last executing test programs:

1m42.858622194s ago: executing program 2 (id=298):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x40049}, 0xc000)

1m42.793101706s ago: executing program 2 (id=299):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x3, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffff2, 0x0, 0x1, 0x2009, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0xb, 0x0, 0x11004, 0x8, 0x8, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0x4, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x209, 0x4, 0x182e, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0xfffffffd, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0xcf, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x100252, 0x81, 0xb, 0x100004, 0x20006, 0xc50, 0x2, 0x9, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0xfffffff9, 0x4, 0x4, 0x3fd, 0x66dd, 0x8, 0x8, 0x3, 0x81fc, 0x1ff, 0xffffffff]}})
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x4000005)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
timer_create(0x1, 0x0, &(0x7f0000000380)=<r1=>0x0)
timer_delete(r1)

1m42.723788928s ago: executing program 2 (id=303):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25d0e6cb2a16"], 0x34}], 0x1, 0x0, 0x0, 0x48c5}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
recvmmsg(r5, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x43, 0x0)
recvmsg(r4, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160)

1m42.488889554s ago: executing program 2 (id=308):
mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000680)='1', 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r1 = socket$inet(0x2, 0x5, 0x200)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x4, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2)
syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2)
write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
shutdown(r1, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x34, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0x102, 0x401, 0x3, 0x5, 0x8, [0x80000005, 0x9]}})
r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x4)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)

1m42.488707174s ago: executing program 2 (id=309):
mknodat(0xffffffffffffffff, 0x0, 0xe10a, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008eaff0000"], 0x2c}}, 0x0)

1m42.209540521s ago: executing program 2 (id=310):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="340000002e000305000000000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB="0c000f0000001e39be"], 0x34}], 0x1}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="041e97"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async)
r2 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000600)=""/45, 0x2d) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000200)={0xa, {0x5, 0x80, 0x3}}, 0xa) (async)
ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f00000003c0)={&(0x7f00000001c0)=[{&(0x7f0000000080)="c3d64d93b24e987a0908ada58745a7c8d368e277f7a70869cb47d87abe0a670ce4bb57e42225cc6c10ea6af9852ad52ecf754829f0f0efcd36ff04ce7cca2a083dd2d7f15fcbf6ef05f91042a4bc70ec9937ab7cb7540fa0c059b944b141ab43c8af2cf7cc01c9b3a0e116a992776aafd2044436fc9dcea1c61f1a5bd968df8f89cbe567f45032a69648d5d81fac70d8b28320d45439ac566329f7da6deee303c5806abab06a3f0dc6df0c3b0cdbe21abdde713602d21ff6fbddd5b07db1952a4899326147e927473b94af1bf27073f6d32b73ec899c", 0xd6}], 0x1, 0xda83, 0x0, 0x6, 0xff, 0x4, 0x1, 0x8})
recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002bc0)=""/4100, 0x1004}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000040)=""/51, 0x33}], 0x4}, 0xc}], 0x1, 0x40030002, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)

1m42.152245543s ago: executing program 32 (id=310):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="340000002e000305000000000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB="0c000f0000001e39be"], 0x34}], 0x1}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="041e97"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async)
r2 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000600)=""/45, 0x2d) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000200)={0xa, {0x5, 0x80, 0x3}}, 0xa) (async)
ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f00000003c0)={&(0x7f00000001c0)=[{&(0x7f0000000080)="c3d64d93b24e987a0908ada58745a7c8d368e277f7a70869cb47d87abe0a670ce4bb57e42225cc6c10ea6af9852ad52ecf754829f0f0efcd36ff04ce7cca2a083dd2d7f15fcbf6ef05f91042a4bc70ec9937ab7cb7540fa0c059b944b141ab43c8af2cf7cc01c9b3a0e116a992776aafd2044436fc9dcea1c61f1a5bd968df8f89cbe567f45032a69648d5d81fac70d8b28320d45439ac566329f7da6deee303c5806abab06a3f0dc6df0c3b0cdbe21abdde713602d21ff6fbddd5b07db1952a4899326147e927473b94af1bf27073f6d32b73ec899c", 0xd6}], 0x1, 0xda83, 0x0, 0x6, 0xff, 0x4, 0x1, 0x8})
recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002bc0)=""/4100, 0x1004}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000040)=""/51, 0x33}], 0x4}, 0xc}], 0x1, 0x40030002, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)

1m30.484583521s ago: executing program 0 (id=453):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'dvmrp1\x00', {0x2, 0x4e21, @private=0xa010102}})

1m30.48415853s ago: executing program 0 (id=454):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x4, 0x89, 0x40000}, 0x61)

1m30.483729001s ago: executing program 0 (id=455):
syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2640, 0x0)

1m30.431447121s ago: executing program 0 (id=456):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x2}})
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000280)='./file0/../file0\x00')
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')
sendmsg$netlink(r1, &(0x7f0000007c80)={&(0x7f0000007440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="10000000250046a90816b3cb136a4a37f7dbb73ee4f5"], 0x10}, {&(0x7f0000000040)={0x24, 0x38, 0x600, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x6, 0x9, 0x0, 0x0, @str='%\x00'}, @nested={0xc, 0x124, 0x0, 0x1, [@typed={0x5, 0xff, 0x0, 0x0, @str='\x00'}]}]}, 0x24}], 0x2, 0x0, 0x0, 0x8004}, 0x8014)

1m30.428315851s ago: executing program 0 (id=457):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2640, 0x0) (fail_nth: 2)

1m30.336145654s ago: executing program 0 (id=458):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2640, 0x0)

1m30.296315125s ago: executing program 33 (id=458):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2640, 0x0)

1m8.223164098s ago: executing program 4 (id=722):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, &(0x7f0000000140)=0x8008, 0x4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2640, 0x0)

1m8.129166191s ago: executing program 4 (id=723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFQA_CFG_MASK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)

1m8.117027272s ago: executing program 4 (id=724):
syz_usb_connect(0x1, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905800208"], 0x0)

1m5.104212438s ago: executing program 4 (id=748):
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000841c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1m5.090705438s ago: executing program 4 (id=749):
r0 = userfaultfd(0x80001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
fcntl$getown(r1, 0x9)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000577000/0x4000)=nil, 0x4000})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
socketpair$unix(0x1, 0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4, 0x0, 0x0, 0x7fffffff}]})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0)
renameat2(r4, &(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x4)
write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45)
ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x1, 0x32c0287b})

1m4.969821392s ago: executing program 4 (id=750):
io_setup(0x7f, &(0x7f0000001440)=<r0=>0x0)
r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x3, 0x400071}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000240))
io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r1, 0x0}])
socket$netlink(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
setresgid(0xee00, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x58)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
move_mount(r3, &(0x7f0000000180)='./file1\x00', r2, &(0x7f0000000280)='./file0\x00', 0x214)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

57.300304748s ago: executing program 1 (id=866):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x0, r1}, 0x10)
sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc840)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@code={0xa, 0x58, {"66420fc7b77d00000066b8ca008ed00fc71e66470f76ac06002800000f01cb2ef341ad66440f388042eb66b80e010f00d00f20d835080000000f22d80f20e035000020000f22e0"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x9b4b, 0x2}}], 0xc0})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

56.604992635s ago: executing program 1 (id=875):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

56.589143156s ago: executing program 1 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)

56.574275926s ago: executing program 1 (id=878):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x100000, &(0x7f0000000380)={'trans=virtio,', {[{@ignoreqv}, {@access_user}, {@debug={'debug', 0x3d, 0x7}}, {@uname={'uname', 0x3d, '.pending_reads\x00'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x39, 0x31, 0x37, 0x65, 0x64, 0x64, 0x65], 0x2d, [0x34, 0x63, 0x36, 0x31], 0x2d, [0x32, 0x64, 0x36, 0x65], 0x2d, [0x34, 0x65, 0x37, 0x30], 0x2d, [0x33, 0x61, 0x63, 0x33, 0x37, 0x64, 0x62, 0x35]}}}, {@seclabel}, {@pcr}]}})
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x82, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x0)
r2 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x11, r2)
ptrace(0x8, r2)
ptrace(0x4207, r2)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0xb, "21d45522e5a373e2738b3e"}, &(0x7f0000000240)=0x2f)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40046721, &(0x7f00000000c0))
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x2010000, &(0x7f0000000000)=ANY=[@ANYBLOB="6d6f64653d3030303030307030303030303030303030303030bd80312c7569643ec5746fb2309911f8b6bcf7bd167cf90000ff1daf12cd6961862a1f32fa9f4ef4b90460ec4b23bd2e5adef0d4fc66dca667b1e2ef84ff16289a39712a8c86ec32591a72c690f0063921d1d9c3b9a6152109eb8722ff89a38696437682f36f599d626d56396be9ce48", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

56.469201738s ago: executing program 1 (id=881):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x40000160, 0x0)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f0000000340)="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", 0xfc)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2)
syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)=<r8=>0x0)
syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
syz_ublk_process_io(r8, 0x0, 0x8, &(0x7f0000001000)=@ublk_io_need_get_data_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x400}, 0x0, 0x0, '\x00', {0x2, 0x363, 0xc, &(0x7f0000000000)=@buf_1k="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"}}, 0x1)

56.214169125s ago: executing program 1 (id=884):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

56.168381806s ago: executing program 34 (id=884):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

49.988249734s ago: executing program 35 (id=750):
io_setup(0x7f, &(0x7f0000001440)=<r0=>0x0)
r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x3, 0x400071}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000240))
io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r1, 0x0}])
socket$netlink(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
setresgid(0xee00, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x58)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
move_mount(r3, &(0x7f0000000180)='./file1\x00', r2, &(0x7f0000000280)='./file0\x00', 0x214)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2.3780473s ago: executing program 3 (id=1395):
socket(0x400000000010, 0x3, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0xfb, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1057c)
memfd_create(0x0, 0x1)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)

2.3687776s ago: executing program 3 (id=1396):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom(0xffffffffffffffff, &(0x7f0000002380)=""/4098, 0x1002, 0x40002023, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r3, 0x8100}], 0x1, 0x0, 0x0, 0x0)
listen(r2, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
clock_getres(0xfffffffffffffffa, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
dup3(r1, r4, 0x0)
r5 = accept4(r2, 0x0, 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x4}}, 0x10, 0x0}, 0x0)
sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000380)="8d2b", 0x2, 0x4000811, 0x0, 0x0)

2.031342949s ago: executing program 7 (id=1397):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000) (async)
r3 = syz_clone(0xf21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r3, 0x0) (async)
setresuid(0x0, 0xee00, 0x0) (async)
setns(0xffffffffffffffff, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f0000000240)="09000000e70014000000d97bfbf7", 0xe, 0x200000c4, &(0x7f0000000040)={0x11, 0x3, r4, 0x1, 0x4c, 0x6, @broadcast}, 0x14)

2.030725849s ago: executing program 7 (id=1398):
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000001100d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2.008633729s ago: executing program 7 (id=1399):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x40000160, 0x0)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f0000000340)="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", 0xfc)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)=<r9=>0x0)
syz_ublk_process_io(r9, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
syz_ublk_process_io(r9, 0x0, 0x8, &(0x7f0000001000)=@ublk_io_need_get_data_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x400, 0xc0107522, 0x7f00}, 0x0, 0x0, '\x00', {0x2, 0x363, 0xc, &(0x7f0000000000)=@buf_1k="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"}}, 0x1)

1.97613504s ago: executing program 7 (id=1400):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, r1}, 0x10)
sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc840)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.58184948s ago: executing program 5 (id=1405):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x16, 0x2d, 0x1, 0x8, 0x50d, 0x115, 0x133, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x2, 0x0, 0x8, "", [{{0x9, 0x4, 0x8e, 0x11, 0x2, 0xd1, 0xc2, 0x56, 0x7, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e8, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00')
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0)
syz_usb_ep_write(r1, 0x99, 0x35, &(0x7f00000000c0)="ea14be4bf8d775cef0a8d48d0908ad8e7ad6882448d12788707abe8ae5bce213daf06f75e65db67f0e3b41d1860636784221d7916e")
r5 = socket$netlink(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = memfd_create(0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(r6, 0x8008770b, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0xfffffffd}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x8000)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0xb)

1.512903732s ago: executing program 3 (id=1406):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create(0x4b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000001})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20002000})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x40000012})
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[], 0x0)

1.395873845s ago: executing program 6 (id=1407):
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000002100d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1.339465196s ago: executing program 6 (id=1408):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2b, 0x0, &(0x7f00000003c0))
r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x0)
accept$nfc_llcp(r2, &(0x7f0000000180), &(0x7f0000000200)=0x60)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x2, 0x0, 0x70bd2b, 0x200000}, 0x10}, 0x1, 0x7}, 0x24044095)

1.339192536s ago: executing program 6 (id=1409):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x40000160, 0x0)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f0000000340)="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", 0xfc)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)=<r9=>0x0)
syz_ublk_process_io(r9, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
syz_ublk_process_io(r9, 0x0, 0x8, &(0x7f0000001000)=@ublk_io_need_get_data_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x400}, 0x7f00, 0x0, '\x00', {0x2, 0x363, 0xc, &(0x7f0000000000)=@buf_1k="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"}}, 0x1)

1.338881176s ago: executing program 6 (id=1410):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000000, @rand_addr=' \x01\x00'}, 0x1c)
socket(0x15, 0xa, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x2, 0x3, 0xff)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
pwritev2(r1, &(0x7f00000006c0)=[{&(0x7f0000000480)="db2a63", 0x3}], 0x1, 0x7, 0x8, 0x0)
ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000100))
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00')
preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4, 0x20000000)
connect$inet(r1, &(0x7f0000000140)={0x2, 0xfff9, @local}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1)
syz_usb_connect$uac1(0x5, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ff00030100000009040000000101000002240100000002"], 0x0)

994.085055ms ago: executing program 3 (id=1411):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffe, @empty}, 0x2}}, 0x2e)
sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x2, 0x0)

978.927445ms ago: executing program 3 (id=1412):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = syz_io_uring_setup(0x3477, &(0x7f0000000100)={0x0, 0x4f7e, 0x93088, 0x3, 0x2b7, 0x0, r0}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000040), &(0x7f0000000000))
getgroups(0x1, &(0x7f0000000080)=[0xee00]) (async)
getgroups(0x1, &(0x7f0000000080)=[<r3=>0xee00])
r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xac, 0x8, 0x10, r1, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="340000000000000000000000070000000711"], 0x38}}], 0x1, 0x40000) (async)
sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="340000000000000000000000070000000711"], 0x38}}], 0x1, 0x40000)
r6 = socket$inet(0x2, 0xa, 0xfffffffc)
sendto$inet(r6, 0x0, 0x0, 0x24000000, 0x0, 0x0)
syz_io_uring_complete(r2, r4) (async)
syz_io_uring_complete(r2, r4)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800002, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@aname={'aname', 0x3d, 'l(([]#$}{%'}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_readahead}]}})
keyctl$update(0x2, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00')
getdents64(r7, &(0x7f0000000080)=""/38, 0x26)
getdents64(r7, &(0x7f0000000040)=""/22, 0x16)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180))
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
syncfs(r1)
userfaultfd(0x801) (async)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mremap(&(0x7f0000894000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00000b1000/0x2000)=nil) (async)
mremap(&(0x7f0000894000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00000b1000/0x2000)=nil)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d000000000000090400"], 0x0)

