last executing test programs:

34.472023594s ago: executing program 2 (id=391):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8001}, 0x4)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f00006ba000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000670000/0x2000)=nil, 0x2000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
read(r4, &(0x7f0000000180)=""/145, 0x91)
r5 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0)
ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000bcb000/0x4000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x4000})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000, 0x2})
poll(&(0x7f0000000080), 0x0, 0x8)
r6 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r6, &(0x7f0000000280)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r7, 0x2275, 0x0)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000340)={r5, r6, 0x20006})
socket$nl_audit(0x10, 0x3, 0x9)

33.516706247s ago: executing program 2 (id=395):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000040)="b931de82"})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4)
r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000021f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0))

33.516053917s ago: executing program 2 (id=396):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000690015"], 0x18}], 0x1}, 0x8000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f0, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='\x85\xb1\xccBpy\xc1s\xf9\\\x98\xce\xa4g\xd2\xd4\xdei\xa1\x8e\x9c\xe4\x82\x05\xf3u\fep\x8eL\xd7u@6\xefq\xa1\x9a\xfb\x1f$\x19\xd3\xa5R\xcc\x84\xdc\xcfJ\t\x04z\xc9\x89D\xad3\xfd\x9ei\xb5\x11\x8a\xc9_\xc3|\xb2^g\xe5Gt\x1e\xc6\x81\xb4\xdd\xd7V\"\x92\xbci\x97#\xfc\xd1\x8d\x8b\xe7\xda4\xb7e\b\xcc\xf7\'&\xe0\xa2\xb6\xb3\xfc\xd5[\xd9\xf6\xb7\xa8\xa7\xaf\\\xc1\x89]K\x9c\xc9IM\x02\a3\xcf\x897`j_FtM\x19\xdb\xf2U%L\x11\fx\xd2/*\xa9\xbd2\xd6\x9c+\x91~oF\xa4\xd3\xab\x9d\xa3\xd3\xa5\xe4&>fI*K\x12^k\xd3\xf6}\x11\x92eA9\a\xba\xaf\xabyq\xc8\xd5P\x9e-S\xdf\x1d\xb1\xc2\x18\xa9\xfd\x9b\x86hn\xf2\x14s\x1b\x038S\xafh\x95\x0f\xcd\xeb\xce\xd5\x91\xa8\'\x11c\xca\xc5\x00\xcdW0\xbeh\x12s\xa1C!\xe1\xc2\xeb\xa1\x82^\x11\xf8\x1d\x9d\xc5\xe5|C\x94\xcb\xb5\xbc\xa3\xd2\xdc\xec\xc0\x00}P\xd9\x90\x8a\xc5\xef\xce\xfd\xbf]\x7f\x8e\xffT=M|A\x1b\x83d\xf6\xca\xf4\xd6\xfdJ\xf8\r9\xc0\xc4\xfb\x92\x80\xfd\xbd\x00\xa9e\x00\xb7\xde\xd2\t\xe5O\xa5=\xf0;\xe1\xc0\xf2i_\x92pA')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000001001, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}})
r5 = openat$incfs(r4, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40106726, &(0x7f00000000c0))

33.490705638s ago: executing program 2 (id=397):
r0 = epoll_create1(0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x88)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x580, 0x54)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080))
r3 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000000)={0x2002})
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
epoll_create1(0x0) (async)
creat(&(0x7f00000000c0)='./file0\x00', 0x88) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x580, 0x54) (async)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)) (async)
dup2(r1, r1) (async)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) (async)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000000)={0x2002}) (async)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async)

33.442248269s ago: executing program 2 (id=398):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
close(0x3)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
write(r1, &(0x7f0000000000)='3', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x0) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
close(0x3) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async)
write(r1, &(0x7f0000000000)='3', 0x4e) (async)

33.157009456s ago: executing program 2 (id=402):
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001340)=<r1=>0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001380)=<r2=>0x0)
r3 = getgid()
read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
statx(0xffffffffffffffff, &(0x7f0000003400)='./file0\x00', 0x1000, 0x100, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000035c0)={0x0, <r9=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003640)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000003740)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003780)={0x0, 0x0, <r11=>0x0}, &(0x7f00000037c0)=0xc)
r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000003800)={0x0, 0x2b20, 0x0, 0x1, 0x26e}, &(0x7f0000003880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaeba, 0x800, 0x3, 0x48}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b1d, 0x4000, 0x0, 0x146}, <r13=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x55d5, 0x10, 0x2, 0x48}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd288, 0x8, 0x2, 0x93}}], 0x4, &(0x7f0000004b00)={0x2e, 0x8, 0x0, <r14=>0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, '\x00', {0x4, 0xeef, 0x0, &(0x7f0000003b00)=@buf_4k="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"}}, &(0x7f0000004b80))
r15 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000004bc0), 0x2)
r16 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000004c00)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r17 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
r18 = syz_clone3(&(0x7f0000004e40)={0x80010000, &(0x7f0000004c40), &(0x7f0000004c80), &(0x7f0000004cc0), {0x2e}, &(0x7f0000004d00)=""/143, 0x8f, &(0x7f0000004dc0)=""/10, &(0x7f0000004e00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004ec0)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0, <r20=>0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000004fc0)=0xe8)
stat(&(0x7f0000005000)='./file0\x00', &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0})
sendmsg$netlink(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)={0x1228, 0x2f, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0x7, 0x108, 0x0, 0x0, @str=')[\x00'}, @generic="01ed915b4369600a336f485484c2deff8f50d028e2e8af67f4238c8a1a3b1db7dfd5dcfcead637ff009cac22c30c6922a7eaba821c3460597f371e74155e1037f4581548a12e5a52a889d845d1e40552cfc48c0abfba32d60e2a387b3a568c40fb95d7852513220b84b11f2635f9eff2592180f0c18ca39d1be3e36158f47d84f581faf9965d274dd009ff37d0dd57b475e1ae1eb79371f51948cfd209819534e6a7c97e9688740e8296af679ac4cde912424b6e542028aa8a84827357c7e09993b7e46a477b1c8faedaf0c48ecff45bf3210fc90d5200ed5c1f262147fde9b5b0288b0d0dcf501bb5026d56695ea14fd7dd38442f52c9c240e044794fe1", @nested={0x14, 0xf6, 0x0, 0x1, [@typed={0xc, 0x79, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x6b}]}, @generic="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", @generic="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"]}, 0x1228}], 0x1, &(0x7f00000050c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r12, r13, r15, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r20, r21}}}], 0xc8, 0x40000c0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ptrace$setregs(0xd, r1, 0x5, &(0x7f0000005200)="3e1c9f4f73323d8e6a")
ioctl$EXT4_IOC_SWAP_BOOT(r14, 0x6611)
sendmsg$nl_xfrm(r0, &(0x7f0000005380)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005340)={&(0x7f0000005280)=@report={0x8c, 0x20, 0x400, 0x70bd27, 0x25dfdbfc, {0xff, {@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x5, 0x4e23, 0x3, 0xa, 0xa0, 0x40, 0x2f, r19, r6}}, [@iptfs_reorder_window={0x6, 0x25, 0x7f7e}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e23, @in=@private=0xa010102}}, @extra_flags={0x8, 0x18, 0x1e7}, @offload={0xc, 0x1c, {r19, 0x1}}, @iptfs_max_qsize={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000053c0)={0x50, 0x0, r4, {0x7, 0x2d, 0x6, 0xe6d2516d3a9dd792, 0x9, 0x40, 0x1, 0xff, 0x0, 0x0, 0x20, 0x122}}, 0x50)
socketpair(0x8, 0x3, 0x3, &(0x7f0000005440)={<r22=>0xffffffffffffffff, <r23=>0xffffffffffffffff})
getsockopt$inet6_buf(r22, 0x29, 0x8d, &(0x7f0000005480)=""/200, &(0x7f0000005580)=0xc8)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000055c0), &(0x7f0000005600)=0xc)
timer_create(0x7, &(0x7f0000005640)={0x0, 0x28, 0x4, @tid=r18}, &(0x7f0000005680))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r23, 0x8983, &(0x7f00000056c0))

18.156826104s ago: executing program 32 (id=402):
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001340)=<r1=>0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001380)=<r2=>0x0)
r3 = getgid()
read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
statx(0xffffffffffffffff, &(0x7f0000003400)='./file0\x00', 0x1000, 0x100, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000035c0)={0x0, <r9=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003640)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000003740)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003780)={0x0, 0x0, <r11=>0x0}, &(0x7f00000037c0)=0xc)
r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000003800)={0x0, 0x2b20, 0x0, 0x1, 0x26e}, &(0x7f0000003880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaeba, 0x800, 0x3, 0x48}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b1d, 0x4000, 0x0, 0x146}, <r13=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x55d5, 0x10, 0x2, 0x48}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd288, 0x8, 0x2, 0x93}}], 0x4, &(0x7f0000004b00)={0x2e, 0x8, 0x0, <r14=>0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, '\x00', {0x4, 0xeef, 0x0, &(0x7f0000003b00)=@buf_4k="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"}}, &(0x7f0000004b80))
r15 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000004bc0), 0x2)
r16 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000004c00)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r17 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
r18 = syz_clone3(&(0x7f0000004e40)={0x80010000, &(0x7f0000004c40), &(0x7f0000004c80), &(0x7f0000004cc0), {0x2e}, &(0x7f0000004d00)=""/143, 0x8f, &(0x7f0000004dc0)=""/10, &(0x7f0000004e00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004ec0)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0, <r20=>0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000004fc0)=0xe8)
stat(&(0x7f0000005000)='./file0\x00', &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0})
sendmsg$netlink(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)={0x1228, 0x2f, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0x7, 0x108, 0x0, 0x0, @str=')[\x00'}, @generic="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", @nested={0x14, 0xf6, 0x0, 0x1, [@typed={0xc, 0x79, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x6b}]}, @generic="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", @generic="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"]}, 0x1228}], 0x1, &(0x7f00000050c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r12, r13, r15, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r20, r21}}}], 0xc8, 0x40000c0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ptrace$setregs(0xd, r1, 0x5, &(0x7f0000005200)="3e1c9f4f73323d8e6a")
ioctl$EXT4_IOC_SWAP_BOOT(r14, 0x6611)
sendmsg$nl_xfrm(r0, &(0x7f0000005380)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005340)={&(0x7f0000005280)=@report={0x8c, 0x20, 0x400, 0x70bd27, 0x25dfdbfc, {0xff, {@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x5, 0x4e23, 0x3, 0xa, 0xa0, 0x40, 0x2f, r19, r6}}, [@iptfs_reorder_window={0x6, 0x25, 0x7f7e}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e23, @in=@private=0xa010102}}, @extra_flags={0x8, 0x18, 0x1e7}, @offload={0xc, 0x1c, {r19, 0x1}}, @iptfs_max_qsize={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000053c0)={0x50, 0x0, r4, {0x7, 0x2d, 0x6, 0xe6d2516d3a9dd792, 0x9, 0x40, 0x1, 0xff, 0x0, 0x0, 0x20, 0x122}}, 0x50)
socketpair(0x8, 0x3, 0x3, &(0x7f0000005440)={<r22=>0xffffffffffffffff, <r23=>0xffffffffffffffff})
getsockopt$inet6_buf(r22, 0x29, 0x8d, &(0x7f0000005480)=""/200, &(0x7f0000005580)=0xc8)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000055c0), &(0x7f0000005600)=0xc)
timer_create(0x7, &(0x7f0000005640)={0x0, 0x28, 0x4, @tid=r18}, &(0x7f0000005680))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r23, 0x8983, &(0x7f00000056c0))

2.384915001s ago: executing program 0 (id=699):
syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a240c000000000000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a050503000000000000000000000009040100000102300009040101010102300009050109200003"], 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000074ca00000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000044c00120073657169762863636d28626c6f77666973682d61736d2929d38b7b7131770d87560000000000000000000000000000000000c6b62fe90e0000000000000000000000000040000000"], 0x148}}, 0x0)

1.998547681s ago: executing program 3 (id=700):
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000010280)={0x3}) (async)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r1, 0x0, 0x1000009, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=<r5=>r2, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r4, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x81006, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYRESDEC=r5, @ANYRESOCT=r0, @ANYRES8=r2, @ANYRES32=r0])
vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)="4b8026b09c8974aeadee5c5db4a27a372e9a67b9a3c77aed8895f019d5772a5e382dbefbac0d2ca9638750b66c02959c3b9295c7a52c4d68ea8d1a10b188fac0c8719ab2856a577efd73d684668c87cec9d2e8b146a3ccdfec8ca7b06db7b58e6eaa731d8eef6445ffd4ebe20cba4a226d57bc8f4efacf66aee43db9dd25248fe388b50d790d89260e34a396e9b6fa390e6484f9e1856ec9fded112fdbc6a64fd07a7ef199294caea4022f13ace10ca99c3cf7a8ffdfbbc582c3a3e3cfc205779176ee186e989edeabd4eefc79892e4452959f87a65b8d810e", 0xd9}, {&(0x7f0000000500)="2a0ab42a5ebc996c7983e54beefb60c98a228d5670998e36c5dc980b0225d1d43a8dcf23f866246e31012ff2b6bea63008325d9060634e7e69cfdd2e37b737f8886e7c555c1c5c6231a29627dbc2c32a4f4fd95b4a7be645d65e667c3e85dde8adef39263e9fdad945391fbda82407a6038fe24595f2857a673f3ae318e0d41e912834833e5a8ec85db57878ac4ea29824cd933b7d9c5a12ff5f6297b97d00912eaad57cafa6ba83961a426acfdfbcc2b4450a0000000000000000000000000000fda1d26a22b69325c1788559b29630bc6e69453f0e24eaef96602383933309496652a5b1d62ce3644fb9a2a5b3c39153bc272de8682284510522cca00e5ed4c20bcaf9fe12e999333d9ba1aa00d5f6ca9a4bd61d505670cf21f3d9a449af9a1b33d2b2245ee659909f099e9e590ab33d942c06ed6d76c745797dec9f785e6ecc25b2ad537f16633ab75caf28c6cc9db33ab641df84af751209e1a00e8941f78a3c7d92b15e06a231e27db1764bf8e70997912ffdc00cfc17cd6cce0017269b000000000000", 0xffffffffffffffce}, {&(0x7f0000000380)="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", 0x15e}], 0x3, 0x0) (async)
write(r3, &(0x7f0000000240)="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", 0xfd)

1.940345452s ago: executing program 3 (id=701):
unshare(0x20000) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) (async)
r0 = socket$inet6(0xa, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000005980)=[{{&(0x7f0000000080)={0xa, 0x4c20, 0x0, @remote, 0xc}, 0x1c, 0x0}}], 0x1, 0x6b38deb179a6f499) (async)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000600)={0x32, 0x2, 0x0, 0x1, 0x0, [@loopback]}, 0x18) (async)
unshare(0x22020400) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x8, 0xa5, 0x0, 0x1, [@generic="fbb10e83"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x49044}, 0x5)

