb 4-1: Using ep0 maxpacket: 8
[   97.278131][   T10] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.289482][   T10] usb 4-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.302543][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[   97.309178][   T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   97.318298][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.327113][   T10] usb 4-1: config 0 descriptor??
[   97.352689][  T409] usb 2-1: not running at top speed; connect to a high speed hub
[   97.361186][  T409] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.371367][  T409] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   97.380467][  T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.392669][  T409] usb 2-1: Found UVC 1.00 device <unnamed> (0000:0000)
[   97.594114][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   97.594148][   T36] audit: type=1400 audit(1792745878.730:1464): avc:  denied  { setattr } for  pid=1708 comm="syz.1.423" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   97.624508][  T409] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   97.634456][  T409] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[   97.643463][  T409] uvcvideo 2-1:1.1: Failed to initialize the device (-71).
[   97.652830][  T409] usb 2-1: USB disconnect, device number 29
[   97.735550][   T10] usbhid 4-1:0.0: can't add hid device: -71
[   97.741605][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   97.750347][   T10] usb 4-1: USB disconnect, device number 25
[   97.901940][ T1696] Bluetooth: hci0: command 0x1003 tx timeout
[   97.901957][   T55] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   97.932890][   T36] audit: type=1400 audit(1792745879.070:1465): avc:  denied  { map } for  pid=1712 comm="syz.2.424" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   98.147727][   T36] audit: type=1400 audit(1792745879.280:1466): avc:  denied  { listen } for  pid=1715 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.174338][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   98.203413][   T36] audit: type=1400 audit(1792745879.340:1467): avc:  denied  { accept } for  pid=1715 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.298774][ T1734] fuse: Bad value for 'user_id'
[   98.303846][ T1734] fuse: Bad value for 'user_id'
[   98.318047][    T9] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   98.333866][    T9] asix 1-1:0.98: probe with driver asix failed with error -71
[   98.348649][    T9] usb 1-1: USB disconnect, device number 22
[   98.455306][ T1745] overlayfs: upper fs does not support file handles, falling back to index=off.
[   98.464522][ T1745] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   98.490507][ T1747] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   98.498891][  T409] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[   98.651894][  T408] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[   98.653355][  T409] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   98.667684][  T409] usb 2-1: config 0 has no interface number 0
[   98.673825][  T409] usb 2-1: config 0 interface 41 has no altsetting 0
[   98.682004][  T409] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   98.691102][  T409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.699172][  T409] usb 2-1: Product: syz
[   98.703386][  T409] usb 2-1: Manufacturer: syz
[   98.708007][  T409] usb 2-1: SerialNumber: syz
[   98.713517][  T409] usb 2-1: config 0 descriptor??
[   98.725128][   T36] audit: type=1400 audit(1792745879.865:1468): avc:  denied  { mount } for  pid=1754 comm="syz.2.439" name="/" dev="configfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   98.745749][ T1756] rust_binder: 1754:1756 got transaction to invalid handle 1
[   98.748106][   T36] audit: type=1400 audit(1792745879.865:1469): avc:  denied  { search } for  pid=1754 comm="syz.2.439" name="/" dev="configfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   98.756559][ T1755] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   98.785670][ T1756] rust_binder: 1754:1756 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:958
[   98.786009][ T1755] rust_binder: Read failure Err(EFAULT) in pid:321
[   98.798033][  T677] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   98.804445][    T9] rust_binder: 1754: undelivered TRANSACTION_ERROR: 29201
[   98.821884][  T408] usb 4-1: Using ep0 maxpacket: 8
[   98.828449][  T408] usb 4-1: unable to get BOS descriptor or descriptor too short
[   98.837666][   T36] audit: type=1400 audit(1792745879.975:1470): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   98.859040][  T408] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   98.861468][ T1761] fuse: Bad value for 'user_id'
[   98.868204][  T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.873671][ T1761] fuse: Bad value for 'user_id'
[   98.882625][  T408] usb 4-1: Product: syz
[   98.890193][  T408] usb 4-1: Manufacturer: syz
[   98.895102][  T408] usb 4-1: SerialNumber: syz
[   98.912996][ T1763] 9pnet_fd: Insufficient options for proto=fd
[   98.919845][  T409] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   98.934155][  T409] usb 2-1: USB disconnect, device number 30
[   98.961869][  T677] usb 1-1: Using ep0 maxpacket: 8
[   98.967974][  T677] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.979288][  T677] usb 1-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   98.992348][  T677] usb 1-1: config 0 interface 0 has no altsetting 0
[   98.999007][  T677] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   99.008119][  T677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.016929][  T677] usb 1-1: config 0 descriptor??
[   99.105310][  T408] usb 4-1: selecting invalid altsetting 1
[   99.113688][  T408] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   99.123848][  T408] usb 4-1: USB disconnect, device number 26
[   99.133873][ T1698] udevd[1698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   99.231893][   T10] usb 3-1: device descriptor read/64, error -71
[   99.425235][  T677] usbhid 1-1:0.0: can't add hid device: -71
[   99.438451][  T677] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   99.452578][  T677] usb 1-1: USB disconnect, device number 23
[   99.454763][ T1765] /dev/nullb0: Can't lookup blockdev
[   99.471906][   T10] usb 3-1: device descriptor read/64, error -71
[   99.665730][ T1774] netlink: 164 bytes leftover after parsing attributes in process `syz.3.444'.
[   99.711906][  T827] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   99.719551][   T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   99.861924][  T827] usb 2-1: device descriptor read/64, error -71
[   99.868289][   T10] usb 3-1: device descriptor read/64, error -71
[  100.000553][ T1785] fuse: Bad value for 'user_id'
[  100.005547][ T1785] fuse: Bad value for 'user_id'
[  100.011916][  T677] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  100.036110][   T36] audit: type=1400 audit(1792745881.165:1471): avc:  denied  { read } for  pid=1786 comm="syz.0.450" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  100.065485][   T36] audit: type=1400 audit(1792745881.205:1472): avc:  denied  { accept } for  pid=1788 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  100.131880][  T827] usb 2-1: device descriptor read/64, error -71
[  100.138466][   T10] usb 3-1: device descriptor read/64, error -71
[  100.163094][  T677] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  100.174622][  T677] usb 4-1: config 0 interface 0 has no altsetting 0
[  100.181891][  T677] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  100.190975][  T677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.208357][  T677] usb 4-1: config 0 descriptor??
[  100.216817][ T1781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  100.256955][   T10] usb usb3-port1: attempt power cycle
[  100.381922][  T827] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  100.404141][   T36] audit: type=1400 audit(1792745881.545:1473): avc:  denied  { getopt } for  pid=1798 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  100.438365][  T677] usbhid 4-1:0.0: can't add hid device: -71
[  100.451897][  T677] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  100.471984][  T677] usb 4-1: USB disconnect, device number 27
[  100.482162][ T1802] netlink: 'syz.0.456': attribute type 4 has an invalid length.
[  100.511892][  T827] usb 2-1: device descriptor read/64, error -71
[  100.601883][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  100.623178][   T10] usb 3-1: device descriptor read/8, error -71
[  100.751930][  T827] usb 2-1: device descriptor read/64, error -71
[  100.759240][   T10] usb 3-1: device descriptor read/8, error -71
[  100.861981][  T827] usb usb2-port1: attempt power cycle
[  101.001879][   T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  101.022990][   T10] usb 3-1: device descriptor read/8, error -71
[  101.152989][   T10] usb 3-1: device descriptor read/8, error -71
[  101.181889][    T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  101.201888][  T827] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  101.222883][  T827] usb 2-1: device descriptor read/8, error -71
[  101.261959][   T10] usb usb3-port1: unable to enumerate USB device
[  101.331927][    T9] usb 4-1: Using ep0 maxpacket: 8
[  101.338148][    T9] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.349546][    T9] usb 4-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.362854][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  101.369596][    T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  101.379528][  T827] usb 2-1: device descriptor read/8, error -71
[  101.385820][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.394663][    T9] usb 4-1: config 0 descriptor??
