last executing test programs:

1m35.734998941s ago: executing program 2 (id=157):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x2, 0xffffffff, 0x7, 0x7f, 0x1000, 0x6})
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x6, "", [{{0x9, 0x4, 0x0, 0x58, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0xa, 0x9}}}}}]}}]}}, 0x0)
read$rfkill(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40122c0000002c22e718542fa7868808ff"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1m34.153443936s ago: executing program 2 (id=205):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socket$can_raw(0x1d, 0x3, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x7000000, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m34.100341777s ago: executing program 2 (id=206):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1m33.262885056s ago: executing program 2 (id=220):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d", 0x21}], 0x1}}], 0x1, 0x4046040)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[{0x3, 0x6, 0xf8, 0x5d0aebcf}]}, 0x4)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x137)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x2, 0xf43, &(0x7f0000000000)=0x78})
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fdec, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0x5, 0x0, 0xf, 0x1a, 0xf2, 0xe, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x84b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x3, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x9, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x668, 0x4, 0x9, 0x15, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x2888, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x80000000, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xfdffffff, 0x4, 0x200000ce, 0x6, 0xfffffffc, 0x1, 0xa, 0x3, 0x0, 0x9, 0x10000009, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10080, 0x0, 0x80001ffe, 0xa, 0x8000, 0x10004, 0x10, 0x1a, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x1000000, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x6, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89ab, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x32, 0xae, 0x7, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x10001, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x7, 0x3, 0x7, 0xa99, 0x9, 0x8, 0x2000001, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x0, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000004, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0xff, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x8, 0x1ff, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xfff, 0x5, 0x8, 0xffffc487, 0x204, 0x10002, 0x81, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x1, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1002, 0x8, 0x62f2f805, 0x5, 0x0, 0xffffffff, 0x2, 0x7f, 0x6, 0xc, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0xb5, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x670b, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x3, 0x7, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x9, 0x9e95, 0x9, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x3, 0xfffffb31, 0xb, 0x5, 0x5, 0x8, 0x1, 0x6, 0x1, 0x103, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x5, 0xfffffff8, 0x2, 0x9b3, 0x7fff, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x4, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x2, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x3, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0xffffffff, 0x6, 0x7, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x9, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x1, 0x4, 0x5, 0x5, 0xa4, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x7, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x3, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffff6, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x5, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x2000007, 0x0, 0x7, 0x8, 0x10000, 0x3f, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x1fd, 0x9, 0x3, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x3, 0x10000, 0x9, 0x40, 0x9, 0x40b6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x1, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x2]})
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000002000)=@add_del={0x2, &(0x7f0000001fc0)='veth1_to_hsr\x00'})
openat$kvm(0xffffffffffffff9c, &(0x7f0000002040), 0x80000, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f)

1m33.185070488s ago: executing program 2 (id=222):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x20, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1m32.980343753s ago: executing program 2 (id=228):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1m32.957337873s ago: executing program 32 (id=228):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1m7.054103575s ago: executing program 1 (id=533):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m6.181299495s ago: executing program 1 (id=534):
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000000280), 0x0, 0x0)

1m6.132326245s ago: executing program 1 (id=536):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1m6.013573228s ago: executing program 1 (id=537):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d", 0x21}], 0x1}}], 0x1, 0x4046040)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[{0x3, 0x6, 0xf8, 0x5d0aebcf}]}, 0x4)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x137)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x2, 0xf43, &(0x7f0000000000)=0x78})
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fdec, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0x5, 0x0, 0xf, 0x1a, 0xf2, 0xe, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x84b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x3, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x9, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x668, 0x4, 0x9, 0x15, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x2888, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x80000000, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xfdffffff, 0x4, 0x200000ce, 0x6, 0xfffffffc, 0x1, 0xa, 0x3, 0x0, 0x9, 0x10000009, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10080, 0x0, 0x80001ffe, 0xa, 0x8000, 0x10004, 0x10, 0x1a, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x1000000, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x6, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89ab, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x32, 0xae, 0x7, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x10001, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x7, 0x3, 0x7, 0xa99, 0x9, 0x8, 0x2000001, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x0, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000004, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0xff, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x8, 0x1ff, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xfff, 0x5, 0x8, 0xffffc487, 0x204, 0x10002, 0x81, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x1, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1002, 0x8, 0x62f2f805, 0x5, 0x0, 0xffffffff, 0x2, 0x7f, 0x6, 0xc, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0xb5, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x670b, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x3, 0x7, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x9, 0x9e95, 0x9, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x3, 0xfffffb31, 0xb, 0x5, 0x5, 0x8, 0x1, 0x6, 0x1, 0x103, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x5, 0xfffffff8, 0x2, 0x9b3, 0x7fff, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x4, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x2, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x3, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0xffffffff, 0x6, 0x7, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x9, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x1, 0x4, 0x5, 0x5, 0xa4, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x7, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x3, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffff6, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x5, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x2000007, 0x0, 0x7, 0x8, 0x10000, 0x3f, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x1fd, 0x9, 0x3, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x3, 0x10000, 0x9, 0x40, 0x9, 0x40b6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x1, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x2]})
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000002000)=@add_del={0x2, &(0x7f0000001fc0)='veth1_to_hsr\x00'})
openat$kvm(0xffffffffffffff9c, &(0x7f0000002040), 0x80000, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f)

1m5.946660709s ago: executing program 1 (id=538):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1m5.788410453s ago: executing program 1 (id=539):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
r1 = gettid()
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x439})

1m5.765020644s ago: executing program 33 (id=539):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
r1 = gettid()
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x439})

3.632351228s ago: executing program 0 (id=1305):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000290005181b01ccae12fb00000a"], 0x164}}, 0x40014)

3.632168148s ago: executing program 0 (id=1306):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="487fffffff010904000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0)

3.631811268s ago: executing program 0 (id=1307):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

3.626048009s ago: executing program 0 (id=1308):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5)
unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0xfb9, 0x50003, 0x10, 0x20000cea, 0x1000, 0x8, 0x10, 0x7, 0x8000008000000800, 0x77, 0x1, 0x0, 0x800b, 0xffffffffffffffff, 0x6], 0x1, 0x4092})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.54744373s ago: executing program 0 (id=1309):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000300)={0x20, 0x10, 0x6, "5fc32f2b6213"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x6, 0x9e, {0x9e, 0x3b, "69798b7f8c76e37d61bd0dd7a6091b4f11c7eb3fabf8192ee9e5aee967fe0fa8f7ab278ff67bf4752a1a371e30435f8d11919bb41fd2fc5bf6bd182d0efcb4d976dbb1fa94822a1c5e5d945d39c52d99ae3a2ea0ab9fbaf21c3c36a268edf2098558b8b93020495348856c1dba51b0fe5a5ab3bc10d12543b74ca5920e119b359d010a63dd5a080e7d6cc712a4638d4ab6e018a7da529716562cd406"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x9, 0xba, "b6dcf0fe0bc369dabcfdb998045c202f0a21e002ec28e2dec44ded1ef82684e226727742945108e19b6be680f164813059db0aecb046e4a44b48104f1f574ae7a262cf19cd193cd56faa194f73ddd9f8e047ba21b8d89a26eeec787c7e4311c610d09974cde174098630e4978af58797b78fdbe4bb957075bc69622229867d43c58074ef160e02f2ccb831612e07eaf6faa949d4cab4a5cb5c253638a9cf0f9ca2d65d77298958281922e7dab33ca840c51701da43380f1008e1"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "1a2a"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "ac124b"}, &(0x7f0000000380)=ANY=[@ANYBLOB="20810200000000e8"], &(0x7f00000003c0)={0x20, 0x84, 0x1, "f9"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "791f74"}})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

3.12434272s ago: executing program 4 (id=1312):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0)

3.068388591s ago: executing program 4 (id=1313):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x5100, [{0x98b}]})

3.057536441s ago: executing program 4 (id=1314):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$uac1(0x5, 0xa7, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0xc0, &(0x7f0000000840)=ANY=[@ANYBLOB="c00326dfac275f5fb98c7a18998de4447977c946ad4b22a5ea0da40ceb1eee5a98144ebf9e659a8e22491a67df4df43335b07bd95ea210887a4de6d236fd15d741501f0fdcda91c3cd1afd3235a25125bca7c068cad8c7879891cefb99c9793a2be083cb9573bfc710e4f9a239652533f71706a8a944770446636f972b1076080561f01cf951dce0ed23991f1671471939d12b277b5752d62826135b6344edc116548763abe031155cc26b461cd9516269778f0e341820449eb67080f5379822019b8a7bbf5ef31f"]}]})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000922000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000, 0x2, 0x2})
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19)
close_range(0xffffffffffffffff, r0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x3, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))

1.719287811s ago: executing program 5 (id=1330):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143802, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000852}, 0x800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r1 = creat(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0)
write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x10, r0, 0xb522d000)

1.595013544s ago: executing program 5 (id=1331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1, 0x0, 0xffef}, 0x1c}}, 0x0)

1.594695754s ago: executing program 5 (id=1332):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
read(r0, &(0x7f0000000a00)=""/9, 0x9)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18)
mount$cgroup(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x208800b, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0xc000)
mount_setattr(0xffffffffffffffff, &(0x7f0000000b40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9000, &(0x7f0000001b40)={0xf4, 0x100081, 0x20000}, 0x20)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETGROUP(r5, 0x800454e1, 0xee01)
listen(r4, 0x4)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x8c4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.412923778s ago: executing program 5 (id=1335):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x1, 0x900}, {0x1d, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x7ffffcb9}]})
socket$inet(0x2, 0x3, 0x1)

1.356189669s ago: executing program 5 (id=1336):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1.31897607s ago: executing program 5 (id=1337):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f00000004c0)={0x0, r1, r2, 0x8, 0x5, '\x00', {0xc0, 0x1000, 0x26, 0xfffffffa, 0x2, 0x9, 0x401, 0x100, {0x1000000000000000, 0x1}, {0x8001, 0xb4}, {0x7fffffff, 0x5}, 0x5, 0x3, 0x3, 0x428e, 0x78e1, 0x4, 0x8, 0x2, 0x80, 0x8, '\x00', 0x200c, 0x4, 0x1, 0x8}})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r5, 0x3, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194)
r6 = socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f000000c3c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r9, 0x0, 0x0, 0xf, 0x0, 0x0, r9}])
sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0)

583.371147ms ago: executing program 3 (id=1341):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001b640)=ANY=[@ANYBLOB="300000001900010000000000fedbdf250a0109001000128004972ae1348d3621010000000c00099a0800ce8004003e80"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_clone3(&(0x7f0000000340)={0x105480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)) (async)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
splice(r1, 0x0, r2, 0x0, 0x1, 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0088a80180c2000003cd1008a2dc5886dd61fdeb4a00d000d0fe8000000000000000000000000000aa00000000000000000000ffffac1e00013219000000000005"], 0x10a) (async)
write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0088a80180c2000003cd1008a2dc5886dd61fdeb4a00d000d0fe8000000000000000000000000000aa00000000000000000000ffffac1e00013219000000000005"], 0x10a)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f00000004c0)=0x79, 0x4)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28)

534.721378ms ago: executing program 0 (id=1342):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
open(&(0x7f0000000200)='./file1\x00', 0x100000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0xa, 0x38, "5ee185c75c92fd6bb4f9c2bbc0b1c79d316f2ff3ca7c4ce5ceb8d8b0ccb7c9285a0998d42cafbac85d0d63e40a22f2501e07c3e753b65c1e"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000980)={0x40, 0x13, 0x5, "4af1552f8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)={0x0, 0xe, 0x4, "db66470f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1909})

534.238768ms ago: executing program 3 (id=1343):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0))

495.689609ms ago: executing program 3 (id=1344):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
read(r0, &(0x7f0000000a00)=""/9, 0x9)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18)
mount$cgroup(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x208800b, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0xc000)
mount_setattr(0xffffffffffffffff, &(0x7f0000000b40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9000, &(0x7f0000001b40)={0xf4, 0x100081, 0x20000}, 0x20)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETGROUP(r5, 0x800454e1, 0xee01)
listen(r4, 0x4)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x8c4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

366.960632ms ago: executing program 3 (id=1345):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

340.716242ms ago: executing program 3 (id=1346):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9006c0d00000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000031"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd2c, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

333.878593ms ago: executing program 3 (id=1347):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80500, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000200)={0x80, 0x5, 0x9, 0xf692, 0x7, "0100f5000000000000000000800000e4018780"})
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x1)
readv(r3, &(0x7f0000002280)=[{&(0x7f0000000280)=""/183, 0xb7}], 0x1)
r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRESHEX=r7, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r3], 0x159}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

313.16µs ago: executing program 4 (id=1348):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0xf0ff, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x7, 0x0, 0x60000, 0x0, 0x2000000001}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0)

138.57µs ago: executing program 4 (id=1349):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4)
ioprio_set$pid(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000200)=0x6, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000040), 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
futex_waitv(&(0x7f0000000ac0)=[{0x8000000000000001, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r4, 0x28, 0x6, 0x0, &(0x7f0000000000))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x14, 0x2, 0x2, 0x801, 0x0, 0x0, {0xb, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x800)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x4, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4)

0s ago: executing program 4 (id=1350):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000300)={0x20, 0x10, 0x6, "5fc32f2b6213"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x6, 0x9e, {0x9e, 0x3b, "69798b7f8c76e37d61bd0dd7a6091b4f11c7eb3fabf8192ee9e5aee967fe0fa8f7ab278ff67bf4752a1a371e30435f8d11919bb41fd2fc5bf6bd182d0efcb4d976dbb1fa94822a1c5e5d945d39c52d99ae3a2ea0ab9fbaf21c3c36a268edf2098558b8b93020495348856c1dba51b0fe5a5ab3bc10d12543b74ca5920e119b359d010a63dd5a080e7d6cc712a4638d4ab6e018a7da529716562cd406"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x9, 0xba, "b6dcf0fe0bc369dabcfdb998045c202f0a21e002ec28e2dec44ded1ef82684e226727742945108e19b6be680f164813059db0aecb046e4a44b48104f1f574ae7a262cf19cd193cd56faa194f73ddd9f8e047ba21b8d89a26eeec787c7e4311c610d09974cde174098630e4978af58797b78fdbe4bb957075bc69622229867d43c58074ef160e02f2ccb831612e07eaf6faa949d4cab4a5cb5c253638a9cf0f9ca2d65d77298958281922e7dab33ca840c51701da43380f1008e1"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "1a2a"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "ac124b"}, &(0x7f0000000380)=ANY=[@ANYBLOB="20810200000000e8"], &(0x7f00000003c0)={0x20, 0x84, 0x1, "f9"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "791f74"}})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