763.312851ms ago: executing program 6 (id=1413):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8003f, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$cgroup_pid(r5, &(0x7f0000001c00), 0x12)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r2, r1, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r8 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3)
ioctl$BLKRASET(r8, 0x1262, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'})
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00020c0000000c00022b79"], 0x0, 0x0, 0x0}, 0x0)

457.913099ms ago: executing program 3 (id=1414):
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
unshare(0x44040200)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c) (async)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0xc7f, 0x0, 0xe, 0x8, 0x1]}, &(0x7f0000000200)=0x54)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

402.11078ms ago: executing program 5 (id=1415):
socket(0x400000000010, 0x3, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0xfb, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1057c)
memfd_create(0x0, 0x1)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0) (fail_nth: 1)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)

114.857488ms ago: executing program 5 (id=1416):
socket(0x400000000010, 0x3, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0xfb, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1057c)
memfd_create(0x0, 0x1)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)

104.283848ms ago: executing program 5 (id=1417):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
r1 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @local, 0x6}, 0x1c)

92.192528ms ago: executing program 5 (id=1418):
r0 = socket(0x5, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0xfb, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1057c)
r2 = memfd_create(0x0, 0x1)
ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0xa0, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001840)={{r2, &(0x7f0000000040)='\\-$%{&]\\/\x00', 0x80, &(0x7f00000000c0)={@align=0xfffffffffffff800, {0x3, 0x8, 0x8, 0x8}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x994}, 0x7, &(0x7f0000001740)=[{0x1, 0x3, &(0x7f0000000180)='/dev/cpu/#/msr\x00', &(0x7f00000001c0)="7fe0d17a917c5e297adbd5b02a5ffa5e19b552801440bd5e712362ba3c87dee82f9df4c3eb66e2a1920587abbf7beb01960f2f1b707dab480a6ee7f019c053d3db5ecc4be2ff6d4567d2cea1dec37ec111275796dbb1f4bfdb9a7fca207d3e121cbd00872dbc3bf440ff40dab4a3cb9f7927cecb5623657410290d147ec56b709c95afed21bd87931c02b2e73339131ed75fcb2df061767a0718264d3bb72df69bc7a2ba7791fefbcb67cf183ab64f5eb5d29c713ab414587457", 0xba}, {0x1, 0x3, &(0x7f0000000280)='*\x00', &(0x7f00000002c0)="39a841d500289ea15d6470bb5a95869e40c57c735507a633c762f8b0bb65d8960c8d9e2d580e49c6f3f4fb67f69bbf40c8b1", 0x32, 0x2}, {0x3, 0x1000, &(0x7f0000000300)='/dev/uinput\x00', &(0x7f0000000340)="f362e63e39dcbaf143a4090e81c75114c23cd11c3be431adcd1fe6ad2499243aa63b40c86ac1461f5a89bd9ae097c3acaace245cdf813cb8ae17ffc0c8f340343aa1faeb1814229ba3d13c1cd76b674477b98bef43ac5bcb34787a9c53c91592bc3882f5e882de595a078525e99dde2741b5b20ea9eae616aa0ed7a862037987fb3734abc585177e842e5480570e", 0x8e, 0x30}, {0x3, 0xfffffff8, &(0x7f0000000400)='/dev/cpu/#/msr\x00', &(0x7f0000000440), 0x0, 0x36}, {0x3, 0x0, &(0x7f0000000480)='\\\'}\x00', &(0x7f00000004c0)="56f8af5607347f8ce976b2b7dd1bf53c3814933ba6ee243b6fbdcb62cd20576b9b204e3a6d4f5b314abf375f555c2190918986e2b594f8b1812318fab0ace94a9e441df9d97e6870b2978dfebc618db553c7e71e3d6f29c49fe59d7de23c3bb2ebb1662aaef5d670fd9be129f3d571f2523a9254574c6b2c54e0fa14f49fd713f2452da75780b22e133e6cc77d0148124401945247b21059008aa165756c16035e32fa1d147e5a8cea545b12e1a64940c6f7480c5f8c41a1370c3d5fc9d34a778c1cfc29634264dfb4b22f6c78b1ebc61fec38769f2ee44a60b06c656fe145a51af0ca4fdd0f37e134981131", 0xec, 0x20}, {0x2, 0xffffffff, &(0x7f00000005c0)='/dev/uinput\x00', &(0x7f0000000600)="9c13e737d4dc6ac32f383da2a5576529a4a5ba41fdcf260fe3c096fc4b2ec4d6a16481adf9b47f0a45cc89a54361233b96eefd8eaf30f3baebe2bfd05605fa37bd3a2c79e41bc8b516847f562be24a51e8c72e63a792f4f45821ce7e0477657a5399b53efc61ef56ab090983535e424e133c30a80b4f179f1d820180469c79929028251e9885032376662828b582fec39365e4dce05d5375a29a6c4deb3dd41bb17356785a145e005503d9af09011e79f3ff9744996b5bd3a9998a75019943f877a1643ddbdd7a7ca03fb2bc04d58718a6eec0abe92aa909cc7b0158db25bb6b", 0xe0, 0x20}, {0x2, 0xbd9, &(0x7f0000000700)='/dev/cpu/#/msr\x00', &(0x7f0000000740)="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", 0x1000, 0x2a}]})
r5 = open(&(0x7f0000000380)='./file1\x00', 0x4c27e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r5, 0x1000)
fallocate(r5, 0x0, 0x9e1f, 0x575)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0)

90.696178ms ago: executing program 7 (id=1419):
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000002f00d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

35.33349ms ago: executing program 5 (id=1420):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x80001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfe48)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00')
exit(0xf)
getdents64(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125)
preadv(r3, &(0x7f0000001b00)=[{&(0x7f0000000300)=""/237, 0xed}], 0x1, 0x3, 0x0)

35.00445ms ago: executing program 7 (id=1421):
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000002d3a00"], 0x6c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000780)=0x2200, 0x4)
sendto$inet(r1, &(0x7f0000002fc0)="5e000d001b71ecab36c7", 0xa, 0x8054, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000280)="a3983e180cc883aa2e627151ea0c30b241d7a43adaf7e4455b59abbf4e9ffa01d1621c9dc8a2940a474d20d5d4299307caf700048c4d45272fc9cd776ad28731447b7918e7b7bab2", 0x48, 0x2000011, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='high-speed\n\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='dummy_udc.0\n\x00', 0xc)
nanosleep(&(0x7f0000000600)={0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0xa4}], 0x2a3, 0x0, 0x0, 0x4000001}, 0x40000)

0s ago: executing program 6 (id=1422):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0xe, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0xa, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x84b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x7fffffff, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x668, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x7, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x5, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x2000009, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xfdffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x10000009, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xc, 0x34ea, 0x10000, 0x0, 0x80001ffe, 0x8, 0x8000, 0x10004, 0x10, 0x1a, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x10000007, 0xffffffff, 0x89aa, 0x8, 0x6, 0xf0ce, 0x2, 0x1, 0x2, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x2, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x200, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x0, 0x80000000, 0xb, 0x4, 0x88d, 0x1001, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x8, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x2000011, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x1ff, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x81, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x8, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0xb5, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0xb, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0xfffffffc, 0x7, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x9, 0x9e95, 0x9, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7f, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe01, 0x1000, 0x5, 0x92, 0xffffffff, 0x80000001, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x103, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x4, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffefffe, 0x924, 0x499, 0x8, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff6, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x8005, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x3, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0xa4, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x7, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x3, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x3c7, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x11, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x8, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x3ff, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]})
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ffffffff0000000006002b00020300000000000000000000fe880000000000000000000000000001"], 0xa0}}, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x21}, 0xa) (async)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x8}, 0xa)

kernel console output (not intermixed with test programs):