1.159547001s ago: executing program 0 (id=706):
r0 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @empty}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x5, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.072712974s ago: executing program 3 (id=708):
syz_usb_connect(0x0, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30b69055b000000000109025201012000000009044000000e010000082406"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f00000000c0)=0x18)
r2 = openat(r0, &(0x7f0000000180)='./proc\x00', 0x202, 0x1b0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1)
r4 = dup2(r3, r3)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x32, 0x7fff7ffc}]})
r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r6, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)

967.763696ms ago: executing program 1 (id=710):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ffffffe000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000)=0x100000001, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f0000000100)={0x8, 0x29})
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007d00), 0x36}, 0x4000091)

948.553446ms ago: executing program 1 (id=711):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4)
shutdown(r2, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000182000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000080000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x78, 0x18, &(0x7f00000004c0)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x24}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

947.482937ms ago: executing program 0 (id=712):
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x12) (async)
syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[], 0x0) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1ff, 0x0, 0x4, 0x1, 0x1, <r2=>r0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r3)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
sched_getparam(r2, &(0x7f00000000c0))

878.081459ms ago: executing program 1 (id=713):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
read$usbmon(r1, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sync_file_range(r0, 0x8, 0x3, 0x6)
creat(0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000', @ANYRESDEC=0x0])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r3, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000")
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="e00300001800290200000000000000000a000000ca031780", @ANYRES64=r2], 0x3e0}}, 0x20010000)

877.831989ms ago: executing program 1 (id=714):
syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a240c000000000000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a050503000000000000000000000009040100000102300009040101010102300009050109200003"], 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000074ca00000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000044c00120073657169762863636d28626c6f77666973682d61736d2929d38b7b7131770d87560000000000000000000000000000000000c6b62fe90e0000000000000000000000000040000000"], 0x148}}, 0x0)

798.96859ms ago: executing program 4 (id=717):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000001001, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}})
r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, 0x0)

740.715482ms ago: executing program 4 (id=718):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[], 0x17c}}, 0x24000001)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf, 0x0, &(0x7f0000000040)="b931de8212801eb96e66b0a2bc84d0"})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4)
r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000003c0)=0x4, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x2, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
syz_genetlink_get_family_id$fou(&(0x7f0000000300), r3)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='ext4\x00', 0x124900a, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0xc000)
ioctl$KVM_SET_MSRS(r10, 0x4140aecd, &(0x7f0000000100))
write(r7, &(0x7f0000000000)='3', 0x4e)
r11 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r12, 0x4068aea3, &(0x7f0000000700)={0x8f, 0x0, 0xb})
syz_kvm_setup_syzos_vm$x86(r12, &(0x7f0000c00000/0x400000)=nil)

683.511903ms ago: executing program 4 (id=719):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x50, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "91440e38b5bc37ccc8cc2a2d55bb42bc"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x13}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK={0x14, 0xfe, "7cc1f5df8dcc3d79973f70c94bcc6dda"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4c000)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0xa4, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x79, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x4, 0x99, 0x4}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0x9b4, 0x81, 0x0, 0x6}, 0x8, 0x7, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

667.473254ms ago: executing program 4 (id=720):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = epoll_create1(0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)=ANY=[@ANYBLOB="62616c2c00000000000000000000cb6059751a59782da5b68d47f58c3b1338fec774b8"])
fcntl$dupfd(r1, 0x0, r2)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x0, &(0x7f0000000000)=[0x7], 0x96, 0x4, 0x1})

572.778916ms ago: executing program 4 (id=721):
r0 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @empty}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x5, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

524.195097ms ago: executing program 4 (id=722):
personality(0x5400004)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
syz_usb_connect(0x3, 0xa1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401410101020000072401010101000b2402010202100180bb00090501090002"], 0x0)

364.139991ms ago: executing program 1 (id=723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x278, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xfe, 0x2a, [@dsss={0x3, 0x1, 0x2}, @preq={0x82, 0x25, {{0x1, 0x0, 0x1}, 0x4, 0x9, 0xfffffff7, @broadcast, 0x5, @void, 0xb0, 0xf4, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x1ff}]}}, @challenge={0x10, 0x1, 0x18}, @perr={0x84, 0x75, {0x3, 0x7, [{{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x20}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x15}, {{0x0, 0x1}, @device_b, 0x7f, @value=@device_b, 0x40}, {{}, @device_b, 0xffff, @void, 0xe}, {{}, @device_b, 0x7, @void, 0x40}, {{0x0, 0x1}, @device_a, 0xdd83, @value=@device_b, 0x1d}, {{}, @device_b, 0x4, @void, 0xb}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @challenge={0x10, 0x1, 0x6}, @random_vendor={0xdd, 0x4e, "4dc4b96a0c3e092b915f926690f8a10be0a5fb6d15af125927b13d45428ab487391a6edf501093e156ba1c914827af75d53912cc89c2832a790cca6c9d65948e62e1180a051f5b8377d702881122"}]}, @NL80211_ATTR_IE={0xd2, 0x2a, [@ibss={0x6, 0x2, 0x8}, @cf={0x4, 0x6, {0xb6, 0x4, 0x9, 0xa}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x7, 0x1}}, @random={0xe, 0x9e, "6c59b08b28fab123666cab2a7ecac7b6a03271c9813c89ec26ff19226908a049e21018e6e93b4d36389c378816aa89e70cbaa09f114e4e951f4aad13fbb8e9eb2e39443510f08c60a2d524fc02567131f268e6f2a6c702a026ce9a1e5717c4e3dc09a47fa56fcd5b6fd8a24d4dfc21871a819096fc5dfefaa726992888852c0d6ddf1e1437a72029cd7ab1ebc65981333fd003e8793e3cf20ea2eccdee28"}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0xac, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x0, 0x2}}]}, @NL80211_ATTR_IE={0x2c, 0x2a, [@ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0x5, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x408, 0x5, 0x7}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @ibss={0x6, 0x2, 0xc5f}, @rann={0x7e, 0x15, {{0x1, 0x5b}, 0x1, 0x8, @broadcast, 0xafb, 0x9, 0x5}}]}, @NL80211_ATTR_IE={0x3b, 0x2a, [@supported_rates={0x1, 0x5, [{0x2}, {0x2, 0x1}, {0xb}, {0x1}, {0x18}]}, @gcr_ga={0xbd, 0x6, @broadcast}, @peer_mgmt={0x75, 0x8, {0x1, 0x8, @val=0x7, @val=0x2c, @void}}, @supported_rates, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x5, 0x0, {0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0xf, 0x9}}]}]}, 0x278}}, 0x20010000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x18000a00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x278, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xfe, 0x2a, [@dsss={0x3, 0x1, 0x2}, @preq={0x82, 0x25, {{0x1, 0x0, 0x1}, 0x4, 0x9, 0xfffffff7, @broadcast, 0x5, @void, 0xb0, 0xf4, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x1ff}]}}, @challenge={0x10, 0x1, 0x18}, @perr={0x84, 0x75, {0x3, 0x7, [{{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x20}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x15}, {{0x0, 0x1}, @device_b, 0x7f, @value=@device_b, 0x40}, {{}, @device_b, 0xffff, @void, 0xe}, {{}, @device_b, 0x7, @void, 0x40}, {{0x0, 0x1}, @device_a, 0xdd83, @value=@device_b, 0x1d}, {{}, @device_b, 0x4, @void, 0xb}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @challenge={0x10, 0x1, 0x6}, @random_vendor={0xdd, 0x4e, "4dc4b96a0c3e092b915f926690f8a10be0a5fb6d15af125927b13d45428ab487391a6edf501093e156ba1c914827af75d53912cc89c2832a790cca6c9d65948e62e1180a051f5b8377d702881122"}]}, @NL80211_ATTR_IE={0xd2, 0x2a, [@ibss={0x6, 0x2, 0x8}, @cf={0x4, 0x6, {0xb6, 0x4, 0x9, 0xa}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x7, 0x1}}, @random={0xe, 0x9e, "6c59b08b28fab123666cab2a7ecac7b6a03271c9813c89ec26ff19226908a049e21018e6e93b4d36389c378816aa89e70cbaa09f114e4e951f4aad13fbb8e9eb2e39443510f08c60a2d524fc02567131f268e6f2a6c702a026ce9a1e5717c4e3dc09a47fa56fcd5b6fd8a24d4dfc21871a819096fc5dfefaa726992888852c0d6ddf1e1437a72029cd7ab1ebc65981333fd003e8793e3cf20ea2eccdee28"}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0xac, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x0, 0x2}}]}, @NL80211_ATTR_IE={0x2c, 0x2a, [@ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0x5, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x408, 0x5, 0x7}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @ibss={0x6, 0x2, 0xc5f}, @rann={0x7e, 0x15, {{0x1, 0x5b}, 0x1, 0x8, @broadcast, 0xafb, 0x9, 0x5}}]}, @NL80211_ATTR_IE={0x3b, 0x2a, [@supported_rates={0x1, 0x5, [{0x2}, {0x2, 0x1}, {0xb}, {0x1}, {0x18}]}, @gcr_ga={0xbd, 0x6, @broadcast}, @peer_mgmt={0x75, 0x8, {0x1, 0x8, @val=0x7, @val=0x2c, @void}}, @supported_rates, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x5, 0x0, {0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0xf, 0x9}}]}]}, 0x278}}, 0x20010000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x18000a00, 0x0) (async)

312.806022ms ago: executing program 3 (id=724):
symlink(0x0, 0x0)
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000002200), 0x1000, &(0x7f00000022c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=r0])
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040))
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=ANY=[@ANYBLOB="f0000000100001000100000000000000000000000000000000000000000000000000000000000000000000a1461f06537999a600000000000a0000000000000013aee80f1a3069eba77786ec1b3f879a5c1c068cac5776a1c2d2ecbf4310a60b82204c492b32b0bf994d7410151e7400d5095d99d1382f5f482a38b8be49", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000012343200000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff3400000a00"/168], 0xf0}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020)

312.686573ms ago: executing program 1 (id=725):
setns(0xc9, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4)

312.226582ms ago: executing program 3 (id=726):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0x10000a}})
setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x11, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000540)={0x3, 0x0, [{0xd, 0x0, 0xf, 0x72, 0xffff, 0x8, 0xda4}, {0x2, 0x2, 0x4, 0x535a, 0x2, 0x800, 0xbf}, {0x80000001, 0x8, 0x0, 0x8, 0x2, 0x7fff, 0xd3}]})
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000580))
setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "9223314de1e2dd6a", "c5250086405610cad00f00264e282cf7", "98ce9727", "9bee650a8d622ebb"}, 0x28)
r7 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r8 = dup(r7)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, &(0x7f0000000100)=""/136, &(0x7f00000001c0)=0x88)
write$binfmt_elf64(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4607ff78a03e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001ed0400380001000d00b406000403000000810000000301000000000000f50f0000000000000500000000000000030000"], 0x178)
execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

300.117213ms ago: executing program 0 (id=727):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000001001, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}})
r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0))

285.024483ms ago: executing program 0 (id=728):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000001001, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}})
r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) (fail_nth: 1)

188.530205ms ago: executing program 0 (id=729):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_pts(0xffffffffffffffff, 0xb8100)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
iopl(0x3)
iopl(0x0)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x20}, 0x1, 0x0, 0x0, 0x24008880}, 0x40050)
ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000040)={0x5, 0x101})
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d80)=""/4125, 0x101d}, {&(0x7f0000004200)=""/4113, 0x1011}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000340)=""/186, 0xba}], 0x4}, 0x2000)
iopl(0x0)

0s ago: executing program 3 (id=730):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000001001, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}})
r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x83)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x8, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0xa6)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x10004, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
close(0x3)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