] usb 6-1: device descriptor read/8, error -71
[   84.987814][   T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   85.137789][   T31] usb 1-1: Using ep0 maxpacket: 32
[   85.143957][   T31] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[   85.152264][   T31] usb 1-1: config 0 has no interface number 0
[   85.158466][   T31] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   85.169828][   T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   85.178962][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.186938][   T31] usb 1-1: Product: syz
[   85.191198][   T31] usb 1-1: Manufacturer: syz
[   85.195787][   T31] usb 1-1: SerialNumber: syz
[   85.201052][   T31] usb 1-1: config 0 descriptor??
[   85.206273][ T2382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   85.213483][  T392] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   85.238811][  T392] usb 6-1: device descriptor read/8, error -71
[   85.257941][  T411] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[   85.368829][  T392] usb 6-1: device descriptor read/8, error -71
[   85.409039][  T411] usb 5-1: unable to get BOS descriptor or descriptor too short
[   85.418099][  T411] usb 5-1: not running at top speed; connect to a high speed hub
[   85.418498][ T2382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   85.427894][  T411] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40
[   85.442331][  T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.450342][  T411] usb 5-1: Product: syz
[   85.454504][  T411] usb 5-1: Manufacturer: syz
[   85.459100][  T411] usb 5-1: SerialNumber: syz
[   85.477903][  T392] usb usb6-port1: unable to enumerate USB device
[   85.677445][  T411] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[   85.688457][  T411] usb 5-1: USB disconnect, device number 26
[   85.844874][   T31] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   85.855099][   T31] asix 1-1:0.188: probe with driver asix failed with error -32
[   85.863778][   T31] usb 1-1: USB disconnect, device number 30
[   86.062664][   T36] audit: type=1400 audit(1784809596.740:323): avc:  denied  { create } for  pid=2410 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   86.082612][   T36] audit: type=1400 audit(1784809596.770:324): avc:  denied  { sys_admin } for  pid=2410 comm="syz.5.818" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   86.196369][   T36] audit: type=1400 audit(1784809596.870:325): avc:  denied  { write } for  pid=2417 comm="syz.4.821" name="ptype" dev="proc" ino=4026532662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   86.197906][ T2418] netlink: 'syz.4.821': attribute type 25 has an invalid length.
[   86.377783][    T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[   86.489861][  T392] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[   86.541370][    T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[   86.554141][    T9] usb 6-1: config 0 has no interface number 0
[   86.560454][    T9] usb 6-1: config 0 interface 41 has no altsetting 0
[   86.571927][    T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   86.581364][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.589396][    T9] usb 6-1: Product: syz
[   86.593883][    T9] usb 6-1: Manufacturer: syz
[   86.598620][    T9] usb 6-1: SerialNumber: syz
[   86.603721][    T9] usb 6-1: config 0 descriptor??
[   86.637836][  T392] usb 5-1: device descriptor read/64, error -71
[   86.683197][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   86.683212][   T36] audit: type=1400 audit(1784809597.360:329): avc:  denied  { bind } for  pid=2442 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.877818][  T392] usb 5-1: device descriptor read/64, error -71
[   86.947797][  T411] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[   87.077791][  T411] usb 4-1: device descriptor read/64, error -71
[   87.117782][  T392] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[   87.247893][  T392] usb 5-1: device descriptor read/64, error -71
[   87.317802][  T411] usb 4-1: device descriptor read/64, error -71
[   87.487807][  T392] usb 5-1: device descriptor read/64, error -71
[   87.557794][  T411] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[   87.597883][  T392] usb usb5-port1: attempt power cycle
[   87.687793][  T411] usb 4-1: device descriptor read/64, error -71
[   87.927803][  T411] usb 4-1: device descriptor read/64, error -71
[   87.937787][  T392] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[   87.958744][  T392] usb 5-1: device descriptor read/8, error -71
[   88.037864][  T411] usb usb4-port1: attempt power cycle
[   88.098772][  T392] usb 5-1: device descriptor read/8, error -71
[   88.297797][   T31] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[   88.337806][  T392] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[   88.358768][  T392] usb 5-1: device descriptor read/8, error -71
[   88.377794][  T411] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[   88.398755][  T411] usb 4-1: device descriptor read/8, error -71
[   88.449022][   T31] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   88.459152][   T31] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   88.473300][   T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   88.482356][   T31] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   88.490724][   T31] usb 1-1: Product: syz
[   88.494877][   T31] usb 1-1: Manufacturer: syz
[   88.498822][  T392] usb 5-1: device descriptor read/8, error -71
[   88.507329][   T31] hub 1-1:4.0: bad descriptor, ignoring hub
[   88.513290][   T31] hub 1-1:4.0: probe with driver hub failed with error -5
[   88.520635][   T31] usbhid 1-1:4.0: couldn't find an input interrupt endpoint
[   88.528941][  T411] usb 4-1: device descriptor read/8, error -71
[   88.607892][  T392] usb usb5-port1: unable to enumerate USB device
[   88.618050][    T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   88.628760][    T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[   88.638456][    T9] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[   88.647578][    T9] usb 6-1: USB disconnect, device number 11
[   88.736703][ T2452] fuse: Unknown parameter '0x0000000000000003'
[   88.767827][  T411] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[   88.791130][  T411] usb 4-1: device descriptor read/8, error -71
[   88.794908][ T2460] program syz.5.837 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.819572][  T392] usb 1-1: USB disconnect, device number 31
[   88.918829][  T411] usb 4-1: device descriptor read/8, error -71
[   89.027877][  T411] usb usb4-port1: unable to enumerate USB device
[   89.216540][ T2473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'.
[   89.509320][   T36] audit: type=1326 audit(1784809600.190:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2506 comm="syz.4.856" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f2e99de99 code=0x0
[   90.077799][  T411] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   90.227827][  T411] usb 6-1: Using ep0 maxpacket: 32
[   90.233986][  T411] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[   90.242125][  T411] usb 6-1: config 0 has no interface number 0
[   90.248219][  T411] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   90.259166][  T411] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[   90.268980][  T411] usb 6-1: config 0 interface 85 has no altsetting 0
[   90.276946][  T411] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   90.287453][  T411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.295621][  T411] usb 6-1: Product: syz
[   90.299832][  T411] usb 6-1: Manufacturer: syz
[   90.304436][  T411] usb 6-1: SerialNumber: syz
[   90.309574][  T411] usb 6-1: config 0 descriptor??
[   90.516201][ T2527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.525080][ T2527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.677797][  T392] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   90.800639][  T411] usb 6-1: USB disconnect, device number 12
[   90.837786][  T392] usb 1-1: Using ep0 maxpacket: 32
[   90.844552][  T392] usb 1-1: unable to get BOS descriptor or descriptor too short
[   90.852258][  T392] usb 1-1: too many configurations: 17, using maximum allowed: 8
[   90.866197][  T392] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   90.875286][  T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.883287][  T392] usb 1-1: Product: syz
[   90.887442][  T392] usb 1-1: Manufacturer: syz
[   90.892056][  T392] usb 1-1: SerialNumber: syz
[   91.057838][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[   91.104137][  T392] usb 1-1: unit 0 not found!
[   91.109892][  T392] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   91.119912][  T392] usb 1-1: unit 0 not found!
[   91.125448][  T392] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[   91.135358][  T392] usb 1-1: unit 0 not found!
[   91.142775][  T392] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[   91.153940][  T392] usb 1-1: USB disconnect, device number 32
[   91.163018][  T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   91.187782][    T9] usb 4-1: device descriptor read/64, error -71
[   91.371766][ T2571] netlink: 'syz.4.878': attribute type 40 has an invalid length.
[   91.437807][    T9] usb 4-1: device descriptor read/64, error -71
[   91.687788][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[   91.817792][    T9] usb 4-1: device descriptor read/64, error -71
[   91.847798][  T392] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   91.998802][  T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.009734][  T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.019472][  T392] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   92.028538][  T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.036946][  T392] usb 1-1: config 0 descriptor??
[   92.057795][    T9] usb 4-1: device descriptor read/64, error -71
[   92.168193][    T9] usb usb4-port1: attempt power cycle
[   92.257791][   T36] audit: type=1400 audit(1784809602.930:331): avc:  denied  { setcheckreqprot } for  pid=2595 comm="syz.5.884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   92.503383][  T392] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[   92.516931][    T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[   92.524542][  T392] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints?
[   92.548805][    T9] usb 4-1: device descriptor read/8, error -71
[   92.678740][    T9] usb 4-1: device descriptor read/8, error -71
[   92.697794][  T460] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   92.712923][    C0] hid-thrustmaster 0003:044F:B65D.000E: URB to get model id failed with error -71
[   92.713251][ T1791] usb 1-1: USB disconnect, device number 33
[   92.847785][  T460] usb 6-1: Using ep0 maxpacket: 16
[   92.855250][  T460] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   92.864451][  T460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.872687][  T460] usb 6-1: Product: syz
[   92.876831][  T460] usb 6-1: Manufacturer: syz
[   92.881423][  T460] usb 6-1: SerialNumber: syz
[   92.888180][  T460] r8152-cfgselector 6-1: Unknown version 0x0000
[   92.894462][  T460] r8152-cfgselector 6-1: config 0 descriptor??
[   92.928246][    T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[   92.959365][    T9] usb 4-1: device descriptor read/8, error -71
[   93.088758][    T9] usb 4-1: device descriptor read/8, error -71
[   93.197881][    T9] usb usb4-port1: unable to enumerate USB device
[   93.310660][    T9] r8152-cfgselector 6-1: USB disconnect, device number 13
[   93.567997][ T1791] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   93.697796][ T1791] usb 1-1: device descriptor read/64, error -71
[   93.943057][ T1791] usb 1-1: device descriptor read/64, error -71
[   94.003489][ T2660] FAULT_INJECTION: forcing a failure.
[   94.003489][ T2660] name failslab, interval 1, probability 0, space 0, times 0
[   94.016123][ T2660] CPU: 0 UID: 0 PID: 2660 Comm: syz.3.910 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[   94.016152][ T2660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[   94.016163][ T2660] Call Trace:
[   94.016169][ T2660]  <TASK>
[   94.016176][ T2660]  __dump_stack+0x21/0x30
[   94.016198][ T2660]  dump_stack_lvl+0x140/0x1c0
[   94.016212][ T2660]  ? __cfi_dump_stack_lvl+0x10/0x10
[   94.016226][ T2660]  dump_stack+0x19/0x20
[   94.016239][ T2660]  should_fail_ex+0x3c2/0x510
[   94.016251][ T2660]  ? io_alloc_hash_table+0x52/0x160
[   94.016266][ T2660]  should_failslab+0xac/0x100
[   94.016279][ T2660]  __kmalloc_noprof+0x69/0x510
[   94.016290][ T2660]  ? io_alloc_hash_table+0x52/0x160
[   94.016304][ T2660]  ? init_hash_table+0x1ae/0x270
[   94.016320][ T2660]  io_alloc_hash_table+0x52/0x160
[   94.016335][ T2660]  io_ring_ctx_alloc+0x10b/0x1dc0
[   94.016346][ T2660]  io_uring_create+0x2e0/0x13f0
[   94.016356][ T2660]  ? __kasan_check_write+0x18/0x20
[   94.016366][ T2660]  __se_sys_io_uring_setup+0x2a4/0x2b0
[   94.016380][ T2660]  ? __kasan_check_write+0x18/0x20
[   94.016389][ T2660]  ? __x64_sys_io_uring_setup+0x80/0x80
[   94.016403][ T2660]  ? __kasan_check_read+0x15/0x20
[   94.016413][ T2660]  __x64_sys_io_uring_setup+0x5f/0x80
[   94.016426][ T2660]  x64_sys_call+0x22c0/0x2ee0
[   94.016436][ T2660]  do_syscall_64+0x57/0xf0
[   94.016447][ T2660]  ? clear_bhb_loop+0x50/0xa0
[   94.016460][ T2660]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   94.016472][ T2660] RIP: 0033:0x7f774a59de99
[   94.016482][ T2660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.016491][ T2660] RSP: 002b:00007f774b3c9ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[   94.016504][ T2660] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f774a59de99
[   94.016512][ T2660] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[   94.016519][ T2660] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[   94.016525][ T2660] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[   94.016532][ T2660] R13: 0000200000000b10 R14: 00007f774b3c9fd8 R15: 0000000000000000
[   94.016540][ T2660]  </TASK>
[   94.357800][ T1791] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   94.487795][ T1791] usb 1-1: device descriptor read/64, error -71
[   94.487795][    T9] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[   94.648733][    T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   94.658883][    T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.672743][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   94.681830][    T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   94.690367][    T9] usb 4-1: Product: syz
[   94.694527][    T9] usb 4-1: Manufacturer: syz
[   94.701357][    T9] hub 4-1:4.0: bad descriptor, ignoring hub
[   94.707257][    T9] hub 4-1:4.0: probe with driver hub failed with error -5
[   94.714598][    T9] usbhid 4-1:4.0: couldn't find an input interrupt endpoint
[   94.747782][ T1791] usb 1-1: device descriptor read/64, error -71
[   94.857870][ T1791] usb usb1-port1: attempt power cycle
[   95.007903][   T31] usb 4-1: USB disconnect, device number 36
[   95.207806][ T1791] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   95.238787][ T1791] usb 1-1: device descriptor read/8, error -71
[   95.269868][   T36] audit: type=1326 audit(1784809605.950:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2684 comm="syz.5.921" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb8db9de99 code=0x0
[   95.369187][ T1791] usb 1-1: device descriptor read/8, error -71
[   95.376382][ T2694] syz.5.921 (2694): attempted to duplicate a private mapping with mremap.  This is not supported.
[   95.388330][   T36] audit: type=1400 audit(1784809606.070:333): avc:  denied  { setopt } for  pid=2684 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   95.408477][   T36] audit: type=1400 audit(1784809606.070:334): avc:  denied  { write } for  pid=2684 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   95.428350][   T36] audit: type=1400 audit(1784809606.090:335): avc:  denied  { setattr } for  pid=2684 comm="syz.5.921" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   95.607813][ T1791] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[   95.628756][ T1791] usb 1-1: device descriptor read/8, error -71
[   95.758798][ T1791] usb 1-1: device descriptor read/8, error -71
[   95.867859][ T1791] usb usb1-port1: unable to enumerate USB device
[   96.171665][ T2704] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.187583][   T36] audit: type=1400 audit(1784809606.860:336): avc:  denied  { write } for  pid=2703 comm="syz.5.929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   96.447841][ T1791] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[   96.597785][ T1791] usb 5-1: Using ep0 maxpacket: 32
[   96.603914][ T1791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.613865][ T1791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   96.626664][ T1791] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[   96.635726][ T1791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.644440][ T1791] usb 5-1: config 0 descriptor??
[   96.650417][ T1791] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   96.747799][   T31] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[   96.851524][    T9] usb 5-1: USB disconnect, device number 31
[   96.908761][   T31] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   96.916914][   T31] usb 1-1: config 0 has no interface number 0
[   96.923045][   T31] usb 1-1: config 0 interface 41 has no altsetting 0
[   96.931027][   T31] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   96.940078][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.948075][   T31] usb 1-1: Product: syz