60.894360][  T603] bridge_slave_0: left allmulticast mode
[   60.901041][  T603] bridge_slave_0: left promiscuous mode
[   60.907111][  T603] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.003253][ T1729] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.011208][ T1729] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.019588][ T1729] bridge_slave_0: entered allmulticast mode
[   61.026823][ T1729] bridge_slave_0: entered promiscuous mode
[   61.034759][  T603] veth1_macvtap: left promiscuous mode
[   61.041670][  T603] veth0_vlan: left promiscuous mode
[   61.084273][ T1729] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.091920][ T1729] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.099603][ T1729] bridge_slave_1: entered allmulticast mode
[   61.107028][ T1729] bridge_slave_1: entered promiscuous mode
[   61.153747][ T1729] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.161012][ T1729] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.168703][ T1729] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.176033][ T1729] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.198578][  T598] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.209062][  T598] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.230147][  T598] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.237907][  T598] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.246803][  T598] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.255472][  T598] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.283258][ T1729] veth0_vlan: entered promiscuous mode
[   61.294296][ T1729] veth1_macvtap: entered promiscuous mode
[   62.338967][ T1790] netlink: 104 bytes leftover after parsing attributes in process `syz.3.480'.
[   62.348488][ T1791] netlink: 104 bytes leftover after parsing attributes in process `syz.3.480'.
[   62.808494][   T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   62.958545][   T45] usb 6-1: Using ep0 maxpacket: 16
[   62.974045][   T45] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[   62.983171][   T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   62.993904][   T45] usb 6-1: config 0 has no interface number 0
[   63.002761][   T45] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   63.013302][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.021672][   T45] usb 6-1: Product: syz
[   63.026289][   T45] usb 6-1: Manufacturer: syz
[   63.032805][   T45] usb 6-1: SerialNumber: syz
[   63.039649][   T45] usb 6-1: config 0 descriptor??
[   63.246165][   T45] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[   63.253542][   T45] usb 6-1: No valid video chain found.
[   63.260510][   T45] usb 6-1: USB disconnect, device number 2
[   63.796069][ T1841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'.
[   63.877027][ T1850] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.504'.
[   63.969799][ T1864] netlink: 104 bytes leftover after parsing attributes in process `syz.1.510'.
[   64.089606][   T45] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   64.140519][ T1884] fuse: Bad value for 'fd'
[   64.170498][ T1890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1890 comm=syz.3.520
[   64.262287][   T45] usb 6-1: unable to get BOS descriptor or descriptor too short
[   64.284324][   T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.309139][   T45] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[   64.338392][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.346876][   T45] usb 6-1: Product: syz
[   64.368458][   T45] usb 6-1: Manufacturer: syz
[   64.373564][   T45] usb 6-1: SerialNumber: syz
[   64.406502][ T1911] raw_sendmsg: syz.1.529 forgot to set AF_INET. Fix it!
[   64.601598][   T45] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[   64.630616][   T45] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22
[   64.652976][   T45] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22
[   64.680438][   T45] usb 6-1: USB disconnect, device number 3
[   64.688556][ T1397] udevd[1397]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   64.728398][   T36] kauditd_printk_skb: 31 callbacks suppressed
[   64.728415][   T36] audit: type=1400 audit(4000000025.249:368): avc:  denied  { connect } for  pid=1914 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   64.884378][ T1922] /dev/nullb0: Can't lookup blockdev
[   65.617363][   T36] audit: type=1326 audit(4000000026.139:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1920 comm="syz.3.531" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadf19de99 code=0x7fc00000
[   66.239420][   T36] audit: type=1400 audit(2000000000.360:370): avc:  denied  { read } for  pid=1966 comm="syz.5.547" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.266337][ T1967] Source file dentry negative
[   66.290097][   T36] audit: type=1400 audit(2000000000.380:371): avc:  denied  { open } for  pid=1966 comm="syz.5.547" path="/16/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.319079][   T36] audit: type=1400 audit(2000000000.380:372): avc:  denied  { ioctl } for  pid=1966 comm="syz.5.547" path="/16/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.353461][   T36] audit: type=1400 audit(2000000000.470:373): avc:  denied  { read append } for  pid=1968 comm="syz.5.548" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   66.408470][   T36] audit: type=1400 audit(2000000000.470:374): avc:  denied  { open } for  pid=1968 comm="syz.5.548" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   66.439409][   T36] audit: type=1400 audit(2000000000.470:375): avc:  denied  { map } for  pid=1968 comm="syz.5.548" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   66.466389][   T36] audit: type=1400 audit(2000000000.470:376): avc:  denied  { execute } for  pid=1968 comm="syz.5.548" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   66.495386][   T36] audit: type=1400 audit(2000000000.470:377): avc:  denied  { ioctl } for  pid=1968 comm="syz.5.548" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   66.658210][ T1977] netlink: 44 bytes leftover after parsing attributes in process `syz.3.551'.
[   66.668395][ T1977] netlink: 43 bytes leftover after parsing attributes in process `syz.3.551'.
[   66.678296][ T1977] netlink: 'syz.3.551': attribute type 6 has an invalid length.
[   66.688011][ T1977] netlink: 'syz.3.551': attribute type 5 has an invalid length.
[   66.701611][ T1977] netlink: 43 bytes leftover after parsing attributes in process `syz.3.551'.
[   67.407539][ T2028] process 'syz.3.570' launched './file0' with NULL argv: empty string added
[   67.668412][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   67.756650][ T2043] netlink: 68 bytes leftover after parsing attributes in process `syz.1.576'.
[   67.835109][ T2044] netlink: 'syz.1.576': attribute type 28 has an invalid length.
[   67.844174][   T10] usb 6-1: Using ep0 maxpacket: 16
[   67.851658][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.863039][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   67.880636][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   67.886149][ T2047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2047 comm=syz.1.577
[   67.891554][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.915376][   T10] usb 6-1: Product: syz
[   67.920383][   T10] usb 6-1: Manufacturer: syz
[   67.926369][   T10] usb 6-1: SerialNumber: syz
[   68.133524][ T2029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.143071][ T2029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.812982][ T2075] overlayfs: conflicting options: verity=on,redirect_dir=follow
[   69.597351][ T2104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'.
[   69.983791][ T2109] fuse: Bad value for 'fd'
[   70.027861][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   70.027886][   T36] audit: type=1400 audit(2000000004.140:388): avc:  denied  { getattr } for  pid=2115 comm="syz.1.604" path="/155/tracefs_dir/buffer_size_kb" dev="tracefs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   70.028794][ T2116] fuse: Bad value for 'fd'
[   70.228902][ T2128] fuse: Bad value for 'fd'
[   70.236554][   T36] audit: type=1400 audit(2000000004.350:389): avc:  denied  { getattr } for  pid=2126 comm="syz.3.609" name="/" dev="incremental-fs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   70.262717][   T36] audit: type=1400 audit(2000000004.350:390): avc:  denied  { write } for  pid=2126 comm="syz.3.609" name="/" dev="incremental-fs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   70.366144][   T10] usb 6-1: 0:2 : does not exist
[   70.377953][   T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[   70.394160][   T10] usb 6-1: USB disconnect, device number 4
[   70.422450][   T36] audit: type=1400 audit(2000000004.540:391): avc:  denied  { create } for  pid=2132 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   70.448382][ T2133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.458286][ T2133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.818554][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   70.968403][   T10] usb 6-1: Using ep0 maxpacket: 16
[   70.980286][   T10] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[   70.991437][   T10] usb 6-1: config 0 has no interface number 0
[   70.998643][   T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   71.010560][   T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   71.021911][   T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   71.034053][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.042535][   T10] usb 6-1: Product: syz
[   71.047088][   T10] usb 6-1: Manufacturer: syz
[   71.051870][   T10] usb 6-1: SerialNumber: syz
[   71.061181][   T10] usb 6-1: config 0 descriptor??
[   71.066686][ T2144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   71.074448][ T2144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   71.284075][ T2144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   71.292092][ T2144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   71.503232][   T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   71.529842][   T36] audit: type=1400 audit(2000000005.650:392): avc:  denied  { read write } for  pid=2164 comm="syz.4.618" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   71.553900][   T36] audit: type=1400 audit(2000000005.650:393): avc:  denied  { open } for  pid=2164 comm="syz.4.618" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   71.580864][   T36] audit: type=1400 audit(2000000005.650:394): avc:  denied  { ioctl } for  pid=2164 comm="syz.4.618" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   71.610897][   T36] audit: type=1400 audit(2000000005.650:395): avc:  denied  { setopt } for  pid=2164 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   71.634060][   T36] audit: type=1400 audit(2000000005.670:396): avc:  denied  { append } for  pid=2164 comm="syz.4.618" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   71.676825][ T2175] SELinux:  Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped).
[   71.686849][   T36] audit: type=1400 audit(2000000005.800:397): avc:  denied  { relabelto } for  pid=2174 comm="syz.1.621" name="cgroup" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_exec_t:s0"
[   71.750215][ T2184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.625'.
[   72.517579][   T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   72.530774][   T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   72.541657][   T10] asix 6-1:0.34: probe with driver asix failed with error -71
[   72.550372][   T10] usb 6-1: USB disconnect, device number 5
[   73.194739][ T2233] netlink: 'syz.1.640': attribute type 4 has an invalid length.
[   73.205076][ T2233] netlink: 17 bytes leftover after parsing attributes in process `syz.1.640'.
[   73.215851][ T2233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=2233 comm=syz.1.640
[   73.268631][   T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   73.430233][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[   73.440522][   T10] usb 6-1: not running at top speed; connect to a high speed hub
[   73.450205][   T10] usb 6-1: config 8 has an invalid interface number: 43 but max is 1
[   73.459142][   T10] usb 6-1: config 8 has an invalid interface number: 35 but max is 1
[   73.467815][   T10] usb 6-1: config 8 has no interface number 0
[   73.474399][   T10] usb 6-1: config 8 has no interface number 1
[   73.481080][   T10] usb 6-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85
[   73.493387][   T10] usb 6-1: config 8 interface 43 has no altsetting 0
[   73.500667][   T10] usb 6-1: config 8 interface 35 has no altsetting 0
[   73.509418][   T10] usb 6-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[   73.518846][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.527193][   T10] usb 6-1: Product: syz
[   73.531540][   T10] usb 6-1: Manufacturer: syz
[   73.536503][   T10] usb 6-1: SerialNumber: syz
[   73.750810][ T2294] incfs_lookup_dentry err:-13
[   73.756954][ T2294] incfs: Can't find or create .index dir in ./file0
[   73.765211][ T2294] incfs: mount failed -13
[   73.924295][   T10] ums-alauda 6-1:8.43: USB Mass Storage device detected
[   73.934126][   T10] scsi host1: usb-storage 6-1:8.43
[   73.941808][   T10] hub 6-1:8.35: Invalid hub with more than one config or interface
[   73.950554][   T10] hub 6-1:8.35: probe with driver hub failed with error -22
[   73.958650][   T10] ums-alauda 6-1:8.35: USB Mass Storage device detected
[   73.983907][   T10] usb 6-1: USB disconnect, device number 6
[   74.758530][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   74.909889][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.922303][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.932487][   T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   74.942474][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.952480][   T10] usb 6-1: config 0 descriptor??
[   75.424226][   T10] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   75.432439][   T10] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   75.439894][   T10] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   75.447648][   T10] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   75.454897][   T10] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   75.463217][   T10] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[   75.695371][ T2337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.706034][ T2337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.758574][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   76.758594][   T36] audit: type=1400 audit(2000000010.870:402): avc:  denied  { mount } for  pid=2338 comm="syz.3.669" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   76.835538][ T2349] fuse: Bad value for 'fd'
[   77.434643][ T2369] fuse: Bad value for 'fd'
[   77.570994][   T45] usb 6-1: USB disconnect, device number 7
[   77.928433][   T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   78.078508][   T45] usb 6-1: Using ep0 maxpacket: 16
[   78.085798][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.097925][   T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   78.111668][   T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   78.121557][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.131568][   T45] usb 6-1: config 0 descriptor??
[   78.496083][   T36] audit: type=1326 audit(2000000012.610:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2384 comm="syz.3.691" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faadf19de99 code=0x0
[   78.541424][   T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[   78.549417][   T45] microsoft 0003:045E:07DA.0006: report is too long
[   78.556819][   T45] microsoft 0003:045E:07DA.0006: item 0 4 0 8 parsing failed
[   78.565296][   T45] microsoft 0003:045E:07DA.0006: parse failed
[   78.572067][   T45] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22
[   78.743585][   T45] usb 6-1: USB disconnect, device number 8
[   79.387127][   T36] audit: type=1400 audit(2000000013.500:404): avc:  denied  { remount } for  pid=2406 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   79.409638][   T36] audit: type=1400 audit(2000000013.510:405): avc:  denied  { bind } for  pid=2406 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.431376][   T36] audit: type=1400 audit(2000000013.510:406): avc:  denied  { name_bind } for  pid=2406 comm="syz.3.700" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   79.454678][   T36] audit: type=1400 audit(2000000013.510:407): avc:  denied  { node_bind } for  pid=2406 comm="syz.3.700" saddr=172.30.255.4 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   79.508472][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   79.659966][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.671211][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.682225][   T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   79.691562][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.700464][   T10] usb 6-1: config 0 descriptor??
[   80.152642][   T10] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0
[   80.161201][   T10] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0
[   80.169422][   T10] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0
[   80.178055][   T10] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0
[   80.186174][   T10] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0
[   80.194374][   T10] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[   82.348518][   T10] usb 6-1: USB disconnect, device number 9
[   82.451484][ T2464] incfs_lookup_dentry err:-13
[   82.456750][ T2464] incfs: Can't find or create .index dir in ./file0
[   82.465446][ T2464] incfs: mount failed -13
[   82.778422][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   82.928645][   T10] usb 6-1: Using ep0 maxpacket: 8
[   82.943319][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.956160][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.971613][   T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   82.993445][   T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   83.007090][   T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   83.017149][   T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[   83.030732][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   83.040140][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.048618][   T10] usb 6-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ
[   83.074306][   T10] usb 6-1: SerialNumber: syz
[   83.236765][ T2483] FAULT_INJECTION: forcing a failure.
[   83.236765][ T2483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.251995][ T2483] CPU: 1 UID: 0 PID: 2483 Comm: syz.1.725 Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35
[   83.252029][ T2483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   83.252041][ T2483] Call Trace:
[   83.252048][ T2483]  <TASK>