pacity change from 0 to 7
[   59.039890][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[   59.049078][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.057180][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[   59.066381][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.074416][ T1152]  loop7: unable to read partition table
[   59.080224][ T1152] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[   59.093976][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3
[   59.105973][ T1152] input: syz0 as /devices/virtual/input/input13
[   59.112371][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.112426][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.129684][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.137105][  T422] usb 2-1: device descriptor read/64, error -71
[   59.138885][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.153937][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.163159][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.174513][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.183715][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.193373][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.202584][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.248082][  T422] usb usb2-port1: attempt power cycle
[   59.405768][   T36] audit: type=1400 audit(1788545587.514:308): avc:  denied  { append } for  pid=1164 comm="syz.0.189" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   59.428594][   T36] audit: type=1400 audit(1788545587.514:309): avc:  denied  { write } for  pid=1164 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   59.430821][ T1165] syz.0.189 (1165): /proc/1164/oom_adj is deprecated, please use /proc/1164/oom_score_adj instead.
[   59.459026][   T36] audit: type=1400 audit(1788545587.524:310): avc:  denied  { read append } for  pid=1164 comm="syz.0.189" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   59.483335][   T36] audit: type=1400 audit(1788545587.524:311): avc:  denied  { open } for  pid=1164 comm="syz.0.189" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   59.587953][  T422] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[   59.597776][  T447] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   59.634121][  T422] usb 2-1: device descriptor read/8, error -71
[   59.653671][ T1179] loop7: detected capacity change from 0 to 7
[   59.660388][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.669588][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.684612][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.693817][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.701718][ T1179]  loop7: unable to read partition table
[   59.708660][ T1179] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[   59.720955][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   59.737435][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.751464][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.759475][  T447] usb 3-1: Using ep0 maxpacket: 8
[   59.766302][ T1179] input: syz0 as /devices/virtual/input/input14
[   59.774287][  T447] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.779657][  T422] usb 2-1: device descriptor read/8, error -71
[   59.786341][  T447] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   59.802948][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.816814][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.832427][ T1194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.843589][  T447] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   59.845424][ T1185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.861994][ T1194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.870488][ T1185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.879154][  T447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.887212][  T447] usb 3-1: Product: syz
[   59.891479][  T447] usb 3-1: Manufacturer: syz
[   59.897938][  T447] usb 3-1: SerialNumber: syz
[   60.037994][  T422] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   60.059529][  T422] usb 2-1: device descriptor read/8, error -71
[   60.111280][ T1162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'.
[   60.122998][  T447] usb 3-1: unit 4 not found!
[   60.133892][  T447] usb 3-1: USB disconnect, device number 11
[   60.141901][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   60.159103][   T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[   60.189232][  T422] usb 2-1: device descriptor read/8, error -71
[   60.298108][  T422] usb usb2-port1: unable to enumerate USB device
[   60.318770][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[   60.328915][   T10] usb 1-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40
[   60.338014][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.346021][   T10] usb 1-1: Product: у
[   60.350887][   T10] usb 1-1: Manufacturer: 䨿鯜ꇱऍ㤽㳽䧀煮垎݁␎풗븙टĠ虻翂撺凕亄岼썧ᥧٲ齐ࣁ且鈰쾶㖈꽛㑪턤ꋓ쓪笑ᲂﮙⳑ鄞ⱄ擅滪첡暑쭦▤逛⁼瘀炍傋）聆鞺盺
[   60.412202][ T1199] rust_binder: 1198:1199 got transaction to invalid handle 3
[   60.419711][ T1199] rust_binder: 1198:1199 transaction call to 0:0 failed ENOENT, code 0 size 0-0
[   60.429289][ T1199] rust_binder: 1198: undelivered TRANSACTION_ERROR: 29201
[   60.437205][ T1199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.445867][ T1199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.577326][ T1197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.585985][ T1197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.595277][ T1197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.603910][ T1197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.615772][   T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   60.622812][   T10] usb 1-1: 2:1 : unknown format tag 0x1 is detected.  processed as MPEG.
[   60.631432][   T10] usb 1-1: found format II with max.bitrate = 0, frame size=12
[   60.639403][   T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   60.648237][   T10] usb 1-1: unit 3 not found!
[   60.658075][ T1201] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[   60.658115][   T10] usb 1-1: USB disconnect, device number 19
[   60.658435][ T1201] rust_binder: Read failure Err(EAGAIN) in pid:152
[   60.672917][   T31] rust_binder: 1200: undelivered TRANSACTION_ERROR: 29189
[   60.689640][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   60.719174][ T1204] FAULT_INJECTION: forcing a failure.
[   60.719174][ T1204] name failslab, interval 1, probability 0, space 0, times 0
[   60.731886][ T1204] CPU: 0 UID: 0 PID: 1204 Comm: syz.2.199 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72
[   60.731920][ T1204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   60.731938][ T1204] Call Trace:
[   60.731943][ T1204]  <TASK>
[   60.731949][ T1204]  __dump_stack+0x21/0x30
[   60.731978][ T1204]  dump_stack_lvl+0x140/0x1c0
[   60.732006][ T1204]  ? __cfi_dump_stack_lvl+0x10/0x10
[   60.732030][ T1204]  dump_stack+0x19/0x20
[   60.732052][ T1204]  should_fail_ex+0x3c2/0x510
[   60.732071][ T1204]  should_failslab+0xac/0x100
[   60.732092][ T1204]  kmem_cache_alloc_noprof+0x42/0x410
[   60.732109][ T1204]  ? sk_prot_alloc+0x69/0x3a0
[   60.732129][ T1204]  ? __kasan_slab_alloc+0x73/0x90
[   60.732149][ T1204]  sk_prot_alloc+0x69/0x3a0
[   60.732169][ T1204]  sk_alloc+0x40/0x590
[   60.732186][ T1204]  ? bpf_lsm_inode_alloc_security+0xd/0x20
[   60.732206][ T1204]  unix_create1+0xb7/0x760
[   60.732223][ T1204]  ? inode_init_always_gfp+0x76e/0x9e0
[   60.732244][ T1204]  unix_create+0x15a/0x220
[   60.732261][ T1204]  __sock_create+0x3a5/0x810
[   60.732279][ T1204]  __sys_socketpair+0x1aa/0x5c0
[   60.732297][ T1204]  __x64_sys_socketpair+0x9f/0xc0
[   60.732315][ T1204]  x64_sys_call+0x2081/0x2ee0
[   60.732330][ T1204]  do_syscall_64+0x57/0xf0
[   60.732354][ T1204]  ? clear_bhb_loop+0x50/0xa0
[   60.732373][ T1204]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   60.732391][ T1204] RIP: 0033:0x7ffa1479e159
[   60.732405][ T1204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.732418][ T1204] RSP: 002b:00007ffa131f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[   60.732435][ T1204] RAX: ffffffffffffffda RBX: 00007ffa14a26090 RCX: 00007ffa1479e159
[   60.732448][ T1204] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[   60.732457][ T1204] RBP: 00007ffa14835024 R08: 0000000000000000 R09: 0000000000000000
[   60.732475][ T1204] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[   60.732485][ T1204] R13: 00007ffa14a26128 R14: 00007ffa14a26090 R15: 00007ffe19510ad8
[   60.732500][ T1204]  </TASK>
[   60.933416][ T1208] netlink: 56 bytes leftover after parsing attributes in process `syz.1.201'.
[   61.125870][ T1221] loop7: detected capacity change from 0 to 7
[   61.133367][ T1221]  loop7: unable to read partition table
[   61.139228][ T1221] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[   61.161713][ T1223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'.
[   61.257994][   T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   61.270459][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   61.270477][   T36] audit: type=1400 audit(1788545589.384:314): avc:  denied  { ioctl } for  pid=1224 comm="syz.2.206" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x7b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   61.320171][   T36] audit: type=1400 audit(1788545589.434:315): avc:  denied  { mount } for  pid=1229 comm="syz.2.208" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   61.344489][   T36] audit: type=1400 audit(1788545589.454:316): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   61.422401][   T31] usb 2-1: config 97 has an invalid interface number: 152 but max is 0
[   61.430798][   T31] usb 2-1: config 97 has no interface number 0
[   61.437109][   T31] usb 2-1: config 97 interface 152 has no altsetting 0
[   61.447985][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   61.457284][   T31] usb 2-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=e0.7b
[   61.464626][   T36] audit: type=1400 audit(1788545589.564:317): avc:  denied  { read write } for  pid=1236 comm="syz.2.210" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   61.466941][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.491060][   T36] audit: type=1400 audit(1788545589.564:318): avc:  denied  { open } for  pid=1236 comm="syz.2.210" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   61.500266][   T31] usb 2-1: Product: 엯뭮ﶮ㰽ᠩ갃夜锕䤾掓⻆螭⋈摑ͭ㶷蜾룒閡㘪ケ䲵ẫ艭迹돪䡀鸴毁蛜
[   61.535780][   T31] usb 2-1: Manufacturer: ꐸ䫕䄴ࡨ쥀嘧汮ﴰꦦ鳢蛯ꂚ僆樻㹴掖￩ꞿ㫩Ⴐ䆎쟫ѭ띬⦀黁拧晾棊荏쁳玚쀕த瓨㢻凑峰ሲ뜌⫅똮㿯龺ힳẟ꠮䃗듑똛䴜䯗擅㏘６ԛ봒侙碒␓
[   61.558671][   T31] usb 2-1: SerialNumber: syz
[   61.607994][   T10] usb 1-1: Using ep0 maxpacket: 8
[   61.615090][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.625261][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   61.635785][   T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   61.644954][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.653074][   T10] usb 1-1: Product: syz
[   61.657290][   T10] usb 1-1: Manufacturer: syz
[   61.661965][   T10] usb 1-1: SerialNumber: syz
[   61.687998][ T1241] netlink: 'syz.2.211': attribute type 2 has an invalid length.
[   61.697092][   T36] audit: type=1400 audit(1788545589.804:319): avc:  denied  { setopt } for  pid=1242 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.777189][ T1243] kvm: MONITOR instruction emulated as NOP!
[   61.790615][   T31] usb 2-1: USB disconnect, device number 11
[   61.802174][ T1253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'.
[   61.830464][   T36] audit: type=1400 audit(1788545589.944:320): avc:  denied  { execute_no_trans } for  pid=1254 comm="syz.2.216" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   61.874773][ T1227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'.
[   61.907439][ T1262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.910793][   T36] audit: type=1400 audit(1788545590.014:321): avc:  denied  { shutdown } for  pid=1261 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.916289][ T1262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.936849][   T10] usb 1-1: unit 4 not found!
[   61.953042][   T10] usb 1-1: USB disconnect, device number 20
[   61.964797][  T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   61.983455][   T36] audit: type=1400 audit(1788545590.094:322): avc:  denied  { ioctl } for  pid=1257 comm="syz.2.217" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   62.131167][   T36] audit: type=1400 audit(1788545590.244:323): avc:  denied  { mount } for  pid=1265 comm="syz.2.219" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   62.470877][ T1300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.481025][ T1300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.491568][ T1300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.501068][ T1300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.547934][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   62.709475][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   62.718110][   T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 154, changing to 7
[   62.730999][   T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   62.740184][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.748249][   T10] usb 2-1: Product: syz
[   62.752508][   T10] usb 2-1: Manufacturer: syz
[   62.757133][   T10] usb 2-1: SerialNumber: syz
[   62.897958][   T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   62.965830][   T10] usb 2-1: BAAD GENERIC IO: no channels?
[   62.973411][   T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   62.985694][   T10] usb 2-1: USB disconnect, device number 12
[   62.996461][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   63.047983][   T31] usb 3-1: Using ep0 maxpacket: 8
[   63.054211][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.066289][   T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   63.076869][   T31] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   63.086004][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.094216][   T31] usb 3-1: Product: syz
[   63.098462][   T31] usb 3-1: Manufacturer: syz
[   63.103091][   T31] usb 3-1: SerialNumber: syz