[  101.641880][  T827] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  101.662961][  T827] usb 2-1: device descriptor read/8, error -71
[  101.792943][  T827] usb 2-1: device descriptor read/8, error -71
[  101.803880][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  101.809890][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  101.819077][    T9] usb 4-1: USB disconnect, device number 28
[  101.902068][  T827] usb usb2-port1: unable to enumerate USB device
[  101.931717][ T1811] fuse: Bad value for 'user_id'
[  101.936686][ T1811] fuse: Bad value for 'user_id'
[  102.321880][  T827] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  102.401868][  T677] usb 1-1: new low-speed USB device number 24 using dummy_hcd
[  102.481884][  T827] usb 3-1: Using ep0 maxpacket: 32
[  102.488523][  T827] usb 3-1: unable to get BOS descriptor or descriptor too short
[  102.497015][  T827] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7
[  102.509886][  T827] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  102.519003][  T827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.527042][  T827] usb 3-1: Product: syz
[  102.531226][  T827] usb 3-1: Manufacturer: syz
[  102.535849][  T827] usb 3-1: SerialNumber: syz
[  102.553727][  T677] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt
[  102.563710][  T677] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  102.576883][  T677] usb 1-1: config 1 interface 0 has no altsetting 0
[  102.585280][  T677] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  102.594393][  T677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.602440][  T677] usb 1-1: Product: щ
[  102.606556][  T677] usb 1-1: Manufacturer: 竃攭ℸ땆퐞ࡖ铼ᶨ瑽咧夔姟╆¸츹ឌ뫁庼ル俐闆쑪༙籄처
[  102.617991][  T677] usb 1-1: SerialNumber: 䖙㺤㲵₌눁샷虶楻⁼⩬픊奛Ꮅើ蚑揆ꏆ凒飁睉몼杨몦⎒㺘⧷엹캨껜첸䵕ㆡ픴ᴋ㸜ᐮ防흩ཨጦ㠰뤼闾荭ئ₝䆜垍媝ஏ䯻
[  102.638282][ T1815] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  102.645583][ T1815] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  102.845248][  T827] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  102.852380][  T827] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc
[  102.861542][  T827] usb 3-1: USB disconnect, device number 30
[  102.871855][  T408] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  102.883920][ T1698] udevd[1698]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  103.021858][  T408] usb 2-1: Using ep0 maxpacket: 32
[  103.027460][  T408] usb 2-1: too many configurations: 21, using maximum allowed: 8
[  103.036026][  T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.046173][  T408] usb 2-1: config 0 has no interfaces?
[  103.052476][  T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.062756][  T408] usb 2-1: config 0 has no interfaces?
[  103.069292][  T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.080420][  T677] usb 1-1: USB disconnect, device number 24
[  103.086425][  T408] usb 2-1: config 0 has no interfaces?
[  103.093518][  T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.105101][  T408] usb 2-1: config 0 has no interfaces?
[  103.111302][  T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.121430][  T408] usb 2-1: config 0 has no interfaces?
[  103.127606][  T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.137753][  T408] usb 2-1: config 0 has no interfaces?
[  103.144072][  T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.154204][  T408] usb 2-1: config 0 has no interfaces?
[  103.160487][  T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.170660][  T408] usb 2-1: config 0 has no interfaces?
[  103.176198][  T408] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  103.185664][  T408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.194855][  T408] usb 2-1: config 0 descriptor??
[  103.208390][   T36] audit: type=1400 audit(1792745884.345:1474): avc:  denied  { mounton } for  pid=1824 comm="syz.3.464" path="/125/file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  103.208410][ T1825] fuse: Bad value for 'fd'
[  103.407113][ T1822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.415884][ T1822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.427673][ T1835] fuse: Bad value for 'user_id'
[  103.432671][ T1835] fuse: Bad value for 'user_id'
[  103.433639][ T1822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.446936][ T1822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.461492][ T1822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.475214][ T1836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.482320][ T1822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.488340][ T1836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.493831][ T1838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.508255][ T1838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.517359][  T827] usb 2-1: USB disconnect, device number 35
[  103.621948][   T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  103.761866][  T677] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  103.774361][   T10] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40
[  103.783538][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.791539][   T10] usb 3-1: Product: syz
[  103.795789][   T10] usb 3-1: Manufacturer: syz
[  103.800400][   T10] usb 3-1: SerialNumber: syz
[  103.911849][  T677] usb 4-1: Using ep0 maxpacket: 8
[  103.918135][  T677] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.929249][  T677] usb 4-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.942284][  T677] usb 4-1: config 0 interface 0 has no altsetting 0
[  103.948934][  T677] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  103.958092][  T677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.966797][  T677] usb 4-1: config 0 descriptor??
[  104.007012][ T1833] netlink: 104 bytes leftover after parsing attributes in process `syz.2.467'.
[  104.022710][   T10] usb 3-1: MIDIStreaming interface descriptor not found
[  104.037118][   T10] usb 3-1: USB disconnect, device number 31
[  104.051455][ T1630] udevd[1630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  104.154693][   T36] audit: type=1400 audit(1792745885.295:1475): avc:  denied  { mount } for  pid=1853 comm="syz.1.472" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  104.380009][  T677] usbhid 4-1:0.0: can't add hid device: -71
[  104.386040][  T677] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  104.391951][  T827] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  104.397682][  T677] usb 4-1: USB disconnect, device number 29
[  104.466396][   T36] audit: type=1400 audit(1792745885.605:1476): avc:  denied  { create } for  pid=1865 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  104.571893][  T827] usb 2-1: Using ep0 maxpacket: 32
[  104.578348][  T827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  104.594843][  T827] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  104.607579][  T827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  104.617143][ T1868] fuse: Unknown parameter 'grou0x0000000000000005'
[  104.625144][  T827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  104.638279][  T827] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  104.648124][  T827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.656608][  T827] usb 2-1: Product: syz
[  104.661317][  T827] usb 2-1: Manufacturer: syz
[  104.666591][  T827] usb 2-1: SerialNumber: syz
[  104.678353][  T827] usb 2-1: config 0 descriptor??
[  104.684001][ T1856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  104.693382][  T827] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12
[  104.895832][  T408] usb 2-1: USB disconnect, device number 36
[  104.895886][    C1] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  104.934355][ T1878] netlink: 'syz.2.480': attribute type 15 has an invalid length.
[  104.946656][ T1878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'.
[  105.281850][  T677] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  105.301887][  T827] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  105.315969][ T1894] fuse: Unknown parameter 'grou0x0000000000000005'
[  105.432922][  T677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.443948][  T677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.453974][  T677] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  105.463064][  T677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.463870][  T827] usb 3-1: unable to get BOS descriptor or descriptor too short
[  105.479487][  T827] usb 3-1: not running at top speed; connect to a high speed hub
[  105.483276][  T677] usb 4-1: config 0 descriptor??