[   96.952220][   T31] usb 1-1: Manufacturer: syz
[   96.956789][   T31] usb 1-1: SerialNumber: syz
[   96.962049][   T31] usb 1-1: config 0 descriptor??
[   97.109859][ T2736] tipc: Started in network mode
[   97.114811][ T2736] tipc: Node identity 0acc3f1529c3, cluster identity 4711
[   97.122272][ T2736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.130910][ T2736] tipc: Disabling bearer <eth:syzkaller0>
[   97.285899][ T2751] netlink: 'syz.3.947': attribute type 9 has an invalid length.
[   97.316670][ T2753] netlink: 328 bytes leftover after parsing attributes in process `syz.3.948'.
[   97.503059][ T2766] FAULT_INJECTION: forcing a failure.
[   97.503059][ T2766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.516190][ T2766] CPU: 1 UID: 0 PID: 2766 Comm: syz.4.954 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[   97.516220][ T2766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[   97.516231][ T2766] Call Trace:
[   97.516236][ T2766]  <TASK>
[   97.516243][ T2766]  __dump_stack+0x21/0x30
[   97.516276][ T2766]  dump_stack_lvl+0x140/0x1c0
[   97.516300][ T2766]  ? __cfi_dump_stack_lvl+0x10/0x10
[   97.516325][ T2766]  ? check_stack_object+0x138/0x150
[   97.516345][ T2766]  dump_stack+0x19/0x20
[   97.516368][ T2766]  should_fail_ex+0x3c2/0x510
[   97.516391][ T2766]  should_fail+0xf/0x20
[   97.516408][ T2766]  should_fail_usercopy+0x1e/0x30
[   97.516430][ T2766]  _copy_to_user+0x24/0xa0
[   97.516453][ T2766]  simple_read_from_buffer+0xed/0x160
[   97.516479][ T2766]  proc_fail_nth_read+0x1aa/0x220
[   97.516516][ T2766]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   97.516540][ T2766]  ? bpf_lsm_file_permission+0xd/0x20
[   97.516568][ T2766]  ? bpf_lsm_file_permission+0xd/0x20
[   97.516590][ T2766]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   97.516613][ T2766]  vfs_read+0x288/0xc70
[   97.516632][ T2766]  ? __cfi_vfs_read+0x10/0x10
[   97.516650][ T2766]  ? __kasan_check_write+0x18/0x20
[   97.516668][ T2766]  ? mutex_lock+0x97/0x1d0
[   97.516692][ T2766]  ? __cfi_mutex_lock+0x10/0x10
[   97.516717][ T2766]  ksys_read+0x145/0x260
[   97.516735][ T2766]  ? fput+0x1a4/0x230
[   97.516757][ T2766]  ? __cfi_ksys_read+0x10/0x10
[   97.516775][ T2766]  ? __x64_sys_pwritev+0x215/0x2c0
[   97.516796][ T2766]  ? __kasan_check_read+0x15/0x20
[   97.516814][ T2766]  __x64_sys_read+0x7f/0x90
[   97.516833][ T2766]  x64_sys_call+0x2638/0x2ee0
[   97.516850][ T2766]  do_syscall_64+0x57/0xf0
[   97.516870][ T2766]  ? clear_bhb_loop+0x50/0xa0
[   97.516894][ T2766]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   97.516916][ T2766] RIP: 0033:0x7f1f2e95e6ce
[   97.516933][ T2766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   97.516949][ T2766] RSP: 002b:00007f1f2d3e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   97.516969][ T2766] RAX: ffffffffffffffda RBX: 00007f1f2d3e36c0 RCX: 00007f1f2e95e6ce
[   97.516983][ T2766] RDX: 000000000000000f RSI: 00007f1f2d3e30a0 RDI: 0000000000000004
[   97.516995][ T2766] RBP: 00007f1f2d3e3090 R08: 0000000000000000 R09: 0000000000000000
[   97.517008][ T2766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.517019][ T2766] R13: 00007f1f2ec26038 R14: 00007f1f2ec25fa0 R15: 00007fff497dc908
[   97.517035][ T2766]  </TASK>
[   97.587799][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   97.609833][ T2768] cgroup: fork rejected by pids controller in /syz4
[   97.773146][ T1791] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[   97.787445][    T9] usb 6-1: Using ep0 maxpacket: 8
[   97.788064][ T2768] 
[   97.793585][    T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[   97.803155][    T9] usb 6-1: config 179 has no interface number 0
[   97.813910][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   97.825035][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   97.836305][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   97.847448][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   97.859068][    T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   97.872653][    T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   97.881722][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.893568][ T2757] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   97.917780][ T1791] usb 4-1: Using ep0 maxpacket: 8
[   97.924259][ T1791] usb 4-1: unable to get BOS descriptor or descriptor too short
[   97.932863][ T1791] usb 4-1: config 1 has an invalid interface number: 6 but max is 0
[   97.940958][ T1791] usb 4-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config
[   97.951357][ T1791] usb 4-1: config 1 has no interface number 0
[   97.957579][ T1791] usb 4-1: config 1 interface 6 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[   97.969080][  T469] bridge_slave_1: left allmulticast mode
[   97.969230][ T1791] usb 4-1: config 1 interface 6 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   97.977915][  T469] bridge_slave_1: left promiscuous mode
[   97.987827][ T1791] usb 4-1: config 1 interface 6 has no altsetting 0
[   98.002128][ T1791] usb 4-1: string descriptor 0 read error: -22
[   98.008388][ T1791] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[   98.017596][ T1791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.027872][ T1791] ums-karma 4-1:1.6: USB Mass Storage device detected
[   98.033398][  T469] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.044825][  T469] bridge_slave_0: left allmulticast mode
[   98.051417][  T469] bridge_slave_0: left promiscuous mode
[   98.057055][  T469] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.161169][ T2757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.170390][ T2757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.182268][  T469] veth1_macvtap: left promiscuous mode
[   98.187910][  T469] veth0_vlan: left promiscuous mode
[   98.240859][ T2874] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.248083][ T2874] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.255192][ T2874] bridge_slave_0: entered allmulticast mode
[   98.260709][ T1791] usb 4-1: USB disconnect, device number 37
[   98.261834][ T2874] bridge_slave_0: entered promiscuous mode
[   98.274133][ T2874] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.281574][ T2874] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.288751][ T2874] bridge_slave_1: entered allmulticast mode
[   98.295497][ T2874] bridge_slave_1: entered promiscuous mode
[   98.347559][ T2874] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.354612][ T2874] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.361895][ T2874] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.368933][ T2874] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.384973][  T411] usb 6-1: USB disconnect, device number 14
[   98.385033][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   98.399766][    C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[   98.408186][   T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   98.418912][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.419159][   T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[   98.435362][   T31] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[   98.435388][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.444974][   T31] usb 1-1: USB disconnect, device number 38
[   98.459754][  T475] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.466786][  T475] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.475658][  T336] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.482709][  T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.505223][ T2874] veth0_vlan: entered promiscuous mode
[   98.521375][ T2874] veth1_macvtap: entered promiscuous mode
[   98.538533][   T36] audit: type=1400 audit(98.518:337): avc:  denied  { mount } for  pid=2874 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   98.568853][   T36] audit: type=1400 audit(98.548:338): avc:  denied  { mounton } for  pid=2879 comm="syz.4.957" path="/proc/2/task" dev="proc" ino=88463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   98.596306][   T36] audit: type=1400 audit(98.548:339): avc:  denied  { associate } for  pid=2879 comm="syz.4.957" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   98.947809][   T10] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[   99.098982][   T10] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   99.110051][   T10] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64
[   99.121033][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[   99.127863][    T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[   99.135577][   T10] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[   99.144774][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.153456][   T10] usb 5-1: config 0 descriptor??
[   99.158697][ T2883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   99.297774][    T9] usb 4-1: Using ep0 maxpacket: 32
[   99.304111][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.313953][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   99.326739][    T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[   99.336264][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.345574][    T9] usb 4-1: config 0 descriptor??
[   99.355410][    T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   99.370185][  T411] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[   99.527802][  T411] usb 1-1: Using ep0 maxpacket: 32
[   99.534001][  T411] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[   99.542141][  T411] usb 1-1: config 0 has no interface number 0
[   99.548267][  T411] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   99.557901][    T9] usb 4-1: USB disconnect, device number 38
[   99.559415][  T411] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[   99.573308][   T10] a4tech 0003:09DA:022B.000F: unknown main item tag 0x6
[   99.575113][  T411] usb 1-1: config 0 interface 85 has no altsetting 0
[   99.583692][   T10] a4tech 0003:09DA:022B.000F: unknown main item tag 0x3
[   99.596329][   T10] a4tech 0003:09DA:022B.000F: hidraw0: USB HID v0.08 Device [HID 09da:022b] on usb-dummy_hcd.4-1/input0
[   99.599982][  T411] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   99.616597][  T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.624654][  T411] usb 1-1: Product: syz
[   99.629484][   T31] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[   99.637077][  T411] usb 1-1: Manufacturer: syz
[   99.641754][  T411] usb 1-1: SerialNumber: syz
[   99.646952][  T411] usb 1-1: config 0 descriptor??
[   99.788304][ T2883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.796848][ T2883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.797397][   T31] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[   99.812968][   T31] usb 6-1: config 0 has no interface number 0
[   99.819107][   T31] usb 6-1: config 0 interface 41 has no altsetting 0
[   99.827320][   T31] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   99.836520][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.844542][   T31] usb 6-1: Product: syz
[   99.848795][   T31] usb 6-1: Manufacturer: syz
[   99.853409][   T31] usb 6-1: SerialNumber: syz
[   99.859992][ T2912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.869342][ T2912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.870281][    T9] usb 5-1: USB disconnect, device number 32
[   99.877295][   T31] usb 6-1: config 0 descriptor??
[  100.157904][  T411] usb 1-1: USB disconnect, device number 39
[  100.647809][    T9] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  100.808849][    T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  100.819090][    T9] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  100.834004][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  100.847334][    T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  100.859780][    T9] usb 5-1: Product: syz
[  100.863998][    T9] usb 5-1: Manufacturer: syz
[  100.871479][    T9] hub 5-1:4.0: bad descriptor, ignoring hub
[  100.877942][    T9] hub 5-1:4.0: probe with driver hub failed with error -5
[  100.885352][    T9] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[  101.071780][ T2947] netlink: 'syz.4.979': attribute type 13 has an invalid length.
[  101.080126][ T2947] erspan0: refused to change device tx_queue_len
[  101.177790][    T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  101.207899][   T10] usb 5-1: USB disconnect, device number 33
[  101.301890][   T31] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  101.312556][   T31] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  101.321980][   T31] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  101.327945][    T9] usb 1-1: Using ep0 maxpacket: 32
[  101.331932][   T31] usb 6-1: USB disconnect, device number 15
[  101.342406][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.353374][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.366258][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  101.375300][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.383774][    T9] usb 1-1: config 0 descriptor??
[  101.389872][    T9] usbhid 1-1:0.0: can't add hid device: -22
[  101.395855][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  101.591628][    T9] usb 1-1: USB disconnect, device number 40
[  101.696962][ T2972] FAULT_INJECTION: forcing a failure.
[  101.696962][ T2972] name failslab, interval 1, probability 0, space 0, times 0
[  101.709625][ T2972] CPU: 0 UID: 0 PID: 2972 Comm: syz.4.990 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  101.709643][ T2972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  101.709650][ T2972] Call Trace:
[  101.709654][ T2972]  <TASK>
[  101.709658][ T2972]  __dump_stack+0x21/0x30
[  101.709676][ T2972]  dump_stack_lvl+0x140/0x1c0
[  101.709690][ T2972]  ? __cfi_dump_stack_lvl+0x10/0x10
[  101.709705][ T2972]  dump_stack+0x19/0x20
[  101.709717][ T2972]  should_fail_ex+0x3c2/0x510
[  101.709729][ T2972]  should_failslab+0xac/0x100
[  101.709742][ T2972]  __kmalloc_node_noprof+0x69/0x500
[  101.709753][ T2972]  ? __kvmalloc_node_noprof+0x128/0x300
[  101.709774][ T2972]  ? __kasan_kmalloc+0x96/0xb0
[  101.709787][ T2972]  __kvmalloc_node_noprof+0x128/0x300
[  101.709801][ T2972]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  101.709816][ T2972]  ? percpu_ref_init+0x1b0/0x4d0
[  101.709827][ T2972]  ? __cfi_io_ring_ctx_ref_free+0x10/0x10
[  101.709838][ T2972]  io_ring_ctx_alloc+0x28c/0x1dc0
[  101.709849][ T2972]  io_uring_create+0x2e0/0x13f0
[  101.709858][ T2972]  ? __kasan_check_write+0x18/0x20
[  101.709869][ T2972]  __se_sys_io_uring_setup+0x2a4/0x2b0
[  101.709882][ T2972]  ? __kasan_check_write+0x18/0x20
[  101.709892][ T2972]  ? __x64_sys_io_uring_setup+0x80/0x80
[  101.709906][ T2972]  ? __kasan_check_read+0x15/0x20
[  101.709916][ T2972]  __x64_sys_io_uring_setup+0x5f/0x80
[  101.709932][ T2972]  x64_sys_call+0x22c0/0x2ee0
[  101.709941][ T2972]  do_syscall_64+0x57/0xf0
[  101.709952][ T2972]  ? clear_bhb_loop+0x50/0xa0
[  101.709965][ T2972]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  101.709978][ T2972] RIP: 0033:0x7fa46fb9de99
[  101.709987][ T2972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.709997][ T2972] RSP: 002b:00007fa470a11ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  101.710016][ T2972] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fa46fb9de99
[  101.710030][ T2972] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  101.710043][ T2972] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  101.710053][ T2972] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  101.710059][ T2972] R13: 0000200000000b10 R14: 00007fa470a11fd8 R15: 0000000000000000
[  101.710068][ T2972]  </TASK>
[  101.973475][ T2982] 9p: Unknown Cache mode or invalid value dev/kvm
[  102.006587][ T2989] program syz.3.998 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.111324][   T36] audit: type=1400 audit(102.088:340): avc:  denied  { bind } for  pid=3005 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  102.150295][   T36] audit: type=1400 audit(102.108:341): avc:  denied  { connect } for  pid=3005 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  102.187807][  T392] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  102.295499][ T3017] program syz.4.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.307937][  T411] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  102.338165][  T392] usb 6-1: too many configurations: 72, using maximum allowed: 8
[  102.351851][  T392] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  102.360980][  T392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.370115][  T392] usb 6-1: config 0 descriptor??
[  102.459219][  T411] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  102.467342][  T411] usb 4-1: config 0 has no interface number 0
[  102.473437][  T411] usb 4-1: config 0 interface 41 has no altsetting 0
[  102.483000][  T411] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  102.491704][ T3037] FAULT_INJECTION: forcing a failure.
[  102.491704][ T3037] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.492096][  T411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.505368][ T3037] CPU: 0 UID: 0 PID: 3037 Comm: syz.0.1016 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  102.505394][ T3037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  102.505406][ T3037] Call Trace:
[  102.505411][ T3037]  <TASK>
[  102.505418][ T3037]  __dump_stack+0x21/0x30
[  102.505446][ T3037]  dump_stack_lvl+0x140/0x1c0
[  102.505469][ T3037]  ? __cfi_dump_stack_lvl+0x10/0x10
[  102.505494][ T3037]  ? check_stack_object+0x81/0x150
[  102.505513][ T3037]  ? __virt_addr_valid+0x2a1/0x370