[   83.252056][ T2483]  __dump_stack+0x21/0x30
[   83.252086][ T2483]  dump_stack_lvl+0x140/0x1c0
[   83.252110][ T2483]  ? __cfi_dump_stack_lvl+0x10/0x10
[   83.252135][ T2483]  ? check_stack_object+0x138/0x150
[   83.252156][ T2483]  dump_stack+0x19/0x20
[   83.252178][ T2483]  should_fail_ex+0x3c2/0x510
[   83.252199][ T2483]  should_fail+0xf/0x20
[   83.252219][ T2483]  should_fail_usercopy+0x1e/0x30
[   83.252240][ T2483]  _copy_to_user+0x24/0xa0
[   83.252264][ T2483]  simple_read_from_buffer+0xed/0x160
[   83.252290][ T2483]  proc_fail_nth_read+0x1aa/0x220
[   83.252314][ T2483]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   83.252345][ T2483]  ? bpf_lsm_file_permission+0xd/0x20
[   83.252385][ T2483]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   83.252408][ T2483]  vfs_read+0x28b/0xc70
[   83.252425][ T2483]  ? __cfi_vfs_read+0x10/0x10
[   83.252439][ T2483]  ? __kasan_check_write+0x18/0x20
[   83.252456][ T2483]  ? mutex_lock+0x97/0x1d0
[   83.252479][ T2483]  ? __cfi_mutex_lock+0x10/0x10
[   83.252501][ T2483]  ksys_read+0x145/0x260
[   83.252518][ T2483]  ? __cfi_ksys_read+0x10/0x10
[   83.252534][ T2483]  ? fdget+0x188/0x1e0
[   83.252553][ T2483]  ? __kasan_check_read+0x15/0x20
[   83.252569][ T2483]  __x64_sys_read+0x7f/0x90
[   83.252587][ T2483]  x64_sys_call+0x2638/0x2ee0
[   83.252604][ T2483]  do_syscall_64+0x57/0xf0
[   83.252624][ T2483]  ? clear_bhb_loop+0x50/0xa0
[   83.252645][ T2483]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   83.252666][ T2483] RIP: 0033:0x7f7e7ab5e6ce
[   83.252684][ T2483] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   83.252699][ T2483] RSP: 002b:00007f7e7baf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   83.252721][ T2483] RAX: ffffffffffffffda RBX: 00007f7e7baf56c0 RCX: 00007f7e7ab5e6ce
[   83.252735][ T2483] RDX: 000000000000000f RSI: 00007f7e7baf50a0 RDI: 0000000000000003
[   83.252748][ T2483] RBP: 00007f7e7baf5090 R08: 0000000000000000 R09: 0000000000000000
[   83.252759][ T2483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.252771][ T2483] R13: 00007f7e7ae26038 R14: 00007f7e7ae25fa0 R15: 00007ffeb127a8d8
[   83.252788][ T2483]  </TASK>
[   83.257500][   T36] audit: type=1400 audit(2000000017.370:408): avc:  denied  { associate } for  pid=2487 comm="syz.3.727" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   83.330673][ T2490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.728'.
[   85.106207][ T2509] 9pnet_fd: p9_fd_create_tcp (2509): problem connecting socket to 127.0.0.1
[   85.196774][ T2517] fuse: Bad value for 'fd'
[   85.414401][   T10] cdc_ncm 6-1:1.0: bind() failure
[   85.423363][   T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[   85.430475][   T10] cdc_ncm 6-1:1.1: bind() failure
[   85.437599][   T10] usb 6-1: USB disconnect, device number 10
[   85.838414][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   85.989989][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.003744][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.014544][   T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   86.024427][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.033521][   T10] usb 6-1: config 0 descriptor??
[   86.130746][   T36] audit: type=1400 audit(2000000020.250:409): avc:  denied  { create } for  pid=2535 comm="syz.4.749" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.132395][ T2536] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[   86.153334][   T36] audit: type=1400 audit(2000000020.250:410): avc:  denied  { write } for  pid=2535 comm="syz.4.749" name="file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.191983][   T36] audit: type=1400 audit(2000000020.310:411): avc:  denied  { read } for  pid=1300 comm="syz-executor" name="file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.217527][   T36] audit: type=1400 audit(2000000020.310:412): avc:  denied  { open } for  pid=1300 comm="syz-executor" path="/54/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.258374][   T36] audit: type=1400 audit(2000000020.310:413): avc:  denied  { setattr } for  pid=1300 comm="syz-executor" path="/54/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.522268][   T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0
[   86.531134][   T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0
[   86.538865][   T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0
[   86.546875][   T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0
[   86.558435][   T10] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0
[   86.573316][   T10] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[   86.620570][   T36] audit: type=1400 audit(2000000020.740:414): avc:  denied  { write } for  pid=2542 comm="syz.1.753" name="netstat" dev="proc" ino=4026532357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   87.163255][ T2565] netlink: 84 bytes leftover after parsing attributes in process `syz.1.760'.
[   87.333202][   T36] audit: type=1400 audit(2000000021.450:415): avc:  denied  { sys_nice } for  pid=2573 comm="syz.3.764" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   87.388774][ T2577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'.
[   87.778443][ T2598] netlink: 36 bytes leftover after parsing attributes in process `syz.3.776'.
[   87.971383][   T36] audit: type=1400 audit(2000000022.090:416): avc:  denied  { shutdown } for  pid=2604 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   88.061163][   T36] audit: type=1400 audit(2000000022.180:417): avc:  denied  { read write } for  pid=2606 comm="syz.1.780" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   88.320982][ T2619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.786'.
[   88.643430][   T45] usb 6-1: USB disconnect, device number 11
[   88.653372][ T2643] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[   88.695166][ T2645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.796'.
[   88.899910][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   88.899928][   T36] audit: type=1400 audit(2000000023.020:422): avc:  denied  { read } for  pid=2648 comm="syz.5.799" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   88.968376][   T36] audit: type=1400 audit(2000000023.020:423): avc:  denied  { open } for  pid=2648 comm="syz.5.799" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   89.028554][   T36] audit: type=1400 audit(2000000023.030:424): avc:  denied  { ioctl } for  pid=2648 comm="syz.5.799" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   89.084665][   T36] audit: type=1400 audit(2000000023.140:425): avc:  denied  { create } for  pid=2650 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   89.124903][   T36] audit: type=1400 audit(2000000023.150:426): avc:  denied  { write } for  pid=2650 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   89.160472][   T36] audit: type=1400 audit(2000000023.150:427): avc:  denied  { create } for  pid=2650 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   89.355520][ T2671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2671 comm=syz.1.808
[   89.422166][ T2675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.810'.
[   89.451496][ T2677] netlink: 92 bytes leftover after parsing attributes in process `syz.1.811'.
[   89.463273][ T2677] netlink: 92 bytes leftover after parsing attributes in process `syz.1.811'.
[   89.486018][   T36] audit: type=1326 audit(2000000023.600:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2680 comm="syz.1.812" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e7ab9de99 code=0x0
[   89.538865][ T2682] netlink: 'syz.1.812': attribute type 1 has an invalid length.
[   89.754236][   T36] audit: type=1400 audit(2000000023.870:429): avc:  denied  { create } for  pid=2693 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   89.881215][ T2702] netlink: 36 bytes leftover after parsing attributes in process `syz.5.820'.
[   90.182104][ T2723] netlink: 36 bytes leftover after parsing attributes in process `syz.5.830'.
[   90.459640][  T316] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   90.542143][ T2741] netlink: 'syz.1.837': attribute type 5 has an invalid length.
[   90.563971][ T2741] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.837'.
[   90.590137][ T2741] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   90.641371][  T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.671388][  T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.693971][  T316] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   90.720734][   T36] audit: type=1400 audit(2000000024.840:430): avc:  denied  { map } for  pid=2742 comm="syz.1.838" path="socket:[15591]" dev="sockfs" ino=15591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   90.747765][  T316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.778647][  T316] usb 6-1: config 0 descriptor??
[   90.798362][   T36] audit: type=1400 audit(2000000024.840:431): avc:  denied  { read } for  pid=2742 comm="syz.1.838" path="socket:[15591]" dev="sockfs" ino=15591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   91.295155][  T316] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[   91.310754][  T316] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[   91.345402][  T316] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[   91.367458][  T316] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[   91.385595][  T316] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[   91.406522][  T316] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[   91.451303][ T2764] netlink: 'syz.1.846': attribute type 12 has an invalid length.
[   91.465436][ T2766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'.
[   91.497306][ T2766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'.
[   93.337633][   T10] usb 6-1: USB disconnect, device number 12
[   93.789963][ T2795] netlink: 76 bytes leftover after parsing attributes in process `syz.1.858'.
[   94.510297][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   94.510315][   T36] audit: type=1400 audit(2000000028.630:433): avc:  denied  { map } for  pid=2831 comm="syz.3.873" path="socket:[15752]" dev="sockfs" ino=15752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   94.546670][   T36] audit: type=1400 audit(2000000028.630:434): avc:  denied  { accept } for  pid=2831 comm="syz.3.873" path="socket:[15752]" dev="sockfs" ino=15752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   94.582435][   T36] audit: type=1400 audit(2000000028.630:435): avc:  denied  { execute_no_trans } for  pid=2831 comm="syz.3.873" path="/304/file0" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   94.651168][   T36] audit: type=1400 audit(2000000028.770:436): avc:  denied  { write } for  pid=2846 comm="syz.1.878" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.657788][ T2847] bpf: Bad value for 'mode'
[   94.715703][   T36] audit: type=1400 audit(2000000028.820:437): avc:  denied  { remove_name } for  pid=293 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   94.742309][   T36] audit: type=1400 audit(2000000028.820:438): avc:  denied  { unlink } for  pid=293 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.770870][   T36] audit: type=1400 audit(2000000028.820:439): avc:  denied  { getopt } for  pid=2851 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   94.850133][  T602] bridge_slave_1: left allmulticast mode
[   94.856435][  T602] bridge_slave_1: left promiscuous mode
[   94.868462][  T602] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.889147][  T602] bridge_slave_0: left allmulticast mode
[   94.897288][  T602] bridge_slave_0: left promiscuous mode
[   94.915797][  T602] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.062995][  T602] veth1_macvtap: left promiscuous mode
[   95.078549][  T602] veth0_vlan: left promiscuous mode
[   95.223449][ T2861] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.232217][ T2861] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.240301][ T2861] bridge_slave_0: entered allmulticast mode
[   95.249142][ T2861] bridge_slave_0: entered promiscuous mode
[   95.257793][ T2861] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.266965][ T2861] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.275399][ T2861] bridge_slave_1: entered allmulticast mode
[   95.282086][ T2861] bridge_slave_1: entered promiscuous mode
[   95.346530][ T2861] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.355572][ T2861] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.364220][ T2861] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.372315][ T2861] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.405219][  T602] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.413605][  T602] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.437241][  T602] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.445764][  T602] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.456475][  T602] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.465018][  T602] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.495924][ T2861] veth0_vlan: entered promiscuous mode
[   95.517751][ T2861] veth1_macvtap: entered promiscuous mode
[   95.928398][  T316] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   96.079585][  T316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.098378][  T316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.110820][  T316] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.125439][  T316] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.136282][  T316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.152248][  T316] usb 7-1: config 0 descriptor??
[   96.183259][ T2876] SELinux:  Context system_u:object_r:qemu_device_t:s0 is not valid (left unmapped).
[   96.199050][   T36] audit: type=1400 audit(2000000030.310:440): avc:  denied  { relabelto } for  pid=2875 comm="syz.3.889" name="zero" dev="tmpfs" ino=1725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:qemu_device_t:s0"
[   96.243750][   T36] audit: type=1400 audit(2000000030.310:441): avc:  denied  { associate } for  pid=2875 comm="syz.3.889" name="zero" dev="tmpfs" ino=1725 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:qemu_device_t:s0"
[   96.362513][ T2886] overlayfs: failed to clone upperpath
[   96.567986][  T316] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[   96.583479][  T316] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[   96.958401][  T316] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   97.141147][  T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.162698][  T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.181060][ T2906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.182374][  T316] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   97.204158][  T316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.214911][ T2906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.214939][  T316] usb 6-1: config 0 descriptor??
[   97.238826][   T10] usb 7-1: USB disconnect, device number 2
[   97.699892][  T316] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   97.708123][  T316] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   97.715998][  T316] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   97.724664][  T316] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   97.732687][  T316] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   97.741640][  T316] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[   97.867297][ T2927] netlink: 120 bytes leftover after parsing attributes in process `syz.3.907'.
[   98.028364][  T316] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   98.199865][  T316] usb 7-1: unable to get BOS descriptor or descriptor too short
[   98.208475][  T316] usb 7-1: no configurations
[   98.219203][  T316] usb 7-1: can't read configurations, error -22
[   98.345346][ T2942] netlink: 393 bytes leftover after parsing attributes in process `syz.3.911'.
[   98.370801][ T2942] tipc: Started in network mode
[   98.378376][  T316] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   98.388399][ T2942] tipc: Node identity 7f000001, cluster identity 4711
[   98.395670][ T2942] tipc: New replicast peer: 172.20.20.64
[   98.408764][ T2942] tipc: Enabled bearer <udp:syz2>, priority 10
[   98.559720][  T316] usb 7-1: unable to get BOS descriptor or descriptor too short
[   98.571229][  T316] usb 7-1: no configurations
[   98.590590][  T316] usb 7-1: can't read configurations, error -22
[   98.608905][  T316] usb usb7-port1: attempt power cycle
[   98.958368][  T316] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   98.990151][  T316] usb 7-1: unable to get BOS descriptor or descriptor too short
[   98.998624][  T316] usb 7-1: no configurations
[   99.003774][  T316] usb 7-1: can't read configurations, error -22
[   99.148396][  T316] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   99.190147][  T316] usb 7-1: unable to get BOS descriptor or descriptor too short
[   99.208425][  T316] usb 7-1: no configurations
[   99.221990][  T316] usb 7-1: can't read configurations, error -22
[   99.235426][  T316] usb usb7-port1: unable to enumerate USB device
[   99.528436][   T10] tipc: Node number set to 2130706433
[   99.776434][  T316] usb 6-1: USB disconnect, device number 13
[  100.741459][   T36] audit: type=1400 audit(2000000034.860:442): avc:  denied  { write } for  pid=2968 comm="syz.5.922" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  100.785188][   T36] audit: type=1400 audit(2000000034.860:443): avc:  denied  { open } for  pid=2968 comm="syz.5.922" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  100.813805][   T36] audit: type=1400 audit(2000000034.860:444): avc:  denied  { ioctl } for  pid=2968 comm="syz.5.922" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  100.955112][ T2977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.926'.
[  101.054518][ T2987] 9pnet_fd: Insufficient options for proto=fd
[  101.218362][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  101.363063][  T579] bridge_slave_1: left allmulticast mode
[  101.368907][  T579] bridge_slave_1: left promiscuous mode
[  101.374745][  T579] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.390642][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.403189][  T579] bridge_slave_0: left allmulticast mode
[  101.411941][  T579] bridge_slave_0: left promiscuous mode
[  101.415217][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.417934][  T579] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.447251][   T10] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  101.460869][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.484929][   T10] usb 7-1: config 0 descriptor??
[  101.569070][  T579] tipc: Left network mode
[  101.586362][  T579] veth1_macvtap: left promiscuous mode
[  101.604777][  T579] veth0_vlan: left promiscuous mode
[  101.771622][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.786979][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.804687][ T3015] bridge_slave_0: entered allmulticast mode