[  105.489134][  T827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.505555][   T36] audit: type=1400 audit(1792745886.645:1477): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  105.511893][  T827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  105.534706][  T827] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  105.548946][  T827] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  105.558373][  T827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  105.566748][  T827] usb 3-1: Product: syz
[  105.571010][  T827] usb 3-1: Manufacturer: syz
[  105.577607][  T827] usb 3-1: Found UVC 1.00 device syz (8086:0ad2)
[  105.591868][  T408] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  105.617886][   T36] audit: type=1400 audit(1792745886.755:1478): avc:  denied  { create } for  pid=1901 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  105.638690][   T36] audit: type=1400 audit(1792745886.765:1479): avc:  denied  { ioctl } for  pid=1901 comm="syz.1.489" path="socket:[22761]" dev="sockfs" ino=22761 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  105.742993][  T408] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  105.754101][  T408] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.763892][  T408] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.776732][  T408] usb 1-1: config 0 interface 0 has no altsetting 0
[  105.783732][  T408] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  105.792854][  T408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.802625][  T408] usb 1-1: config 0 descriptor??
[  105.809680][ T1892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.818532][ T1892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.828178][ T1892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.836845][ T1892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.911842][   T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  105.922332][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[  105.931505][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  105.940602][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 7 on unit 1: -71 (exp. 1).
[  105.949695][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[  105.958795][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1).
[  105.967966][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1).
[  105.977135][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1).
[  105.986309][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[  105.995584][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1).
[  106.004716][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 8 on unit 1: -71 (exp. 1).
[  106.013836][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[  106.023086][ T1905] can0: slcan on ptm0.
[  106.023540][  T827] usb 3-1: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1).
[  106.041740][  T827] usb 3-1: No streaming interface found for terminal 2.
[  106.044919][ T1906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.059180][ T1906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.067542][   T31] usb 2-1: Using ep0 maxpacket: 8
[  106.081186][  T827] usb 3-1: USB disconnect, device number 32
[  106.084830][   T31] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.103657][   T31] usb 2-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.118980][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[  106.125916][   T31] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  106.140270][ T1905] raw_sendmsg: syz.0.487 forgot to set AF_INET. Fix it!
[  106.153747][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.167417][   T31] usb 2-1: config 0 descriptor??
[  106.249638][ T1895] can0 (unregistered): slcan off ptm0.
[  106.255880][  T408] usbhid 1-1:0.0: can't add hid device: -71
[  106.264517][  T408] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  106.276378][  T408] usb 1-1: USB disconnect, device number 25
[  106.575580][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  106.583209][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  106.590699][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  106.598040][   T31] usbhid 2-1:0.0: can't add hid device: -32
[  106.604253][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  106.632558][   T31] usb 2-1: USB disconnect, device number 37
[  106.663211][  T677] usbhid 4-1:0.0: can't add hid device: -71
[  106.670366][  T677] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  106.689890][  T677] usb 4-1: USB disconnect, device number 30
[  106.701288][ T1945] netlink: 'syz.3.493': attribute type 12 has an invalid length.
[  106.773126][ T1946] syz.3.493: attempt to access beyond end of device
[  106.773126][ T1946] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  106.811865][ T1946] FAT-fs (loop3): unable to read boot sector
[  106.915154][ T1948] FAULT_INJECTION: forcing a failure.
[  106.915154][ T1948] name failslab, interval 1, probability 0, space 0, times 0
[  106.929658][ T1948] CPU: 1 UID: 0 PID: 1948 Comm: syz.0.494 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[  106.929747][ T1948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  106.929788][ T1948] Call Trace:
[  106.929808][ T1948]  <TASK>
[  106.929832][ T1948]  __dump_stack+0x21/0x30
[  106.929945][ T1948]  dump_stack_lvl+0x140/0x1c0
[  106.930044][ T1948]  ? __cfi_dump_stack_lvl+0x10/0x10
[  106.930150][ T1948]  dump_stack+0x19/0x20
[  106.930281][ T1948]  should_fail_ex+0x3c2/0x510
[  106.930351][ T1948]  should_failslab+0xac/0x100
[  106.930421][ T1948]  kmem_cache_alloc_noprof+0x42/0x410
[  106.930521][ T1948]  ? alloc_empty_file+0xbf/0x270
[  106.930602][ T1948]  ? _raw_spin_unlock+0x45/0x60
[  106.930677][ T1948]  alloc_empty_file+0xbf/0x270
[  106.930739][ T1948]  ? _raw_spin_unlock+0x45/0x60
[  106.930808][ T1948]  alloc_file_pseudo+0x142/0x1f0
[  106.930887][ T1948]  ? __cfi_alloc_file_pseudo+0x10/0x10
[  106.930963][ T1948]  ? kasan_save_alloc_info+0x3a/0x50
[  106.931053][ T1948]  ? __kasan_kmalloc+0x96/0xb0
[  106.931121][ T1948]  anon_inode_getfile+0xaa/0x190
[  106.931200][ T1948]  init_listener+0x13f/0x2b0
[  106.931278][ T1948]  do_seccomp+0x939/0xf20
[  106.931341][ T1948]  ? __se_sys_futex+0x13c/0x320
[  106.931413][ T1948]  ? prctl_set_seccomp+0x80/0x80
[  106.931475][ T1948]  ? xfd_validate_state+0x68/0x140
[  106.931581][ T1948]  ? __kasan_check_write+0x18/0x20
[  106.931671][ T1948]  ? fpregs_restore_userregs+0x11c/0x260
[  106.931756][ T1948]  __x64_sys_seccomp+0x7f/0x90
[  106.931792][ T1948]  x64_sys_call+0x249b/0x2ee0
[  106.931817][ T1948]  do_syscall_64+0x57/0xf0
[  106.931841][ T1948]  ? clear_bhb_loop+0x50/0xa0
[  106.931931][ T1948]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  106.932020][ T1948] RIP: 0033:0x7f859b99f559
[  106.932076][ T1948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.932135][ T1948] RSP: 002b:00007f859c7d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  106.932207][ T1948] RAX: ffffffffffffffda RBX: 00007f859bc25fa0 RCX: 00007f859b99f559
[  106.932278][ T1948] RDX: 0000200000000480 RSI: 0000000000000008 RDI: 0000000000000001
[  106.932317][ T1948] RBP: 00007f859ba36b20 R08: 0000000000000000 R09: 0000000000000000
[  106.932363][ T1948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.932407][ T1948] R13: 00007f859bc26038 R14: 00007f859bc25fa0 R15: 00007ffebe051848
[  106.932469][ T1948]  </TASK>
[  107.180074][ T1948] netlink: 140 bytes leftover after parsing attributes in process `syz.0.494'.
[  107.243774][   T36] audit: type=1400 audit(1792745888.325:1480): avc:  denied  { unmount } for  pid=1947 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  107.313126][   T12] bridge_slave_1: left allmulticast mode
[  107.318851][   T12] bridge_slave_1: left promiscuous mode
[  107.333947][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.343710][   T12] bridge_slave_0: left allmulticast mode
[  107.349396][   T12] bridge_slave_0: left promiscuous mode
[  107.356291][   T36] audit: type=1400 audit(1792745888.495:1481): avc:  denied  { ioctl } for  pid=1950 comm="syz.1.496" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  107.368032][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.492031][   T36] audit: type=1400 audit(1792745888.635:1482): avc:  denied  { mounton } for  pid=1958 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  107.513834][   T36] audit: type=1400 audit(1792745888.635:1483): avc:  denied  { create } for  pid=1958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  107.536581][   T12] veth1_macvtap: left promiscuous mode
[  107.542161][   T12] veth0_vlan: left promiscuous mode
[  107.563091][ T1960] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  107.577352][  T677] usb 2-1: new low-speed USB device number 38 using dummy_hcd
[  107.585017][ T1960] overlayfs: workdir and upperdir must be separate subtrees
[  107.671843][  T827] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  107.683012][ T1958] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.690124][ T1958] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.697530][ T1958] bridge_slave_0: entered allmulticast mode
[  107.704452][ T1958] bridge_slave_0: entered promiscuous mode
[  107.721192][ T1958] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.731275][ T1958] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.731949][  T677] usb 2-1: device descriptor read/64, error -71
[  107.742016][ T1958] bridge_slave_1: entered allmulticast mode
[  107.751373][ T1958] bridge_slave_1: entered promiscuous mode
[  107.812758][ T1958] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.819828][ T1958] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.827188][ T1958] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.834268][ T1958] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.854089][  T827] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[  107.868237][  T827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.868274][  T517] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.876527][  T827] usb 3-1: Product: syz
[  107.887751][  T517] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.891908][  T827] usb 3-1: Manufacturer: syz
[  107.899456][  T827] usb 3-1: SerialNumber: syz
[  107.914704][  T517] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.921922][  T517] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.929644][  T517] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.936756][  T517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.959535][ T1958] veth0_vlan: entered promiscuous mode
[  107.975576][ T1958] veth1_macvtap: entered promiscuous mode
[  108.002323][  T677] usb 2-1: device descriptor read/64, error -71
[  108.028325][ T1978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'.
