last executing test programs:

1m26.570266389s ago: executing program 3 (id=48):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(0xffffffffffffffff, 0x10000008)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet_nvme(r0, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0)

1m26.51246588s ago: executing program 3 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x1010400, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/sda\x00', 0x103802, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x2284, 0x0)

1m26.51208594s ago: executing program 3 (id=50):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000040), 0x807, 0x18001)
epoll_create(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0xa, 0x4c20, 0x0, @remote, 0xc}, 0x1c, 0x0}}], 0x1, 0x6b38deb179a6f499)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000440)={0x32, 0x2, 0x2, 0x1, 0x0, [@private1]}, 0x18)
bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0)
r3 = accept4$tipc(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x10, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000380)={'geneve0\x00', {0x2, 0x0, @initdev}})
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$TCFLSH(r4, 0x400455c8, 0x2000000000000004)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/devices/virtual/net/bridge0/bridge/no_linklocal_learn\x00', 0x2, 0x0)
write$tun(r5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x16)

1m25.675357801s ago: executing program 3 (id=55):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x81ff, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="100000"], 0x10}}], 0x1, 0x40044)

1m25.665906911s ago: executing program 3 (id=56):
syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0)
syz_io_uring_setup(0x48a9, &(0x7f0000000000)={0x0, 0x3b8d, 0x20, 0x2, 0x2ee}, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000033c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8)
modify_ldt$write(0x2000, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003700)=ANY=[@ANYBLOB="300000001c0021002dbd70000000000007000000050000000000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f00000034c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000003580)={&(0x7f00000035c0)=""/120, 0x78})
ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000003640)={0x0})
getsockopt$sock_int(r2, 0x1, 0x7, 0x0, &(0x7f0000000140))
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000a40)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000d40)=""/4048, 0xfd0}, {&(0x7f0000001d40)=""/223, 0xdf}, {&(0x7f0000001e40)=""/122, 0x7a}, {&(0x7f0000001ec0)=""/4099, 0x1003}, {&(0x7f0000002f00)=""/267, 0x10b}, {&(0x7f0000003040)=""/310, 0x136}, {&(0x7f0000003180)=""/73, 0x49}, {&(0x7f0000003200)=""/231, 0xe7}, {&(0x7f0000003300)=""/137, 0x89}], 0x9}, 0x7e4}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3e8, 0x108, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x2, {0x8}}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffff00, 0x0, 0xb, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x82, 0x4, 0x9, 0x6, 0x9, 0xf, 'macsec0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x240}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@multicast2, @remote, 0xff, 0x0, 0xe, 0x2, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff]}}, 0x0, 0x9, 0x8, 0xa8, 0x8, 0x3, 'ip6gretap0\x00', 'wg1\x00', {}, {}, 0x0, 0x60}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @multicast2, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write(r1, &(0x7f00000007c0)='never', 0x5)

1m25.608503072s ago: executing program 3 (id=57):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x10000008)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0)

1m10.312436987s ago: executing program 32 (id=57):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x10000008)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0)

33.747500633s ago: executing program 4 (id=534):
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0xb, 0xd2, {0xd2, 0x8, "5c57e1c0a72c7d1689b46354a8df58fdf9971102c336eea42ad1613ce4e2c86e20005b8f79a425960515a2133e37015be974d2753539579bbc881eb6eccc4acb2dc47c67e1ceaf6a312cd418861febdff65f978df76730aa834dcae4f4c84ee62f841b0af3d0b3ee6ad4d10503ba891efe06a7f8116c3d96d15621205d7e11e509f0ef920894f001df666cada2f631996acd2623a0fe06140fc7246b86c8f653510952cba79934f3b27d1a2b807cd61b9fecd54013e35152fbf9e07b5031484b22760e67b633d96385856c58dbfc61c7"}}, &(0x7f0000000140)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "5455ef335678810236e3bc84ffbcba19be1b8ca247e607127a114baa8da4ba0b456902aaf545ee3bb4bce60414b7f2d700eb4439cbab08f41a662f72f8627db56b530a03617c0f5cf30c9f5e4b53ea972f40aa86c5e52f4e49e536426de1edcc183d4de21440ef440eee7b80c9cd4bd4647e6cb4ad1cd3be15a57d2a58342c07c111a754f9d8712565589c14a353b8347b40f7d34c417a57822a139d50bb11f30d7593"}}, &(0x7f0000000200)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0xc3, 0x5, 0xd, 0x0, 0x0, [0x3ff0, 0x0, 0xff00, 0xcf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x3, 0x3, 0x8001}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x10, 0x9, 0x3, "a0710fc0", "0d5f7de1"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x65, 0x9, 0x9, 0x4, 0xc93c, 0xb6c}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x40, 0x7, 0x53, "f64e3c667c6aba6d222fbfbfe56f8fafdff4a42dc41c7d194ccb97fd519ce478b4d357535c7001d40c18db5984d89b5bb74e81517e63513325a517ee221f6ac83489265c20f14a13f8df35b619a47ba9036038"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6c}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000400)={0x20, 0x0, 0x4}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x800, 0x2}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "6495"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x19, 0x2, "adfa"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x74}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xf}})
r0 = syz_usb_connect$uac3(0x2, 0xe4, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0xe, 0x0, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0x0, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x34, 0x800}, [@input_terminal={0x14, 0x24, 0x2, 0x3, 0x400, 0x4, 0x5, 0xffff, 0x0, 0x5, 0x5e, 0x7}, @mixer_unit={0xa, 0x24, 0x5, 0x2, 0x0, "dcfdd7c7aa"}, @source_unit={0xc, 0x24, 0xb, 0xe, 0x0, 0x800, 0x40, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf6, 0x0, "91eaca4f22a11329"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x5, 0x80, 0x5, 0xa9}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x401, 0x3, "4eb0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x80, 0x1, {0xa, 0x25, 0x25, 0x400, 0x3, 0x4f5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4955, 0x400, 0x5, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x4, 0x0, {0xa, 0x25, 0x25, 0xbd5, 0x9, 0xbca5}}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x81, 0x4, 0x80, 0x8, 0x3}, 0xe5, &(0x7f0000000940)={0x5, 0xf, 0xe5, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x8, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x9, 0x3}, @ptm_cap={0x3}, @generic={0xc4, 0x10, 0x1, "eed9bce158648752ee9bda887a45fa8c7ffe37db68091077d5a739904bccc4e9584ca2fed5561910398ff21b3d72b4b4bbaeca152f7a1a296a73c6a2de99fa4eb6d0c54d9bcf1d22a43b940404d9281e785f6e9fd344c2a577531f16b16543ed8b18cbfdcfce4614e3554ee88488e0fb38954ab72efeecdd506a8bb957fdfc2d835c31a7154c45bd1052026e64beeb9613d0f7fee4673dcd61112cb6bb00cc4c841db8616741f423636500a3a60b2834258085b426525276b1cd47e71a02932e83"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x3f, 0x6, 0xb, 0x7ff, 0x6}]}, 0x5, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x423}}, {0x37, &(0x7f0000000a80)=@string={0x37, 0x3, "81c003f0e93ee792ffb1c02291b1c703b17bb9742bc47b1f8d39e57a86ff8f139e3b309cdcdf3fc469b46dc347ada5923ef8dc32eb"}}, {0xab, &(0x7f0000000ac0)=@string={0xab, 0x3, "469f86fdedb642a368f1b9a52eb5269688f79e49f41fd4193e532a56a2aeb3dd675beaf14703ff09e2542de56491947dedb80e37fb4abb62736393aaf963ea8ee2f764e516c487eb7b7d5a57aa4f1068a37e11b1c4199acbb43f8384f62dcb5b1825c36ceb6cdde402437a9bf0c4f106152c34762caba40bc606eae55a371569be6877f468733d66db6971b13f35e59cd51493be262f59172f9ae409c4c3798d1582954b920ce04647"}}, {0x5b, &(0x7f0000000b80)=@string={0x5b, 0x3, "539de892a09195db0bcac832cbf998b07d80e312d985bf4f2a57aa1e7c5156751a020c0b4dd4c5a0aa504d42275f8d682ab0e6d9ae847878666c946efed0daaf539c88f1f557c2da5e400fcf4b6117e5dd409975a6c53b5a94"}}, {0x43, &(0x7f0000000c00)=@string={0x43, 0x3, "04e3946c28d82e29bd76f2274778ed22813d5fbd25908561b380a158a62707da2db2d1e8a83f5c6693c55a511376df8a8ebe3130567dd63a5a0d0c5264cc9b0256"}}]})
syz_usb_control_io$uac3(r0, &(0x7f0000000d80)={0x14, &(0x7f0000000d00)={0x20, 0x1, 0x1a, {0x1a, 0x22, "44495f1f74445f4c9337bc70efd48788cf55e9d378936240"}}, &(0x7f0000000d40)={0x0, 0x3, 0x12, @string={0x12, 0x3, "62914d5507de912df73146faf2b8ee1b"}}}, &(0x7f0000001080)={0x44, &(0x7f0000000dc0)={0x20, 0x11, 0xc0, "1bb745f52a083c32132031453ad373751727829c536d83af0fa0e679942ffa49aea858a88ebfa31fea6db058f2fc1c00ed2b98cc9c3ebca6b408925f3ae6a17cce5bebc3397178ae308f4f70c9a35cebfad3210d302748ccf103c8f25aac9a203a0d4407db0e633ca69b76439948d155dba2d50bb64fb54efbfb6591553d3bc253a79be8045ce8deb58280ab627725a9077cdd0bc024f2bdd750a7f36447a50a21e07b05f22ef075e224d7ed92546def4fa67b676efdf5990bea998108b29f90"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f40)={0x20, 0x81, 0x1, 'W'}, &(0x7f0000000f80)={0x20, 0x82, 0x1, "94"}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, "d257"}, &(0x7f0000001000)={0x20, 0x84, 0x3, "21ac75"}, &(0x7f0000001040)={0x20, 0x85, 0x3, "353cad"}})
syz_usb_ep_read(r0, 0x6, 0xc6, &(0x7f0000001100)=""/198)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x400000, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000001240)="09546e3e2957ab06938038dfc835635265010dde4cf122f49852b1aa3416a127849ea028c6f4157e26d45425641d8086c7ae24085837cd9d036e57158445220d97f9fc741a94b82ad2f4a1d5e174991385668ce167b5e548ab2fab4bce462c0c1ea4139987a79b6ebc33cf9860d58025e08095e5e1cff8f25e1f5ef5ea0257454c0cc772ec2fdb6a73ead5d89685d5206ccbb3397820b156b546ca7966d77b9ac8f1957dbe9a07924c4b3e8f0fb1b0d5dc9d57748fceadb28232d10c3987fc4680d878cf2169234df430d8ec60340a3e5f912548b34f3d4d175fde7b0a23d783c32c79", 0xe3)
r2 = syz_usb_connect$midi(0x5, 0x5f, &(0x7f0000001340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x25c6, 0x9002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x6, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8f0, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7fff, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x10, 0xfe}], [{{0x9, 0x5, 0x62291064fdb630c7, 0x4, 0x200, 0x2, 0x7, 0x2, {0xa, 0x25, 0x1, 0x6, "9c9c310b9756"}}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xe, 0x81, 0xf, {0x4}}}]}}}}}]}}, &(0x7f00000014c0)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x310, 0x4, 0x9, 0xfc, 0x40, 0x2}, 0x8, &(0x7f0000001400)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x427}}]})
syz_usb_ep_write(r2, 0x9, 0x48, &(0x7f0000001500)="3a8a754205131860ab1c2ab7b20f6b10868fb9325fbda581804cff75e472e6edaf3c08276f85049b47282f552f7b08d4c0a0e1106ad8311bc85d9303d4446291854943b1fa5f10d6")
syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f0000001580)={0x20, 0x3, 0x45, {0x45, 0xf, "96d083070e1151490139495fa268cb10926671aaa42cd2cf4367c2de1ad823c14f26dcc7014f6eddf77598a7981d3d7be76dcef29aa25480ead8d13acc72c0e676fc69"}}, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000001640)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "1a532f505dfd2cacb4f6c6b9f983ac5a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x4, 0x5, 0x7}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xcd, 0x4, 0x4, 0x3, "59e853a3", "bc106451"}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x8, 0x2a, 0xaf, 0x10, 0x1, 0x8}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001740)={0x20, 0x15, 0x8f, "28933a383d1367d9850a7646813b981b7cd95b6dafd9636526502082f2a036f9188d98b785650b247ad96aaaeefe3331d19a532a75b1842205547f991a20cadbc267a03699fd517796770147461ab63ef46ed0a688e8dfcd0a4b1252816b7f188a3947303cd65fe8c955536a323773384e40f574b028b6b5df0cb03639abc0d3fbc9323c7af9b0967a322861f1e9ab"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0xda}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000018c0)={0x20, 0x0, 0x8, {0x39e0, 0x4, [0x0]}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001980)={0x40, 0xb, 0x2, "4694"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001a40)={0x40, 0x17, 0x6}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "f6f9"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x23}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x73}})
syz_usb_ep_read(r2, 0x7, 0xf5, &(0x7f0000001c80)=""/245)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000001d80)="9618b3315f73a2decf6e09230852babc7c1679ff2ca5f863a18fc2d789457b317db865908f40d4aac1b0f906773a6c485628f24a476b3b7dc22ca6a7127fd608e6fcc7a8cd9fec6ee57be3a24eada3d7cbae3113ea491d6db49eb620a236191667c28cb300e5858faee11604a13a70cc0a2fc8e20d1a7b3db4421039e3fd38f4585a5654cd7fb8a3485a7e9b3818a6707012aebc7d8280457912f4d7e1c420e1d334e90d7377ac63491b2e9479d1bdb8218da1f4b67960")
r3 = syz_usb_connect$cdc_ncm(0x5, 0x8a, &(0x7f0000001e40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x0, 0x40, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "01b1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x9, 0x936, 0x9}, {0x6, 0x24, 0x1a, 0x6, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x3, 0xb0}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x2, 0x3}}}}}}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001f00)={0xa, 0x6, 0x250, 0xc, 0xfd, 0x7, 0x8, 0x7f}, 0x5, &(0x7f0000001f40)={0x5, 0xf, 0x5}, 0x1, [{0xc0, &(0x7f0000001f80)=@string={0xc0, 0x3, "8243b4788f2bd9873b2a4453aa964fc4257308a0821565c9ad8b9a11f0899ce703aebe57a561db492b4cf657540c832903e828d519fffb3b45b00a6879f4896a26f2f359d0fb7b8476f79183bb7b83276532e671e4407dbddd881251740da5891e6e9f53172a9812cafb18e000492e886da8497acd6f56897d285efef83193a61fabc7fe262765825fd8153e7c72b40a241de2f48cca53e5852da1a51ac638f4624a4ca05d82802148e0ef28a0104e594209e1e448ecfd2bc647f58daab7"}}]})
syz_usb_ep_write(r3, 0x2, 0xb2, &(0x7f0000002080)="29a94521aba62e1f75039bd4160f972a5433d713a61a1f34db6daa857c8e1c5a87c3f365a30570123cb0a3d6057ea2d1af292367dad51be70cd75ea4ef84abb98930399bbdc176a435d2ec0612322b4f723f1c6311e1ed1c65b8b377506266c0219c8730211c72f65c827e8044625d19e1bf830e8877d7b630039d76b67d159841d69685a230a79ce0355e82afebe9de11d050a71ed62ecc62dbb6d683f9836422ca230b9fb419660b0179d6eaddec15e957")

32.087137344s ago: executing program 4 (id=543):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000) (async)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xe0)
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x3180, 0x1, 0x3, 0x20, 0x1}, 0x30, 0x3) (async)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x3180, 0x1, 0x3, 0x20, 0x1}, 0x30, 0x3)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x1040, r1}, 0x0)
syz_clone(0xb21e0180, 0x0, 0x41, 0x0, 0x0, 0x0) (async)
syz_clone(0xb21e0180, 0x0, 0x41, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0)

31.956518067s ago: executing program 4 (id=544):
r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@wr_drn={0x68, 0x20, {0x4, 0xffffffffffffffff}}], 0x20})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

31.621347925s ago: executing program 4 (id=545):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='fus%\x00\x18\xf0,?\x1f\x7fb\xe7*\xf9I:\x80k\'~\xde\x9f`?\xf9q\xdf\x1e\xfb\xc4\xcaW\x9e\xe6\xaeM\xe5\xe7\x18\x1e\x83\xd9\xbdK\"yK\xa5\xc2\xfb\\\x92\x05\x1e\xfe\bx\\\x04d){\x88\x81\xe4a{w\xc5\xb5\xb8\xe1\x93\xd8\xdfh\xf0:c\xaf\xb6@\xdf\xe3l\x9c\x03]M\xac\xc2\xdao\x1d!l\xf3\x89\xc78\xdfQ\xe5\xb6\x01\x88\x8f\xc7T\xec\xa7\x99P2h\xe1\xb4\x1c\xa1yIA\xdb]\x87\xa4>[%\n\xf0g\r@\x05Xv\xb31\xe4\x94\x91\xd9\xfb(d\xea\xc0\x13\x1a\x15\xf38\xfa\r\xa00\xfe\xff\x12\xf9|\xc1\xad\xd1\xd0\t\xd7\xb1a\x8a`c\rj\xa1\xcb+)\xa6\x9e\xe9.?\x1ac\x05\xbe\xe3:/\xb5\b\x98\x9dx\x18\x19Um\xd8\x00Z\x9a{`S\xfafk\xfc\x9a\xd4\xc5\xaf\x84U\x88\x93\x7f\x9f\xe5_\xc7h>^o\x8cW\xd8>\x05z\x04\xbbU\xa1}\xe8\x03~_S\xe9O\x99\x16\x92._\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r') (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x1808000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f00000002c0)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="18000000690015"], 0x18}], 0x1}, 0x8000)
write(0xffffffffffffffff, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core ', 0x2d) (async)
ioctl(r0, 0xc138fd09, &(0x7f0000000340)="040000000000000000000000a0010000380100000100"/42)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) (async)
userfaultfd(0x80000) (async)
syz_pidfd_open(0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x4c27e, 0x10)
fallocate(r2, 0x0, 0x1000000, 0x1000f4) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0x5a, 0x1, 0x0, 0x0, {0x3}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) (async)
sendfile(r2, r2, 0x0, 0x40000000820) (async)
write$binfmt_format(r2, &(0x7f0000000040)='1\x00', 0x2) (async)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)