[  101.811362][ T3015] bridge_slave_0: entered promiscuous mode
[  101.839268][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.847800][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.855628][ T3015] bridge_slave_1: entered allmulticast mode
[  101.862562][ T3015] bridge_slave_1: entered promiscuous mode
[  101.922815][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.930105][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.937848][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.945890][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.982191][  T605] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.991146][  T605] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.002697][  T568] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.010163][  T568] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.021371][  T605] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.028473][  T605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.043693][   T10] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0
[  102.055776][   T10] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0
[  102.064129][   T10] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0
[  102.079196][   T10] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0
[  102.086924][   T10] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0
[  102.093814][ T3015] veth0_vlan: entered promiscuous mode
[  102.098445][   T10] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  102.107746][ T3015] veth1_macvtap: entered promiscuous mode
[  102.149970][ T3046] FAULT_INJECTION: forcing a failure.
[  102.149970][ T3046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.164715][ T3046] CPU: 0 UID: 0 PID: 3046 Comm: syz.7.936 Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35
[  102.164747][ T3046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  102.164758][ T3046] Call Trace:
[  102.164765][ T3046]  <TASK>
[  102.164772][ T3046]  __dump_stack+0x21/0x30
[  102.164803][ T3046]  dump_stack_lvl+0x140/0x1c0
[  102.164827][ T3046]  ? __cfi_dump_stack_lvl+0x10/0x10
[  102.164846][ T3046]  ? _parse_integer+0x2e/0x40
[  102.164857][ T3046]  ? kstrtoull+0x13b/0x1e0
[  102.164867][ T3046]  dump_stack+0x19/0x20
[  102.164879][ T3046]  should_fail_ex+0x3c2/0x510
[  102.164890][ T3046]  should_fail+0xf/0x20
[  102.164900][ T3046]  should_fail_usercopy+0x1e/0x30
[  102.164911][ T3046]  _copy_from_user+0x20/0xa0
[  102.164924][ T3046]  ___sys_sendmsg+0x1c7/0x370
[  102.164935][ T3046]  ? __sys_sendmsg+0x2a0/0x2a0
[  102.164945][ T3046]  ? proc_fail_nth_write+0x184/0x220
[  102.164959][ T3046]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  102.164975][ T3046]  ? __fget_files+0x2bc/0x330
[  102.164988][ T3046]  __x64_sys_sendmsg+0x206/0x2e0
[  102.165001][ T3046]  ? fput+0x1a4/0x230
[  102.165014][ T3046]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  102.165024][ T3046]  ? ksys_write+0x1f3/0x260
[  102.165035][ T3046]  ? __kasan_check_read+0x15/0x20
[  102.165046][ T3046]  x64_sys_call+0x2a4c/0x2ee0
[  102.165055][ T3046]  do_syscall_64+0x57/0xf0
[  102.165067][ T3046]  ? clear_bhb_loop+0x50/0xa0
[  102.165081][ T3046]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.165093][ T3046] RIP: 0033:0x7fd36ff9de99
[  102.165103][ T3046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.165113][ T3046] RSP: 002b:00007fd370de1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.165125][ T3046] RAX: ffffffffffffffda RBX: 00007fd370225fa0 RCX: 00007fd36ff9de99
[  102.165133][ T3046] RDX: 0000000000004040 RSI: 00002000000003c0 RDI: 0000000000000003
[  102.165140][ T3046] RBP: 00007fd370de1090 R08: 0000000000000000 R09: 0000000000000000
[  102.165147][ T3046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.165153][ T3046] R13: 00007fd370226038 R14: 00007fd370225fa0 R15: 00007ffe083a9d38
[  102.165161][ T3046]  </TASK>
[  102.427646][   T36] audit: type=1400 audit(2000000036.540:445): avc:  denied  { append } for  pid=3049 comm="syz.7.951" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  102.428007][ T3050] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  102.546747][  T311] usb 7-1: USB disconnect, device number 7
[  102.554198][ T3066] FAULT_INJECTION: forcing a failure.
[  102.554198][ T3066] name failslab, interval 1, probability 0, space 0, times 0
[  102.568117][ T3066] CPU: 1 UID: 0 PID: 3066 Comm: syz.7.958 Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35
[  102.568148][ T3066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  102.568158][ T3066] Call Trace:
[  102.568164][ T3066]  <TASK>
[  102.568171][ T3066]  __dump_stack+0x21/0x30
[  102.568201][ T3066]  dump_stack_lvl+0x140/0x1c0
[  102.568224][ T3066]  ? __cfi_dump_stack_lvl+0x10/0x10
[  102.568250][ T3066]  ? release_sock+0x171/0x1f0
[  102.568270][ T3066]  dump_stack+0x19/0x20
[  102.568283][ T3066]  should_fail_ex+0x3c2/0x510
[  102.568294][ T3066]  should_failslab+0xac/0x100
[  102.568318][ T3066]  kmem_cache_alloc_node_noprof+0x45/0x420
[  102.568335][ T3066]  ? netlink_data_ready+0x20/0x20
[  102.568360][ T3066]  ? __alloc_skb+0x10c/0x360
[  102.568381][ T3066]  __alloc_skb+0x10c/0x360
[  102.568401][ T3066]  netlink_alloc_large_skb+0xf7/0x1b0
[  102.568422][ T3066]  netlink_sendmsg+0x576/0xad0
[  102.568437][ T3066]  ? __cfi_netlink_sendmsg+0x10/0x10
[  102.568453][ T3066]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  102.568474][ T3066]  ? security_socket_sendmsg+0x3d/0x100
[  102.568500][ T3066]  ____sys_sendmsg+0x9a1/0xa00
[  102.568520][ T3066]  ? __import_iovec+0x5b9/0x7d0
[  102.568543][ T3066]  ? __sys_sendmsg_sock+0x50/0x50
[  102.568562][ T3066]  ? import_iovec+0x80/0xb0
[  102.568576][ T3066]  ___sys_sendmsg+0x2a6/0x370
[  102.568586][ T3066]  ? __sys_sendmsg+0x2a0/0x2a0
[  102.568596][ T3066]  ? proc_fail_nth_write+0x184/0x220
[  102.568618][ T3066]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  102.568634][ T3066]  ? __fget_files+0x2bc/0x330
[  102.568646][ T3066]  __x64_sys_sendmsg+0x206/0x2e0
[  102.568655][ T3066]  ? fput+0x1a4/0x230
[  102.568668][ T3066]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  102.568678][ T3066]  ? ksys_write+0x1f3/0x260
[  102.568691][ T3066]  ? __kasan_check_read+0x15/0x20
[  102.568710][ T3066]  x64_sys_call+0x2a4c/0x2ee0
[  102.568728][ T3066]  do_syscall_64+0x57/0xf0
[  102.568746][ T3066]  ? clear_bhb_loop+0x50/0xa0
[  102.568770][ T3066]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.568793][ T3066] RIP: 0033:0x7fd36ff9de99
[  102.568808][ T3066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.568817][ T3066] RSP: 002b:00007fd370de1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.568829][ T3066] RAX: ffffffffffffffda RBX: 00007fd370225fa0 RCX: 00007fd36ff9de99
[  102.568837][ T3066] RDX: 0000000000004040 RSI: 00002000000003c0 RDI: 0000000000000003
[  102.568844][ T3066] RBP: 00007fd370de1090 R08: 0000000000000000 R09: 0000000000000000
[  102.568851][ T3066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.568857][ T3066] R13: 00007fd370226038 R14: 00007fd370225fa0 R15: 00007ffe083a9d38
[  102.568866][ T3066]  </TASK>
[  102.878576][ T3072] syz.7.960 uses obsolete (PF_INET,SOCK_PACKET)
[  102.932657][   T36] audit: type=1400 audit(2000000037.050:446): avc:  denied  { mounton } for  pid=3075 comm="syz.7.962" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  102.972052][   T36] audit: type=1400 audit(2000000037.080:447): avc:  denied  { read append } for  pid=3077 comm="syz.5.963" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  118.501976][  T597] Bluetooth: hci0: Frame reassembly failed (-84)
[  118.791537][   T36] audit: type=1400 audit(2000000052.586:448): avc:  denied  { write } for  pid=3126 comm="syz.6.980" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  118.819529][   T36] audit: type=1400 audit(2000000052.586:449): avc:  denied  { open } for  pid=3126 comm="syz.6.980" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  118.851194][ T3133] FAULT_INJECTION: forcing a failure.
[  118.851194][ T3133] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.868283][ T3133] CPU: 1 UID: 0 PID: 3133 Comm: syz.6.981 Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35
[  118.868319][ T3133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  118.868331][ T3133] Call Trace:
[  118.868337][ T3133]  <TASK>
[  118.868346][ T3133]  __dump_stack+0x21/0x30
[  118.868379][ T3133]  dump_stack_lvl+0x140/0x1c0
[  118.868403][ T3133]  ? __cfi_dump_stack_lvl+0x10/0x10
[  118.868427][ T3133]  dump_stack+0x19/0x20
[  118.868449][ T3133]  should_fail_ex+0x3c2/0x510
[  118.868471][ T3133]  should_fail+0xf/0x20
[  118.868490][ T3133]  should_fail_usercopy+0x1e/0x30
[  118.868510][ T3133]  _copy_from_iter+0x1a6/0x1520
[  118.868535][ T3133]  ? __virt_addr_valid+0x2a1/0x370
[  118.868558][ T3133]  ? __cfi__copy_from_iter+0x10/0x10
[  118.868579][ T3133]  ? __check_object_size+0x54c/0x870
[  118.868599][ T3133]  ? __cfi___check_object_size+0x10/0x10
[  118.868618][ T3133]  ? skb_put+0x10e/0x200
[  118.868654][ T3133]  netlink_sendmsg+0x66d/0xad0
[  118.868674][ T3133]  ? __cfi_netlink_sendmsg+0x10/0x10
[  118.868693][ T3133]  ? bpf_lsm_socket_sendmsg+0xd/0x20
[  118.868715][ T3133]  ? security_socket_sendmsg+0x3d/0x100
[  118.868741][ T3133]  ____sys_sendmsg+0x9a1/0xa00
[  118.868761][ T3133]  ? __import_iovec+0x5b9/0x7d0
[  118.868785][ T3133]  ? __sys_sendmsg_sock+0x50/0x50
[  118.868804][ T3133]  ? import_iovec+0x80/0xb0
[  118.868827][ T3133]  ___sys_sendmsg+0x2a6/0x370
[  118.868841][ T3133]  ? __sys_sendmsg+0x2a0/0x2a0
[  118.868857][ T3133]  ? proc_fail_nth_write+0x184/0x220
[  118.868880][ T3133]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  118.868907][ T3133]  ? __fget_files+0x2bc/0x330
[  118.868930][ T3133]  __x64_sys_sendmsg+0x206/0x2e0
[  118.868948][ T3133]  ? fput+0x1a4/0x230
[  118.868972][ T3133]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  118.868990][ T3133]  ? ksys_write+0x1f3/0x260
[  118.869011][ T3133]  ? __kasan_check_read+0x15/0x20
[  118.869031][ T3133]  x64_sys_call+0x2a4c/0x2ee0
[  118.869049][ T3133]  do_syscall_64+0x57/0xf0
[  118.869069][ T3133]  ? clear_bhb_loop+0x50/0xa0
[  118.869095][ T3133]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  118.869115][ T3133] RIP: 0033:0x7fad3f79de99
[  118.869132][ T3133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.869148][ T3133] RSP: 002b:00007fad3e1e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.869174][ T3133] RAX: ffffffffffffffda RBX: 00007fad3fa25fa0 RCX: 00007fad3f79de99
[  118.869188][ T3133] RDX: 0000000000004040 RSI: 00002000000003c0 RDI: 0000000000000003
[  118.869201][ T3133] RBP: 00007fad3e1e3090 R08: 0000000000000000 R09: 0000000000000000
[  118.869213][ T3133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.869225][ T3133] R13: 00007fad3fa26038 R14: 00007fad3fa25fa0 R15: 00007fffb014b588
[  118.869241][ T3133]  </TASK>
[  119.279062][   T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  119.289558][   T10] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  119.477553][   T36] audit: type=1400 audit(2000000053.268:450): avc:  denied  { load_policy } for  pid=3150 comm="syz.6.988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  119.477574][ T3151] SELinux: failed to load policy
[  119.642385][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  119.775146][   T10] usb 8-1: device descriptor read/64, error -71
[  120.016846][   T10] usb 8-1: device descriptor read/64, error -71
[  120.123066][ T3176] 9pnet_fd: Insufficient options for proto=fd
[  120.131586][ T3176] netlink: 'syz.6.1000': attribute type 16 has an invalid length.
[  120.140357][ T3176] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1000'.
[  120.156359][ T3176] zram0: detected capacity change from 0 to 20480
[  120.279877][   T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  120.411363][   T10] usb 8-1: device descriptor read/64, error -71
[  120.563084][ T3098] Bluetooth: hci0: command 0x1003 tx timeout
[  120.563355][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  120.654090][   T10] usb 8-1: device descriptor read/64, error -71
[  120.688874][ T3185] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  120.765423][   T10] usb usb8-port1: attempt power cycle
[  121.098994][  T311] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  121.117316][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  121.144991][   T10] usb 8-1: device descriptor read/8, error -71
[  121.253181][  T311] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0
[  121.266365][  T311] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 0
[  121.287835][  T311] usb 7-1: string descriptor 0 read error: -22
[  121.296325][  T311] usb 7-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40
[  121.311665][   T10] usb 8-1: device descriptor read/8, error -71
[  121.312586][  T311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.335770][  T311] usb 7-1: low speed audio streaming not supported
[  121.338006][ T3199] 8021q: VLANs not supported on ip_vti0
[  121.349487][  T311] usb 7-1: low speed audio streaming not supported
[  121.412453][  T400] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  121.538553][  T492] usb 7-1: USB disconnect, device number 8
[  121.563928][   T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  121.565176][  T400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.585300][  T400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.586882][   T10] usb 8-1: device descriptor read/8, error -71
[  121.595906][  T400] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  121.612232][  T400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.622261][  T400] usb 6-1: config 0 descriptor??
[  121.726866][   T10] usb 8-1: device descriptor read/8, error -71
[  121.836891][   T10] usb usb8-port1: unable to enumerate USB device
[  121.985352][   T36] audit: type=1400 audit(2000000055.750:451): avc:  denied  { ioctl } for  pid=3222 comm="syz.3.1018" path="socket:[18882]" dev="sockfs" ino=18882 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  122.014234][   T36] audit: type=1400 audit(2000000055.760:452): avc:  denied  { create } for  pid=3222 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  122.075681][  T400] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0
[  122.086129][  T400] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0
[  122.093982][  T400] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0
[  122.101889][  T400] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0
[  122.110514][  T400] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0
[  122.119984][  T400] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  122.311709][  T492] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  122.345944][   T10] usb 6-1: USB disconnect, device number 14
[  122.475202][  T492] usb 7-1: unable to get BOS descriptor or descriptor too short
[  122.484984][  T492] usb 7-1: not running at top speed; connect to a high speed hub
[  122.494458][  T492] usb 7-1: config 1 has an invalid interface number: 244 but max is 0
[  122.503407][  T492] usb 7-1: config 1 has no interface number 0
[  122.510574][  T492] usb 7-1: config 1 interface 244 has no altsetting 0
[  122.520256][  T492] usb 7-1: New USB device found, idVendor=05f9, idProduct=4002, bcdDevice=dc.fc
[  122.530058][  T492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.538533][  T492] usb 7-1: Product: syz
[  122.543102][  T492] usb 7-1: Manufacturer: syz
[  122.548622][  T492] usb 7-1: SerialNumber: syz
[  122.561801][ T3244] overlayfs: failed to clone upperpath
[  122.684725][   T36] audit: type=1400 audit(2000000056.433:453): avc:  denied  { mount } for  pid=3256 comm="syz.3.1029" name="/" dev="pstore" ino=2717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  122.693027][ T3257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'.
[  122.709139][   T36] audit: type=1400 audit(2000000056.443:454): avc:  denied  { getopt } for  pid=3256 comm="syz.3.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  122.744998][ T3259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1030'.
[  122.758975][ T3228] batadv_slave_1: entered allmulticast mode
[  122.767194][ T3228] veth1_to_bond: entered promiscuous mode
[  122.773728][ T3228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1020'.
[  122.784403][ T3227] veth1_to_bond: left promiscuous mode
[  122.791105][ T3227] batadv_slave_1: left allmulticast mode
[  122.805882][  T492] usb 7-1: USB disconnect, device number 9
[  122.825190][   T36] audit: type=1400 audit(2000000056.571:455): avc:  denied  { read } for  pid=3267 comm="syz.3.1034" name="/" dev="configfs" ino=2562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.851170][   T36] audit: type=1400 audit(2000000056.571:456): avc:  denied  { open } for  pid=3267 comm="syz.3.1034" path="/" dev="configfs" ino=2562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  122.899613][ T3275] netlink: 'syz.5.1036': attribute type 32 has an invalid length.
[  122.914523][ T3275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1036'.
[  123.584038][  T492] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  123.634987][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  123.735330][  T492] usb 8-1: Using ep0 maxpacket: 16
[  123.744605][  T492] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.758335][  T492] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.769403][  T492] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  123.784013][  T492] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  123.795877][   T10] usb 7-1: Using ep0 maxpacket: 8
[  123.801603][  T492] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.812829][  T492] usb 8-1: config 0 descriptor??
[  123.819521][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  123.831561][   T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  123.841728][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.850590][   T10] usb 7-1: Product: syz
[  123.855396][   T10] usb 7-1: Manufacturer: syz
[  123.861097][   T10] usb 7-1: SerialNumber: syz
[  123.987639][  T311] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  124.004676][ T3303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'.
[  124.074854][   T10] usb 7-1: Unsupported UAC3 BADD profile
[  124.085297][   T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  124.100315][   T10] usb 7-1: USB disconnect, device number 10
[  124.114909][ T3229] udevd[3229]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  124.162435][  T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.174711][ T3316] x_tables: unsorted entry at hook 1
[  124.181828][  T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.197260][  T311] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  124.206942][  T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.230517][  T311] usb 6-1: config 0 descriptor??