���a|��-��|��kF[(�}��D�fl_F�٨�����~{c�VaV���]�~
Cw�֑,	[   63.284661][ T1336] loop7: detected capacity change from 0 to 7
[   63.291392][ T1336]  loop7: unable to read partition table
[   63.297129][ T1336] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[   63.314466][ T1319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'.
[   63.330928][   T31] usb 3-1: unit 4 not found!
[   63.340266][   T31] usb 3-1: USB disconnect, device number 12
[   63.358990][  T705] udevd[705]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   63.374754][  T447] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   63.419524][ T1338] rust_binder: 1337:1338 got transaction with invalid offset
[   63.426986][ T1338] rust_binder: Failure in copy_transaction_data: EINVAL
[   63.427021][ T1338] rust_binder: 1337:1338 transaction call to 1337:0 failed EINVAL, code 0 size 0-24
[   63.443832][   T10] rust_binder: 1337: undelivered TRANSACTION_ERROR: 29201
[   63.507956][  T447] usb 1-1: device descriptor read/64, error -71
[   63.747935][  T447] usb 1-1: device descriptor read/64, error -71
[   63.771539][ T1357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'.
[   63.987958][  T447] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   64.066582][ T1372] loop7: detected capacity change from 0 to 7
[   64.073172][    C0] blk_print_req_error: 22 callbacks suppressed
[   64.073191][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[   64.088594][    C0] buffer_io_error: 18 callbacks suppressed
[   64.088608][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.102481][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[   64.111695][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.119844][ T1372]  loop7: unable to read partition table
[   64.126239][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3
[   64.135956][ T1372] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[   64.148296][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.157498][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.165733][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.174930][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.183098][  T447] usb 1-1: device descriptor read/64, error -71
[   64.189528][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.198720][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.207918][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.217181][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.226730][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.235947][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.392267][ T1389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'.
[   64.427964][  T447] usb 1-1: device descriptor read/64, error -71
[   64.437084][ T1392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.445782][ T1392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.454976][ T1392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'.
[   64.538007][  T447] usb usb1-port1: attempt power cycle
[   64.797977][  T410] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   64.878002][  T447] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   64.899068][  T447] usb 1-1: device descriptor read/8, error -71
[   64.948001][  T410] usb 2-1: Using ep0 maxpacket: 32
[   64.954547][  T410] usb 2-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config
[   64.967949][  T410] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   64.985272][  T410] usb 2-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40
[   64.994507][  T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.002601][  T410] usb 2-1: Product: syz
[   65.006849][  T410] usb 2-1: Manufacturer: syz
[   65.011669][  T410] usb 2-1: SerialNumber: syz
[   65.028931][  T447] usb 1-1: device descriptor read/8, error -71
[   65.038036][ T1401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'.
[   65.064929][ T1404] loop7: detected capacity change from 0 to 7
[   65.077256][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[   65.086469][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   65.094649][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3
[   65.103823][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   65.111730][ T1404]  loop7: unable to read partition table
[   65.117552][ T1404] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[   65.130559][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   65.141821][  T705] udevd[705]: symlink '../../loop7' '/dev/disk/by-diskseq/62.tmp-b7:7' failed: Read-only file system
[   65.167741][  T705] udevd[705]: symlink '../../loop7' '/dev/disk/by-diskseq/62.tmp-b7:7' failed: Read-only file system
[   65.182801][  T705] udevd[705]: symlink '../../loop7' '/dev/disk/by-diskseq/62.tmp-b7:7' failed: Read-only file system
[   65.198392][  T705] udevd[705]: symlink '../../loop7' '/dev/disk/by-diskseq/63.tmp-b7:7' failed: Read-only file system
[   65.220256][ T1395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.229041][ T1395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.259243][  T410] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[   65.269738][  T410] usb 2-1: USB disconnect, device number 13
[   65.277939][  T447] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   65.306914][  T447] usb 1-1: device descriptor read/8, error -71
[   65.317459][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   65.438906][  T447] usb 1-1: device descriptor read/8, error -71
[   65.548099][  T447] usb usb1-port1: unable to enumerate USB device
[   65.664281][ T1446] loop7: detected capacity change from 0 to 7
[   65.671045][ T1446]  loop7: unable to read partition table
[   65.676808][ T1446] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[   65.690998][  T426] udevd[426]: symlink '../../loop7' '/dev/disk/by-diskseq/64.tmp-b7:7' failed: Read-only file system
[   65.708725][  T426] udevd[426]: symlink '../../loop7' '/dev/disk/by-diskseq/64.tmp-b7:7' failed: Read-only file system
[   65.725658][  T426] udevd[426]: symlink '../../loop7' '/dev/disk/by-diskseq/64.tmp-b7:7' failed: Read-only file system
[   65.734728][ T1448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.745662][ T1448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.781101][ T1454] netlink: 'syz.1.271': attribute type 12 has an invalid length.
[   66.064597][  T426] udevd[426]: symlink '../../loop7' '/dev/disk/by-diskseq/65.tmp-b7:7' failed: Read-only file system
[   66.168451][  T426] udevd[426]: symlink '../../loop5' '/dev/disk/by-diskseq/66.tmp-b7:5' failed: Read-only file system
[   66.204838][  T426] udevd[426]: symlink '../../loop5' '/dev/disk/by-diskseq/66.tmp-b7:5' failed: Read-only file system
[   66.275650][ T1538] overlay: Unknown parameter 'obj_user'
[   66.390941][   T36] kauditd_printk_skb: 30 callbacks suppressed
[   66.390961][   T36] audit: type=1400 audit(1788545594.504:354): avc:  denied  { lock } for  pid=1548 comm="syz.1.290" path="socket:[21228]" dev="sockfs" ino=21228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   66.527935][  T447] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   66.627953][  T410] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   66.659133][  T447] usb 1-1: device descriptor read/64, error -71
[   66.715335][   T36] audit: type=1400 audit(1788545594.824:355): avc:  denied  { associate } for  pid=1559 comm="syz.2.292" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   66.777909][  T410] usb 2-1: Using ep0 maxpacket: 32
[   66.787197][  T410] usb 2-1: config 0 has no interfaces?
[   66.792993][  T410] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   66.808411][  T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.821707][  T410] usb 2-1: config 0 descriptor??
[   66.897947][  T447] usb 1-1: device descriptor read/64, error -71
[   67.027586][  T419] usb 2-1: USB disconnect, device number 14
[   67.137923][  T447] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   67.177925][  T410] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   67.267933][  T447] usb 1-1: device descriptor read/64, error -71
[   67.327943][  T410] usb 3-1: Using ep0 maxpacket: 32
[   67.334458][  T410] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   67.343043][  T410] usb 3-1: config 0 has no interface number 0
[   67.350955][  T410] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   67.360386][  T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.368649][  T410] usb 3-1: Product: syz
[   67.372962][  T410] usb 3-1: Manufacturer: syz
[   67.377607][  T410] usb 3-1: SerialNumber: syz
[   67.384319][  T410] usb 3-1: config 0 descriptor??
[   67.392900][  T410] smsc95xx v2.0.0
[   67.517945][  T447] usb 1-1: device descriptor read/64, error -71
[   67.577222][   T36] audit: type=1400 audit(1788545595.684:356): avc:  denied  { create } for  pid=1580 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   67.615622][   T36] audit: type=1400 audit(1788545595.704:357): avc:  denied  { bind } for  pid=1580 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   67.643228][  T447] usb usb1-port1: attempt power cycle
[   67.651565][   T36] audit: type=1400 audit(1788545595.704:358): avc:  denied  { write } for  pid=1580 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   67.812711][ T1575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[   68.006388][   T36] audit: type=1400 audit(1788545596.114:359): avc:  denied  { load_policy } for  pid=1594 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   68.027023][ T1595] SELinux:  policydb version 808464402 does not match my version range 15-33
[   68.036045][  T447] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   68.043953][ T1595] SELinux: failed to load policy
[   68.076370][  T447] usb 1-1: device descriptor read/8, error -71
[   68.133375][  T410] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[   68.148270][  T410] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   68.161186][  T410] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   68.172514][  T410] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   68.189662][  T410] usb 3-1: USB disconnect, device number 13
[   68.209036][  T447] usb 1-1: device descriptor read/8, error -71
[   68.407975][  T419] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[   68.447972][  T447] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   68.469092][  T447] usb 1-1: device descriptor read/8, error -71
[   68.559096][  T419] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.568924][  T419] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   68.581767][  T419] usb 2-1: config 0 interface 0 has no altsetting 0
[   68.588455][  T419] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   68.597510][  T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.606978][  T419] usb 2-1: config 0 descriptor??
[   68.612070][  T447] usb 1-1: device descriptor read/8, error -71
[   68.650130][ T1607] FAULT_INJECTION: forcing a failure.
[   68.650130][ T1607] name failslab, interval 1, probability 0, space 0, times 0
[   68.662845][ T1607] CPU: 0 UID: 0 PID: 1607 Comm: syz.2.308 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72
[   68.662883][ T1607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   68.662899][ T1607] Call Trace:
[   68.662907][ T1607]  <TASK>
[   68.662920][ T1607]  __dump_stack+0x21/0x30
[   68.662949][ T1607]  dump_stack_lvl+0x140/0x1c0
[   68.662976][ T1607]  ? __cfi_dump_stack_lvl+0x10/0x10
[   68.663003][ T1607]  dump_stack+0x19/0x20
[   68.663026][ T1607]  should_fail_ex+0x3c2/0x510
[   68.663047][ T1607]  should_failslab+0xac/0x100
[   68.663070][ T1607]  __kmalloc_cache_noprof+0x41/0x470
[   68.663089][ T1607]  ? __asan_memset+0x39/0x50
[   68.663105][ T1607]  ? kvm_dev_ioctl+0x85d/0x14c0
[   68.663133][ T1607]  kvm_dev_ioctl+0x85d/0x14c0
[   68.663160][ T1607]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[   68.663186][ T1607]  ? bpf_lsm_file_ioctl+0xd/0x20
[   68.663209][ T1607]  ? security_file_ioctl+0x3e/0x110
[   68.663225][ T1607]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[   68.663250][ T1607]  __se_sys_ioctl+0x126/0x1b0
[   68.663273][ T1607]  __x64_sys_ioctl+0x7f/0xa0
[   68.663294][ T1607]  x64_sys_call+0x1878/0x2ee0
[   68.663309][ T1607]  do_syscall_64+0x57/0xf0
[   68.663335][ T1607]  ? clear_bhb_loop+0x50/0xa0
[   68.663360][ T1607]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   68.663379][ T1607] RIP: 0033:0x7ffa1479e159
[   68.663415][ T1607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.663429][ T1607] RSP: 002b:00007ffa15591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   68.663448][ T1607] RAX: ffffffffffffffda RBX: 00007ffa14a25fa0 RCX: 00007ffa1479e159
[   68.663462][ T1607] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
[   68.663472][ T1607] RBP: 00007ffa14835024 R08: 0000000000000000 R09: 0000000000000000
[   68.663483][ T1607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.663493][ T1607] R13: 00007ffa14a26038 R14: 00007ffa14a25fa0 R15: 00007ffe19510ad8
[   68.663508][ T1607]  </TASK>
[   68.868592][  T447] usb usb1-port1: unable to enumerate USB device
[   69.070686][  T419] input: HID 1020:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1020:0006.0004/input/input23
[   69.083966][  T419] belkin 0003:1020:0006.0004: input,hidraw0: USB HID v0.00 Joystick [HID 1020:0006] on usb-dummy_hcd.1-1/input0
[   69.165392][   T36] audit: type=1400 audit(1788545597.274:360): avc:  denied  { connect } for  pid=1618 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   69.185796][ T1619] netlink: 164 bytes leftover after parsing attributes in process `syz.0.311'.
[   69.211240][ T1622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'.
[   69.220242][  T447] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   69.247705][ T1627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=158 sclass=netlink_route_socket pid=1627 comm=syz.3.314
[   69.270731][  T419] usb 2-1: USB disconnect, device number 15
[   69.357939][  T447] usb 3-1: device descriptor read/64, error -71
[   69.598274][  T447] usb 3-1: device descriptor read/64, error -71
[   69.700507][   T36] audit: type=1400 audit(1788545597.814:361): avc:  denied  { create } for  pid=1647 comm="syz.3.322" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   69.721645][   T36] audit: type=1400 audit(1788545597.814:362): avc:  denied  { mounton } for  pid=1647 comm="syz.3.322" path="/88/file0" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   69.744640][   T36] audit: type=1400 audit(1788545597.834:363): avc:  denied  { read } for  pid=1647 comm="syz.3.322" name="file0" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   69.786622][ T1648] 9pnet_fd: p9_fd_create_unix (1648): problem connecting socket: ./file0: -13
[   69.808464][ T1651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.817051][ T1651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.825903][ T1651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'.
[   69.857561][ T1653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'.
[   69.867967][  T447] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   69.885348][ T1655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'.
[   69.894851][ T1656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'.
[   69.919764][ T1658] batadv_slave_1: entered promiscuous mode
[   69.993213][ T1659] batadv_slave_1: left promiscuous mode
[   69.998032][  T447] usb 3-1: device descriptor read/64, error -71
[   70.017264][ T1664] FAULT_INJECTION: forcing a failure.
[   70.017264][ T1664] name failslab, interval 1, probability 0, space 0, times 0
[   70.030096][ T1664] CPU: 1 UID: 0 PID: 1664 Comm: syz.1.328 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72
[   70.030138][ T1664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   70.030155][ T1664] Call Trace:
[   70.030162][ T1664]  <TASK>
[   70.030172][ T1664]  __dump_stack+0x21/0x30
[   70.030213][ T1664]  dump_stack_lvl+0x140/0x1c0
[   70.030247][ T1664]  ? __cfi_dump_stack_lvl+0x10/0x10
[   70.030285][ T1664]  dump_stack+0x19/0x20
[   70.030315][ T1664]  should_fail_ex+0x3c2/0x510
[   70.030346][ T1664]  should_failslab+0xac/0x100
[   70.030376][ T1664]  kmem_cache_alloc_noprof+0x42/0x410
[   70.030409][ T1664]  ? copy_fs_struct+0x5d/0x2d0
[   70.030427][ T1664]  ? __cfi_do_futex+0x10/0x10
[   70.030451][ T1664]  ? mutex_unlock+0x90/0x240
[   70.030471][ T1664]  copy_fs_struct+0x5d/0x2d0
[   70.030488][ T1664]  ? ksys_unshare+0x3b8/0x920
[   70.030512][ T1664]  ksys_unshare+0x3c7/0x920
[   70.030534][ T1664]  ? fput+0x1a4/0x230
[   70.030558][ T1664]  ? __cfi_ksys_unshare+0x10/0x10
[   70.030581][ T1664]  ? __kasan_check_write+0x18/0x20
[   70.030600][ T1664]  __x64_sys_unshare+0x3c/0x50
[   70.030623][ T1664]  x64_sys_call+0x2998/0x2ee0
[   70.030638][ T1664]  do_syscall_64+0x57/0xf0
[   70.030663][ T1664]  ? clear_bhb_loop+0x50/0xa0
[   70.030683][ T1664]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   70.030702][ T1664] RIP: 0033:0x7fde6db9e159
[   70.030717][ T1664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.030731][ T1664] RSP: 002b:00007fde6eb45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   70.030750][ T1664] RAX: ffffffffffffffda RBX: 00007fde6de25fa0 RCX: 00007fde6db9e159
[   70.030764][ T1664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[   70.030775][ T1664] RBP: 00007fde6dc35024 R08: 0000000000000000 R09: 0000000000000000
[   70.030785][ T1664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.030796][ T1664] R13: 00007fde6de26038 R14: 00007fde6de25fa0 R15: 00007ffe2abace28
[   70.030818][ T1664]  </TASK>
[   70.238065][  T447] usb 3-1: device descriptor read/64, error -71
[   70.267981][  T410] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[   70.348034][  T447] usb usb3-port1: attempt power cycle
[   70.367958][  T313] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   70.419414][  T410] usb 2-1: unable to get BOS descriptor or descriptor too short
[   70.427515][  T410] usb 2-1: not running at top speed; connect to a high speed hub
[   70.436095][  T410] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   70.446267][  T410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   70.456854][  T410] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   70.466019][  T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.474222][  T410] usb 2-1: Product: syz
[   70.478619][  T410] usb 2-1: Manufacturer: syz
[   70.483247][  T410] usb 2-1: SerialNumber: syz
[   70.517936][  T313] usb 1-1: Using ep0 maxpacket: 32
[   70.528665][  T313] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   70.537848][  T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.546079][  T313] usb 1-1: Product: syz
[   70.550715][  T313] usb 1-1: Manufacturer: syz
[   70.555347][  T313] usb 1-1: SerialNumber: syz
[   70.689016][  T447] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   70.700116][  T410] cdc_ether 2-1:1.0: skipping garbage
[   70.705554][  T410] usb 2-1: bad CDC descriptors
[   70.711557][  T447] usb 3-1: device descriptor read/8, error -71
[   70.718347][  T410] usb 2-1: USB disconnect, device number 16