[  102.505533][ T3037]  dump_stack+0x19/0x20
[  102.505555][ T3037]  should_fail_ex+0x3c2/0x510
[  102.505575][ T3037]  should_fail+0xf/0x20
[  102.505594][ T3037]  should_fail_usercopy+0x1e/0x30
[  102.505614][ T3037]  _copy_from_user+0x20/0xa0
[  102.505637][ T3037]  memdup_user+0x81/0x170
[  102.505671][ T3037]  ? strndup_user+0x40/0xd0
[  102.505687][ T3037]  strndup_user+0x6c/0xd0
[  102.505702][ T3037]  __se_sys_mount+0xe2/0x480
[  102.505721][ T3037]  ? ksys_write+0x1f3/0x260
[  102.505739][ T3037]  ? __x64_sys_mount+0xf0/0xf0
[  102.505758][ T3037]  __x64_sys_mount+0xc3/0xf0
[  102.505776][ T3037]  x64_sys_call+0x2021/0x2ee0
[  102.505793][ T3037]  do_syscall_64+0x57/0xf0
[  102.505812][ T3037]  ? clear_bhb_loop+0x50/0xa0
[  102.505834][ T3037]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.505856][ T3037] RIP: 0033:0x7f69c279de99
[  102.505871][ T3037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.505886][ T3037] RSP: 002b:00007f69c36e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  102.505906][ T3037] RAX: ffffffffffffffda RBX: 00007f69c2a25fa0 RCX: 00007f69c279de99
[  102.505920][ T3037] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000200000000000
[  102.505933][ T3037] RBP: 00007f69c36e2090 R08: 0000000000000000 R09: 0000000000000000
[  102.505945][ T3037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.505957][ T3037] R13: 00007f69c2a26038 R14: 00007f69c2a25fa0 R15: 00007fffc86fb018
[  102.505972][ T3037]  </TASK>
[  102.577203][  T460] usb 6-1: USB disconnect, device number 16
[  102.578406][  T411] usb 4-1: Product: syz
[  102.724013][   T31] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  102.731780][  T411] usb 4-1: Manufacturer: syz
[  102.736489][  T411] usb 4-1: SerialNumber: syz
[  102.741784][  T411] usb 4-1: config 0 descriptor??
[  102.757902][  T392] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  102.877772][   T31] usb 5-1: Using ep0 maxpacket: 16
[  102.883921][   T31] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  102.896745][   T31] usb 5-1: config 0 interface 0 has no altsetting 0
[  102.903367][   T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  102.912399][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.917786][  T392] usb 1-1: Using ep0 maxpacket: 8
[  102.921387][   T31] usb 5-1: config 0 descriptor??
[  102.929280][  T392] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 160, changing to 7
[  102.942993][  T392] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  102.952088][  T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.960095][  T392] usb 1-1: Product: syz
[  102.964275][  T392] usb 1-1: Manufacturer: syz
[  102.968898][  T392] usb 1-1: SerialNumber: syz
[  103.333476][   T31] usbhid 5-1:0.0: can't add hid device: -71
[  103.339489][  T316] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  103.347142][   T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  103.356387][   T31] usb 5-1: USB disconnect, device number 34
[  103.376552][  T392] usb 1-1: unit 4 not found!
[  103.385523][  T392] usb 1-1: USB disconnect, device number 41
[  103.417827][ T1506] udevd[1506]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  103.498734][  T316] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  103.508903][  T316] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  103.522775][  T316] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  103.531808][  T316] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  103.540213][  T316] usb 6-1: Product: syz
[  103.544537][  T316] usb 6-1: Manufacturer: syz
[  103.551572][  T316] hub 6-1:4.0: bad descriptor, ignoring hub
[  103.557465][  T316] hub 6-1:4.0: probe with driver hub failed with error -5
[  103.564887][  T316] usbhid 6-1:4.0: couldn't find an input interrupt endpoint
[  103.857867][  T316] usb 6-1: USB disconnect, device number 17
[  103.910339][ T3053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.920553][ T3053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.933952][ T3057] FAULT_INJECTION: forcing a failure.
[  103.933952][ T3057] name failslab, interval 1, probability 0, space 0, times 0
[  103.946634][ T3057] CPU: 0 UID: 0 PID: 3057 Comm: syz.4.1025 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  103.946662][ T3057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  103.946673][ T3057] Call Trace:
[  103.946680][ T3057]  <TASK>
[  103.946687][ T3057]  __dump_stack+0x21/0x30
[  103.946717][ T3057]  dump_stack_lvl+0x140/0x1c0
[  103.946739][ T3057]  ? __cfi_dump_stack_lvl+0x10/0x10
[  103.946763][ T3057]  ? selinux_file_permission+0x318/0xb60
[  103.946793][ T3057]  dump_stack+0x19/0x20
[  103.946814][ T3057]  should_fail_ex+0x3c2/0x510
[  103.946826][ T3057]  should_failslab+0xac/0x100
[  103.946840][ T3057]  __kmalloc_cache_noprof+0x41/0x470
[  103.946850][ T3057]  ? io_ring_ctx_alloc+0x61/0x1dc0
[  103.946861][ T3057]  io_ring_ctx_alloc+0x61/0x1dc0
[  103.946871][ T3057]  ? __cfi_vfs_write+0x10/0x10
[  103.946889][ T3057]  io_uring_create+0x2e0/0x13f0
[  103.946909][ T3057]  ? __kasan_check_write+0x18/0x20
[  103.946928][ T3057]  __se_sys_io_uring_setup+0x2a4/0x2b0
[  103.946953][ T3057]  ? __kasan_check_write+0x18/0x20
[  103.946964][ T3057]  ? __x64_sys_io_uring_setup+0x80/0x80
[  103.946977][ T3057]  ? __kasan_check_read+0x15/0x20
[  103.946987][ T3057]  __x64_sys_io_uring_setup+0x5f/0x80
[  103.947000][ T3057]  x64_sys_call+0x22c0/0x2ee0
[  103.947009][ T3057]  do_syscall_64+0x57/0xf0
[  103.947023][ T3057]  ? clear_bhb_loop+0x50/0xa0
[  103.947048][ T3057]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  103.947070][ T3057] RIP: 0033:0x7fa46fb9de99
[  103.947086][ T3057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.947100][ T3057] RSP: 002b:00007fa470a11ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  103.947114][ T3057] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fa46fb9de99
[  103.947122][ T3057] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  103.947129][ T3057] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  103.947136][ T3057] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  103.947143][ T3057] R13: 0000200000000b10 R14: 00007fa470a11fd8 R15: 0000000000000000
[  103.947151][ T3057]  </TASK>
[  104.288114][  T392] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  104.316646][  T411] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  104.330596][  T411] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  104.340498][  T411] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  104.351239][  T411] usb 4-1: USB disconnect, device number 39
[  104.362670][ T3073] fuse: Bad value for 'group_id'
[  104.363155][   T36] audit: type=1400 audit(104.338:342): avc:  denied  { mounton } for  pid=3072 comm="syz.5.1032" path="/132/file0" dev="tmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  104.367681][ T3073] fuse: Bad value for 'group_id'
[  104.410376][   T36] audit: type=1400 audit(104.388:343): avc:  denied  { accept } for  pid=3074 comm="syz.5.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  104.444113][  T392] usb 1-1: unable to get BOS descriptor or descriptor too short
[  104.452210][  T392] usb 1-1: not running at top speed; connect to a high speed hub
[  104.468175][  T392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.479715][  T392] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  104.488974][  T392] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  104.497033][  T392] usb 1-1: Product: syz
[  104.501263][  T392] usb 1-1: Manufacturer: syz
[  104.505849][  T392] usb 1-1: SerialNumber: syz
[  104.510919][  T392] usb 1-1: config 0 descriptor??
[  104.536511][   T36] audit: type=1400 audit(104.508:344): avc:  denied  { remount } for  pid=3078 comm="syz.5.1035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  104.720645][  T392] usb 1-1: USB disconnect, device number 42
[  104.937792][  T460] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  105.089736][  T460] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  105.101010][  T460] usb 6-1: config 1 interface 0 has no altsetting 0
[  105.109088][  T460] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40
[  105.118210][  T460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.126225][  T460] usb 6-1: Product: 拄啿㶑篒䶬漸攵ధ砰㐡⪤⯳땅뒫ກ㜡円ꉀ꘡ᚿ滕뤜섺䴲䩫ʌॿ墣䴾흎ꚛᖨ鯐뽐჏ꖮ픃ﳄ툑국쎆泇椲Ĵ墪隩赜羇糈ﮟ譃歬퐝팮吶
[  105.147158][  T460] usb 6-1: Manufacturer: 휭天ᒣꝂ┩樂냭籙ꆓ緭踰浫ԭͦⳔ䃚൭ᇵ夊聂Ⳙ⣈掭涄턊ﷸᗮ찈ꋔ걳葁
[  105.161676][  T460] usb 6-1: SerialNumber: й
[  105.167927][  T411] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  105.288081][ T3110] fuse: Unknown parameter '000000000000000000080x0000000000000009'
[  105.338787][  T411] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  105.346887][  T411] usb 4-1: config 0 has no interface number 0
[  105.353445][  T411] usb 4-1: config 0 interface 41 has no altsetting 0
[  105.365598][  T411] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  105.377689][  T460] usbhid 6-1:1.0: can't add hid device: -71
[  105.380356][  T411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.391927][  T460] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  105.393106][  T411] usb 4-1: Product: syz
[  105.403340][  T460] usb 6-1: USB disconnect, device number 18
[  105.405518][  T411] usb 4-1: Manufacturer: syz
[  105.415989][  T411] usb 4-1: SerialNumber: syz
[  105.421195][  T411] usb 4-1: config 0 descriptor??
[  105.577776][  T316] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  105.637783][  T392] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  105.727787][  T316] usb 5-1: Using ep0 maxpacket: 32
[  105.734104][  T316] usb 5-1: unable to get BOS descriptor or descriptor too short
[  105.742441][  T316] usb 5-1: config 5 has an invalid interface number: 18 but max is 0
[  105.750541][  T316] usb 5-1: config 5 has no interface number 0
[  105.756623][  T316] usb 5-1: config 5 interface 18 has no altsetting 0
[  105.764637][  T316] usb 5-1: New USB device found, idVendor=2357, idProduct=0601, bcdDevice=3f.ae
[  105.773699][  T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.781697][  T316] usb 5-1: Product: syz
[  105.785856][  T316] usb 5-1: Manufacturer: syz
[  105.790459][  T316] usb 5-1: SerialNumber: syz
[  105.797153][  T316] r8152-cfgselector 5-1: Unknown version 0x0000
[  105.798852][  T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.814399][  T392] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  105.823471][  T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.832187][  T392] usb 1-1: config 0 descriptor??
[  106.009469][  T316] hub 5-1:5.18: bad descriptor, ignoring hub
[  106.015838][  T316] hub 5-1:5.18: probe with driver hub failed with error -5
[  106.026430][ T3120] Invalid ELF header type: 2 != 1
[  106.027471][   T36] audit: type=1400 audit(106.008:345): avc:  denied  { module_load } for  pid=3119 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  106.039480][ T3118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.058222][  T316] r8152-cfgselector 5-1: USB disconnect, device number 35
[  106.059648][  T392] usbhid 1-1:0.0: can't add hid device: -71
[  106.067282][ T3118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.080035][  T392] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  106.089357][  T392] usb 1-1: USB disconnect, device number 43
[  106.266393][  T411] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  106.278812][  T411] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  106.289288][  T411] usb 4-1: USB disconnect, device number 40
[  106.387779][  T392] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  106.399731][ T3135] FAULT_INJECTION: forcing a failure.
[  106.399731][ T3135] name failslab, interval 1, probability 0, space 0, times 0
[  106.412375][ T3135] CPU: 0 UID: 0 PID: 3135 Comm: syz.5.1058 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  106.412404][ T3135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  106.412415][ T3135] Call Trace:
[  106.412421][ T3135]  <TASK>
[  106.412428][ T3135]  __dump_stack+0x21/0x30
[  106.412458][ T3135]  dump_stack_lvl+0x140/0x1c0
[  106.412483][ T3135]  ? __cfi_dump_stack_lvl+0x10/0x10
[  106.412500][ T3135]  dump_stack+0x19/0x20
[  106.412513][ T3135]  should_fail_ex+0x3c2/0x510
[  106.412525][ T3135]  should_failslab+0xac/0x100
[  106.412538][ T3135]  __kmalloc_node_noprof+0x69/0x500
[  106.412549][ T3135]  ? __kvmalloc_node_noprof+0x128/0x300
[  106.412565][ T3135]  __kvmalloc_node_noprof+0x128/0x300
[  106.412580][ T3135]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  106.412595][ T3135]  ? percpu_ref_init+0x1b0/0x4d0
[  106.412606][ T3135]  ? __cfi_io_ring_ctx_ref_free+0x10/0x10
[  106.412617][ T3135]  io_ring_ctx_alloc+0x428/0x1dc0
[  106.412627][ T3135]  io_uring_create+0x2e0/0x13f0
[  106.412637][ T3135]  ? __kasan_check_write+0x18/0x20
[  106.412647][ T3135]  __se_sys_io_uring_setup+0x2a4/0x2b0
[  106.412661][ T3135]  ? __kasan_check_write+0x18/0x20
[  106.412671][ T3135]  ? __x64_sys_io_uring_setup+0x80/0x80
[  106.412685][ T3135]  ? __kasan_check_read+0x15/0x20
[  106.412694][ T3135]  __x64_sys_io_uring_setup+0x5f/0x80
[  106.412707][ T3135]  x64_sys_call+0x22c0/0x2ee0
[  106.412716][ T3135]  do_syscall_64+0x57/0xf0
[  106.412728][ T3135]  ? clear_bhb_loop+0x50/0xa0
[  106.412741][ T3135]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  106.412754][ T3135] RIP: 0033:0x7ffb8db9de99
[  106.412763][ T3135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.412773][ T3135] RSP: 002b:00007ffb8ea57ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  106.412784][ T3135] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007ffb8db9de99
[  106.412792][ T3135] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  106.412799][ T3135] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  106.412806][ T3135] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  106.412813][ T3135] R13: 0000200000000b10 R14: 00007ffb8ea57fd8 R15: 0000000000000000
[  106.412821][ T3135]  </TASK>
[  106.718824][  T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.729730][  T392] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  106.738757][  T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.752702][  T392] usb 1-1: config 0 descriptor??
[  106.815954][ T3152] program syz.3.1065 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.956736][ T3157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  106.972775][  T392] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[  106.980780][  T392] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10
[  106.994122][  T392] usb 1-1: USB disconnect, device number 44
[  106.997792][  T411] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  107.000050][    C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  107.127787][  T411] usb 5-1: device descriptor read/64, error -71
[  107.207788][  T460] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  107.367807][  T411] usb 5-1: device descriptor read/64, error -71
[  107.379031][  T460] usb 4-1: unable to get BOS descriptor or descriptor too short
[  107.386985][  T460] usb 4-1: not running at top speed; connect to a high speed hub
[  107.395713][  T460] usb 4-1: config 1 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.408692][  T460] usb 4-1: config 1 interface 0 has no altsetting 0
[  107.417058][  T460] usb 4-1: string descriptor 0 read error: -22
[  107.424968][  T460] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  107.434239][  T460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.557787][  T392] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  107.607781][  T411] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  107.718835][  T392] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  107.726949][  T392] usb 6-1: config 0 has no interface number 0
[  107.733053][  T392] usb 6-1: config 0 interface 41 has no altsetting 0
[  107.741061][  T392] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  107.747784][  T411] usb 5-1: device descriptor read/64, error -71
[  107.750149][  T392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.764337][  T392] usb 6-1: Product: syz
[  107.768499][  T392] usb 6-1: Manufacturer: syz
[  107.773084][  T392] usb 6-1: SerialNumber: syz
[  107.778331][  T392] usb 6-1: config 0 descriptor??
[  107.987791][  T411] usb 5-1: device descriptor read/64, error -71
[  108.097873][  T411] usb usb5-port1: attempt power cycle
[  108.147780][  T460] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  108.298703][  T460] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  108.308852][  T460] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  108.322756][  T460] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  108.331831][  T460] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  108.340201][  T460] usb 1-1: Product: syz
[  108.344424][  T460] usb 1-1: Manufacturer: syz
[  108.350971][  T460] hub 1-1:4.0: bad descriptor, ignoring hub
[  108.356900][  T460] hub 1-1:4.0: probe with driver hub failed with error -5
[  108.364406][  T460] usbhid 1-1:4.0: couldn't find an input interrupt endpoint
[  108.437795][  T411] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  108.458730][  T411] usb 5-1: device descriptor read/8, error -71
[  108.585855][  T392] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  108.598293][  T392] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  108.607345][  T411] usb 5-1: device descriptor read/8, error -71
[  108.609546][  T392] usb 6-1: USB disconnect, device number 19
[  108.657855][  T316] usb 1-1: USB disconnect, device number 45
[  108.847781][  T411] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  108.868746][  T411] usb 5-1: device descriptor read/8, error -71