[  124.238903][  T492] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.000F/input/input5
[  124.252769][ T3319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'.
[  124.260178][   T36] audit: type=1400 audit(2000000057.998:457): avc:  denied  { read } for  pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=573 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.264464][  T492] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  124.295185][   T36] audit: type=1400 audit(2000000057.998:458): avc:  denied  { open } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=573 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.326369][   T36] audit: type=1400 audit(2000000058.067:459): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=573 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.637039][  T492] usb 8-1: USB disconnect, device number 6
[  124.675638][ T3332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1058'.
[  124.703543][  T311] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0
[  124.716142][   T36] audit: type=1400 audit(2000000058.454:460): avc:  denied  { bind } for  pid=3335 comm="syz.6.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  124.718796][  T311] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0
[  124.750398][  T311] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0
[  124.758211][  T311] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0
[  124.766440][  T311] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0
[  124.774337][  T311] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  124.971484][   T10] usb 6-1: USB disconnect, device number 15
[  125.005130][   T36] audit: type=1400 audit(2000000058.732:461): avc:  denied  { execmem } for  pid=3344 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  125.009009][  T492] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  125.120790][ T3355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1067'.
[  125.149142][ T3358] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1068'.
[  125.168010][   T36] audit: type=1400 audit(2000000058.900:462): avc:  denied  { create } for  pid=3357 comm="syz.6.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  125.192991][  T492] usb 8-1: Using ep0 maxpacket: 32
[  125.199552][   T36] audit: type=1400 audit(2000000058.900:463): avc:  denied  { write } for  pid=3357 comm="syz.6.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  125.222575][   T36] audit: type=1400 audit(2000000058.900:464): avc:  denied  { nlmsg_write } for  pid=3357 comm="syz.6.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  125.247347][  T492] usb 8-1: unable to get BOS descriptor or descriptor too short
[  125.259432][  T492] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  125.275091][  T492] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.292675][  T492] usb 8-1: Product: syz
[  125.304945][  T492] usb 8-1: Manufacturer: syz
[  125.313771][  T492] usb 8-1: SerialNumber: syz
[  125.324377][  T492] usb 8-1: unit 4 not found!
[  125.334653][  T492] usb 8-1: unit 0 not found!
[  125.480714][   T65] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  125.527449][ T3334] bridge_slave_0: default FDB implementation only supports local addresses
[  125.643239][   T65] usb 7-1: unable to get BOS descriptor or descriptor too short
[  125.652794][   T65] usb 7-1: not running at top speed; connect to a high speed hub
[  125.662267][   T65] usb 7-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config
[  125.672676][   T65] usb 7-1: config 3 has 2 interfaces, different from the descriptor's value: 3
[  125.682485][   T65] usb 7-1: config 3 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2168, setting to 64
[  125.697278][   T65] usb 7-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40
[  125.707219][   T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.716542][   T65] usb 7-1: Manufacturer: І
[  125.721842][   T65] usb 7-1: SerialNumber: ఇ
[  125.749746][  T492] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  125.763410][  T492] usb 8-1: unit 4 not found!
[  125.769839][  T492] usb 8-1: unit 0 not found!
[  125.776206][  T492] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22
[  125.790549][  T492] usb 8-1: unit 4 not found!
[  125.796036][  T492] usb 8-1: unit 0 not found!
[  125.805537][  T492] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -22
[  125.821720][  T492] usb 8-1: USB disconnect, device number 7
[  125.835029][ T3143] udevd[3143]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  125.931785][  T311] usb 7-1: USB disconnect, device number 11
[  126.340637][ T3391] dummy_hcd dummy_hcd.0: remove, state 4
[  126.347093][ T3391] usb usb1: USB disconnect, device number 1
[  126.359789][ T3391] dummy_hcd dummy_hcd.0: stopped
[  126.365356][ T3391] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  126.468789][ T3396] kvm: user requested TSC rate below hardware speed
[  126.477833][ T3396] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  126.619575][  T311] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  126.771983][  T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.784556][  T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.797683][  T311] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  126.808632][  T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.819553][  T311] usb 6-1: config 0 descriptor??
[  126.851456][  T400] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  127.014643][  T400] usb 7-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8
[  127.025844][  T400] usb 7-1: config 1 interface 0 altsetting 13 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  127.040868][  T400] usb 7-1: config 1 interface 0 has no altsetting 0
[  127.049364][  T400] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.059518][  T400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.067725][  T400] usb 7-1: Product: п
[  127.072250][  T400] usb 7-1: Manufacturer: Х
[  127.077150][  T400] usb 7-1: SerialNumber: syz
[  127.083626][ T3402] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  127.295543][ T3402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.305560][ T3402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.306127][  T311] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0
[  127.317332][ T3402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.326652][  T311] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0
[  127.336263][ T3402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.342477][  T311] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0
[  127.357960][  T311] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0
[  127.366132][  T311] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0
[  127.375791][  T400] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  127.385660][  T311] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  127.401637][  T400] usb 7-1: USB disconnect, device number 12
[  127.523531][  T492] usb 6-1: USB disconnect, device number 16
[  127.588825][   T36] audit: type=1400 audit(2000000061.301:465): avc:  denied  { getattr } for  pid=3408 comm="syz.7.1087" path="socket:[20524]" dev="sockfs" ino=20524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  127.681304][ T3413] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1579708644/1579708645
[  127.692818][ T3413] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1579708644/1579708645
[  127.721735][   T36] audit: type=1400 audit(2000000061.440:466): avc:  denied  { execute } for  pid=3418 comm="syz.3.1091" name="file0" dev="tmpfs" ino=2370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  127.774930][ T3426] 
@0�
: renamed from bond_slave_1
[  127.874343][ T3428] ��: renamed from bond_slave_0
[  128.080378][  T492] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  128.232924][  T492] usb 8-1: unable to get BOS descriptor or descriptor too short
[  128.241866][  T492] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 983
[  128.252638][  T492] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  128.268581][  T492] usb 8-1: config 1 interface 0 has no altsetting 0
[  128.278350][  T492] usb 8-1: string descriptor 0 read error: -22
[  128.284964][  T492] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.294407][  T492] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.304618][ T3411] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  128.313387][  T400] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  128.436165][  T572] tipc: Subscription rejected, illegal request
[  128.473974][  T400] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  128.483415][  T400] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.494672][  T400] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  128.513111][  T400] usb 6-1: config 1 has no interface number 1
[  128.522687][ T3411] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  128.542955][  T400] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  128.557833][  T492] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -32
[  128.559021][  T400] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.577730][  T400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.586755][  T400] usb 6-1: Product: syz
[  128.591050][  T400] usb 6-1: Manufacturer: syz
[  128.595793][  T400] usb 6-1: SerialNumber: syz
[  128.774888][   T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  128.805910][ T3438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.818267][ T3438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.835368][  T400] usb 6-1: USB disconnect, device number 17
[  128.927367][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.940046][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.951359][   T10] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  128.963207][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.974169][   T10] usb 7-1: config 0 descriptor??
[  129.270905][  T400] usb 8-1: USB disconnect, device number 8
[  129.315674][ T3469] syz.7.1114 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  129.360486][ T3471] netlink: 'syz.5.1115': attribute type 2 has an invalid length.
[  129.423109][   T10] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0
[  129.432140][   T10] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0
[  129.446697][   T10] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0
[  129.455693][   T10] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0
[  129.459430][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  129.459454][   T36] audit: type=1400 audit(2000000063.159:468): avc:  denied  { execute_no_trans } for  pid=3473 comm="syz.3.1116" path="/439/file1" dev="tmpfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  129.463638][   T10] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0
[  129.529857][   T10] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  129.640515][  T311] usb 7-1: USB disconnect, device number 13
[  129.660694][  T400] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  129.823829][  T400] usb 8-1: unable to get BOS descriptor or descriptor too short
[  129.833012][  T400] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.852362][  T400] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.866652][  T400] usb 8-1: config 1 has no interface number 0
[  129.875370][  T400] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  129.885469][  T400] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.897443][  T400] usb 8-1: Product: syz
[  129.901655][  T400] usb 8-1: Manufacturer: syz
[  129.907492][  T400] usb 8-1: SerialNumber: syz
[  129.946495][ T3493] netlink: 'syz.5.1124': attribute type 9 has an invalid length.
[  129.997734][ T3495] IPv6: NLM_F_CREATE should be specified when creating new route
[  130.007019][ T3495] netlink: 'syz.5.1125': attribute type 16 has an invalid length.
[  130.014988][ T3495] netlink: 'syz.5.1125': attribute type 2 has an invalid length.
[  130.023655][ T3495] netlink: 64086 bytes leftover after parsing attributes in process `syz.5.1125'.
[  130.044689][   T36] audit: type=1400 audit(2000000063.745:469): avc:  denied  { map } for  pid=3498 comm="syz.5.1126" path="socket:[20716]" dev="sockfs" ino=20716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  130.091880][   T36] audit: type=1400 audit(2000000063.785:470): avc:  denied  { getattr } for  pid=3503 comm="syz.5.1128" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  130.100502][ T3506] netlink: 'syz.3.1129': attribute type 29 has an invalid length.
[  130.147163][ T3469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.168376][ T3469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.174183][   T36] audit: type=1400 audit(2000000063.874:471): avc:  denied  { remove_name } for  pid=3503 comm="syz.5.1128" name="bcdDevice" dev="configfs" ino=19898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.202081][ T3511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1128'.
[  130.234616][   T36] audit: type=1400 audit(2000000063.904:472): avc:  denied  { unlink } for  pid=3503 comm="syz.5.1128" name="bcdDevice" dev="configfs" ino=19898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  130.411729][   T36] audit: type=1400 audit(2000000064.103:473): avc:  denied  { unlink } for  pid=2861 comm="syz-executor" name="file2" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  130.455542][   T36] audit: type=1400 audit(2000000064.103:474): avc:  denied  { lock } for  pid=3532 comm="syz.6.1138" path="socket:[20930]" dev="sockfs" ino=20930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  130.687041][   T45] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  130.797570][  T492] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  130.849578][   T45] usb 7-1: unable to get BOS descriptor or descriptor too short
[  130.860889][   T45] usb 7-1: not running at top speed; connect to a high speed hub
[  130.873802][   T45] usb 7-1: unable to read config index 0 descriptor/start: -61
[  130.884683][   T45] usb 7-1: can't read configurations, error -61
[  130.949935][  T492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.962816][  T492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.976969][  T492] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  130.993326][  T492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.004514][  T492] usb 6-1: config 0 descriptor??
[  131.028916][   T45] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  131.181290][   T45] usb 7-1: unable to get BOS descriptor or descriptor too short
[  131.190681][   T45] usb 7-1: not running at top speed; connect to a high speed hub
[  131.200506][   T45] usb 7-1: unable to read config index 0 descriptor/start: -61
[  131.209196][   T45] usb 7-1: can't read configurations, error -61
[  131.216132][   T45] usb usb7-port1: attempt power cycle
[  131.470758][  T492] usbhid 6-1:0.0: can't add hid device: -71
[  131.477530][  T492] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  131.487865][  T492] usb 6-1: USB disconnect, device number 18
[  131.571936][   T45] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  131.594217][   T45] usb 7-1: unable to get BOS descriptor or descriptor too short
[  131.602741][   T45] usb 7-1: not running at top speed; connect to a high speed hub
[  131.612328][   T45] usb 7-1: unable to read config index 0 descriptor/start: -61
[  131.620140][   T45] usb 7-1: can't read configurations, error -61
[  131.753018][   T45] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  131.774793][   T45] usb 7-1: unable to get BOS descriptor or descriptor too short
[  131.783660][   T45] usb 7-1: not running at top speed; connect to a high speed hub
[  131.793683][   T45] usb 7-1: unable to read config index 0 descriptor/start: -61
[  131.801700][   T45] usb 7-1: can't read configurations, error -61
[  131.812029][   T45] usb usb7-port1: unable to enumerate USB device
[  131.882141][ T3555] netlink: 'syz.3.1148': attribute type 27 has an invalid length.
[  131.922130][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.930634][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.345297][ T3568] usb 8-1: USB disconnect, device number 9
[  132.396398][   T36] audit: type=1400 audit(2000000066.072:475): avc:  denied  { bind } for  pid=3624 comm="syz.5.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  132.438264][   T36] audit: type=1400 audit(2000000066.072:476): avc:  denied  { setopt } for  pid=3624 comm="syz.5.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  132.497843][ T3634] syz.5.1159: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0
[  132.537879][ T3634] CPU: 1 UID: 0 PID: 3634 Comm: syz.5.1159 Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35
[  132.537914][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  132.537926][ T3634] Call Trace:
[  132.537932][ T3634]  <TASK>
[  132.537940][ T3634]  __dump_stack+0x21/0x30
[  132.537975][ T3634]  dump_stack_lvl+0x140/0x1c0
[  132.538000][ T3634]  ? __cfi_dump_stack_lvl+0x10/0x10
[  132.538022][ T3634]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  132.538045][ T3634]  dump_stack+0x19/0x20
[  132.538067][ T3634]  warn_alloc+0x1e7/0x2c0
[  132.538091][ T3634]  ? stack_depot_save_flags+0x38/0x800
[  132.538115][ T3634]  ? __cfi_warn_alloc+0x10/0x10
[  132.538139][ T3634]  ? kasan_save_track+0x3e/0x80
[  132.538156][ T3634]  ? kasan_save_alloc_info+0x3a/0x50
[  132.538179][ T3634]  ? xsk_init_queue+0xb2/0x120
[  132.538200][ T3634]  ? xsk_setsockopt+0x4c5/0x760
[  132.538222][ T3634]  ? do_sock_setsockopt+0x27f/0x410
[  132.538242][ T3634]  ? __x64_sys_setsockopt+0x1b7/0x250
[  132.538260][ T3634]  ? x64_sys_call+0x2adc/0x2ee0
[  132.538278][ T3634]  ? do_syscall_64+0x57/0xf0
[  132.538299][ T3634]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  132.538326][ T3634]  __vmalloc_node_range_noprof+0x136/0x1300
[  132.538361][ T3634]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  132.538411][ T3634]  ? kasan_save_alloc_info+0x3a/0x50
[  132.538440][ T3634]  ? __kasan_kmalloc+0x96/0xb0
[  132.538462][ T3634]  ? __kmalloc_cache_noprof+0x23c/0x470
[  132.538485][ T3634]  vmalloc_user_noprof+0x77/0x90
[  132.538514][ T3634]  ? xskq_create+0xdb/0x290
[  132.538538][ T3634]  xskq_create+0xdb/0x290
[  132.538561][ T3634]  xsk_init_queue+0xb2/0x120
[  132.538584][ T3634]  xsk_setsockopt+0x4c5/0x760
[  132.538606][ T3634]  ? __cfi_xsk_setsockopt+0x10/0x10
[  132.538629][ T3634]  ? do_futex+0x32a/0x510
[  132.538655][ T3634]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  132.538677][ T3634]  ? security_socket_setsockopt+0x3d/0x100
[  132.538702][ T3634]  ? __cfi_xsk_setsockopt+0x10/0x10
[  132.538725][ T3634]  do_sock_setsockopt+0x27f/0x410
[  132.538744][ T3634]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  132.538763][ T3634]  ? __fget_files+0x2bc/0x330