[   70.839037][  T447] usb 3-1: device descriptor read/8, error -71
[   71.078018][  T447] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   71.099089][  T447] usb 3-1: device descriptor read/8, error -71
[   71.238648][  T447] usb 3-1: device descriptor read/8, error -71
[   71.280587][  T313] usb 1-1: USB disconnect, device number 29
[   71.295776][ T1679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'.
[   71.308745][  T436] udevd[436]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   71.348061][  T447] usb usb3-port1: unable to enumerate USB device
[   71.497287][ T1696] incfs: Options parsing error. -22
[   71.502664][ T1696] incfs: mount failed -22
[   71.508714][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   71.508731][   T36] audit: type=1400 audit(1788545599.624:369): avc:  denied  { remount } for  pid=1682 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   71.567978][  T410] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   71.719042][  T410] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.732119][  T410] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   71.745082][  T410] usb 2-1: config 0 interface 0 has no altsetting 0
[   71.751840][  T410] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   71.760981][  T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.769949][  T410] usb 2-1: config 0 descriptor??
[   72.178494][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.187132][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.209710][  T705] udevd[705]: symlink '../../loop5' '/dev/disk/by-diskseq/68.tmp-b7:5' failed: Read-only file system
[   72.241695][  T426] udevd[426]: symlink '../../loop5' '/dev/disk/by-diskseq/69.tmp-b7:5' failed: Read-only file system
[   72.251846][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.261721][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.271136][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.280669][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.300697][  T410] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x1
[   72.309266][  T410] hid-multitouch 0003:0EEF:72C4.0005: item fetching failed at offset 21/24
[   72.319586][  T410] hid-multitouch 0003:0EEF:72C4.0005: probe with driver hid-multitouch failed with error -22
[   72.407954][  T447] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   72.435885][ T1711] futex_wake_op: syz.0.343 tries to shift op by 144; fix this program
[   72.500178][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.508783][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.557920][  T447] usb 3-1: Using ep0 maxpacket: 8
[   72.564148][  T447] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.574376][  T447] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   72.584705][  T447] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   72.594011][  T447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.596656][   T31] usb 2-1: USB disconnect, device number 17
[   72.608902][  T447] usb 3-1: Product: syz
[   72.613298][  T447] usb 3-1: Manufacturer: syz
[   72.618799][  T447] usb 3-1: SerialNumber: syz
[   72.827430][ T1698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'.
[   72.840017][  T447] usb 3-1: unit 4 not found!
[   72.848403][  T447] usb 3-1: USB disconnect, device number 18
[   72.860145][  T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   73.111590][ T1713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'.
[   73.282758][   T36] audit: type=1400 audit(1788545601.394:370): avc:  denied  { ioctl } for  pid=1721 comm="syz.0.347" path="socket:[23274]" dev="sockfs" ino=23274 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   73.326014][   T36] audit: type=1400 audit(1788545601.394:371): avc:  denied  { setattr } for  pid=1721 comm="syz.0.347" name="AF_VSOCK" dev="sockfs" ino=23274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   73.545208][   T36] audit: type=1400 audit(1788545601.654:372): avc:  denied  { write } for  pid=1737 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   73.593711][ T1742] netlink: 72 bytes leftover after parsing attributes in process `syz.2.354'.
[   73.607697][   T36] audit: type=1400 audit(1788545601.714:373): avc:  denied  { map } for  pid=1741 comm="syz.2.354" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   73.657940][   T36] audit: type=1400 audit(1788545601.714:374): avc:  denied  { execute } for  pid=1741 comm="syz.2.354" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   73.937965][  T410] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   74.007932][  T447] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   74.067942][  T410] usb 2-1: device descriptor read/64, error -71
[   74.157944][  T447] usb 3-1: Using ep0 maxpacket: 8
[   74.168688][  T447] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.188001][  T447] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   74.209080][  T447] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   74.218247][  T447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.226322][  T447] usb 3-1: Product: syz
[   74.230583][  T447] usb 3-1: Manufacturer: syz
[   74.235240][  T447] usb 3-1: SerialNumber: syz
[   74.337929][  T410] usb 2-1: device descriptor read/64, error -71
[   74.361529][ T1760] kvm: pic: non byte write
[   74.366932][ T1760] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer.
[   74.443375][ T1756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[   74.455838][  T447] usb 3-1: unit 4 not found!
[   74.464567][  T447] usb 3-1: USB disconnect, device number 19
[   74.477834][  T705] udevd[705]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   74.519841][ T1763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.528489][ T1763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.538053][ T1763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.546587][ T1763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.577948][  T410] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   74.707937][  T410] usb 2-1: device descriptor read/64, error -71
[   74.947982][  T410] usb 2-1: device descriptor read/64, error -71
[   74.972780][   T36] audit: type=1400 audit(1788545603.084:375): avc:  denied  { mount } for  pid=1764 comm="syz.2.363" name="/" dev="ramfs" ino=22176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   74.995370][   T36] audit: type=1400 audit(1788545603.084:376): avc:  denied  { remount } for  pid=1764 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   75.058060][  T410] usb usb2-port1: attempt power cycle
[   75.407946][  T410] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   75.429167][  T410] usb 2-1: device descriptor read/8, error -71
[   75.562577][  T410] usb 2-1: device descriptor read/8, error -71
[   75.797954][  T447] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   75.817952][  T410] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   75.839068][  T410] usb 2-1: device descriptor read/8, error -71
[   75.967973][  T447] usb 3-1: Using ep0 maxpacket: 32
[   75.974124][  T410] usb 2-1: device descriptor read/8, error -71
[   75.988818][  T447] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   75.997232][  T447] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   76.006000][  T447] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   76.015105][  T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   76.024866][  T447] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   76.034608][  T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   76.044436][  T447] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   76.054260][  T447] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   76.067364][  T447] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   76.076513][  T447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.094857][  T447] usb 3-1: config 0 descriptor??
[   76.100315][  T410] usb usb2-port1: unable to enumerate USB device
[   76.143411][ T1792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.152151][ T1792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.161640][ T1792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'.
[   76.310056][  T447] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   76.524235][   T31] usb 3-1: USB disconnect, device number 20
[   76.532668][   T31] usblp0: removed
[   76.780933][ T1807] input: syz1 as /devices/virtual/input/input27
[   76.799080][   T36] audit: type=1326 audit(1788545604.914:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1806 comm="syz.3.375" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efccd99e159 code=0x7ffe0000
[   77.060562][ T1818] capability: warning: `syz.2.376' uses deprecated v2 capabilities in a way that may be insecure
[   77.147981][   T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   77.187900][   T36] audit: type=1400 audit(1788545605.294:378): avc:  denied  { getopt } for  pid=1824 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   77.319040][   T31] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.331946][   T31] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.365189][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[   77.375702][   T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[   77.394982][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.414084][   T31] usb 2-1: config 0 descriptor??
[   77.521583][   T36] audit: type=1400 audit(1788545605.634:379): avc:  denied  { name_bind } for  pid=1837 comm="syz.2.383" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   77.617958][  T420] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   77.631172][   T31] usbhid 2-1:0.0: can't add hid device: -71
[   77.637923][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   77.656875][   T31] usb 2-1: USB disconnect, device number 22
[   77.807927][  T420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.827910][   T36] audit: type=1400 audit(1788545605.924:380): avc:  denied  { map } for  pid=1839 comm="syz.2.384" path="pipe:[2807]" dev="pipefs" ino=2807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   77.858144][  T420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   77.888502][  T420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   77.897646][  T420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.909805][  T420] usb 1-1: Product: syz
[   77.914024][  T420] usb 1-1: Manufacturer: syz
[   77.928141][  T420] usb 1-1: SerialNumber: syz
[   78.204008][ T1850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'.
[   78.229191][ T1850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.389'.
[   78.269292][ T1853] netlink: 'syz.2.390': attribute type 29 has an invalid length.
[   78.288413][ T1854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1854 comm=syz.1.389
[   78.848932][  T420] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[   78.861649][  T420] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed
[   78.878802][  T420] cdc_ncm 1-1:1.0: bind() failure
[   78.885020][  T420] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   78.907903][  T420] cdc_ncm 1-1:1.1: bind() failure
[   78.919167][  T420] usb 1-1: USB disconnect, device number 30
[   79.307952][  T313] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   79.487918][  T313] usb 2-1: Using ep0 maxpacket: 32
[   79.499097][  T313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.517140][  T313] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   79.528459][  T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.546812][  T313] usb 2-1: Product: syz
[   79.553249][  T313] usb 2-1: Manufacturer: syz
[   79.563289][  T313] usb 2-1: SerialNumber: syz
[   79.576968][  T313] usb 2-1: config 0 descriptor??
[   79.594160][  T313] smsc75xx v1.0.0
[   79.603495][  T313] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   79.624878][  T313] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22
[   79.717923][   T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   79.795161][  T313] usb 2-1: USB disconnect, device number 23
[   79.877991][   T31] usb 1-1: Using ep0 maxpacket: 8
[   79.894286][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.914621][   T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   79.929359][   T31] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   79.948047][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.958293][   T31] usb 1-1: Product: syz
[   79.962497][   T31] usb 1-1: Manufacturer: syz
[   79.977318][   T31] usb 1-1: SerialNumber: syz
[   80.190123][ T1890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'.
[   80.212124][   T31] usb 1-1: unit 4 not found!
[   80.233550][   T31] usb 1-1: USB disconnect, device number 31
[   80.325982][ T1900] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   80.583268][   T36] audit: type=1400 audit(1788545608.694:381): avc:  denied  { create } for  pid=1909 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   80.630241][ T1915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1915 comm=syz.3.410
[   80.642809][   T36] audit: type=1400 audit(1788545608.724:382): avc:  denied  { remount } for  pid=1909 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   80.669984][ T1915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1915 comm=syz.3.410
[   80.687974][   T36] audit: type=1400 audit(1788545608.794:383): avc:  denied  { map } for  pid=1914 comm="syz.3.410" path="/proc/523/task/523/cmdline" dev="proc" ino=24346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   80.758683][   T36] audit: type=1400 audit(1788545608.874:384): avc:  denied  { read } for  pid=1916 comm="syz.1.411" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   80.846311][ T1934] netlink: 140 bytes leftover after parsing attributes in process `syz.3.417'.
[   80.987925][   T31] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[   81.050308][  T410] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   81.152661][   T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   81.175900][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   81.206989][   T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   81.230257][   T31] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[   81.243499][  T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.250059][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.275000][   T31] usb 1-1: config 0 descriptor??
[   81.281109][  T410] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[   81.289478][ T1925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   81.307901][  T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.337920][  T410] usb 2-1: Product: syz
[   81.342151][  T410] usb 2-1: Manufacturer: syz
[   81.346781][  T410] usb 2-1: SerialNumber: syz
[   81.570600][ T1942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.592032][ T1942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.725194][   T31] usbhid 1-1:0.0: can't add hid device: -71
[   81.737937][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   81.756856][   T31] usb 1-1: USB disconnect, device number 32
[   82.140395][ T1952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.158170][ T1952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.188165][  T410] usb 2-1: unknown sample rate
[   82.202863][  T410] usb 2-1: USB disconnect, device number 24
[   82.231481][  T705] udevd[705]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   82.512814][   T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   82.667950][   T31] usb 1-1: Using ep0 maxpacket: 8
[   82.674369][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.697908][   T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   82.728154][   T36] audit: type=1400 audit(1788545610.834:385): avc:  denied  { append } for  pid=1955 comm="syz.3.422" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   82.755461][   T31] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   82.787915][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.798866][   T31] usb 1-1: Product: syz
[   82.809758][   T31] usb 1-1: Manufacturer: syz
[   82.814401][   T31] usb 1-1: SerialNumber: syz
[   82.879383][ T1969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.898291][ T1969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.910362][   T36] audit: type=1400 audit(1788545611.024:386): avc:  denied  { read write } for  pid=1968 comm="syz.3.427" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[   82.966415][   T36] audit: type=1400 audit(1788545611.024:387): avc:  denied  { open } for  pid=1968 comm="syz.3.427" path="/115/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[   82.991049][  T419] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   83.046519][ T1954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'.
[   83.058275][   T31] usb 1-1: unit 4 not found!
[   83.074570][   T31] usb 1-1: USB disconnect, device number 33
[   83.157949][  T419] usb 2-1: Using ep0 maxpacket: 16
[   83.165232][  T419] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.176477][  T419] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[   83.186558][  T419] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[   83.196457][  T419] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   83.210453][  T419] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   83.219785][  T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   83.227818][  T419] usb 2-1: SerialNumber: syz
[   83.238444][ T1959] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.245725][ T1959] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.253691][  T419] hub 2-1:1.0: bad descriptor, ignoring hub
[   83.259947][  T419] hub 2-1:1.0: probe with driver hub failed with error -5
[   83.460763][ T1959] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.469475][ T1959] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.549277][ T1972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.558476][ T1972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.567565][ T1972] futex_wake_op: syz.3.428 tries to shift op by 144; fix this program
[   83.597064][ T1974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'.
[   83.690405][  T419] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[   83.949500][    C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68!
[   83.957433][    C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 03!
[   84.174155][ T1959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.196958][ T1959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.217202][   T31] usb 2-1: USB disconnect, device number 25
[   84.226612][   T31] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[   84.553029][ T2034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.589179][ T2034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.787929][  T419] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   84.947919][  T419] usb 1-1: Using ep0 maxpacket: 8
[   84.957787][  T419] usb 1-1: unable to get BOS descriptor or descriptor too short