[  108.037861][ T1978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'.
[  108.123269][  T827] usb 3-1: USB disconnect, device number 33
[  108.139697][ T1597] udevd[1597]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  108.251854][  T677] usb 2-1: new low-speed USB device number 39 using dummy_hcd
[  108.291861][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  108.381883][  T677] usb 2-1: device descriptor read/64, error -71
[  108.443295][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  108.451862][    T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  108.464447][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  108.473852][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.482150][    T9] usb 5-1: Product: syz
[  108.486361][    T9] usb 5-1: Manufacturer: syz
[  108.491000][    T9] usb 5-1: SerialNumber: syz
[  108.621922][  T677] usb 2-1: device descriptor read/64, error -71
[  108.634177][ T1988] fuse: Unknown parameter 'group_i0x0000000000000005'
[  108.656059][ T1990] FAULT_INJECTION: forcing a failure.
[  108.656059][ T1990] name failslab, interval 1, probability 0, space 0, times 0
[  108.668808][ T1990] CPU: 0 UID: 0 PID: 1990 Comm: syz.2.506 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[  108.668834][ T1990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  108.668846][ T1990] Call Trace:
[  108.668852][ T1990]  <TASK>
[  108.668859][ T1990]  __dump_stack+0x21/0x30
[  108.668889][ T1990]  dump_stack_lvl+0x140/0x1c0
[  108.668915][ T1990]  ? __cfi_dump_stack_lvl+0x10/0x10
[  108.668944][ T1990]  ? do_futex+0x32a/0x510
[  108.668962][ T1990]  dump_stack+0x19/0x20
[  108.669003][ T1990]  should_fail_ex+0x3c2/0x510
[  108.669028][ T1990]  should_failslab+0xac/0x100
[  108.669054][ T1990]  __kmalloc_cache_noprof+0x41/0x470
[  108.669078][ T1990]  ? fsnotify_alloc_group+0x9a/0x3a0
[  108.669102][ T1990]  fsnotify_alloc_group+0x9a/0x3a0
[  108.669125][ T1990]  do_inotify_init+0x5a/0x550
[  108.669141][ T1990]  __x64_sys_inotify_init1+0x3b/0x50
[  108.669156][ T1990]  x64_sys_call+0x2944/0x2ee0
[  108.669172][ T1990]  do_syscall_64+0x57/0xf0
[  108.669188][ T1990]  ? clear_bhb_loop+0x50/0xa0
[  108.669211][ T1990]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  108.669233][ T1990] RIP: 0033:0x7fdbc099f559
[  108.669246][ T1990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.669260][ T1990] RSP: 002b:00007fdbc1877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[  108.669277][ T1990] RAX: ffffffffffffffda RBX: 00007fdbc0c25fa0 RCX: 00007fdbc099f559
[  108.669290][ T1990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000800
[  108.669299][ T1990] RBP: 00007fdbc0a36b20 R08: 0000000000000000 R09: 0000000000000000
[  108.669310][ T1990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.669319][ T1990] R13: 00007fdbc0c26038 R14: 00007fdbc0c25fa0 R15: 00007ffdd3020ee8
[  108.669333][ T1990]  </TASK>
[  108.732450][  T677] usb usb2-port1: attempt power cycle
[  108.744865][    T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  109.081869][  T677] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  109.103225][  T677] usb 2-1: device descriptor read/8, error -71
[  109.232958][  T677] usb 2-1: device descriptor read/8, error -71
[  109.343812][ T1986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.362739][ T1986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.371290][    T9] usb 5-1: invalid uac2 rates
[  109.381987][    T9] usb 5-1: invalid uac2 rates
[  109.471829][  T677] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[  109.492900][  T677] usb 2-1: device descriptor read/8, error -71
[  109.623452][  T677] usb 2-1: device descriptor read/8, error -71
[  109.631068][    T9] usb 5-1: failed to enable PITCH for EP 0x82
[  109.651982][    T9] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  109.660739][    T9] usb 5-1: clock source 0 is not valid, cannot use
[  109.682003][    T9] usb 5-1: 2:1: cannot get freq (v2/v3): err -71
[  109.691751][    T9] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  109.717582][    T9] usb 5-1: USB disconnect, device number 2
[  109.733107][  T677] usb usb2-port1: unable to enumerate USB device
[  110.643339][ T2013] fuse: Unknown parameter 'group_i0x0000000000000005'
[  110.921585][  T677] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  111.121741][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  111.121760][   T36] audit: type=1400 audit(1792745892.265:1485): avc:  denied  { append } for  pid=2028 comm="syz.3.518" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  111.198242][   T36] audit: type=1400 audit(1792745892.335:1486): avc:  denied  { mounton } for  pid=2028 comm="syz.3.518" path="/140/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  111.430346][   T36] audit: type=1400 audit(1792745892.565:1487): avc:  denied  { remount } for  pid=2038 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  111.751471][    T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  111.921479][    T9] usb 2-1: Using ep0 maxpacket: 8
[  111.932476][    T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  111.950930][    T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  111.971103][    T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  111.991274][    T9] usb 2-1: config 250 has no interface number 0
[  111.997730][    T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  112.019528][    T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  112.040223][    T9] usb 2-1: config 250 interface 228 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  112.071427][    T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  112.091427][    T9] usb 2-1: config 250 interface 228 has no altsetting 0
[  112.099620][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  112.111407][    T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  112.119726][    T9] usb 2-1: Product: syz
[  112.141449][    T9] usb 2-1: SerialNumber: syz
[  112.148130][    T9] hub 2-1:250.228: bad descriptor, ignoring hub
[  112.161415][    T9] hub 2-1:250.228: probe with driver hub failed with error -5
[  112.348489][ T2061] fuse: Unknown parameter 'group_i0x0000000000000005'
[  112.371506][ T2041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.402051][ T2041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.641446][   T31] usb 2-1: USB disconnect, device number 42
[  113.332780][ T2083] netlink: 'syz.3.530': attribute type 25 has an invalid length.
[  113.601335][   T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  113.764145][   T31] usb 4-1: Using ep0 maxpacket: 16
[  113.770980][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[  113.788630][   T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.799340][   T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  113.808550][   T31] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  113.824563][   T31] usb 4-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice= 0.40
[  113.833984][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.842225][   T31] usb 4-1: Product: syz
[  113.846518][   T31] usb 4-1: Manufacturer: syz
[  113.851370][   T31] usb 4-1: SerialNumber: syz
[  113.883555][ T2089] fuse: Unknown parameter 'group_id0x0000000000000005'
[  114.062551][   T36] audit: type=1400 audit(1792745895.205:1488): avc:  denied  { module_load } for  pid=2084 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  114.082221][ T2085] Invalid ELF header type: 2 != 1
[  114.093460][   T31] usb 4-1: unit 5 not found!