[  108.998789][  T411] usb 5-1: device descriptor read/8, error -71
[  109.117904][  T411] usb usb5-port1: unable to enumerate USB device
[  109.317820][  T316] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  109.468731][  T316] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  109.476918][  T316] usb 1-1: config 0 has no interface number 0
[  109.483039][  T316] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  109.487781][  T392] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  109.495434][  T316] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  109.510583][  T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.518571][  T316] usb 1-1: Product: syz
[  109.522745][  T316] usb 1-1: Manufacturer: syz
[  109.527313][  T316] usb 1-1: SerialNumber: syz
[  109.532503][  T316] usb 1-1: config 0 descriptor??
[  109.537760][ T3176] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  109.546668][  T316] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, da:6e:76:94:cb:c7
[  109.564808][   T36] audit: type=1400 audit(109.548:346): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  109.586003][   T36] audit: type=1400 audit(109.548:347): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.606674][   T36] audit: type=1400 audit(109.548:348): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=5304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  109.627848][   T36] audit: type=1400 audit(109.548:349): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  109.650145][   T36] audit: type=1400 audit(109.548:350): avc:  denied  { getattr } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  109.672767][   T36] audit: type=1400 audit(109.568:351): avc:  denied  { read } for  pid=3195 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.677768][  T392] usb 6-1: Using ep0 maxpacket: 32
[  109.695192][   T36] audit: type=1400 audit(109.568:352): avc:  denied  { open } for  pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.710751][  T392] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  109.724364][   T36] audit: type=1400 audit(109.568:353): avc:  denied  { getattr } for  pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.724392][   T36] audit: type=1400 audit(109.638:354): avc:  denied  { write } for  pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.732743][  T392] usb 6-1: config 0 has no interface number 0
[  109.757056][   T36] audit: type=1400 audit(109.638:355): avc:  denied  { add_name } for  pid=3194 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.779245][  T392] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  109.824092][  T460] usb 1-1: USB disconnect, device number 46
[  109.834017][ T3209] FAULT_INJECTION: forcing a failure.
[  109.834017][ T3209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.851222][  T460] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  109.862281][ T3209] CPU: 1 UID: 0 PID: 3209 Comm: syz.4.1084 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  109.862309][ T3209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  109.862320][ T3209] Call Trace:
[  109.862318][  T392] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  109.862327][ T3209]  <TASK>
[  109.862335][ T3209]  __dump_stack+0x21/0x30
[  109.862365][ T3209]  dump_stack_lvl+0x140/0x1c0
[  109.862389][ T3209]  ? __cfi_dump_stack_lvl+0x10/0x10
[  109.862414][ T3209]  ? check_stack_object+0x81/0x150
[  109.862434][ T3209]  ? __virt_addr_valid+0x2a1/0x370
[  109.862455][ T3209]  dump_stack+0x19/0x20
[  109.862477][ T3209]  should_fail_ex+0x3c2/0x510
[  109.862497][ T3209]  should_fail+0xf/0x20
[  109.862516][ T3209]  should_fail_usercopy+0x1e/0x30
[  109.862536][ T3209]  _copy_from_user+0x20/0xa0
[  109.862563][ T3209]  memdup_user+0x81/0x170
[  109.862588][ T3209]  ? kvm_arch_vcpu_ioctl+0x1361/0x3120
[  109.862607][ T3209]  kvm_arch_vcpu_ioctl+0x19bc/0x3120
[  109.862625][ T3209]  ? avc_has_perm+0x155/0x240
[  109.862645][ T3209]  ? __cfi_avc_has_perm+0x10/0x10
[  109.862664][ T3209]  ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10
[  109.862683][ T3209]  ? selinux_file_open+0x46c/0x630
[  109.862700][ T3209]  ? __cfi_selinux_file_open+0x10/0x10
[  109.862721][ T3209]  ? is_bpf_text_address+0x17b/0x1a0
[  109.862747][ T3209]  ? kernel_text_address+0xa9/0xe0
[  109.862769][ T3209]  ? __kernel_text_address+0x11/0x40
[  109.862792][ T3209]  ? __asan_set_shadow_00+0x12/0x20
[  109.862816][ T3209]  ? do_vfs_ioctl+0x182d/0x2010
[  109.862837][ T3209]  ? arch_stack_walk+0x10a/0x170
[  109.862855][ T3209]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  109.862876][ T3209]  ? _parse_integer_limit+0x195/0x1e0
[  109.862895][ T3209]  ? _parse_integer+0x2e/0x40
[  109.862912][ T3209]  ? kstrtoull+0x13b/0x1e0
[  109.862929][ T3209]  ? kstrtouint+0x78/0xf0
[  109.862947][ T3209]  ? ioctl_has_perm+0x1bc/0x500
[  109.862963][ T3209]  ? __asan_memcpy+0x5a/0x80
[  109.862981][ T3209]  ? ioctl_has_perm+0x408/0x500
[  109.862997][ T3209]  ? has_cap_mac_admin+0xd0/0xd0
[  109.863014][ T3209]  ? __kasan_check_write+0x18/0x20
[  109.863031][ T3209]  ? mutex_lock_killable+0x97/0x1d0
[  109.863055][ T3209]  ? __cfi_mutex_lock_killable+0x10/0x10
[  109.863078][ T3209]  ? proc_fail_nth_write+0x184/0x220
[  109.863102][ T3209]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  109.863127][ T3209]  kvm_vcpu_ioctl+0x7da/0x1000
[  109.863145][ T3209]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  109.863162][ T3209]  ? __cfi_vfs_write+0x10/0x10
[  109.863180][ T3209]  ? __kasan_check_write+0x18/0x20
[  109.863204][ T3209]  ? mutex_unlock+0x90/0x240
[  109.863226][ T3209]  ? __cfi_mutex_unlock+0x10/0x10
[  109.863250][ T3209]  ? bpf_lsm_file_ioctl+0xd/0x20
[  109.863272][ T3209]  ? security_file_ioctl+0x3e/0x110
[  109.863296][ T3209]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  109.863313][ T3209]  __se_sys_ioctl+0x135/0x1b0
[  109.863335][ T3209]  __x64_sys_ioctl+0x7f/0xa0
[  109.863355][ T3209]  x64_sys_call+0x1878/0x2ee0
[  109.863371][ T3209]  do_syscall_64+0x57/0xf0
[  109.863390][ T3209]  ? clear_bhb_loop+0x50/0xa0
[  109.863413][ T3209]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  109.863435][ T3209] RIP: 0033:0x7fa46fb9de99
[  109.863451][ T3209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.863466][ T3209] RSP: 002b:00007fa470a12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  109.863486][ T3209] RAX: ffffffffffffffda RBX: 00007fa46fe25fa0 RCX: 00007fa46fb9de99
[  109.863501][ T3209] RDX: 00002000000001c0 RSI: 000000004008ae89 RDI: 0000000000000005
[  109.863514][ T3209] RBP: 00007fa470a12090 R08: 0000000000000000 R09: 0000000000000000
[  109.863526][ T3209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.863538][ T3209] R13: 00007fa46fe26038 R14: 00007fa46fe25fa0 R15: 00007ffc1132b018
[  109.863554][ T3209]  </TASK>
[  110.239464][  T392] usb 6-1: config 0 interface 85 has no altsetting 0
[  110.249163][  T392] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  110.251932][  T316] usb 4-1: USB disconnect, device number 41
[  110.258258][  T392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.274493][  T392] usb 6-1: Product: syz
[  110.278698][  T392] usb 6-1: Manufacturer: syz
[  110.285539][  T392] usb 6-1: SerialNumber: syz
[  110.291053][  T392] usb 6-1: config 0 descriptor??
[  110.348332][ T3226] rust_binder: Error in use_page_slow: ESRCH
[  110.348355][ T3226] rust_binder: use_range failure ESRCH
[  110.357347][ T3226] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true
[  110.362983][ T3226] rust_binder: Failure in copy_transaction_data: ESRCH
[  110.373640][ T3226] rust_binder: 3224:3226 transaction to 3224 failed: ESRCH
[  110.481275][ T3236] capability: warning: `syz.0.1090' uses 32-bit capabilities (legacy support in use)
[  110.503854][ T3192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.505947][ T3236] rust_binder: Write failure EFAULT in pid:721
[  110.526656][ T3192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.540585][  T411] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  110.698792][  T411] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  110.708766][  T411] usb 5-1: config 0 has no interface number 0
[  110.714867][  T411] usb 5-1: config 0 interface 41 has no altsetting 0
[  110.742263][  T411] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  110.758242][  T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.780130][  T411] usb 5-1: Product: syz
[  110.784303][  T411] usb 5-1: Manufacturer: syz
[  110.786895][ T3287] tmpfs: Unknown parameter ';'
[  110.795206][ T3287] tmpfs: Unknown parameter 'C'
[  110.796289][  T411] usb 5-1: SerialNumber: syz
[  110.807896][  T411] usb 5-1: config 0 descriptor??
[  110.855624][  T392] usb 6-1: USB disconnect, device number 20
[  111.177793][  T460] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  111.327777][  T460] usb 1-1: Using ep0 maxpacket: 16
[  111.334145][  T460] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.344278][  T460] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.354523][  T460] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.363581][  T460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.371584][  T460] usb 1-1: Product: syz
[  111.375743][  T460] usb 1-1: Manufacturer: syz
[  111.380369][  T460] usb 1-1: SerialNumber: syz
[  111.590523][  T460] usb 1-1: 0:2 : does not exist
[  111.595425][  T460] usb 1-1: unit 6 not found!
[  111.603012][  T460] usb 1-1: USB disconnect, device number 47
[  111.614067][  T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  111.630521][  T411] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  111.642987][  T411] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  111.653695][  T411] usb 5-1: USB disconnect, device number 40
[  111.777815][  T316] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  111.929075][  T316] usb 6-1: unable to get BOS descriptor or descriptor too short
[  111.937092][  T316] usb 6-1: not running at top speed; connect to a high speed hub
[  111.945503][  T316] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.955599][  T316] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  111.965876][  T316] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  111.974933][  T316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.982937][  T316] usb 6-1: Product: syz
[  111.987085][  T316] usb 6-1: Manufacturer: syz
[  111.991685][  T316] usb 6-1: SerialNumber: syz
[  112.160539][ T3318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'.
[  112.199321][ T3313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.208617][ T3313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.217222][ T3326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.226107][ T3326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.231225][ T3329] FAULT_INJECTION: forcing a failure.
[  112.231225][ T3329] name failslab, interval 1, probability 0, space 0, times 0
[  112.246620][ T3329] CPU: 0 UID: 0 PID: 3329 Comm: syz.4.1112 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  112.246648][ T3329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  112.246659][ T3329] Call Trace:
[  112.246665][ T3329]  <TASK>
[  112.246672][ T3329]  __dump_stack+0x21/0x30
[  112.246702][ T3329]  dump_stack_lvl+0x140/0x1c0
[  112.246726][ T3329]  ? __cfi_dump_stack_lvl+0x10/0x10
[  112.246752][ T3329]  dump_stack+0x19/0x20
[  112.246775][ T3329]  should_fail_ex+0x3c2/0x510
[  112.246795][ T3329]  should_failslab+0xac/0x100
[  112.246817][ T3329]  __kmalloc_cache_noprof+0x41/0x470
[  112.246837][ T3329]  ? __kasan_kmalloc+0x96/0xb0
[  112.246859][ T3329]  ? legacy_init_fs_context+0x62/0x160
[  112.246884][ T3329]  legacy_init_fs_context+0x62/0x160
[  112.246906][ T3329]  alloc_fs_context+0x5c7/0x800
[  112.246928][ T3329]  fs_context_for_mount+0x26/0x40
[  112.246949][ T3329]  do_new_mount+0x116/0xb40
[  112.246967][ T3329]  ? security_capable+0x44/0x130
[  112.246988][ T3329]  path_mount+0x66a/0xff0
[  112.247004][ T3329]  ? putname+0x113/0x150
[  112.247037][ T3329]  __se_sys_mount+0x2bf/0x480
[  112.247054][ T3329]  ? ksys_write+0x1f3/0x260
[  112.247067][ T3329]  ? __x64_sys_mount+0xf0/0xf0
[  112.247077][ T3329]  __x64_sys_mount+0xc3/0xf0
[  112.247087][ T3329]  x64_sys_call+0x2021/0x2ee0
[  112.247097][ T3329]  do_syscall_64+0x57/0xf0
[  112.247113][ T3329]  ? clear_bhb_loop+0x50/0xa0
[  112.247136][ T3329]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  112.247159][ T3329] RIP: 0033:0x7fa46fb9de99
[  112.247175][ T3329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.247192][ T3329] RSP: 002b:00007fa470a12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  112.247205][ T3329] RAX: ffffffffffffffda RBX: 00007fa46fe25fa0 RCX: 00007fa46fb9de99
[  112.247213][ T3329] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000200000000000
[  112.247220][ T3329] RBP: 00007fa470a12090 R08: 0000000000000000 R09: 0000000000000000
[  112.247227][ T3329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.247233][ T3329] R13: 00007fa46fe26038 R14: 00007fa46fe25fa0 R15: 00007ffc1132b018
[  112.247241][ T3329]  </TASK>
[  112.509804][  T316] usb 6-1: 0:2 : does not exist
[  112.522151][  T316] usb-storage 6-1:1.1: USB Mass Storage device detected
[  112.597791][  T392] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  112.611551][  T316] usb 6-1: USB disconnect, device number 21
[  112.727793][ T1101] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  112.747773][  T392] usb 4-1: Using ep0 maxpacket: 32
[  112.753847][  T392] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  112.761958][  T392] usb 4-1: config 0 has no interface number 0
[  112.768381][  T392] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  112.779593][  T392] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  112.789436][  T392] usb 4-1: config 0 interface 85 has no altsetting 0
[  112.797438][  T392] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  112.806500][  T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.814593][  T392] usb 4-1: Product: syz
[  112.818854][  T392] usb 4-1: Manufacturer: syz
[  112.823439][  T392] usb 4-1: SerialNumber: syz
[  112.828491][  T392] usb 4-1: config 0 descriptor??
[  112.857776][ T1101] usb 5-1: device descriptor read/64, error -71
[  112.877772][   T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  113.027766][   T10] usb 1-1: Using ep0 maxpacket: 16
[  113.033871][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.035302][ T3322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.044141][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.053104][ T3322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.063696][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.078411][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.089702][   T10] usb 1-1: Product: syz
[  113.094326][   T10] usb 1-1: Manufacturer: syz
[  113.099063][   T10] usb 1-1: SerialNumber: syz
[  113.107775][ T1101] usb 5-1: device descriptor read/64, error -71
[  113.289573][  T392] usb 4-1: USB disconnect, device number 42
[  113.308768][   T10] usb 1-1: 0:2 : does not exist
[  113.313654][   T10] usb 1-1: unit 6 not found!
[  113.323183][   T10] usb 1-1: USB disconnect, device number 48
[  113.334382][  T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  113.350140][ T1101] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  113.497808][ T1101] usb 5-1: device descriptor read/64, error -71
[  113.653399][ T3384] syz.5.1135 uses obsolete (PF_INET,SOCK_PACKET)
[  113.737785][ T1101] usb 5-1: device descriptor read/64, error -71
[  113.847871][ T1101] usb usb5-port1: attempt power cycle
[  114.150013][ T3399] FAULT_INJECTION: forcing a failure.
[  114.150013][ T3399] name failslab, interval 1, probability 0, space 0, times 0
[  114.162667][ T3399] CPU: 0 UID: 0 PID: 3399 Comm: syz.0.1140 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  114.162698][ T3399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  114.162710][ T3399] Call Trace:
[  114.162717][ T3399]  <TASK>
[  114.162723][ T3399]  __dump_stack+0x21/0x30
[  114.162744][ T3399]  dump_stack_lvl+0x140/0x1c0
[  114.162758][ T3399]  ? __cfi_dump_stack_lvl+0x10/0x10
[  114.162772][ T3399]  dump_stack+0x19/0x20
[  114.162785][ T3399]  should_fail_ex+0x3c2/0x510
[  114.162797][ T3399]  should_failslab+0xac/0x100
[  114.162809][ T3399]  __kmalloc_node_noprof+0x69/0x500
[  114.162820][ T3399]  ? __kvmalloc_node_noprof+0x128/0x300
[  114.162836][ T3399]  ? __kasan_kmalloc+0x96/0xb0
[  114.162849][ T3399]  __kvmalloc_node_noprof+0x128/0x300
[  114.162863][ T3399]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  114.162878][ T3399]  ? percpu_ref_init+0x1b0/0x4d0
[  114.162892][ T3399]  ? __cfi_io_ring_ctx_ref_free+0x10/0x10
[  114.162903][ T3399]  io_ring_ctx_alloc+0x28c/0x1dc0
[  114.162913][ T3399]  io_uring_create+0x2e0/0x13f0
[  114.162923][ T3399]  ? __kasan_check_write+0x18/0x20
[  114.162933][ T3399]  __se_sys_io_uring_setup+0x2a4/0x2b0
[  114.162947][ T3399]  ? __kasan_check_write+0x18/0x20
[  114.162956][ T3399]  ? __x64_sys_io_uring_setup+0x80/0x80
[  114.162970][ T3399]  ? __kasan_check_read+0x15/0x20
[  114.162980][ T3399]  __x64_sys_io_uring_setup+0x5f/0x80
[  114.162993][ T3399]  x64_sys_call+0x22c0/0x2ee0
[  114.163002][ T3399]  do_syscall_64+0x57/0xf0
[  114.163014][ T3399]  ? clear_bhb_loop+0x50/0xa0
[  114.163027][ T3399]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  114.163040][ T3399] RIP: 0033:0x7f69c279de99
[  114.163049][ T3399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.163058][ T3399] RSP: 002b:00007f69c36e1ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  114.163070][ T3399] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f69c279de99