31.270222244s ago: executing program 4 (id=546):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x7, {{0xa, 0x4e23, 0x81, @mcast1, 0x5}}}, 0x88)
syz_ublk_setup_io_uring(0x16f, &(0x7f0000000500)={0x0, 0xe972, 0x5c05, 0x0, 0x1fd}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r1, &(0x7f0000000680)="31c6", 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x4, 0x10, r1, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]})
ppoll(&(0x7f0000000480)=[{r2, 0x4008}], 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e20, 0x0, @empty}}}, 0x108)
r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000000c0)={0x4, 0x6, 0x4, 0x7})

31.038393159s ago: executing program 4 (id=548):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0)

31.01250493s ago: executing program 33 (id=548):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0)

11.780611521s ago: executing program 0 (id=725):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x81c0, 0x80000001)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@index_on}]})
linkat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000004c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x8042, 0x34)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x100)

11.776612031s ago: executing program 0 (id=726):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x270})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil)
ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x1010400, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/sda\x00', 0x103802, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x2202, 0x0)

10.871689983s ago: executing program 0 (id=730):
r0 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000004c0)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000440)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000003c0)='enc=raw hash=streebog256\x00', &(0x7f0000000400))
syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x9, 0xe, 0xff, 0x46}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]})

7.851736057s ago: executing program 0 (id=773):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89101)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x1ef)
lsetxattr$security_capability(&(0x7f0000000380)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x387)
mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
truncate(&(0x7f0000000580)='./file0/file1\x00', 0xe2)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
lseek(r3, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r4=>0x0})
write$binfmt_format(r2, &(0x7f0000000280)='0\x00', 0x2)
sendto$packet(r0, 0x0, 0x0, 0x10040081, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x87, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)

7.772595519s ago: executing program 0 (id=776):
capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4})
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (fail_nth: 1)

7.7351169s ago: executing program 0 (id=777):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001480)=@vmx={0x3, 0x0, 0x2080, {0x10000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001580b0172a9885820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003391da8c2c5f2ae600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2b, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty=0x20}}]}, 0x58}, 0x1, 0x7}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.706247591s ago: executing program 34 (id=777):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001480)=@vmx={0x3, 0x0, 0x2080, {0x10000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001580b0172a9885820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003391da8c2c5f2ae600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2b, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty=0x20}}]}, 0x58}, 0x1, 0x7}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.228037521s ago: executing program 6 (id=819):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0)
sendfile(r0, r1, 0x0, 0xab)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x29, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_ZONE={0x0, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}]}, 0xcc}}, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, &(0x7f0000000300))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@wr_drn={0x68, 0x20, {0x4, 0xffffffffffffffff}}], 0x20})
ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000240)={0x10001, 0x0, {[0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0xffffffffffffffff]}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.149538872s ago: executing program 6 (id=820):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x81c0, 0x80000001)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000004c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x8042, 0x34)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x100)

3.132480903s ago: executing program 6 (id=821):
unshare(0x42000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1', 0x1)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x68)
sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000540)="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", 0x58d}, {0x0}], 0x2}}, {{&(0x7f0000000b00)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xe}, 0x1c, 0x0}}], 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2832, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000100)={0x202, 0x0, 0x0, 0x200, 0xa, 0x3}, 0x30, 0x3)
r5 = accept4$nfc_llcp(r0, &(0x7f0000000380), &(0x7f0000000400)=0x60, 0x800)
connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x3, 0x3, {0xa, 0x4e24, 0x0, @local, 0x6228}}}, 0x32)
landlock_restrict_self(r4, 0x14)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1d7)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000480)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000004c0)=0x2c)
mount$9p_fd(0x0, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:03.0/remove/file0\x00', 0x0, 0x100000, 0x0)

1.705992258s ago: executing program 6 (id=826):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000080)) (async)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x82f41, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x10402, 0x3a) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async)
write$tun(r5, &(0x7f0000000240)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x1c, 0x3a, 0xff, @empty, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x80, 0xe, @rand_addr=' \x01\x00', 0x5, 0x0, 0xe, 0x4}}}}}}}, 0x56)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.476109883s ago: executing program 6 (id=829):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x81c0, 0x80000001)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
linkat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x400)
chdir(&(0x7f00000004c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x8042, 0x34)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x100)

1.474625043s ago: executing program 6 (id=830):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x0, 0xf, 0x46, {0x46, 0x23, "8682715a907e97e9d45610ec1a53609b5c20708b106bf82082d6a56a03ce9e6eb723ebc5fb9a938ddf84dbcd4b86a09c469d2736c0a70a09f3e76ee370dcd2b1cda01b8b"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x9, 0x53, "65ba27e180e810359973ff59d1a9bb74e314db06ee701e2ccea49146a0575a9948b1e9383a5e0cb3b9ccae3578f1f2db2f471e7162eb551be7d27f55cb0f7fc9dc63c569a47a9936b8e06742318ee81eb8b879"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xdc}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xca}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xe70, 0x1, 0x40, 0x6f3, 0x9, 0x3, 0x8, 0x5, 0x7, 0x5, 0x6, 0x4}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000440)={0x20, 0x89, 0x2}})

1.016427955s ago: executing program 2 (id=836):
capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$inet(0xa, 0x801, 0x6)
listen(r1, 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x188}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0xff80, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
syz_open_dev$MSR(&(0x7f0000000000), 0xa, 0x0)

1.014081055s ago: executing program 2 (id=837):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0)
syz_pidfd_open(r1, 0x0)
syz_open_procfs(r1, &(0x7f0000000240)='net/ipv6_route\x00')
write(r0, &(0x7f0000000100)='1', 0x1)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
prctl$PR_GET_IO_FLUSHER(0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff)
symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00')
stat(&(0x7f0000004c80)='./cgroup\x00', &(0x7f0000004cc0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async)
futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0) (async)
syz_pidfd_open(r1, 0x0) (async)
syz_open_procfs(r1, &(0x7f0000000240)='net/ipv6_route\x00') (async)
write(r0, &(0x7f0000000100)='1', 0x1) (async)
close(r0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) (async)
prctl$PR_GET_IO_FLUSHER(0x3a) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) (async)
symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') (async)
stat(&(0x7f0000004c80)='./cgroup\x00', &(0x7f0000004cc0)) (async)

964.896186ms ago: executing program 2 (id=838):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
dup3(r1, r0, 0x80000)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xbb5d, 0x7a, 0x9, 0x4}, {0x3, 0x2, 0x9, 0xffffffdf}, {0x7fff, 0x4, 0x4, 0x3}]})
pread64(r0, &(0x7f0000000100)=""/133, 0x85, 0x8)

308.557132ms ago: executing program 1 (id=845):
r0 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000040)="64000000100001060000000000000000000000000000000000000000000000001000040000fe0000000000000000000024001200080001007665746818005f67140001000000000000000000000000000000004010000300766574685900000000000000", 0x64}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x44)

308.251572ms ago: executing program 1 (id=847):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000100)=0x4800008, 0x4) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='dummy_udc.0', 0xb) (async)
setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1, 0x1, 0x0, 0x7, 0x400, 0x2}, 0x20)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff})
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040))

246.373574ms ago: executing program 1 (id=849):
personality(0x87bf5ac905ea0f7f)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
socket(0x10, 0x0, 0x40000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4ae26000)
personality(0x87bf5ac905ea0f7f) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
read$rfkill(r0, 0x0, 0x0) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
socket(0x10, 0x0, 0x40000) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4ae26000) (async)

195.209235ms ago: executing program 1 (id=851):
io_setup(0x80000000, &(0x7f0000000000))
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x149040, 0x40)
r2 = landlock_create_ruleset(&(0x7f0000000080)={0x1000, 0x2, 0x3}, 0x30, 0x0)
landlock_restrict_self(r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f00000001c0)={'ip6gre0\x00', @broadcast})
fcntl$setlease(r1, 0x400, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0xe0841, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r7=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x10040081, &(0x7f00000003c0)={0x11, 0x8100, r7, 0x1, 0x87, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)

128.612276ms ago: executing program 5 (id=853):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000000))
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

128.472536ms ago: executing program 1 (id=854):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f00000001c0)="fc", 0x1, 0x1be)
pwrite64(r0, &(0x7f0000000180)="55aa", 0x2, 0x1fe)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x2)
write$cgroup_int(r0, &(0x7f0000000080)=0x8, 0x12)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "0000001200"})

128.314936ms ago: executing program 5 (id=855):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r2 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b70ec7320"], 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='msdos\x00', 0x31b0005, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @loopback}, {0x6, @random="381924e3a376"}, 0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 'veth0_to_bond\x00'})
ioperm(0xd1df, 0x7, 0x9)
remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ram0\x00', 0x4000, 0x50)
read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020)

124.307866ms ago: executing program 1 (id=856):
socket$igmp(0x2, 0x3, 0x2) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4ea2, @multicast1}, 0x3a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='Y', 0x1, 0xffffffffffffffff)
keyctl$revoke(0x3, r3)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) (async)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0)
readv(r0, &(0x7f0000002980)=[{&(0x7f0000000280)=""/25, 0x19}], 0x1)

117.285617ms ago: executing program 2 (id=857):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000020000000000fc020000000000000003004000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0)

78.814398ms ago: executing program 2 (id=858):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x81c0, 0x80000001)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
linkat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x400)
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x8042, 0x34)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x100)

76.682688ms ago: executing program 2 (id=859):
syz_usb_connect(0x0, 0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec667d40dd0432900bfd0000000109023e0001000000000904000000020a0000052406000005240000000d1d0f"], 0x0)
syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926", @ANYRESDEC=0x0], 0x0)

566.389µs ago: executing program 5 (id=860):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x300, 0x70bd2b, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008091}, 0x4004000)
pread64(r0, &(0x7f000001adc0)=""/102386, 0x18ff2, 0x1ff)

434.869µs ago: executing program 5 (id=861):
r0 = openat$kvm(0x0, &(0x7f0000000180), 0x450000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@wr_drn={0x68, 0x20, {0x4, 0xffffffffffffffff}}], 0x20})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0x10001, 0x0, {[0x3, 0x7, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xffffffffffffffff]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

313.109µs ago: executing program 5 (id=862):
r0 = socket$netlink(0x10, 0x3, 0x7) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112})
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f00000000c0))
r2 = socket$netlink(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)

0s ago: executing program 5 (id=863):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) (async, rerun: 64)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000005c0)={0x1f, 0xffff, 0x3}, 0x6) (async)
write$bt_hci(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) (async)
setns(0xc9, 0x0)
r4 = socket(0x1f, 0x5, 0x8)
listen(r4, 0x1) (async)
ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000580)=@generic={0x1800, 0x2}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000008c0)={0x14, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x4, 0x1e}]}, 0x14}], 0x1}, 0x0) (async, rerun: 64)
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d53069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (rerun: 64)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000003280)=""/4112, 0x1010}, {&(0x7f00000042c0)=""/90, 0x5a}, {&(0x7f0000004340)=""/42, 0x2a}, {&(0x7f0000004380)=""/98, 0x62}, {&(0x7f0000004400)=""/4102, 0x1006}, {&(0x7f0000005440)=""/10, 0xa}], 0x6}}, {{0x0, 0x0, 0x0}, 0x7ffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x12140, 0x0) (async, rerun: 32)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000140)=0x92d, 0x4) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000940)={&(0x7f0000000900)=""/29, 0x1d, 0x6, 0x2}) (async)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)

kernel console output (not intermixed with test programs):