[  132.538787][ T3634]  __x64_sys_setsockopt+0x1b7/0x250
[  132.538806][ T3634]  x64_sys_call+0x2adc/0x2ee0
[  132.538824][ T3634]  do_syscall_64+0x57/0xf0
[  132.538844][ T3634]  ? clear_bhb_loop+0x50/0xa0
[  132.538868][ T3634]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  132.538892][ T3634] RIP: 0033:0x7f30f099de99
[  132.538909][ T3634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.538927][ T3634] RSP: 002b:00007f30f181e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  132.538949][ T3634] RAX: ffffffffffffffda RBX: 00007f30f0c25fa0 RCX: 00007f30f099de99
[  132.538965][ T3634] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  132.538978][ T3634] RBP: 00007f30f0a33eaf R08: 0000000000000004 R09: 0000000000000000
[  132.538991][ T3634] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  132.539005][ T3634] R13: 00007f30f0c26038 R14: 00007f30f0c25fa0 R15: 00007ffe8be3bea8
[  132.539023][ T3634]  </TASK>
[  132.539048][ T3634] Mem-Info:
[  132.871507][ T3634] active_anon:42146 inactive_anon:4 isolated_anon:0
[  132.871507][ T3634]  active_file:14542 inactive_file:10583 isolated_file:0
[  132.871507][ T3634]  unevictable:16450 dirty:62 writeback:0
[  132.871507][ T3634]  slab_reclaimable:5460 slab_unreclaimable:72107
[  132.871507][ T3634]  mapped:24514 shmem:35605 pagetables:1095
[  132.871507][ T3634]  sec_pagetables:0 bounce:0
[  132.871507][ T3634]  kernel_misc_reclaimable:0
[  132.871507][ T3634]  free:1463624 free_pcp:1787 free_cma:0
[  132.927067][ T3634] Node 0 active_anon:168656kB inactive_anon:16kB active_file:58236kB inactive_file:42332kB unevictable:65800kB isolated(anon):0kB isolated(file):0kB mapped:98020kB dirty:332kB writeback:0kB shmem:142412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6980kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no
[  132.970990][ T3634] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:68kB free_cma:0kB
[  133.007911][ T3634] lowmem_reserve[]: 0 3921 3921
[  133.017121][ T3634] Normal free:2910140kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:168756kB inactive_anon:16kB active_file:58236kB inactive_file:42332kB unevictable:65800kB writepending:332kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3948kB local_pcp:1664kB free_cma:0kB
[  133.050925][ T3634] lowmem_reserve[]: 0 0 0
[  133.055431][ T3634] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  133.073751][ T3634] Normal: 475*4kB (UME) 367*8kB (UME) 785*16kB (UME) 1002*32kB (UME) 761*64kB (UME) 132*128kB (UME) 90*256kB (UME) 111*512kB (UME) 112*1024kB (UM) 27*2048kB (UME) 622*4096kB (UM) = 2912628kB
[  133.094949][ T3634] 77195 total pagecache pages
[  133.100277][ T3634] 4 pages in swap cache
[  133.104646][ T3634] Free swap  = 124400kB
[  133.109603][ T3634] Total swap = 124996kB
[  133.114185][ T3568] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  133.114638][ T3634] 2097051 pages RAM
[  133.126318][ T3634] 0 pages HighMem/MovableOnly
[  133.131609][ T3634] 352235 pages reserved
[  133.135802][ T3634] 0 pages cma reserved
[  133.141293][ T3634] Memory allocations:
[  133.146592][ T3634]          0 B        0 init/main.c:1477 func:do_initcalls
[  133.155004][ T3634]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  133.163844][ T3634]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  133.172411][ T3634]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  133.181488][ T3634]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  133.190081][ T3634]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  133.200236][ T3634]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  133.208705][ T3634]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  133.218028][ T3634]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  133.226559][ T3634]          0 B        0 init/initramfs.c:101 func:find_link
[  133.272287][ T3568] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.284562][ T3568] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.294864][ T3568] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  133.305161][ T3568] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.314628][ T3568] usb 8-1: config 0 descriptor??
[  133.803173][ T3568] usbhid 8-1:0.0: can't add hid device: -71
[  133.810917][ T3568] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  133.821646][ T3568] usb 8-1: USB disconnect, device number 10
[  133.870250][ T3689] netlink: 'syz.5.1183': attribute type 11 has an invalid length.
[  133.882613][ T3689] overlayfs: failed to resolve './bus': -2
[  133.916752][ T3694] UDC core: g1: couldn't find an available UDC or it's busy
[  133.940877][   T36] audit: type=1400 audit(2000000067.614:477): avc:  denied  { read append } for  pid=3696 comm="syz.5.1186" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  134.034566][ T3566] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  134.185321][ T3566] usb 7-1: Using ep0 maxpacket: 16
[  134.192170][ T3566] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.205424][ T3566] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  134.215292][ T3566] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.224311][ T3566] usb 7-1: Product: syz
[  134.229193][ T3566] usb 7-1: Manufacturer: syz
[  134.234762][ T3566] usb 7-1: SerialNumber: syz
[  134.240439][ T3566] usb 7-1: config 0 descriptor??
[  134.246646][ T3566] sr9700 7-1:0.0: probe with driver sr9700 failed with error -22
[  134.255707][ T3561] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  134.335338][ T3713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1193'.
[  134.356681][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1193'.
[  134.438020][ T3561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.450195][ T3561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.456893][ T3566] usb 7-1: USB disconnect, device number 18
[  134.462545][ T3561] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  134.479346][ T3561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.493295][ T3561] usb 6-1: config 0 descriptor??
[  134.910261][ T3561] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0
[  134.919962][ T3561] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0
[  134.928149][ T3561] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0
[  134.936791][ T3561] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0
[  134.946540][ T3561] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0
[  134.956002][ T3561] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0
[  134.965221][ T3561] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0
[  134.975587][ T3561] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0
[  135.109950][ T3701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.119168][ T3701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.129352][ T3561] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device
[  135.137513][ T3561] pyra 0003:1E7D:2CF6.0013: couldn't install mouse
[  135.145656][ T3561] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71
[  135.156810][ T3561] usb 6-1: USB disconnect, device number 19
[  135.489425][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  135.489449][   T36] audit: type=1400 audit(2000000069.157:479): avc:  denied  { write } for  pid=3755 comm="syz.7.1207" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  135.551514][ T3566] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  135.703899][ T3566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.715834][ T3566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.727337][ T3566] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  135.738345][ T3568] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  135.747677][ T3566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.758735][ T3566] usb 7-1: config 0 descriptor??
[  135.933041][ T3568] usb 8-1: Using ep0 maxpacket: 16
[  135.942972][ T3568] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  135.953163][ T3568] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.961597][ T3568] usb 8-1: Product: syz
[  135.967924][ T3568] usb 8-1: Manufacturer: syz
[  135.973552][ T3568] usb 8-1: SerialNumber: syz
[  135.979753][ T3568] usb 8-1: config 0 descriptor??
[  135.986593][ T3568] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  135.995290][ T3568] usb 8-1: Detected FT-X
[  136.083698][ T3563] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  136.187114][ T3568] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  136.195116][ T3568] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  136.203971][ T3568] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71
[  136.213723][ T3568] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  136.225545][ T3568] usb 8-1: USB disconnect, device number 11
[  136.237106][ T3563] usb 6-1: Using ep0 maxpacket: 16
[  136.244090][ T3568] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  136.248661][ T3563] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  136.255370][ T3566] usbhid 7-1:0.0: can't add hid device: -71
[  136.267515][ T3563] usb 6-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00
[  136.274373][ T3568] ftdi_sio 8-1:0.0: device disconnected
[  136.286509][ T3563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.293655][ T3566] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  136.313267][ T3563] usb 6-1: config 0 descriptor??
[  136.323050][ T3566] usb 7-1: USB disconnect, device number 19
[  136.726642][ T3563] hid (null): nested delimiters
[  136.738820][ T3563] wacom 0003:056A:0093.0014: unknown main item tag 0x4
[  136.752520][ T3563] wacom 0003:056A:0093.0014: unknown main item tag 0xd
[  136.775261][ T3563] wacom 0003:056A:0093.0014: nested delimiters
[  136.786724][ T3563] wacom 0003:056A:0093.0014: item 0 4 2 10 parsing failed
[  136.797946][ T3563] wacom 0003:056A:0093.0014: parse failed
[  136.805007][ T3563] wacom 0003:056A:0093.0014: probe with driver wacom failed with error -22
[  136.939034][ T3760] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1209'.
[  136.954706][ T3760] netlink: 'syz.5.1209': attribute type 16 has an invalid length.
[  136.967836][ T3760] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1209'.
[  136.982808][ T3568] usb 6-1: USB disconnect, device number 20
[  137.037672][ T3566] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  137.199584][ T3566] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  137.209981][ T3566] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  137.222695][ T3566] usb 7-1: config 220 has no interface number 2
[  137.231744][ T3566] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  137.250630][ T3566] usb 7-1: config 220 interface 0 has no altsetting 0
[  137.261022][ T3566] usb 7-1: config 220 interface 76 has no altsetting 0
[  137.270320][ T3566] usb 7-1: config 220 interface 1 has no altsetting 0
[  137.281283][ T3566] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  137.292253][ T3566] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.302417][ T3566] usb 7-1: Product: syz
[  137.306694][ T3566] usb 7-1: Manufacturer: syz
[  137.311654][ T3566] usb 7-1: SerialNumber: syz
[  137.358838][ T3563] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  137.519947][ T3563] usb 8-1: Using ep0 maxpacket: 16
[  137.551194][ T3563] usb 8-1: unable to get BOS descriptor or descriptor too short
[  137.567898][ T3563] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.588987][ T3563] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  137.604652][ T3563] usb 8-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40
[  137.615292][ T3563] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.627255][ T3563] usb 8-1: Product: syz
[  137.647254][ T3801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=3801 comm=syz.6.1223
[  137.661621][ T3563] usb 8-1: Manufacturer: syz
[  137.666629][ T3563] usb 8-1: SerialNumber: syz
[  137.703685][ T3566] usb 7-1: selecting invalid altsetting 0
[  137.712891][ T3566] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  137.720307][ T3566] usb 7-1: No valid video chain found.
[  137.749167][ T3566] usb 7-1: USB disconnect, device number 20
[  137.900957][ T3563] usb 8-1: 1:1 : no or invalid class specific endpoint descriptor
[  137.914044][ T3563] usb 8-1: 1:1 : format type 0 is detected, processed as PCM
[  137.924065][ T3563] usb 8-1: 1:1 : sample bitwidth 249 in over sample bytes 4
[  137.933424][ T3563] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  137.948722][ T3563] usb 8-1: unit 3 not found!
[  137.964398][ T3563] usb 8-1: USB disconnect, device number 12
[  138.188319][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'.
[  138.222083][ T3566] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  138.385286][ T3566] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  138.395128][ T3566] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.403839][ T3566] usb 7-1: Product: syz
[  138.408369][ T3566] usb 7-1: Manufacturer: syz
[  138.413808][ T3566] usb 7-1: SerialNumber: syz
[  138.424354][ T3835] loop9: detected capacity change from 0 to 7
[  138.433532][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  138.447078][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.459394][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  138.471936][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.484463][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  138.493651][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.504726][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  138.513585][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.523559][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  138.531783][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.541918][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  138.621841][ T3827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.630603][ T3843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.630763][ T3827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.642270][ T3843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.712046][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'.
[  138.723936][ T3567] usb 8-1: new low-speed USB device number 13 using dummy_hcd
[  138.875695][ T3567] usb 8-1: unable to get BOS descriptor or descriptor too short
[  138.887184][ T3567] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0
[  138.898838][ T3567] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0
[  138.912329][ T3567] usb 8-1: string descriptor 0 read error: -22
[  138.920409][ T3567] usb 8-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  138.930628][ T3567] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.943596][ T3567] usb 8-1: low speed audio streaming not supported
[  138.951039][ T3567] usb 8-1: low speed audio streaming not supported
[  139.146826][ T3563] usb 8-1: USB disconnect, device number 13
[  139.322421][ T3866] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1242'.
[  139.344043][ T3869] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3869 comm=syz.3.1243
[  139.529471][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.543284][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.748905][ T3566] rtl8150 7-1:1.0: couldn't reset the device
[  139.755965][ T3566] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[  139.880982][ T3928] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  139.912274][   T36] audit: type=1400 audit(2000000073.570:480): avc:  denied  { audit_read } for  pid=3931 comm="syz.3.1266" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  140.339300][ T3561] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  140.504265][ T3561] usb 8-1: unable to get BOS descriptor or descriptor too short
[  140.518434][ T3974] kvm: kvm [3972]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  140.520736][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.541682][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.552008][ T3561] usb 8-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  140.556762][ T3974] kvm: kvm [3972]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  140.570869][ T3561] usb 8-1: config 66 has 1 interface, different from the descriptor's value: 2
[  140.592628][ T3561] usb 8-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0
[  140.603772][ T3561] usb 8-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 0
[  140.614462][ T3561] usb 8-1: config 66 interface 0 has no altsetting 0
[  140.623124][ T3561] usb 8-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  140.633697][ T3561] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.649362][ T3561] usb 8-1: Product: syz
[  140.654611][ T3561] usb 8-1: Manufacturer: syz
[  140.654909][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.664704][ T3561] usb 8-1: SerialNumber: syz
[  140.680618][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.704896][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.724880][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.745408][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.764008][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.783848][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.802696][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.832170][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.851919][ T3973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  140.891109][ T3952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.909570][ T3952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.944700][ T3952] kvm: pic: non byte write
[  141.058775][ T3561] usb 8-1: USB disconnect, device number 14
[  141.234135][ T3993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=3993 comm=syz.3.1289
[  141.512726][   T36] audit: type=1400 audit(2000000075.155:481): avc:  denied  { create } for  pid=4010 comm="syz.6.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  141.546467][ T4013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4013 comm=syz.6.1299
[  141.693579][ T3568] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  141.857061][ T3568] usb 6-1: unable to get BOS descriptor or descriptor too short
[  141.873942][ T3568] usb 6-1: not running at top speed; connect to a high speed hub
[  141.882219][   T36] audit: type=1400 audit(2000000075.524:482): avc:  denied  { ioctl } for  pid=4041 comm="syz.7.1308" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  141.882677][ T3568] usb 6-1: config 7 has an invalid interface number: 165 but max is 0
[  141.922492][ T3568] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  141.934273][ T3568] usb 6-1: config 7 has no interface number 0
[  141.944494][ T3568] usb 6-1: config 7 interface 165 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  141.965586][ T3568] usb 6-1: config 7 interface 165 has no altsetting 0
[  141.982443][ T3568] usb 6-1: New USB device found, idVendor=ca0f, idProduct=0e41, bcdDevice=b4.7e