[  114.163078][ T3399] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  114.163085][ T3399] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  114.163091][ T3399] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  114.163098][ T3399] R13: 0000200000000b10 R14: 00007f69c36e1fd8 R15: 0000000000000000
[  114.163106][ T3399]  </TASK>
[  114.187787][ T1101] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  114.414754][ T3406] netlink: 320 bytes leftover after parsing attributes in process `syz.5.1143'.
[  114.424909][ T1101] usb 5-1: device descriptor read/8, error -71
[  114.511882][ T3417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'.
[  114.521266][ T3415] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  114.574153][ T1101] usb 5-1: device descriptor read/8, error -71
[  114.817811][ T1101] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  114.848735][ T1101] usb 5-1: device descriptor read/8, error -71
[  114.957784][  T316] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  114.998743][ T1101] usb 5-1: device descriptor read/8, error -71
[  115.107780][  T316] usb 4-1: Using ep0 maxpacket: 32
[  115.113002][ T1101] usb usb5-port1: unable to enumerate USB device
[  115.121225][  T316] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  115.129414][  T316] usb 4-1: config 0 has no interface number 0
[  115.135488][  T316] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  115.145487][  T411] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  115.154475][  T316] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  115.163558][  T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.171550][  T316] usb 4-1: Product: syz
[  115.175715][  T316] usb 4-1: Manufacturer: syz
[  115.180385][  T316] usb 4-1: SerialNumber: syz
[  115.185492][  T316] usb 4-1: config 0 descriptor??
[  115.190741][ T3431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  115.277776][  T411] usb 6-1: device descriptor read/64, error -71
[  115.398545][ T3431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  115.514429][   T36] kauditd_printk_skb: 14 callbacks suppressed
[  115.514445][   T36] audit: type=1400 audit(115.488:370): avc:  denied  { accept } for  pid=3450 comm="syz.4.1162" path="socket:[104127]" dev="sockfs" ino=104127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  115.517776][  T411] usb 6-1: device descriptor read/64, error -71
[  115.571790][   T36] audit: type=1326 audit(115.548:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.0.1163" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69c279de99 code=0x0
[  115.787798][  T411] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  115.917798][  T411] usb 6-1: device descriptor read/64, error -71
[  115.963312][  T316] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  115.973502][  T316] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  115.976459][ T3460] FAULT_INJECTION: forcing a failure.
[  115.976459][ T3460] name failslab, interval 1, probability 0, space 0, times 0
[  115.983950][  T316] asix 4-1:0.188: probe with driver asix failed with error -71
[  115.996712][ T3460] CPU: 0 UID: 0 PID: 3460 Comm: syz.3.1164 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  115.996738][ T3460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  115.996749][ T3460] Call Trace:
[  115.996762][ T3460]  <TASK>
[  115.996769][ T3460]  __dump_stack+0x21/0x30
[  115.996798][ T3460]  dump_stack_lvl+0x140/0x1c0
[  115.996822][ T3460]  ? __cfi_dump_stack_lvl+0x10/0x10
[  115.996847][ T3460]  dump_stack+0x19/0x20
[  115.996869][ T3460]  should_fail_ex+0x3c2/0x510
[  115.996889][ T3460]  should_failslab+0xac/0x100
[  115.996910][ T3460]  __kmalloc_node_track_caller_noprof+0x65/0x4f0
[  115.996931][ T3460]  ? vfs_parse_fs_string+0xd9/0x180
[  115.996954][ T3460]  kmemdup_nul+0x5a/0x1a0
[  115.996980][ T3460]  vfs_parse_fs_string+0xd9/0x180
[  115.997002][ T3460]  ? __cfi_vfs_parse_fs_string+0x10/0x10
[  115.997023][ T3460]  ? legacy_init_fs_context+0x8c/0x160
[  115.997047][ T3460]  ? alloc_fs_context+0x5dd/0x800
[  115.997069][ T3460]  do_new_mount+0x1cd/0xb40
[  115.997086][ T3460]  ? security_capable+0x44/0x130
[  115.997106][ T3460]  path_mount+0x66a/0xff0
[  115.997123][ T3460]  ? putname+0x113/0x150
[  115.997142][ T3460]  __se_sys_mount+0x2bf/0x480
[  115.997160][ T3460]  ? ksys_write+0x1f3/0x260
[  115.997177][ T3460]  ? __x64_sys_mount+0xf0/0xf0
[  115.997196][ T3460]  __x64_sys_mount+0xc3/0xf0
[  115.997214][ T3460]  x64_sys_call+0x2021/0x2ee0
[  115.997230][ T3460]  do_syscall_64+0x57/0xf0
[  115.997250][ T3460]  ? clear_bhb_loop+0x50/0xa0
[  115.997272][ T3460]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  115.997294][ T3460] RIP: 0033:0x7f774a59de99
[  115.997309][ T3460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.997325][ T3460] RSP: 002b:00007f774b3ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  115.997344][ T3460] RAX: ffffffffffffffda RBX: 00007f774a825fa0 RCX: 00007f774a59de99
[  115.997359][ T3460] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000200000000000
[  115.997371][ T3460] RBP: 00007f774b3ca090 R08: 0000000000000000 R09: 0000000000000000
[  115.997383][ T3460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.997395][ T3460] R13: 00007f774a826038 R14: 00007f774a825fa0 R15: 00007ffd9f5992d8
[  115.997411][ T3460]  </TASK>
[  116.229653][  T316] usb 4-1: USB disconnect, device number 43
[  116.365692][  T411] usb 6-1: device descriptor read/64, error -71
[  116.478205][  T411] usb usb6-port1: attempt power cycle
[  116.572924][ T3488] usb usb7: usbfs: process 3488 (syz.3.1177) did not claim interface 0 before use
[  116.582889][ T3488] usb usb7: usbfs: process 3488 (syz.3.1177) did not claim interface 5 before use
[  116.624765][ T3490] kvm: pic: non byte write
[  116.817788][  T411] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  116.838725][  T411] usb 6-1: device descriptor read/8, error -71
[  116.917778][  T316] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  116.978805][  T411] usb 6-1: device descriptor read/8, error -71
[  116.990456][ T3497] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1181'.
[  117.119347][   T36] audit: type=1400 audit(117.098:372): avc:  denied  { accept } for  pid=3510 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  117.200006][ T3517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  117.217967][  T411] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  117.233556][  T316] usb 4-1: unable to get BOS descriptor or descriptor too short
[  117.241781][  T316] usb 4-1: unable to read config index 0 descriptor/start: -71
[  117.249508][  T316] usb 4-1: can't read configurations, error -71
[  117.255908][  T411] usb 6-1: device descriptor read/8, error -71
[  117.387803][ T1101] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  117.396259][  T411] usb 6-1: device descriptor read/8, error -71
[  117.447786][ T1791] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  117.507840][  T411] usb usb6-port1: unable to enumerate USB device
[  117.538775][ T1101] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  117.546852][ T1101] usb 5-1: config 0 has no interface number 0
[  117.552939][ T1101] usb 5-1: config 0 interface 41 has no altsetting 0
[  117.560942][ T1101] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  117.570023][ T1101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.578052][ T1101] usb 5-1: Product: syz
[  117.582222][ T1101] usb 5-1: Manufacturer: syz
[  117.586796][ T1101] usb 5-1: SerialNumber: syz
[  117.594628][ T1101] usb 5-1: config 0 descriptor??
[  117.599636][ T1791] usb 1-1: Using ep0 maxpacket: 32
[  117.606092][ T1791] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  117.614503][ T1791] usb 1-1: config 0 has no interface number 0
[  117.620625][ T1791] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  117.631931][ T1791] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  117.640970][ T1791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.648983][ T1791] usb 1-1: Product: syz
[  117.653201][ T1791] usb 1-1: Manufacturer: syz
[  117.657828][ T1791] usb 1-1: SerialNumber: syz
[  117.662933][ T1791] usb 1-1: config 0 descriptor??
[  117.668181][ T3517] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  117.876001][ T3517] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  117.877800][  T316] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  117.917533][   T36] audit: type=1400 audit(117.888:373): avc:  denied  { setopt } for  pid=3521 comm="syz.5.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  118.038776][  T316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.048926][  T316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  118.057853][  T316] usb 4-1: config 1 has no interface number 0
[  118.063956][  T316] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  118.093202][  T316] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.102323][  T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.110370][  T316] usb 4-1: Product: syz
[  118.114569][  T316] usb 4-1: Manufacturer: syz
[  118.119168][  T316] usb 4-1: SerialNumber: syz
[  118.127666][  T316] cdc_ncm 4-1:1.1: NCM or ECM functional descriptors missing
[  118.135633][  T316] cdc_ncm 4-1:1.1: bind() failure
[  118.172935][ T3535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'.
[  118.291553][ T1791] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  118.301874][ T1791] asix 1-1:0.188: probe with driver asix failed with error -71
[  118.310612][ T1791] usb 1-1: USB disconnect, device number 49
[  118.330707][  T316] usb 4-1: USB disconnect, device number 45
[  118.413416][ T1101] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  118.826931][ T1101] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  118.837616][ T1101] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  118.847157][ T1101] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  118.856905][ T1101] usb 5-1: USB disconnect, device number 45
[  119.120143][   T36] audit: type=1400 audit(119.098:374): avc:  denied  { create } for  pid=3563 comm="syz.5.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  119.557783][  T392] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  119.687779][  T392] usb 6-1: device descriptor read/64, error -71
[  119.927795][  T392] usb 6-1: device descriptor read/64, error -71
[  120.097784][ T1101] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  120.167782][  T392] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  120.248780][ T1101] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  120.257001][ T1101] usb 1-1: config 0 has no interface number 0
[  120.263133][ T1101] usb 1-1: config 0 interface 41 has no altsetting 0
[  120.271575][ T1101] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  120.281052][ T1101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.289203][ T1101] usb 1-1: Product: syz
[  120.293367][ T1101] usb 1-1: Manufacturer: syz
[  120.298112][ T1101] usb 1-1: SerialNumber: syz
[  120.305785][ T1101] usb 1-1: config 0 descriptor??
[  120.307782][  T392] usb 6-1: device descriptor read/64, error -71
[  120.354815][ T3613] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1227'.
[  120.557786][  T392] usb 6-1: device descriptor read/64, error -71
[  120.677938][  T392] usb usb6-port1: attempt power cycle
[  120.737773][   T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  120.887782][   T10] usb 5-1: Using ep0 maxpacket: 32
[  120.893948][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.904980][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.914754][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.927558][   T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  120.936610][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.945419][   T10] usb 5-1: config 0 descriptor??
[  120.951570][   T10] usbhid 5-1:0.0: can't add hid device: -22
[  120.957518][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  121.017795][  T392] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  121.038795][  T392] usb 6-1: device descriptor read/8, error -71
[  121.130618][ T1101] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  121.153195][    T9] usb 5-1: USB disconnect, device number 46
[  121.168773][  T392] usb 6-1: device descriptor read/8, error -71
[  121.407796][  T392] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  121.428769][  T392] usb 6-1: device descriptor read/8, error -71
[  121.544261][ T1101] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  121.554942][ T1101] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  121.564387][ T1101] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  121.568803][  T392] usb 6-1: device descriptor read/8, error -71
[  121.573705][ T1101] usb 1-1: USB disconnect, device number 50
[  121.665927][ T3654] FAULT_INJECTION: forcing a failure.
[  121.665927][ T3654] name failslab, interval 1, probability 0, space 0, times 0
[  121.678596][ T3654] CPU: 0 UID: 0 PID: 3654 Comm: syz.4.1243 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  121.678625][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  121.678632][ T3654] Call Trace:
[  121.678636][ T3654]  <TASK>
[  121.678640][ T3654]  __dump_stack+0x21/0x30
[  121.678659][ T3654]  dump_stack_lvl+0x140/0x1c0
[  121.678673][ T3654]  ? __cfi_dump_stack_lvl+0x10/0x10
[  121.678686][ T3654]  ? avc_has_perm+0x155/0x240
[  121.678699][ T3654]  ? __cfi_avc_has_perm+0x10/0x10
[  121.678710][ T3654]  dump_stack+0x19/0x20
[  121.678723][ T3654]  should_fail_ex+0x3c2/0x510
[  121.678734][ T3654]  should_failslab+0xac/0x100
[  121.678749][ T3654]  __kmalloc_cache_noprof+0x41/0x470
[  121.678760][ T3654]  ? vhost_task_create+0x12c/0x3f0
[  121.678772][ T3654]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  121.678784][ T3654]  vhost_task_create+0x12c/0x3f0
[  121.678795][ T3654]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  121.678807][ T3654]  ? __cfi_vhost_task_create+0x10/0x10
[  121.678817][ T3654]  ? __cfi_vhost_task_fn+0x10/0x10
[  121.678827][ T3654]  ? __kasan_check_write+0x18/0x20
[  121.678837][ T3654]  ? mutex_lock+0x97/0x1d0
[  121.678857][ T3654]  ? __cfi_mutex_lock+0x10/0x10
[  121.678869][ T3654]  ? kernel_text_address+0xa9/0xe0
[  121.678883][ T3654]  kvm_mmu_post_init_vm+0x161/0x300
[  121.678898][ T3654]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  121.678911][ T3654]  ? _parse_integer_limit+0x195/0x1e0
[  121.678922][ T3654]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  121.678935][ T3654]  ? kstrtoull+0x13b/0x1e0
[  121.678945][ T3654]  ? kstrtouint+0x78/0xf0
[  121.678955][ T3654]  ? ioctl_has_perm+0x1bc/0x500
[  121.678964][ T3654]  ? __asan_memcpy+0x5a/0x80
[  121.678974][ T3654]  ? ioctl_has_perm+0x408/0x500
[  121.678983][ T3654]  ? has_cap_mac_admin+0xd0/0xd0
[  121.678992][ T3654]  ? __kasan_check_write+0x18/0x20
[  121.679001][ T3654]  ? mutex_lock_killable+0x97/0x1d0
[  121.679015][ T3654]  ? __cfi_mutex_lock_killable+0x10/0x10
[  121.679028][ T3654]  ? proc_fail_nth_write+0x184/0x220
[  121.679043][ T3654]  kvm_vcpu_ioctl+0xa43/0x1000
[  121.679052][ T3654]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  121.679062][ T3654]  ? __cfi_vfs_write+0x10/0x10
[  121.679072][ T3654]  ? __kasan_check_write+0x18/0x20
[  121.679081][ T3654]  ? mutex_unlock+0x90/0x240
[  121.679093][ T3654]  ? __cfi_mutex_unlock+0x10/0x10
[  121.679107][ T3654]  ? bpf_lsm_file_ioctl+0xd/0x20
[  121.679120][ T3654]  ? security_file_ioctl+0x3e/0x110
[  121.679135][ T3654]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  121.679144][ T3654]  __se_sys_ioctl+0x135/0x1b0
[  121.679156][ T3654]  __x64_sys_ioctl+0x7f/0xa0
[  121.679167][ T3654]  x64_sys_call+0x1878/0x2ee0
[  121.679176][ T3654]  do_syscall_64+0x57/0xf0
[  121.679187][ T3654]  ? clear_bhb_loop+0x50/0xa0
[  121.679200][ T3654]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  121.679213][ T3654] RIP: 0033:0x7fa46fb9de99
[  121.679222][ T3654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.679231][ T3654] RSP: 002b:00007fa470a12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.679243][ T3654] RAX: ffffffffffffffda RBX: 00007fa46fe25fa0 RCX: 00007fa46fb9de99
[  121.679251][ T3654] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  121.679258][ T3654] RBP: 00007fa470a12090 R08: 0000000000000000 R09: 0000000000000000
[  121.679264][ T3654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.679270][ T3654] R13: 00007fa46fe26038 R14: 00007fa46fe25fa0 R15: 00007ffc1132b018
[  121.679279][ T3654]  </TASK>
[  122.033550][    T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  122.041180][  T392] usb usb6-port1: unable to enumerate USB device
[  122.091136][ T3656] kvm: kvm [3655]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xb8a0
[  122.099854][ T3656] kvm: kvm [3655]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc5c6
[  122.109913][ T3656] kvm: kvm [3655]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xf7a4
[  122.138670][   T36] audit: type=1400 audit(122.118:375): avc:  denied  { ioctl } for  pid=3659 comm="syz.0.1245" path="socket:[107152]" dev="sockfs" ino=107152 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  122.164107][   T36] audit: type=1400 audit(122.118:376): avc:  denied  { listen } for  pid=3659 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  122.184913][   T36] audit: type=1400 audit(122.118:377): avc:  denied  { ioctl } for  pid=3659 comm="syz.0.1245" path="socket:[107532]" dev="sockfs" ino=107532 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  122.248279][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.258451][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.280577][   T36] audit: type=1400 audit(122.258:378): avc:  denied  { getopt } for  pid=3669 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.285056][    T9] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  122.308427][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.316423][    T9] usb 4-1: Product: syz