[  114.108883][ T1698] udevd[1698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  114.124885][   T31] usb 4-1: USB disconnect, device number 31
[  114.351157][  T677] usb 5-1: device descriptor read/64, error -71
[  114.612030][  T677] usb 5-1: Using ep0 maxpacket: 32
[  114.638448][  T677] usb 5-1: unable to get BOS descriptor or descriptor too short
[  114.653475][  T677] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  114.671110][  T677] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  114.690081][  T677] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  114.700800][  T677] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  114.710007][  T677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.718114][  T677] usb 5-1: Product: syz
[  114.726400][  T677] usb 5-1: Manufacturer: syz
[  114.731219][  T677] usb 5-1: SerialNumber: syz
[  114.948586][  T677] usb 5-1: unit 0 not found!
[  114.955302][  T677] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  114.967210][  T677] usb 5-1: unit 0 not found!
[  114.984123][  T677] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  114.995778][ T1630] udevd[1630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  115.012295][  T677] usb 5-1: USB disconnect, device number 3
[  115.303907][ T2111] fuse: Unknown parameter 'group_id0x0000000000000005'
[  115.584848][  T677] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  115.673234][   T36] audit: type=1326 audit(1792745896.815:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.3.540" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84f9f559 code=0x7fc00000
[  115.701236][   T36] audit: type=1326 audit(1792745896.815:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.3.540" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fee84f9f559 code=0x7fc00000
[  115.730997][   T36] audit: type=1326 audit(1792745896.815:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.3.540" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84f9f559 code=0x7fc00000
[  115.761541][   T36] audit: type=1326 audit(1792745896.815:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.3.540" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84f9f559 code=0x7fc00000
[  115.787275][   T36] audit: type=1326 audit(1792745896.815:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.3.540" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84f9f559 code=0x7fc00000
[  115.812813][   T36] audit: type=1326 audit(1792745896.815:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2105 comm="syz.3.540" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee84f9f559 code=0x7fc00000
[  115.838622][  T677] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.851703][  T677] usb 2-1: config 0 interface 0 has no altsetting 0
[  115.858378][  T677] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  115.867731][  T677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.876631][  T677] usb 2-1: config 0 descriptor??
[  116.228487][ T2128] syz.3.548: vmalloc error: size 16384, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0
[  116.250920][ T2128] CPU: 1 UID: 0 PID: 2128 Comm: syz.3.548 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[  116.250956][ T2128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  116.250972][ T2128] Call Trace:
[  116.250980][ T2128]  <TASK>
[  116.250990][ T2128]  __dump_stack+0x21/0x30
[  116.251038][ T2128]  dump_stack_lvl+0x140/0x1c0
[  116.251073][ T2128]  ? __cfi_dump_stack_lvl+0x10/0x10
[  116.251109][ T2128]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  116.251137][ T2128]  dump_stack+0x19/0x20
[  116.251172][ T2128]  warn_alloc+0x1e7/0x2c0
[  116.251201][ T2128]  ? __cfi_warn_alloc+0x10/0x10
[  116.251228][ T2128]  ? __kmalloc_node_noprof+0x252/0x500
[  116.251264][ T2128]  ? __vmalloc_node_range_noprof+0x529/0x1300
[  116.251297][ T2128]  __vmalloc_node_range_noprof+0x100b/0x1300
[  116.251334][ T2128]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  116.251374][ T2128]  ? vsnprintf+0x19ef/0x1ad0
[  116.251398][ T2128]  ? kvm_dev_ioctl+0x12a/0x14c0
[  116.251424][ T2128]  __vmalloc_noprof+0x104/0x1d0
[  116.251454][ T2128]  ? kvm_dev_ioctl+0x12a/0x14c0
[  116.251478][ T2128]  ? alloc_fd+0x4c1/0x570
[  116.251514][ T2128]  ? __cfi___vmalloc_noprof+0x10/0x10
[  116.251545][ T2128]  kvm_dev_ioctl+0x12a/0x14c0
[  116.251569][ T2128]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[  116.251594][ T2128]  ? bpf_lsm_file_ioctl+0xd/0x20
[  116.251618][ T2128]  ? security_file_ioctl+0x3e/0x110
[  116.251661][ T2128]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[  116.251683][ T2128]  __se_sys_ioctl+0x126/0x1b0
[  116.251707][ T2128]  __x64_sys_ioctl+0x7f/0xa0
[  116.251727][ T2128]  x64_sys_call+0x1878/0x2ee0
[  116.251749][ T2128]  do_syscall_64+0x57/0xf0
[  116.251771][ T2128]  ? clear_bhb_loop+0x50/0xa0
[  116.251802][ T2128]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  116.251831][ T2128] RIP: 0033:0x7fee84f9f559
[  116.251850][ T2128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.251870][ T2128] RSP: 002b:00007fee85ddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.251896][ T2128] RAX: ffffffffffffffda RBX: 00007fee85225fa0 RCX: 00007fee84f9f559
[  116.251915][ T2128] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005
[  116.251930][ T2128] RBP: 00007fee85036b20 R08: 0000000000000000 R09: 0000000000000000
[  116.251945][ T2128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.251958][ T2128] R13: 00007fee85226038 R14: 00007fee85225fa0 R15: 00007ffdebdc71f8
[  116.251978][ T2128]  </TASK>
[  116.252055][ T2128] Mem-Info:
[  116.500187][ T2128] active_anon:39384 inactive_anon:0 isolated_anon:0
[  116.500187][ T2128]  active_file:11594 inactive_file:10571 isolated_file:0
[  116.500187][ T2128]  unevictable:0 dirty:73 writeback:0
[  116.500187][ T2128]  slab_reclaimable:4167 slab_unreclaimable:80046
[  116.500187][ T2128]  mapped:24494 shmem:33055 pagetables:825
[  116.500187][ T2128]  sec_pagetables:0 bounce:0
[  116.500187][ T2128]  kernel_misc_reclaimable:0
[  116.500187][ T2128]  free:1483694 free_pcp:1600 free_cma:0
[  116.545265][ T2128] Node 0 active_anon:157536kB inactive_anon:0kB active_file:46376kB inactive_file:42284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97976kB dirty:292kB writeback:0kB shmem:132220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4688kB pagetables:3300kB sec_pagetables:0kB all_unreclaimable? no
[  116.579196][ T2128] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955012kB mlocked:0kB bounce:0kB free_pcp:5040kB local_pcp:0kB free_cma:0kB
[  116.611793][ T2128] lowmem_reserve[]: 0 3920 3920
[  116.616883][ T2128] Normal free:2985516kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:157636kB inactive_anon:0kB active_file:46376kB inactive_file:42284kB unevictable:0kB writepending:292kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:1208kB local_pcp:952kB free_cma:0kB
[  116.627028][ T2113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.651122][ T2128] lowmem_reserve[]: 0 0 0
[  116.661682][ T2113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.672704][  T677] usbhid 2-1:0.0: can't add hid device: -71
[  116.678692][  T677] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  116.688038][  T677] usb 2-1: USB disconnect, device number 43
[  116.694043][ T2128] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB
[  116.715901][ T2128] Normal: 407*4kB (UME) 789*8kB (UME) 1024*16kB (UME) 312*32kB (UME) 242*64kB (UME) 62*128kB (UME) 60*256kB (UME) 30*512kB (UM) 6*1024kB (ME) 9*2048kB (ME) 701*4096kB (UM) = 2984324kB
[  116.734372][ T2128] 55229 total pagecache pages
[  116.739161][ T2128] 13 pages in swap cache
[  116.743470][ T2128] Free swap  = 124244kB
[  116.747782][ T2128] Total swap = 124996kB
[  116.752117][ T2128] 2097051 pages RAM