mfs.c:507 func:unpack_to_rootfs
[   72.026994][ T1749]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   72.035191][ T1749]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   72.043537][   T66] usb usb3-port1: attempt power cycle
[   72.049624][ T1749]          0 B        0 init/initramfs.c:101 func:find_link
[   72.053201][   T36] audit: type=1400 audit(1792456238.660:356): avc:  denied  { ioctl } for  pid=1765 comm="syz.0.457" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   72.104683][   T36] audit: type=1400 audit(1792456238.710:357): avc:  denied  { create } for  pid=1771 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   72.134921][ T1775] netlink: 300 bytes leftover after parsing attributes in process `syz.0.461'.
[   72.144304][   T36] audit: type=1400 audit(1792456238.740:358): avc:  denied  { ioctl } for  pid=1771 comm="syz.1.460" path="socket:[14298]" dev="sockfs" ino=14298 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   72.198188][ T1777] netlink: 'syz.1.462': attribute type 63 has an invalid length.
[   72.206261][ T1777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'.
[   72.267289][   T36] audit: type=1400 audit(1792456238.870:359): avc:  denied  { setopt } for  pid=1780 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   72.415713][   T66] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[   72.446654][   T66] usb 3-1: device descriptor read/8, error -71
[   72.535687][  T399] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[   72.577000][   T66] usb 3-1: device descriptor read/8, error -71
[   72.697181][  T399] usb 2-1: not running at top speed; connect to a high speed hub
[   72.707214][  T399] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   72.716414][  T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.724541][  T399] usb 2-1: Product: 齆ﶆ뛭�ꖹ딮阦䦞ῴ᧔匾嘪꺢孧͇৿哢酤綔룭㜎䫻抻�ꪓ�軪�絻�侪�纣넑ᧄ쮚㾴蒃ⷶ寋┘泃泫�䌂魺쓰۱Ⱅ瘴ꬬதۆ�椕梾�昽槛녱㔿鳥ᓕ뺓⼦�騯৤�赹舕䮕ಒ䛠
[   72.725697][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   72.750101][  T399] usb 2-1: Manufacturer: �㻩鋧뇿⋀놑χ箱璹�ύ�童ﾆ�㮞鰰�둩�굇銥㋜
[   72.768365][  T399] usb 2-1: SerialNumber: 鵓鋨醠쨋㋈溜나�ዣ藙便圪Ẫ兼畖Țଌ�ꃅ傪�弧�뀪蒮硸汦溔탾꿚鱓埵��態�疙얦娻
[   72.815764][   T66] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[   72.836737][   T66] usb 3-1: device descriptor read/8, error -71
[   72.885703][    T9] usb 1-1: device descriptor read/64, error -71
[   72.935737][  T427] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   72.966790][   T66] usb 3-1: device descriptor read/8, error -71
[   73.076309][   T66] usb usb3-port1: unable to enumerate USB device
[   73.086899][  T427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.097977][  T427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.108559][  T427] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   73.117667][  T427] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   73.125828][    T9] usb 1-1: device descriptor read/64, error -71
[   73.132121][  T427] usb 5-1: Manufacturer: syz
[   73.137532][  T427] usb 5-1: config 0 descriptor??
[   73.186508][ T1785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.195259][ T1785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.379012][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   73.390450][ T1805] netlink: 300 bytes leftover after parsing attributes in process `syz.2.471'.
[   73.406039][ T1785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.415697][ T1785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.425872][  T399] usb 2-1: Audio class v2/v3 interfaces need an interface association
[   73.435918][  T399] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   73.447269][  T399] usb 2-1: USB disconnect, device number 19
[   73.456864][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   73.515745][    T9] usb 1-1: device descriptor read/64, error -71
[   73.745520][ T1803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.754207][ T1803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.755682][    T9] usb 1-1: device descriptor read/64, error -71
[   73.768744][  T427] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71
[   73.777584][  T427] uclogic 0003:256C:006D.000A: failed probing parameters: -71
[   73.785088][  T427] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71
[   73.794109][ T1288] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[   73.802967][  T427] usb 5-1: USB disconnect, device number 18
[   73.875942][    T9] usb usb1-port1: attempt power cycle
[   73.957012][ T1288] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.968471][ T1288] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   73.981505][ T1288] usb 3-1: config 0 interface 0 has no altsetting 0
[   73.988207][ T1288] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00
[   73.997571][ T1288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.006521][ T1288] usb 3-1: config 0 descriptor??
[   74.215837][    T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   74.236681][    T9] usb 1-1: device descriptor read/8, error -71
[   74.275751][  T427] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   74.290333][   T36] audit: type=1400 audit(1792456240.900:360): avc:  denied  { remount } for  pid=1820 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   74.366900][    T9] usb 1-1: device descriptor read/8, error -71
[   74.369621][ T1828] netlink: 300 bytes leftover after parsing attributes in process `syz.4.480'.
[   74.416983][ T1288] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:06A3:0CD0.000B/input/input7
[   74.428551][  T427] usb 2-1: Using ep0 maxpacket: 32
[   74.434841][  T427] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   74.443942][  T427] usb 2-1: config 0 has no interface number 0
[   74.450822][  T427] usb 2-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[   74.461863][ T1288] saitek 0003:06A3:0CD0.000B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input0
[   74.493502][  T427] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   74.502775][  T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.510849][  T427] usb 2-1: Product: syz
[   74.515049][  T427] usb 2-1: Manufacturer: syz
[   74.519726][  T427] usb 2-1: SerialNumber: syz
[   74.525555][  T427] usb 2-1: config 0 descriptor??
[   74.531682][  T427] smsc95xx v2.0.0
[   74.535727][  T427] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   74.546328][  T427] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[   74.605890][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   74.636770][    T9] usb 1-1: device descriptor read/8, error -71
[   74.766876][    T9] usb 1-1: device descriptor read/8, error -71
[   74.855741][   T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[   74.875770][    T9] usb usb1-port1: unable to enumerate USB device
[   74.975742][  T399] usb 3-1: USB disconnect, device number 34
[   75.005695][   T45] usb 5-1: Using ep0 maxpacket: 16
[   75.012094][   T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.022325][   T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   75.031967][   T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   75.041185][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   75.049265][   T45] usb 5-1: SerialNumber: syz
[   75.056226][   T45] usb 5-1: 0:2 : does not exist
[   75.067401][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   75.255665][  T427] usb 5-1: USB disconnect, device number 19
[   75.569465][ T1860] netlink: 300 bytes leftover after parsing attributes in process `syz.0.491'.
[   75.606762][   T36] audit: type=1400 audit(1792456242.220:361): avc:  denied  { read write } for  pid=1870 comm="syz.0.495" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.630157][   T36] audit: type=1400 audit(1792456242.230:362): avc:  denied  { open } for  pid=1870 comm="syz.0.495" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.653195][   T36] audit: type=1400 audit(1792456242.230:363): avc:  denied  { ioctl } for  pid=1870 comm="syz.0.495" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.759950][   T45] usb 2-1: USB disconnect, device number 20
[   75.777751][ T1877] veth1_to_hsr: entered promiscuous mode
[   75.783609][ T1877] veth1_to_hsr: entered allmulticast mode
[   75.850536][ T1889] netlink: 300 bytes leftover after parsing attributes in process `syz.1.502'.
[   75.880451][   T36] audit: type=1400 audit(1792456242.490:364): avc:  denied  { mounton } for  pid=1891 comm="syz.1.503" path="/146/file0" dev="tmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   76.035757][  T399] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[   76.185709][  T399] usb 5-1: Using ep0 maxpacket: 32
[   76.192634][  T399] usb 5-1: unable to get BOS descriptor or descriptor too short
[   76.201092][  T399] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.211264][  T399] usb 5-1: config 1 interface 1 has no altsetting 0
[   76.219360][  T399] usb 5-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40
[   76.228459][  T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.236470][  T399] usb 5-1: Product: syz
[   76.240743][  T399] usb 5-1: Manufacturer: syz
[   76.245337][  T399] usb 5-1: SerialNumber: syz
[   76.452109][ T1879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.460590][ T1906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.460722][ T1879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.470462][ T1906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.486871][  T399] usb 5-1: 1:1 : bogus bTerminalLink 2
[   76.492432][  T399] usb 5-1: selecting invalid altsetting 0
[   76.503400][  T399] usb 5-1: USB disconnect, device number 20
[   76.509708][ T1907] SELinux:  Context Ï is not valid (left unmapped).
[   76.675775][   T45] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[   76.755542][   T36] audit: type=1400 audit(1792456243.360:365): avc:  denied  { write } for  pid=1909 comm="syz.1.509" name="usb_gadget" dev="configfs" ino=1321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   76.778777][   T36] audit: type=1400 audit(1792456243.360:366): avc:  denied  { add_name } for  pid=1909 comm="syz.1.509" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   76.799176][   T36] audit: type=1400 audit(1792456243.370:367): avc:  denied  { create } for  pid=1909 comm="syz.1.509" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   76.819302][   T36] audit: type=1400 audit(1792456243.380:368): avc:  denied  { read write } for  pid=1909 comm="syz.1.509" name="idVendor" dev="configfs" ino=16697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   76.826967][   T45] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[   76.842877][   T36] audit: type=1400 audit(1792456243.380:369): avc:  denied  { open } for  pid=1909 comm="syz.1.509" path="/147/config/usb_gadget/g1/idVendor" dev="configfs" ino=16697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   76.853595][   T45] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   76.891542][   T45] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 12033, setting to 64
[   76.902543][   T45] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   76.916622][   T45] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   76.925762][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.934174][   T45] usb 3-1: Product: syz
[   76.938348][   T45] usb 3-1: Manufacturer: syz
[   76.942951][   T45] usb 3-1: SerialNumber: syz
[   76.950172][   T45] usb-storage 3-1:1.0: USB Mass Storage device detected
[   76.957973][   T45] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   76.966198][   T45] scsi host1: usb-storage 3-1:1.0
[   77.015741][   T31] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[   77.029667][   T36] audit: type=1400 audit(1792456243.640:370): avc:  denied  { watch watch_reads } for  pid=1914 comm="syz.4.510" path="/71/bus" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   77.158179][   T45] usb 3-1: USB disconnect, device number 35
[   77.167547][   T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   77.179208][   T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   77.190839][   T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   77.202728][   T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   77.211839][   T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   77.220009][   T31] usb 2-1: Manufacturer: syz
[   77.227557][ T1910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   77.275681][  T427] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[   77.426859][  T427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.437870][  T427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.439578][   T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[   77.448573][  T427] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[   77.456319][   T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input8
[   77.465815][  T427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.477104][   T31] usb 2-1: USB disconnect, device number 21
[   77.480843][    C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   77.482713][  T427] usb 5-1: config 0 descriptor??
[   77.525708][  T399] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   77.676142][  T399] usb 1-1: too many configurations: 107, using maximum allowed: 8
[   77.685116][  T399] usb 1-1: unable to read config index 0 descriptor/start: -61
[   77.692840][  T399] usb 1-1: can't read configurations, error -61
[   77.825730][  T399] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   77.974135][ T1932] input: syz0 as /devices/virtual/input/input9
[   77.986179][  T399] usb 1-1: too many configurations: 107, using maximum allowed: 8
[   77.995221][  T399] usb 1-1: unable to read config index 0 descriptor/start: -61
[   78.003088][  T399] usb 1-1: can't read configurations, error -61
[   78.009578][  T399] usb usb1-port1: attempt power cycle
[   78.104010][  T427] usbhid 5-1:0.0: can't add hid device: -71
[   78.110055][  T427] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   78.119437][  T427] usb 5-1: USB disconnect, device number 21
[   78.215726][    T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[   78.345733][  T399] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   78.366427][  T399] usb 1-1: too many configurations: 107, using maximum allowed: 8
[   78.375491][  T399] usb 1-1: unable to read config index 0 descriptor/start: -61
[   78.383130][  T399] usb 1-1: can't read configurations, error -61
[   78.387139][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[   78.399381][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   78.408547][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.416586][    T9] usb 2-1: Product: 齆ﶆ뛭�ꖹ딮阦䦞ῴ᧔匾嘪꺢孧͇৿哢酤綔룭㜎䫻抻�ꪓ�軪�絻�侪�纣넑ᧄ쮚㾴蒃ⷶ寋┘泃泫�䌂魺쓰۱Ⱅ瘴ꬬதۆ�椕梾�昽槛녱㔿鳥ᓕ뺓⼦�騯৤�赹舕䮕ಒ䛠
[   78.442476][    T9] usb 2-1: Manufacturer: �㻩鋧뇿⋀놑χ箱璹�ύ�童ﾆ�㮞鰰�둩�굇銥㋜
[   78.453326][    T9] usb 2-1: SerialNumber: 鵓鋨醠쨋㋈溜나�ዣ藙便圪Ẫ兼畖Țଌ�ꃅ傪�弧�뀪蒮硸汦溔탾꿚鱓埵��態�疙얦娻
[   78.535700][  T399] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   78.556406][  T399] usb 1-1: too many configurations: 107, using maximum allowed: 8
[   78.565348][  T399] usb 1-1: unable to read config index 0 descriptor/start: -61
[   78.573020][  T399] usb 1-1: can't read configurations, error -61
[   78.579495][  T399] usb usb1-port1: unable to enumerate USB device
[   78.648797][ T1951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'.
[   78.870906][ T1934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.879557][ T1934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.090824][ T1934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.100203][ T1934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.109177][    T9] usb 2-1: Audio class v2/v3 interfaces need an interface association
[   79.118927][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   79.129794][    T9] usb 2-1: USB disconnect, device number 22
[   79.138466][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   79.699233][ T1974] rust_binder: 1973:1974 transaction async to 1973:0 failed ENOSPC, code 0 size 104-24 line process.rs:1087
[   79.714561][  T399] rust_binder: 1973: undelivered TRANSACTION_ERROR: 29201
[   79.940333][ T1986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[   80.195953][  T399] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   80.314403][ T1990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'.
[   80.327357][ T1990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'.
[   80.336686][  T399] usb 2-1: device descriptor read/64, error -71
[   80.343708][ T1992] syzkaller1: entered promiscuous mode
[   80.349781][ T1992] syzkaller1: entered allmulticast mode
[   80.423720][ T2010] netlink: 37 bytes leftover after parsing attributes in process `syz.0.537'.
[   80.433635][ T2011] netlink: 37 bytes leftover after parsing attributes in process `syz.0.537'.
[   80.575733][  T399] usb 2-1: device descriptor read/64, error -71
[   80.605686][ T1288] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[   80.645710][   T45] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[   80.757102][ T1288] usb 5-1: not running at top speed; connect to a high speed hub
[   80.767215][ T1288] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   80.776378][ T1288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.784573][ T1288] usb 5-1: Product: 齆ﶆ뛭�ꖹ딮阦䦞ῴ᧔匾嘪꺢孧͇৿哢酤綔룭㜎䫻抻�ꪓ�軪�絻�侪�纣넑ᧄ쮚㾴蒃ⷶ寋┘泃泫�䌂魺쓰۱Ⱅ瘴ꬬதۆ�椕梾�昽槛녱㔿鳥ᓕ뺓⼦�騯৤�赹舕䮕ಒ䛠
[   80.805665][   T45] usb 3-1: Using ep0 maxpacket: 32
[   80.810161][ T1288] usb 5-1: Manufacturer: �㻩鋧뇿⋀놑χ箱璹�ύ�童ﾆ�㮞鰰�둩�굇銥㋜
[   80.816376][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.826079][ T1288] usb 5-1: SerialNumber: 鵓鋨醠쨋㋈溜나�ዣ藙便圪Ẫ兼畖Țଌ�ꃅ傪�弧�뀪蒮硸汦溔탾꿚鱓埵��態�疙얦娻
[   80.837444][  T399] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   80.859957][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.869810][   T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   80.879106][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.888233][   T45] usb 3-1: config 0 descriptor??
[   80.894225][   T45] hub 3-1:0.0: USB hub found
[   81.015708][  T399] usb 2-1: device descriptor read/64, error -71
[   81.095329][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   81.095366][   T36] audit: type=1326 audit(1792456247.700:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2007 comm="syz.2.536" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f390e39e559 code=0x0
[   81.146541][ T2022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.155188][ T2022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.167359][   T45] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   81.255719][  T399] usb 2-1: device descriptor read/64, error -71
[   81.262773][ T2004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.271398][ T2004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.314757][ T2024] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[   81.324891][   T36] audit: type=1400 audit(1792456247.930:380): avc:  denied  { relabelto } for  pid=2023 comm="syz.0.541" name="cgroup" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[   81.352079][   T36] audit: type=1400 audit(1792456247.930:381): avc:  denied  { associate } for  pid=2023 comm="syz.0.541" name="cgroup" dev="tmpfs" ino=880 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0"
[   81.379618][  T399] usb usb2-port1: attempt power cycle
[   81.385170][   T36] audit: type=1400 audit(1792456247.990:382): avc:  denied  { unlink } for  pid=294 comm="syz-executor" name="cgroup" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[   81.412128][  T457] Bluetooth: hci0: Frame reassembly failed (-84)
[   81.480752][ T2004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.489337][ T2004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.498268][ T1288] usb 5-1: Audio class v2/v3 interfaces need an interface association
[   81.508119][ T1288] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[   81.519412][ T1288] usb 5-1: USB disconnect, device number 22
[   81.526970][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   81.589652][   T45] usbhid 3-1:0.0: can't add hid device: -71
[   81.595831][   T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   81.626461][   T45] usb 3-1: USB disconnect, device number 36
[   81.765769][  T399] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   81.786929][  T399] usb 2-1: device descriptor read/8, error -71
[   81.916932][  T399] usb 2-1: device descriptor read/8, error -71
[   82.019497][   T36] audit: type=1400 audit(1792456248.630:384): avc:  denied  { create } for  pid=2030 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   82.039371][   T36] audit: type=1400 audit(1792456248.630:383): avc:  denied  { create } for  pid=2030 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   82.062275][   T36] audit: type=1400 audit(1792456248.650:385): avc:  denied  { sys_admin } for  pid=2030 comm="syz.4.543" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   82.095678][   T45] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[   82.165678][  T399] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   82.186807][  T399] usb 2-1: device descriptor read/8, error -71
[   82.255663][   T45] usb 3-1: Using ep0 maxpacket: 32
[   82.265065][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.285731][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.295568][   T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   82.304751][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.320053][   T45] usb 3-1: config 0 descriptor??
[   82.336310][   T45] hub 3-1:0.0: USB hub found
[   82.344045][  T399] usb 2-1: device descriptor read/8, error -71
[   82.456284][  T399] usb usb2-port1: unable to enumerate USB device
[   82.498970][ T2043] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9)
[   82.538000][   T45] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[   82.539181][ T2040] netlink: 'syz.4.545': attribute type 1 has an invalid length.
[   82.557102][   T45] usbhid 3-1:0.0: can't add hid device: -71
[   82.563090][   T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   82.596201][   T45] usb 3-1: USB disconnect, device number 37
[   83.168418][ T2052] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.175555][ T2052] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.182837][ T2052] bridge_slave_0: entered allmulticast mode
[   83.189781][ T2052] bridge_slave_0: entered promiscuous mode
[   83.196132][  T457] bridge_slave_1: left allmulticast mode
[   83.201970][  T457] bridge_slave_1: left promiscuous mode
[   83.207680][  T457] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.215169][  T457] bridge_slave_0: left allmulticast mode
[   83.220972][  T457] bridge_slave_0: left promiscuous mode
[   83.226643][  T457] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.286993][ T2052] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.294052][ T2052] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.301172][ T2052] bridge_slave_1: entered allmulticast mode
[   83.307558][ T2052] bridge_slave_1: entered promiscuous mode
[   83.331919][  T457] veth1_macvtap: left promiscuous mode
[   83.337531][  T457] veth0_vlan: left promiscuous mode
[   83.392952][ T2052] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.395832][  T669] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   83.400039][ T2052] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.413730][ T2052] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.420773][ T2052] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.447427][ T2057] netlink: 76 bytes leftover after parsing attributes in process `syz.0.550'.
[   83.460555][  T456] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.468058][  T456] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.477314][ T2057] ./dev: Can't lookup blockdev
[   83.483557][  T463] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.490731][  T463] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.498302][  T463] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.505334][  T463] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.537374][ T2052] veth0_vlan: entered promiscuous mode
[   83.543832][   T36] audit: type=1326 audit(1792456250.150:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2060 comm="syz.0.552" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa76d79e559 code=0x0
[   83.549861][ T2052] veth1_macvtap: entered promiscuous mode
[   83.599887][ T2063] loop0: detected capacity change from 0 to 1
[   83.644519][ T2064] netlink: 'syz.0.552': attribute type 16 has an invalid length.
[   83.652505][ T2064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.552'.
[   83.677503][ T2066] FAULT_INJECTION: forcing a failure.
[   83.677503][ T2066] name failslab, interval 1, probability 0, space 0, times 0
[   83.690214][ T2066] CPU: 0 UID: 0 PID: 2066 Comm: syz.5.553 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[   83.690236][ T2066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   83.690244][ T2066] Call Trace:
[   83.690249][ T2066]  <TASK>
[   83.690254][ T2066]  __dump_stack+0x21/0x30
[   83.690277][ T2066]  dump_stack_lvl+0x140/0x1c0
[   83.690293][ T2066]  ? __cfi_dump_stack_lvl+0x10/0x10
[   83.690310][ T2066]  ? avc_has_perm+0x155/0x240
[   83.690321][ T2066]  ? __cfi_avc_has_perm+0x10/0x10
[   83.690333][ T2066]  dump_stack+0x19/0x20
[   83.690348][ T2066]  should_fail_ex+0x3c2/0x510
[   83.690360][ T2066]  should_failslab+0xac/0x100
[   83.690371][ T2066]  __kmalloc_cache_noprof+0x41/0x470
[   83.690387][ T2066]  ? vhost_task_create+0x12c/0x3f0
[   83.690401][ T2066]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   83.690416][ T2066]  vhost_task_create+0x12c/0x3f0
[   83.690428][ T2066]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   83.690443][ T2066]  ? __cfi_vhost_task_create+0x10/0x10
[   83.690465][ T2066]  ? __cfi_vhost_task_fn+0x10/0x10
[   83.690477][ T2066]  ? __kasan_check_write+0x18/0x20
[   83.690492][ T2066]  ? mutex_lock+0x97/0x1d0
[   83.690505][ T2066]  ? __cfi_mutex_lock+0x10/0x10
[   83.690518][ T2066]  ? kernel_text_address+0xa9/0xe0
[   83.690535][ T2066]  kvm_mmu_post_init_vm+0x161/0x300
[   83.690546][ T2066]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   83.690562][ T2066]  ? _parse_integer_limit+0x195/0x1e0
[   83.690588][ T2066]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   83.690604][ T2066]  ? kstrtoull+0x13b/0x1e0
[   83.690620][ T2066]  ? kstrtouint+0x78/0xf0
[   83.690636][ T2066]  ? ioctl_has_perm+0x1bc/0x500
[   83.690651][ T2066]  ? __asan_memcpy+0x5a/0x80
[   83.690666][ T2066]  ? ioctl_has_perm+0x408/0x500
[   83.690680][ T2066]  ? has_cap_mac_admin+0xd0/0xd0
[   83.690695][ T2066]  ? __kasan_check_write+0x18/0x20
[   83.690710][ T2066]  ? mutex_lock_killable+0x97/0x1d0
[   83.690723][ T2066]  ? __cfi_mutex_lock_killable+0x10/0x10
[   83.690742][ T2066]  ? proc_fail_nth_write+0x184/0x220
[   83.690756][ T2066]  kvm_vcpu_ioctl+0xa43/0x1000
[   83.690769][ T2066]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   83.690781][ T2066]  ? __cfi_vfs_write+0x10/0x10
[   83.690797][ T2066]  ? __kasan_check_write+0x18/0x20
[   83.690811][ T2066]  ? mutex_unlock+0x90/0x240
[   83.690824][ T2066]  ? __cfi_mutex_unlock+0x10/0x10
[   83.690838][ T2066]  ? __fget_files+0x2bc/0x330
[   83.690850][ T2066]  ? bpf_lsm_file_ioctl+0xd/0x20
[   83.690861][ T2066]  ? security_file_ioctl+0x3e/0x110
[   83.690876][ T2066]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   83.690887][ T2066]  __se_sys_ioctl+0x126/0x1b0
[   83.690899][ T2066]  __x64_sys_ioctl+0x7f/0xa0
[   83.690909][ T2066]  x64_sys_call+0x1878/0x2ee0
[   83.690921][ T2066]  do_syscall_64+0x57/0xf0
[   83.690931][ T2066]  ? clear_bhb_loop+0x50/0xa0
[   83.690945][ T2066]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   83.690962][ T2066] RIP: 0033:0x7f074e79e559
[   83.690973][ T2066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.690983][ T2066] RSP: 002b:00007f074f5be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   83.690998][ T2066] RAX: ffffffffffffffda RBX: 00007f074ea25fa0 RCX: 00007f074e79e559
[   83.691007][ T2066] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   83.691014][ T2066] RBP: 00007f074f5be090 R08: 0000000000000000 R09: 0000000000000000
[   83.691021][ T2066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.691029][ T2066] R13: 00007f074ea26038 R14: 00007f074ea25fa0 R15: 00007ffe9d096c88
[   83.691038][ T2066]  </TASK>
[   83.800563][ T2068] FAULT_INJECTION: forcing a failure.
[   83.800563][ T2068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   84.060345][ T2068] CPU: 0 UID: 0 PID: 2068 Comm: syz.1.554 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[   84.060379][ T2068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   84.060391][ T2068] Call Trace:
[   84.060397][ T2068]  <TASK>
[   84.060405][ T2068]  __dump_stack+0x21/0x30
[   84.060434][ T2068]  dump_stack_lvl+0x140/0x1c0
[   84.060461][ T2068]  ? __cfi_dump_stack_lvl+0x10/0x10
[   84.060488][ T2068]  ? check_stack_object+0x138/0x150
[   84.060517][ T2068]  dump_stack+0x19/0x20
[   84.060543][ T2068]  should_fail_ex+0x3c2/0x510
[   84.060564][ T2068]  should_fail+0xf/0x20
[   84.060579][ T2068]  should_fail_usercopy+0x1e/0x30
[   84.060598][ T2068]  _copy_to_user+0x24/0xa0
[   84.060618][ T2068]  simple_read_from_buffer+0xed/0x160
[   84.060640][ T2068]  proc_fail_nth_read+0x1aa/0x220
[   84.060661][ T2068]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   84.060680][ T2068]  ? bpf_lsm_file_permission+0xd/0x20
[   84.060699][ T2068]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   84.060719][ T2068]  vfs_read+0x28b/0xc70
[   84.060742][ T2068]  ? __kasan_check_write+0x18/0x20
[   84.060767][ T2068]  ? __cfi_vfs_read+0x10/0x10
[   84.060790][ T2068]  ? __kasan_check_write+0x18/0x20
[   84.060814][ T2068]  ? mutex_lock+0x97/0x1d0
[   84.060835][ T2068]  ? __cfi_mutex_lock+0x10/0x10
[   84.060858][ T2068]  ksys_read+0x145/0x260
[   84.060883][ T2068]  ? __cfi_ksys_read+0x10/0x10
[   84.060908][ T2068]  ? __kasan_check_read+0x15/0x20
[   84.060933][ T2068]  __x64_sys_read+0x7f/0x90
[   84.060958][ T2068]  x64_sys_call+0x2638/0x2ee0
[   84.060988][ T2068]  do_syscall_64+0x57/0xf0
[   84.061005][ T2068]  ? clear_bhb_loop+0x50/0xa0
[   84.061028][ T2068]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   84.061051][ T2068] RIP: 0033:0x7f982715ed8e
[   84.061068][ T2068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   84.061084][ T2068] RSP: 002b:00007f982807dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   84.061106][ T2068] RAX: ffffffffffffffda RBX: 00007f982807e6c0 RCX: 00007f982715ed8e
[   84.061122][ T2068] RDX: 000000000000000f RSI: 00007f982807e0a0 RDI: 0000000000000005
[   84.061135][ T2068] RBP: 00007f982807e090 R08: 0000000000000000 R09: 0000000000000000
[   84.061148][ T2068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.061160][ T2068] R13: 00007f9827426038 R14: 00007f9827425fa0 R15: 00007ffed3c86cf8
[   84.061177][ T2068]  </TASK>
[   84.311039][   T36] audit: type=1400 audit(1792456250.920:387): avc:  denied  { read } for  pid=2069 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   84.382416][ T2076] netlink: 140 bytes leftover after parsing attributes in process `syz.2.558'.
[   84.407390][ T2081] 9pnet_virtio: no channels available for device ./cgroup.cpu/cgroup.procs
[   84.408994][   T36] audit: type=1400 audit(1792456251.020:388): avc:  denied  { mounton } for  pid=2080 comm="syz.2.560" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   84.463280][ T2087] loop0: detected capacity change from 0 to 1
[   84.478737][ T2089] FAULT_INJECTION: forcing a failure.
[   84.478737][ T2089] name failslab, interval 1, probability 0, space 0, times 0
[   84.491566][ T2089] CPU: 1 UID: 0 PID: 2089 Comm: syz.5.564 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[   84.491601][ T2089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   84.491613][ T2089] Call Trace:
[   84.491620][ T2089]  <TASK>
[   84.491627][ T2089]  __dump_stack+0x21/0x30
[   84.491658][ T2089]  dump_stack_lvl+0x140/0x1c0
[   84.491685][ T2089]  ? __cfi_dump_stack_lvl+0x10/0x10
[   84.491711][ T2089]  dump_stack+0x19/0x20
[   84.491736][ T2089]  should_fail_ex+0x3c2/0x510
[   84.491755][ T2089]  should_failslab+0xac/0x100
[   84.491773][ T2089]  kmem_cache_alloc_node_noprof+0x45/0x420
[   84.491798][ T2089]  ? dup_task_struct+0xc1/0xd80
[   84.491822][ T2089]  ? kasan_save_alloc_info+0x3a/0x50
[   84.491844][ T2089]  ? __kasan_kmalloc+0x96/0xb0
[   84.491861][ T2089]  ? __kmalloc_cache_noprof+0x23c/0x470
[   84.491899][ T2089]  dup_task_struct+0xc1/0xd80
[   84.491924][ T2089]  ? copy_process+0x3350/0x3350
[   84.491949][ T2089]  ? __kasan_check_write+0x18/0x20
[   84.491974][ T2089]  copy_process+0x57c/0x3350
[   84.492001][ T2089]  ? kasan_save_alloc_info+0x3a/0x50
[   84.492024][ T2089]  ? __cfi_copy_process+0x10/0x10
[   84.492049][ T2089]  ? __kmalloc_cache_noprof+0x23c/0x470
[   84.492076][ T2089]  ? __kasan_check_write+0x18/0x20
[   84.492100][ T2089]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   84.492126][ T2089]  vhost_task_create+0x1f7/0x3f0
[   84.492149][ T2089]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   84.492174][ T2089]  ? __cfi_vhost_task_create+0x10/0x10
[   84.492198][ T2089]  ? __cfi_vhost_task_fn+0x10/0x10
[   84.492219][ T2089]  ? __kasan_check_write+0x18/0x20
[   84.492244][ T2089]  ? mutex_lock+0x97/0x1d0
[   84.492266][ T2089]  ? __cfi_mutex_lock+0x10/0x10
[   84.492285][ T2089]  ? kernel_text_address+0xa9/0xe0
[   84.492314][ T2089]  kvm_mmu_post_init_vm+0x161/0x300
[   84.492331][ T2089]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   84.492359][ T2089]  ? _parse_integer_limit+0x195/0x1e0
[   84.492386][ T2089]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   84.492412][ T2089]  ? kstrtoull+0x13b/0x1e0
[   84.492438][ T2089]  ? kstrtouint+0x78/0xf0
[   84.492464][ T2089]  ? ioctl_has_perm+0x1bc/0x500
[   84.492488][ T2089]  ? __asan_memcpy+0x5a/0x80
[   84.492510][ T2089]  ? ioctl_has_perm+0x408/0x500
[   84.492532][ T2089]  ? has_cap_mac_admin+0xd0/0xd0
[   84.492555][ T2089]  ? __kasan_check_write+0x18/0x20
[   84.492579][ T2089]  ? mutex_lock_killable+0x97/0x1d0
[   84.492601][ T2089]  ? __cfi_mutex_lock_killable+0x10/0x10
[   84.492624][ T2089]  ? proc_fail_nth_write+0x184/0x220
[   84.492647][ T2089]  kvm_vcpu_ioctl+0xa43/0x1000
[   84.492667][ T2089]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   84.492687][ T2089]  ? __cfi_vfs_write+0x10/0x10
[   84.492712][ T2089]  ? __kasan_check_write+0x18/0x20
[   84.492737][ T2089]  ? mutex_unlock+0x90/0x240
[   84.492758][ T2089]  ? __cfi_mutex_unlock+0x10/0x10
[   84.492781][ T2089]  ? __fget_files+0x2bc/0x330
[   84.492801][ T2089]  ? bpf_lsm_file_ioctl+0xd/0x20
[   84.492821][ T2089]  ? security_file_ioctl+0x3e/0x110
[   84.492846][ T2089]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   84.492875][ T2089]  __se_sys_ioctl+0x126/0x1b0
[   84.492895][ T2089]  __x64_sys_ioctl+0x7f/0xa0
[   84.492914][ T2089]  x64_sys_call+0x1878/0x2ee0
[   84.492935][ T2089]  do_syscall_64+0x57/0xf0
[   84.492953][ T2089]  ? clear_bhb_loop+0x50/0xa0
[   84.492977][ T2089]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   84.493000][ T2089] RIP: 0033:0x7f074e79e559
[   84.493018][ T2089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.493035][ T2089] RSP: 002b:00007f074f5be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   84.493058][ T2089] RAX: ffffffffffffffda RBX: 00007f074ea25fa0 RCX: 00007f074e79e559
[   84.493073][ T2089] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   84.493086][ T2089] RBP: 00007f074f5be090 R08: 0000000000000000 R09: 0000000000000000
[   84.493098][ T2089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.493109][ T2089] R13: 00007f074ea26038 R14: 00007f074ea25fa0 R15: 00007ffe9d096c88
[   84.493125][ T2089]  </TASK>
[   84.955689][ T1288] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[   85.017224][ T2112] 9pnet_fd: Insufficient options for proto=fd
[   85.055313][ T2120] loop0: detected capacity change from 0 to 1
[   85.060764][ T2119] cgroup: noprefix used incorrectly
[   85.116127][ T1288] usb 3-1: Using ep0 maxpacket: 32
[   85.122556][ T1288] usb 3-1: unable to get BOS descriptor or descriptor too short
[   85.133007][ T1288] usb 3-1: config 178 has an invalid interface number: 183 but max is 0
[   85.145664][ T1288] usb 3-1: config 178 has no interface number 0
[   85.155922][ T1288] usb 3-1: config 178 interface 183 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023
[   85.175748][  T427] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   85.184764][ T1288] usb 3-1: New USB device found, idVendor=0582, idProduct=b7a6, bcdDevice=10.27
[   85.195101][ T1288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.203992][ T1288] usb 3-1: Product: syz
[   85.208446][ T1288] usb 3-1: Manufacturer: syz
[   85.213207][ T1288] usb 3-1: SerialNumber: syz
[   85.219564][ T2085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   85.282879][ T2133] FAULT_INJECTION: forcing a failure.
[   85.282879][ T2133] name failslab, interval 1, probability 0, space 0, times 0
[   85.295792][ T2133] CPU: 1 UID: 0 PID: 2133 Comm: syz.5.579 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[   85.295825][ T2133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   85.295838][ T2133] Call Trace:
[   85.295845][ T2133]  <TASK>
[   85.295852][ T2133]  __dump_stack+0x21/0x30
[   85.295886][ T2133]  dump_stack_lvl+0x140/0x1c0
[   85.295911][ T2133]  ? __cfi_dump_stack_lvl+0x10/0x10
[   85.295938][ T2133]  ? __kasan_check_write+0x18/0x20
[   85.295964][ T2133]  ? copy_mm+0x307/0x1da0
[   85.295984][ T2133]  dump_stack+0x19/0x20
[   85.296000][ T2133]  should_fail_ex+0x3c2/0x510
[   85.296012][ T2133]  should_failslab+0xac/0x100
[   85.296030][ T2133]  kmem_cache_alloc_noprof+0x42/0x410
[   85.296056][ T2133]  ? alloc_pid+0xa5/0xb80
[   85.296079][ T2133]  ? __asan_memcpy+0x5a/0x80
[   85.296103][ T2133]  alloc_pid+0xa5/0xb80
[   85.296122][ T2133]  copy_process+0x1467/0x3350
[   85.296143][ T2133]  ? __cfi_copy_process+0x10/0x10
[   85.296158][ T2133]  ? __kmalloc_cache_noprof+0x23c/0x470
[   85.296176][ T2133]  ? __kasan_check_write+0x18/0x20
[   85.296200][ T2133]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   85.296224][ T2133]  vhost_task_create+0x1f7/0x3f0
[   85.296245][ T2133]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   85.296267][ T2133]  ? __cfi_vhost_task_create+0x10/0x10
[   85.296281][ T2133]  ? __cfi_vhost_task_fn+0x10/0x10
[   85.296293][ T2133]  ? __kasan_check_write+0x18/0x20
[   85.296308][ T2133]  ? mutex_lock+0x97/0x1d0
[   85.296321][ T2133]  ? __cfi_mutex_lock+0x10/0x10
[   85.296340][ T2133]  ? kernel_text_address+0xa9/0xe0
[   85.296366][ T2133]  kvm_mmu_post_init_vm+0x161/0x300
[   85.296385][ T2133]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   85.296420][ T2133]  ? _parse_integer_limit+0x195/0x1e0
[   85.296438][ T2133]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   85.296454][ T2133]  ? kstrtoull+0x13b/0x1e0
[   85.296470][ T2133]  ? kstrtouint+0x78/0xf0
[   85.296494][ T2133]  ? ioctl_has_perm+0x1bc/0x500
[   85.296519][ T2133]  ? __asan_memcpy+0x5a/0x80
[   85.296543][ T2133]  ? ioctl_has_perm+0x408/0x500
[   85.296567][ T2133]  ? has_cap_mac_admin+0xd0/0xd0
[   85.296582][ T2133]  ? __kasan_check_write+0x18/0x20
[   85.296601][ T2133]  ? mutex_lock_killable+0x97/0x1d0
[   85.296615][ T2133]  ? __cfi_mutex_lock_killable+0x10/0x10
[   85.296633][ T2133]  ? proc_fail_nth_write+0x184/0x220
[   85.296655][ T2133]  kvm_vcpu_ioctl+0xa43/0x1000
[   85.296677][ T2133]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   85.296697][ T2133]  ? __cfi_vfs_write+0x10/0x10
[   85.296720][ T2133]  ? __kasan_check_write+0x18/0x20
[   85.296735][ T2133]  ? mutex_unlock+0x90/0x240
[   85.296747][ T2133]  ? __cfi_mutex_unlock+0x10/0x10
[   85.296761][ T2133]  ? __fget_files+0x2bc/0x330
[   85.296772][ T2133]  ? bpf_lsm_file_ioctl+0xd/0x20
[   85.296789][ T2133]  ? security_file_ioctl+0x3e/0x110
[   85.296814][ T2133]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   85.296834][ T2133]  __se_sys_ioctl+0x126/0x1b0
[   85.296860][ T2133]  __x64_sys_ioctl+0x7f/0xa0
[   85.296874][ T2133]  x64_sys_call+0x1878/0x2ee0
[   85.296886][ T2133]  do_syscall_64+0x57/0xf0
[   85.296899][ T2133]  ? clear_bhb_loop+0x50/0xa0
[   85.296914][ T2133]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   85.296929][ T2133] RIP: 0033:0x7f074e79e559
[   85.296947][ T2133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.296964][ T2133] RSP: 002b:00007f074f5be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.296988][ T2133] RAX: ffffffffffffffda RBX: 00007f074ea25fa0 RCX: 00007f074e79e559
[   85.297003][ T2133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   85.297016][ T2133] RBP: 00007f074f5be090 R08: 0000000000000000 R09: 0000000000000000
[   85.297025][ T2133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.297032][ T2133] R13: 00007f074ea26038 R14: 00007f074ea25fa0 R15: 00007ffe9d096c88
[   85.297042][ T2133]  </TASK>
[   85.356331][  T427] usb 1-1: Using ep0 maxpacket: 32
[   85.415708][   T45] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   85.418614][  T427] usb 1-1: unable to get BOS descriptor or descriptor too short
[   85.545765][   T45] usb 2-1: device descriptor read/64, error -71
[   85.552145][  T427] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7
[   85.726507][  T427] usb 1-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40
[   85.735600][  T427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.746347][  T427] usb 1-1: Product: syz
[   85.750901][  T427] usb 1-1: Manufacturer: syz
[   85.755571][  T427] usb 1-1: SerialNumber: syz
[   85.770735][ T2139] virtio-fs: tag <syz> not found
[   85.785668][   T45] usb 2-1: device descriptor read/64, error -71
[   85.839841][ T2143] netlink: 300 bytes leftover after parsing attributes in process `syz.5.583'.
[   85.968583][  T427] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   85.976841][  T427] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   85.993313][  T427] usb 1-1: USB disconnect, device number 35
[   86.025684][   T45] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   86.155682][   T45] usb 2-1: device descriptor read/64, error -71
[   86.295721][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   86.395698][   T45] usb 2-1: device descriptor read/64, error -71
[   86.425685][    T9] usb 6-1: device descriptor read/64, error -71
[   86.504396][ T2169] netlink: 96 bytes leftover after parsing attributes in process `syz.0.588'.
[   86.513567][   T45] usb usb2-port1: attempt power cycle
[   86.515039][ T2169] overlayfs: missing 'lowerdir'
[   86.547092][ T2171] FAULT_INJECTION: forcing a failure.
[   86.547092][ T2171] name failslab, interval 1, probability 0, space 0, times 0
[   86.559886][ T2171] CPU: 0 UID: 0 PID: 2171 Comm: syz.0.589 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[   86.559919][ T2171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   86.559927][ T2171] Call Trace:
[   86.559933][ T2171]  <TASK>
[   86.559938][ T2171]  __dump_stack+0x21/0x30
[   86.559962][ T2171]  dump_stack_lvl+0x140/0x1c0
[   86.559979][ T2171]  ? __cfi_dump_stack_lvl+0x10/0x10
[   86.559996][ T2171]  ? is_bpf_text_address+0x17b/0x1a0
[   86.560011][ T2171]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   86.560023][ T2171]  dump_stack+0x19/0x20
[   86.560039][ T2171]  should_fail_ex+0x3c2/0x510
[   86.560051][ T2171]  should_failslab+0xac/0x100
[   86.560062][ T2171]  __kmalloc_node_noprof+0x69/0x500
[   86.560079][ T2171]  ? __kvmalloc_node_noprof+0x128/0x300
[   86.560094][ T2171]  ? __kasan_check_write+0x18/0x20
[   86.560109][ T2171]  __kvmalloc_node_noprof+0x128/0x300
[   86.560123][ T2171]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[   86.560138][ T2171]  ? _raw_spin_lock+0x92/0x120
[   86.560148][ T2171]  ? __kasan_check_write+0x18/0x20
[   86.560163][ T2171]  ? enqueue_timer+0x1c5/0x4b0
[   86.560175][ T2171]  __kvm_mmu_topup_memory_cache+0x58e/0x7e0
[   86.560187][ T2171]  ? mutex_unlock+0x90/0x240
[   86.560201][ T2171]  kvm_mmu_topup_memory_cache+0x24/0x30
[   86.560212][ T2171]  kvm_mmu_load+0xa1/0x2900
[   86.560227][ T2171]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   86.560244][ T2171]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   86.560258][ T2171]  ? kvm_apic_has_interrupt+0x77a/0x790
[   86.560274][ T2171]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   86.560287][ T2171]  vcpu_run+0x4d72/0x7830
[   86.560303][ T2171]  ? kvm_sched_clock_read+0x15/0x30
[   86.560323][ T2171]  ? signal_pending+0xc0/0xc0
[   86.560338][ T2171]  ? __kasan_check_write+0x18/0x20
[   86.560353][ T2171]  ? xfd_validate_state+0x68/0x140
[   86.560372][ T2171]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   86.560386][ T2171]  ? __kasan_check_write+0x18/0x20
[   86.560401][ T2171]  ? fpregs_mark_activate+0x68/0x160
[   86.560415][ T2171]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   86.560429][ T2171]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   86.560447][ T2171]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   86.560464][ T2171]  ? _parse_integer_limit+0x195/0x1e0
[   86.560481][ T2171]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   86.560497][ T2171]  ? kstrtoull+0x13b/0x1e0
[   86.560513][ T2171]  ? kstrtouint+0x78/0xf0
[   86.560529][ T2171]  ? ioctl_has_perm+0x1bc/0x500
[   86.560544][ T2171]  ? __asan_memcpy+0x5a/0x80
[   86.560559][ T2171]  ? ioctl_has_perm+0x408/0x500
[   86.560574][ T2171]  ? has_cap_mac_admin+0xd0/0xd0
[   86.560588][ T2171]  ? __kasan_check_write+0x18/0x20
[   86.560603][ T2171]  ? mutex_lock_killable+0x97/0x1d0
[   86.560616][ T2171]  ? __cfi_mutex_lock_killable+0x10/0x10
[   86.560630][ T2171]  ? proc_fail_nth_write+0x184/0x220
[   86.560645][ T2171]  kvm_vcpu_ioctl+0xa43/0x1000
[   86.560657][ T2171]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   86.560669][ T2171]  ? __cfi_vfs_write+0x10/0x10
[   86.560685][ T2171]  ? __kasan_check_write+0x18/0x20
[   86.560699][ T2171]  ? mutex_unlock+0x90/0x240
[   86.560711][ T2171]  ? __cfi_mutex_unlock+0x10/0x10
[   86.560725][ T2171]  ? __fget_files+0x2bc/0x330
[   86.560736][ T2171]  ? bpf_lsm_file_ioctl+0xd/0x20
[   86.560748][ T2171]  ? security_file_ioctl+0x3e/0x110
[   86.560763][ T2171]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   86.560775][ T2171]  __se_sys_ioctl+0x126/0x1b0
[   86.560786][ T2171]  __x64_sys_ioctl+0x7f/0xa0
[   86.560797][ T2171]  x64_sys_call+0x1878/0x2ee0
[   86.560809][ T2171]  do_syscall_64+0x57/0xf0
[   86.560819][ T2171]  ? clear_bhb_loop+0x50/0xa0
[   86.560833][ T2171]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   86.560846][ T2171] RIP: 0033:0x7fa76d79e559
[   86.560866][ T2171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.560876][ T2171] RSP: 002b:00007fa76e6a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.560891][ T2171] RAX: ffffffffffffffda RBX: 00007fa76da25fa0 RCX: 00007fa76d79e559
[   86.560899][ T2171] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   86.560907][ T2171] RBP: 00007fa76e6a0090 R08: 0000000000000000 R09: 0000000000000000
[   86.560915][ T2171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.560922][ T2171] R13: 00007fa76da26038 R14: 00007fa76da25fa0 R15: 00007ffc2fb23768
[   86.560932][ T2171]  </TASK>
[   86.855676][   T45] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   86.925718][    T9] usb 6-1: device descriptor read/64, error -71
[   86.957462][   T45] usb 2-1: device descriptor read/8, error -71
[   87.136731][   T45] usb 2-1: device descriptor read/8, error -71
[   87.195692][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   87.325689][    T9] usb 6-1: device descriptor read/64, error -71
[   87.385777][   T45] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   87.406895][   T45] usb 2-1: device descriptor read/8, error -71
[   87.460066][ T1288] usb 3-1: USB disconnect, device number 38
[   87.468573][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:178.183/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   87.535419][ T2179] netlink: 300 bytes leftover after parsing attributes in process `syz.2.592'.
[   87.546182][   T45] usb 2-1: device descriptor read/8, error -71
[   87.565699][    T9] usb 6-1: device descriptor read/64, error -71
[   87.630257][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   87.630277][   T36] audit: type=1400 audit(1792456254.240:393): avc:  denied  { append } for  pid=2195 comm="syz.2.599" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   87.659797][   T45] usb usb2-port1: unable to enumerate USB device
[   87.668081][  T427] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[   87.676012][    T9] usb usb6-port1: attempt power cycle
[   87.686032][  T427] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   87.728666][ T2201] tmpfs: Unknown parameter 'joswap'
[   87.789653][ T2206] netlink: 300 bytes leftover after parsing attributes in process `syz.0.603'.
[   87.899475][ T2222] overlay: ./file0 is not a directory
[   87.905070][   T36] audit: type=1400 audit(1792456254.510:394): avc:  denied  { getattr } for  pid=2220 comm="syz.0.608" path="/178/tracing/synthetic_events" dev="tracefs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   87.969921][  T457] Bluetooth: hci0: Frame reassembly failed (-84)
[   87.979874][ T2224] Bluetooth: hci0: Frame reassembly failed (-84)
[   88.007529][ T2230] SELinux:  Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped).
[   88.017674][   T36] audit: type=1400 audit(1792456254.630:395): avc:  denied  { relabelto } for  pid=2228 comm="syz.2.611" name="145" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:devicekit_exec_t:s0"
[   88.044249][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   88.046022][   T36] audit: type=1400 audit(1792456254.630:396): avc:  denied  { associate } for  pid=2228 comm="syz.2.611" name="145" dev="tmpfs" ino=842 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_exec_t:s0"
[   88.066794][    T9] usb 6-1: device descriptor read/8, error -71
[   88.114282][ T2234] netlink: 300 bytes leftover after parsing attributes in process `syz.1.613'.
[   88.132746][   T36] audit: type=1326 audit(1792456254.740:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.614" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982719e559 code=0x50000
[   88.157864][   T36] audit: type=1326 audit(1792456254.740:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.614" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982719e559 code=0x50000
[   88.183293][   T36] audit: type=1326 audit(1792456254.740:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.614" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982719e559 code=0x50000
[   88.208584][   T36] audit: type=1326 audit(1792456254.740:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.614" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982719e559 code=0x50000
[   88.226811][    T9] usb 6-1: device descriptor read/8, error -71
[   88.233782][   T36] audit: type=1326 audit(1792456254.740:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.614" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982719e559 code=0x50000
[   88.264894][   T36] audit: type=1326 audit(1792456254.740:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2235 comm="syz.1.614" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982719e559 code=0x50000
[   88.475682][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   88.506641][    T9] usb 6-1: device descriptor read/8, error -71
[   88.636706][    T9] usb 6-1: device descriptor read/8, error -71
[   88.740821][ T2241] loop0: detected capacity change from 0 to 1
[   88.747097][    T9] usb usb6-port1: unable to enumerate USB device
[   89.091057][    T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[   89.185583][ T2254] netlink: 300 bytes leftover after parsing attributes in process `syz.5.622'.
[   89.245648][    T9] usb 3-1: Using ep0 maxpacket: 16
[   89.252222][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   89.260185][    T9] usb 3-1: no configurations
[   89.265325][    T9] usb 3-1: can't read configurations, error -22
[   89.409185][    T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[   89.565649][    T9] usb 3-1: Using ep0 maxpacket: 16
[   89.572248][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   89.580270][    T9] usb 3-1: no configurations
[   89.590270][    T9] usb 3-1: can't read configurations, error -22
[   89.597491][    T9] usb usb3-port1: attempt power cycle
[   89.605654][   T45] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   89.765654][   T45] usb 6-1: Using ep0 maxpacket: 32
[   89.776707][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.788044][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.805661][   T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   89.825360][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.844356][   T45] usb 6-1: config 0 descriptor??
[   89.850927][   T45] hub 6-1:0.0: USB hub found
[   89.945672][    T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[   89.976043][    T9] usb 3-1: Using ep0 maxpacket: 16
[   89.982644][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   89.990604][    T9] usb 3-1: no configurations
[   89.995208][    T9] usb 3-1: can't read configurations, error -22
[   90.035668][  T669] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   90.056585][   T45] hub 6-1:0.0: 1 port detected
[   90.127322][ T2262] loop0: detected capacity change from 0 to 1
[   90.135666][    T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[   90.156079][    T9] usb 3-1: Using ep0 maxpacket: 16
[   90.163087][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   90.171362][    T9] usb 3-1: no configurations
[   90.186174][    T9] usb 3-1: can't read configurations, error -22
[   90.200537][    T9] usb usb3-port1: unable to enumerate USB device
[   90.213468][ T2264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'.
[   91.260433][ T2276] overlayfs: missing 'lowerdir'
[   91.276424][ T2278] netlink: 300 bytes leftover after parsing attributes in process `syz.0.632'.
[   91.298008][ T2280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.316238][   T45] hub 6-1:0.0: hub_hub_status failed (err = -32)
[   91.322848][   T45] hub 6-1:0.0: config failed, can't get hub status (err -32)
[   91.333622][   T45] usbhid 6-1:0.0: can't add hid device: -32
[   91.339642][   T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[   91.343955][ T2286] netlink: 'syz.0.635': attribute type 27 has an invalid length.
[   91.359515][ T2286] netlink: 196 bytes leftover after parsing attributes in process `syz.0.635'.
[   91.368976][   T45] usb 6-1: USB disconnect, device number 6
[   91.377138][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   91.389646][ T2286] overlay: Unknown parameter 'audit'
[   91.481158][ T2296] overlayfs: missing 'lowerdir'
[   91.515680][    T9] usb 2-1: device descriptor read/64, error -71
[   91.755722][    T9] usb 2-1: device descriptor read/64, error -71
[   91.894789][ T2307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[   91.908883][ T2309] netlink: 'syz.5.645': attribute type 4 has an invalid length.
[   91.919945][ T2309] netlink: 'syz.5.645': attribute type 4 has an invalid length.
[   91.934965][ T2312] loop0: detected capacity change from 0 to 1
[   91.996250][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[   92.025899][ T2315] bpf: Bad value for 'gid'
[   92.145677][    T9] usb 2-1: device descriptor read/64, error -71
[   92.295674][   T45] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[   92.385696][    T9] usb 2-1: device descriptor read/64, error -71
[   92.389057][ T2324] overlayfs: missing 'lowerdir'
[   92.455674][   T45] usb 3-1: Using ep0 maxpacket: 16
[   92.461364][   T45] usb 3-1: too many configurations: 128, using maximum allowed: 8
[   92.470651][   T45] usb 3-1: unable to read config index 0 descriptor/start: -61
[   92.478519][   T45] usb 3-1: can't read configurations, error -61
[   92.495749][    T9] usb usb2-port1: attempt power cycle
[   92.605770][   T45] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[   92.665676][  T985] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   92.765780][   T45] usb 3-1: Using ep0 maxpacket: 16
[   92.771440][   T45] usb 3-1: too many configurations: 128, using maximum allowed: 8
[   92.780632][   T45] usb 3-1: unable to read config index 0 descriptor/start: -61
[   92.788579][   T45] usb 3-1: can't read configurations, error -61
[   92.794974][   T45] usb usb3-port1: attempt power cycle
[   92.826913][  T985] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.837901][  T985] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.851981][  T985] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.858822][  T985] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   92.865672][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[   92.868065][  T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.884825][  T985] usb 1-1: config 0 descriptor??
[   92.896698][    T9] usb 2-1: device descriptor read/8, error -71
[   93.026704][    T9] usb 2-1: device descriptor read/8, error -71
[   93.145688][   T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   93.153354][   T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[   93.176031][   T45] usb 3-1: Using ep0 maxpacket: 16
[   93.181613][   T45] usb 3-1: too many configurations: 128, using maximum allowed: 8
[   93.190721][   T45] usb 3-1: unable to read config index 0 descriptor/start: -61
[   93.198363][   T45] usb 3-1: can't read configurations, error -61
[   93.265681][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[   93.286696][    T9] usb 2-1: device descriptor read/8, error -71
[   93.298518][  T985] hid-multitouch 0003:0EEF:72C4.000D: ignoring exceeding usage max
[   93.307628][   T31] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.320058][   T31] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.333292][  T985] hid-multitouch 0003:0EEF:72C4.000D: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0
[   93.345316][   T45] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[   93.354942][   T31] usb 6-1: config 0 interface 0 has no altsetting 0
[   93.361708][   T31] usb 6-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00
[   93.370871][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.379285][   T45] usb 3-1: Using ep0 maxpacket: 16
[   93.385012][   T31] usb 6-1: config 0 descriptor??
[   93.390067][   T45] usb 3-1: too many configurations: 128, using maximum allowed: 8
[   93.400155][   T45] usb 3-1: unable to read config index 0 descriptor/start: -61
[   93.407798][   T45] usb 3-1: can't read configurations, error -61
[   93.414227][   T45] usb usb3-port1: unable to enumerate USB device
[   93.426737][    T9] usb 2-1: device descriptor read/8, error -71
[   93.513904][   T45] usb 1-1: USB disconnect, device number 36
[   93.535848][    T9] usb usb2-port1: unable to enumerate USB device
[   93.598552][ T2331] futex_wake_op: syz.5.653 tries to shift op by -1; fix this program
[   93.808301][   T31] hid-penmount 0003:14E1:6000.000E: unknown main item tag 0x6
[   93.815905][   T31] hid-penmount 0003:14E1:6000.000E: unknown main item tag 0x5
[   93.823522][   T31] hid-penmount 0003:14E1:6000.000E: item 0 0 0 8 parsing failed
[   93.831400][   T31] hid-penmount 0003:14E1:6000.000E: probe with driver hid-penmount failed with error -22
[   94.008185][ T2331] futex_wake_op: syz.5.653 tries to shift op by -1; fix this program
[   94.008346][ T2334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.024881][ T2334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.070294][ T2345] loop0: detected capacity change from 0 to 1
[   94.126089][ T2351] overlayfs: missing 'lowerdir'
[   94.235869][   T36] kauditd_printk_skb: 29072 callbacks suppressed
[   94.235889][   T36] audit: type=1400 audit(1792456260.850:29475): avc:  denied  { setopt } for  pid=2357 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.281464][ T2367] loop0: detected capacity change from 0 to 1
[   94.317525][ T2369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'.
[   94.395722][   T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[   94.525706][   T31] usb 1-1: device descriptor read/64, error -71
[   94.555729][   T45] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[   94.695714][   T45] usb 2-1: device descriptor read/64, error -71
[   94.765716][   T31] usb 1-1: device descriptor read/64, error -71
[   94.945715][   T45] usb 2-1: device descriptor read/64, error -71
[   95.005683][   T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[   95.067180][ T2372] overlayfs: missing 'lowerdir'
[   95.107621][   T36] audit: type=1400 audit(1792456261.720:29476): avc:  denied  { getopt } for  pid=2373 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   95.145759][   T31] usb 1-1: device descriptor read/64, error -71
[   95.186482][   T45] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[   95.246600][ T2381] overlayfs: conflicting options: nfs_export=on,metacopy=on
[   95.315742][   T45] usb 2-1: device descriptor read/64, error -71
[   95.385713][   T31] usb 1-1: device descriptor read/64, error -71
[   95.495780][  T399] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[   95.503507][   T31] usb usb1-port1: attempt power cycle
[   95.576604][   T45] usb 2-1: device descriptor read/64, error -71
[   95.666877][  T399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   95.677763][  T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.688884][  T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.698818][   T45] usb usb2-port1: attempt power cycle
[   95.704682][  T399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   95.718995][  T399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   95.728068][  T399] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   95.736347][  T399] usb 3-1: Manufacturer: syz
[   95.741667][  T399] usb 3-1: config 0 descriptor??
[   95.845683][   T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[   95.866689][   T31] usb 1-1: device descriptor read/8, error -71
[   95.903501][  T311] usb 6-1: USB disconnect, device number 7
[   95.978260][ T2388] FAULT_INJECTION: forcing a failure.
[   95.978260][ T2388] name failslab, interval 1, probability 0, space 0, times 0
[   95.991068][ T2388] CPU: 1 UID: 0 PID: 2388 Comm: syz.5.674 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[   95.991101][ T2388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   95.991113][ T2388] Call Trace:
[   95.991121][ T2388]  <TASK>
[   95.991129][ T2388]  __dump_stack+0x21/0x30
[   95.991159][ T2388]  dump_stack_lvl+0x140/0x1c0
[   95.991176][ T2388]  ? __cfi_dump_stack_lvl+0x10/0x10
[   95.991193][ T2388]  ? kasan_save_alloc_info+0x3a/0x50
[   95.991208][ T2388]  ? __kasan_slab_alloc+0x73/0x90
[   95.991219][ T2388]  dump_stack+0x19/0x20
[   95.991235][ T2388]  should_fail_ex+0x3c2/0x510
[   95.991246][ T2388]  should_failslab+0xac/0x100
[   95.991257][ T2388]  __kmalloc_cache_noprof+0x41/0x470
[   95.991273][ T2388]  ? alloc_pipe_info+0xfb/0x5f0
[   95.991289][ T2388]  alloc_pipe_info+0xfb/0x5f0
[   95.991304][ T2388]  create_pipe_files+0x8f/0x6c0
[   95.991319][ T2388]  __do_pipe_flags+0x50/0x2f0
[   95.991335][ T2388]  do_pipe2+0xab/0x190
[   95.991350][ T2388]  ? __x64_sys_futex+0x110/0x110
[   95.991362][ T2388]  ? pipe_fcntl+0x520/0x520
[   95.991378][ T2388]  __x64_sys_pipe2+0x5e/0x70
[   95.991393][ T2388]  x64_sys_call+0x8be/0x2ee0
[   95.991410][ T2388]  do_syscall_64+0x57/0xf0
[   95.991426][ T2388]  ? clear_bhb_loop+0x50/0xa0
[   95.991444][ T2388]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   95.991458][ T2388] RIP: 0033:0x7f074e79e559
[   95.991470][ T2388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.991480][ T2388] RSP: 002b:00007f074f59d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[   95.991494][ T2388] RAX: ffffffffffffffda RBX: 00007f074ea26090 RCX: 00007f074e79e559
[   95.991503][ T2388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   95.991510][ T2388] RBP: 00007f074e835ad8 R08: 0000000000000000 R09: 0000000000000000
[   95.991518][ T2388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.991525][ T2388] R13: 00007f074ea26128 R14: 00007f074ea26090 R15: 00007ffe9d096c88
[   95.991535][ T2388]  </TASK>
[   96.201037][   T45] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[   96.209579][   T31] usb 1-1: device descriptor read/8, error -71
[   96.226739][   T45] usb 2-1: device descriptor read/8, error -71
[   96.246513][  T399] usbhid 3-1:0.0: can't add hid device: -71
[   96.252572][  T399] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   96.261274][  T399] usb 3-1: USB disconnect, device number 47
[   96.356803][   T45] usb 2-1: device descriptor read/8, error -71
[   96.455699][   T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[   96.476795][   T31] usb 1-1: device descriptor read/8, error -71
[   96.595798][   T45] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[   96.606946][   T31] usb 1-1: device descriptor read/8, error -71
[   96.616926][   T45] usb 2-1: device descriptor read/8, error -71
[   96.725820][   T31] usb usb1-port1: unable to enumerate USB device
[   96.746803][   T45] usb 2-1: device descriptor read/8, error -71
[   96.787497][ T2395] overlayfs: missing 'lowerdir'
[   96.859288][   T45] usb usb2-port1: unable to enumerate USB device
[   96.940384][ T2408] netlink: 300 bytes leftover after parsing attributes in process `syz.2.681'.
[   97.171218][ T2422] loop0: detected capacity change from 0 to 1
[   97.195738][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   97.347052][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[   97.356744][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.377472][    T9] usb 6-1: string descriptor 0 read error: -22
[   97.383758][    T9] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   97.392960][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.555677][   T45] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[   97.666968][ T2447] netlink: 300 bytes leftover after parsing attributes in process `syz.1.695'.
[   97.706764][   T45] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[   97.717400][   T45] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   97.730387][   T45] usb 1-1: config 0 interface 0 has no altsetting 0
[   97.737058][   T45] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00
[   97.746167][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.755670][  T427] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[   97.758936][   T45] usb 1-1: config 0 descriptor??
[   97.770261][   T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   97.895721][  T427] usb 3-1: device descriptor read/64, error -71
[   98.005681][   T66] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[   98.056437][    T9] usb 6-1: 1:1: cannot get freq at ep 0x1
[   98.069477][    T9] usb 6-1: USB disconnect, device number 8
[   98.145748][  T427] usb 3-1: device descriptor read/64, error -71
[   98.152299][   T66] usb 2-1: device descriptor read/64, error -71
[   98.385687][  T427] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[   98.395807][   T66] usb 2-1: device descriptor read/64, error -71
[   98.515729][  T427] usb 3-1: device descriptor read/64, error -71
[   98.635718][   T66] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[   98.715248][ T2465] netlink: 140 bytes leftover after parsing attributes in process `syz.5.702'.
[   98.755707][  T427] usb 3-1: device descriptor read/64, error -71
[   98.768926][ T2465] netlink: 20 bytes leftover after parsing attributes in process `syz.5.702'.
[   98.775834][   T66] usb 2-1: device descriptor read/64, error -71
[   98.865829][  T427] usb usb3-port1: attempt power cycle
[   99.015706][   T66] usb 2-1: device descriptor read/64, error -71
[   99.045697][   T45] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   99.125799][   T66] usb usb2-port1: attempt power cycle
[   99.205700][   T45] usb 6-1: Using ep0 maxpacket: 16
[   99.205705][  T427] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[   99.219654][   T45] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[   99.227886][   T45] usb 6-1: config 0 has no interface number 0
[   99.233987][   T45] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   99.236728][  T427] usb 3-1: device descriptor read/8, error -71
[   99.244014][   T45] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   99.261681][   T45] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   99.270808][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.278855][   T45] usb 6-1: Product: syz
[   99.283126][   T45] usb 6-1: Manufacturer: syz
[   99.287759][   T45] usb 6-1: SerialNumber: syz
[   99.292918][   T45] usb 6-1: config 0 descriptor??
[   99.298378][ T2468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   99.305866][ T2468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   99.376850][  T427] usb 3-1: device descriptor read/8, error -71
[   99.465701][   T66] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[   99.496728][   T66] usb 2-1: device descriptor read/8, error -71
[   99.514514][ T2468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   99.521843][ T2468] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   99.625783][  T427] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[   99.634460][   T66] usb 2-1: device descriptor read/8, error -71
[   99.646819][  T427] usb 3-1: device descriptor read/8, error -71
[   99.729699][   T45] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   99.786858][  T427] usb 3-1: device descriptor read/8, error -71
[   99.875691][   T66] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[   99.895803][  T427] usb usb3-port1: unable to enumerate USB device
[   99.903453][   T66] usb 2-1: device descriptor read/8, error -71
[  100.036745][   T66] usb 2-1: device descriptor read/8, error -71
[  100.145824][   T66] usb usb2-port1: unable to enumerate USB device
[  100.182805][   T45] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  100.192983][   T45] asix 6-1:0.34: probe with driver asix failed with error -32
[  100.237482][   T45] usb 1-1: USB disconnect, device number 41
[  100.249501][   T36] audit: type=1400 audit(1792456266.860:29477): avc:  denied  { map } for  pid=2470 comm="syz.0.704" path="/212/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  100.274983][   T36] audit: type=1400 audit(1792456266.860:29478): avc:  denied  { execute } for  pid=2470 comm="syz.0.704" path="/212/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  100.300912][   T36] audit: type=1400 audit(1792456266.860:29479): avc:  denied  { ioctl } for  pid=2470 comm="syz.0.704" path="/212/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1102 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  100.622687][ T2484] mmap: syz.2.710 (2484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  100.636941][ T2484] FAULT_INJECTION: forcing a failure.
[  100.636941][ T2484] name failslab, interval 1, probability 0, space 0, times 0
[  100.649679][ T2484] CPU: 1 UID: 0 PID: 2484 Comm: syz.2.710 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[  100.649712][ T2484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  100.649720][ T2484] Call Trace:
[  100.649725][ T2484]  <TASK>
[  100.649729][ T2484]  __dump_stack+0x21/0x30
[  100.649754][ T2484]  dump_stack_lvl+0x140/0x1c0
[  100.649772][ T2484]  ? __cfi_dump_stack_lvl+0x10/0x10
[  100.649790][ T2484]  ? kasan_save_alloc_info+0x3a/0x50
[  100.649812][ T2484]  dump_stack+0x19/0x20
[  100.649830][ T2484]  should_fail_ex+0x3c2/0x510
[  100.649842][ T2484]  should_failslab+0xac/0x100
[  100.649854][ T2484]  __kmalloc_node_noprof+0x69/0x500
[  100.649877][ T2484]  ? __vmalloc_node_range_noprof+0x529/0x1300
[  100.649902][ T2484]  __vmalloc_node_range_noprof+0x529/0x1300
[  100.649925][ T2484]  ? number+0xc9d/0xf00
[  100.649955][ T2484]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  100.649974][ T2484]  ? vsnprintf+0x19ef/0x1ad0
[  100.649990][ T2484]  ? kvm_dev_ioctl+0x12a/0x14c0
[  100.650002][ T2484]  __vmalloc_noprof+0x104/0x1d0
[  100.650016][ T2484]  ? kvm_dev_ioctl+0x12a/0x14c0
[  100.650026][ T2484]  ? alloc_fd+0x4c1/0x570
[  100.650045][ T2484]  ? __cfi___vmalloc_noprof+0x10/0x10
[  100.650060][ T2484]  kvm_dev_ioctl+0x12a/0x14c0
[  100.650072][ T2484]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[  100.650084][ T2484]  ? bpf_lsm_file_ioctl+0xd/0x20
[  100.650097][ T2484]  ? security_file_ioctl+0x3e/0x110
[  100.650112][ T2484]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[  100.650123][ T2484]  __se_sys_ioctl+0x126/0x1b0
[  100.650135][ T2484]  __x64_sys_ioctl+0x7f/0xa0
[  100.650145][ T2484]  x64_sys_call+0x1878/0x2ee0
[  100.650157][ T2484]  do_syscall_64+0x57/0xf0
[  100.650167][ T2484]  ? clear_bhb_loop+0x50/0xa0
[  100.650181][ T2484]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  100.650195][ T2484] RIP: 0033:0x7f390e39e559
[  100.650206][ T2484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.650216][ T2484] RSP: 002b:00007f390f323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.650231][ T2484] RAX: ffffffffffffffda RBX: 00007f390e625fa0 RCX: 00007f390e39e559
[  100.650240][ T2484] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006
[  100.650248][ T2484] RBP: 00007f390e435ad8 R08: 0000000000000000 R09: 0000000000000000
[  100.650255][ T2484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.650263][ T2484] R13: 00007f390e626038 R14: 00007f390e625fa0 R15: 00007ffce99af0e8
[  100.650273][ T2484]  </TASK>
[  100.650279][ T2484] syz.2.710: vmalloc error: size 40960, failed to allocated page array size 80, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[  100.898715][   T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  100.898830][ T2484] ,cpuset=syz2,mems_allowed=0
[  100.928971][ T2484] CPU: 0 UID: 0 PID: 2484 Comm: syz.2.710 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[  100.929006][ T2484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  100.929019][ T2484] Call Trace:
[  100.929025][ T2484]  <TASK>
[  100.929033][ T2484]  __dump_stack+0x21/0x30
[  100.929069][ T2484]  dump_stack_lvl+0x140/0x1c0
[  100.929097][ T2484]  ? __cfi_dump_stack_lvl+0x10/0x10
[  100.929127][ T2484]  dump_stack+0x19/0x20
[  100.929152][ T2484]  warn_alloc+0x1e7/0x2c0
[  100.929174][ T2484]  ? __kasan_check_write+0x18/0x20
[  100.929201][ T2484]  ? __cfi_warn_alloc+0x10/0x10
[  100.929222][ T2484]  ? __kasan_kmalloc+0x28/0xb0
[  100.929236][ T2484]  ? __kmalloc_node_noprof+0x252/0x500
[  100.929252][ T2484]  ? __vmalloc_node_range_noprof+0x529/0x1300
[  100.929267][ T2484]  __vmalloc_node_range_noprof+0x65f/0x1300
[  100.929281][ T2484]  ? number+0xc9d/0xf00
[  100.929300][ T2484]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  100.929314][ T2484]  ? vsnprintf+0x19ef/0x1ad0
[  100.929331][ T2484]  ? kvm_dev_ioctl+0x12a/0x14c0
[  100.929343][ T2484]  __vmalloc_noprof+0x104/0x1d0
[  100.929356][ T2484]  ? kvm_dev_ioctl+0x12a/0x14c0
[  100.929368][ T2484]  ? alloc_fd+0x4c1/0x570
[  100.929384][ T2484]  ? __cfi___vmalloc_noprof+0x10/0x10
[  100.929398][ T2484]  kvm_dev_ioctl+0x12a/0x14c0
[  100.929410][ T2484]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[  100.929422][ T2484]  ? bpf_lsm_file_ioctl+0xd/0x20
[  100.929434][ T2484]  ? security_file_ioctl+0x3e/0x110
[  100.929449][ T2484]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[  100.929461][ T2484]  __se_sys_ioctl+0x126/0x1b0
[  100.929472][ T2484]  __x64_sys_ioctl+0x7f/0xa0
[  100.929483][ T2484]  x64_sys_call+0x1878/0x2ee0
[  100.929495][ T2484]  do_syscall_64+0x57/0xf0
[  100.929505][ T2484]  ? clear_bhb_loop+0x50/0xa0
[  100.929520][ T2484]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  100.929534][ T2484] RIP: 0033:0x7f390e39e559
[  100.929545][ T2484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.929556][ T2484] RSP: 002b:00007f390f323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.929571][ T2484] RAX: ffffffffffffffda RBX: 00007f390e625fa0 RCX: 00007f390e39e559
[  100.929581][ T2484] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006
[  100.929589][ T2484] RBP: 00007f390e435ad8 R08: 0000000000000000 R09: 0000000000000000
[  100.929597][ T2484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.929604][ T2484] R13: 00007f390e626038 R14: 00007f390e625fa0 R15: 00007ffce99af0e8
[  100.929614][ T2484]  </TASK>
[  100.930288][ T2484] Mem-Info:
[  100.937751][   T36] audit: type=1400 audit(1792456267.550:29480): avc:  denied  { map } for  pid=2487 comm="syz.1.711" path="socket:[23676]" dev="sockfs" ino=23676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  100.943907][ T2484] active_anon:10906 inactive_anon:2 isolated_anon:0
[  100.943907][ T2484]  active_file:10661 inactive_file:10657 isolated_file:0
[  100.943907][ T2484]  unevictable:0 dirty:82 writeback:0
[  100.943907][ T2484]  slab_reclaimable:4225 slab_unreclaimable:72820
[  100.943907][ T2484]  mapped:24956 shmem:3115 pagetables:1217
[  100.943907][ T2484]  sec_pagetables:3 bounce:0
[  100.943907][ T2484]  kernel_misc_reclaimable:0
[  100.943907][ T2484]  free:1516469 free_pcp:2003 free_cma:0
[  101.055670][   T45] usb 1-1: Using ep0 maxpacket: 16
[  101.058044][ T2484] Node 0 active_anon:43624kB inactive_anon:8kB active_file:42644kB inactive_file:42628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99824kB dirty:328kB writeback:0kB shmem:12460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5792kB pagetables:5068kB sec_pagetables:12kB all_unreclaimable? no
[  101.069267][   T45] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.073279][ T2484] DMA32 free:2951324kB boost:0kB min:4468kB low:7420kB high:10372kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955032kB mlocked:0kB bounce:0kB free_pcp:3708kB local_pcp:3708kB free_cma:0kB
[  101.078582][   T45] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.083009][ T2484] lowmem_reserve[]:
[  101.087832][   T45] usb 1-1: config 0 interface 0 has no altsetting 0
[  101.092397][ T2484]  0
[  101.098057][   T45] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  101.101599][ T2484]  3920
[  101.107723][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.111933][ T2484]  3920
[  101.132641][   T45] usb 1-1: config 0 descriptor??
[  101.140625][ T2484] 
[  101.388665][ T2484] Normal free:3115808kB boost:0kB min:6068kB low:10080kB high:14092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43700kB inactive_anon:8kB active_file:42712kB inactive_file:42628kB unevictable:0kB writepending:404kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:3508kB local_pcp:2152kB free_cma:0kB
[  101.420268][ T2484] lowmem_reserve[]: 0 0 0
[  101.424729][ T2484] DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 3*64kB (M) 4*128kB (M) 5*256kB (M) 4*512kB (M) 4*1024kB (UM) 3*2048kB (M) 717*4096kB (M) = 2951324kB
[  101.440279][ T2484] Normal: 1074*4kB (UME) 1015*8kB (UME) 514*16kB (UME) 538*32kB (UME) 677*64kB (UME) 98*128kB (UME) 47*256kB (UME) 25*512kB (UME) 21*1024kB (ME) 7*2048kB (UM) 723*4096kB (UM) = 3115808kB
[  101.458879][ T2484] 24454 total pagecache pages
[  101.463837][ T2484] 6 pages in swap cache
[  101.468080][ T2484] Free swap  = 123668kB
[  101.472336][ T2484] Total swap = 124996kB
[  101.476637][ T2484] 2097051 pages RAM
[  101.480471][ T2484] 0 pages HighMem/MovableOnly
[  101.485167][ T2484] 354583 pages reserved
[  101.489347][ T2484] 0 pages cma reserved
[  101.495097][ T2484] Memory allocations:
[  101.499130][ T2484]          0 B        0 init/main.c:1477 func:do_initcalls
[  101.506380][ T2484]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  101.514640][ T2484]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  101.522373][ T2484]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  101.530395][ T2484]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  101.538434][ T2484]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  101.547415][ T2484]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  101.556192][ T2484]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  101.561449][   T36] audit: type=1400 audit(1792456268.170:29481): avc:  denied  { watch } for  pid=2472 comm="syz.0.705" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  101.564504][ T2484]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  101.586055][ T2493] loop0: detected capacity change from 0 to 1
[  101.599918][ T2484]          0 B        0 init/initramfs.c:101 func:find_link
[  101.767261][   T45] usbhid 1-1:0.0: can't add hid device: -71
[  101.773364][   T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  101.783444][   T45] usb 1-1: USB disconnect, device number 42
[  101.875673][  T399] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  101.898628][   T66] usb 6-1: USB disconnect, device number 9
[  101.921260][ T2502] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  101.930027][ T2502] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  101.938316][ T2502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  102.015682][  T399] usb 2-1: device descriptor read/64, error -71
[  102.036350][   T36] audit: type=1400 audit(1792456268.650:29482): avc:  denied  { write } for  pid=2515 comm="syz.5.720" path="socket:[23176]" dev="sockfs" ino=23176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  102.255726][  T399] usb 2-1: device descriptor read/64, error -71
[  102.287351][ T2528] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  102.296162][ T2528] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  102.304514][ T2528] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  102.312857][   T45] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  102.465713][   T45] usb 6-1: Using ep0 maxpacket: 32
[  102.472034][   T45] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  102.480382][   T45] usb 6-1: config 0 has no interface number 0
[  102.486543][   T45] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  102.496572][  T399] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  102.504178][   T45] usb 6-1: config 0 interface 196 has no altsetting 0
[  102.512526][   T45] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  102.521588][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.529742][   T45] usb 6-1: Product: syz
[  102.534390][   T45] usb 6-1: Manufacturer: syz
[  102.539009][   T45] usb 6-1: SerialNumber: syz
[  102.544219][   T45] usb 6-1: config 0 descriptor??
[  102.549604][ T2518] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  102.635668][  T399] usb 2-1: device descriptor read/64, error -71
[  102.885703][  T399] usb 2-1: device descriptor read/64, error -71
[  102.958547][   T45] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  102.967512][   T45] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached
[  102.996146][  T399] usb usb2-port1: attempt power cycle
[  103.158957][   T36] audit: type=1400 audit(1792456269.770:29483): avc:  denied  { remount } for  pid=2517 comm="syz.5.721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  103.158984][ T2518] SELinux: security_context_str_to_sid (syt|v\{‹) failed with errno=-22
[  103.159218][    C0] ipheth 6-1:0.196: ipheth_rcvbulk_callback: callback retval: -22
[  103.196113][    C0] ipheth 6-1:0.196: ipheth_rcvbulk_callback: callback retval: -22
[  103.311226][ T2559] loop0: detected capacity change from 0 to 1
[  103.335710][  T399] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  103.356666][  T399] usb 2-1: device descriptor read/8, error -71
[  103.359280][    C0] ipheth 6-1:0.196: ipheth_rcvbulk_callback: callback retval: -22
[  103.487032][  T399] usb 2-1: device descriptor read/8, error -71
[  103.495686][   T45] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  103.566497][   T66] usb 6-1: USB disconnect, device number 10
[  103.598605][   T66] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected
[  103.615692][  T311] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  103.625670][   T45] usb 1-1: device descriptor read/64, error -71
[  103.735880][  T399] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  103.756645][  T399] usb 2-1: device descriptor read/8, error -71
[  103.775697][  T311] usb 3-1: Using ep0 maxpacket: 8
[  103.783225][  T311] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40
[  103.792326][  T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.800353][  T311] usb 3-1: Product: syz
[  103.804536][  T311] usb 3-1: Manufacturer: syz
[  103.809264][  T311] usb 3-1: SerialNumber: syz
[  103.865699][   T45] usb 1-1: device descriptor read/64, error -71
[  103.886612][  T399] usb 2-1: device descriptor read/8, error -71
[  103.995789][  T399] usb usb2-port1: unable to enumerate USB device
[  104.090501][  T311] usb 3-1: USB disconnect, device number 52
[  104.105702][   T45] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  104.107103][  T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  104.155571][ T2580] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  104.164341][ T2580] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  104.172808][ T2580] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  104.189921][ T2582] No source specified
[  104.203978][ T2585] SELinux:  Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped).
[  104.213785][   T36] audit: type=1400 audit(1792456270.820:29484): avc:  denied  { relabelto } for  pid=2584 comm="syz.5.736" name="cgroup" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_exec_t:s0"
[  104.240748][   T36] audit: type=1400 audit(1792456270.820:29485): avc:  denied  { associate } for  pid=2584 comm="syz.5.736" name="cgroup" dev="tmpfs" ino=286 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_exec_t:s0"
[  104.255680][   T45] usb 1-1: device descriptor read/64, error -71
[  104.286917][   T36] audit: type=1400 audit(1792456270.900:29486): avc:  denied  { create } for  pid=2586 comm="syz.5.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  104.505906][   T45] usb 1-1: device descriptor read/64, error -71
[  104.615802][   T45] usb usb1-port1: attempt power cycle
[  104.635721][  T311] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  104.677424][ T2600] overlayfs: missing 'lowerdir'
[  104.785677][ T2615] netlink: 300 bytes leftover after parsing attributes in process `syz.1.749'.
[  104.795828][  T311] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  104.809721][  T311] usb 6-1: New USB device found, idVendor=0499, idProduct=105b, bcdDevice= 0.40
[  104.818887][  T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.826937][  T311] usb 6-1: Product: syz
[  104.831134][  T311] usb 6-1: Manufacturer: syz
[  104.835778][  T311] usb 6-1: SerialNumber: syz
[  104.955720][   T45] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  104.956845][ T2623] overlayfs: missing 'lowerdir'
[  104.976678][   T45] usb 1-1: device descriptor read/8, error -71
[  105.011795][ T2627] netlink: 'syz.2.755': attribute type 10 has an invalid length.
[  105.019733][ T2627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.755'.
[  105.028849][ T2627] veth1: entered promiscuous mode
[  105.045667][  T399] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  105.053512][  T311] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2
[  105.063763][  T311] usb 6-1: USB disconnect, device number 11
[  105.072097][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  105.106837][   T45] usb 1-1: device descriptor read/8, error -71
[  105.185841][  T399] usb 2-1: device descriptor read/64, error -71
[  105.245689][  T427] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  105.345735][   T45] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  105.366711][   T45] usb 1-1: device descriptor read/8, error -71
[  105.396837][  T427] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 140, changing to 11
[  105.408212][  T427] usb 3-1: config 0 interface 0 has no altsetting 0
[  105.414857][  T427] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  105.423955][  T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.432658][  T427] usb 3-1: config 0 descriptor??
[  105.435675][  T399] usb 2-1: device descriptor read/64, error -71
[  105.496735][   T45] usb 1-1: device descriptor read/8, error -71
[  105.605802][   T45] usb usb1-port1: unable to enumerate USB device
[  105.640175][  T427] usb 3-1: string descriptor 0 read error: -71
[  105.649329][  T427] usbhid 3-1:0.0: can't add hid device: -22
[  105.655337][  T427] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  105.664138][  T427] usb 3-1: USB disconnect, device number 53
[  105.675698][  T399] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  105.694911][ T2641] netlink: 300 bytes leftover after parsing attributes in process `syz.5.760'.
[  105.805672][  T399] usb 2-1: device descriptor read/64, error -71
[  105.827971][ T2648] overlayfs: missing 'lowerdir'
[  106.045669][  T399] usb 2-1: device descriptor read/64, error -71
[  106.156088][  T399] usb usb2-port1: attempt power cycle
[  106.232550][ T2681] overlayfs: missing 'workdir'
[  106.265390][ T2685] overlayfs: workdir and upperdir must reside under the same mount
[  106.505687][  T399] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  106.526804][  T399] usb 2-1: device descriptor read/8, error -71
[  106.527410][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.540196][ T2698] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.547533][ T2698] bridge_slave_0: entered allmulticast mode
[  106.553973][ T2698] bridge_slave_0: entered promiscuous mode
[  106.560776][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.567855][ T2698] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.574939][ T2698] bridge_slave_1: entered allmulticast mode
[  106.581503][ T2698] bridge_slave_1: entered promiscuous mode
[  106.629167][ T2704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.780'.
[  106.641312][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.648496][ T2698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.655809][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.662841][ T2698] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.666772][  T399] usb 2-1: device descriptor read/8, error -71
[  106.685883][  T463] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.693244][  T463] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.703256][  T461] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.710339][  T461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.719454][  T463] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.726789][  T463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.750653][ T2698] veth0_vlan: entered promiscuous mode
[  106.761736][ T2698] veth1_macvtap: entered promiscuous mode
[  106.807663][ T2710] netlink: 300 bytes leftover after parsing attributes in process `syz.6.782'.
[  106.826415][ T2712] overlayfs: missing 'workdir'
[  106.851764][ T2716] loop0: detected capacity change from 0 to 1
[  106.875722][   T45] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  106.925787][  T399] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  106.937979][ T2720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1084 sclass=netlink_route_socket pid=2720 comm=syz.6.787
[  106.951281][ T2720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=2720 comm=syz.6.787
[  106.964974][ T2720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=2720 comm=syz.6.787
[  106.978418][  T399] usb 2-1: device descriptor read/8, error -71
[  106.980095][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  106.980111][   T36] audit: type=1400 audit(1792456273.590:29488): avc:  denied  { setopt } for  pid=2719 comm="syz.6.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  107.015755][   T45] usb 3-1: device descriptor read/64, error -71
[  107.106886][  T399] usb 2-1: device descriptor read/8, error -71
[  107.205729][ T1288] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  107.215848][  T399] usb usb2-port1: unable to enumerate USB device
[  107.225771][  T311] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  107.255730][   T45] usb 3-1: device descriptor read/64, error -71
[  107.356951][ T1288] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  107.366777][ T1288] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  107.378010][ T1288] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  107.386948][  T311] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  107.387163][ T1288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.396558][  T311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.404380][ T1288] usb 6-1: Product: syz
[  107.413320][  T311] usb 7-1: config 0 descriptor??
[  107.416561][ T1288] usb 6-1: Manufacturer: syz
[  107.426390][ T1288] usb 6-1: SerialNumber: syz
[  107.433191][ T1288] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[  107.441043][ T1288] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  107.441043][ T1288]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  107.495699][   T45] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  107.625687][   T45] usb 3-1: device descriptor read/64, error -71
[  107.635725][  T311] usb 7-1: Cannot read MAC address
[  107.641218][  T311] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  107.654118][  T311] usb 7-1: USB disconnect, device number 2
[  107.846828][ T2732] 9pnet_fd: Insufficient options for proto=fd
[  107.857515][ T1288] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -5
[  107.875754][   T45] usb 3-1: device descriptor read/64, error -71
[  107.892448][ T2735] rust_binder: 2734:2735 got reply transaction with no transaction stack
[  107.900967][ T2735] rust_binder: 2734:2735 transaction reply to 0:0 failed EINVAL, code 0 size 80-24 line thread.rs:1547
[  107.913195][ T2735] device-mapper: table: 252:1: zero-length target
[  107.919701][ T2735] device-mapper: ioctl: error adding target to table
[  107.936138][ T2738] overlayfs: missing 'workdir'
[  107.950254][ T2740] netlink: 300 bytes leftover after parsing attributes in process `syz.1.794'.
[  107.986374][   T45] usb usb3-port1: attempt power cycle
[  107.990846][ T2745] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f]
[  108.007324][ T2745] caller generic_access_phys+0x153/0x310 mapping multiple BARs
[  108.034612][  T311] usb 6-1: USB disconnect, device number 12
[  108.194048][   T36] audit: type=1400 audit(1792456274.800:29489): avc:  denied  { sys_module } for  pid=2752 comm="syz.6.800" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  108.246643][  T427] logitech-hidpp-device 0005:046D:B012.000F: item fetching failed at offset 3/4
[  108.256238][  T427] logitech-hidpp-device 0005:046D:B012.000F: hidpp_probe:parse failed
[  108.264538][  T427] logitech-hidpp-device 0005:046D:B012.000F: probe with driver logitech-hidpp-device failed with error -22
[  108.286453][ T2762] netlink: 300 bytes leftover after parsing attributes in process `syz.6.804'.
[  108.355725][   T31] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  108.363776][   T45] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  108.386903][   T45] usb 3-1: device descriptor read/8, error -71
[  108.516127][   T31] usb 2-1: no configurations
[  108.520812][   T31] usb 2-1: can't read configurations, error -22
[  108.527525][   T45] usb 3-1: device descriptor read/8, error -71
[  108.545695][  T311] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  108.655904][   T31] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  108.707356][  T311] usb 7-1: unable to get BOS descriptor or descriptor too short
[  108.717264][  T311] usb 7-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40
[  108.726958][  T311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.734976][  T311] usb 7-1: Product: syz
[  108.739454][  T311] usb 7-1: Manufacturer: syz
[  108.744065][  T311] usb 7-1: SerialNumber: syz
[  108.765677][   T45] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  108.785672][  T427] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  108.786716][   T45] usb 3-1: device descriptor read/8, error -71
[  108.816032][   T31] usb 2-1: no configurations
[  108.820677][   T31] usb 2-1: can't read configurations, error -22
[  108.827140][   T31] usb usb2-port1: attempt power cycle
[  108.926715][   T45] usb 3-1: device descriptor read/8, error -71
[  108.937734][  T427] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  108.947687][  T427] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  108.954764][  T311] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  108.957607][  T427] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  108.970347][  T311] usb 7-1: USB disconnect, device number 3
[  108.986486][  T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  108.987056][  T427] usb 6-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice= 0.40
[  109.011470][  T427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.019538][  T427] usb 6-1: Product: syz
[  109.023712][  T427] usb 6-1: Manufacturer: syz
[  109.028363][  T427] usb 6-1: SerialNumber: syz
[  109.033875][ T2766] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  109.041255][   T45] usb usb3-port1: unable to enumerate USB device
[  109.165707][   T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  109.186511][   T31] usb 2-1: no configurations
[  109.191238][   T31] usb 2-1: can't read configurations, error -22
[  109.244811][  T427] usb 6-1: MIDIStreaming interface descriptor not found
[  109.254688][  T427] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -12
[  109.265762][  T427] usb 6-1: USB disconnect, device number 13
[  109.274710][  T908] udevd[908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  109.325762][   T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  109.346567][   T31] usb 2-1: no configurations
[  109.351186][   T31] usb 2-1: can't read configurations, error -22
[  109.357977][   T31] usb usb2-port1: unable to enumerate USB device
[  109.845698][  T427] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  109.997050][  T427] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.007762][  T427] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  110.022119][  T427] usb 7-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01
[  110.031398][ T1288] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  110.039027][  T427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.047360][  T427] usb 7-1: Product: syz
[  110.051688][  T427] usb 7-1: Manufacturer: syz
[  110.056404][  T427] usb 7-1: SerialNumber: syz
[  110.063461][  T427] ipheth 7-1:1.0: Unable to find alternate settings interface
[  110.197182][ T1288] usb 3-1: unable to get BOS descriptor or descriptor too short
[  110.205281][ T1288] usb 3-1: not running at top speed; connect to a high speed hub
[  110.213806][ T1288] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  110.226884][ T1288] usb 3-1: string descriptor 0 read error: -22
[  110.233094][ T1288] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  110.242279][ T1288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.253106][ T1288] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  110.290551][ T2775] kvm: kvm [2774]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  110.318724][   T31] usb 7-1: USB disconnect, device number 4
[  110.452645][ T1288] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  110.461325][ T1288] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  110.469166][ T1288] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  110.479436][ T1288] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  110.488168][ T1288] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  110.496117][ T1288] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  110.667408][   T36] audit: type=1400 audit(1792456277.280:29490): avc:  denied  { read write } for  pid=2791 comm="syz.5.816" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  110.692125][   T36] audit: type=1400 audit(1792456277.280:29491): avc:  denied  { open } for  pid=2791 comm="syz.5.816" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  110.716756][   T36] audit: type=1326 audit(1792456277.280:29492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.5.816" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f074e79e559 code=0x0
[  110.884361][ T2803] netlink: 64 bytes leftover after parsing attributes in process `syz.6.819'.
[  110.893370][ T2803] netlink: 17 bytes leftover after parsing attributes in process `syz.6.819'.
[  111.008481][   T61] device offline error, dev sda, sector 1130806 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  111.019162][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2027 starting block 141350)
[  111.030835][   T61] Buffer I/O error on device sda1, logical block 141312
[  111.038011][   T61] Buffer I/O error on device sda1, logical block 141313
[  111.045003][   T61] Buffer I/O error on device sda1, logical block 141314
[  111.052362][  T463] device offline error, dev sda, sector 1114750 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  111.062976][   T61] Buffer I/O error on device sda1, logical block 141315
[  111.070123][   T61] Buffer I/O error on device sda1, logical block 141316
[  111.077177][   T61] Buffer I/O error on device sda1, logical block 141317
[  111.084234][   T61] Buffer I/O error on device sda1, logical block 141318
[  111.091389][   T61] device offline error, dev sda, sector 1138998 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  111.101948][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 142374)
[  111.113559][   T61] Buffer I/O error on device sda1, logical block 142336
[  111.120551][   T61] Buffer I/O error on device sda1, logical block 142337
[  111.127572][   T61] Buffer I/O error on device sda1, logical block 142338
[  111.134579][   T61] device offline error, dev sda, sector 1143094 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  111.145161][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2034 starting block 142886)
[  111.156843][   T61] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  111.167859][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143398)
[  111.179524][   T61] device offline error, dev sda, sector 1147694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  111.190310][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143461)
[  111.202008][   T61] device offline error, dev sda, sector 1155374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  111.212970][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144421)
[  111.225084][   T61] device offline error, dev sda, sector 1159390 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  111.235941][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144923)
[  111.247814][   T61] device offline error, dev sda, sector 1175838 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2
[  111.258470][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 146979)
[  111.270191][   T61] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  111.280844][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 149542)
[  111.292624][   T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 149605)
[  111.304664][  T461] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2036, error -5)
[  111.325510][   T36] audit: type=1400 audit(1792456277.930:29493): avc:  denied  { read } for  pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  111.358569][ T2807] Buffer I/O error on dev sda1, logical block 0, lost async page write
[  111.358623][   T74] Aborting journal on device sda1-8.
[  111.377295][ T2807] Buffer I/O error on dev sda1, logical block 129, lost async page write
[  111.385703][   T74] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  111.394449][   T74] JBD2: I/O error when updating journal superblock for sda1-8.
[  111.394702][ T2807] Buffer I/O error on dev sda1, logical block 137, lost async page write
[  111.413091][   T36] audit: type=1400 audit(1792456277.930:29494): avc:  denied  { search } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.455537][ T2807] Buffer I/O error on dev sda1, logical block 224, lost async page write
[  111.479016][   T36] audit: type=1400 audit(1792456277.930:29495): avc:  denied  { write } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.502940][ T2807] Buffer I/O error on dev sda1, logical block 273, lost async page write
[  111.515771][ T2807] Buffer I/O error on dev sda1, logical block 8212, lost async page write
[  111.524368][ T2807] Buffer I/O error on dev sda1, logical block 8213, lost async page write
[  111.531686][   T36] audit: type=1400 audit(1792456277.930:29496): avc:  denied  { add_name } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.556072][ T2807] Buffer I/O error on dev sda1, logical block 23725, lost async page write
[  111.568074][ T2807] Buffer I/O error on dev sda1, logical block 32768, lost async page write
[  111.579236][   T36] audit: type=1400 audit(1792456277.930:29497): avc:  denied  { create } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  111.634864][ T2807] EXT4-fs (sda1): shut down requested (2)
[  111.693977][ T2807] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  111.773930][ T2818] FAULT_INJECTION: forcing a failure.
[  111.773930][ T2818] name failslab, interval 1, probability 0, space 0, times 0
[  111.797237][ T2818] CPU: 0 UID: 0 PID: 2818 Comm: syz.5.823 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[  111.797274][ T2818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  111.797287][ T2818] Call Trace:
[  111.797309][ T2818]  <TASK>
[  111.797317][ T2818]  __dump_stack+0x21/0x30
[  111.797355][ T2818]  dump_stack_lvl+0x140/0x1c0
[  111.797384][ T2818]  ? __cfi_dump_stack_lvl+0x10/0x10
[  111.797418][ T2818]  dump_stack+0x19/0x20
[  111.797444][ T2818]  should_fail_ex+0x3c2/0x510
[  111.797469][ T2818]  should_failslab+0xac/0x100
[  111.797489][ T2818]  kmem_cache_alloc_node_noprof+0x45/0x420
[  111.797516][ T2818]  ? __alloc_skb+0x10c/0x360
[  111.797540][ T2818]  ? add_uevent_var+0x288/0x470
[  111.797560][ T2818]  __alloc_skb+0x10c/0x360
[  111.797577][ T2818]  ? __kasan_check_write+0x18/0x20
[  111.797607][ T2818]  alloc_uevent_skb+0x85/0x240
[  111.797628][ T2818]  kobject_uevent_net_broadcast+0x356/0x5e0
[  111.797652][ T2818]  kobject_uevent_env+0x551/0x7e0
[  111.797678][ T2818]  kobject_uevent+0x21/0x40
[  111.797698][ T2818]  gadget_bind_driver+0x5e2/0x9c0
[  111.797718][ T2818]  ? __cfi_gadget_bind_driver+0x10/0x10
[  111.797741][ T2818]  really_probe+0x2e1/0x8b0
[  111.797766][ T2818]  __driver_probe_device+0x193/0x280
[  111.797790][ T2818]  driver_probe_device+0x54/0x3f0
[  111.797819][ T2818]  __driver_attach+0x422/0x5e0
[  111.797843][ T2818]  bus_for_each_dev+0x246/0x2d0
[  111.797861][ T2818]  ? __cfi___driver_attach+0x10/0x10
[  111.797889][ T2818]  ? __cfi_bus_for_each_dev+0x10/0x10
[  111.797907][ T2818]  ? __kasan_kmalloc+0x96/0xb0
[  111.797925][ T2818]  ? _raw_spin_unlock+0x45/0x60
[  111.797948][ T2818]  ? klist_add_tail+0x1dd/0x220
[  111.797973][ T2818]  driver_attach+0x46/0x50
[  111.797996][ T2818]  bus_add_driver+0x393/0x730
[  111.798021][ T2818]  driver_register+0x2b7/0x3c0
[  111.798047][ T2818]  usb_gadget_register_driver_owner+0xfc/0x270
[  111.798080][ T2818]  raw_ioctl+0x144c/0x37a0
[  111.798106][ T2818]  ? __cfi_raw_ioctl+0x10/0x10
[  111.798130][ T2818]  ? selinux_file_ioctl+0x732/0x1480
[  111.798161][ T2818]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  111.798190][ T2818]  ? __fget_files+0x2bc/0x330
[  111.798212][ T2818]  ? bpf_lsm_file_ioctl+0xd/0x20
[  111.798235][ T2818]  ? security_file_ioctl+0x3e/0x110
[  111.798259][ T2818]  ? __cfi_raw_ioctl+0x10/0x10
[  111.798285][ T2818]  __se_sys_ioctl+0x126/0x1b0
[  111.798313][ T2818]  __x64_sys_ioctl+0x7f/0xa0
[  111.798332][ T2818]  x64_sys_call+0x1878/0x2ee0
[  111.798356][ T2818]  do_syscall_64+0x57/0xf0
[  111.798373][ T2818]  ? clear_bhb_loop+0x50/0xa0
[  111.798397][ T2818]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  111.798423][ T2818] RIP: 0033:0x7f074e79e1eb
[  111.798441][ T2818] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  111.798458][ T2818] RSP: 002b:00007f074f5bbf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.798484][ T2818] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f074e79e1eb
[  111.798500][ T2818] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  111.798513][ T2818] RBP: 00007f074f5bcfd0 R08: 0000000000000001 R09: 00000000ffffffff
[  111.798527][ T2818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.798539][ T2818] R13: 0000200000000280 R14: 0000000000000001 R15: 0000000000000000
[  111.798558][ T2818]  </TASK>
[  112.229227][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  112.229244][   T36] audit: type=1400 audit(1792456278.840:29501): avc:  denied  { create } for  pid=2824 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  112.265676][  T427] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  112.373617][   T36] audit: type=1400 audit(1792456278.980:29502): avc:  denied  { execute } for  pid=2824 comm="syz.1.825" path="/dev/syzrnull" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1
[  112.423167][  T427] usb 6-1: unable to get BOS descriptor or descriptor too short
[  112.431596][  T427] usb 6-1: config 24 has no interfaces?
[  112.441300][  T427] usb 6-1: string descriptor 0 read error: -22
[  112.447586][  T427] usb 6-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17
[  112.456834][  T427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.715519][    T9] usb 6-1: USB disconnect, device number 14
[  112.747152][ T1288] usb 3-1: USB disconnect, device number 58
[  112.885932][  T427] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  113.046035][  T427] usb 7-1: no configurations
[  113.051206][  T427] usb 7-1: can't read configurations, error -22
[  113.092261][   T36] audit: type=1400 audit(1792456279.700:29503): avc:  denied  { mounton } for  pid=2867 comm="syz.2.837" path="/213/config" dev="configfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  113.145879][   T36] audit: type=1326 audit(1792456279.760:29504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2881 comm="syz.2.838" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f390e39e559 code=0x0
[  113.186963][  T427] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  113.308705][   T36] audit: type=1400 audit(1792456279.920:29505): avc:  denied  { mount } for  pid=2886 comm="syz.5.840" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  113.346065][  T427] usb 7-1: no configurations
[  113.350817][  T427] usb 7-1: can't read configurations, error -22
[  113.368576][   T36] audit: type=1400 audit(1792456279.980:29506): avc:  denied  { create } for  pid=2886 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  113.369454][  T427] usb usb7-port1: attempt power cycle
[  113.445020][   T36] audit: type=1400 audit(1792456280.050:29507): avc:  denied  { unmount } for  pid=2052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  113.570106][ T2891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2891 comm=syz.5.842
[  113.702664][   T36] audit: type=1400 audit(1792456280.310:29508): avc:  denied  { connect } for  pid=2895 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  113.735678][  T427] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  113.776123][  T427] usb 7-1: no configurations
[  113.780797][  T427] usb 7-1: can't read configurations, error -22
[  113.792917][ T2901] netlink: 300 bytes leftover after parsing attributes in process `syz.5.846'.
[  113.805640][   T36] audit: type=1400 audit(1792456280.400:29509): avc:  denied  { setopt } for  pid=2902 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  113.911322][ T2918] ip6gre0: mtu less than device minimum
[  113.917118][  T427] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  113.937754][  T427] usb 7-1: no configurations
[  113.945646][  T427] usb 7-1: can't read configurations, error -22
[  113.952228][  T427] usb usb7-port1: unable to enumerate USB device
[  113.993689][ T2931] netlink: 300 bytes leftover after parsing attributes in process `syz.2.857'.
[  114.085688][  T311] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  114.107429][ T2947] Bluetooth: ISO socket layer initialized
[  114.236883][  T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.246792][  T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  114.257380][  T311] usb 1-1: Dual-Role OTG device on HNP port
[  114.263507][  T311] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.12
[  114.272783][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.275756][  T427] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  114.281003][  T311] usb 1-1: SerialNumber: 1234
[  114.294307][    C1] ------------[ cut here ]------------
[  114.299792][    C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[  114.306575][    C1] WARNING: CPU: 1 PID: 0 at drivers/usb/gadget/udc/core.c:134 usb_ep_enable+0x210/0x3c0
[  114.316490][    C1] Modules linked in:
[  114.320834][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed
[  114.332310][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  114.342557][    C1] RIP: 0010:usb_ep_enable+0x210/0x3c0
[  114.347974][    C1] Code: 4d 00 48 c7 c0 60 a0 6d 86 49 c7 c0 80 a0 6d 86 4c 0f 44 c0 48 c7 c7 20 a0 6d 86 48 c7 c6 b2 37 1f 87 44 89 f2 e8 e0 ba 48 fd <0f> 0b e9 4c ff ff ff e8 e4 bb cd fd 49 bc 00 00 00 00 00 fc ff df
[  114.367842][    C1] RSP: 0018:ffffc90000230878 EFLAGS: 00010046
[  114.373907][    C1] RAX: bd6360fdca0ac800 RBX: ffff8881053c40b0 RCX: ffff88810366bb40
[  114.381870][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  114.389934][    C1] RBP: ffffc900002308a0 R08: ffff8881f6d29593 R09: 1ffff1103eda52b2
[  114.397995][    C1] R10: dffffc0000000000 R11: ffffed103eda52b3 R12: dffffc0000000000
[  114.405976][    C1] R13: ffff8881053c40b8 R14: 0000000000000081 R15: ffff88812d3222ba
[  114.413955][    C1] FS:  0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000
[  114.422968][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  114.429674][    C1] CR2: 0000200000001140 CR3: 000000011f2b2000 CR4: 00000000003526b0
[  114.437758][    C1] Call Trace:
[  114.441037][    C1]  <IRQ>
[  114.443887][    C1]  hidg_set_alt+0x138/0xa70
[  114.448407][    C1]  set_config+0x812/0xd10
[  114.452843][    C1]  composite_setup+0x18b0/0x3320
[  114.457823][    C1]  ? __kasan_check_write+0x18/0x20
[  114.462977][    C1]  configfs_composite_setup+0xc6/0x110
[  114.468448][    C1]  dummy_timer+0x2eee/0x4900
[  114.473045][    C1]  ? kvm_sched_clock_read+0x15/0x30
[  114.478306][    C1]  ? __kasan_check_read+0x15/0x20
[  114.483460][    C1]  ? __cfi_dummy_timer+0x10/0x10
[  114.488418][    C1]  ? __napi_poll+0x10f/0x600
[  114.493010][    C1]  ? timerqueue_del+0xd7/0x130
[  114.497776][    C1]  ? __hrtimer_run_queues+0x2bd/0x8e0
[  114.503148][    C1]  ? __cfi_dummy_timer+0x10/0x10
[  114.508101][    C1]  __hrtimer_run_queues+0x3ab/0x8e0
[  114.513319][    C1]  ? hrtimer_interrupt+0xf30/0xf30
[  114.518431][    C1]  ? read_tsc+0xd/0x20
[  114.522550][    C1]  ? ktime_get_update_offsets_now+0x3c0/0x3e0
[  114.528718][    C1]  hrtimer_run_softirq+0x159/0x560
[  114.533890][    C1]  ? irqtime_account_irq+0x51/0x1c0
[  114.539154][    C1]  handle_softirqs+0x1aa/0x5b0
[  114.543928][    C1]  __irq_exit_rcu+0x47/0xb0
[  114.548442][    C1]  irq_exit_rcu+0xd/0x30
[  114.552682][    C1]  sysvec_apic_timer_interrupt+0x82/0x90
[  114.558315][    C1]  </IRQ>
[  114.561276][    C1]  <TASK>
[  114.564215][    C1]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  114.570223][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  114.575961][    C1] Code: cc cc cc cc cc cc cc b8 61 b5 ef ad 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 09 3f 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
[  114.586758][  T427] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.595654][    C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2
[  114.595683][    C1] RAX: ffff8881f6d00000 RBX: ffff88810366bb40 RCX: ffffffff85a8553d
[  114.595699][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000001ee6ac
[  114.595712][    C1] RBP: ffffc900001a7e00 R08: ffff8881f6d396fb R09: 1ffff1103eda72df
[  114.595726][    C1] R10: dffffc0000000000 R11: ffffed103eda72e0 R12: 0000000000000000
[  114.595741][    C1] R13: 1ffff110206cd768 R14: dffffc0000000000 R15: ffffffff886da468
[  114.606181][  T427] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  114.612126][    C1]  ? ct_kernel_exit+0x7d/0xb0
[  114.612165][    C1]  default_idle+0x17/0x30
[  114.622802][  T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.628611][    C1]  arch_cpu_idle+0xd/0x20
[  114.628645][    C1]  default_idle_call+0x3e/0x80
[  114.638137][  T427] usb 3-1: config 0 descriptor??
[  114.644948][    C1]  do_idle+0x2fc/0x570
[  114.644982][    C1]  ? idle_inject_timer_fn+0x80/0x80
[  114.654502][  T427] usb 3-1: unsupported MDLM descriptors
[  114.662576][    C1]  cpu_startup_entry+0x47/0x60
[  114.662611][    C1]  start_secondary+0x12e/0x140
[  114.662636][    C1]  common_startup_64+0x13b/0x157
[  114.723745][    C1]  </TASK>
[  114.726763][    C1] ---[ end trace 0000000000000000 ]---
[  114.732238][    C1] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED!
[  114.740162][  T311] usb 1-1: can't set config #1, error -32
[  114.863272][ T2936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.871847][ T2936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.880203][  T427] usb 3-1: USB disconnect, device number 59