[  141.993397][ T3568] usb 6-1: New USB device strings: Mfr=72, Product=171, SerialNumber=3
[  142.002708][ T3568] usb 6-1: Product: syz
[  142.009067][ T3568] usb 6-1: Manufacturer: syz
[  142.014430][ T3568] usb 6-1: SerialNumber: syz
[  142.225459][  T599] Bluetooth: hci0: Frame reassembly failed (-84)
[  142.226749][   T36] audit: type=1400 audit(2000000075.873:483): avc:  denied  { ioctl } for  pid=4004 comm="syz.5.1295" path="socket:[22295]" dev="sockfs" ino=22295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  142.234806][  T599] Bluetooth: hci0: Frame reassembly failed (-84)
[  142.285044][ T3562] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  142.425365][ T3562] usb 8-1: device descriptor read/64, error -71
[  142.439801][ T4072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.450395][ T4072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.578219][ T4074] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  142.656900][ T4080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4080 comm=syz.3.1321
[  142.670896][ T3562] usb 8-1: device descriptor read/64, error -71
[  142.916699][ T3562] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  143.022094][ T4082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.031171][ T4082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.057086][ T3562] usb 8-1: device descriptor read/64, error -71
[  143.297709][ T3562] usb 8-1: device descriptor read/64, error -71
[  143.408160][ T3562] usb usb8-port1: attempt power cycle
[  143.590282][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.599894][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.748874][ T3562] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  143.779977][ T3562] usb 8-1: device descriptor read/8, error -71
[  143.920484][ T3562] usb 8-1: device descriptor read/8, error -71
[  144.159910][ T3562] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  144.181184][ T3562] usb 8-1: device descriptor read/8, error -71
[  144.300262][ T3098] Bluetooth: hci0: command 0x1003 tx timeout
[  144.304613][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  144.316373][ T3568] usbhid 6-1:7.165: couldn't find an input interrupt endpoint
[  144.317437][ T3562] usb 8-1: device descriptor read/8, error -71
[  144.339904][ T3568] usb 6-1: USB disconnect, device number 21
[  144.440706][ T3562] usb usb8-port1: unable to enumerate USB device
[  144.893783][ T4112] kvm_intel: kvm [4111]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xf0be
[  144.905799][ T4112] kvm: kvm [4111]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x5de8
[  144.916002][ T4112] kvm: kvm [4111]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2589
[  145.049342][ T4129] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1342'.
[  145.154087][   T36] audit: type=1400 audit(2000000078.796:484): avc:  denied  { append } for  pid=4139 comm="syz.7.1347" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  145.292650][ T3562] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  145.352140][ T4143] rust_binder: 4142:4143 transaction to 0 failed: EINVAL
[  145.410277][   T36] audit: type=1400 audit(2000000079.045:485): avc:  denied  { getopt } for  pid=4151 comm="syz.7.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  145.437978][ T3562] usb 6-1: device descriptor read/64, error -71
[  145.462385][   T36] audit: type=1400 audit(2000000079.095:486): avc:  denied  { watch_reads } for  pid=4156 comm="syz.7.1353" path="/74" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  145.683478][ T3562] usb 6-1: device descriptor read/64, error -71
[  145.793744][ T3568] usb 8-1: new low-speed USB device number 19 using dummy_hcd
[  145.934044][ T3562] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  145.944194][ T3568] usb 8-1: Invalid ep0 maxpacket: 32
[  146.064415][ T3562] usb 6-1: device descriptor read/64, error -71
[  146.074377][ T3568] usb 8-1: new low-speed USB device number 20 using dummy_hcd
[  146.224769][ T3568] usb 8-1: Invalid ep0 maxpacket: 32
[  146.230682][ T3568] usb usb8-port1: attempt power cycle
[  146.305183][ T3562] usb 6-1: device descriptor read/64, error -71
[  146.415256][ T3562] usb usb6-port1: attempt power cycle
[  146.575453][ T3568] usb 8-1: new low-speed USB device number 21 using dummy_hcd
[  146.595972][ T3568] usb 8-1: Invalid ep0 maxpacket: 32
[  146.662922][ T4180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1363'.
[  146.725914][ T3568] usb 8-1: new low-speed USB device number 22 using dummy_hcd
[  146.746229][ T3568] usb 8-1: Invalid ep0 maxpacket: 32
[  146.752532][ T3568] usb usb8-port1: unable to enumerate USB device
[  146.765794][ T3562] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  146.797230][ T3562] usb 6-1: device descriptor read/8, error -71
[  146.927126][ T3562] usb 6-1: device descriptor read/8, error -71
[  147.013186][ T4197] netlink: 5892 bytes leftover after parsing attributes in process `syz.6.1370'.
[  147.036576][ T4199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.046819][ T4199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.176791][ T3562] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  147.198171][ T3562] usb 6-1: device descriptor read/8, error -71
[  147.338361][ T3562] usb 6-1: device descriptor read/8, error -71
[  147.447345][ T3562] usb usb6-port1: unable to enumerate USB device
[  147.703998][ T4220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.713718][ T4222] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1382'.
[  147.714101][ T4220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.074785][   T36] audit: type=1400 audit(2000000081.710:487): avc:  denied  { ioctl } for  pid=4228 comm="syz.5.1385" path="socket:[24756]" dev="sockfs" ino=24756 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  148.100893][   T36] audit: type=1400 audit(2000000081.710:488): avc:  denied  { name_bind } for  pid=4228 comm="syz.5.1385" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  148.165671][   T36] audit: type=1400 audit(2000000081.799:489): avc:  denied  { read write } for  pid=4235 comm="syz.5.1387" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  148.194666][   T36] audit: type=1400 audit(2000000081.799:490): avc:  denied  { open } for  pid=4235 comm="syz.5.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  148.222311][   T36] audit: type=1400 audit(2000000081.799:491): avc:  denied  { ioctl } for  pid=4235 comm="syz.5.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  148.393838][   T36] audit: type=1326 audit(2000000082.029:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.6.1393" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3f79de99 code=0x0
[  148.479376][ T3562] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  148.639523][ T3562] usb 6-1: Using ep0 maxpacket: 16
[  148.646861][ T3562] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7
[  148.660747][ T3562] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[  148.670319][ T3562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.678338][ T3562] usb 6-1: Product: syz
[  148.682716][ T3562] usb 6-1: Manufacturer: syz
[  148.687509][ T3562] usb 6-1: SerialNumber: syz
[  148.894827][ T4236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.904320][ T4236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.917511][ T3562] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  148.925054][ T3562] usb 6-1: unit 6: unexpected type 0x03
[  148.931794][ T3562] usb 6-1: unit 12 not found!
[  148.937382][ T3562] usb 6-1: unit 4 not found!
[  148.943807][ T3562] usb 6-1: unit 8 not found!
[  148.949802][ T3562] usb 6-1: unit 1 not found!
[  148.966691][ T3562] usb 6-1: USB disconnect, device number 26
[  148.997769][ T3229] udevd[3229]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  149.273701][ T4272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.287615][ T4272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.521149][ T3568] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  149.682443][ T3568] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.695949][ T3568] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.707009][ T3568] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  149.716831][ T3568] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.726388][ T3568] usb 8-1: config 0 descriptor??
[  149.831760][ T3562] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  149.873984][ T4292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.884964][ T4292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.983780][ T3562] usb 6-1: unable to get BOS descriptor or descriptor too short
[  149.994404][ T3562] usb 6-1: not running at top speed; connect to a high speed hub
[  150.003834][ T3562] usb 6-1: config 9 has an invalid interface number: 142 but max is 0
[  150.012626][ T3562] usb 6-1: config 9 has no interface number 0
[  150.019248][ T3562] usb 6-1: config 9 interface 142 altsetting 17 has an endpoint descriptor with address 0xE8, changing to 0x88
[  150.032620][ T3562] usb 6-1: config 9 interface 142 has no altsetting 0
[  150.042196][ T3562] usb 6-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33
[  150.052441][ T3562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.061669][ T3562] usb 6-1: Product: syz
[  150.066853][ T3562] usb 6-1: Manufacturer: syz
[  150.071585][ T3562] usb 6-1: SerialNumber: syz
[  150.175185][ T3568] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0
[  150.182761][ T3568] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0
[  150.190259][ T3568] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0
[  150.198209][ T3568] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0
[  150.205746][ T3568] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0
[  150.215080][ T3568] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  150.234341][ T4296] 9pnet_fd: Insufficient options for proto=fd
[  150.282339][ T3562] usb-storage 6-1:9.142: USB Mass Storage device detected
[  150.292996][ T3562] usb-storage 6-1:9.142: Quirks match for vid 050d pid 0115: 4
[  150.302948][ T3562] scsi host1: usb-storage 6-1:9.142
[  150.310357][ T3562] usb 6-1: USB disconnect, device number 27
[  150.386667][ T3568] usb 8-1: USB disconnect, device number 23
[  150.412355][ T4303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.422251][ T4303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.433511][ T4303] random: crng reseeded on system resumption
[  150.433635][   T36] audit: type=1400 audit(2000000084.065:493): avc:  denied  { read write } for  pid=4302 comm="syz.6.1413" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.469234][   T36] audit: type=1400 audit(2000000084.065:494): avc:  denied  { ioctl open } for  pid=4302 comm="syz.6.1413" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.811786][ T4308] FAULT_INJECTION: forcing a failure.
[  150.811786][ T4308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.828345][ T4308] CPU: 1 UID: 0 PID: 4308 Comm: syz.5.1415 Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35
[  150.828375][ T4308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  150.828392][ T4308] Call Trace:
[  150.828403][ T4308]  <TASK>
[  150.828412][ T4308]  __dump_stack+0x21/0x30
[  150.828439][ T4308]  dump_stack_lvl+0x140/0x1c0
[  150.828458][ T4308]  ? __cfi_dump_stack_lvl+0x10/0x10
[  150.828478][ T4308]  ? selinux_file_ioctl+0x732/0x1480
[  150.828494][ T4308]  ? vfs_write+0xbcf/0xfd0
[  150.828510][ T4308]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  150.828527][ T4308]  dump_stack+0x19/0x20
[  150.828546][ T4308]  should_fail_ex+0x3c2/0x510
[  150.828566][ T4308]  should_fail+0xf/0x20
[  150.828581][ T4308]  should_fail_usercopy+0x1e/0x30
[  150.828603][ T4308]  _copy_from_user+0x20/0xa0
[  150.828617][ T4308]  msr_ioctl+0x1f0/0x470
[  150.828631][ T4308]  ? __cfi_msr_ioctl+0x10/0x10
[  150.828643][ T4308]  ? bpf_lsm_file_ioctl+0xd/0x20
[  150.828656][ T4308]  ? security_file_ioctl+0x3e/0x110
[  150.828672][ T4308]  ? __cfi_msr_ioctl+0x10/0x10
[  150.828683][ T4308]  __se_sys_ioctl+0x132/0x1b0
[  150.828695][ T4308]  __x64_sys_ioctl+0x7f/0xa0
[  150.828707][ T4308]  x64_sys_call+0x1878/0x2ee0
[  150.828716][ T4308]  do_syscall_64+0x57/0xf0
[  150.828728][ T4308]  ? clear_bhb_loop+0x50/0xa0
[  150.828741][ T4308]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  150.828753][ T4308] RIP: 0033:0x7f30f099de99
[  150.828764][ T4308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.828773][ T4308] RSP: 002b:00007f30f181e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.828785][ T4308] RAX: ffffffffffffffda RBX: 00007f30f0c25fa0 RCX: 00007f30f099de99
[  150.828793][ T4308] RDX: 0000000000000000 RSI: 00000000c02063a0 RDI: 0000000000000004
[  150.828800][ T4308] RBP: 00007f30f181e090 R08: 0000000000000000 R09: 0000000000000000
[  150.828888][ T4308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.828895][ T4308] R13: 00007f30f0c26038 R14: 00007f30f0c25fa0 R15: 00007ffe8be3bea8
[  150.828903][ T4308]  </TASK>
[  151.133141][   T36] audit: type=1400 audit(2000000084.744:495): avc:  denied  { create } for  pid=4314 comm="syz.5.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  151.175108][ T4322] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
[  151.189311][ T4322] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  151.198379][ T4322] CPU: 0 UID: 0 PID: 4322 Comm: syz.7.1421 Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35
[  151.210411][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  151.221005][ T4322] RIP: 0010:dummy_set_selfpowered+0xc0/0x160
[  151.227484][ T4322] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5a ce 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 41 ce 26 fe 41 be 58 11 00 00 4d
[  151.250905][ T4322] RSP: 0018:ffffc90001837738 EFLAGS: 00010246
[  151.257852][ T4322] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[  151.266936][ T4322] RDX: ffff88811d963900 RSI: 0000000000000003 RDI: 0000000000000005
[  151.276772][ T4322] RBP: ffffc90001837758 R08: ffff888101652c67 R09: 1ffff110202ca58c
[  151.287099][ T4322] R10: 0000000000000000 R11: ffffffff83b962b0 R12: dffffc0000000000
[  151.295868][ T4322] R13: ffff8881338704f0 R14: ffff88810578d160 R15: 0000000000000000
[  151.304327][ T4322] FS:  00007fd370de16c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  151.314281][ T4322] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.321503][ T4322] CR2: 000000110c310544 CR3: 0000000120fbe000 CR4: 00000000003526b0
[  151.330853][ T4322] Call Trace:
[  151.334494][ T4322]  <TASK>
[  151.337861][ T4322]  ? __cfi_dummy_set_selfpowered+0x10/0x10
[  151.344317][ T4322]  usb_gadget_set_selfpowered+0x84/0x1a0
[  151.351581][ T4322]  composite_dev_prepare+0x2f8/0x3e0
[  151.357887][ T4322]  ? up_write+0x66/0x280
[  151.362560][ T4322]  configfs_composite_bind+0xa8/0x15f0
[  151.368910][ T4322]  ? __kasan_check_write+0x18/0x20
[  151.374154][ T4322]  ? mutex_unlock+0x90/0x240
[  151.379013][ T4322]  ? kernfs_put+0x314/0x360
[  151.383706][ T4322]  ? __cfi_configfs_composite_bind+0x10/0x10
[  151.390785][ T4322]  gadget_bind_driver+0x304/0x9c0
[  151.396084][ T4322]  ? sysfs_create_link+0x6c/0x90
[  151.401621][ T4322]  ? __cfi_gadget_bind_driver+0x10/0x10
[  151.407590][ T4322]  really_probe+0x2e1/0x8b0
[  151.412197][ T4322]  __driver_probe_device+0x193/0x280
[  151.418109][ T4322]  driver_probe_device+0x54/0x3f0
[  151.423592][ T4322]  __driver_attach+0x422/0x5e0
[  151.428659][ T4322]  bus_for_each_dev+0x249/0x2d0
[  151.434728][ T4322]  ? __cfi___driver_attach+0x10/0x10
[  151.442037][ T4322]  ? __cfi_bus_for_each_dev+0x10/0x10
[  151.447809][ T4322]  ? _raw_spin_unlock+0x45/0x60
[  151.452853][ T4322]  ? klist_add_tail+0x1dd/0x220
[  151.458919][ T4322]  driver_attach+0x46/0x50
[  151.464313][ T4322]  bus_add_driver+0x393/0x730
[  151.471666][ T4322]  driver_register+0x2b7/0x3c0
[  151.479099][ T4322]  usb_gadget_register_driver_owner+0xfc/0x270
[  151.490452][ T4322]  gadget_dev_desc_UDC_store+0x224/0x350
[  151.499831][ T4322]  configfs_write_iter+0x32c/0x490
[  151.505430][ T4322]  ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10
[  151.513058][ T4322]  vfs_write+0x762/0xfd0
[  151.518337][ T4322]  ? __cfi_vfs_write+0x10/0x10
[  151.524311][ T4322]  ? __cfi_mutex_lock+0x10/0x10
[  151.529685][ T4322]  ksys_write+0x145/0x260
[  151.534722][ T4322]  ? xfd_validate_state+0x68/0x140
[  151.546790][ T4322]  ? __cfi_ksys_write+0x10/0x10
[  151.551744][ T4322]  ? __kasan_check_write+0x18/0x20
[  151.557162][ T4322]  ? fpregs_restore_userregs+0x11c/0x260
[  151.564115][ T4322]  __x64_sys_write+0x7f/0x90
[  151.569226][ T4322]  x64_sys_call+0x271c/0x2ee0
[  151.574410][ T4322]  do_syscall_64+0x57/0xf0
[  151.579144][ T4322]  ? clear_bhb_loop+0x50/0xa0
[  151.584704][ T4322]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  151.590927][ T4322] RIP: 0033:0x7fd36ff9de99
[  151.595600][ T4322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.616162][ T4322] RSP: 002b:00007fd370de1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  151.625172][ T4322] RAX: ffffffffffffffda RBX: 00007fd370225fa0 RCX: 00007fd36ff9de99
[  151.633751][ T4322] RDX: 000000000000000c RSI: 0000200000000500 RDI: 0000000000000006
[  151.642253][ T4322] RBP: 00007fd370033eaf R08: 0000000000000000 R09: 0000000000000000
[  151.650349][ T4322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.658411][ T4322] R13: 00007fd370226038 R14: 00007fd370225fa0 R15: 00007ffe083a9d38
[  151.666680][ T4322]  </TASK>
[  151.670008][ T4322] Modules linked in:
[  151.674087][ T4322] ---[ end trace 0000000000000000 ]---
[  151.674612][   T36] audit: type=1400 audit(2000000085.293:496): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  151.688696][ T4322] RIP: 0010:dummy_set_selfpowered+0xc0/0x160
[  151.712271][ T4322] Code: 94 c0 4d 8d b4 c6 d0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5a ce 26 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 41 ce 26 fe 41 be 58 11 00 00 4d
[  151.733272][ T4322] RSP: 0018:ffffc90001837738 EFLAGS: 00010246
[  151.740598][ T4322] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[  151.749158][ T4322] RDX: ffff88811d963900 RSI: 0000000000000003 RDI: 0000000000000005
[  151.757838][ T4322] RBP: ffffc90001837758 R08: ffff888101652c67 R09: 1ffff110202ca58c
[  151.766567][ T4322] R10: 0000000000000000 R11: ffffffff83b962b0 R12: dffffc0000000000
[  151.775043][ T4322] R13: ffff8881338704f0 R14: ffff88810578d160 R15: 0000000000000000
[  151.783826][ T4322] FS:  00007fd370de16c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  151.793170][ T4322] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.800328][ T4322] CR2: 00007fd36ffeb580 CR3: 0000000120fbe000 CR4: 00000000003526b0
[  151.808588][ T4322] Kernel panic - not syncing: Fatal exception
[  151.816383][ T4322] Kernel Offset: disabled
[  151.820883][ T4322] Rebooting in 86400 seconds..