[   84.966687][  T419] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   84.980175][  T419] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   84.997968][  T419] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   85.024961][  T419] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[   85.034338][  T419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.048137][  T419] usb 1-1: Product: syz
[   85.056871][  T419] usb 1-1: Manufacturer: syz
[   85.065574][  T419] usb 1-1: SerialNumber: syz
[   85.201324][   T36] audit: type=1400 audit(1788545613.314:388): avc:  denied  { setopt } for  pid=2042 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   85.295182][  T419] usb 1-1: 0:2 : does not exist
[   85.308339][  T419] usb 1-1: unable to issue vendor read request (ret = -71)
[   85.318486][  T419] usb 1-1: unable to issue vendor read request (ret = -71)
[   85.346242][  T419] usb 1-1: unable to issue vendor read request (ret = -71)
[   85.358240][  T419] usb 1-1: unable to issue vendor read request (ret = -71)
[   85.383697][  T419] usb 1-1: USB disconnect, device number 34
[   85.447487][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   85.774359][   T36] audit: type=1400 audit(1788545613.884:389): avc:  denied  { mounton } for  pid=2070 comm="syz.1.447" path="/109/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   85.841444][   T36] audit: type=1400 audit(1788545613.924:390): avc:  denied  { nlmsg_write } for  pid=2070 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   85.907912][   T36] audit: type=1400 audit(1788545613.924:391): avc:  denied  { nlmsg_read } for  pid=2070 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   85.953972][   T36] audit: type=1400 audit(1788545613.924:392): avc:  denied  { listen } for  pid=2070 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   86.127916][   T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   86.208541][ T2081] netlink: 'syz.0.450': attribute type 4 has an invalid length.
[   86.216241][ T2081] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.450'.
[   86.248357][ T2081] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[   86.283080][   T36] audit: type=1400 audit(1788545614.394:393): avc:  denied  { create } for  pid=2082 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   86.322576][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.340813][   T31] usb 2-1: config 0 has no interfaces?
[   86.349501][   T31] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[   86.362302][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.380686][   T31] usb 2-1: config 0 descriptor??
[   86.438259][ T2086] netlink: 'syz.0.453': attribute type 25 has an invalid length.
[   86.473644][   T36] audit: type=1400 audit(1788545614.584:394): avc:  denied  { remount } for  pid=2088 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   86.493399][ T2089] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[   86.503666][ T2089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.513401][ T2089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.522818][ T2089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.532457][ T2089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.590958][ T2078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.599556][ T2090] futex_wake_op: syz.1.449 tries to shift op by 144; fix this program
[   86.618913][ T2078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.634323][  T313] usb 2-1: USB disconnect, device number 26
[   87.085517][ T2099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.094429][ T2099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.158202][ T2104] netlink: 'syz.0.457': attribute type 16 has an invalid length.
[   87.169249][ T2104] netlink: 'syz.0.457': attribute type 4 has an invalid length.
[   87.185168][ T2109] binder: Bad value for 'max'
[   87.205554][ T2104] netlink: 64114 bytes leftover after parsing attributes in process `syz.0.457'.
[   87.308493][  T313] logitech-hidpp-device 0003:046D:C082.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0
[   87.341724][ T2119] fido_id[2119]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   87.467920][   T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   87.647916][   T31] usb 2-1: Using ep0 maxpacket: 16
[   87.659054][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.677920][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.698182][   T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   87.727921][   T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   87.747276][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.767790][   T31] usb 2-1: config 0 descriptor??
[   88.181307][   T31] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0007/input/input34
[   88.201280][   T31] appleir 0003:05AC:8241.0007: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0
[   88.386272][ T2113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.401632][ T2113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.410437][  T419] usb 2-1: USB disconnect, device number 27
[   88.639490][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   88.639509][   T36] audit: type=1400 audit(1788545616.754:397): avc:  denied  { setattr } for  pid=2135 comm="syz.0.468" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   89.627969][   T31] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[   89.789022][   T31] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[   89.800295][   T31] usb 2-1: config 0 has no interface number 0
[   89.818035][  T410] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   89.846672][   T31] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   89.862784][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.873997][   T31] usb 2-1: Product: syz
[   89.878443][   T31] usb 2-1: Manufacturer: syz
[   89.883189][   T31] usb 2-1: SerialNumber: syz
[   89.891931][   T31] usb 2-1: config 0 descriptor??
[   89.999021][  T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.009376][  T410] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   90.029322][  T410] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40
[   90.038664][  T410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.046785][  T410] usb 1-1: Product: syz
[   90.057923][  T410] usb 1-1: Manufacturer: syz
[   90.062606][  T410] usb 1-1: SerialNumber: syz
[   90.193712][ T2195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.202892][ T2195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.287909][   T36] audit: type=1400 audit(1788545618.394:398): avc:  denied  { accept } for  pid=2176 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   90.360205][  T410] usb 1-1: 0:1 : does not exist
[   90.365146][  T410] usb 1-1: 0:2 : does not exist
[   90.371415][  T410] usb 1-1: unit 5 not found!
[   90.391166][  T410] usb 1-1: USB disconnect, device number 35
[   90.406640][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   90.518749][   T31] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[   90.531963][   T31] asix 2-1:0.251: probe with driver asix failed with error -524
[   90.816790][ T2198] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   90.853382][ T2200] FAULT_INJECTION: forcing a failure.
[   90.853382][ T2200] name failslab, interval 1, probability 0, space 0, times 0
[   90.866356][ T2200] CPU: 1 UID: 0 PID: 2200 Comm: syz.3.487 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72
[   90.866396][ T2200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.866411][ T2200] Call Trace:
[   90.866419][ T2200]  <TASK>
[   90.866428][ T2200]  __dump_stack+0x21/0x30
[   90.866469][ T2200]  dump_stack_lvl+0x140/0x1c0
[   90.866502][ T2200]  ? __cfi_dump_stack_lvl+0x10/0x10
[   90.866537][ T2200]  dump_stack+0x19/0x20
[   90.866567][ T2200]  should_fail_ex+0x3c2/0x510
[   90.866596][ T2200]  should_failslab+0xac/0x100
[   90.866630][ T2200]  __kmalloc_node_noprof+0x69/0x500
[   90.866659][ T2200]  ? __kvmalloc_node_noprof+0x128/0x300
[   90.866686][ T2200]  __kvmalloc_node_noprof+0x128/0x300
[   90.866710][ T2200]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[   90.866770][ T2200]  ? __asan_memset+0x39/0x50
[   90.866797][ T2200]  alloc_netdev_mqs+0xaf4/0x13d0
[   90.866827][ T2200]  br_add_bridge+0x3c/0xf0
[   90.866865][ T2200]  br_ioctl_stub+0x5b6/0xcd0
[   90.866888][ T2200]  ? __cfi_br_ioctl_stub+0x10/0x10
[   90.866912][ T2200]  ? selinux_file_ioctl+0x732/0x1480
[   90.866938][ T2200]  ? vfs_write+0xbcf/0xfd0
[   90.866965][ T2200]  ? __kasan_check_write+0x18/0x20
[   90.866991][ T2200]  ? mutex_lock+0x97/0x1d0
[   90.867020][ T2200]  ? __cfi_do_futex+0x10/0x10
[   90.867053][ T2200]  ? mutex_unlock+0x90/0x240
[   90.867081][ T2200]  ? __cfi_br_ioctl_stub+0x10/0x10
[   90.867104][ T2200]  sock_ioctl+0x4e0/0x7e0
[   90.867126][ T2200]  ? __cfi_sock_ioctl+0x10/0x10
[   90.867163][ T2200]  ? __fget_files+0x2bc/0x330
[   90.867196][ T2200]  ? bpf_lsm_file_ioctl+0xd/0x20
[   90.867227][ T2200]  ? security_file_ioctl+0x3e/0x110
[   90.867251][ T2200]  ? __cfi_sock_ioctl+0x10/0x10
[   90.867287][ T2200]  __se_sys_ioctl+0x126/0x1b0
[   90.867320][ T2200]  __x64_sys_ioctl+0x7f/0xa0
[   90.867351][ T2200]  x64_sys_call+0x1878/0x2ee0
[   90.867374][ T2200]  do_syscall_64+0x57/0xf0
[   90.867411][ T2200]  ? clear_bhb_loop+0x50/0xa0
[   90.867440][ T2200]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   90.867468][ T2200] RIP: 0033:0x7efccd99e159
[   90.867489][ T2200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.867511][ T2200] RSP: 002b:00007efcce7c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.867540][ T2200] RAX: ffffffffffffffda RBX: 00007efccdc25fa0 RCX: 00007efccd99e159
[   90.867560][ T2200] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004
[   90.867578][ T2200] RBP: 00007efccda35024 R08: 0000000000000000 R09: 0000000000000000
[   90.867594][ T2200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.867610][ T2200] R13: 00007efccdc26038 R14: 00007efccdc25fa0 R15: 00007fffa763a128
[   90.867633][ T2200]  </TASK>
[   91.397971][  T313] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   91.527939][  T313] usb 1-1: device descriptor read/64, error -71
[   91.767951][  T313] usb 1-1: device descriptor read/64, error -71
[   92.017937][  T313] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[   92.166136][   T36] audit: type=1400 audit(1788545620.274:399): avc:  denied  { relabelfrom } for  pid=2208 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   92.168065][  T313] usb 1-1: device descriptor read/64, error -71
[   92.206498][   T36] audit: type=1400 audit(1788545620.274:400): avc:  denied  { relabelto } for  pid=2208 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   92.301592][   T36] audit: type=1400 audit(1788545620.414:401): avc:  denied  { ioctl } for  pid=2212 comm="syz.3.492" path="socket:[27216]" dev="sockfs" ino=27216 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   92.371782][ T2219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.380946][  T422] usb 2-1: USB disconnect, device number 28
[   92.399913][ T2219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.428605][  T313] usb 1-1: device descriptor read/64, error -71
[   92.548320][  T313] usb usb1-port1: attempt power cycle
[   92.897935][  T313] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[   92.942069][  T313] usb 1-1: device descriptor read/8, error -71
[   92.950904][ T2233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.968378][ T2233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.989708][ T2233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'.
[   93.079013][  T313] usb 1-1: device descriptor read/8, error -71
[   93.327987][  T313] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[   93.369045][  T313] usb 1-1: device descriptor read/8, error -71
[   93.502449][  T313] usb 1-1: device descriptor read/8, error -71
[   93.597901][   T36] audit: type=1400 audit(1788545621.704:402): avc:  denied  { create } for  pid=2238 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   93.600293][ T2239] 9pnet_fd: Insufficient options for proto=fd
[   93.623664][   T36] audit: type=1400 audit(1788545621.714:403): avc:  denied  { mounton } for  pid=2238 comm="syz.1.502" path="/121/file0" dev="tmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   93.648613][  T313] usb usb1-port1: unable to enumerate USB device
[   93.792176][   T36] audit: type=1400 audit(1788545621.904:404): avc:  denied  { read write } for  pid=2252 comm="syz.1.503" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   93.815391][   T36] audit: type=1400 audit(1788545621.904:405): avc:  denied  { open } for  pid=2252 comm="syz.1.503" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   93.838326][   T36] audit: type=1400 audit(1788545621.904:406): avc:  denied  { ioctl } for  pid=2252 comm="syz.1.503" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   93.982766][ T2261] kvm: Disabled LAPIC found during irq injection
[   93.991712][   T36] audit: type=1400 audit(1788545622.104:407): avc:  denied  { add_name } for  pid=2260 comm="syz.1.505" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   94.020809][   T36] audit: type=1400 audit(1788545622.104:408): avc:  denied  { create } for  pid=2260 comm="syz.1.505" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   94.040783][   T36] audit: type=1400 audit(1788545622.124:409): avc:  denied  { write } for  pid=2260 comm="syz.1.505" name="c_chmask" dev="configfs" ino=25405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   94.063775][   T36] audit: type=1400 audit(1788545622.124:410): avc:  denied  { open } for  pid=2260 comm="syz.1.505" path="/124/config/usb_gadget/g1/functions/uac1.usb0/c_chmask" dev="configfs" ino=25405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   94.142776][   T36] audit: type=1400 audit(1788545622.254:411): avc:  denied  { bind } for  pid=2262 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   94.160755][ T2265] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.506'.
[   94.195979][ T2270] random: crng reseeded on system resumption
[   94.202133][   T36] audit: type=1400 audit(1788545622.304:412): avc:  denied  { write } for  pid=2269 comm="syz.0.507" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   94.315829][   T36] audit: type=1400 audit(1788545622.424:413): avc:  denied  { sys_module } for  pid=2272 comm="syz.0.508" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   94.597928][  T422] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   94.769394][  T422] usb 2-1: Using ep0 maxpacket: 8
[   94.783370][  T422] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.798132][  T422] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   94.827236][  T422] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   94.838635][  T422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.847958][  T422] usb 2-1: Product: syz
[   94.852251][  T422] usb 2-1: Manufacturer: syz
[   94.857248][  T422] usb 2-1: SerialNumber: syz
[   94.860014][  T336] bridge_slave_1: left allmulticast mode
[   94.872206][ T2297] overlayfs: workdir and upperdir must reside under the same mount
[   94.880314][  T336] bridge_slave_1: left promiscuous mode
[   94.895602][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.903674][  T336] bridge_slave_0: left allmulticast mode
[   94.909552][  T336] bridge_slave_0: left promiscuous mode
[   94.916117][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.981103][ T2299] overlayfs: missing 'lowerdir'
[   95.052344][ T1486] Bluetooth: hci0: Frame reassembly failed (-84)
[   95.067223][  T336] veth1_macvtap: left promiscuous mode
[   95.073043][  T336] veth0_vlan: left promiscuous mode
[   95.098275][ T2280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'.
[   95.118248][  T422] usb 2-1: unit 4 not found!
[   95.140214][  T422] usb 2-1: USB disconnect, device number 29
[   95.160147][  T705] udevd[705]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   95.244314][ T2295] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.251591][ T2295] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.259931][ T2295] bridge_slave_0: entered allmulticast mode
[   95.266457][ T2295] bridge_slave_0: entered promiscuous mode
[   95.273432][ T2295] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.283634][ T2295] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.290868][ T2295] bridge_slave_1: entered allmulticast mode
[   95.298261][ T2295] bridge_slave_1: entered promiscuous mode
[   95.355936][ T2295] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.363052][ T2295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.370386][ T2295] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.377446][ T2295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.402354][ T1486] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.409902][ T1486] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.426078][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.433183][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.460243][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.467329][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.485320][ T2295] veth0_vlan: entered promiscuous mode
[   95.500694][ T2295] veth1_macvtap: entered promiscuous mode
[   95.654869][ T2323] incfs: Backing dir is not set, filesystem can't be mounted.
[   95.662638][ T2323] incfs: mount failed -2
[   95.868134][  T419] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[   95.877946][  T422] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   96.018122][  T410] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[   96.027030][  T419] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.037261][  T419] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[   96.038186][  T422] usb 5-1: Using ep0 maxpacket: 32
[   96.046634][  T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.054027][  T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11
[   96.063339][  T419] usb 1-1: config 0 descriptor??
[   96.076846][  T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   96.077051][  T419] usb 1-1: unsupported MDLM descriptors
[   96.093370][  T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   96.105084][  T422] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[   96.114402][  T422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.122614][  T422] usb 5-1: Product: syz
[   96.126867][  T422] usb 5-1: Manufacturer: syz
[   96.131527][  T422] usb 5-1: SerialNumber: syz
[   96.137279][  T422] usb 5-1: config 0 descriptor??
[   96.143901][  T422] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36
[   96.154575][   T95] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   96.164887][   T95] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   96.176938][  T410] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.185101][  T410] usb 2-1: not running at top speed; connect to a high speed hub
[   96.194072][  T410] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4
[   96.199603][  T426] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   96.209685][  T410] usb 2-1: language id specifier not provided by device, defaulting to English