[  116.755952][ T2128] 0 pages HighMem/MovableOnly
[  116.760737][ T2128] 354588 pages reserved
[  116.765125][ T2128] 0 pages cma reserved
[  116.772082][ T2128] Memory allocations:
[  116.777312][ T2128]          0 B        0 init/main.c:1477 func:do_initcalls
[  116.784816][ T2128]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  116.793105][ T2128]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  116.801520][ T2128]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  116.809456][ T2128]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  116.817526][ T2128]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  116.826193][ T2128]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  116.834346][ T2128]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  116.842334][ T2128]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  116.850421][ T2128]          0 B        0 init/initramfs.c:101 func:find_link
[  117.193641][   T36] kauditd_printk_skb: 34 callbacks suppressed
[  117.193658][   T36] audit: type=1400 audit(1792745898.336:1529): avc:  denied  { getopt } for  pid=2137 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  117.244183][   T36] audit: type=1400 audit(1792745898.386:1530): avc:  denied  { ioctl } for  pid=2139 comm="syz.1.552" path="socket:[24251]" dev="sockfs" ino=24251 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  117.269848][ T2140] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  117.278904][ T2140] syz.1.552 uses obsolete (PF_INET,SOCK_PACKET)
[  117.285273][  T677] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  117.440767][  T677] usb 4-1: Using ep0 maxpacket: 16
[  117.448628][  T677] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[  117.458015][  T677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.466204][  T677] usb 4-1: Product: Ḁ
[  117.475369][  T677] usb 4-1: Manufacturer: 嶆츑⥎䀫驒〪춰똰՞꺔᳞᝵箖꤫缇Ể㦑᷌쨤綒ᾦ朹娝诼뛬㋩泿늳鼋矾텷걏㒲솿﯀䣀⬖⍭䳋䔶䆛⋪灾縡䈻磍鹍嫈ұ觅⠝듉
[  117.494489][  T677] usb 4-1: SerialNumber: з
[  118.420679][  T827] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  118.440693][   T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  118.590634][  T827] usb 5-1: Using ep0 maxpacket: 32
[  118.611332][  T827] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.611899][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.633352][   T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  118.642867][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.651130][  T827] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40
[  118.655062][   T31] usb 2-1: config 0 descriptor??
[  118.660210][  T827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.660238][  T827] usb 5-1: Product: syz
[  118.700623][  T827] usb 5-1: Manufacturer: syz
[  118.705282][  T827] usb 5-1: SerialNumber: syz
[  118.924685][ T2162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.933964][ T2162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.082150][ T2164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.091731][ T2164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.104482][   T31] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[  119.123850][   T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input15
[  119.199684][   T31] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  119.426945][   T36] audit: type=1400 audit(1792745900.566:1531): avc:  denied  { read } for  pid=2166 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  119.450668][  T827] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  119.475662][  T827] usb 5-1: USB disconnect, device number 4
[  119.482854][ T2168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.560'.
[  119.492503][ T2168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'.
[  119.682707][   T36] audit: type=1400 audit(1792745900.826:1532): avc:  denied  { remount } for  pid=2177 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  119.750018][   T31] usb 2-1: USB disconnect, device number 44
Stopping sshd: stopped /usr/sbin/sshd (pid 202)
OK
Stopping crond: stopped /usr/sbin/crond (pid 196)
OK
[  119.897563][  T677] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 149)
[  119.993997][  T677] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  120.015183][  T677] usb 4-1: USB disconnect, device number 32
[  120.043713][ T1698] udevd[1698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  120.060895][   T36] audit: type=1400 audit(1792745901.206:1533): avc:  denied  { read write } for  pid=2201 comm="syz.3.568" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  120.115903][   T36] audit: type=1400 audit(1792745901.226:1534): avc:  denied  { open } for  pid=2201 comm="syz.3.568" path="/160/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
Stopping network: [  120.235984][   T36] audit: type=1400 audit(1792745901.376:1535): avc:  denied  { unlink } for  pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1
[  120.285936][   T36] audit: type=1400 audit(1792745901.426:1536): avc:  denied  { read write } for  pid=2217 comm="ip" path="/dev/console" dev="rootfs" ino=93 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  120.329473][ T2220] overlayfs: overlapping lowerdir path
OK
Stopping iptables: [  120.440673][   T36] audit: type=1400 audit(1792745901.586:1537): avc:  denied  { read write } for  pid=2227 comm="iptables" path="/dev/console" dev="rootfs" ino=93 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
OK
Stopping system [  120.480620][   T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd
message bus: [  120.500435][   T36] audit: type=1400 audit(1792745901.586:1538): avc:  denied  { search } for  pid=2227 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
done
[  120.650431][   T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  120.701493][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  120.724367][   T10] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40
[  120.733536][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.768721][   T10] usb 4-1: Product: syz
[  120.780372][   T10] usb 4-1: Manufacturer: syz
[  120.785040][   T10] usb 4-1: SerialNumber: syz
Stopping klogd: [  120.821421][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.832204][   T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.849108][   T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  120.860436][   T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.876119][   T31] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  120.885357][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.893445][   T31] usb 2-1: Product: syz
[  120.897759][   T31] usb 2-1: Manufacturer: syz
[  120.902455][   T31] usb 2-1: SerialNumber: syz
OK
[  120.919406][   T31] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  120.930850][   T31] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  120.941766][   T31] usbserial_generic 2-1:1.0: generic converter detected
Stopping acpid: [  120.958409][   T31] usb 2-1: generic converter now attached to ttyUSB0
[  121.004462][   T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  121.011577][   T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  121.020954][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  121.031558][   T10] usb 4-1: USB disconnect, device number 33
[  121.567756][ T2260] netlink: 'syz.3.578': attribute type 25 has an invalid length.
[  121.601330][ T2263] netlink: 'syz.3.579': attribute type 15 has an invalid length.
[  121.611147][ T2263] device-mapper: table: 252:3: too large device
[  121.617445][ T2263] device-mapper: ioctl: error adding target to table
[  121.624631][ T2263] netlink: 'syz.3.579': attribute type 15 has an invalid length.
[  121.780265][   T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  121.798854][ T2276] FAULT_INJECTION: forcing a failure.
[  121.798854][ T2276] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  121.827523][ T2276] CPU: 1 UID: 0 PID: 2276 Comm: syz.3.583 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[  121.827570][ T2276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  121.827587][ T2276] Call Trace:
[  121.827595][ T2276]  <TASK>
[  121.827605][ T2276]  __dump_stack+0x21/0x30
[  121.827663][ T2276]  dump_stack_lvl+0x140/0x1c0
[  121.827700][ T2276]  ? __cfi_dump_stack_lvl+0x10/0x10
[  121.827736][ T2276]  ? __kasan_check_write+0x18/0x20
[  121.827770][ T2276]  dump_stack+0x19/0x20
[  121.827805][ T2276]  should_fail_ex+0x3c2/0x510
[  121.827828][ T2276]  should_fail_alloc_page+0xec/0x110
[  121.827853][ T2276]  __alloc_pages_noprof+0x1c0/0x7e0
[  121.827882][ T2276]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  121.827912][ T2276]  ? folio_add_lru+0x116/0x400
[  121.827936][ T2276]  ? __cfi_folio_add_lru+0x10/0x10
[  121.827961][ T2276]  __folio_alloc_noprof+0x14/0x80
[  121.827990][ T2276]  shmem_alloc_and_add_folio+0x45f/0x10b0
[  121.828017][ T2276]  ? shmem_replace_folio+0x9b0/0x9b0
[  121.828040][ T2276]  ? shmem_huge_global_enabled+0x2da/0x360
[  121.828075][ T2276]  ? shmem_allowable_huge_orders+0x405/0x430
[  121.828113][ T2276]  shmem_get_folio_gfp+0x5cd/0x12e0
[  121.828152][ T2276]  ? shmem_get_folio+0xc0/0xc0
[  121.828186][ T2276]  ? __cfi_filemap_map_pages+0x10/0x10
[  121.828210][ T2276]  ? folio_unlock+0x137/0x1b0
[  121.828246][ T2276]  shmem_fault+0x17d/0x350
[  121.828269][ T2276]  do_pte_missing+0x364c/0x4440
[  121.828298][ T2276]  ? pte_marker_clear+0x1b0/0x1b0
[  121.828322][ T2276]  ? cgroup_rstat_updated+0x144/0x800
[  121.828366][ T2276]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[  121.828400][ T2276]  ? __cfi___thp_vma_allowable_orders+0x10/0x10
[  121.828429][ T2276]  ? pte_offset_map_rw_nolock+0x236/0x2c0
[  121.828464][ T2276]  handle_mm_fault+0x1189/0x1ba0
[  121.828486][ T2276]  ? __kasan_check_write+0x18/0x20
[  121.828522][ T2276]  ? __cfi_handle_mm_fault+0x10/0x10
[  121.828566][ T2276]  ? follow_page_pte+0x4b2/0xba0
[  121.828596][ T2276]  ? gup_must_unshare+0x1e0/0x1e0
[  121.828624][ T2276]  ? vma_is_secretmem+0x11/0x50
[  121.828653][ T2276]  ? check_vma_flags+0x337/0x3a0
[  121.828682][ T2276]  __get_user_pages+0x114b/0x22d0
[  121.828713][ T2276]  ? populate_vma_page_range+0x220/0x220
OK
[  121.828738][ T2276]  ? down_read+0x7f/0xe0
[  121.828771][ T2276]  ? __cfi_down_read+0x10/0x10
[  121.828804][ T2276]  ? __cfi_do_mmap+0x10/0x10
[  121.828836][ T2276]  __mm_populate+0x300/0x440
[  121.828863][ T2276]  vm_mmap_pgoff+0x426/0x4b0
[  121.828898][ T2276]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  121.828931][ T2276]  ? xfd_validate_state+0x68/0x140
[  121.828970][ T2276]  ksys_mmap_pgoff+0xfa/0x1e0
[  121.829004][ T2276]  ? __kasan_check_write+0x18/0x20
[  121.829039][ T2276]  __x64_sys_mmap+0x121/0x140
[  121.829064][ T2276]  x64_sys_call+0x13bf/0x2ee0
[  121.829090][ T2276]  do_syscall_64+0x57/0xf0
[  121.829115][ T2276]  ? clear_bhb_loop+0x50/0xa0
[  121.829149][ T2276]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  121.829181][ T2276] RIP: 0033:0x7fee84f9f559
[  121.829216][ T2276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.829239][ T2276] RSP: 002b:00007fee85dbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  121.829276][ T2276] RAX: ffffffffffffffda RBX: 00007fee85226090 RCX: 00007fee84f9f559
[  121.829296][ T2276] RDX: 0000000002000003 RSI: 0000000000b36000 RDI: 0000200000000000
[  121.829314][ T2276] RBP: 00007fee85036b20 R08: ffffffffffffffff R09: 0000000000000000
[  121.829340][ T2276] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  121.829357][ T2276] R13: 00007fee85226128 R14: 00007fee85226090 R15: 00007ffdebdc71f8
[  121.829380][ T2276]  </TASK>
Stopping syslogd: stopped /sbin/syslogd (pid 93)
OK
[  122.283505][   T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  122.296510][   T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  122.306409][   T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  122.317638][   T31] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  122.336570][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.346767][ T2259] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  122.354504][ T2259] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  122.364023][   T31] pl2303 5-1:1.0: pl2303 converter detected
[  122.394317][   T31] usb 5-1: pl2303 converter now attached to ttyUSB1
umount: can't remount debugfs read-only
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  122.569645][   T36] kauditd_printk_skb: 30 callbacks suppressed
[  122.569663][   T36] audit: type=1400 audit(1792745903.706:1569): avc:  denied  { write } for  pid=287 comm="syz-executor" path="pipe:[1293]" dev="pipefs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  122.578642][    T9] usb 5-1: USB disconnect, device number 5
Connection to 10.128.0.114 closed by remote host.
[  122.701278][    T9] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1
[  122.720344][    T9] pl2303 5-1:1.0: device disconnected
[  122.830361][   T31] usb 2-1: USB disconnect, device number 45
[  122.838928][   T31] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  122.849929][   T31] usbserial_generic 2-1:1.0: device disconnected
[  122.921756][  T517] bridge_slave_1: left allmulticast mode
[  122.927486][  T517] bridge_slave_1: left promiscuous mode
[  122.933162][  T517] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.940896][  T517] bridge_slave_0: left allmulticast mode
[  122.946575][  T517] bridge_slave_0: left promiscuous mode
[  122.952305][  T517] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.960325][  T517] bridge_slave_1: left allmulticast mode
[  122.966019][  T517] bridge_slave_1: left promiscuous mode
[  122.971670][  T517] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.979387][  T517] bridge_slave_0: left allmulticast mode
[  123.000079][  T517] bridge_slave_0: left promiscuous mode
[  123.005739][  T517] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.244907][  T517] veth1_macvtap: left promiscuous mode
[  123.250453][  T517] veth0_vlan: left promiscuous mode
[  123.255995][  T517] veth1_macvtap: left promiscuous mode
[  123.261591][  T517] veth0_vlan: left promiscuous mode
[  123.581448][  T517] ------------[ cut here ]------------
[  123.586956][  T517] WARNING: CPU: 1 PID: 517 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140
[  123.596975][  T517] Modules linked in:
[  123.600903][  T517] CPU: 1 UID: 0 PID: 517 Comm: kworker/u8:6 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[  123.612595][  T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  123.622739][  T517] Workqueue: netns cleanup_net
[  123.627515][  T517] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140
[  123.633554][  T517] Code: e8 71 e3 d4 fc 4b 83 3c 3e 00 75 19 e8 65 5b 7b fc 49 81 ff f8 07 00 00 74 1b e8 57 5b 7b fc 49 83 c7 08 eb c9 e8 4c 5b 7b fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
[  123.653267][  T517] RSP: 0018:ffffc9000e34fb90 EFLAGS: 00010293
[  123.659362][  T517] RAX: ffffffff850df3b4 RBX: ffff88812f26c700 RCX: ffff8881186713c0
Sent SIGKILL to[  123.667402][  T517] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103bec0b8
 all processes[  123.676863][  T517] RBP: ffffc9000e34fbb0 R08: ffffffff8854fac7 R09: 1ffffffff10a9f58

[  123.686080][  T517] R10: dffffc0000000000 R11: fffffbfff10a9f59 R12: dffffc0000000000
[  123.694325][  T517] R13: dffffc0000000000 R14: ffff888103bec000 R15: 00000000000000b8
[  123.702428][  T517] FS:  0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000
[  123.711471][  T517] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.718083][  T517] CR2: 00005590ab061af8 CR3: 0000000007caa000 CR4: 00000000003526b0
[  123.726111][  T517] DR0: 000004000002002c DR1: fffeffffff7fff00 DR2: 0000000080000002
[  123.734132][  T517] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  123.742188][  T517] Call Trace:
[  123.745503][  T517]  <TASK>
[  123.748456][  T517]  cleanup_net+0x6ba/0xc90
[  123.752922][  T517]  ? __cfi_cleanup_net+0x10/0x10
[  123.757871][  T517]  ? kick_pool+0xb9/0x540
[  123.762250][  T517]  process_scheduled_works+0x7f7/0x1060
[  123.767811][  T517]  worker_thread+0xc99/0x13f0
[  123.772534][  T517]  kthread+0x2c7/0x360
[  123.776614][  T517]  ? __cfi_worker_thread+0x10/0x10
[  123.781767][  T517]  ? __cfi_kthread+0x10/0x10
[  123.786369][  T517]  ret_from_fork+0x67/0xa0
[  123.790819][  T517]  ? __cfi_kthread+0x10/0x10
[  123.795424][  T517]  ret_from_fork_asm+0x1a/0x30
[  123.800231][  T517]  </TASK>
[  123.803270][  T517] ---[ end trace 0000000000000000 ]---
[  123.809046][  T517] ------------[ cut here ]------------
Requesting syst[  123.814804][  T517] WARNING: CPU: 0 PID: 517 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140
em poweroff
[  123.826315][  T517] Modules linked in:
[  123.831147][  T517] CPU: 0 UID: 0 PID: 517 Comm: kworker/u8:6 Tainted: G        W          syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[  123.844278][  T517] Tainted: [W]=WARN
[  123.848079][  T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  123.858179][  T517] Workqueue: netns cleanup_net
[  123.862988][  T517] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140
[  123.869078][  T517] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 10 5b 7b fc 49 81 ff f8 07 00 00 74 1b e8 02 5b 7b fc 49 83 c7 08 eb c5 e8 f7 5a 7b fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 e7 5a 7b fc 5b 41 5c 41 5e 41
[  123.888757][  T517] RSP: 0018:ffffc9000e34fb90 EFLAGS: 00010293
[  123.894845][  T517] RAX: ffffffff850df409 RBX: ffff888103bec800 RCX: ffff8881186713c0
[  123.902893][  T517] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103bec808
[  123.910916][  T517] RBP: ffffc9000e34fbb0 R08: ffffffff8854fac7 R09: 1ffffffff10a9f58
[  123.918899][  T517] R10: dffffc0000000000 R11: fffffbfff10a9f59 R12: dffffc0000000000
[  123.926926][  T517] R13: dffffc0000000000 R14: ffff888103bec000 R15: 0000000000000008
[  123.934946][  T517] FS:  0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
[  123.943930][  T517] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.950566][  T517] CR2: 00007f28ee5f84c0 CR3: 000000010b3e2000 CR4: 00000000003526b0
[  123.958580][  T517] Call Trace:
[  123.961904][  T517]  <TASK>
[  123.964848][  T517]  cleanup_net+0x6ba/0xc90
[  123.969263][  T517]  ? __cfi_cleanup_net+0x10/0x10
[  123.974238][  T517]  ? kick_pool+0xb9/0x540
[  123.978612][  T517]  process_scheduled_works+0x7f7/0x1060
[  123.984207][  T517]  worker_thread+0xc99/0x13f0
[  123.988896][  T517]  kthread+0x2c7/0x360
[  123.993010][  T517]  ? __cfi_worker_thread+0x10/0x10
[  123.998154][  T517]  ? __cfi_kthread+0x10/0x10
[  124.002792][  T517]  ret_from_fork+0x67/0xa0
[  124.007228][  T517]  ? __cfi_kthread+0x10/0x10
[  124.011874][  T517]  ret_from_fork_asm+0x1a/0x30
[  124.016653][  T517]  </TASK>
[  124.019683][  T517] ---[ end trace 0000000000000000 ]---
[  124.039996][  T517] ------------[ cut here ]------------
[  124.045478][  T517] WARNING: CPU: 0 PID: 517 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310
[  124.055091][  T517] Modules linked in:
[  124.058999][  T517] CPU: 0 UID: 0 PID: 517 Comm: kworker/u8:6 Tainted: G        W          syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923
[  124.072161][  T517] Tainted: [W]=WARN
[  124.075972][  T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  124.086067][  T517] Workqueue: netns cleanup_net
[  124.090885][  T517] RIP: 0010:xfrm_state_fini+0x2be/0x310
[  124.096450][  T517] Code: 3c 20 00 74 08 48 89 df e8 3f b8 ef fc 48 8b 3b e8 57 a8 da fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 c6 b7 00 cc e8 22 30 96 fc <0f> 0b e9 b0 fd ff ff e8 16 30 96 fc 0f 0b e9 18 fe ff ff e8 0a 30
[  124.116106][  T517] RSP: 0018:ffffc9000e34fb70 EFLAGS: 00010293
[  124.122242][  T517] RAX: ffffffff84f31ede RBX: ffff88812f26c700 RCX: ffff8881186713c0
[  124.130281][  T517] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881186713c0
[  124.138295][  T517] RBP: ffffc9000e34fb98 R08: ffffffff8854fac7 R09: 1ffffffff10a9f58
[  124.146337][  T517] R10: dffffc0000000000 R11: fffffbfff10a9f59 R12: 1ffffffff10a9cac
[  124.154350][  T517] R13: dffffc0000000000 R14: ffff88812f26d300 R15: dffffc0000000000
[  124.162392][  T517] FS:  0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
[  124.171394][  T517] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.177987][  T517] CR2: 00007f28ee5f84c0 CR3: 000000010b3e2000 CR4: 00000000003526b0
[  124.186021][  T517] Call Trace:
[  124.189307][  T517]  <TASK>
[  124.192272][  T517]  xfrm_net_exit+0x31/0x80
[  124.196714][  T517]  cleanup_net+0x6ba/0xc90
[  124.201195][  T517]  ? __cfi_cleanup_net+0x10/0x10
[  124.206234][  T517]  ? kick_pool+0xb9/0x540
[  124.210606][  T517]  process_scheduled_works+0x7f7/0x1060
[  124.216183][  T517]  worker_thread+0xc99/0x13f0
[  124.220922][  T517]  kthread+0x2c7/0x360
[  124.225015][  T517]  ? __cfi_worker_thread+0x10/0x10
[  124.230253][  T517]  ? __cfi_kthread+0x10/0x10
[  124.234860][  T517]  ret_from_fork+0x67/0xa0
[  124.239276][  T517]  ? __cfi_kthread+0x10/0x10
[  124.243909][  T517]  ret_from_fork_asm+0x1a/0x30
[  124.248691][  T517]  </TASK>
[  124.251739][  T517] ---[ end trace 0000000000000000 ]---
[  124.292011][  T517] bridge_slave_1: left allmulticast mode
[  124.297682][  T517] bridge_slave_1: left promiscuous mode
[  124.303313][  T517] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.310985][  T517] bridge_slave_0: left allmulticast mode
[  124.316651][  T517] bridge_slave_0: left promiscuous mode
[  124.322447][  T517] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.330279][  T517] bridge_slave_1: left allmulticast mode
[  124.335919][  T517] bridge_slave_1: left promiscuous mode
[  124.341589][  T517] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.349083][  T517] bridge_slave_0: left allmulticast mode
[  124.354800][  T517] bridge_slave_0: left promiscuous mode
[  124.360418][  T517] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.524009][  T517] veth1_macvtap: left promiscuous mode
[  124.529630][  T517] veth0_vlan: left promiscuous mode
[  124.535189][  T517] veth1_macvtap: left promiscuous mode
[  124.540758][  T517] veth0_vlan: left promiscuous mode
[  124.816645][ T2284] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  124.823429][ T2284] ACPI: PM: Preparing to enter system sleep state S5
[  124.830491][ T2284] kvm: exiting hardware virtualization
[  124.835995][ T2284] reboot: Power down
serialport: VM disconnected.