[  122.320609][    T9] usb 4-1: Manufacturer: syz
[  122.325204][    T9] usb 4-1: SerialNumber: syz
[  122.357769][   T36] audit: type=1400 audit(122.328:379): avc:  denied  { append } for  pid=3665 comm="syz.4.1248" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  122.405004][   T36] audit: type=1400 audit(122.368:380): avc:  denied  { map } for  pid=3675 comm="syz.5.1252" path="pipe:[107267]" dev="pipefs" ino=107267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  122.420290][ T3678] syz.0.1253: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[  122.428511][   T36] audit: type=1400 audit(122.368:381): avc:  denied  { execute } for  pid=3675 comm="syz.5.1252" path="pipe:[107267]" dev="pipefs" ino=107267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  122.442187][ T3678] CPU: 0 UID: 0 PID: 3678 Comm: syz.0.1253 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  122.442218][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  122.442231][ T3678] Call Trace:
[  122.442245][ T3678]  <TASK>
[  122.442254][ T3678]  __dump_stack+0x21/0x30
[  122.442289][ T3678]  dump_stack_lvl+0x140/0x1c0
[  122.442315][ T3678]  ? __cfi_dump_stack_lvl+0x10/0x10
[  122.442342][ T3678]  dump_stack+0x19/0x20
[  122.442367][ T3678]  warn_alloc+0x1e7/0x2c0
[  122.442392][ T3678]  ? stack_depot_save_flags+0x399/0x800
[  122.442416][ T3678]  ? __cfi_warn_alloc+0x10/0x10
[  122.442440][ T3678]  ? kasan_save_track+0x3e/0x80
[  122.442461][ T3678]  ? kasan_save_alloc_info+0x3a/0x50
[  122.442487][ T3678]  ? xsk_init_queue+0xb2/0x120
[  122.442511][ T3678]  ? xsk_setsockopt+0x4c5/0x760
[  122.442531][ T3678]  ? do_sock_setsockopt+0x27c/0x410
[  122.442549][ T3678]  ? __x64_sys_setsockopt+0x1b7/0x250
[  122.442567][ T3678]  ? x64_sys_call+0x2adc/0x2ee0
[  122.442584][ T3678]  ? do_syscall_64+0x57/0xf0
[  122.442605][ T3678]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  122.442629][ T3678]  __vmalloc_node_range_noprof+0x136/0x1300
[  122.442660][ T3678]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  122.442688][ T3678]  ? kasan_save_alloc_info+0x3a/0x50
[  122.442714][ T3678]  ? __kasan_kmalloc+0x96/0xb0
[  122.442736][ T3678]  ? __kmalloc_cache_noprof+0x23c/0x470
[  122.442757][ T3678]  vmalloc_user_noprof+0x77/0x90
[  122.442783][ T3678]  ? xskq_create+0xdb/0x290
[  122.442805][ T3678]  xskq_create+0xdb/0x290
[  122.442828][ T3678]  xsk_init_queue+0xb2/0x120
[  122.442850][ T3678]  xsk_setsockopt+0x4c5/0x760
[  122.442872][ T3678]  ? __cfi_xsk_setsockopt+0x10/0x10
[  122.442894][ T3678]  ? do_futex+0x32a/0x510
[  122.442918][ T3678]  ? file_init_path+0x434/0x590
[  122.442942][ T3678]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  122.442964][ T3678]  ? security_socket_setsockopt+0x3d/0x100
[  122.442988][ T3678]  ? __cfi_xsk_setsockopt+0x10/0x10
[  122.443011][ T3678]  do_sock_setsockopt+0x27c/0x410
[  122.443029][ T3678]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  122.443047][ T3678]  ? __fget_files+0x2bc/0x330
[  122.443070][ T3678]  __x64_sys_setsockopt+0x1b7/0x250
[  122.443089][ T3678]  x64_sys_call+0x2adc/0x2ee0
[  122.443107][ T3678]  do_syscall_64+0x57/0xf0
[  122.443126][ T3678]  ? clear_bhb_loop+0x50/0xa0
[  122.443149][ T3678]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  122.443172][ T3678] RIP: 0033:0x7f69c279de99
[  122.443188][ T3678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.443205][ T3678] RSP: 002b:00007f69c36e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  122.443225][ T3678] RAX: ffffffffffffffda RBX: 00007f69c2a25fa0 RCX: 00007f69c279de99
[  122.443245][ T3678] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  122.443259][ T3678] RBP: 00007f69c2833eaf R08: 0000000000000004 R09: 0000000000000000
[  122.443273][ T3678] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  122.443286][ T3678] R13: 00007f69c2a26038 R14: 00007f69c2a25fa0 R15: 00007fffc86fb018
[  122.443304][ T3678]  </TASK>
[  122.443358][ T3678] Mem-Info:
[  122.533179][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.536284][ T3678] active_anon:57932 inactive_anon:16 isolated_anon:0
[  122.536284][ T3678]  active_file:19817 inactive_file:2433 isolated_file:0
[  122.536284][ T3678]  unevictable:0 dirty:26 writeback:125
[  122.536284][ T3678]  slab_reclaimable:6821 slab_unreclaimable:70068
[  122.536284][ T3678]  mapped:24995 shmem:48397 pagetables:1048
[  122.536284][ T3678]  sec_pagetables:3 bounce:0
[  122.536284][ T3678]  kernel_misc_reclaimable:0
[  122.536284][ T3678]  free:1469898 free_pcp:2891 free_cma:0
[  122.544701][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.545965][ T3678] Node 0 active_anon:231728kB inactive_anon:64kB active_file:79268kB inactive_file:9732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99980kB dirty:104kB writeback:500kB shmem:193588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6832kB pagetables:3892kB sec_pagetables:12kB all_unreclaimable? no
[  122.637830][  T316] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  122.642384][ T3678] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:68kB free_cma:0kB
[  122.787777][  T316] usb 6-1: device descriptor read/64, error -71
[  122.825439][ T3678] lowmem_reserve[]: 0 3921 3921
[  122.913569][ T3678] Normal free:2928056kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:231764kB inactive_anon:68kB active_file:79268kB inactive_file:9740kB unevictable:0kB writepending:8kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3196kB local_pcp:2764kB free_cma:0kB
[  122.944686][ T3678] lowmem_reserve[]: 0 0 0
[  122.949050][ T3678] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  122.964532][ T3678] Normal: 2535*4kB (UME) 106*8kB (UME) 59*16kB (UME) 305*32kB (UME) 112*64kB (UME) 21*128kB (UME) 34*256kB (UME) 22*512kB (UME) 26*1024kB (UME) 4*2048kB (UM) 694*4096kB (UM) = 2928956kB
[  122.982928][ T3678] 70703 total pagecache pages
[  122.987611][ T3678] 57 pages in swap cache
[  122.991855][ T3678] Free swap  = 124420kB
[  122.996006][ T3678] Total swap = 124996kB
[  123.000167][ T3678] 2097051 pages RAM
[  123.003978][ T3678] 0 pages HighMem/MovableOnly
[  123.008877][ T3678] 352235 pages reserved
[  123.013026][ T3678] 0 pages cma reserved
[  123.018455][ T3678] Memory allocations:
[  123.022442][ T3678]          0 B        0 init/main.c:1477 func:do_initcalls
[  123.029659][ T3678]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  123.037751][ T3678]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  123.045385][ T3678]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  123.053384][ T3678]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  123.061298][ T3678]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  123.069906][ T3678]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  123.077813][ T3678]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  123.087998][  T316] usb 6-1: device descriptor read/64, error -71
[  123.088543][ T3678]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  123.103931][ T3678]          0 B        0 init/initramfs.c:101 func:find_link
[  123.327808][  T316] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  123.337872][  T411] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  123.457820][  T316] usb 6-1: device descriptor read/64, error -71
[  123.488865][  T411] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  123.496946][  T411] usb 5-1: config 0 has no interface number 0
[  123.503055][  T411] usb 5-1: config 0 interface 41 has no altsetting 0
[  123.511124][  T411] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  123.520179][  T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.528186][  T411] usb 5-1: Product: syz
[  123.532337][  T411] usb 5-1: Manufacturer: syz
[  123.536904][  T411] usb 5-1: SerialNumber: syz
[  123.542418][  T411] usb 5-1: config 0 descriptor??
[  123.697796][  T316] usb 6-1: device descriptor read/64, error -71
[  123.817884][  T316] usb usb6-port1: attempt power cycle
[  123.867772][   T10] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  123.997776][   T10] usb 1-1: device descriptor read/64, error -71
[  124.167788][  T316] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  124.188720][  T316] usb 6-1: device descriptor read/8, error -71
[  124.247773][   T10] usb 1-1: device descriptor read/64, error -71
[  124.318801][  T316] usb 6-1: device descriptor read/8, error -71
[  124.352121][  T411] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  124.415333][    T9] usb 4-1: unit 4 not found!
[  124.428080][    T9] usb 4-1: USB disconnect, device number 46
[  124.487784][   T10] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  124.557877][  T316] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  124.579557][  T316] usb 6-1: device descriptor read/8, error -71
[  124.617774][   T10] usb 1-1: device descriptor read/64, error -71
[  124.708946][  T316] usb 6-1: device descriptor read/8, error -71
[  124.765882][  T411] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  124.777556][  T411] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  124.788318][  T411] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  124.797593][  T411] usb 5-1: USB disconnect, device number 47
[  124.829073][  T316] usb usb6-port1: unable to enumerate USB device
[  124.857771][   T10] usb 1-1: device descriptor read/64, error -71
[  124.977845][   T10] usb usb1-port1: attempt power cycle
[  125.317794][   T10] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  125.338717][   T10] usb 1-1: device descriptor read/8, error -71
[  125.469679][ T3735] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1277'.
[  125.484013][ T3735] tipc: Started in network mode
[  125.489129][ T3735] tipc: Node identity ac14140f, cluster identity 4711
[  125.496601][ T3735] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.503283][   T10] usb 1-1: device descriptor read/8, error -71
[  125.586266][ T3748] program syz.4.1282 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.684505][ T3762] FAULT_INJECTION: forcing a failure.
[  125.684505][ T3762] name failslab, interval 1, probability 0, space 0, times 0
[  125.697372][ T3762] CPU: 0 UID: 0 PID: 3762 Comm: syz.4.1289 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  125.697401][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  125.697413][ T3762] Call Trace:
[  125.697420][ T3762]  <TASK>
[  125.697429][ T3762]  __dump_stack+0x21/0x30
[  125.697460][ T3762]  dump_stack_lvl+0x140/0x1c0
[  125.697485][ T3762]  ? __cfi_dump_stack_lvl+0x10/0x10
[  125.697512][ T3762]  dump_stack+0x19/0x20
[  125.697535][ T3762]  should_fail_ex+0x3c2/0x510
[  125.697558][ T3762]  should_failslab+0xac/0x100
[  125.697582][ T3762]  __kmalloc_node_noprof+0x69/0x500
[  125.697603][ T3762]  ? __kvmalloc_node_noprof+0x128/0x300
[  125.697632][ T3762]  __kvmalloc_node_noprof+0x128/0x300
[  125.697660][ T3762]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  125.697686][ T3762]  ? percpu_ref_init+0x1b0/0x4d0
[  125.697705][ T3762]  ? __cfi_io_ring_ctx_ref_free+0x10/0x10
[  125.697725][ T3762]  io_ring_ctx_alloc+0x428/0x1dc0
[  125.697744][ T3762]  io_uring_create+0x2e0/0x13f0
[  125.697761][ T3762]  ? __kasan_check_write+0x18/0x20
[  125.697777][ T3762]  __se_sys_io_uring_setup+0x2a4/0x2b0
[  125.697800][ T3762]  ? __kasan_check_write+0x18/0x20
[  125.697815][ T3762]  ? __x64_sys_io_uring_setup+0x80/0x80
[  125.697838][ T3762]  ? __kasan_check_read+0x15/0x20
[  125.697854][ T3762]  __x64_sys_io_uring_setup+0x5f/0x80
[  125.697875][ T3762]  x64_sys_call+0x22c0/0x2ee0
[  125.697891][ T3762]  do_syscall_64+0x57/0xf0
[  125.697909][ T3762]  ? clear_bhb_loop+0x50/0xa0
[  125.697930][ T3762]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  125.697950][ T3762] RIP: 0033:0x7fa46fb9de99
[  125.697965][ T3762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.697980][ T3762] RSP: 002b:00007fa470a11ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  125.697998][ T3762] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fa46fb9de99
[  125.698018][ T3762] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  125.698031][ T3762] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  125.698042][ T3762] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  125.698055][ T3762] R13: 0000200000000b10 R14: 00007fa470a11fd8 R15: 0000000000000000
[  125.698070][ T3762]  </TASK>
[  125.977823][   T10] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  126.001518][ T3773] program syz.5.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.023504][   T10] usb 1-1: device descriptor read/8, error -71
[  126.158984][   T10] usb 1-1: device descriptor read/8, error -71
[  126.268186][   T10] usb usb1-port1: unable to enumerate USB device
[  126.287783][    T9] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  126.438788][    T9] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  126.448943][    T9] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  126.462919][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  126.474614][    T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  126.487683][    T9] usb 6-1: Product: syz
[  126.491910][   T10] tipc: Node number set to 2886997007
[  126.501349][    T9] usb 6-1: Manufacturer: syz
[  126.512555][    T9] hub 6-1:4.0: bad descriptor, ignoring hub
[  126.521024][    T9] hub 6-1:4.0: probe with driver hub failed with error -5
[  126.528539][    T9] usbhid 6-1:4.0: couldn't find an input interrupt endpoint
[  126.651146][   T36] audit: type=1400 audit(126.628:382): avc:  denied  { setopt } for  pid=3795 comm="syz.3.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  126.658121][ T3800] 9pnet_fd: Insufficient options for proto=fd
[  126.817873][    T9] usb 6-1: USB disconnect, device number 34
[  126.871100][ T3819] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1305'.
[  127.227769][    T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  127.357772][    T9] usb 1-1: device descriptor read/64, error -71
[  127.506891][   T36] audit: type=1400 audit(127.478:383): avc:  denied  { append } for  pid=3844 comm="syz.3.1315" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  127.607810][    T9] usb 1-1: device descriptor read/64, error -71
[  127.686135][ T3854] netlink: 'syz.3.1318': attribute type 4 has an invalid length.
[  127.693891][ T3854] netlink: 'syz.3.1318': attribute type 6 has an invalid length.
[  127.701676][ T3854] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1318'.
[  127.718589][   T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  127.847784][    T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  127.855375][   T10] usb 5-1: device descriptor read/64, error -71
[  127.987773][    T9] usb 1-1: device descriptor read/64, error -71
[  128.097775][   T10] usb 5-1: device descriptor read/64, error -71
[  128.227804][    T9] usb 1-1: device descriptor read/64, error -71
[  128.312281][ T3867] kvm: pic: non byte write
[  128.338456][    T9] usb usb1-port1: attempt power cycle
[  128.357879][   T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  128.487776][   T10] usb 5-1: device descriptor read/64, error -71
[  128.565315][ T3874] FAULT_INJECTION: forcing a failure.
[  128.565315][ T3874] name failslab, interval 1, probability 0, space 0, times 0
[  128.584314][ T3874] CPU: 0 UID: 0 PID: 3874 Comm: syz.5.1325 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  128.584345][ T3874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  128.584358][ T3874] Call Trace:
[  128.584365][ T3874]  <TASK>
[  128.584372][ T3874]  __dump_stack+0x21/0x30
[  128.584403][ T3874]  dump_stack_lvl+0x140/0x1c0
[  128.584427][ T3874]  ? __cfi_dump_stack_lvl+0x10/0x10
[  128.584451][ T3874]  dump_stack+0x19/0x20
[  128.584473][ T3874]  should_fail_ex+0x3c2/0x510
[  128.584495][ T3874]  should_failslab+0xac/0x100
[  128.584517][ T3874]  __kmalloc_node_noprof+0x69/0x500
[  128.584537][ T3874]  ? __kvmalloc_node_noprof+0x128/0x300
[  128.584563][ T3874]  __kvmalloc_node_noprof+0x128/0x300
[  128.584589][ T3874]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  128.584614][ T3874]  ? percpu_ref_init+0x1b0/0x4d0
[  128.584635][ T3874]  ? __cfi_io_ring_ctx_ref_free+0x10/0x10
[  128.584656][ T3874]  io_ring_ctx_alloc+0x4f6/0x1dc0
[  128.584676][ T3874]  io_uring_create+0x2e0/0x13f0
[  128.584694][ T3874]  ? __kasan_check_write+0x18/0x20
[  128.584714][ T3874]  __se_sys_io_uring_setup+0x2a4/0x2b0
[  128.584737][ T3874]  ? __kasan_check_write+0x18/0x20
[  128.584755][ T3874]  ? __x64_sys_io_uring_setup+0x80/0x80
[  128.584781][ T3874]  ? __kasan_check_read+0x15/0x20
[  128.584799][ T3874]  __x64_sys_io_uring_setup+0x5f/0x80
[  128.584822][ T3874]  x64_sys_call+0x22c0/0x2ee0
[  128.584839][ T3874]  do_syscall_64+0x57/0xf0
[  128.584859][ T3874]  ? clear_bhb_loop+0x50/0xa0
[  128.584883][ T3874]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  128.584912][ T3874] RIP: 0033:0x7ffb8db9de99
[  128.584928][ T3874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.584945][ T3874] RSP: 002b:00007ffb8ea57ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  128.584966][ T3874] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007ffb8db9de99
[  128.584981][ T3874] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  128.584995][ T3874] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  128.585008][ T3874] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  128.585022][ T3874] R13: 0000200000000b10 R14: 00007ffb8ea57fd8 R15: 0000000000000000