[   96.225670][  T410] usb 2-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40
[   96.235039][   T95] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[   96.245331][  T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.253461][  T410] usb 2-1: Product: syz
[   96.257828][  T410] usb 2-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧
[   96.283557][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.292516][  T410] usb 2-1: SerialNumber: syz
[   96.298406][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.306863][  T422] usb 1-1: USB disconnect, device number 40
[   96.343517][   T31] usb 5-1: USB disconnect, device number 2
[   96.515777][  T410] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   96.522789][  T410] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   96.534497][  T410] usb 2-1: USB disconnect, device number 30
[   96.546582][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   97.062685][ T2352] incfs: Backing dir is not set, filesystem can't be mounted.
[   97.068417][ T2308] Bluetooth: hci0: command 0x1003 tx timeout
[   97.070949][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   97.076747][ T2352] incfs: mount failed -2
[   97.097455][ T2354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.111233][ T2354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.132245][ T2356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'.
[   97.141341][ T2354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'.
[   97.154743][ T2356] syzkaller1: entered promiscuous mode
[   97.160428][ T2356] syzkaller1: entered allmulticast mode
[   97.238044][  T422] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[   97.351565][ T2362] Bluetooth: hci0: Frame reassembly failed (-84)
[   97.358620][ T1473] Bluetooth: hci0: Frame reassembly failed (-84)
[   97.389791][  T422] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[   97.402692][  T422] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.412903][  T422] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   97.426123][  T422] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   97.435249][  T422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.444125][  T422] usb 1-1: config 0 descriptor??
[   97.450798][  T422] usb-storage 1-1:0.0: USB Mass Storage device detected
[   97.459065][  T422] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[   97.597973][   T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   97.661883][ T2350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.671821][ T2350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.683068][  T419] usb 1-1: USB disconnect, device number 41
[   97.750279][   T31] usb 2-1: Using ep0 maxpacket: 8
[   97.762421][   T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   97.786511][   T31] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[   97.795843][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.803974][   T31] usb 2-1: Product: syz
[   97.817904][   T31] usb 2-1: Manufacturer: syz
[   97.822569][   T31] usb 2-1: SerialNumber: syz
[   97.958991][ T2384] incfs: Backing dir is not set, filesystem can't be mounted.
[   97.966639][ T2384] incfs: mount failed -2
[   98.022152][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.030937][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.046614][ T2362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'.
[   98.055770][ T2390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'.
[   98.172510][   T31] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[   98.180167][   T31] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 2
[   98.187543][   T31] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   98.194543][   T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   98.207075][   T31] usb 2-1: USB disconnect, device number 31
[   98.225385][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   99.048821][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   99.048839][   T36] audit: type=1400 audit(1788545627.154:427): avc:  denied  { accept } for  pid=2436 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   99.096277][   T36] audit: type=1400 audit(1788545627.164:428): avc:  denied  { setcheckreqprot } for  pid=2436 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   99.214806][ T2444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.223783][ T2444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.235530][ T2444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'.
[   99.387937][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   99.394162][ T2308] Bluetooth: hci0: command 0x1003 tx timeout
[   99.643717][   T36] audit: type=1400 audit(1788545627.754:429): avc:  denied  { append } for  pid=2461 comm="syz.0.565" name="uprobe_events" dev="tracefs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   99.647258][ T2463] ./dev/sda1: Can't lookup blockdev
[   99.712161][ T2468] netlink: 'syz.0.566': attribute type 3 has an invalid length.
[   99.895887][ T2487] FAULT_INJECTION: forcing a failure.
[   99.895887][ T2487] name failslab, interval 1, probability 0, space 0, times 0
[   99.908577][ T2487] CPU: 0 UID: 0 PID: 2487 Comm: syz.0.572 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72
[   99.908613][ T2487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   99.908628][ T2487] Call Trace:
[   99.908636][ T2487]  <TASK>
[   99.908645][ T2487]  __dump_stack+0x21/0x30
[   99.908691][ T2487]  dump_stack_lvl+0x140/0x1c0
[   99.908724][ T2487]  ? __cfi_dump_stack_lvl+0x10/0x10
[   99.908758][ T2487]  ? __cfi___futex_queue+0x10/0x10
[   99.908791][ T2487]  dump_stack+0x19/0x20
[   99.908823][ T2487]  should_fail_ex+0x3c2/0x510
[   99.908851][ T2487]  should_failslab+0xac/0x100
[   99.908882][ T2487]  kmem_cache_alloc_noprof+0x42/0x410
[   99.908907][ T2487]  ? inc_rlimit_get_ucounts+0x3fb/0x470
[   99.908931][ T2487]  ? __sigqueue_alloc+0x15e/0x2b0
[   99.908964][ T2487]  __sigqueue_alloc+0x15e/0x2b0
[   99.908996][ T2487]  __send_signal_locked+0x19d/0xbc0
[   99.909025][ T2487]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   99.909062][ T2487]  send_signal_locked+0x41a/0x590
[   99.909092][ T2487]  force_sig_info_to_task+0x2f5/0x4c0
[   99.909124][ T2487]  force_sig_fault+0xf1/0x150
[   99.909154][ T2487]  ? __cfi_force_sig_fault+0x10/0x10
[   99.909184][ T2487]  ? fixup_vdso_exception+0x21d/0x330
[   99.909209][ T2487]  ? find_vma+0xd3/0x120
[   99.909234][ T2487]  __bad_area_nosemaphore+0x2fb/0x680
[   99.909257][ T2487]  ? __kasan_check_write+0x18/0x20
[   99.909282][ T2487]  bad_area_nosemaphore+0x2d/0x50
[   99.909304][ T2487]  do_user_addr_fault+0xdec/0x1230
[   99.909341][ T2487]  ? fpregs_restore_userregs+0x11c/0x260
[   99.909372][ T2487]  ? switch_fpu_return+0x12/0x20
[   99.909401][ T2487]  exc_page_fault+0x58/0xc0
[   99.909429][ T2487]  asm_exc_page_fault+0x2b/0x30
[   99.909461][ T2487] RIP: 0033:0x7f0c36e52c47
[   99.909481][ T2487] Code: 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 48 8b 59 38 <48> 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00
[   99.909503][ T2487] RSP: 002b:00007f0c37eaefd0 EFLAGS: 00010246
[   99.909525][ T2487] RAX: 00007f0c36e52c00 RBX: 0000000000000000 RCX: 0000200000000200
[   99.909542][ T2487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   99.909557][ T2487] RBP: 0000000000000000 R08: 0000200000000200 R09: 0000000000000000
[   99.909573][ T2487] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000000
[   99.909589][ T2487] R13: 00007f0c37226038 R14: 00007f0c37225fa0 R15: 00007ffc9a8b46b8
[   99.909610][ T2487]  </TASK>
[  100.322601][ T2495] 8021q: VLANs not supported on ip_vti0
[  100.393692][ T2513] rust_binder: 2511:2513 FDA parent offset not aligned correctly
[  100.401981][ T2513] rust_binder: 2511:2513 error while translating object: EINVAL
[  100.409822][ T2513] rust_binder: Failure in copy_transaction_data: EINVAL
[  100.409854][ T2513] rust_binder: 2511:2513 transaction call to 2511:0 failed EINVAL, code 0 size 80-24
[  100.468092][  T419] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  100.508480][  T410] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  100.618009][  T419] usb 2-1: Using ep0 maxpacket: 16
[  100.624336][  T419] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.634741][  T447] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  100.642409][  T419] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.653483][  T419] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.663690][  T419] usb 2-1: config 1 interface 1 has no altsetting 0
[  100.670426][  T410] usb 5-1: Using ep0 maxpacket: 8
[  100.676798][  T419] usb 2-1: string descriptor 0 read error: -71
[  100.683223][  T410] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.693507][  T419] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  100.702716][  T410] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  100.711800][  T419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[  100.721859][  T419] usb 2-1: can't set config #1, error -71
[  100.727783][  T410] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  100.738077][  T419] usb 2-1: USB disconnect, device number 32
[  100.744523][  T410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.753642][  T410] usb 5-1: Product: syz
[  100.757913][  T410] usb 5-1: Manufacturer: syz
[  100.763360][  T410] usb 5-1: SerialNumber: syz
[  100.819517][  T447] usb 1-1: unable to get BOS descriptor or descriptor too short
[  100.827643][  T447] usb 1-1: not running at top speed; connect to a high speed hub
[  100.838303][  T447] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  100.847523][  T447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.855752][  T447] usb 1-1: Product: syz
[  100.860766][  T447] usb 1-1: Manufacturer: syz
[  100.865483][  T447] usb 1-1: SerialNumber: syz
[  100.971672][ T2502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'.
[  100.985611][  T410] usb 5-1: unit 4 not found!
[  101.001729][  T410] usb 5-1: USB disconnect, device number 3
[  101.138760][ T2526] overlayfs: missing 'workdir'
[  101.169245][   T36] audit: type=1400 audit(1788545629.274:430): avc:  denied  { accept } for  pid=2527 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  101.190991][  T447] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  101.199270][  T447] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  101.224610][  T447] usb 1-1: USB disconnect, device number 42
[  101.245901][  T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  101.279770][  T410] rust_binder: 2511: undelivered TRANSACTION_ERROR: 29201
[  101.485454][ T2541] kvm: pic: non byte write
[  101.490328][ T2541] kvm: pic: non byte write
[  101.495164][ T2541] kvm: pic: non byte write
[  101.504205][ T2541] kvm: pic: non byte write
[  101.523808][ T2541] kvm: pic: non byte write
[  101.529189][ T2541] kvm: pic: non byte write
[  101.538399][ T2541] kvm: pic: non byte write
[  101.551786][ T2541] kvm: pic: non byte write
[  101.559717][ T2541] kvm: pic: non byte write
[  101.564566][ T2541] kvm: pic: non byte write
[  102.167946][  T410] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  102.318020][  T447] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  102.322946][ T2586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.342298][ T2589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.349279][  T410] usb 1-1: Using ep0 maxpacket: 8
[  102.354366][ T2586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.365032][ T2589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.373120][  T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.393521][  T410] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  102.404543][  T410] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  102.413937][  T410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.427939][  T410] usb 1-1: Product: syz
[  102.432177][  T410] usb 1-1: Manufacturer: syz
[  102.439114][  T410] usb 1-1: SerialNumber: syz
[  102.469004][   T36] audit: type=1400 audit(1788545630.584:431): avc:  denied  { cmd } for  pid=2590 comm="syz.4.600" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  102.494164][  T447] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.514535][  T447] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  102.527807][  T447] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  102.537117][  T447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.548730][  T447] usb 2-1: config 0 descriptor??
[  102.555150][  T447] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  102.562729][   T36] audit: type=1400 audit(1788545630.664:432): avc:  denied  { getopt } for  pid=2593 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  102.584018][   T36] audit: type=1400 audit(1788545630.674:433): avc:  denied  { read } for  pid=2593 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  102.646907][ T2573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'.
[  102.659410][  T410] usb 1-1: unit 4 not found!
[  102.670142][  T410] usb 1-1: USB disconnect, device number 43
[  102.683363][  T705] udevd[705]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  102.848657][  T447] usb 2-1: USB disconnect, device number 33
[  102.898784][   T36] audit: type=1400 audit(1788545631.014:434): avc:  denied  { nlmsg_write } for  pid=2608 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  102.967461][   T36] audit: type=1400 audit(1788545631.074:435): avc:  denied  { getopt } for  pid=2614 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  102.968167][ T2615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2615 comm=syz.3.608
[  102.999475][ T2615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=2615 comm=syz.3.608
[  103.012146][  T420] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  103.022766][   T36] audit: type=1400 audit(1788545631.134:436): avc:  denied  { write } for  pid=2614 comm="syz.3.608" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  103.060156][ T2617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.069222][ T2617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.189405][  T420] usb 5-1: Using ep0 maxpacket: 32
[  103.202760][  T420] usb 5-1: config 6 has an invalid interface number: 20 but max is 0
[  103.211149][  T420] usb 5-1: config 6 has no interface number 0
[  103.217365][  T420] usb 5-1: config 6 interface 20 has no altsetting 0
[  103.225932][  T420] usb 5-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=4a.71
[  103.235370][  T420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.244154][  T420] usb 5-1: Product: syz
[  103.248509][  T420] usb 5-1: Manufacturer: syz
[  103.253216][  T420] usb 5-1: SerialNumber: syz
[  103.463591][  T420] usb 5-1: bad CDC descriptors
[  103.471934][  T420] cdc_acm 5-1:6.20: Zero length descriptor references
[  103.479438][  T420] cdc_acm 5-1:6.20: probe with driver cdc_acm failed with error -22
[  103.489501][  T420] usb 5-1: USB disconnect, device number 4
[  103.497944][  T447] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  103.657940][  T447] usb 1-1: Using ep0 maxpacket: 16
[  103.665579][  T447] usb 1-1: unable to get BOS descriptor or descriptor too short
[  103.674393][  T447] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  103.689064][  T447] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.698184][  T447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.706181][  T447] usb 1-1: Product: syz
[  103.710403][  T447] usb 1-1: Manufacturer: syz
[  103.715113][  T447] usb 1-1: SerialNumber: syz
[  103.924005][  T447] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  103.934972][  T447] usb 1-1: USB disconnect, device number 44
[  104.237938][  T420] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  104.387941][  T420] usb 5-1: Using ep0 maxpacket: 8
[  104.394405][  T420] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.404665][  T420] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  104.415337][  T420] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  104.424616][  T420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.432858][  T420] usb 5-1: Product: syz
[  104.437222][  T420] usb 5-1: Manufacturer: syz
[  104.442043][  T420] usb 5-1: SerialNumber: syz
[  104.567688][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  104.567706][   T36] audit: type=1400 audit(1788545632.674:439): avc:  denied  { listen } for  pid=2649 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  104.649523][ T2645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'.
[  104.665036][  T420] usb 5-1: unit 4 not found!
[  104.679377][  T420] usb 5-1: USB disconnect, device number 5
[  104.970857][ T2667] netlink: 72 bytes leftover after parsing attributes in process `syz.0.624'.
[  104.981851][   T36] audit: type=1400 audit(1788545633.094:440): avc:  denied  { read write } for  pid=2666 comm="syz.0.624" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  105.005783][   T36] audit: type=1400 audit(1788545633.094:441): avc:  denied  { open } for  pid=2666 comm="syz.0.624" path="/148/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  105.030525][   T36] audit: type=1400 audit(1788545633.094:442): avc:  denied  { ioctl } for  pid=2666 comm="syz.0.624" path="/148/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  105.150246][ T2680] tipc: Started in network mode
[  105.155256][ T2680] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  105.164489][ T2680] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  105.176670][ T2680] tipc: Enabled bearer <eth:dummy0>, priority 10
[  105.184981][ T2680] tipc: New replicast peer: 255.255.255.255
[  105.191529][ T2680] tipc: Enabled bearer <udp:syz2>, priority 10
[  105.256812][   T36] audit: type=1400 audit(1788545633.364:443): avc:  denied  { read append } for  pid=2685 comm="syz.1.631" name="file1" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.279913][   T36] audit: type=1400 audit(1788545633.364:444): avc:  denied  { open } for  pid=2685 comm="syz.1.631" path="/154/file1" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.316152][   T36] audit: type=1400 audit(1788545633.424:445): avc:  denied  { module_load } for  pid=2689 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  105.316178][ T2690] Invalid ELF header magic: != ELF
[  105.595903][ T2708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'.
[  106.105746][ T2715] kvm: kvm [2714]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x2e3
[  106.122783][ T2715] netlink: 'syz.0.641': attribute type 27 has an invalid length.
[  106.134880][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.142066][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.149447][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.156707][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.164752][ T2715] bridge0: left allmulticast mode
[  106.265140][ T2725] FAULT_INJECTION: forcing a failure.
[  106.265140][ T2725] name failslab, interval 1, probability 0, space 0, times 0
[  106.312334][ T2727] overlayfs: missing 'lowerdir'
[  106.334426][ T2729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'.
