last executing test programs:

48.648580162s ago: executing program 0 (id=30):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0xffff, 0x25dfdbfc, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0xb6}, {@in6=@private1, 0xfe, 0x32}, @in6=@private2, {0xc00000, 0xffffffffffffffff, 0xfffffffffffffffd, 0x8, 0xff, 0x9, 0x9}, {0x9, 0x5, 0x3, 0xfffffffffffffffc}, {0x3}, 0x70bd30, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x6e20, @in=@empty}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "21046821a8d9aa540db9a200000000c538c7cb7e"}}]}, 0x16c}}, 0x4c0c4)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8811}, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14)
mount$cgroup2(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000300), 0x4006, &(0x7f0000000480)={[{@memory_recursiveprot}]})

48.620735345s ago: executing program 0 (id=31):
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
syz_open_dev$usbfs(&(0x7f0000000280), 0x100, 0x2a0200)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000402505a1a440001e0001010902ef000101000003090400fc0202060000052406000005240000000d240f01000000000000000000090581032000020b0009058202bf01000000090503020002020100"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/priority\x00', 0x2, 0x0)
write$nsim_port_qreset(r2, &(0x7f0000000240)={0x30, 0x20, 0x30}, 0x3)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
lstat(&(0x7f0000000380)='./sys/class/net/bridge0/bridge/priority\x00', &(0x7f00000003c0))
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
move_mount(r5, &(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x274)
ioctl(r0, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003")

47.719896556s ago: executing program 0 (id=34):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d80), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x100000)
pwritev(r0, &(0x7f0000000fc0)=[{&(0x7f0000001000)='\x00!', 0x2}], 0x1, 0x2000007, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)

47.668290282s ago: executing program 0 (id=35):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = creat(&(0x7f0000000240)='./file0\x00', 0xd931d3864d39dcdb)
r2 = open(&(0x7f0000000280)='./file0\x00', 0x800, 0x10e)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x9})
mknodat(r0, &(0x7f00000001c0)='./debug/tracing/options/context-info\x00', 0x10, 0x2)
quotactl$Q_QUOTAON(0x80000600, &(0x7f0000000200)=@filename='./debug/tracing/options/context-info\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
r3 = syz_open_dev$loop(&(0x7f0000000180), 0x75f, 0xa8182)
sendfile(r3, r3, 0x0, 0x24002de8)

47.666713212s ago: executing program 0 (id=36):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = getpid()
ioprio_set$pid(0x3, r0, 0x0) (async)
ioprio_set$pid(0x3, r0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
eventfd2(0x8, 0x400)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000002e40)='./debug\x00', &(0x7f0000002e80)='debugfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000002e40)='./debug\x00', &(0x7f0000002e80)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002ec0)='./debug/split_huge_pages\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002f00)='test_file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000002f40), 0x2000000) (async)
write(r2, &(0x7f0000002f40), 0x2000000)
mount(0x0, 0x0, 0x0, 0x4000, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x200210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x200210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair(0x5, 0x1, 0x0, 0x0)
getpid() (async)
r3 = getpid()
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, 0x0, 0x0)
r5 = syz_pidfd_open(r3, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0xfffe, 0x0) (async)
mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0xfffe, 0x0)
write(r1, &(0x7f0000002f80)='/proc/self/cwd/test_file,0x0,0x10', 0x21) (async)
write(r1, &(0x7f0000002f80)='/proc/self/cwd/test_file,0x0,0x10', 0x21)

47.49003653s ago: executing program 0 (id=37):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f0000000b40)={'bridge_slave_0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x3}}, 0x26)
getsockopt(r2, 0x111, 0x5, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000002c0)=""/74, 0x0})
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net/eth0/dev_port\x00', 0x0, 0x0)
read(r4, &(0x7f0000000640)=""/64, 0x40)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003cc0)={0xa, 0x0, [{0xe000, 0x58, &(0x7f0000000680)=""/88}, {0x4000, 0xfc, &(0x7f0000000700)=""/252}, {0x1ffc, 0x96, &(0x7f0000000800)=""/150}, {0xc000, 0x1000, &(0x7f0000000b80)=""/4096}, {0xffff1000, 0x1008, &(0x7f0000003e40)=""/4104}, {0xa000, 0x5f, &(0x7f0000002b80)=""/95}, {0x50000, 0x28, &(0x7f0000002c00)=""/40}, {0xfff9bfff, 0x2d, &(0x7f0000002c40)=""/45}, {0x6000, 0x1000, &(0x7f0000002c80)=""/4096}, {0xdddd1000, 0x40, &(0x7f0000000340)=""/64}]})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/182, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480)=0x1)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000004c0)={0x0, 0x1})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x438001, 0x10)
r6 = syz_create_resource$futex(0x0)
futex(0x0, 0x0, 0x1, 0x0, 0x0, 0x1)
futex(0x0, 0x0, 0x1, 0x0, r6, 0x0)
write$tun(r5, &(0x7f0000000500)=ANY=[], 0x1001)

32.226737385s ago: executing program 32 (id=37):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f0000000b40)={'bridge_slave_0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x3}}, 0x26)
getsockopt(r2, 0x111, 0x5, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000002c0)=""/74, 0x0})
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/net/eth0/dev_port\x00', 0x0, 0x0)
read(r4, &(0x7f0000000640)=""/64, 0x40)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003cc0)={0xa, 0x0, [{0xe000, 0x58, &(0x7f0000000680)=""/88}, {0x4000, 0xfc, &(0x7f0000000700)=""/252}, {0x1ffc, 0x96, &(0x7f0000000800)=""/150}, {0xc000, 0x1000, &(0x7f0000000b80)=""/4096}, {0xffff1000, 0x1008, &(0x7f0000003e40)=""/4104}, {0xa000, 0x5f, &(0x7f0000002b80)=""/95}, {0x50000, 0x28, &(0x7f0000002c00)=""/40}, {0xfff9bfff, 0x2d, &(0x7f0000002c40)=""/45}, {0x6000, 0x1000, &(0x7f0000002c80)=""/4096}, {0xdddd1000, 0x40, &(0x7f0000000340)=""/64}]})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/182, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480)=0x1)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000004c0)={0x0, 0x1})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x438001, 0x10)
r6 = syz_create_resource$futex(0x0)
futex(0x0, 0x0, 0x1, 0x0, 0x0, 0x1)
futex(0x0, 0x0, 0x1, 0x0, r6, 0x0)
write$tun(r5, &(0x7f0000000500)=ANY=[], 0x1001)

27.693930207s ago: executing program 4 (id=155):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mkdirat(r1, &(0x7f0000004780)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000047c0)='./file1\x00', 0x81) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000047c0)='./file1\x00', 0x81)
memfd_create(&(0x7f0000000200)='/dev/sda1\x00', 0x0) (async)
memfd_create(&(0x7f0000000200)='/dev/sda1\x00', 0x0)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000b)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004840), 0x28000, 0x0)
ioctl$FIBMAP(r2, 0x5309, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000004880), 0x0, 0x0)
ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000048c0)=""/100)
mkdirat(0xffffffffffffff9c, &(0x7f0000004940)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000004980)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f00000049c0)='.\x00', &(0x7f0000004a00)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000004a40)='./bus\x00', &(0x7f0000000140), 0x40, &(0x7f00000002c0)={[{@uuid_off}], [{@euid_gt}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) (async)
mount$overlay(0x0, &(0x7f0000004a40)='./bus\x00', &(0x7f0000000140), 0x40, &(0x7f00000002c0)={[{@uuid_off}], [{@euid_gt}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) (async)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$evdev(0x0, 0xb7e, 0x0) (async)
syz_open_dev$evdev(0x0, 0xb7e, 0x0)
chdir(&(0x7f0000004b40)='./bus\x00') (async)
chdir(&(0x7f0000004b40)='./bus\x00')
chdir(&(0x7f0000004b80)='./file0\x00') (async)
chdir(&(0x7f0000004b80)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003480)=ANY=[@ANYBLOB="1c0000005e00010628c794d68abd4e6c0a0c963a21cf022abd"], 0x1c}], 0x1, 0x0, 0x0, 0x240400c5}, 0x0)
r6 = dup2(r5, r5)
recvmsg$inet_nvme(r6, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x62)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c035000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x68}], 0x1, 0x5c, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c035000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x68}], 0x1, 0x5c, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000d1e000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003500), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r4, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x19}, 0x800}], 0x1, 0x36000, 0x0)

27.608385056s ago: executing program 4 (id=156):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0xc, 0x0, 0xfec00000}) (async)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000000)=[@wr_crn={0x67, 0x20, {0x2, 0x3}}, @in_dx={0x69, 0x20, {0x21c1}}, @rdmsr={0x66, 0x18, {0xb70}}, @cpuid={0x64, 0x18, {0x1, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}, @uexit={0x0, 0x18, 0xb6}, @nested_load_syzos={0x136, 0x90, {0x1, 0xb177, [@code={0xa, 0x70, {"66ba61330c0ca8a3a589ef66bafc0cb000eec744240019000000c744240200100000ff1c2466b801008ed0f2670f32660fc734e7440f3048b88b62feef80c8de4a0f23d80f21f835c00000b00f23f80fc7f035100000000f22e0f3f20f01f8"}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x36, 0xa, 0xfffffffffffffc01, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x0, 0x12, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0x103}}], 0x1e8})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

27.47808523s ago: executing program 4 (id=158):
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
flock(r0, 0x2) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4, 0x2}}, 0x10) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x2, 0x0, 0x98, &(0x7f0000000240)={0x3ffffe, 0x100000003, 0x80a}}) (async)
r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRES32], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async, rerun: 32)
r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) (rerun: 32)
ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f00000000c0)=0xb8526d264e111795)

26.954288313s ago: executing program 4 (id=160):
socket(0x10, 0x803, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc) (async, rerun: 32)
socket$inet(0x2, 0x2, 0x1) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$key(0xf, 0x3, 0x2) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0x10, 0x3, 0x0) (async)
dup(r2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000240)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r3) (async)
syz_ublk_add_dev(r0, 0x0, r1, 0x0, 0x0, &(0x7f0000000340))

26.893191359s ago: executing program 4 (id=162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/bus/pci/00/00.0\x00', 0x2, 0x1fa)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x11, r1, 0x1ff0e000)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x20000000)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x40000082, 0x0, 0x7fffffffffffffff}]})
r6 = socket$inet6(0xa, 0x800, 0x1)
setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000140), 0x4)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000000)={0x4, {{0xa, 0x4e23, 0xa, @remote, 0x6}}, {{0xa, 0x4e22, 0x0, @remote, 0x4}}}, 0x108)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0)

26.777885041s ago: executing program 4 (id=165):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000040)='ext3\x00', 0x8, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x62c40, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/mtrr\x00', 0x2, 0x0) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000600)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000b00)) (async)
io_setup(0x81, &(0x7f00000000c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0xb, r0, 0x0, 0x0, 0x2000000000}]) (async)
chdir(&(0x7f0000000640)='./mnt\x00')
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@remote}}, {{@in6=@private0}, 0x0, @in=@remote}}, 0xffffffffffffffff) (async)
rename(&(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='./mnt\x00')
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$DM_GET_TARGET_VERSION(r4, 0xc138fd11, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 'zero\x00'}}) (async)
r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r6=>0x0, {'syz', 0x0, '0\x00'}}})
ioctl$DM_DEV_SET_GEOMETRY(r4, 0xc138fd0f, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x131, 0x138, 0x0, 0x0, 0x24e10, 0x0, 0x0, @by_dev={r6}, {0x230, 0x20, 0x6, 0x20, 0x2a, 0x20, 0x1176}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/dir\x00', 0x1ff)

11.280092971s ago: executing program 33 (id=165):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000040)='ext3\x00', 0x8, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x62c40, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/mtrr\x00', 0x2, 0x0) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000600)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000b00)) (async)
io_setup(0x81, &(0x7f00000000c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0xb, r0, 0x0, 0x0, 0x2000000000}]) (async)
chdir(&(0x7f0000000640)='./mnt\x00')
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@remote}}, {{@in6=@private0}, 0x0, @in=@remote}}, 0xffffffffffffffff) (async)
rename(&(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='./mnt\x00')
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$DM_GET_TARGET_VERSION(r4, 0xc138fd11, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 'zero\x00'}}) (async)
r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r6=>0x0, {'syz', 0x0, '0\x00'}}})
ioctl$DM_DEV_SET_GEOMETRY(r4, 0xc138fd0f, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x131, 0x138, 0x0, 0x0, 0x24e10, 0x0, 0x0, @by_dev={r6}, {0x230, 0x20, 0x6, 0x20, 0x2a, 0x20, 0x1176}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/dir\x00', 0x1ff)

10.345889346s ago: executing program 3 (id=272):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x149202, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0xfffffffe, 0x1}, 0x8) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async)
close(r1)
r2 = landlock_create_ruleset(&(0x7f0000000280)={0x840, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0xd)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000640)=""/75, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000006c0)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/87, 0x0}) (async)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x0, 0x24, &(0x7f00000007c0)=""/36}]}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000800)=0x1)
getrusage(0xffffffffffffffff, &(0x7f00000001c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x3ffffffe]}, 0x8, 0x80800) (async)
rt_sigprocmask(0x0, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) (async)
r7 = getpgrp(0x0)
r8 = gettid()
rt_tgsigqueueinfo(r7, r8, 0xb, &(0x7f0000000380)={0x3c, 0x8, 0x1})
readv(r6, &(0x7f0000000400)=[{&(0x7f0000000500)=""/221, 0xdd}], 0x1) (async)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r5, 0x4068aea3, &(0x7f0000000480)={0xcc, 0x0, 0x4}) (async)
recvfrom$binder_report(0xffffffffffffffff, &(0x7f00000000c0)={""/44, 0x0, ""/12, <r9=>0x0}, 0x80, 0x120, 0x0, 0x0)
waitid(0x2, r9, 0x0, 0x1, 0x0)

10.222193948s ago: executing program 3 (id=273):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x848, 0x103)
mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x809002, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

10.20472491s ago: executing program 1 (id=275):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f00000001c0)="84", 0x1, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20}, 0x10)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x380, 0x0, 0x0, 0x0, 0x0, 0x1b96, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x88, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0xbcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x2, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x1c8, 0x3, 0x0, 0x2, 0x8, 0xc0}, 0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f6a000314100406afd9747ab5c8dca8d84fd2d250320500000a1003000a000c010500"], 0x3, [{0x4a, &(0x7f0000000100)=@string={0x4a, 0x3, "608e6aa994134ba0d95bb18a02379fcb779e2ce27154c9ecea4d56c4e4e398114413633c8b766ed4591eb980d7e7dfc5b643bb8515ad86561d097463d4e50ae8513c8ab7586842a2"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc07}}]})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000000))
recvfrom$inet(r0, 0x0, 0x0, 0x40010063, 0x0, 0x0)

9.042567669s ago: executing program 3 (id=280):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/193, 0xc1}], 0x1)
preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1, 0x64, 0x4000000)
socket$packet(0x11, 0x0, 0x300)

8.993812644s ago: executing program 3 (id=281):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000080)=0x80)
getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}, 0x100, 0xd0d, 0x6})
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x301, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x8080)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x45}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x20000000)
pipe(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000580))
r6 = socket$inet6(0xa, 0x4, 0x4)
sendmsg(r6, &(0x7f0000000c40)={&(0x7f0000000600)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)="268b902d975f84081f9cd462d7ea9290c4342d0a232337b26c19036037b07a05e4807919df6e5407d5bcb0218bc39952200702356b2a78c414dcab965c43c13203c900d667217628388a5931d36e95d3deacd6720190341c4b05eb732d403876e9e4088189037c8aa91ea6b05b5db0100ec3ac19e9e4f937f51e9c8fb89be987e21d1b912bff316be19be633960efef864bac624fffb06177ad75e81a687e9230914610d5c13b6dbc44ac59f3239e2c966e6c283a84b050ece45b4bb443b22f5511b60905792b33f4ea1dcbb002591b9f052e99afa06c7e0db3826893fc89ce21e8fffcd8f7788efbe1daa07e57a2e803c", 0xf1}, {&(0x7f0000000780)="f3541fb22ca34b5f3a1207438d2e1cfdc0b0600e23b4a4a4fa8aa7e1777c53910d4652f2f9f7bbc19c9ee2d6c9b6081c2667574c9858df2f29ef5553585640c9a0f1a1c4c63fc2ad25e9f4a3477bcbda7b8bda80eac51b0339549ca8f15d9d7dc5b8931f7795dbb6ee1667c578fc7b8072bb2739c07c133c115602e91c03da2aa8bfb0f989c5a6ad56cb16e618b5077393fda28813651987dee4f9", 0x9b}, {&(0x7f0000000840)="2e295e7478abbe690571168e544f882c916c719749ada28baf0ca62bc64cb4aebe8a64b1c83537f0c4d558863e3069c6d49fc3ce5b784df720514c7aba0d71e07dbdb14acb43776b556b2939a9d5200e21f094d4e6769cfe8f83c5dfc86fecc53d04ed34b4e1976f4bdba978eaa997365de5451d1b431cb104119b087a7f117ded0f53ffa5322c0fb845ab4cf7d71d611f2fe10326ecc7fc37098233dce39c0380f29a85be203dd35adfab6970df76f4c159", 0xb2}, {&(0x7f0000000900)="abb8bf9927a15d3ca25c5ad4d6b69b22d9335a0a0d82ca45c333828a34dc4ac1b3bc4bf7b2a080a72cf9a5079fa3a96e9452c4dc4bec8c5ce769951db998fcc686b639e63171ef1d37ed1aeb729d0bc1b765bffc75ca9f16fd97d588", 0x5c}, {&(0x7f0000000980)="9db136189ad9e0ab6132fc5e9f92fda5b395b38dffdd4ddfa1b030bc30478de13c7253dea0203208964df316e0bd83bc065097ea86d9ec36019d2b8c72a8bde2b5acdf5d9feb7928310d8fe73320ec9beb604dfa80360baf02d1844dd29918a310792b5c0f7d158b41508f5aba06314b2bea89d06d484dbdfdcc9a720e44a2063ef3d309cbb96a3d05e82a07fb1936a8e30224ee8676d11f15fa729bd10f6923757c3ee7da405ad9e9ad15dd90b4adc99d884f041fd43aa8a1cad07957958616a9468dd7ff059729acbd408614987b2f3dbbaa780c", 0xd5}, {&(0x7f0000000a80)="5670e201c12d06fbf606ed32f3063b42e0b43eaa5fbdab39c18dc678e70c1b659264b2b9f566fe788cac7c81c235c96748085a34534e4edef4154611cf89ef4770d92f77de114e25df7411c6ca113350c8bdb40be6d8063edac537fa8bf6ec49efae02fb8974bb26451ab5b07165bde504d64f59b6d11d368e7415e5cfb579cd77ba", 0x82}, {&(0x7f0000000b40)="a4b836488eecfd072661d1fcb77f42d8364be0d94769f032670353bbab1664f97dd58cc379e2a921b9c307cb6ead172fc08e6d49b65f2974f4f2141226f64bf790ee1c1e8000b4724b569a8f02c0afa0be441e", 0x53}], 0x7}, 0x8000)
preadv(r5, &(0x7f0000002080)=[{&(0x7f0000000c80)=""/220, 0xdc}, {&(0x7f0000000d80)=""/178, 0xb2}, {&(0x7f0000000e40)=""/137, 0x89}, {&(0x7f0000000f00)=""/43, 0x2b}, {&(0x7f0000000f40)=""/86, 0x56}, {&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x7, 0x3, 0x1)
mount$tmpfs(0x0, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140), 0x8, &(0x7f0000002180)={[{@mode={'mode', 0x3d, 0xfffffffffffffeff}}, {@size={'size', 0x3d, [0x714827077d55b6da]}}, {@inode32}, {@huge_within_size}, {@huge_never}], [{@subj_user={'subj_user', 0x3d, '-.'}}, {@dont_hash}]})
r7 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000002200)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x1, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000002240), r0)
ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000002280)={0x80})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000002340)={0x106, {{0xa, 0x4e21, 0xe00, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}, {{0xa, 0x4e21, 0x1, @private1, 0xd22e}}}, 0x108)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000002480), &(0x7f00000024c0)=0x4)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002540), r5)
sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x2c, r8, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000002b00)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002680)={0x418, 0x15, 0x4, 0x70bd29, 0x25dfdbfc, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "e45fd6cb3c296dd215f26007556b40641d7db1c4a6642cf44df97e4576ddb38e70b8975a8a09e52b4762796e3296be546ca00c28592c9ce7efa24ddd3dd0ff273edf9bd02ed55c39aef6d1b430ebf7eb027628e0ddc2e7fe0ea5cfc135385a8891a4f24d8a27b200fdae5f48a3aa4b6bdda37ef6920bd4ce3ff3f59bf4"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "bb94de5dc261ce241a74686a6a82a74c4ef710ec5628c995993b9c01209b640b2bcaa5ab76d51b4e81e5769640ab615f6a44482ed954169199fb897f465316f29dfb7d6e77c9ab6709bdffa5f4668aaeee3ddee8882f03b77b83342ee3de3941b0fad93ca9f80f857ae0feca889427109058be6996f1c1b0430c82bd26b4b1ddb57076eccab9961a867adb841dabfd"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "5f9c17e399e59eee75ca63f81bd5ef75e0bc37779d12a7eaa96e959f6a692eb9266b578ef1cc2fe0bae2e7ffcdc968223a2fc04e714c316d9acc43456a3c3367017aa7bf305a19cbd49e9c9fdd021406fcd95e5e69834ba853afe7072e3c11911972eb598129cf44310fd314d69147cc40b296990bf546dfcd93166abb08f73775b21891e670855745d7ae50d024839ce08ee21cec68c30a3100d4a5cc7a67a29853552a5e40d9ffc2b951240f3b434d9a41b9d5b2249e7f"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "8a98e3add742872a7a25dfe384075a502e7bd1e8650c12b39d2bebb7483c440db5da22ed31832e77897224f7a1ea111ae3c0981d7283622a61de263d9a352d9c470744a5349a2abbcfc276ffab766b30e3bf2bbc1a3f25f4005477e142bc515209282992907c07d290141f839ea0c142d245d53d2e03f6d163366ce15193cc37cb08a01e8e971aad759f40afbea44cbfa873cb1ff75883d7be45c02198"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "6d91f6b9f48c31d49a12617661d2d0e68612f882da556c2c21b221f1136147f47f92316939cba3197c8ae81eebf3ef2378294172c4326c55537c7d11055cde257233d46a7690760b2fae33ee6f25b20e75f7d320f14caece02ad46bf038cf53e7865ea8ee2338234ebfbc7f61c5feb6708c84cabf194fccd2c327b1747a757456682a1a914d3388ff6e213e2ef838af5716e16f9c5"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "3240f337d729b66d0de270b4f519da96b39b1310b2acaff299cfaf354c25ede95553b813c3e3389e7454d7de8eb9913d958dfc0238af0c707bd25a253c2f13f75e2bd8c40786813a85b3f718e84996c20ab902849ebaa509729fcb209cdaf216f8c778070fe202913d22c63410231ab4f0d3cabf84cce42f0861df359f69397ccaa41bf93b3d1404c4b2ba104e13207fea59359c76b4ce037d9aa7656f5dc1f4245152f569ca38599b8b90070bf2f25a80260c59b883d09d58b51fe325f236dd6fff003e25facf78fdf0367dbda21683d807d0cda7d41270e0d5c101154a55b7cfed53d59e"}]}, 0x418}, 0x1, 0x0, 0x0, 0x91}, 0x24044005)
write$rnull_attr(r5, &(0x7f0000002b40)='0', 0x1)
ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000002d80)={&(0x7f0000002b80)=0x3, 0xe5d6, &(0x7f0000002bc0)=[{}, {}], &(0x7f0000002d40)})
r9 = fcntl$dupfd(r6, 0x406, r0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r9, 0x80049367, &(0x7f0000002dc0)=0xf8)
r10 = syz_create_resource$binfmt(&(0x7f0000002e00)='./file0\x00')
execveat$binfmt(r4, r10, &(0x7f0000002f40)={[&(0x7f0000002e40)='TIPC\x00', &(0x7f0000002e80)='\\\x00', &(0x7f0000002ec0)='\x00', &(0x7f0000002f00)=']\x00']}, &(0x7f0000003080)={[&(0x7f0000002f80)='/sys/kernel/debug/netdevsim/netdevsim', &(0x7f0000002fc0)='SMC_PNETID\x00', &(0x7f0000003000)='udp:syz0\x00', &(0x7f0000003040)='hash\x00']}, 0x1000)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000030c0))
quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000003100)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000003140))

8.993290094s ago: executing program 3 (id=282):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x933, 0xfffffffd, 0x10000, 0xfffffffd})
write(r0, &(0x7f0000000380)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r2 = getpgid(0x0)
r3 = syz_pidfd_open(r2, 0x0)
pidfd_send_signal(r3, 0x21, 0x0, 0x4) (async)
pidfd_send_signal(r3, 0x21, 0x0, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000007040), 0x42, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000007040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000007080)='./file0\x00', &(0x7f00000070c0), 0x0, &(0x7f0000007100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

8.991703614s ago: executing program 3 (id=283):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x880) (async)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0xffffdfffffffffff, 0x800, 0x1}, 0x20) (async)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x17, 0x41, "80e312e40849b19e709fcbf3a85b667682baeac17b5d7131ba49c02158737b9ce299b2516ef35c62ed200ac35019d919534e4a1bb6c894b4a2cc0b2bd1b17f36f1"}, 0x0, 0x0, 0x0, 0x0})
setgid(0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000340)={0x20, 0xe, 0x2, "d9ba"}, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000140)={0x0, 0x1, 0x1, '_'}, 0x0, 0x0})

7.150114512s ago: executing program 1 (id=286):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1e, 0xa01, 0x2, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000680)={0x1, 0x0, [{0x5, 0x4, 0x0, 0x0, @sint={0x0, 0x400001}}]})

7.06796782s ago: executing program 1 (id=288):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0xfffffffffffffffa}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_complete(0x0, r0)
close_range(r1, r1, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1123102, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x1b) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2a, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0xfffd, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x4}, {@in=@multicast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0xfffffffffffffffd, 0x40000000000, 0x0, 0x2dcd, 0x3}, {}, {0x0, 0x4, 0x3}, 0x70bd25, 0x0, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000084}, 0x0)
r6 = dup(r4)
syz_ublk_setup_queues(r6, r3, 0x0, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdfffffff, 0x20, 0x0, 0x256}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) (async)
syz_usb_connect(0x3, 0xb3, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002ef02"], 0x0)

4.036824579s ago: executing program 1 (id=296):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)=""/244, 0xf4}, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
recvmmsg(r3, &(0x7f0000001440), 0x0, 0x40002003, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

3.182790326s ago: executing program 1 (id=303):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000fe800000000000000000000000000030", @ANYRES32=0x0, @ANYBLOB="75e157d1fad0144440aef053eb8666ef3da0c9e4cc5e9d2f9cff6a9ce4eea91121e4f11e49b7cf2c379f"], 0x20000}}], 0x1, 0x20048001)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="86e5a0752d9a578891d16be2183a56648e0dae6b887d760b3a8f6488392c1c55f4f3f03a93b2b504ecc36c0f9bdd33eae7af217d8cf4df634c19dcdffea8219a486950c1427ab1ecc53041f4e6f49380b379c766765a88b506a5c9249ab79d1bdebdad51ea0c73b36d74f11e35136e2da22f264eaaf16052c3c45b47bd0dd06f8baba65baac0ed5b53b003c667684fefc22f5e16847cc7781cea18162448315b", @ANYRES32=r2, @ANYRES16=r3], 0x0}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r4, 0x81044804, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r6=>0x0})
bind$can_raw(r5, &(0x7f0000000100)={0x1d, r6}, 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140), 0xf00)
close(r5)

1.3768658s ago: executing program 2 (id=312):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, r3, 0xc5})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000400)=0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000640)={0x2, 'vlan0\x00', {}, 0x6})
getsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000440))
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x57b0, 0x4, 0x7, 0x0, 0x4, 0x4, 0x6000, '\x00', 0x1})
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000a40)='./dev\x00', &(0x7f0000000780)='esdfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/sda\x00', 0x101042, 0x5)
ioctl(r6, 0x2284, 0x0)
ioctl(r2, 0x400452c8, &(0x7f0000000880)="8bfb59ba553866617822897ca1ff985b43388aa28da999391e16ad9cf53a0beb75a2")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$selinux_user(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27)
unshare(0x20480)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000000b6e5054f122aac00000500"/31])
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@allocspi={0x104, 0x16, 0x3, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x0, 0x6c}, @in6=@private0, {0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8}, {0x0, 0x0, 0x7b6a, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000800)='./dev\x00', 0x1800, &(0x7f00000008c0)={0x10007c, 0x8, 0xa0000, {r6}}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000000001010400000000000000000a0000004c0001802c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000000000000aa1c0002800500010006000000060002004e220000060003004e2200004c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb1c0002800500010006000000060002004e220000060003004e22000008000700000003e8200004801c000180050001"], 0xf0}}, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)={{0x2000, 0x30000, 0x8, 0x9, 0x3, 0x0, 0xa, 0x2d, 0x0, 0x30, 0x19}, {0x1, 0x3000, 0x4, 0xa, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0xf, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x1}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x4b, 0x9, 0x6, 0x80, 0x7, 0xe}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xc, 0x1, 0xfd}, {0x54000, 0xeeee0000, 0xc, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xeeef0000, 0x80a0000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0x30000, 0x2d}, {0x10000, 0x2}, 0x80000031, 0x0, 0x50000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x94, 0x8100]})

1.3761048s ago: executing program 1 (id=313):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x4010, 0x0)
close(0xffffffffffffffff)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x21c004, 0x0)
syz_usb_connect(0x0, 0x39, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c)
write(r1, &(0x7f0000000280)='27', 0x2)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007f9, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendto$inet(r3, &(0x7f00000003c0)="02", 0x1, 0x240400d1, 0x0, 0x0)
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
memfd_create(0x0, 0xa)
io_setup(0x1, &(0x7f00000038c0))
io_setup(0x1000, &(0x7f0000000040))
io_setup(0x4, &(0x7f0000003b00))
io_setup(0x800, &(0x7f0000000500))
io_setup(0x202, &(0x7f0000000200))

938.018975ms ago: executing program 2 (id=316):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') (async)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x6000000d}) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x10000002})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) (async)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000008280)=ANY=[@ANYBLOB="341700005600010601000000ffdbdf2507"], 0x1734}], 0x1, 0x0, 0x0, 0xea}, 0x0)

937.689475ms ago: executing program 2 (id=317):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) (async)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000240), 0x10) (async, rerun: 64)
sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000e608"], 0x80}}, 0x0) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1a1740, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000500)={0x0, &(0x7f0000000680)=[@rdmsr={0x66, 0x18, {0x40000099}}], 0x18})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x5, 0x40, 0x7fff, {0x0, 0x2710}, {}, {0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x2, 0x2, 0x0, 0x0, "b9b817681d225b37"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x240048c0)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00800081c974977a8aaae43900010000003be48ba83f9e60e34ce3e40000000000"], 0x48}, 0x2}, 0x800)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async)
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async)
capset(0x0, 0x0) (async, rerun: 64)
r9 = memfd_secret(0x80000) (rerun: 64)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r9, 0x0) (async)
mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) (async)
r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r10, &(0x7f0000000200)='100', 0x3) (async, rerun: 64)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) (async)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, 0x0}], 0x1, 0x69, 0x0, 0x0)

369.899213ms ago: executing program 5 (id=324):
syz_open_dev$hiddev(&(0x7f0000002600), 0xa, 0x62080)

369.000623ms ago: executing program 5 (id=325):
mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x2201, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000dc0)={0x10c, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]})

209.836279ms ago: executing program 5 (id=326):
r0 = open(0x0, 0x20000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="f30fbdae0d000000cd0fbbcfcf3e0f79df670f01d1650f2ea6846a0000c4c161ef46c8b9810200000f32260f01c30f35", 0x30}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x8000000000000000)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100, 0x4, 0xffffffffffffffff})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000480)={0x41}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000004c0)={0x41, 0x4}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000500)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f0000000580)=@id={0x1e, 0x3, 0x2, {0x4e1e, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000005c0)={0x41, 0x2, 0x2}, 0x10)
sendmsg$tipc(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0xffffe000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48400, 0x0)
gettid()

155.955355ms ago: executing program 5 (id=327):
r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x8c2)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
ioctl$EVIOCSABS20(r0, 0x40044591, 0x0)
clock_gettime(0x0, 0x0)
write$evdev(r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, @IPSET_ATTR_MAXELEM={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000)

121.452448ms ago: executing program 5 (id=328):
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10000080}, 0x20)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000280)={0x554, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x360, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @random="8257f9ea910a", {0x9, 0x6eb}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0x74, "935b19c78a879243c55e632ebc9f38c557c05297430b67f1cb802786fdd8a828e567434c46789e195ae0c330b3a4cb8b712e876c9a3d8b97909d9ddea4e23a4e5bdadf3eedb251b9cace950e5675f10dca16bdb123bf1ae83fbbe42f4340f8171a518f199af15d505c6c9bfdadafafe1cf53ca5a"}, {@broadcast, @broadcast, 0xb6, "b2b9ae36fe27701bd57d4059981728f10f3d996779a504dfed3f569d9c31bd096f052251e55fa79006d44f3d0bb5a1c25f723eb065539b5104bfdabd573555ceae0f0f9e57b8cdc2a27ac12d18c6f330628f4c95f7fd86b7d48d3ad673a3fb259df160b6c4e8b59b2e93418a2206dd2255fdd4475ec8ed8da532d414834bb2864e586bbddefe9a8befe28add3756955c0fc3f7fcf515a9c833534715e9a0720ceb8d48fb5ed7ade5da9e253c1a2c749dc523c2c475f0"}, {@device_b, @device_a, 0x28, "cbaf641c0a86c8ea8ae3eaaaba75f9bd95e622a5c60ddd13686415fc6ae4fa137aed03a23ac4eec0"}, {@broadcast, @device_b, 0xb9, "995581209c0cc2b0bb536c12cabf170b31a229b7ca4dabab7e234863523bf209dc436a5cde2804ce2e9056f607b76e905be45feed42b537d9042bf6f0a3df03f4c0ebc40a95df59faef5c2da017a6d8277f994c3cd0a7e37d09b116a81d5c9930dc76acf6320c2896071ce9cf97f54e8f3c17adf0c9bc9b298f31a319da81e8d6358a815924ff51212cf07f21c95a05130e166d1179f926c3eb8b95c34522a957ca9e5e621250e82b62df5b17c7a5e104497791cb198788b36"}, {@broadcast, @device_b, 0xe8, "864a73db59c073d296a65ea9658393bb39b283d811c6ef8a1dca435d361187dd0ff3f862217fc499f62699b85a0a6ef994860fd3e36aee92042ab2b27e3c5ad9a85883ab859b0c31c9019df2aa5fbb0cadd30c30988d878dd842d8425044bbf3a57e4e7de9a156e4a88c6eaed7ec2eddad219049dda7e776b9a26c0c353831561249709ad111408ef521139e993560170707fcfe327c5a929db083dd3903d31994bf12909385201e67ebd2cd49c11a63a51c5e68e140e42d5a783b191f049b21f070be7001d47723c4bac2d58c82ab43adfe7ba3af46b1c40dfe8118f258d87b3d30580431a4ddcd"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1d4, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @from_mac=@device_b, {0x9, 0x5}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x8000, @default, 0x8000, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x4}, {0xb, 0x1}, {0x42}, {0x16}, {0x4, 0x1}, {0x1}, {0x6}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xf9, "8b73d0a15c7e1ece891c435903f0f004c2ea24c5613b485ed3ccc9e50e1a309bfd0d6c8260c8c4c069e9fc8809911027bc09b14b551d5fd6ffcaa154fd814496bf9b82fa0c37e359a4a663bbf444f2f3d245feb42aecc8ffae5b0410f0dd1b783f8c1bfb43040be7c4ffdfdb4efe6336135e1e3be32d9d6542fe2a239c08f718b5b1afd396c715a77f2a29e08c4b4125b1e7cda1b647e8313a7b62a5f8d99e66d09ae446467f11575b119202aa6aa4a193477ed7b7ef0e0f591ad05e8fb211ce64b7baf54be597666e1b54027e52aecd61f6453d6bbf71465fc47e45d33d0d8bf2ca9f53243ff70e32fb9988e6af64a8b46c5fa8f6feb8cd55"}, {0xdd, 0x34, "79febbcf72f58644a2c91f21f0dee466abba32dceb3947dcd1f50ba65b615e1c9b5335abf7686973434adc9e427b583893e5075f"}, {0xdd, 0x5c, "fdcb3d70ac36228b68943eca417ecf5221e6262f9f65f5ecb4f296b7a5aec7a27ef83fb43eec4157e7992e47c50d67051045be71e81d1546d6de3a9e35dce5a979642544f0151e781bf46e03ff5803cedcace501158906b9edf8288a"}]}}]}, 0x554}, 0x1, 0x0, 0x0, 0x10880}, 0x80)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(r2, &(0x7f0000000880), 0x0, 0x40000000, &(0x7f00000008c0))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x6d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004)
pipe2$watch_queue(&(0x7f0000000a40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000a80)='l2_drops\x00', 0x0, r2)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r5)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x2d}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040090}, 0x4004)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000c80)={0x6, &(0x7f0000000c40)=[{0x3, 0xe, 0x7}, {0x7, 0x9, 0x0, 0x2}, {0x5, 0x2, 0x6}, {0x86e, 0x40, 0x3, 0x400}, {0x7, 0xfe, 0x80, 0xfffffffa}, {0x4, 0xe, 0x8, 0x6}]})
sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000001180)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000000d00)={0x42c, 0x3f4, 0x200, 0x70bd2d, 0x6, {0x10, 0x0, 0x1c, [0x7, 0x10000, 0x0, 0xdd, 0xfffffb03, 0x5, 0x8, 0x6, 0x707, 0x3, 0xfff, 0x6, 0x6, 0x5, 0x5, 0x6, 0xa, 0x0, 0x0, 0x589, 0x3, 0x5, 0x9, 0xfffff9b7, 0x6, 0x1, 0x3, 0xffff, 0x8, 0x3, 0xe8f, 0x80, 0xb41, 0x3, 0x1, 0xffff, 0x1000, 0xff, 0x6, 0x4bf, 0x4, 0xd, 0x6b47, 0xfffffffd, 0xf, 0xe61, 0x401, 0x6, 0x6, 0x81, 0x80000001, 0x9, 0x3, 0x1, 0x7, 0xd71a, 0x26, 0x200, 0xfff, 0x2a0, 0x2627a63b, 0x5, 0x6, 0x9], [0xabb, 0x5, 0x6, 0x4, 0x3, 0x80000001, 0x8, 0x2, 0x101, 0x4, 0x3, 0xfffffff8, 0xc524, 0x8, 0xa, 0x4, 0x7f, 0x5, 0x4, 0x8, 0x2, 0x3, 0x9, 0x1ff, 0x40, 0x0, 0x400000, 0x44c, 0x7, 0x8, 0x8001, 0x8, 0x0, 0x10000, 0x3, 0x7ff, 0x101000, 0x8001, 0x6, 0x5, 0x1, 0x3dd, 0x0, 0x9, 0x0, 0x0, 0x2, 0x101, 0xb15, 0x3, 0x7, 0x1ff, 0xffffffff, 0x6, 0xf811, 0x81, 0x4, 0x56, 0x9, 0x1, 0x51, 0x4, 0x7fffffff, 0x3], [0x4, 0x10, 0x800, 0x7, 0x2, 0x3, 0xc7dc, 0x7, 0x7, 0xfffffffe, 0x3, 0x7, 0x4, 0x4, 0x10001, 0x2, 0x4, 0x2, 0x2, 0x101, 0xffff8000, 0x488, 0x1000, 0x3, 0x2, 0xd5ee, 0x1, 0x8, 0xffff, 0x0, 0x5, 0x8, 0x1000, 0x1, 0x4, 0x6, 0x1ff, 0x8, 0x5, 0xffffffff, 0x2, 0xfffffff7, 0x3, 0x81, 0x101, 0xd, 0x1, 0x401, 0xfffffffc, 0x0, 0xda1, 0x3, 0x800, 0x0, 0xcb, 0x3, 0x5, 0x8, 0x2, 0x40, 0x3, 0x4, 0x80000001, 0x5], [0x9, 0x0, 0x2, 0xe23, 0x2, 0x4bf, 0x5, 0x2, 0x0, 0x2, 0x59, 0x7, 0x5, 0x10000, 0x0, 0x9, 0xd, 0xa, 0x7, 0x8, 0x3, 0x3, 0x3f, 0x6805, 0x7, 0x1, 0x4, 0x6, 0xfffffffb, 0x2, 0xfffff801, 0x7, 0x4, 0x6, 0x0, 0x9, 0x7, 0x400, 0x8, 0x3, 0x8, 0x9, 0x10000, 0x7e7c, 0x1, 0x10001, 0x2, 0x8, 0xd, 0x5, 0x5, 0x80000001, 0x6, 0x8, 0x4, 0x6, 0x7c72, 0x3, 0x6, 0x0, 0x888, 0x1, 0x8, 0x3], 0xb, ['\x00', '\xff\xff\xff\xff\xff\xff', 'pci\x00']}, ["", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x10c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0xa0, 0x8, "1f17beeddef2415c60c489b5fd42d4cc8ee618461efdee4a636f6808db410f72bc951e7ec32778a06ebf4f012db92c5f3564df1490e5e4e21fd704838d916ed3c9dc34067a16006cc6e54d3228c3ed35bb198d566ac957a0010c7ceb0021148b68318684ec6375a1cb5ffab4bba4aebe62d4b4c388dcfded580f7fa3c6bb70c4b749fb03437c3f97fc5fe34d626f2fb190eaa5e9ea87c26d57cf2d6e"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x15, 0x8, "50c46ce0cd31b080c45ac3bc2c631efacc"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2000000000}]}, 0x10c}}, 0x0)
prctl$PR_GET_THP_DISABLE(0x2a)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001400)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="a3d1ae268bdb"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x80)
r8 = memfd_secret(0x0)
ioctl$XFS_IOC_FSGEOMETRY(r8, 0x8100587e, &(0x7f0000001500))
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x90, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4c}, @void, @val={0xc, 0x99, {0x8, 0x5}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "076dbca1536dc1dbb09383c24ca1ebf34671b2f74fb37355"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fde33050debc4e86203da0b3ca51c4488462bb1685fbc848"}]]}, 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x4000)
ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000001780))
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r9, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x270020}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x50, r10, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2c}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xe061539f2a6ff7ca}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1b}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x24008841)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001980)={0x2f, 0x204, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x7e}, @jumbo={0xc2, 0x4, 0xc3}, @enc_lim={0x4, 0x1, 0x22}, @jumbo={0xc2, 0x4, 0x5d}, @generic={0xe, 0x1000, "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"}]}, 0x1028)
sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x24, r10, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24044000)
sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000885}, 0x1)

41.933446ms ago: executing program 2 (id=329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x1}})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000001540)={0x1000, 0x4, 0x10000000, 0xc}, 0x10)
sendto(r2, &(0x7f0000001580)="340000001a000100010000000000000002202000000000000000000008001c0001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendto(r4, &(0x7f0000000340)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050002320000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000001700)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="7cd980192c09a769382bdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0700171b", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004000180"], 0x18}}, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x103082, 0x100)
r7 = epoll_create1(0x0)
r8 = epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00')
readv(r9, &(0x7f0000000500)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0xe000202b})
r10 = openat$incfs(r6, &(0x7f0000000040)='.pending_reads\x00', 0x800, 0x83)
symlinkat(0x0, r10, 0x0)

23.688998ms ago: executing program 5 (id=330):
socket$inet6(0xa, 0x2, 0x3a)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
epoll_create1(0x80000) (async)
r3 = epoll_create1(0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='27', 0x2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000480)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000004c0)={0x6000200c})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) (async)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
getsockopt$MRT6(r7, 0x29, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
getsockopt$MRT6(r7, 0x29, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
dup(r6) (async)
r8 = dup(r6)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa2, 0x40040, 0x1000002, 0x1a2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x81}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40000001, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async)
syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa2, 0x40040, 0x1000002, 0x1a2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x81}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40000001, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

23.181998ms ago: executing program 2 (id=331):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10)
close(r0)

0s ago: executing program 2 (id=332):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r2 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}})
mount(0x0, &(0x7f00000000c0)='./dev\x00', 0x0, 0x0, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec)

kernel console output (not intermixed with test programs):

 USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   35.031352][  T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   35.039380][  T311] usb 2-1: Product: syz
[   35.043794][  T311] usb 2-1: Manufacturer: syz
[   35.050754][  T311] usb 2-1: Found UVC 1.00 device syz (8086:0ad2)
[   35.324114][  T540] device-mapper: table: 252:0: striped: Invalid chunk_size (-EINVAL)
[   35.347853][  T540] device-mapper: ioctl: error adding target to table
[   35.367499][  T540] 9pnet_fd: p9_fd_create_tcp (540): problem connecting socket to 127.0.0.1
[   35.550743][  T535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.560964][  T535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.759942][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   35.834412][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 7 on unit 1: -71 (exp. 1).
[   35.843836][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[   35.853086][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1).
[   35.862398][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1).
[   35.871661][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1).
[   35.880993][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[   35.890268][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1).
[   35.899455][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 8 on unit 1: -71 (exp. 1).
[   35.908805][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[   35.918113][  T311] usb 2-1: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1).
[   35.932236][  T311] usb 2-1: No streaming interface found for terminal 2.
[   35.939328][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   35.949824][  T311] usb 2-1: USB disconnect, device number 4
[   35.959977][    T9] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   35.970493][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   35.979362][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   36.001759][    T9] usb 4-1: string descriptor 0 read error: -22
[   36.008027][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   36.028165][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.050840][    T9] cdc_ncm 4-1:1.0: skipping garbage
[   36.056057][    T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[   36.063116][    T9] cdc_ncm 4-1:1.0: bind() failure
[   36.253391][  T311] usb 4-1: USB disconnect, device number 7
[   36.397982][  T563] netlink: 9 bytes leftover after parsing attributes in process `syz.2.67'.
[   36.410337][  T563] z00�X��: renamed from gretap0 (while UP)
[   36.418485][  T563] z00�X��: entered allmulticast mode
[   36.899950][  T311] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   37.009957][   T45] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[   37.061310][  T311] usb 3-1: unable to read config index 0 descriptor/start: -71
[   37.069946][  T311] usb 3-1: can't read configurations, error -71
[   37.160717][   T45] usb 4-1: not running at top speed; connect to a high speed hub
[   37.169342][   T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.179786][   T45] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   37.189511][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.201556][   T45] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   37.210739][   T45] usb 4-1: No streaming interface found for terminal 2.
[   37.328950][  T593] x_tables: unsorted underflow at hook 4
[   37.405188][   T45] usb 4-1: USB disconnect, device number 8
[   37.463105][  T441] rust_binder: 592: undelivered TRANSACTION_COMPLETE
[   37.475812][  T441] rust_binder: 592: undelivered TRANSACTION_COMPLETE
[   37.484764][  T336] rust_binder: 592: undelivered transaction 3, process died
[   37.494782][  T336] rust_binder: 592: undelivered transaction 2, process died
[   37.650488][   T36] kauditd_printk_skb: 24 callbacks suppressed
[   37.650505][   T36] audit: type=1400 audit(1793841864.119:228): avc:  denied  { write } for  pid=609 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   37.678161][   T36] audit: type=1400 audit(1793841864.119:229): avc:  denied  { read } for  pid=609 comm="syz.2.82" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.701661][   T36] audit: type=1400 audit(1793841864.119:230): avc:  denied  { open } for  pid=609 comm="syz.2.82" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.725861][   T36] audit: type=1400 audit(1793841864.129:231): avc:  denied  { ioctl } for  pid=609 comm="syz.2.82" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.999769][   T36] audit: type=1326 audit(1793841864.469:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=620 comm="syz.3.86" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0cf79fb19 code=0x0
[   38.099949][   T45] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   38.261374][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   38.269514][   T45] usb 2-1: not running at top speed; connect to a high speed hub
[   38.278328][   T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 134, changing to 4
[   38.291063][   T45] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40
[   38.300231][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.308276][   T45] usb 2-1: Product: syz
[   38.312812][   T45] usb 2-1: Manufacturer: syz
[   38.317471][   T45] usb 2-1: SerialNumber: syz
[   38.479940][   T36] audit: type=1326 audit(1793841864.949:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=609 comm="syz.2.82" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2b19fb19 code=0x7fc00000
[   38.512896][   T36] audit: type=1326 audit(1793841864.949:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=609 comm="syz.2.82" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2b19fb19 code=0x7fc00000
[   38.542742][   T36] audit: type=1326 audit(1793841864.949:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=609 comm="syz.2.82" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2b19fb19 code=0x7fc00000
[   38.569303][   T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[   38.588768][   T45] usb 2-1: USB disconnect, device number 5
[   38.602094][   T36] audit: type=1326 audit(1793841864.949:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=609 comm="syz.2.82" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2b19fb19 code=0x7fc00000
[   38.627607][   T36] audit: type=1326 audit(1793841864.949:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=609 comm="syz.2.82" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2b19fb19 code=0x7fc00000
[   39.050222][  T633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'.
[   39.087132][  T643] process 'syz.3.93' launched './file1' with NULL argv: empty string added
[   39.111675][  T646] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.349953][   T45] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   39.479952][   T45] usb 4-1: device descriptor read/64, error -71
[   39.719955][   T45] usb 4-1: device descriptor read/64, error -71
[   39.961337][   T45] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[   40.099939][   T45] usb 4-1: device descriptor read/64, error -71
[   40.339946][   T45] usb 4-1: device descriptor read/64, error -71
[   40.449961][  T311] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   40.457817][   T45] usb usb4-port1: attempt power cycle
[   40.611163][  T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.623532][  T311] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40
[   40.632839][  T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.640980][  T311] usb 3-1: Product: syz
[   40.645226][  T311] usb 3-1: Manufacturer: syz
[   40.649822][  T311] usb 3-1: SerialNumber: syz
[   40.789950][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   40.809943][   T45] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[   40.830944][   T45] usb 4-1: device descriptor read/8, error -71
[   40.950951][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   40.965358][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   40.974500][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.975307][   T45] usb 4-1: device descriptor read/8, error -71
[   40.982543][    T9] usb 2-1: Product: syz
[   40.992897][    T9] usb 2-1: Manufacturer: syz
[   40.997533][    T9] usb 2-1: SerialNumber: syz
[   41.011042][    T9] rtl8150 2-1:1.0: couldn't find required endpoints
[   41.017689][    T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[   41.231074][   T45] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[   41.270989][   T45] usb 4-1: device descriptor read/8, error -71
[   41.294142][  T678] kvm: pic: non byte write
[   41.300513][  T678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.309608][  T678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.396689][  T441] usb 2-1: USB disconnect, device number 6
[   41.403974][   T45] usb 4-1: device descriptor read/8, error -71
[   41.520096][   T45] usb usb4-port1: unable to enumerate USB device
[   42.990443][   T36] kauditd_printk_skb: 60 callbacks suppressed
[   42.990460][   T36] audit: type=1400 audit(1793841869.469:298): avc:  denied  { read } for  pid=704 comm="syz.1.108" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   43.051400][   T36] audit: type=1400 audit(1793841869.519:299): avc:  denied  { ioctl } for  pid=704 comm="syz.1.108" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   43.234547][  T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[   43.240154][    T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[   43.256123][  T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   43.272096][  T311] usb 3-1: USB disconnect, device number 10
[   43.369950][  T357] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   43.411248][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   43.429492][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[   43.450203][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.469936][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   43.491273][    T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[   43.509981][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.518128][    T9] usb 4-1: Product: syz
[   43.522539][    T9] usb 4-1: Manufacturer: syz
[   43.527145][    T9] usb 4-1: SerialNumber: syz
[   43.532800][  T357] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   43.544020][  T357] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   43.558417][  T357] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   43.569511][  T357] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   43.581851][  T357] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   43.589939][  T311] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   43.599924][  T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.610086][  T357] usb 2-1: Product: syz
[   43.614291][  T357] usb 2-1: Manufacturer: syz
[   43.629176][  T357] usb 2-1: SerialNumber: syz
[   43.645436][  T711] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   43.655372][  T357] cdc_mbim 2-1:1.0: skipping garbage
[   43.750964][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.763929][  T707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.769927][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.783133][  T707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.799929][  T311] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   43.801356][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   43.808967][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.826998][  T311] usb 3-1: config 0 descriptor??
[   43.848337][    T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[   43.858753][  T711] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   43.869958][  T711] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   43.891934][    T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[   43.911723][    T9] usb 4-1: USB disconnect, device number 13
[   43.941206][  T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.237744][  T311] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0
[   44.259940][  T311] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0
[   44.267016][  T311] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0
[   44.279934][  T311] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0
[   44.286991][  T311] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0
[   44.365686][   T36] audit: type=1400 audit(1793841870.839:300): avc:  denied  { name_bind } for  pid=714 comm="syz.3.112" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   44.435165][  T719] tipc: Started in network mode
[   44.441089][  T713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.449589][  T713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.460148][  T719] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   44.479301][  T719] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   44.501487][  T719] tipc: Enabled bearer <udp:syz0>, priority 10
[   44.510209][  T711] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   44.517384][  T711] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   44.524892][  T357] cdc_mbim 2-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048
[   44.534879][  T357] cdc_mbim 2-1:1.0: setting rx_max = 2048
[   44.542755][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.569989][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.590535][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.598266][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.619992][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.632752][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.641066][  T311] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71
[   44.643581][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.659033][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.661291][  T311] usb 3-1: USB disconnect, device number 11
[   44.670437][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.680514][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.692589][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.700338][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.708109][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.716306][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.724250][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.732188][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.743068][  T711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.751600][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.759311][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.767203][  T711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.777858][  T357] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[   44.784970][  T357] wwan wwan0: port wwan0mbim0 attached
[   44.790715][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.798418][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.808349][  T357] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, b2:51:1b:e6:35:f4
[   44.819251][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.829707][  T357] usb 2-1: USB disconnect, device number 7
[   44.839162][   T36] audit: type=1400 audit(1793841871.309:301): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   44.860411][  T357] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[   44.870983][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.878781][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.886839][   T36] audit: type=1400 audit(1793841871.309:302): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   44.920172][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.927888][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.950388][  T357] wwan wwan0: port wwan0mbim0 disconnected
[   44.956409][   T36] audit: type=1400 audit(1793841871.309:303): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   44.980043][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   44.987866][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.019972][   T36] audit: type=1400 audit(1793841871.309:304): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   45.042820][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.055026][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.070040][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.077853][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.099953][   T36] audit: type=1400 audit(1793841871.309:305): avc:  denied  { getattr } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   45.130070][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.137790][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.159937][   T36] audit: type=1400 audit(1793841871.429:306): avc:  denied  { read } for  pid=729 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   45.170041][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.183383][   T36] audit: type=1400 audit(1793841871.429:307): avc:  denied  { open } for  pid=729 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   45.210000][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.236388][  T719] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   45.319566][  T758] FAULT_INJECTION: forcing a failure.
[   45.319566][  T758] name failslab, interval 1, probability 0, space 0, times 0
[   45.332306][  T758] CPU: 1 UID: 0 PID: 758 Comm: syz.1.116 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   45.332339][  T758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   45.332352][  T758] Call Trace:
[   45.332359][  T758]  <TASK>
[   45.332366][  T758]  __dump_stack+0x21/0x30
[   45.332390][  T758]  dump_stack_lvl+0x140/0x1c0
[   45.332408][  T758]  ? __cfi_dump_stack_lvl+0x10/0x10
[   45.332428][  T758]  dump_stack+0x19/0x20
[   45.332445][  T758]  should_fail_ex+0x3c2/0x510
[   45.332473][  T758]  should_failslab+0xac/0x100
[   45.332493][  T758]  __kmalloc_node_track_caller_noprof+0x65/0x4f0
[   45.332521][  T758]  ? x64_sys_call+0x21b9/0x2ee0
[   45.332541][  T758]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   45.332566][  T758]  ? sidtab_sid2str_get+0x135/0x360
[   45.332593][  T758]  kmemdup_noprof+0x31/0x80
[   45.332618][  T758]  sidtab_sid2str_get+0x135/0x360
[   45.332646][  T758]  security_sid_to_context_core+0x30d/0x5d0
[   45.332671][  T758]  security_sid_to_context_force+0x31/0x40
[   45.332694][  T758]  selinux_inode_init_security+0x659/0x950
[   45.332720][  T758]  ? __cfi_selinux_inode_init_security+0x10/0x10
[   45.332745][  T758]  ? security_inode_init_security+0x11c/0x600
[   45.332768][  T758]  ? __cfi_shmem_initxattrs+0x10/0x10
[   45.332790][  T758]  ? __cfi_shmem_initxattrs+0x10/0x10
[   45.332812][  T758]  security_inode_init_security+0x1ab/0x600
[   45.332846][  T758]  ? __cfi_security_inode_init_security+0x10/0x10
[   45.332871][  T758]  ? set_cached_acl+0xe1/0x1a0
[   45.332896][  T758]  ? simple_acl_create+0x190/0x1c0
[   45.332922][  T758]  shmem_mknod+0xd5/0x200
[   45.332953][  T758]  vfs_mknod+0x608/0x6d0
[   45.332975][  T758]  do_mknodat+0x38e/0x4f0
[   45.332993][  T758]  ? do_o_path+0x220/0x220
[   45.333007][  T758]  ? __kasan_check_write+0x18/0x20
[   45.333030][  T758]  __x64_sys_mknodat+0xab/0xc0
[   45.333050][  T758]  x64_sys_call+0x21b9/0x2ee0
[   45.333068][  T758]  do_syscall_64+0x57/0xf0
[   45.333087][  T758]  ? clear_bhb_loop+0x50/0xa0
[   45.333113][  T758]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   45.333139][  T758] RIP: 0033:0x7f679479fb19
[   45.333155][  T758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.333171][  T758] RSP: 002b:00007f679572a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[   45.333191][  T758] RAX: ffffffffffffffda RBX: 00007f6794a25fa0 RCX: 00007f679479fb19
[   45.333204][  T758] RDX: 0000000000001000 RSI: 0000200000001600 RDI: ffffffffffffff9c
[   45.333219][  T758] RBP: 00007f6794837b70 R08: 0000000000000000 R09: 0000000000000000
[   45.333231][  T758] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000
[   45.333244][  T758] R13: 00007f6794a26038 R14: 00007f6794a25fa0 R15: 00007fff02198808
[   45.333259][  T758]  </TASK>
[   45.373427][  T759] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.509962][  T311] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   45.512927][  T759] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.634053][  T759] bridge_slave_0: entered allmulticast mode
[   45.640658][  T759] bridge_slave_0: entered promiscuous mode
[   45.646972][  T357] tipc: Node number set to 1
[   45.652507][  T759] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.659643][  T759] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.666900][  T311] usb 3-1: Using ep0 maxpacket: 32
[   45.677104][  T759] bridge_slave_1: entered allmulticast mode
[   45.683981][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.695202][  T759] bridge_slave_1: entered promiscuous mode
[   45.701373][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.714444][  T310] bridge_slave_1: left allmulticast mode
[   45.729939][  T310] bridge_slave_1: left promiscuous mode
[   45.732927][  T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   45.735629][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.749928][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.771604][  T311] usb 3-1: config 0 descriptor??
[   45.781626][  T311] hub 3-1:0.0: USB hub found
[   45.793266][  T310] bridge_slave_0: left allmulticast mode
[   45.798919][  T310] bridge_slave_0: left promiscuous mode
[   45.821078][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.956196][  T310] veth1_macvtap: left promiscuous mode
[   45.962677][  T310] veth0_vlan: left promiscuous mode
[   45.977638][  T311] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   46.044621][  T773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.103065][  T759] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.110145][  T759] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.117433][  T759] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.124514][  T759] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.134178][  T772] tipc: Resetting bearer <eth:syzkaller0>
[   46.142037][  T772] tipc: Disabling bearer <eth:syzkaller0>
[   46.175199][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.183159][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.201936][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.209019][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.217045][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.224144][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.256962][  T759] veth0_vlan: entered promiscuous mode
[   46.280453][  T759] veth1_macvtap: entered promiscuous mode
[   46.299196][  T780] 9p: Unknown access argument 18446744073709551615: -34
[   46.333741][  T787] netlink: 140 bytes leftover after parsing attributes in process `syz.4.121'.
[   46.359535][  T788] rust_binder: Error in use_page_slow: ESRCH
[   46.365979][  T788] rust_binder: use_range failure ESRCH
[   46.378608][  T788] rust_binder: 779:788 transaction async to 779:0 failed ESRCH, code 0 size 72-24 line process.rs:1128
[   46.391499][  T311] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1
[   46.402247][  T311] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22
[   46.568022][  T797] netlink: 316 bytes leftover after parsing attributes in process `syz.4.124'.
[   46.577711][  T797] netlink: 316 bytes leftover after parsing attributes in process `syz.4.124'.
[   46.668408][  T812] fuse: Bad value for 'user_id'
[   46.673495][  T812] fuse: Bad value for 'user_id'
[   46.842692][  T817] fuse: Bad value for 'rootmode'
[   46.902059][  T823] incfs: Error accessing: ./proc/thread-self/fail-nth.
[   46.909054][  T823] incfs: mount failed -2
[   46.931770][  T825] Zero length message leads to an empty skb
[   47.138198][  T835] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   47.152293][  T835] tipc: Enabled bearer <eth:dummy0>, priority 10
[   47.169236][  T840] selinuxfs: Unknown parameter '}'
[   47.174413][  T311] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   47.309959][  T311] usb 2-1: device descriptor read/64, error -71
[   47.549956][  T311] usb 2-1: device descriptor read/64, error -71
[   47.785682][  T849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'.
[   47.789958][  T311] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   47.825749][  T855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'.
[   47.836425][  T859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'.
[   47.930008][  T311] usb 2-1: device descriptor read/64, error -71
[   48.110105][   T45] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   48.169957][  T311] usb 2-1: device descriptor read/64, error -71
[   48.260439][  T336] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[   48.280066][  T311] usb usb2-port1: attempt power cycle
[   48.295880][   T36] kauditd_printk_skb: 68 callbacks suppressed
[   48.295896][   T36] audit: type=1400 audit(1793841874.759:376): avc:  denied  { mount } for  pid=862 comm="syz.4.145" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   48.323582][   T45] usb 5-1: unable to read config index 0 descriptor/start: -71
[   48.333160][   T45] usb 5-1: can't read configurations, error -71
[   48.340200][   T36] audit: type=1400 audit(1793841874.769:377): avc:  denied  { execmem } for  pid=862 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   48.361919][  T441] usb 3-1: USB disconnect, device number 12
[   48.369148][   T36] audit: type=1400 audit(1793841874.769:378): avc:  denied  { mmap_zero } for  pid=862 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   48.389632][   T36] audit: type=1400 audit(1793841874.769:379): avc:  denied  { map } for  pid=862 comm="syz.4.145" path="socket:[9075]" dev="sockfs" ino=9075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   48.413202][   T36] audit: type=1400 audit(1793841874.789:380): avc:  denied  { create } for  pid=885 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   48.432581][   T36] audit: type=1400 audit(1793841874.789:381): avc:  denied  { write } for  pid=885 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   48.451774][   T36] audit: type=1400 audit(1793841874.789:382): avc:  denied  { setopt } for  pid=885 comm="syz.2.147" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.475368][  T336] usb 4-1: not running at top speed; connect to a high speed hub
[   48.489977][  T336] usb 4-1: config 5 has an invalid interface number: 175 but max is 2
[   48.499156][   T36] audit: type=1400 audit(1793841874.789:383): avc:  denied  { connect } for  pid=885 comm="syz.2.147" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.509434][  T336] usb 4-1: config 5 has an invalid interface number: 29 but max is 2
[   48.519645][   T36] audit: type=1400 audit(1793841874.889:384): avc:  denied  { read write } for  pid=889 comm="syz.2.148" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   48.547602][  T336] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[   48.555654][   T36] audit: type=1400 audit(1793841874.889:385): avc:  denied  { open } for  pid=889 comm="syz.2.148" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   48.559542][  T336] usb 4-1: config 5 has an invalid interface number: 48 but max is 2
[   48.591475][  T336] usb 4-1: config 5 has an invalid interface number: 173 but max is 2
[   48.599720][  T336] usb 4-1: config 5 has 4 interfaces, different from the descriptor's value: 3
[   48.608758][  T336] usb 4-1: config 5 has no interface number 0
[   48.614965][  T336] usb 4-1: config 5 has no interface number 1
[   48.621300][  T336] usb 4-1: config 5 has no interface number 2
[   48.627429][  T336] usb 4-1: config 5 has no interface number 3
[   48.639571][  T336] usb 4-1: config 5 interface 175 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[   48.652946][  T336] usb 4-1: config 5 interface 175 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   48.663928][  T336] usb 4-1: config 5 interface 175 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[   48.677046][  T336] usb 4-1: too many endpoints for config 5 interface 29 altsetting 153: 102, using maximum allowed: 30
[   48.688152][  T311] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   48.702327][  T336] usb 4-1: config 5 interface 29 altsetting 153 endpoint 0x4 has invalid maxpacket 1007, setting to 64
[   48.713730][  T336] usb 4-1: config 5 interface 29 altsetting 153 has 2 endpoint descriptors, different from the interface descriptor's value: 102
[   48.727194][  T336] usb 4-1: config 5 interface 173 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[   48.738013][  T336] usb 4-1: config 5 interface 173 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[   48.748824][  T336] usb 4-1: config 5 interface 173 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[   48.759826][  T336] usb 4-1: config 5 interface 173 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[   48.770617][  T336] usb 4-1: config 5 interface 173 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[   48.781635][  T311] usb 2-1: device descriptor read/8, error -71
[   48.787816][  T336] usb 4-1: config 5 interface 173 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[   48.798557][  T336] usb 4-1: config 5 interface 173 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   48.809765][  T336] usb 4-1: config 5 interface 175 has no altsetting 0
[   48.817609][  T336] usb 4-1: config 5 interface 29 has no altsetting 0
[   48.824388][  T336] usb 4-1: config 5 interface 48 has no altsetting 0
[   48.836492][  T336] usb 4-1: New USB device found, idVendor=07aa, idProduct=0018, bcdDevice=fc.12
[   48.844857][  T867] cgroup: fork rejected by pids controller in /syz3
[   48.845672][  T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.847095][  T867] 
[   48.852314][  T336] usb 4-1: Product: syz
[   48.867337][  T336] usb 4-1: Manufacturer: ц
[   48.872005][  T336] usb 4-1: SerialNumber: syz
[   48.910930][  T311] usb 2-1: device descriptor read/8, error -71
[   49.118436][  T336] usb 4-1: USB disconnect, device number 14
[   49.149968][  T311] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   49.171749][  T311] usb 2-1: device descriptor read/8, error -71
[   49.301529][  T311] usb 2-1: device descriptor read/8, error -71
[   49.387907][ T1050] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966648
[   49.420245][  T311] usb usb2-port1: unable to enumerate USB device
[   49.649940][  T336] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   49.733367][ T1060] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   49.740024][ T1061] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   49.811711][  T336] usb 4-1: config index 0 descriptor too short (expected 65003, got 45)
[   49.821514][  T336] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   49.830638][  T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.838647][  T336] usb 4-1: Product: syz
[   49.842846][  T336] usb 4-1: Manufacturer: syz
[   49.847444][  T336] usb 4-1: SerialNumber: syz
[   49.895602][ T1068] netlink: 64 bytes leftover after parsing attributes in process `syz.1.157'.
[   49.907969][ T1068] capability: warning: `syz.1.157' uses deprecated v2 capabilities in a way that may be insecure
[   50.107518][  T336] rtl8150 4-1:1.0: couldn't reset the device
[   50.116991][  T336] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[   50.132494][  T336] usb 4-1: USB disconnect, device number 15
[   50.386791][ T1077] netlink: 37 bytes leftover after parsing attributes in process `syz.2.159'.
[   50.609810][ T1092] rust_binder: Error in use_page_slow: ESRCH
[   50.616358][ T1092] rust_binder: use_range failure ESRCH
[   50.622208][ T1092] rust_binder: 1090:1092 transaction call to 1090:0 failed ESRCH, code 0 size 0-0 line process.rs:1128
[   50.700447][ T1097] SELinux: security_context_str_to_sid (measure) failed with errno=-22
[   51.119941][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   51.289942][    T9] usb 2-1: Using ep0 maxpacket: 8
[   51.296452][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[   51.310305][    T9] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[   51.318487][    T9] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[   51.327228][    T9] usb 2-1: config 4 has no interface number 0
[   51.334848][    T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[   51.344478][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.352637][    T9] usb 2-1: Product: syz
[   51.356837][    T9] usb 2-1: Manufacturer: syz
[   51.361509][    T9] usb 2-1: SerialNumber: syz
[   51.421293][  T311] rust_binder: 1090: undelivered TRANSACTION_ERROR: 29201
[   51.568804][ T1133] FAULT_INJECTION: forcing a failure.
[   51.568804][ T1133] name failslab, interval 1, probability 0, space 0, times 0
[   51.572919][    T9] usb 2-1: Found UVC 0.02 device syz (04f2:b746)
[   51.581600][ T1133] CPU: 1 UID: 0 PID: 1133 Comm: syz.2.174 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   51.581634][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   51.581647][ T1133] Call Trace:
[   51.581653][ T1133]  <TASK>
[   51.581660][ T1133]  __dump_stack+0x21/0x30
[   51.581682][ T1133]  dump_stack_lvl+0x140/0x1c0
[   51.581698][ T1133]  ? __cfi_dump_stack_lvl+0x10/0x10
[   51.581717][ T1133]  dump_stack+0x19/0x20
[   51.581733][ T1133]  should_fail_ex+0x3c2/0x510
[   51.581759][ T1133]  ? alloc_pipe_info+0x214/0x5f0
[   51.581784][ T1133]  should_failslab+0xac/0x100
[   51.581803][ T1133]  __kmalloc_noprof+0x69/0x510
[   51.581828][ T1133]  ? alloc_pipe_info+0x214/0x5f0
[   51.581852][ T1133]  alloc_pipe_info+0x214/0x5f0
[   51.581875][ T1133]  create_pipe_files+0x8f/0x6c0
[   51.581901][ T1133]  __do_pipe_flags+0x50/0x2f0
[   51.581924][ T1133]  do_pipe2+0xab/0x190
[   51.581939][ T1133]  ? xfd_validate_state+0x68/0x140
[   51.581957][ T1133]  ? pipe_fcntl+0x520/0x520
[   51.581974][ T1133]  __x64_sys_pipe2+0x5e/0x70
[   51.581998][ T1133]  x64_sys_call+0x8be/0x2ee0
[   51.582016][ T1133]  do_syscall_64+0x57/0xf0
[   51.582035][ T1133]  ? clear_bhb_loop+0x50/0xa0
[   51.582058][ T1133]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   51.582080][ T1133] RIP: 0033:0x7fda2b19fb19
[   51.582096][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.582111][ T1133] RSP: 002b:00007fda2c0e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[   51.582131][ T1133] RAX: ffffffffffffffda RBX: 00007fda2b425fa0 RCX: 00007fda2b19fb19
[   51.582145][ T1133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   51.582157][ T1133] RBP: 00007fda2b237b70 R08: 0000000000000000 R09: 0000000000000000
[   51.582169][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.582180][ T1133] R13: 00007fda2b426038 R14: 00007fda2b425fa0 R15: 00007fffb61cec98
[   51.582196][ T1133]  </TASK>
[   51.586346][ T1133] FAULT_INJECTION: forcing a failure.
[   51.586346][ T1133] name failslab, interval 1, probability 0, space 0, times 0
[   51.599975][    T9] usb 2-1: No valid video chain found.
[   51.612047][ T1133] CPU: 1 UID: 0 PID: 1133 Comm: syz.2.174 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   51.612073][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   51.612085][ T1133] Call Trace:
[   51.612090][ T1133]  <TASK>
[   51.612097][ T1133]  __dump_stack+0x21/0x30
[   51.612118][ T1133]  dump_stack_lvl+0x140/0x1c0
[   51.612136][ T1133]  ? __cfi_dump_stack_lvl+0x10/0x10
[   51.612154][ T1133]  dump_stack+0x19/0x20
[   51.612170][ T1133]  should_fail_ex+0x3c2/0x510
[   51.612196][ T1133]  should_failslab+0xac/0x100
[   51.612216][ T1133]  __kmalloc_cache_noprof+0x41/0x470
[   51.612241][ T1133]  ? alloc_super+0x67/0x950
[   51.612262][ T1133]  ? __kasan_check_write+0x18/0x20
[   51.612286][ T1133]  ? _raw_spin_lock+0x92/0x120
[   51.612304][ T1133]  alloc_super+0x67/0x950
[   51.612325][ T1133]  ? __cfi_vfs_parse_monolithic_sep+0x10/0x10
[   51.612346][ T1133]  sget_fc+0x325/0xa70
[   51.612366][ T1133]  ? __cfi_set_anon_super_fc+0x10/0x10
[   51.612390][ T1133]  ? __cfi_proc_fill_super+0x10/0x10
[   51.612406][ T1133]  get_tree_nodev+0x2e/0x170
[   51.612427][ T1133]  ? proc_get_tree+0x11/0x30
[   51.612444][ T1133]  proc_get_tree+0x20/0x30
[   51.612460][ T1133]  vfs_get_tree+0xa1/0x290
[   51.612484][ T1133]  do_new_mount+0x251/0xb40
[   51.612508][ T1133]  ? security_capable+0x44/0x130
[   51.612528][ T1133]  path_mount+0x66a/0xff0
[   51.612558][ T1133]  ? putname+0x113/0x150
[   51.612576][ T1133]  __se_sys_mount+0x2bf/0x480
[   51.612593][ T1133]  ? __x64_sys_mount+0xf0/0xf0
[   51.612609][ T1133]  ? __kasan_check_write+0x18/0x20
[   51.612633][ T1133]  ? fpregs_restore_userregs+0x11c/0x260
[   51.612657][ T1133]  __x64_sys_mount+0xc3/0xf0
[   51.612673][ T1133]  x64_sys_call+0x2021/0x2ee0
[   51.612691][ T1133]  do_syscall_64+0x57/0xf0
[   51.612709][ T1133]  ? clear_bhb_loop+0x50/0xa0
[   51.612732][ T1133]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   51.612755][ T1133] RIP: 0033:0x7fda2b19fb19
[   51.612770][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.612786][ T1133] RSP: 002b:00007fda2c0e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   51.612806][ T1133] RAX: ffffffffffffffda RBX: 00007fda2b425fa0 RCX: 00007fda2b19fb19
[   51.612824][ T1133] RDX: 0000200000000cc0 RSI: 0000200000000600 RDI: 0000000000000000
[   51.612837][ T1133] RBP: 00007fda2b237b70 R08: 0000000000000000 R09: 0000000000000000
[   51.612849][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   51.612859][ T1133] R13: 00007fda2b426038 R14: 00007fda2b425fa0 R15: 00007fffb61cec98
[   51.612874][ T1133]  </TASK>
[   51.954192][ T1142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'.
[   51.960411][    T9] usb 2-1: USB disconnect, device number 12
[   52.009943][ T1142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1142 comm=syz.3.175
[   52.261145][  T311] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   52.269964][  T311] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   52.333847][ T1166] random: crng reseeded on system resumption
[   52.340024][  T416] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   52.432025][ T1175] FAULT_INJECTION: forcing a failure.
[   52.432025][ T1175] name failslab, interval 1, probability 0, space 0, times 0
[   52.460155][ T1175] CPU: 0 UID: 0 PID: 1175 Comm: syz.2.185 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   52.460193][ T1175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   52.460205][ T1175] Call Trace:
[   52.460212][ T1175]  <TASK>
[   52.460220][ T1175]  __dump_stack+0x21/0x30
[   52.460246][ T1175]  dump_stack_lvl+0x140/0x1c0
[   52.460266][ T1175]  ? __cfi_dump_stack_lvl+0x10/0x10
[   52.460287][ T1175]  dump_stack+0x19/0x20
[   52.460305][ T1175]  should_fail_ex+0x3c2/0x510
[   52.460336][ T1175]  ? x509_key_preparse+0x224/0x880
[   52.460368][ T1175]  should_failslab+0xac/0x100
[   52.460389][ T1175]  __kmalloc_noprof+0x69/0x510
[   52.460416][ T1175]  ? x509_key_preparse+0x224/0x880
[   52.460442][ T1175]  ? x509_cert_parse+0x850/0xbd0
[   52.460470][ T1175]  x509_key_preparse+0x224/0x880
[   52.460498][ T1175]  ? __cfi_down_read+0x10/0x10
[   52.460530][ T1175]  asymmetric_key_preparse+0xb6/0x100
[   52.460555][ T1175]  __key_create_or_update+0x430/0xa90
[   52.460582][ T1175]  ? security_key_permission+0x3d/0x100
[   52.460611][ T1175]  ? key_create_or_update+0x70/0x70
[   52.460636][ T1175]  ? __kasan_kmalloc+0x96/0xb0
[   52.460658][ T1175]  ? __cfi_lookup_user_key_possessed+0x10/0x10
[   52.460683][ T1175]  key_create_or_update+0x47/0x70
[   52.460708][ T1175]  __se_sys_add_key+0x355/0x4b0
[   52.460728][ T1175]  ? __x64_sys_add_key+0xf0/0xf0
[   52.460747][ T1175]  ? __kasan_check_write+0x18/0x20
[   52.460773][ T1175]  ? fpregs_restore_userregs+0x11c/0x260
[   52.460799][ T1175]  __x64_sys_add_key+0xc3/0xf0
[   52.460817][ T1175]  x64_sys_call+0x195f/0x2ee0
[   52.460838][ T1175]  do_syscall_64+0x57/0xf0
[   52.460857][ T1175]  ? clear_bhb_loop+0x50/0xa0
[   52.460883][ T1175]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   52.460909][ T1175] RIP: 0033:0x7fda2b19fb19
[   52.460927][ T1175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.460944][ T1175] RSP: 002b:00007fda2c0c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   52.460966][ T1175] RAX: ffffffffffffffda RBX: 00007fda2b426090 RCX: 00007fda2b19fb19
[   52.460982][ T1175] RDX: 0000200000009000 RSI: 0000000000000000 RDI: 00002000000007c0
[   52.460996][ T1175] RBP: 00007fda2b237b70 R08: ffffffffffffffff R09: 0000000000000000
[   52.461011][ T1175] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[   52.461024][ T1175] R13: 00007fda2b426128 R14: 00007fda2b426090 R15: 00007fffb61cec98
[   52.461039][ T1175]  </TASK>
[   52.464021][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.715086][  T416] usb 4-1: device descriptor read/64, error -71
[   52.721791][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.729220][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.736793][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.744232][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.751696][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.759114][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.766550][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.773993][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.781594][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.788995][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.796563][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.804099][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.811627][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.819058][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.826655][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.834322][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.842008][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.849507][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.857276][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.864817][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.872745][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.880261][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.887649][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.895175][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.902658][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.910162][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.917550][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.925248][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.932745][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.940336][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.947727][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.955238][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.962721][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.970247][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.977647][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.985067][  T416] usb 4-1: device descriptor read/64, error -71
[   52.991622][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   52.999014][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.006589][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.014112][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.021673][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.029066][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.036766][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.044282][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.051809][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.059203][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.066785][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.074322][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.081849][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.089234][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.096816][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.104577][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.112180][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.119572][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.127145][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.134691][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.142204][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.149590][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.157167][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.164692][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.172389][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.179784][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.187382][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.194913][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.202439][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.209831][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.217389][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.224930][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.232455][  T416] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   53.240237][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.247626][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.255290][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.263981][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.289106][    T9] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[   53.303156][ T1182] fido_id[1182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   53.399955][  T416] usb 4-1: device descriptor read/64, error -71
[   53.519976][  T357] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   53.553251][   T36] kauditd_printk_skb: 73 callbacks suppressed
[   53.553268][   T36] audit: type=1400 audit(1793841880.029:459): avc:  denied  { getopt } for  pid=1186 comm="syz.2.189" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   53.639990][  T416] usb 4-1: device descriptor read/64, error -71
[   53.669953][  T357] usb 2-1: Using ep0 maxpacket: 16
[   53.676231][  T357] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.686532][  T357] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.697287][  T357] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   53.706591][  T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.714725][  T357] usb 2-1: Product: syz
[   53.718972][  T357] usb 2-1: Manufacturer: syz
[   53.723745][  T357] usb 2-1: SerialNumber: syz
[   53.750055][  T416] usb usb4-port1: attempt power cycle
[   53.820125][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   53.937330][  T357] usb 2-1: 0:2 : does not exist
[   53.946797][  T357] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   53.980466][  T357] usb 2-1: USB disconnect, device number 13
[   53.987334][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   53.995919][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   54.009742][    T9] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[   54.010931][  T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   54.019032][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.042711][    T9] usb 3-1: Product: syz
[   54.046893][    T9] usb 3-1: Manufacturer: syz
[   54.051663][    T9] usb 3-1: SerialNumber: syz
[   54.099937][  T416] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   54.120986][  T416] usb 4-1: device descriptor read/8, error -71
[   54.250929][  T416] usb 4-1: device descriptor read/8, error -71
[   54.264224][ T1193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.310794][ T1193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.499949][  T416] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   54.538965][  T416] usb 4-1: device descriptor read/8, error -71
[   54.627828][ T1202] kvm: pic: single mode not supported
[   54.627980][ T1202] kvm: pic: non byte read
[   54.638199][ T1202] kvm: pic: non byte read
[   54.642894][ T1202] kvm: pic: non byte read
[   54.647515][ T1202] kvm: pic: single mode not supported
[   54.647527][ T1202] kvm: pic: level sensitive irq not supported
[   54.653082][ T1202] kvm: pic: non byte read
[   54.663852][ T1202] kvm: pic: single mode not supported
[   54.663865][ T1202] kvm: pic: level sensitive irq not supported
[   54.669351][ T1202] kvm: pic: non byte read
[   54.680234][ T1202] kvm: pic: level sensitive irq not supported
[   54.680290][ T1202] kvm: pic: non byte read
[   54.690963][  T416] usb 4-1: device descriptor read/8, error -71
[   54.691126][ T1202] kvm: pic: non byte read
[   54.701889][ T1202] kvm: pic: non byte read
[   54.706566][ T1202] kvm: pic: non byte read
[   54.711259][ T1202] kvm: pic: non byte read
[   54.716854][ T1202] kvm: pic: single mode not supported
[   54.716866][ T1202] kvm: pic: level sensitive irq not supported
[   54.722887][ T1202] kvm: pic: single mode not supported
[   54.729348][ T1202] kvm: pic: level sensitive irq not supported
[   54.735113][ T1202] kvm: pic: level sensitive irq not supported
[   54.742118][ T1202] kvm: pic: level sensitive irq not supported
[   54.748523][ T1202] kvm: pic: single mode not supported
[   54.754637][ T1202] kvm: pic: level sensitive irq not supported
[   54.760391][ T1202] kvm: pic: single mode not supported
[   54.766794][ T1202] kvm: pic: level sensitive irq not supported
[   54.772569][ T1202] kvm: pic: single mode not supported
[   54.779863][ T1202] kvm: pic: single mode not supported
[   54.785663][ T1202] kvm: pic: single mode not supported
[   54.791385][ T1202] kvm: pic: level sensitive irq not supported
[   54.800152][  T416] usb usb4-port1: unable to enumerate USB device
[   54.865365][   T36] audit: type=1400 audit(1793841881.339:460): avc:  denied  { read } for  pid=1204 comm="syz.1.192" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   54.919926][   T36] audit: type=1400 audit(1793841881.339:461): avc:  denied  { open } for  pid=1204 comm="syz.1.192" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   54.929522][ T1217] FAULT_INJECTION: forcing a failure.
[   54.929522][ T1217] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   54.956649][ T1217] CPU: 1 UID: 0 PID: 1217 Comm: syz.1.197 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   54.956681][ T1217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   54.956694][ T1217] Call Trace:
[   54.956701][ T1217]  <TASK>
[   54.956709][ T1217]  __dump_stack+0x21/0x30
[   54.956733][ T1217]  dump_stack_lvl+0x140/0x1c0
[   54.956752][ T1217]  ? __cfi_dump_stack_lvl+0x10/0x10
[   54.956771][ T1217]  ? get_page_from_freelist+0x4aea/0x4ba0
[   54.956797][ T1217]  ? __switch_to+0xc6b/0x1320
[   54.956817][ T1217]  dump_stack+0x19/0x20
[   54.956834][ T1217]  should_fail_ex+0x3c2/0x510
[   54.956861][ T1217]  should_fail_alloc_page+0xec/0x110
[   54.956884][ T1217]  __alloc_pages_noprof+0x1c0/0x7e0
[   54.956909][ T1217]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   54.956935][ T1217]  ? __alloc_pages_noprof+0x7e0/0x7e0
[   54.956959][ T1217]  ? gfp_to_alloc_flags_cma+0x96/0x1c0
[   54.956985][ T1217]  pte_alloc_one+0x92/0x530
[   54.957008][ T1217]  ? __cfi_pte_alloc_one+0x10/0x10
[   54.957031][ T1217]  ? __alloc_pages_noprof+0x35a/0x7e0
[   54.957055][ T1217]  do_pte_missing+0xfc6/0x4440
[   54.957079][ T1217]  ? pte_marker_clear+0x1b0/0x1b0
[   54.957100][ T1217]  ? __thp_vma_allowable_orders+0x820/0x9a0
[   54.957122][ T1217]  ? preempt_schedule_thunk+0x1a/0x40
[   54.957146][ T1217]  ? __cfi___pmd_alloc+0x10/0x10
[   54.957165][ T1217]  ? try_to_wake_up+0x1052/0x1d10
[   54.957190][ T1217]  ? __cfi___thp_vma_allowable_orders+0x10/0x10
[   54.957214][ T1217]  handle_mm_fault+0x1189/0x1ba0
[   54.957237][ T1217]  ? __cfi_handle_mm_fault+0x10/0x10
[   54.957255][ T1217]  ? __kasan_check_write+0x18/0x20
[   54.957284][ T1217]  ? vfs_write+0xbd2/0xfd0
[   54.957311][ T1217]  ? lock_mm_and_find_vma+0xb8/0x390
[   54.957331][ T1217]  do_user_addr_fault+0x4ee/0x1230
[   54.957365][ T1217]  exc_page_fault+0x58/0xc0
[   54.957393][ T1217]  asm_exc_page_fault+0x2b/0x30
[   54.957418][ T1217] RIP: 0010:__put_user_8+0x11/0x30
[   54.957441][ T1217] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca e9 42 a5 02 00 90 90 90 90 90 90 90 90 90
[   54.957459][ T1217] RSP: 0018:ffffc9000e35fee8 EFLAGS: 00050246
[   54.957480][ T1217] RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000
[   54.957493][ T1217] RDX: ffffc90001a82000 RSI: 0000000000000007 RDI: 0000000000000008
[   54.957506][ T1217] RBP: ffffc9000e35ff10 R08: ffff88813a4862eb R09: 1ffff11027490c5d
[   54.957521][ T1217] R10: dffffc0000000000 R11: ffffed1027490c5e R12: dffffc0000000000
[   54.957535][ T1217] R13: 0000000000000000 R14: 0000000000000000 R15: 00007f679572a9a0
[   54.957552][ T1217]  ? __x64_sys_get_robust_list+0x9d/0xf0
[   54.957576][ T1217]  x64_sys_call+0x2e84/0x2ee0
[   54.957596][ T1217]  do_syscall_64+0x57/0xf0
[   54.957614][ T1217]  ? clear_bhb_loop+0x50/0xa0
[   54.957638][ T1217]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   54.957663][ T1217] RIP: 0033:0x7f679479fb19
[   54.957679][ T1217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.957696][ T1217] RSP: 002b:00007f679572a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000112
[   54.957716][ T1217] RAX: ffffffffffffffda RBX: 00007f6794a25fa0 RCX: 00007f679479fb19
[   54.957734][ T1217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   54.957746][ T1217] RBP: 00007f6794837b70 R08: 0000000000000000 R09: 0000000000000000
[   54.957759][ T1217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   54.957772][ T1217] R13: 00007f6794a26038 R14: 00007f6794a25fa0 R15: 00007fff02198808
[   54.957789][ T1217]  </TASK>
[   54.969939][   T36] audit: type=1400 audit(1793841881.339:462): avc:  denied  { ioctl } for  pid=1204 comm="syz.1.192" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   55.203497][ T1219] syz.3.199 (1219): drop_caches: 0
[   55.211633][   T36] audit: type=1400 audit(1793841881.339:463): avc:  denied  { create } for  pid=1204 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   55.218208][ T1219] netlink: 'syz.3.199': attribute type 16 has an invalid length.
[   55.221626][   T36] audit: type=1400 audit(1793841881.339:464): avc:  denied  { ioctl } for  pid=1204 comm="syz.1.192" path="socket:[11059]" dev="sockfs" ino=11059 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   55.225721][ T1219] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.199'.
[   55.409515][   T36] audit: type=1400 audit(1793841881.359:465): avc:  denied  { write } for  pid=1206 comm="syz.1.193" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.429676][   T36] audit: type=1400 audit(1793841881.359:466): avc:  denied  { read } for  pid=1206 comm="syz.1.193" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.451108][   T36] audit: type=1400 audit(1793841881.369:467): avc:  denied  { write } for  pid=1208 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   55.475589][   T36] audit: type=1400 audit(1793841881.899:468): avc:  denied  { read write } for  pid=1222 comm="syz.1.198" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[   55.509998][ T1225] netlink: 'syz.1.201': attribute type 28 has an invalid length.
[   55.638070][ T1237] FAULT_INJECTION: forcing a failure.
[   55.638070][ T1237] name failslab, interval 1, probability 0, space 0, times 0
[   55.658426][ T1237] CPU: 1 UID: 0 PID: 1237 Comm: syz.1.204 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   55.658461][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   55.658474][ T1237] Call Trace:
[   55.658481][ T1237]  <TASK>
[   55.658489][ T1237]  __dump_stack+0x21/0x30
[   55.658515][ T1237]  dump_stack_lvl+0x140/0x1c0
[   55.658534][ T1237]  ? __cfi_dump_stack_lvl+0x10/0x10
[   55.658553][ T1237]  ? __kasan_check_write+0x18/0x20
[   55.658582][ T1237]  ? rwsem_read_trylock+0x275/0x5a0
[   55.658608][ T1237]  dump_stack+0x19/0x20
[   55.658625][ T1237]  should_fail_ex+0x3c2/0x510
[   55.658654][ T1237]  should_failslab+0xac/0x100
[   55.658675][ T1237]  __kmalloc_node_noprof+0x69/0x500
[   55.658702][ T1237]  ? crypto_create_tfm_node+0xa0/0x4d0
[   55.658730][ T1237]  ? __kasan_check_write+0x18/0x20
[   55.658753][ T1237]  ? up_read+0x26/0x1c0
[   55.658775][ T1237]  crypto_create_tfm_node+0xa0/0x4d0
[   55.658803][ T1237]  crypto_alloc_tfm_node+0x166/0x350
[   55.658832][ T1237]  crypto_alloc_sig+0x34/0x40
[   55.658850][ T1237]  public_key_verify_signature+0x273/0xa40
[   55.658883][ T1237]  ? __cfi_public_key_verify_signature+0x10/0x10
[   55.658912][ T1237]  ? asymmetric_key_generate_id+0x127/0x220
[   55.658939][ T1237]  x509_check_for_self_signed+0x367/0x470
[   55.658969][ T1237]  x509_cert_parse+0x649/0xbd0
[   55.658995][ T1237]  x509_key_preparse+0x6a/0x880
[   55.659023][ T1237]  ? __cfi_down_read+0x10/0x10
[   55.659049][ T1237]  asymmetric_key_preparse+0xb6/0x100
[   55.659072][ T1237]  __key_create_or_update+0x430/0xa90
[   55.659098][ T1237]  ? security_key_permission+0x3d/0x100
[   55.659126][ T1237]  ? key_create_or_update+0x70/0x70
[   55.659149][ T1237]  ? __kasan_kmalloc+0x96/0xb0
[   55.659167][ T1237]  ? __cfi_lookup_user_key_possessed+0x10/0x10
[   55.659190][ T1237]  key_create_or_update+0x47/0x70
[   55.659213][ T1237]  __se_sys_add_key+0x355/0x4b0
[   55.659230][ T1237]  ? __x64_sys_add_key+0xf0/0xf0
[   55.659257][ T1237]  ? __kasan_check_write+0x18/0x20
[   55.659283][ T1237]  ? fpregs_restore_userregs+0x11c/0x260
[   55.659307][ T1237]  __x64_sys_add_key+0xc3/0xf0
[   55.659324][ T1237]  x64_sys_call+0x195f/0x2ee0
[   55.659344][ T1237]  do_syscall_64+0x57/0xf0
[   55.659362][ T1237]  ? clear_bhb_loop+0x50/0xa0
[   55.659387][ T1237]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   55.659410][ T1237] RIP: 0033:0x7f679479fb19
[   55.659426][ T1237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.659443][ T1237] RSP: 002b:00007f679572a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   55.659465][ T1237] RAX: ffffffffffffffda RBX: 00007f6794a25fa0 RCX: 00007f679479fb19
[   55.659480][ T1237] RDX: 0000200000001480 RSI: 0000000000000000 RDI: 0000200000000dc0
[   55.659494][ T1237] RBP: 00007f6794837b70 R08: ffffffffffffffff R09: 0000000000000000
[   55.659508][ T1237] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[   55.659520][ T1237] R13: 00007f6794a26038 R14: 00007f6794a25fa0 R15: 00007fff02198808
[   55.659537][ T1237]  </TASK>
[   56.220892][  T336] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   56.369959][  T336] usb 2-1: Using ep0 maxpacket: 16
[   56.381956][  T336] usb 2-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 0, changing to 1
[   56.394701][ T1243] FAULT_INJECTION: forcing a failure.
[   56.394701][ T1243] name failslab, interval 1, probability 0, space 0, times 0
[   56.407386][  T336] usb 2-1: config 0 interface 0 altsetting 246 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.417845][ T1243] CPU: 1 UID: 0 PID: 1243 Comm: syz.3.206 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   56.417876][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   56.417890][ T1243] Call Trace:
[   56.417896][ T1243]  <TASK>
[   56.417904][ T1243]  __dump_stack+0x21/0x30
[   56.417928][ T1243]  dump_stack_lvl+0x140/0x1c0
[   56.417947][ T1243]  ? __cfi_dump_stack_lvl+0x10/0x10
[   56.417966][ T1243]  ? vfs_open+0x86/0x240
[   56.417990][ T1243]  ? __x64_sys_openat+0x13a/0x170
[   56.418014][ T1243]  ? do_syscall_64+0x57/0xf0
[   56.418035][ T1243]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   56.418062][ T1243]  dump_stack+0x19/0x20
[   56.418079][ T1243]  should_fail_ex+0x3c2/0x510
[   56.418118][ T1243]  should_failslab+0xac/0x100
[   56.418139][ T1243]  __kmalloc_cache_noprof+0x41/0x470
[   56.418168][ T1243]  ? alloc_tty_struct+0xb4/0x7e0
[   56.418196][ T1243]  alloc_tty_struct+0xb4/0x7e0
[   56.418224][ T1243]  ? __cfi_alloc_tty_struct+0x10/0x10
[   56.418252][ T1243]  ? __kasan_check_write+0x18/0x20
[   56.418280][ T1243]  ? mutex_lock+0x97/0x1d0
[   56.418304][ T1243]  tty_init_dev+0x5d/0x4f0
[   56.418329][ T1243]  tty_open+0xa09/0x10b0
[   56.418350][ T1243]  ? kobject_get_unless_zero+0x163/0x1f0
[   56.418371][ T1243]  ? __cfi_tty_open+0x10/0x10
[   56.418391][ T1243]  ? selinux_file_open+0x46c/0x630
[   56.418410][ T1243]  chrdev_open+0x4e8/0x610
[   56.418429][ T1243]  ? __cfi_chrdev_open+0x10/0x10
[   56.418448][ T1243]  ? bpf_lsm_file_open+0xd/0x20
[   56.418470][ T1243]  ? __cfi_chrdev_open+0x10/0x10
[   56.418488][ T1243]  do_dentry_open+0x97f/0x1510
[   56.418513][ T1243]  vfs_open+0x86/0x240
[   56.418536][ T1243]  ? __cfi_vfs_open+0x10/0x10
[   56.418558][ T1243]  ? may_open+0x352/0x430
[   56.418580][ T1243]  path_openat+0x2c49/0x35a0
[   56.418604][ T1243]  ? kasan_save_alloc_info+0x3a/0x50
[   56.418628][ T1243]  ? getname+0x1b/0x30
[   56.418645][ T1243]  ? x64_sys_call+0xe69/0x2ee0
[   56.418669][ T1243]  ? do_syscall_64+0x57/0xf0
[   56.418698][ T1243]  ? do_filp_open+0x440/0x440
[   56.418721][ T1243]  do_filp_open+0x1f2/0x440
[   56.418744][ T1243]  ? __cfi_do_filp_open+0x10/0x10
[   56.418770][ T1243]  ? alloc_fd+0x4c1/0x570
[   56.418791][ T1243]  do_sys_openat2+0x134/0x1d0
[   56.418815][ T1243]  ? fput+0x1a4/0x230
[   56.418837][ T1243]  ? do_sys_open+0x100/0x100
[   56.418862][ T1243]  __x64_sys_openat+0x13a/0x170
[   56.418887][ T1243]  x64_sys_call+0xe69/0x2ee0
[   56.418907][ T1243]  do_syscall_64+0x57/0xf0
[   56.418927][ T1243]  ? clear_bhb_loop+0x50/0xa0
[   56.418952][ T1243]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   56.418976][ T1243] RIP: 0033:0x7ff0cf79fb19
[   56.418992][ T1243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.419009][ T1243] RSP: 002b:00007ff0d06c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   56.419030][ T1243] RAX: ffffffffffffffda RBX: 00007ff0cfa25fa0 RCX: 00007ff0cf79fb19
[   56.419046][ T1243] RDX: 0000000000082084 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[   56.419060][ T1243] RBP: 00007ff0cf837b70 R08: 0000000000000000 R09: 0000000000000000
[   56.419074][ T1243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   56.419087][ T1243] R13: 00007ff0cfa26038 R14: 00007ff0cfa25fa0 R15: 00007ffcf256b268
[   56.419104][ T1243]  </TASK>
[   56.440088][    T9] usb 3-1: USB disconnect, device number 13
[   56.441430][  T336] usb 2-1: config 0 interface 0 altsetting 246 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   56.454418][  T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   56.456573][  T336] usb 2-1: config 0 interface 0 has no altsetting 0
[   56.782893][  T336] usb 2-1: New USB device found, idVendor=1532, idProduct=0116, bcdDevice= 0.00
[   56.792481][  T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.830579][  T336] usb 2-1: config 0 descriptor??
[   57.041027][  T336] usbhid 2-1:0.0: can't add hid device: -71
[   57.047169][ T1256] deleting an unspecified loop device is not supported.
[   57.049191][  T336] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   57.069266][  T336] usb 2-1: USB disconnect, device number 14
[   57.339944][  T357] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[   57.501027][  T357] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.511329][  T357] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   57.522527][  T357] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   57.533538][  T357] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   57.544914][  T357] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   57.561023][  T357] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   57.570191][  T357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.584265][  T357] usb 4-1: Product: syz
[   57.589199][  T357] usb 4-1: Manufacturer: syz
[   57.594332][  T357] usb 4-1: SerialNumber: syz
[   57.600330][ T1258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   57.609527][  T357] cdc_mbim 4-1:1.0: skipping garbage
[   57.619978][  T441] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   57.801183][  T441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.813981][  T357] cdc_mbim 4-1:1.0: bind() failure
[   57.816168][  T441] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   57.819880][  T357] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   57.834924][  T357] cdc_ncm 4-1:1.1: bind() failure
[   57.835584][  T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.851805][  T357] usb 4-1: USB disconnect, device number 20
[   57.856380][  T441] usb 3-1: config 0 descriptor??
[   58.052779][ T1285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   58.066252][  T441] usbhid 3-1:0.0: can't add hid device: -71
[   58.080162][  T441] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   58.089005][ T1285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1285 comm=syz.1.218
[   58.102643][  T441] usb 3-1: USB disconnect, device number 14
[   58.328955][ T1292] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   58.343572][ T1292] overlayfs: conflicting lowerdir path
[   58.519955][  T416] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   58.540045][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   58.691064][  T416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.702113][  T416] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   58.711241][  T416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.720533][    T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   58.730584][  T416] usb 3-1: config 0 descriptor??
[   58.738948][    T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   58.752802][    T9] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   58.761971][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.770005][    T9] usb 2-1: Product: syz
[   58.774267][    T9] usb 2-1: Manufacturer: syz
[   58.778904][    T9] usb 2-1: SerialNumber: syz
[   58.788017][ T1290] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   58.795465][ T1290] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   58.803994][    T9] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   58.816445][    T9] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   58.827491][    T9] usbserial_generic 2-1:1.0: generic converter detected
[   58.839594][    T9] usb 2-1: generic converter now attached to ttyUSB0
[   59.021374][ T1290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.030780][ T1290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.039548][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.049001][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.058721][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.068140][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.078629][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.088060][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.097813][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.107239][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.116906][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.126323][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.135834][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.145236][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.154741][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.164153][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.173677][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.183096][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.193219][  T416] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[   59.201727][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.201790][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.211249][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   59.234462][  T357] usb 2-1: USB disconnect, device number 15
[   59.250146][  T357] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   59.258304][  T357] usbserial_generic 2-1:1.0: device disconnected
[   59.268411][  T416] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input7
[   59.315094][   T36] kauditd_printk_skb: 27 callbacks suppressed
[   59.315111][   T36] audit: type=1400 audit(1793841885.789:496): avc:  denied  { mounton } for  pid=1303 comm="syz.3.224" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   59.342960][ T1304] overlayfs: failed to resolve './file0': -2
[   59.351273][ T1304] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   59.360854][   T36] audit: type=1400 audit(1793841885.829:497): avc:  denied  { ioctl } for  pid=1303 comm="syz.3.224" path="socket:[12360]" dev="sockfs" ino=12360 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   59.374587][  T416] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   59.386402][   T36] audit: type=1400 audit(1793841885.839:498): avc:  denied  { read } for  pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=543 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   59.422537][   T36] audit: type=1400 audit(1793841885.839:499): avc:  denied  { open } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=543 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   59.463111][   T36] audit: type=1400 audit(1793841885.839:500): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=543 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   59.609961][  T441] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   59.699419][  T336] usb 3-1: USB disconnect, device number 15
[   59.759940][  T441] usb 4-1: Using ep0 maxpacket: 16
[   59.780894][  T441] usb 4-1: unable to get BOS descriptor or descriptor too short
[   59.789924][  T441] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.793732][ T1312] raw_sendmsg: syz.1.227 forgot to set AF_INET. Fix it!
[   59.809960][  T441] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   59.823307][   T36] audit: type=1400 audit(1793841886.289:501): avc:  denied  { write } for  pid=1311 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   59.842823][  T441] usb 4-1: config 1 interface 0 has no altsetting 0
[   59.851540][  T441] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   59.857607][   T36] audit: type=1400 audit(1793841886.289:502): avc:  denied  { bind } for  pid=1311 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   59.860811][  T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.888680][  T441] usb 4-1: Product: syz
[   59.893167][  T441] usb 4-1: Manufacturer: syz
[   59.897812][  T441] usb 4-1: SerialNumber: syz
[   59.903050][   T36] audit: type=1400 audit(1793841886.319:503): avc:  denied  { transfer } for  pid=1313 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   60.050525][  T336] rust_binder: 1313: undelivered TRANSACTION_COMPLETE
[   60.057415][  T336] rust_binder: 1313: undelivered transaction 11, process died
[   60.126840][  T441] usb 4-1: bad CDC descriptors
[   60.134145][  T441] usb 4-1: USB disconnect, device number 21
[   60.219832][ T1321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'.
[   60.298810][ T1328] capability: warning: `syz.1.233' uses 32-bit capabilities (legacy support in use)
[   60.394585][ T1339] input: syz1 as /devices/virtual/input/input8
[   60.574638][   T36] audit: type=1400 audit(1793841887.049:504): avc:  denied  { read } for  pid=1342 comm="syz.1.237" name="freeze_notification" dev="binder" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.609587][   T36] audit: type=1400 audit(1793841887.049:505): avc:  denied  { open } for  pid=1342 comm="syz.1.237" path="/dev/binderfs/features/freeze_notification" dev="binder" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.636689][ T1345] fuse: Bad value for 'group_id'
[   60.650001][ T1345] fuse: Bad value for 'group_id'
[   60.692980][ T1349] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   60.707263][ T1349] overlayfs: failed to get uuid (87/file0, err=-13); falling back to uuid=null.
[   60.717470][ T1349] syz.1.240: attempt to access beyond end of device
[   60.717470][ T1349] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0
[   60.735351][ T1349] EXT4-fs (loop1): unable to read superblock
[   60.762149][ T1353] device-mapper: verity: blake2b-256 using ahash "blake2b-256-generic"
[   60.780170][ T1353] device-mapper: table: 252:2: verity: Invalid root digest (-EINVAL)
[   60.789793][ T1353] device-mapper: ioctl: error adding target to table
[   60.820056][ T1366] FAULT_INJECTION: forcing a failure.
[   60.820056][ T1366] name failslab, interval 1, probability 0, space 0, times 0
[   60.838618][ T1366] CPU: 1 UID: 0 PID: 1366 Comm: syz.1.245 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   60.838652][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   60.838665][ T1366] Call Trace:
[   60.838672][ T1366]  <TASK>
[   60.838680][ T1366]  __dump_stack+0x21/0x30
[   60.838706][ T1366]  dump_stack_lvl+0x140/0x1c0
[   60.838725][ T1366]  ? __cfi_dump_stack_lvl+0x10/0x10
[   60.838744][ T1366]  ? avc_has_perm+0x155/0x240
[   60.838766][ T1366]  dump_stack+0x19/0x20
[   60.838783][ T1366]  should_fail_ex+0x3c2/0x510
[   60.838812][ T1366]  should_failslab+0xac/0x100
[   60.838834][ T1366]  __kmalloc_cache_noprof+0x41/0x470
[   60.838863][ T1366]  ? kernfs_fop_open+0x357/0xd50
[   60.838886][ T1366]  ? __kasan_check_write+0x18/0x20
[   60.838914][ T1366]  kernfs_fop_open+0x357/0xd50
[   60.838938][ T1366]  ? __cfi_kernfs_fop_open+0x10/0x10
[   60.838962][ T1366]  do_dentry_open+0x97f/0x1510
[   60.838987][ T1366]  vfs_open+0x86/0x240
[   60.839008][ T1366]  ? __cfi_vfs_open+0x10/0x10
[   60.839030][ T1366]  ? may_open+0x352/0x430
[   60.839050][ T1366]  path_openat+0x2c49/0x35a0
[   60.839074][ T1366]  ? kasan_save_alloc_info+0x3a/0x50
[   60.839100][ T1366]  ? getname+0x1b/0x30
[   60.839117][ T1366]  ? x64_sys_call+0xe69/0x2ee0
[   60.839137][ T1366]  ? do_syscall_64+0x57/0xf0
[   60.839159][ T1366]  ? do_filp_open+0x440/0x440
[   60.839182][ T1366]  do_filp_open+0x1f2/0x440
[   60.839204][ T1366]  ? __cfi_do_filp_open+0x10/0x10
[   60.839230][ T1366]  ? alloc_fd+0x4c1/0x570
[   60.839252][ T1366]  do_sys_openat2+0x134/0x1d0
[   60.839276][ T1366]  ? fput+0x1a4/0x230
[   60.839297][ T1366]  ? do_sys_open+0x100/0x100
[   60.839322][ T1366]  __x64_sys_openat+0x13a/0x170
[   60.839346][ T1366]  x64_sys_call+0xe69/0x2ee0
[   60.839366][ T1366]  do_syscall_64+0x57/0xf0
[   60.839392][ T1366]  ? clear_bhb_loop+0x50/0xa0
[   60.839421][ T1366]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   60.839447][ T1366] RIP: 0033:0x7f679479fb19
[   60.839464][ T1366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.839481][ T1366] RSP: 002b:00007f679572a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   60.839503][ T1366] RAX: ffffffffffffffda RBX: 00007f6794a25fa0 RCX: 00007f679479fb19
[   60.839515][ T1366] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[   60.839526][ T1366] RBP: 00007f6794837b70 R08: 0000000000000000 R09: 0000000000000000
[   60.839538][ T1366] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000000
[   60.839549][ T1366] R13: 00007f6794a26038 R14: 00007f6794a25fa0 R15: 00007fff02198808
[   60.839565][ T1366]  </TASK>
[   61.369949][  T336] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   61.519939][  T336] usb 3-1: Using ep0 maxpacket: 32
[   61.519939][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   61.534118][  T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.545248][  T336] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[   61.554441][  T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.563635][  T336] usb 3-1: config 0 descriptor??
[   61.679935][   T10] usb 2-1: Using ep0 maxpacket: 16
[   61.686077][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.709925][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.719663][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   61.732574][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   61.741635][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.750292][   T10] usb 2-1: config 0 descriptor??
[   61.772291][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.781526][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.791005][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.801082][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.012350][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.021686][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.039972][  T336] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0008/input/input9
[   62.060653][  T336] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0008/input/input10
[   62.094430][  T336] uclogic 0003:5543:0042.0008: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.2-1/input0
[   62.181096][   T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[   62.188355][   T10] microsoft 0003:045E:07DA.0009: item fetching failed at offset 30/34
[   62.196918][   T10] microsoft 0003:045E:07DA.0009: parse failed
[   62.203213][   T10] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22
[   62.234077][   T10] usb 3-1: USB disconnect, device number 16
[   62.475914][   T10] usb 2-1: USB disconnect, device number 16
[   62.756485][ T1387] futex_wake_op: syz.2.251 tries to shift op by 144; fix this program
[   62.764846][ T1387] futex_wake_op: syz.2.251 tries to shift op by 144; fix this program
[   63.039946][  T336] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   63.063779][ T1393] FAULT_INJECTION: forcing a failure.
[   63.063779][ T1393] name failslab, interval 1, probability 0, space 0, times 0
[   63.076473][ T1393] CPU: 1 UID: 0 PID: 1393 Comm: syz.1.254 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   63.076507][ T1393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   63.076520][ T1393] Call Trace:
[   63.076527][ T1393]  <TASK>
[   63.076534][ T1393]  __dump_stack+0x21/0x30
[   63.076559][ T1393]  dump_stack_lvl+0x140/0x1c0
[   63.076578][ T1393]  ? __cfi_dump_stack_lvl+0x10/0x10
[   63.076598][ T1393]  ? __cfi_do_futex+0x10/0x10
[   63.076620][ T1393]  ? mutex_unlock+0x90/0x240
[   63.076645][ T1393]  dump_stack+0x19/0x20
[   63.076662][ T1393]  should_fail_ex+0x3c2/0x510
[   63.076691][ T1393]  should_failslab+0xac/0x100
[   63.076712][ T1393]  kmem_cache_alloc_noprof+0x42/0x410
[   63.076740][ T1393]  ? new_userfaultfd+0x96/0x410
[   63.076759][ T1393]  new_userfaultfd+0x96/0x410
[   63.076777][ T1393]  __x64_sys_userfaultfd+0x89/0xb0
[   63.076796][ T1393]  x64_sys_call+0x2950/0x2ee0
[   63.076817][ T1393]  do_syscall_64+0x57/0xf0
[   63.076836][ T1393]  ? clear_bhb_loop+0x50/0xa0
[   63.076861][ T1393]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   63.076886][ T1393] RIP: 0033:0x7f679479fb19
[   63.076903][ T1393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.076920][ T1393] RSP: 002b:00007f679572a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143
[   63.076942][ T1393] RAX: ffffffffffffffda RBX: 00007f6794a25fa0 RCX: 00007f679479fb19
[   63.076957][ T1393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080801
[   63.076970][ T1393] RBP: 00007f6794837b70 R08: 0000000000000000 R09: 0000000000000000
[   63.076983][ T1393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.076995][ T1393] R13: 00007f6794a26038 R14: 00007f6794a25fa0 R15: 00007fff02198808
[   63.077012][ T1393]  </TASK>
[   64.119971][  T336] usb 3-1: Using ep0 maxpacket: 8
[   64.127089][  T336] usb 3-1: unable to get BOS descriptor or descriptor too short
[   64.144172][  T336] usb 3-1: config 138 has an invalid interface number: 86 but max is 0
[   64.158241][  T336] usb 3-1: config 138 has no interface number 0
[   64.161651][ T1408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   64.164924][  T336] usb 3-1: config 138 interface 86 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10
[   64.184956][  T336] usb 3-1: config 138 interface 86 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024
[   64.208186][  T336] usb 3-1: config 138 interface 86 has no altsetting 0
[   64.216705][  T336] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=f5.dd
[   64.226037][  T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.234919][  T336] usb 3-1: Manufacturer: 㐊
[   64.239579][  T336] usb 3-1: SerialNumber: 嘔迦쁯꠾䬯ᐪ䬣ꕱ┭ⷩႲ઺쌂Ա秞냑┪筇왞駷ㄋ닃ᖻ팂囬⶧헼ヴ㕤ࠝꎗ૖脨ን巻觟溴멋울쮠ꁻ搤拑믘裀飗翠옑줋嫥㔓Ⴡ尓춈홈䂿ꟊ德ꟕ僒阿ꖚ瑷鎳胝⩟኷䢊冦ꑲ卒魂볤澔ⅽ嘡፩噆揂⎍먁굩넺痱랤牄땴ꂍ뻌ඞ郙湆દ
[   64.275904][ T1389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   64.425064][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   64.425080][   T36] audit: type=1400 audit(1793841890.899:518): avc:  denied  { map } for  pid=1425 comm="syz.3.257" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   64.490374][  T336] usb-storage 3-1:138.86: USB Mass Storage device detected
[   64.499849][  T336] usb-storage 3-1:138.86: device ignored
[   64.537756][  T336] usb 3-1: USB disconnect, device number 17
[   64.800033][  T416] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   64.817545][   T36] audit: type=1400 audit(1793841891.289:519): avc:  denied  { write } for  pid=1439 comm="syz.1.261" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   64.847131][   T36] audit: type=1400 audit(1793841891.289:520): avc:  denied  { create } for  pid=1439 comm="syz.1.261" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1
[   64.867604][   T36] audit: type=1400 audit(1793841891.289:521): avc:  denied  { read write } for  pid=1439 comm="syz.1.261" name="dm0" dev="sda1" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1
[   64.889720][   T36] audit: type=1400 audit(1793841891.289:522): avc:  denied  { open } for  pid=1439 comm="syz.1.261" path="/96/mnt/dm0" dev="sda1" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1
[   64.929930][   T36] audit: type=1400 audit(1793841891.319:523): avc:  denied  { create } for  pid=1439 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.967480][   T36] audit: type=1400 audit(1793841891.439:524): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   64.981631][ T1443] syzkaller0: entered promiscuous mode
[   64.993837][ T1443] syzkaller0: entered allmulticast mode
[   65.009840][   T36] audit: type=1400 audit(1793841891.449:525): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   65.037231][   T36] audit: type=1400 audit(1793841891.449:526): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=1266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.054518][  T416] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   65.069189][   T36] audit: type=1400 audit(1793841891.449:527): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   65.098525][  T416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.124590][  T416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.157946][  T416] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   65.342053][  T416] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   65.512351][  T416] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   65.710969][  T416] usb 4-1: Manufacturer: syz
[   65.838029][  T416] usb 4-1: config 0 descriptor??
[   66.387935][ T1415] bridge_slave_1: left allmulticast mode
[   66.394920][ T1415] bridge_slave_1: left promiscuous mode
[   66.410145][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.439676][ T1415] bridge_slave_0: left allmulticast mode
[   66.456415][ T1415] bridge_slave_0: left promiscuous mode
[   66.474080][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.602085][  T416] usbhid 4-1:0.0: can't add hid device: -71
[   66.621470][  T416] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   66.641018][  T416] usb 4-1: USB disconnect, device number 22
[   66.656099][ T1415] veth1_macvtap: left promiscuous mode
[   66.661714][ T1415] veth0_vlan: left promiscuous mode
[   66.799579][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.814610][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.821790][ T1484] bridge_slave_0: entered allmulticast mode
[   66.828083][ T1484] bridge_slave_0: entered promiscuous mode
[   66.836046][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.844861][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.851997][ T1484] bridge_slave_1: entered allmulticast mode
[   66.858409][ T1484] bridge_slave_1: entered promiscuous mode
[   66.916327][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.923415][ T1484] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.930711][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.937744][ T1484] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.963309][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.981478][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.000470][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.007552][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.029706][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.036787][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.094656][ T1484] veth0_vlan: entered promiscuous mode
[   67.119298][ T1484] veth1_macvtap: entered promiscuous mode
[   67.449962][   T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   67.550044][  T416] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[   67.569992][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   67.620965][   T45] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   67.632732][   T45] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   67.643732][   T45] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   67.655978][   T45] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[   67.665191][   T45] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[   67.673537][   T45] usb 4-1: Manufacturer: syz
[   67.678210][   T45] usb 4-1: SerialNumber: syz
[   67.679944][  T416] usb 2-1: device descriptor read/64, error -71
[   67.689761][ T1521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   67.720940][   T10] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[   67.729017][   T10] usb 3-1: config 0 has no interface number 0
[   67.735168][   T10] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.746457][   T10] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.756285][   T10] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   67.769182][   T10] usb 3-1: config 0 interface 16 has no altsetting 0
[   67.775931][   T10] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b
[   67.785008][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.794343][   T10] usb 3-1: config 0 descriptor??
[   67.898772][ T1521] devpts: called with bogus options
[   67.908091][   T45] usb 4-1: USB disconnect, device number 23
[   67.920000][  T416] usb 2-1: device descriptor read/64, error -71
[   68.159944][  T416] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[   68.202863][   T10] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/0003:06A3:0CD0.000A/input/input11
[   68.219473][   T10] saitek 0003:06A3:0CD0.000A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input16
[   68.289951][  T416] usb 2-1: device descriptor read/64, error -71
[   68.529939][  T416] usb 2-1: device descriptor read/64, error -71
[   68.640087][  T416] usb usb2-port1: attempt power cycle
[   68.979937][  T416] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[   69.010927][  T416] usb 2-1: device descriptor read/8, error -71
[   69.141031][  T416] usb 2-1: device descriptor read/8, error -71
[   69.189947][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   69.359973][   T10] usb 6-1: Using ep0 maxpacket: 16
[   69.369950][   T10] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[   69.379429][   T10] usb 6-1: config 0 has no interface number 0
[   69.385810][   T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   69.395730][  T416] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[   69.403408][   T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   69.413652][   T10] usb 6-1: config 0 interface 41 has no altsetting 0
[   69.422358][   T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   69.431564][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.439655][   T10] usb 6-1: Product: syz
[   69.444201][  T357] usb 3-1: reset high-speed USB device number 18 using dummy_hcd
[   69.452041][   T10] usb 6-1: Manufacturer: syz
[   69.456890][   T10] usb 6-1: SerialNumber: syz
[   69.461593][  T416] usb 2-1: device descriptor read/8, error -71
[   69.470309][   T10] usb 6-1: config 0 descriptor??
[   69.475540][ T1558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   69.482893][ T1558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   69.590978][  T416] usb 2-1: device descriptor read/8, error -71
[   69.699911][ T1558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1558 comm=syz.5.285
[   69.709997][  T416] usb usb2-port1: unable to enumerate USB device
[   69.712539][ T1558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   69.725946][ T1558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   69.936716][   T10] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[   69.949115][   T10] usb 6-1: USB disconnect, device number 2
[   69.989947][  T357] usb 3-1: device descriptor read/64, error -71
[   70.354844][   T36] kauditd_printk_skb: 35 callbacks suppressed
[   70.354859][   T36] audit: type=1400 audit(1793841896.829:563): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   70.398114][   T36] audit: type=1400 audit(1793841896.869:564): avc:  denied  { mount } for  pid=1563 comm="syz.2.287" name="/" dev="ramfs" ino=14021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   70.462700][ T1576] netlink: 'syz.5.289': attribute type 4 has an invalid length.
[   70.475192][ T1576] netlink: 17 bytes leftover after parsing attributes in process `syz.5.289'.
[   70.572592][   T36] audit: type=1400 audit(1793841897.049:565): avc:  denied  { write } for  pid=1577 comm="syz.2.290" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   70.639948][  T336] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   70.780084][  T336] usb 2-1: device descriptor read/64, error -71
[   70.969950][  T357] usb 3-1: device descriptor read/64, error -71
[   71.020084][  T336] usb 2-1: device descriptor read/64, error -71
[   71.209946][  T357] usb 3-1: reset high-speed USB device number 18 using dummy_hcd
[   71.219939][  T357] usb 3-1: device reset changed ep0 maxpacket size!
[   71.240050][   T62] usb 3-1: USB disconnect, device number 18
[   71.260059][  T336] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   71.389975][   T62] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   71.419946][  T336] usb 2-1: device descriptor read/64, error -71
[   71.442422][   T36] audit: type=1400 audit(1793841897.919:566): avc:  denied  { getopt } for  pid=1584 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.549951][   T62] usb 3-1: Using ep0 maxpacket: 16
[   71.556184][   T62] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.566508][   T62] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.577967][   T62] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.588729][   T62] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   71.601697][   T62] usb 3-1: config 0 interface 0 has no altsetting 0
[   71.608313][   T62] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[   71.617554][   T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.630150][   T62] usb 3-1: config 0 descriptor??
[   71.659951][  T336] usb 2-1: device descriptor read/64, error -71
[   71.770031][  T336] usb usb2-port1: attempt power cycle
[   71.819952][  T357] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   71.841645][   T62] usbhid 3-1:0.0: can't add hid device: -71
[   71.848915][   T62] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   71.860424][   T62] usb 3-1: USB disconnect, device number 19
[   71.969940][  T357] usb 6-1: Using ep0 maxpacket: 16
[   71.976202][  T357] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.987662][  T357] usb 6-1: config 0 interface 0 has no altsetting 0
[   71.994421][  T357] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[   72.009930][  T357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.023347][  T357] usb 6-1: config 0 descriptor??
[   72.109953][  T336] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   72.131008][  T336] usb 2-1: device descriptor read/8, error -71
[   72.280972][  T336] usb 2-1: device descriptor read/8, error -71
[   72.432668][  T357] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[   72.440095][  T357] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[   72.447200][  T357] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[   72.454650][  T357] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[   72.465427][  T357] uclogic 0003:5543:0064.000B: unknown main item tag 0x0
[   72.473431][  T357] uclogic 0003:5543:0064.000B: No inputs registered, leaving
[   72.497866][  T357] uclogic 0003:5543:0064.000B: hiddev96,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0
[   72.529942][  T336] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   72.550912][  T336] usb 2-1: device descriptor read/8, error -71
[   72.681106][  T336] usb 2-1: device descriptor read/8, error -71
[   72.790066][  T336] usb usb2-port1: unable to enumerate USB device
[   72.867774][   T36] audit: type=1400 audit(1793841899.339:567): avc:  denied  { create } for  pid=1613 comm="syz.2.294" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   73.428383][ T1641] netlink: 'syz.2.295': attribute type 16 has an invalid length.
[   73.430893][   T36] audit: type=1400 audit(1793841899.909:568): avc:  denied  { read } for  pid=1642 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   73.455413][ T1641] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.295'.
[   73.482898][   T36] audit: type=1400 audit(1793841899.959:569): avc:  denied  { setopt } for  pid=1644 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   73.552135][   T36] audit: type=1400 audit(1793841900.029:570): avc:  denied  { relabelfrom } for  pid=1650 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   73.572601][   T36] audit: type=1400 audit(1793841900.029:571): avc:  denied  { relabelto } for  pid=1650 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   73.638188][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.664861][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.673928][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.685085][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.697602][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.706634][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.715651][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'.
[   73.724665][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'.
[   74.060022][  T357] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[   74.231059][  T357] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   74.241988][  T357] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   74.255071][  T357] usb 3-1: config 0 interface 0 has no altsetting 0
[   74.262229][  T357] usb 3-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00
[   74.280791][  T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.289528][  T357] usb 3-1: config 0 descriptor??
[   74.295316][ T1662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   74.443932][   T36] audit: type=1326 audit(1793841900.919:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1584 comm="syz.5.292" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487679fb19 code=0x7fc00000
[   74.486125][   T62] usb 6-1: USB disconnect, device number 3
[   74.539963][  T336] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   74.606307][ T1666] FAULT_INJECTION: forcing a failure.
[   74.606307][ T1666] name failslab, interval 1, probability 0, space 0, times 0
[   74.619070][ T1666] CPU: 0 UID: 0 PID: 1666 Comm: syz.5.304 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   74.619107][ T1666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   74.619120][ T1666] Call Trace:
[   74.619126][ T1666]  <TASK>
[   74.619134][ T1666]  __dump_stack+0x21/0x30
[   74.619160][ T1666]  dump_stack_lvl+0x140/0x1c0
[   74.619178][ T1666]  ? __cfi_dump_stack_lvl+0x10/0x10
[   74.619197][ T1666]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   74.619226][ T1666]  dump_stack+0x19/0x20
[   74.619243][ T1666]  should_fail_ex+0x3c2/0x510
[   74.619272][ T1666]  should_failslab+0xac/0x100
[   74.619294][ T1666]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   74.619321][ T1666]  ? __d_alloc+0x42/0x8c0
[   74.619348][ T1666]  __d_alloc+0x42/0x8c0
[   74.619374][ T1666]  d_alloc_parallel+0xe4/0x1370
[   74.619401][ T1666]  ? __kasan_check_write+0x18/0x20
[   74.619429][ T1666]  ? security_inode_permission+0x77/0x150
[   74.619463][ T1666]  ? downgrade_write+0x470/0x470
[   74.619489][ T1666]  ? try_to_unlazy+0x62a/0xb50
[   74.619519][ T1666]  ? __cfi_d_alloc_parallel+0x10/0x10
[   74.619547][ T1666]  ? down_read+0x7f/0xe0
[   74.619572][ T1666]  ? __cfi_down_read+0x10/0x10
[   74.619598][ T1666]  path_openat+0xa09/0x35a0
[   74.619622][ T1666]  ? x64_sys_call+0xe69/0x2ee0
[   74.619645][ T1666]  ? do_filp_open+0x440/0x440
[   74.619669][ T1666]  do_filp_open+0x1f2/0x440
[   74.619691][ T1666]  ? __cfi_do_filp_open+0x10/0x10
[   74.619715][ T1666]  ? __cfi_kfree_link+0x10/0x10
[   74.619740][ T1666]  ? alloc_fd+0x4c1/0x570
[   74.619760][ T1666]  do_sys_openat2+0x134/0x1d0
[   74.619784][ T1666]  ? fput+0x1a4/0x230
[   74.619805][ T1666]  ? do_sys_open+0x100/0x100
[   74.619829][ T1666]  __x64_sys_openat+0x13a/0x170
[   74.619854][ T1666]  x64_sys_call+0xe69/0x2ee0
[   74.619874][ T1666]  do_syscall_64+0x57/0xf0
[   74.619894][ T1666]  ? clear_bhb_loop+0x50/0xa0
[   74.619917][ T1666]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   74.619939][ T1666] RIP: 0033:0x7f487676034e
[   74.619955][ T1666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   74.619972][ T1666] RSP: 002b:00007f4877601ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   74.619993][ T1666] RAX: ffffffffffffffda RBX: 00007f48776026c0 RCX: 00007f487676034e
[   74.620008][ T1666] RDX: 0000000000000002 RSI: 00007f4877601f90 RDI: ffffffffffffff9c
[   74.620021][ T1666] RBP: 00007f4876837b70 R08: 0000000000000000 R09: 0000000000000000
[   74.620033][ T1666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.620046][ T1666] R13: 00007f4876a26038 R14: 00007f4876a25fa0 R15: 00007fffe71b4388
[   74.620063][ T1666]  </TASK>
[   74.731047][  T336] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   74.865546][ T1666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   74.870346][ T1662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.910090][ T1662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.915682][  T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.938466][  T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.948459][  T336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   74.965402][  T336] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   74.965779][  T357] usbhid 3-1:0.0: can't add hid device: -71
[   74.974616][  T336] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   74.988694][  T357] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   74.990742][  T336] usb 2-1: Manufacturer: syz
[   75.011466][  T336] usb 2-1: config 0 descriptor??
[   75.020185][  T357] usb 3-1: USB disconnect, device number 20
[   75.432626][  T336] usbhid 2-1:0.0: can't add hid device: -71
[   75.438614][  T336] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   75.449631][  T336] usb 2-1: USB disconnect, device number 25
[   75.500846][   T36] audit: type=1400 audit(1793841901.969:573): avc:  denied  { mounton } for  pid=1674 comm="syz.2.306" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.501291][ T1676] __nla_validate_parse: 57 callbacks suppressed
[   75.501306][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.565225][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.574290][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.583313][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.592358][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.601393][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.610563][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.619571][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.628764][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.637906][ T1676] netlink: 328 bytes leftover after parsing attributes in process `syz.2.306'.
[   75.736257][   T36] audit: type=1400 audit(1793841902.209:574): avc:  denied  { map } for  pid=1681 comm="syz.2.307" path="/85/proc/304/task/305/fail-nth" dev="proc" ino=14931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   75.761911][ T1682] FAULT_INJECTION: forcing a failure.
[   75.761911][ T1682] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   75.775095][ T1682] CPU: 1 UID: 0 PID: 1682 Comm: syz.2.307 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   75.775128][ T1682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   75.775141][ T1682] Call Trace:
[   75.775147][ T1682]  <TASK>
[   75.775155][ T1682]  __dump_stack+0x21/0x30
[   75.775180][ T1682]  dump_stack_lvl+0x140/0x1c0
[   75.775200][ T1682]  ? __cfi_dump_stack_lvl+0x10/0x10
[   75.775220][ T1682]  dump_stack+0x19/0x20
[   75.775240][ T1682]  should_fail_ex+0x3c2/0x510
[   75.775268][ T1682]  should_fail+0xf/0x20
[   75.775286][ T1682]  should_fail_usercopy+0x1e/0x30
[   75.775305][ T1682]  strncpy_from_user+0x29/0x280
[   75.775324][ T1682]  getname_flags+0x106/0x6b0
[   75.775346][ T1682]  user_path_at+0x2b/0x60
[   75.775367][ T1682]  __se_sys_mount+0x28a/0x480
[   75.775386][ T1682]  ? __x64_sys_mount+0xf0/0xf0
[   75.775403][ T1682]  ? __kasan_check_write+0x18/0x20
[   75.775430][ T1682]  ? fpregs_restore_userregs+0x11c/0x260
[   75.775457][ T1682]  __x64_sys_mount+0xc3/0xf0
[   75.775474][ T1682]  x64_sys_call+0x2021/0x2ee0
[   75.775495][ T1682]  do_syscall_64+0x57/0xf0
[   75.775515][ T1682]  ? clear_bhb_loop+0x50/0xa0
[   75.775541][ T1682]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   75.775566][ T1682] RIP: 0033:0x7fda2b19fb19
[   75.775583][ T1682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.775600][ T1682] RSP: 002b:00007fda2c0e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   75.775621][ T1682] RAX: ffffffffffffffda RBX: 00007fda2b425fa0 RCX: 00007fda2b19fb19
[   75.775636][ T1682] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000000000
[   75.775649][ T1682] RBP: 00007fda2b237b70 R08: 00002000000003c0 R09: 0000000000000000
[   75.775663][ T1682] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000
[   75.775676][ T1682] R13: 00007fda2b426038 R14: 00007fda2b425fa0 R15: 00007fffb61cec98
[   75.775694][ T1682]  </TASK>
[   76.102420][ T1695] FAULT_INJECTION: forcing a failure.
[   76.102420][ T1695] name failslab, interval 1, probability 0, space 0, times 0
[   76.115336][ T1695] CPU: 0 UID: 0 PID: 1695 Comm: syz.1.313 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   76.115371][ T1695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   76.115384][ T1695] Call Trace:
[   76.115390][ T1695]  <TASK>
[   76.115398][ T1695]  __dump_stack+0x21/0x30
[   76.115424][ T1695]  dump_stack_lvl+0x140/0x1c0
[   76.115444][ T1695]  ? __cfi_dump_stack_lvl+0x10/0x10
[   76.115463][ T1695]  ? preempt_schedule+0xc5/0xe0
[   76.115486][ T1695]  ? __cfi_preempt_schedule+0x10/0x10
[   76.115508][ T1695]  ? activate_task+0x43b/0x480
[   76.115531][ T1695]  ? avc_has_perm_noaudit+0x26b/0x360
[   76.115554][ T1695]  dump_stack+0x19/0x20
[   76.115571][ T1695]  should_fail_ex+0x3c2/0x510
[   76.115600][ T1695]  should_failslab+0xac/0x100
[   76.115621][ T1695]  kmem_cache_alloc_noprof+0x42/0x410
[   76.115648][ T1695]  ? inet_bind_bucket_create+0x40/0x320
[   76.115668][ T1695]  ? _raw_spin_lock_bh+0x96/0x130
[   76.115688][ T1695]  inet_bind_bucket_create+0x40/0x320
[   76.115707][ T1695]  ? inet_addr_type_table+0x119/0x510
[   76.115734][ T1695]  inet_csk_get_port+0xaf2/0x15e0
[   76.115757][ T1695]  ? __cfi_lock_sock_nested+0x10/0x10
[   76.115776][ T1695]  ? __cfi_selinux_socket_bind+0x10/0x10
[   76.115801][ T1695]  __inet_bind+0x5de/0xba0
[   76.115828][ T1695]  inet_bind_sk+0x13b/0x200
[   76.115847][ T1695]  ? __check_object_size+0xdc/0x870
[   76.115875][ T1695]  ? __cfi_inet_bind_sk+0x10/0x10
[   76.115895][ T1695]  inet_bind+0x4a/0x70
[   76.115913][ T1695]  __sys_bind+0x30c/0x410
[   76.115935][ T1695]  ? __cfi___sys_bind+0x10/0x10
[   76.115958][ T1695]  ? __kasan_check_write+0x18/0x20
[   76.115984][ T1695]  ? fpregs_restore_userregs+0x11c/0x260
[   76.116010][ T1695]  __x64_sys_bind+0x7e/0x90
[   76.116031][ T1695]  x64_sys_call+0x1ffd/0x2ee0
[   76.116052][ T1695]  do_syscall_64+0x57/0xf0
[   76.116071][ T1695]  ? clear_bhb_loop+0x50/0xa0
[   76.116097][ T1695]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   76.116121][ T1695] RIP: 0033:0x7f679479fb19
[   76.116137][ T1695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.116153][ T1695] RSP: 002b:00007f679572a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[   76.116175][ T1695] RAX: ffffffffffffffda RBX: 00007f6794a25fa0 RCX: 00007f679479fb19
[   76.116190][ T1695] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000007
[   76.116203][ T1695] RBP: 00007f6794837b70 R08: 0000000000000000 R09: 0000000000000000
[   76.116215][ T1695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.116228][ T1695] R13: 00007f6794a26038 R14: 00007f6794a25fa0 R15: 00007fff02198808
[   76.116245][ T1695]  </TASK>
[   76.759938][  T336] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   76.841687][   T36] audit: type=1400 audit(1793841903.319:575): avc:  denied  { bind } for  pid=1723 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   76.879852][   T36] audit: type=1400 audit(1793841903.339:576): avc:  denied  { setopt } for  pid=1723 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   76.909871][   T36] audit: type=1400 audit(1793841903.339:577): avc:  denied  { read } for  pid=1723 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   76.929936][ T1726] trusted_key: device-mapper: crypt: Selected cipher does not support IVs
[   76.938644][ T1726] device-mapper: table: 252:4: crypt: Error decoding and setting key (-ENOKEY)
[   76.948028][ T1726] device-mapper: ioctl: error adding target to table
[   77.226291][   T36] audit: type=1400 audit(1793841903.699:578): avc:  denied  { setopt } for  pid=1738 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   77.386850][ T1746] netlink: 'syz.2.329': attribute type 28 has an invalid length.
[   77.436374][ T1749] FAULT_INJECTION: forcing a failure.
[   77.436374][ T1749] name fail_futex, interval 1, probability 0, space 0, times 1
[   77.452548][ T1749] CPU: 0 UID: 0 PID: 1749 Comm: syz.5.330 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   77.452579][ T1749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   77.452591][ T1749] Call Trace:
[   77.452597][ T1749]  <TASK>
[   77.452604][ T1749]  __dump_stack+0x21/0x30
[   77.452627][ T1749]  dump_stack_lvl+0x140/0x1c0
[   77.452644][ T1749]  ? __cfi_dump_stack_lvl+0x10/0x10
[   77.452662][ T1749]  ? kasan_save_track+0x4f/0x80
[   77.452679][ T1749]  ? kasan_save_alloc_info+0x3a/0x50
[   77.452703][ T1749]  ? __kasan_slab_alloc+0x73/0x90
[   77.452722][ T1749]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[   77.452749][ T1749]  ? init_file+0x9e/0x210
[   77.452770][ T1749]  dump_stack+0x19/0x20
[   77.452786][ T1749]  should_fail_ex+0x3c2/0x510
[   77.452813][ T1749]  should_fail+0xf/0x20
[   77.452827][ T1749]  get_futex_key+0x178/0x940
[   77.452845][ T1749]  ? __cfi_get_futex_key+0x10/0x10
[   77.452865][ T1749]  futex_wake+0x150/0x950
[   77.452887][ T1749]  ? __cfi_futex_wake+0x10/0x10
[   77.452909][ T1749]  ? security_file_alloc+0x49/0x220
[   77.452937][ T1749]  do_futex+0x37d/0x510
[   77.452956][ T1749]  ? errseq_sample+0x48/0x70
[   77.452977][ T1749]  ? file_init_path+0x434/0x590
[   77.452999][ T1749]  ? __cfi_do_futex+0x10/0x10
[   77.453018][ T1749]  ? alloc_file_pseudo+0x191/0x1f0
[   77.453039][ T1749]  __se_sys_futex+0x13c/0x320
[   77.453058][ T1749]  ? __x64_sys_futex+0x110/0x110
[   77.453077][ T1749]  ? is_dma_buf_file+0x11/0x50
[   77.453098][ T1749]  __x64_sys_futex+0xe9/0x110
[   77.453117][ T1749]  x64_sys_call+0x227f/0x2ee0
[   77.453137][ T1749]  do_syscall_64+0x57/0xf0
[   77.453156][ T1749]  ? clear_bhb_loop+0x50/0xa0
[   77.453181][ T1749]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   77.453205][ T1749] RIP: 0033:0x7f487679fb19
[   77.453219][ T1749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.453233][ T1749] RSP: 002b:00007f48775e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   77.453252][ T1749] RAX: ffffffffffffffda RBX: 00007f4876a26098 RCX: 00007f487679fb19
[   77.453266][ T1749] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4876a2609c
[   77.453277][ T1749] RBP: 00007f4876a26090 R08: 4000000000000000 R09: 0000000000000000
[   77.453289][ T1749] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000
[   77.453299][ T1749] R13: 00007f4876a26128 R14: 00007fffe71b42a0 R15: 00007fffe71b4388
[   77.453312][ T1749]  </TASK>
[   77.473003][   T36] audit: type=1400 audit(1793841903.939:579): avc:  denied  { load_policy } for  pid=1752 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   77.537390][ T1749] futex_wake_op: syz.5.330 tries to shift op by 144; fix this program
[   77.540464][ T1753] ------------[ cut here ]------------
[   77.735363][ T1753] WARNING: CPU: 1 PID: 1753 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0
[   77.744880][ T1753] Modules linked in:
[   77.748784][ T1753] CPU: 1 UID: 0 PID: 1753 Comm: syz.2.332 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   77.760294][ T1753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   77.770376][ T1753] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0
[   77.776383][ T1753] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d fb fd 89 06 00 0f 85 c2 00 00 00 c6 05 ee fd 89 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24
[   77.796043][ T1753] RSP: 0018:ffffc9000ea17640 EFLAGS: 00010246
[   77.802145][ T1753] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000
[   77.810157][ T1753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ea176f8
[   77.818131][ T1753] RBP: ffffc9000ea17780 R08: ffffc9000ea176f7 R09: 0000000000000000
[   77.826164][ T1753] R10: ffffc9000ea176e0 R11: fffff52001d42edf R12: ffffc9000ea17680
[   77.834178][ T1753] R13: dffffc0000000000 R14: 1ffff92001d42ecc R15: 0000000000000000
[   77.842192][ T1753] FS:  00007fda2c0e96c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000
[   77.851146][ T1753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.857739][ T1753] CR2: 0000200000019000 CR3: 000000011d1f8000 CR4: 00000000003526b0
[   77.865754][ T1753] Call Trace:
[   77.869036][ T1753]  <TASK>
[   77.871999][ T1753]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   77.877737][ T1753]  ? __kasan_slab_alloc+0x73/0x90
[   77.882808][ T1753]  ? kmem_cache_alloc_noprof+0x1e2/0x410
[   77.888463][ T1753]  ? hashtab_init+0xd6/0x1f0
[   77.893094][ T1753]  ___kmalloc_large_node+0x81/0x220
[   77.898307][ T1753]  ? hashtab_init+0xd6/0x1f0
[   77.902937][ T1753]  __kmalloc_large_node_noprof+0x1e/0xd0
[   77.908583][ T1753]  ? hashtab_init+0xd6/0x1f0
[   77.913299][ T1753]  __kmalloc_noprof+0x326/0x510
[   77.918162][ T1753]  ? __cfi_ebitmap_read+0x10/0x10
[   77.923228][ T1753]  hashtab_init+0xd6/0x1f0
[   77.927655][ T1753]  ? policydb_read+0x865/0x2860
[   77.932535][ T1753]  symtab_init+0x44/0x70
[   77.936795][ T1753]  policydb_read+0x8e1/0x2860
[   77.941528][ T1753]  ? __kasan_kmalloc+0x96/0xb0
[   77.946303][ T1753]  ? __cfi_policydb_read+0x10/0x10
[   77.951449][ T1753]  ? security_load_policy+0x130/0x12d0
[   77.956920][ T1753]  security_load_policy+0x16a/0x12d0
[   77.962246][ T1753]  ? irqentry_exit+0x4a/0x60
[   77.966848][ T1753]  ? __kasan_check_write+0x18/0x20
[   77.972000][ T1753]  ? mutex_lock+0x97/0x1d0
[   77.976424][ T1753]  ? __cfi_security_load_policy+0x10/0x10
[   77.982194][ T1753]  ? rep_movs_alternative+0x4a/0xa0
[   77.987404][ T1753]  sel_write_load+0x258/0x600
[   77.992115][ T1753]  ? __cfi_sel_write_load+0x10/0x10
[   77.997319][ T1753]  ? bpf_lsm_file_permission+0xd/0x20
[   78.002733][ T1753]  ? __cfi_sel_write_load+0x10/0x10
[   78.007944][ T1753]  vfs_write+0x3c1/0xfd0
[   78.012237][ T1753]  ? __cfi_vfs_write+0x10/0x10
[   78.017024][ T1753]  ? __kasan_check_write+0x18/0x20
[   78.022182][ T1753]  ? mutex_lock+0x97/0x1d0
[   78.026607][ T1753]  ? __cfi_mutex_lock+0x10/0x10
[   78.031494][ T1753]  ksys_write+0x145/0x260
[   78.035829][ T1753]  ? xfd_validate_state+0x68/0x140
[   78.040972][ T1753]  ? __cfi_ksys_write+0x10/0x10
[   78.045828][ T1753]  ? __kasan_check_write+0x18/0x20
[   78.050982][ T1753]  ? fpregs_restore_userregs+0x11c/0x260
[   78.056625][ T1753]  __x64_sys_write+0x7f/0x90
[   78.061260][ T1753]  x64_sys_call+0x271c/0x2ee0
[   78.065947][ T1753]  do_syscall_64+0x57/0xf0
[   78.070400][ T1753]  ? clear_bhb_loop+0x50/0xa0
[   78.075085][ T1753]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   78.081018][ T1753] RIP: 0033:0x7fda2b19fb19
[   78.085444][ T1753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.105088][ T1753] RSP: 002b:00007fda2c0e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   78.113525][ T1753] RAX: ffffffffffffffda RBX: 00007fda2b425fa0 RCX: 00007fda2b19fb19
[   78.121543][ T1753] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003
[   78.129519][ T1753] RBP: 00007fda2b237b70 R08: 0000000000000000 R09: 0000000000000000
[   78.137523][ T1753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.145512][ T1753] R13: 00007fda2b426038 R14: 00007fda2b425fa0 R15: 00007fffb61cec98
[   78.153523][ T1753]  </TASK>
[   78.156538][ T1753] ---[ end trace 0000000000000000 ]---
[   78.163882][ T1753] SELinux: failed to load policy