[  128.585038][ T3874]  </TASK>
[  128.857717][   T36] audit: type=1400 audit(128.828:384): avc:  denied  { read } for  pid=3884 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  128.879210][    T9] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  128.901864][    T9] usb 1-1: device descriptor read/8, error -71
[  128.937782][   T10] usb 5-1: device descriptor read/64, error -71
[  128.975243][ T3890] kvm: pic: non byte write
[  129.038194][   T36] audit: type=1400 audit(129.018:385): avc:  denied  { ioctl } for  pid=3827 comm="syz.0.1309" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.038992][    T9] usb 1-1: device descriptor read/8, error -71
[  129.068717][   T10] usb usb5-port1: attempt power cycle
[  129.238067][ T3924] tipc: New replicast peer: 255.255.255.255
[  129.245041][ T3924] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.270325][   T36] audit: type=1400 audit(129.248:386): avc:  denied  { read write } for  pid=3925 comm="ip" path="/dev/console" dev="rootfs" ino=107 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  129.293038][   T36] audit: type=1400 audit(129.248:387): avc:  denied  { mounton } for  pid=3923 comm="syz.5.1337" path="/236/file0" dev="tmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  129.307795][    T9] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  129.315520][   T36] audit: type=1400 audit(129.258:388): avc:  denied  { unlink } for  pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1
[  129.349014][    T9] usb 1-1: device descriptor read/8, error -71
[  129.372899][   T36] audit: type=1400 audit(129.348:389): avc:  denied  { read write } for  pid=3932 comm="iptables" path="/dev/console" dev="rootfs" ino=107 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  129.395978][   T36] audit: type=1400 audit(129.358:390): avc:  denied  { search } for  pid=3932 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.408081][   T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  129.417142][   T36] audit: type=1400 audit(129.358:391): avc:  denied  { write } for  pid=3932 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.438789][   T10] usb 5-1: device descriptor read/8, error -71
[  129.445704][   T36] audit: type=1400 audit(129.358:392): avc:  denied  { add_name } for  pid=3932 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.478949][    T9] usb 1-1: device descriptor read/8, error -71
[  129.587936][    T9] usb usb1-port1: unable to enumerate USB device
[  129.600768][   T10] usb 5-1: device descriptor read/8, error -71
[  129.847810][   T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  129.868820][   T10] usb 5-1: device descriptor read/8, error -71
[  129.957101][ T3954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1341'.
[  130.004892][   T10] usb 5-1: device descriptor read/8, error -71
[  130.089802][ T3961] kvm: pic: non byte write
[  130.117833][   T10] usb usb5-port1: unable to enumerate USB device
[  130.357785][   T10] tipc: Node number set to 588201749
[  130.397801][    T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  130.547801][    T9] usb 1-1: Using ep0 maxpacket: 32
[  130.553975][    T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  130.562084][    T9] usb 1-1: config 0 has no interface number 0
[  130.569517][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  130.578587][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.586547][    T9] usb 1-1: Product: syz
[  130.590708][    T9] usb 1-1: Manufacturer: syz
[  130.595282][    T9] usb 1-1: SerialNumber: syz
[  130.600410][    T9] usb 1-1: config 0 descriptor??
[  130.605931][    T9] smsc95xx v2.0.0
Connection to 10.128.0.49 closed by remote host.
[  130.877988][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  130.917786][   T10] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  130.937810][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  130.982194][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  131.017804][    T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  131.037919][    T9] usb 1-1: USB disconnect, device number 59
[  131.170800][  T344] bridge_slave_1: left allmulticast mode
[  131.176480][  T344] bridge_slave_1: left promiscuous mode
[  131.187837][  T344] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.198616][  T344] bridge_slave_0: left allmulticast mode
[  131.204524][  T344] bridge_slave_0: left promiscuous mode
[  131.210254][  T344] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.339749][  T344] veth1_macvtap: left promiscuous mode
[  131.345230][  T344] veth0_vlan: left promiscuous mode
[  131.558908][  T344] bridge_slave_1: left allmulticast mode
[  131.564555][  T344] bridge_slave_1: left promiscuous mode
[  131.570226][  T344] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.577592][  T344] bridge_slave_0: left allmulticast mode
[  131.583317][  T344] bridge_slave_0: left promiscuous mode
[  131.588914][  T344] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.596354][  T344] bridge_slave_1: left allmulticast mode
[  131.602016][  T344] bridge_slave_1: left promiscuous mode
[  131.607611][  T344] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.614957][  T344] bridge_slave_0: left allmulticast mode
[  131.620634][  T344] bridge_slave_0: left promiscuous mode
[  131.626197][  T344] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.799356][  T344] tipc: Disabling bearer <udp:syz2>
[  131.804701][  T344] tipc: Left network mode
[  131.810269][  T344] veth1_macvtap: left promiscuous mode
[  131.815763][  T344] veth0_vlan: left promiscuous mode
[  131.821266][  T344] veth1_macvtap: left promiscuous mode
[  131.826753][  T344] veth0_vlan: left promiscuous mode
[  132.139076][  T344] ------------[ cut here ]------------
[  132.144557][  T344] WARNING: CPU: 0 PID: 344 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140
[  132.154570][  T344] Modules linked in:
[  132.158479][  T344] CPU: 0 UID: 0 PID: 344 Comm: kworker/u8:13 Not tainted syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  132.170204][  T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  132.180263][  T344] Workqueue: netns cleanup_net
[  132.185040][  T344] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140
[  132.191176][  T344] Code: e8 11 f2 d6 fc 4b 83 3c 3e 00 75 19 e8 a5 3e 7e fc 49 81 ff f8 07 00 00 74 1b e8 97 3e 7e fc 49 83 c7 08 eb c9 e8 8c 3e 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
[  132.210896][  T344] RSP: 0018:ffffc9000b997b90 EFLAGS: 00010293
[  132.217034][  T344] RAX: ffffffff85093474 RBX: ffff888129ca91c0 RCX: ffff888113120000
[  132.225127][  T344] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810433c000
[  132.233095][  T344] RBP: ffffc9000b997bb0 R08: 0000000000000003 R09: 0000000000000004
[  132.241070][  T344] R10: dffffc0000000000 R11: fffff52001732f04 R12: dffffc0000000000
[  132.249055][  T344] R13: dffffc0000000000 R14: ffff88810433c000 R15: 0000000000000000
[  132.257012][  T344] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  132.265939][  T344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.272530][  T344] CR2: 00007f7eaa481bd0 CR3: 000000010b350000 CR4: 00000000003526b0
[  132.280513][  T344] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000
[  132.288487][  T344] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  132.296451][  T344] Call Trace:
[  132.299759][  T344]  <TASK>
[  132.302684][  T344]  cleanup_net+0x6bd/0xc90
[  132.307086][  T344]  ? __cfi_cleanup_net+0x10/0x10
[  132.312048][  T344]  ? kick_pool+0xb9/0x540
[  132.316374][  T344]  process_scheduled_works+0x7f7/0x1060
[  132.321925][  T344]  worker_thread+0xc99/0x13f0
[  132.326607][  T344]  kthread+0x2c7/0x360
[  132.330689][  T344]  ? __cfi_worker_thread+0x10/0x10
[  132.335787][  T344]  ? __cfi_kthread+0x10/0x10
[  132.340377][  T344]  ret_from_fork+0x67/0xa0
[  132.344796][  T344]  ? __cfi_kthread+0x10/0x10
[  132.349402][  T344]  ret_from_fork_asm+0x1a/0x30
[  132.354154][  T344]  </TASK>
[  132.357151][  T344] ---[ end trace 0000000000000000 ]---
[  132.362760][  T344] ------------[ cut here ]------------
[  132.368220][  T344] WARNING: CPU: 1 PID: 344 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140
[  132.378334][  T344] Modules linked in:
[  132.382223][  T344] CPU: 1 UID: 0 PID: 344 Comm: kworker/u8:13 Tainted: G        W          syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  132.395419][  T344] Tainted: [W]=WARN
[  132.399272][  T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  132.409338][  T344] Workqueue: netns cleanup_net
[  132.414098][  T344] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140
[  132.420175][  T344] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 50 3e 7e fc 49 81 ff f8 07 00 00 74 1b e8 42 3e 7e fc 49 83 c7 08 eb c5 e8 37 3e 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 27 3e 7e fc 5b 41 5c 41 5e 41
[  132.439800][  T344] RSP: 0018:ffffc9000b997b90 EFLAGS: 00010293
[  132.445877][  T344] RAX: ffffffff850934c9 RBX: ffff88810433c800 RCX: ffff888113120000
[  132.453854][  T344] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810433c808
[  132.461828][  T344] RBP: ffffc9000b997bb0 R08: 0000000000000003 R09: 0000000000000004
[  132.469803][  T344] R10: dffffc0000000000 R11: fffff52001732f04 R12: dffffc0000000000
[  132.477778][  T344] R13: dffffc0000000000 R14: ffff88810433c000 R15: 0000000000000008
[  132.485737][  T344] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  132.494659][  T344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.501245][  T344] CR2: 00007f5134fae4c0 CR3: 000000010b350000 CR4: 00000000003526b0
[  132.509229][  T344] Call Trace:
[  132.512502][  T344]  <TASK>
[  132.515417][  T344]  cleanup_net+0x6bd/0xc90
[  132.519829][  T344]  ? __cfi_cleanup_net+0x10/0x10
[  132.524756][  T344]  ? kick_pool+0xb9/0x540
[  132.529099][  T344]  process_scheduled_works+0x7f7/0x1060
[  132.534641][  T344]  worker_thread+0xc99/0x13f0
[  132.539319][  T344]  kthread+0x2c7/0x360
[  132.543379][  T344]  ? __cfi_worker_thread+0x10/0x10
[  132.548490][  T344]  ? __cfi_kthread+0x10/0x10
[  132.553099][  T344]  ret_from_fork+0x67/0xa0
[  132.557496][  T344]  ? __cfi_kthread+0x10/0x10
[  132.562112][  T344]  ret_from_fork_asm+0x1a/0x30
[  132.566869][  T344]  </TASK>
[  132.569911][  T344] ---[ end trace 0000000000000000 ]---
[  132.577862][  T344] ------------[ cut here ]------------
[  132.583329][  T344] WARNING: CPU: 0 PID: 344 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310
[  132.592799][  T344] Modules linked in:
[  132.596680][  T344] CPU: 0 UID: 0 PID: 344 Comm: kworker/u8:13 Tainted: G        W          syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  132.609981][  T344] Tainted: [W]=WARN
[  132.613800][  T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  132.623975][  T344] Workqueue: netns cleanup_net
[  132.628748][  T344] RIP: 0010:xfrm_state_fini+0x2be/0x310
[  132.634291][  T344] Code: 3c 20 00 74 08 48 89 df e8 ff b1 f1 fc 48 8b 3b e8 17 a3 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 82 fe 98 fc <0f> 0b e9 b0 fd ff ff e8 76 fe 98 fc 0f 0b e9 18 fe ff ff e8 6a fe
[  132.653897][  T344] RSP: 0018:ffffc9000b997b70 EFLAGS: 00010293
[  132.659968][  T344] RAX: ffffffff84ee747e RBX: ffff888129ca91c0 RCX: ffff888113120000
[  132.667970][  T344] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888113120000
[  132.675934][  T344] RBP: ffffc9000b997b98 R08: ffffffff87d41e67 R09: 1ffffffff0fa83cc
[  132.683903][  T344] R10: dffffc0000000000 R11: fffffbfff0fa83cd R12: 1ffffffff0fa8120
[  132.691878][  T344] R13: dffffc0000000000 R14: ffff888129ca9dc0 R15: dffffc0000000000
[  132.699851][  T344] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  132.708782][  T344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.715355][  T344] CR2: 00007f7eaa481bd0 CR3: 000000010b350000 CR4: 00000000003526b0
[  132.723322][  T344] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000
[  132.731320][  T344] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  132.739300][  T344] Call Trace:
[  132.742595][  T344]  <TASK>
[  132.745506][  T344]  xfrm_net_exit+0x31/0x80
[  132.749924][  T344]  cleanup_net+0x6bd/0xc90
[  132.754330][  T344]  ? __cfi_cleanup_net+0x10/0x10
[  132.759263][  T344]  ? kick_pool+0xb9/0x540
[  132.763587][  T344]  process_scheduled_works+0x7f7/0x1060
[  132.769131][  T344]  worker_thread+0xc99/0x13f0
[  132.773816][  T344]  kthread+0x2c7/0x360
[  132.777881][  T344]  ? __cfi_worker_thread+0x10/0x10
[  132.782984][  T344]  ? __cfi_kthread+0x10/0x10
[  132.787552][  T344]  ret_from_fork+0x67/0xa0
[  132.791969][  T344]  ? __cfi_kthread+0x10/0x10
[  132.796564][  T344]  ret_from_fork_asm+0x1a/0x30
[  132.801321][  T344]  </TASK>
[  132.804327][  T344] ---[ end trace 0000000000000000 ]---
[  132.810016][  T344] ------------[ cut here ]------------
[  132.815458][  T344] WARNING: CPU: 1 PID: 344 at net/xfrm/xfrm_state.c:3224 xfrm_state_fini+0x2e2/0x310
[  132.824913][  T344] Modules linked in:
[  132.828803][  T344] CPU: 1 UID: 0 PID: 344 Comm: kworker/u8:13 Tainted: G        W          syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  132.842006][  T344] Tainted: [W]=WARN
[  132.845787][  T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  132.855827][  T344] Workqueue: netns cleanup_net
[  132.860581][  T344] RIP: 0010:xfrm_state_fini+0x2e2/0x310
[  132.866109][  T344] Code: cc e8 82 fe 98 fc 0f 0b e9 b0 fd ff ff e8 76 fe 98 fc 0f 0b e9 18 fe ff ff e8 6a fe 98 fc 0f 0b e9 8c fe ff ff e8 5e fe 98 fc <0f> 0b e9 f9 fe ff ff e8 52 fe 98 fc 0f 0b e9 66 ff ff ff 89 f9 80
[  132.885710][  T344] RSP: 0018:ffffc9000b997b70 EFLAGS: 00010293
[  132.891781][  T344] RAX: ffffffff84ee74a2 RBX: ffff888129ca91c0 RCX: ffff888113120000
[  132.899744][  T344] RDX: 0000000000000000 RSI: ffff888103a75400 RDI: ffff8881000418c0
[  132.907692][  T344] RBP: ffffc9000b997b98 R08: 000000001d7cad27 R09: 00000000678915cc
[  132.915653][  T344] R10: 000000000000000d R11: ffffffff81759e30 R12: ffff888103a75200
[  132.923612][  T344] R13: 1ffff110253953bb R14: 0000000000000040 R15: ffff888129ca9dd8
[  132.931573][  T344] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  132.940497][  T344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.947059][  T344] CR2: 00007f5134fae4c0 CR3: 000000010b350000 CR4: 00000000003526b0
[  132.955018][  T344] Call Trace:
[  132.958286][  T344]  <TASK>
[  132.961214][  T344]  xfrm_net_exit+0x31/0x80
[  132.965615][  T344]  cleanup_net+0x6bd/0xc90
[  132.970018][  T344]  ? __cfi_cleanup_net+0x10/0x10
[  132.974935][  T344]  ? kick_pool+0xb9/0x540
[  132.979251][  T344]  process_scheduled_works+0x7f7/0x1060
[  132.984791][  T344]  worker_thread+0xc99/0x13f0
[  132.989460][  T344]  kthread+0x2c7/0x360
[  132.993510][  T344]  ? __cfi_worker_thread+0x10/0x10
[  132.998627][  T344]  ? __cfi_kthread+0x10/0x10
[  133.003196][  T344]  ret_from_fork+0x67/0xa0
[  133.007592][  T344]  ? __cfi_kthread+0x10/0x10
[  133.012174][  T344]  ret_from_fork_asm+0x1a/0x30
[  133.016919][  T344]  </TASK>
[  133.019929][  T344] ---[ end trace 0000000000000000 ]---
[  133.025485][  T344] ------------[ cut here ]------------
[  133.030934][  T344] WARNING: CPU: 1 PID: 344 at net/xfrm/xfrm_state.c:3226 xfrm_state_fini+0x2ee/0x310
[  133.040424][  T344] Modules linked in:
[  133.044305][  T344] CPU: 1 UID: 0 PID: 344 Comm: kworker/u8:13 Tainted: G        W          syzkaller #0 0d2653c4e30e8393174ae36c9890472a2669fe52
[  133.057495][  T344] Tainted: [W]=WARN
[  133.061317][  T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  133.071377][  T344] Workqueue: netns cleanup_net
[  133.076135][  T344] RIP: 0010:xfrm_state_fini+0x2ee/0x310
[  133.081675][  T344] Code: ff e8 76 fe 98 fc 0f 0b e9 18 fe ff ff e8 6a fe 98 fc 0f 0b e9 8c fe ff ff e8 5e fe 98 fc 0f 0b e9 f9 fe ff ff e8 52 fe 98 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff
[  133.101353][  T344] RSP: 0018:ffffc9000b997b70 EFLAGS: 00010293
[  133.107398][  T344] RAX: ffffffff84ee74ae RBX: ffff888129ca91c0 RCX: ffff888113120000
[  133.115367][  T344] RDX: 0000000000000000 RSI: ffff888103a75200 RDI: ffff8881000418c0
[  133.123346][  T344] RBP: ffffc9000b997b98 R08: 000000007770752f R09: 0000000070108d6f
[  133.131321][  T344] R10: 000000000000000d R11: ffffffff81759e30 R12: ffff888103a75b80
[  133.139318][  T344] R13: 1ffff110253953ba R14: 0000000000000040 R15: ffff888129ca9dd0
[  133.147276][  T344] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  133.156199][  T344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.162784][  T344] CR2: 00007f5134fae4c0 CR3: 000000010b350000 CR4: 00000000003526b0
[  133.170765][  T344] Call Trace:
[  133.174032][  T344]  <TASK>
[  133.176962][  T344]  xfrm_net_exit+0x31/0x80
[  133.181388][  T344]  cleanup_net+0x6bd/0xc90
[  133.185795][  T344]  ? __cfi_cleanup_net+0x10/0x10
[  133.190726][  T344]  ? kick_pool+0xb9/0x540
[  133.195061][  T344]  process_scheduled_works+0x7f7/0x1060
[  133.200620][  T344]  worker_thread+0xc99/0x13f0
[  133.205324][  T344]  kthread+0x2c7/0x360
[  133.205925][ T3982] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  133.209412][  T344]  ? __cfi_worker_thread+0x10/0x10
[  133.220489][  T344]  ? __cfi_kthread+0x10/0x10
[  133.221237][ T3982] ACPI: PM: Preparing to enter system sleep state S5
[  133.225077][  T344]  ret_from_fork+0x67/0xa0
[  133.231985][ T3982] kvm: exiting hardware virtualization
[  133.236128][  T344]  ? __cfi_kthread+0x10/0x10
[  133.241600][ T3982] reboot: Power down
[  133.250049][  T344]  ret_from_fork_asm+0x1a/0x30
[  133.250072][  T344]  </TASK>
[  133.250080][  T344] ---[ end trace 0000000000000000 ]---
serialport: VM disconnected.