[  106.343559][ T2725] CPU: 0 UID: 0 PID: 2725 Comm: syz.4.645 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72
[  106.343599][ T2725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  106.343616][ T2725] Call Trace:
[  106.343624][ T2725]  <TASK>
[  106.343635][ T2725]  __dump_stack+0x21/0x30
[  106.343683][ T2725]  dump_stack_lvl+0x140/0x1c0
[  106.343718][ T2725]  ? __cfi_dump_stack_lvl+0x10/0x10
[  106.343756][ T2725]  dump_stack+0x19/0x20
[  106.343790][ T2725]  should_fail_ex+0x3c2/0x510
[  106.343820][ T2725]  should_failslab+0xac/0x100
[  106.343852][ T2725]  kmem_cache_alloc_noprof+0x42/0x410
[  106.343879][ T2725]  ? alloc_empty_file+0xbf/0x270
[  106.343913][ T2725]  ? _raw_spin_unlock+0x45/0x60
[  106.343952][ T2725]  alloc_empty_file+0xbf/0x270
[  106.343984][ T2725]  ? _raw_spin_unlock+0x45/0x60
[  106.344021][ T2725]  alloc_file_pseudo+0x142/0x1f0
[  106.344057][ T2725]  ? __cfi_alloc_file_pseudo+0x10/0x10
[  106.344092][ T2725]  ? _raw_spin_unlock+0x45/0x60
[  106.344130][ T2725]  anon_inode_getfile+0xaa/0x190
[  106.344166][ T2725]  do_signalfd4+0x1e9/0x490
[  106.344210][ T2725]  ? __kasan_check_write+0x18/0x20
[  106.344236][ T2725]  __x64_sys_signalfd+0x132/0x180
[  106.344272][ T2725]  ? __cfi___x64_sys_signalfd+0x10/0x10
[  106.344315][ T2725]  ? switch_fpu_return+0x12/0x20
[  106.344351][ T2725]  x64_sys_call+0x316/0x2ee0
[  106.344374][ T2725]  do_syscall_64+0x57/0xf0
[  106.344410][ T2725]  ? clear_bhb_loop+0x50/0xa0
[  106.344440][ T2725]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  106.344467][ T2725] RIP: 0033:0x7f657779e159
[  106.344489][ T2725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.344511][ T2725] RSP: 002b:00007f657861c028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  106.344538][ T2725] RAX: ffffffffffffffda RBX: 00007f6577a25fa0 RCX: 00007f657779e159
[  106.344557][ T2725] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff
[  106.344575][ T2725] RBP: 00007f6577835024 R08: 0000000000000000 R09: 0000000000000000
[  106.344591][ T2725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.344606][ T2725] R13: 00007f6577a26038 R14: 00007f6577a25fa0 R15: 00007ffefa42e5f8
[  106.344629][ T2725]  </TASK>
[  106.639504][ T2729] netlink: 1 bytes leftover after parsing attributes in process `syz.0.647'.
[  106.661917][ T2727] overlayfs: failed to clone upperpath
[  106.720086][   T31] tipc: Node number set to 4269801491
[  106.733518][ T2719] serio: Serial port ttynull
[  106.754209][   T36] audit: type=1400 audit(1788545634.834:446): avc:  denied  { connect } for  pid=2736 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  106.774002][   T36] audit: type=1400 audit(1788545634.844:447): avc:  denied  { shutdown } for  pid=2717 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  106.794525][   T36] audit: type=1326 audit(1788545634.864:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2739 comm="syz.0.650" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c36f9e159 code=0x0
[  107.057622][ T2752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.066635][ T2752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.075910][ T2752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'.
[  107.321070][ T2767] rust_binder: Error in use_page_slow: ESRCH
[  107.321092][ T2767] rust_binder: use_range failure ESRCH
[  107.327235][ T2767] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  107.332924][ T2767] rust_binder: Failure in copy_transaction_data: ESRCH
[  107.340983][ T2767] rust_binder: 2766:2767 transaction call to 2766:0 failed ESRCH, code 0 size 0-0
[  107.358309][  T420] rust_binder: 2766: undelivered TRANSACTION_ERROR: 29201
[  107.380663][ T2771] overlayfs: failed to resolve './bus': -2
[  107.669065][ T2786] KVM: debugfs: duplicate directory 2786-6
[  107.843893][ T2798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.852644][ T2798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.861788][ T2798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.671'.
[  107.906795][ T2809] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=2809 comm=syz.0.674
[  107.920139][ T2809] Bluetooth: ISO socket layer initialized
[  108.012161][ T2818] overlayfs: failed to clone lowerpath
[  108.177934][  T447] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  108.329110][  T447] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.340243][  T447] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.350123][  T447] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.363235][  T447] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  108.372403][  T447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.382824][  T447] usb 1-1: config 0 descriptor??
[  108.657965][ T2853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.666552][ T2853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.678082][ T2853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.687046][ T2853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.793012][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.801276][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.809648][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.818100][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.826216][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.834371][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.842692][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.850848][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.859060][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.867176][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.875318][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.883456][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.891602][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.899787][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.908221][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.916328][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.924476][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.932714][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.940904][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.949046][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.957158][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.965320][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.973567][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  108.981725][  T447] logitech-djreceiver 0003:046D:C513.0008: unknown main item tag 0x0
[  109.003823][  T447] usb 1-1: USB disconnect, device number 45
[  109.273655][ T2857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.282354][ T2857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.657953][  T410] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  110.807985][  T410] usb 1-1: Using ep0 maxpacket: 8
[  110.819867][  T410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.831139][  T410] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  110.842077][  T410] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  110.851258][  T410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.859334][  T410] usb 1-1: Product: syz
[  110.863640][  T410] usb 1-1: Manufacturer: syz
[  110.868299][  T410] usb 1-1: SerialNumber: syz
[  111.076039][ T2870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'.
[  111.088763][  T410] usb 1-1: unit 4 not found!
[  111.097118][  T410] usb 1-1: USB disconnect, device number 46
[  111.108642][  T705] udevd[705]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  111.189964][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  111.189983][   T36] audit: type=1400 audit(1788545639.304:452): avc:  denied  { connect } for  pid=2884 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  111.190413][ T2885] SELinux:  Context }-+]-�*!%##+!]#,! is not valid (left unmapped).
[  111.196367][   T36] audit: type=1400 audit(1788545639.304:453): avc:  denied  { relabelfrom } for  pid=2884 comm="syz.1.703" name="PACKET" dev="sockfs" ino=34878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  111.247191][   T36] audit: type=1400 audit(1788545639.324:454): avc:  denied  { relabelto } for  pid=2884 comm="syz.1.703" name="PACKET" dev="sockfs" ino=34878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon=7D2D2B5D2D892A212523232B215D232C21
[  111.292915][ T2890] fuse: Bad value for 'user_id'
[  111.298023][ T2890] fuse: Bad value for 'user_id'
[  111.304186][   T36] audit: type=1326 audit(1788545639.414:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2889 comm="syz.1.705" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6db9e159 code=0x7ffc0000
[  111.329778][   T36] audit: type=1326 audit(1788545639.414:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2889 comm="syz.1.705" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6db9e159 code=0x7ffc0000
[  111.355151][   T36] audit: type=1326 audit(1788545639.414:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2889 comm="syz.1.705" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde6db9e159 code=0x7ffc0000
[  111.371427][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.386224][   T36] audit: type=1326 audit(1788545639.414:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2889 comm="syz.1.705" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6db9e159 code=0x7ffc0000
[  111.410403][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.414017][   T36] audit: type=1326 audit(1788545639.414:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2889 comm="syz.1.705" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fde6db9e159 code=0x7ffc0000
[  111.434259][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.446404][   T36] audit: type=1326 audit(1788545639.414:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2889 comm="syz.1.705" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6db9e159 code=0x7ffc0000
[  111.478317][   T36] audit: type=1326 audit(1788545639.414:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2889 comm="syz.1.705" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde6db5e98e code=0x7ffc0000
[  111.480164][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.511442][ T2893] netlink: 2 bytes leftover after parsing attributes in process `syz.4.704'.
[  111.520704][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.528479][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.535979][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.543744][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.551258][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.558870][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.566431][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.574096][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.581681][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.589546][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.597094][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.604701][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.612423][  T410] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  111.629272][  T410] hid-generic 0006:0008:0008.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1
[  111.675826][ T2895] fido_id[2895]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  111.696147][ T2900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.706458][ T2900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.876137][ T2919] netlink: 964 bytes leftover after parsing attributes in process `syz.1.713'.
[  111.901096][ T2923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'.
[  112.129452][ T2937] random: crng reseeded on system resumption
[  112.157126][ T2937] binder: Unknown parameter 'bal'
[  112.464211][ T2953] netlink: 92 bytes leftover after parsing attributes in process `syz.3.726'.
[  112.507938][  T422] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  112.515396][ T2958] FAULT_INJECTION: forcing a failure.
[  112.515396][ T2958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.515475][ T2958] CPU: 0 UID: 0 PID: 2958 Comm: syz.0.728 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72
[  112.515556][ T2958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.515610][ T2958] Call Trace:
[  112.515618][ T2958]  <TASK>
[  112.515648][ T2958]  __dump_stack+0x21/0x30
[  112.515753][ T2958]  dump_stack_lvl+0x140/0x1c0
[  112.515829][ T2958]  ? __cfi_dump_stack_lvl+0x10/0x10
[  112.515922][ T2958]  dump_stack+0x19/0x20
[  112.516006][ T2958]  should_fail_ex+0x3c2/0x510
[  112.516079][ T2958]  should_fail+0xf/0x20
[  112.516134][ T2958]  should_fail_usercopy+0x1e/0x30
[  112.516206][ T2958]  _copy_from_user+0x20/0xa0
[  112.516307][ T2958]  pending_reads_dispatch_ioctl+0x561/0x2080
[  112.516395][ T2958]  ? proc_fail_nth_write+0x184/0x220
[  112.516491][ T2958]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  112.516575][ T2958]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  112.516671][ T2958]  ? selinux_file_ioctl+0x732/0x1480
[  112.516726][ T2958]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  112.516781][ T2958]  ? __cfi_vfs_write+0x10/0x10
[  112.516844][ T2958]  ? __kasan_check_write+0x18/0x20
[  112.516907][ T2958]  ? mutex_unlock+0x90/0x240
[  112.516985][ T2958]  ? __cfi_mutex_unlock+0x10/0x10
[  112.517086][ T2958]  ? __fget_files+0x2bc/0x330
[  112.517158][ T2958]  ? bpf_lsm_file_ioctl+0xd/0x20
[  112.517231][ T2958]  ? security_file_ioctl+0x3e/0x110
[  112.517293][ T2958]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  112.517386][ T2958]  __se_sys_ioctl+0x126/0x1b0
[  112.517452][ T2958]  __x64_sys_ioctl+0x7f/0xa0
[  112.517523][ T2958]  x64_sys_call+0x1878/0x2ee0
[  112.517577][ T2958]  do_syscall_64+0x57/0xf0
[  112.517669][ T2958]  ? clear_bhb_loop+0x50/0xa0
[  112.517741][ T2958]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  112.517816][ T2958] RIP: 0033:0x7f0c36f9e159
[  112.517855][ T2958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.517907][ T2958] RSP: 002b:00007f0c37eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  112.517970][ T2958] RAX: ffffffffffffffda RBX: 00007f0c37225fa0 RCX: 00007f0c36f9e159
[  112.518013][ T2958] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004
[  112.518062][ T2958] RBP: 00007f0c37eaf090 R08: 0000000000000000 R09: 0000000000000000
[  112.518102][ T2958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.518137][ T2958] R13: 00007f0c37226038 R14: 00007f0c37225fa0 R15: 00007ffc9a8b46b8
[  112.518189][ T2958]  </TASK>
[  112.799895][ T2963] ------------[ cut here ]------------
[  112.805432][ T2963] WARNING: CPU: 1 PID: 2963 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0
[  112.815014][ T2963] Modules linked in:
[  112.819083][ T2963] CPU: 1 UID: 0 PID: 2963 Comm: syz.3.730 Not tainted syzkaller #0 a94c0ccc1001594cac83a8f4adefd4b76cd2ae72
[  112.830652][ T2963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.840914][ T2963] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0
[  112.847006][ T2963] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 05 cb 0b 06 00 0f 85 c2 00 00 00 c6 05 f8 ca 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24
[  112.866860][ T2963] RSP: 0018:ffffc9000cac7980 EFLAGS: 00010246
[  112.873028][ T2963] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000
[  112.881146][ T2963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000cac7a38
[  112.889230][ T2963] RBP: ffffc9000cac7aa8 R08: ffffc9000cac7a37 R09: 0000000000000000
[  112.897311][ T2963] R10: ffffc9000cac7a20 R11: fffff52001958f47 R12: ffffc9000cac79c0
[  112.905399][ T2963] R13: dffffc0000000000 R14: 1ffff92001958f34 R15: 0000000000000000
[  112.913745][ T2963] FS:  00007efcce7c26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  112.922823][ T2963] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.929528][ T2963] CR2: 0000200000001000 CR3: 000000013b7d2000 CR4: 00000000003526b0
[  112.937565][ T2963] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  112.945640][ T2963] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  112.953706][ T2963] Call Trace:
[  112.957028][ T2963]  <TASK>
[  112.960044][ T2963]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  112.965830][ T2963]  ? try_to_wake_up+0x119e/0x1fd0
[  112.970941][ T2963]  ? plist_check_list+0x2a8/0x2c0
[  112.976023][ T2963]  ? pending_reads_dispatch_ioctl+0xc86/0x2080
[  112.982326][ T2963]  ___kmalloc_large_node+0x81/0x220
[  112.987579][ T2963]  ? pending_reads_dispatch_ioctl+0xc86/0x2080
[  112.993898][ T2963]  __kmalloc_large_node_noprof+0x1e/0xd0
[  112.999610][ T2963]  ? pending_reads_dispatch_ioctl+0xc86/0x2080
[  113.005839][ T2963]  __kmalloc_noprof+0x326/0x510
[  113.010816][ T2963]  pending_reads_dispatch_ioctl+0xc86/0x2080
[  113.016860][ T2963]  ? __call_rcu_common+0x53c/0x710
[  113.022171][ T2963]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  113.028688][ T2963]  ? selinux_file_ioctl+0x732/0x1480
[  113.034021][ T2963]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  113.039667][ T2963]  ? do_futex+0x37d/0x510
[  113.044051][ T2963]  ? percpu_counter_add_batch+0x105/0x1a0
[  113.049897][ T2963]  ? __cfi_do_futex+0x10/0x10
[  113.054689][ T2963]  ? __fget_files+0x2bc/0x330
[  113.059461][ T2963]  ? bpf_lsm_file_ioctl+0xd/0x20
[  113.064439][ T2963]  ? security_file_ioctl+0x3e/0x110
[  113.069704][ T2963]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  113.076190][ T2963]  __se_sys_ioctl+0x126/0x1b0
[  113.080949][ T2963]  __x64_sys_ioctl+0x7f/0xa0
[  113.085694][ T2963]  x64_sys_call+0x1878/0x2ee0
[  113.090451][ T2963]  do_syscall_64+0x57/0xf0
[  113.095030][ T2963]  ? clear_bhb_loop+0x50/0xa0
[  113.099787][ T2963]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  113.105720][ T2963] RIP: 0033:0x7efccd99e159
[  113.110285][ T2963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.129958][ T2963] RSP: 002b:00007efcce7c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.138500][ T2963] RAX: ffffffffffffffda RBX: 00007efccdc25fa0 RCX: 00007efccd99e159
[  113.146514][ T2963] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004
[  113.154615][ T2963] RBP: 00007efccda35024 R08: 0000000000000000 R09: 0000000000000000
[  113.162762][ T2963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.170810][ T2963] R13: 00007efccdc26038 R14: 00007efccdc25fa0 R15: 00007fffa763a128
[  113.178852][ T2963]  </TASK>
[  113.181904][ T2963] ---[ end trace 0000000000000000 ]---
[  113.339233][  T422] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.349490][  T422] usb 5-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  113.360426][  T422] usb 5-1: config 1 interface 1 has no altsetting 1
[  113.368661][  T422] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[  113.377766][  T422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.385858][  T422] usb 5-1: Product: syz
[  113.390117][  T422] usb 5-1: Manufacturer: syz
[  113.394749][  T422] usb 5-1: SerialNumber: syz
[  113.603254][  T422] usb 5-1: 1:65 : no or invalid class specific endpoint descriptor
[  113.615477][  T422] usb 5-1: USB disconnect, device number 6
[  113.630433][  T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory