last executing test programs:

2m12.386225977s ago: executing program 3 (id=1050):
sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x48, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x0, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x50}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m11.381259421s ago: executing program 3 (id=1058):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x68041, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x12})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9499bb3259e03bbe, 0x12, r1, 0xe852000)
madvise(&(0x7f00000ee000/0xe000)=nil, 0xe000, 0x65)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00002b4000/0x400000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x1101, 0x3}, @flat=@weak_binder={0x77622a85, 0xb}, @fda={0x66646185, 0x9, 0x2, 0x1c}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x815})
ioctl$TCSETSF2(r0, 0x5453, 0x0)

2m11.172130157s ago: executing program 3 (id=1061):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_expedited', 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m10.025323314s ago: executing program 3 (id=1067):
sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x48, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x0, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x50}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m9.070230927s ago: executing program 3 (id=1076):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = timerfd_create(0x9, 0x0)
r3 = timerfd_create(0x9, 0x0)
timerfd_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
timerfd_settime(r2, 0x1, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, 0x0)
r7 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_get$pid(0x2, r7)
ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)={0x5, 0x0, [{0x80000019, 0x5, 0x0, 0x1ff, 0x8, 0x10000}, {0x80000007, 0x0, 0x6, 0x4, 0x5, 0xfffffffe, 0x5}, {0x80000000, 0x9, 0x0, 0x5, 0xb, 0xb, 0xfffffffa}, {0xa, 0x5b8, 0x4, 0x5, 0x0, 0x5, 0xfffffeff}, {0x1, 0x0, 0x1, 0x5, 0x7, 0x80000001}]})

2m8.94108712s ago: executing program 3 (id=1077):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

1m53.727743757s ago: executing program 32 (id=1077):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

1m20.01802952s ago: executing program 1 (id=1406):
write$selinux_access(0xffffffffffffffff, &(0x7f0000000040)={'system_u:object_r:xen_device_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xc}, 0x47)

1m20.01670109s ago: executing program 1 (id=1407):
sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="240000001800", 0x6}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000209010100000000000000000a00000419376786e616506730ab6a553760ffa5f0ae87183d5033ab52b88197373b878dbbce65ed4777111ca984bbe047d28182032883eacb8b58ef43ed93e56d05f8069a55b08bdad5f30f78b04ff98dc8f242922e13c3f3e0ca0ee17d2c5e69082ad78c88c3d2cdd638b6af694aa3bc918c77aa1c4147306018c548bb6f97c21b464aaf4cbe0bc465cfa697f096f52894e31f0b4d74ba3a1290557bed9c5c0893ca654dd4ee02b25fde01378188749cb4fdefc69946c710d45d6f4f4d1193c1d232247f30a0e40cdf2ef3197e71c4532128f077c47ecd9ce655ecb78a1d9abd5463a2247bdb1f"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m19.965366141s ago: executing program 1 (id=1409):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000020, 0x0, 0x8}]}) (fail_nth: 5)

1m19.572117031s ago: executing program 1 (id=1410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x80088a02, &(0x7f0000000000)=0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000340)='./file1\x00', 0x40)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000a00)=""/191, 0xbf}], 0x4, &(0x7f0000000400)=""/23, 0x17}, 0xfff}, {{&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/181, 0xb5}, 0x40}, {{&(0x7f00000005c0)=@rc, 0x80, &(0x7f0000000840)=[{&(0x7f0000000ac0)=""/229, 0xe5}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000980)=""/68, 0x44}], 0x3}, 0x93eb}], 0x3, 0x10003, &(0x7f0000000940)={0x0, 0x989680})
r5 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @rand_addr=0xdffffc00}})
setrlimit(0xb, &(0x7f0000000100)={0x7, 0xfffffffffffffff7})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0)

1m19.517050142s ago: executing program 1 (id=1411):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [], {}, [], {}, {0x20, 0x5}}, 0x24, 0x2) (fail_nth: 5)

1m19.369111815s ago: executing program 1 (id=1415):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0xffffffff, 0x2c08c6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4)

1m19.369023606s ago: executing program 33 (id=1415):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0xffffffff, 0x2c08c6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4)

2.717592254s ago: executing program 2 (id=2077):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001040), 0x41, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
write$vga_arbiter(r1, &(0x7f0000000040)=@other={'trylock', ' ', 'io'}, 0xb)

2.717415094s ago: executing program 2 (id=2078):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)

2.717282344s ago: executing program 2 (id=2079):
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x10000020000, 0x20c281)
ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52)

2.717002304s ago: executing program 2 (id=2080):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='[#\x00', 0x208000, &(0x7f0000000040)={@align=0x7, {0x8, 0x7, 0x2, 0x4}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x9})
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000140)=0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3, 0x3}, 0x6)
ioctl$VT_RELDISP(r0, 0x5605)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c)
ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000300)={0x0, 0x3, 0x2, 0x0, 0x100, 0x3, 0x0, &(0x7f00000002c0)=[{0x4, 0x1ff, 0x3}, {0xb, 0x1d86d5af10104f76, 0x3}, {0xb, 0xfe, 0x1}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000540)={{r2}, r3, 0x6, @unused=[0x8b4, 0x4, 0x7, 0x9], @name="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"})
recvmmsg$unix(r0, &(0x7f0000002280)=[{{&(0x7f0000001540), 0x6e, &(0x7f0000001980)=[{&(0x7f00000015c0)=""/190, 0xbe}, {&(0x7f0000001680)=""/9, 0x9}, {&(0x7f00000016c0)=""/53, 0x35}, {&(0x7f0000001700)=""/203, 0xcb}, {&(0x7f0000001800)=""/115, 0x73}, {&(0x7f0000001880)=""/228, 0xe4}], 0x6, &(0x7f0000001a00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001b40)=""/158, 0x9e}], 0x1}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001cc0)=""/62, 0x3e}, {&(0x7f0000001d00)=""/52, 0x34}, {&(0x7f0000001d40)=""/39, 0x27}, {&(0x7f0000001d80)=""/123, 0x7b}, {&(0x7f0000001e00)=""/212, 0xd4}], 0x5, &(0x7f0000001f80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000002240)=[{&(0x7f0000002100)=""/150, 0x96}, {&(0x7f00000021c0)=""/15, 0xf}, {&(0x7f0000002200)}], 0x3}}], 0x4, 0x142, &(0x7f0000002380)={0x0, 0x3938700})
ioctl$RTC_AIE_OFF(r4, 0x7002)
getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f00000023c0), &(0x7f0000002400)=0x8)
setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f0000002440)=0x1, 0x4)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002480), 0x1, 0x0)
ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000024c0))

2.665020425s ago: executing program 2 (id=2081):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000020000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000200000000000000001000000002b000000ffffffff00000000000000000000000003000000000000000100000000000000020000000000000000000000000000000000001000000000010000000000000000000000000010000000000000000000000000000000000000002000000000000300000000000000000000000000000000000400fde6ffffe80a000000000000000000000200"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.664735715s ago: executing program 2 (id=2082):
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xa0, "", [{{0x9, 0x4, 0x0, 0x1a, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7a, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0x88}}}}}]}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)="2116fa", 0x3)
syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) (async)
r2 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\v)'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\v)'], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.618956296s ago: executing program 0 (id=2085):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040260933330000000000010902240001000040000904000009030004000921200000012228000905810300020308c53a160956f95376c52c820880a173e6b4b14d528c348b128ef0749c8b4eb4f902f3efff853c8683508e87ba12a7f550d5ca8aeac54bdb6a30dd1c7f58b410b4d96c2acc190505d642bcb35d6bb5c74197fe8dada41f7a514eb9645dd9b9e8b978c003f0a1df478ab73c30b0c8ad"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f00000000c0))

1.360998537s ago: executing program 4 (id=2102):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000480)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x20000000)

1.315329578s ago: executing program 4 (id=2104):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents64(r0, &(0x7f0000000500)=""/166, 0xa6)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
r1 = eventfd2(0x1, 0x1)
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000840), 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000300), 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'rdma'}]}, 0x6)
r5 = eventfd2(0x6, 0x80000)
r6 = timerfd_create(0x7, 0x80800)
r7 = eventfd(0x2)
r8 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000009000000", @ANYRES32, @ANYBLOB="000000000000010101000000000000f0ffffffff", @ANYRES32, @ANYBLOB="0000000000000001000000000010000000000000", @ANYRES32, @ANYBLOB="000000005f0545cd3617f47d0000000100000000", @ANYRES32, @ANYBLOB="00000000000000010000000000f0ffff00000000", @ANYRES32, @ANYBLOB="0000000000d80339be980000010000001400000185f2b10b7db7757d8cb8abb0d56fd6a5d26f3afdb52d6133959be9b0e631d8c3627f66ed424346e6ce0ebf308bbedd2a73e6e1837e9a07e2afb6d3f3b5dd3a9d2495a7d7294ee1a8ee", @ANYRES32, @ANYBLOB="0000000000f0ffffffffffff0080000000000000", @ANYRES32, @ANYBLOB="0000000000200000000000000000000100000000", @ANYRES32, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000001000000"])
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c)
sendmmsg$inet6(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013af49488ef5372943", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6c7831733ca886e99a61c5d196e7b454c74823d5131d1232e0b5eaab8262f6b9ae8ea9a7a27fbe7920311d60976d35446c503d822e08b2e68d782c5e6619193281c856ea3774b58e093858e4be47e9b6d321b97dd5845f5644aa7d2e7cf29bf157251a70a98e479e3ee2a92724582bf20ff56ce8f28bc5409b82d5d84c094770fb39e1dd839a8640670867c1743879be26fa24475e37f7317a9fa83598707c2ee6fb92d21745bdb4c455f43c8fa873ac7f198e47c3d4298862d270413ee35c893d8411d1c80f41171991827374280c1c00a5028fb452e6bccc", 0xd9}], 0x1, &(0x7f0000000400)=ANY=[], 0x30}}], 0x2, 0xc8040)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r10, 0x0, r9, 0x0, 0x7ffff000, 0x6)
r11 = inotify_init()
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x30)
copy_file_range(r12, &(0x7f0000000000)=0x7, r12, 0x0, 0x7, 0x0)
sendfile(r12, r12, &(0x7f0000000200)=0xff, 0x9)
io_submit(0x0, 0x9, &(0x7f0000000dc0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x7f, 0xffffffffffffffff, &(0x7f0000000240)="c902fda16db4353c01d4d43ec5dd48b4718f1cef7cfcb2c0c322a64f7b33c362fc41803efc1746b8295be25ddd25f367e4a2cd7f3e3c978027b500c8c413e87781f28b6fbd01b873c38bbecd1ed755348e8b7ce3b82e01835e3860ffcf9361e5738f9a4c8c96683d8ce5bc92f65a4d9bdf02c4514856d55c6766ea464ae8c6a40deeb372e9a21b246d63888f32d9dae37fbcb0f0d7c2436313510a18b634de97687834abb6de4a20262f0f0a462faa64a8f064c39cbc6b864a3583445ac734ed11eeec73e27ef9eae25414c0ae07cae83a05af", 0xd3, 0x7, 0x0, 0x3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0xbc, 0xffffffffffffffff, &(0x7f0000000500)="f1fbe3636b9a1eaec115dd12cb48f9b99f33766319ec5bdf54d1e17c9f40bf33e2012cca60e01fcaa32019f9847ae50c289ff50e6e16df5254eb27a5250dd19a62006f7a701cddc7552c1a4473641f1ad78622c899afafd1b02b0bab0c591adfc2f505fe5c637d21948e21200885ab591de9cf4e07912164dcf12209787442513f211ede50a1ac187a", 0x89, 0x7fffffffffffffff, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x7b8e, r0, &(0x7f0000000740)="3edbcef348844e54d8c4380620e0114316ed83988884dd48ff3dd78dc1e9305b6a60c3304487d868569e3feab4222ddf012adfb765249d972cf1f4df277d08d74b7cb2d7b7681eb51a35d3f05386275f3550c1c7bf94df94b48dd91d9bf3aa1a9e33e78784b0c7165ee1038e5a842d333f7343b69af97846b236a0af06984aab5c56a3bbbaeee716fcd3a52365", 0x8d, 0x84a, 0x0, 0x1, r1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000880)="d7239075ead76bb8d349443d12e8337d8df7e6e1f615eb7a1d0097b7d808c0689b0c925bf94754eddc0e00b708c3032bc2b0fc953abdea7b523c933f16ebd3c7f0c89e6f7d5b60c8c96e38307bfe820e1199feefe86fedd62dbd6b013228da4c2e2d8f0ae1b17fd5f6cb6feafd63af202a98d04e76198a30ddff4fef5024e4852f771f07875376134d05a33a6aeb5e39c1dada799a3fc31dc545cfa0638d5852927b2f43560a937a41eda6470eb922ca4d058cb81167290675f4bd10bb6190aec57a628f26f1770556889fe894e21f4ff7be4eff3c0ae5a4bcba75ce4b29d89d8daed7548c88160eb01a113f292e", 0xee, 0x80000001, 0x0, 0x1}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f00000009c0)="1e07ca68c99760f4ee24932896dd19b84247", 0x12, 0x6, 0x0, 0x3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7, 0x4, r4, &(0x7f0000000a40)="2223af791ba5ebc4deaa102d5b3fb28714e11bf63f7be796c557ccae640a03236ec32f9fc441f782df64a12109291abda478e453e005aeee4b8e058e2d4a0593d8437908c71a", 0x46, 0x2, 0x0, 0x2, r5}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0x4, r6, &(0x7f0000000b00)="2fc184f797d8112b8bf30caf682b1c65c90eff217d05445778ab4b96f33a08dbf0d23e2c546d693e7b2f7764a6bc97", 0x2f, 0x5, 0x0, 0x3, r7}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0x3, r8, &(0x7f0000000c80)="281e7068f248513b766a770bc79d196fee0f51baddf7cf1a9225bb256d4161698b1a3c381e9538bd900e16cc3f565060ba44d408de56af75bff8d80810b8054ebf1cb90bda4a711fbb5a11fc5644941a51058cb034f385c3219d9edbc0ac5ae713005705e6fde615444f51a9b3d9b31d", 0x70, 0x200, 0x0, 0x2, r9}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x7, 0xeab5, r11, &(0x7f0000000d40)="214dd5bc8ba46ed34609b1c62fb5cea4b1df468ddecab81241ffce105333cdf8b2a7f426765df3d064760c37b58e7c875a8959eae194464614cde73f97e3b8a0", 0x40, 0x8000000000000001, 0x0, 0x2, r12}])
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[], [], 0x2f})
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x6, 0x0)

1.197188361s ago: executing program 4 (id=2108):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.052458784s ago: executing program 4 (id=2109):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='[#\x00', 0x208000, &(0x7f0000000040)={@align=0x7, {0x8, 0x7, 0x2, 0x4}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x9})
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000140)=0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3, 0x3}, 0x6)
ioctl$VT_RELDISP(r0, 0x5605)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c)
ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000300)={0x0, 0x3, 0x2, 0x0, 0x100, 0x3, 0x0, &(0x7f00000002c0)=[{0x4, 0x1ff, 0x3}, {0xb, 0x1d86d5af10104f76, 0x3}, {0xb, 0xfe, 0x1}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000540)={{r2}, r3, 0x6, @unused=[0x8b4, 0x4, 0x7, 0x9], @name="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"})
recvmmsg$unix(r0, &(0x7f0000002280)=[{{&(0x7f0000001540), 0x6e, &(0x7f0000001980)=[{&(0x7f00000015c0)=""/190, 0xbe}, {&(0x7f0000001680)=""/9, 0x9}, {&(0x7f00000016c0)=""/53, 0x35}, {&(0x7f0000001700)=""/203, 0xcb}, {&(0x7f0000001800)=""/115, 0x73}, {&(0x7f0000001880)=""/228, 0xe4}], 0x6, &(0x7f0000001a00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001b40)=""/158, 0x9e}], 0x1}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001cc0)=""/62, 0x3e}, {&(0x7f0000001d00)=""/52, 0x34}, {&(0x7f0000001d40)=""/39, 0x27}, {&(0x7f0000001d80)=""/123, 0x7b}, {&(0x7f0000001e00)=""/212, 0xd4}], 0x5, &(0x7f0000001f80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000002240)=[{&(0x7f0000002100)=""/150, 0x96}, {&(0x7f00000021c0)=""/15, 0xf}, {&(0x7f0000002200)}], 0x3}}], 0x4, 0x142, &(0x7f0000002380)={0x0, 0x3938700})
ioctl$RTC_AIE_OFF(r4, 0x7002)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002480), 0x1, 0x0)
ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000024c0))

996.997285ms ago: executing program 4 (id=2110):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) (async)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) (async)
read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0x2020) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@private1, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1c) (async)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r5=>0x0})
recvfrom$inet(r0, &(0x7f0000000200)=""/175, 0xaf, 0x10000, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000380)={r5, 0x1, 0x6, @local}, 0x10) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @multicast}, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async)
chdir(&(0x7f0000000140)='./file0\x00')
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) (async)
fallocate(r7, 0x0, 0x37e9, 0x10001)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2})

798.60096ms ago: executing program 0 (id=2111):
r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x7, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
ioctl$KDADDIO(r1, 0x40087101, 0x5426)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x4, 0x3, 0x6, 0xc8, 0x1, 0xff, 0x7c, 0xc, 0x8, 0x9}, {0x8, 0xa6f3, 0xa, 0xa9, 0xc, 0x7, 0xa, 0x3, 0x4, 0x13, 0x1, 0x1, 0x2}, {0x4, 0x407, 0xc, 0xf, 0x3, 0x4, 0x0, 0xfb, 0x70, 0x15, 0x1, 0x3, 0x4}], 0x9})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xab, 0x0, 0xfff, 0x10, 0x7, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

788.85515ms ago: executing program 0 (id=2112):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xa002, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r4, 0x0)
syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550e, &(0x7f0000000100)=0x93fb)

647.464624ms ago: executing program 5 (id=2115):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x6, 0x0) (fail_nth: 1)

601.067535ms ago: executing program 5 (id=2116):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1f, 0x1, 0x32})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x8045}], 0x1)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000001280)={0x3, 0x0, [{}, {}, {}]})

600.551605ms ago: executing program 5 (id=2117):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000007c0)={[0x2, 0xfffffffffffffffe, 0x5, 0x7ff, 0x8, 0x6, 0x0, 0x6, 0x4, 0x3, 0x8000000000000000, 0x2, 0x8, 0x4, 0x9, 0xfffffffffffffffb], 0x200000})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}})
r6 = socket(0x10, 0x803, 0xffffffff)
sendmmsg$inet6(r6, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='\n', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r7 = gettid()
sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0)
rt_sigqueueinfo(r7, 0x21, &(0x7f0000000100)={0x21})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
r9 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
fstat(r10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
sendmmsg$unix(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}], 0x20, 0x20000010}}], 0x1, 0x0)
r12 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x200, 0xf, 0x10, 0x4}, {0x9, 0x5, 0x80, 0x2, 0x200, 0x3, 0xf8, 0x6b}, {0x9, 0x5, 0x1, 0x3, 0x3ff, 0x6, 0x4, 0xa7}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r12, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x40, 0x22, 0xa2, {0xa2, 0x30, "2c0f8c2312b88268399a4319226293b93deb0f254c1e6d5cfa9d750f56c3a9cf0673723e48a3684e4a341a2649fe0bec065affe6256ab560e1a380152c9938b4d1b9c488437cf31957775581e015786d6e28d8cef613ab736ad4a0d3207601d322252a92877773ebe7fc3788f07b0e8e82194d4f6f53b931f8ae755ce0b9d17044b8258dbac55b04320969a5e3f58a4db41ec32e605071d0b8976dca7b384f60"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f0000000f00)={0x1c, &(0x7f0000000780)={0x0, 0xf, 0x11, "f220fe25bff68272407f33652550391e16"}, &(0x7f0000000a80)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000ec0)={0x21, 0x0, 0x3, "82bed2"}})
ptrace$getregset(0x4204, r9, 0x201, &(0x7f0000000580)={&(0x7f00000004c0)=""/162, 0xa2})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

78.069887ms ago: executing program 5 (id=2118):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='[#\x00', 0x208000, &(0x7f0000000040)={@align=0x7, {0x8, 0x7, 0x2, 0x4}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x9})
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000140)=0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3, 0x3}, 0x6)
ioctl$VT_RELDISP(r0, 0x5605)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c)
ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000300)={0x0, 0x3, 0x2, 0x0, 0x100, 0x3, 0x0, &(0x7f00000002c0)=[{0x4, 0x1ff, 0x3}, {0xb, 0x1d86d5af10104f76, 0x3}, {0xb, 0xfe, 0x1}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000540)={{r2}, r3, 0x6, @unused=[0x8b4, 0x4, 0x7, 0x9], @name="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"})
recvmmsg$unix(r0, &(0x7f0000002280)=[{{&(0x7f0000001540), 0x6e, &(0x7f0000001980)=[{&(0x7f00000015c0)=""/190, 0xbe}, {&(0x7f0000001680)=""/9, 0x9}, {&(0x7f00000016c0)=""/53, 0x35}, {&(0x7f0000001700)=""/203, 0xcb}, {&(0x7f0000001800)=""/115, 0x73}, {&(0x7f0000001880)=""/228, 0xe4}], 0x6, &(0x7f0000001a00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001b40)=""/158, 0x9e}], 0x1}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001cc0)=""/62, 0x3e}, {&(0x7f0000001d00)=""/52, 0x34}, {&(0x7f0000001d40)=""/39, 0x27}, {&(0x7f0000001d80)=""/123, 0x7b}, {&(0x7f0000001e00)=""/212, 0xd4}], 0x5, &(0x7f0000001f80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000002240)=[{&(0x7f0000002100)=""/150, 0x96}, {&(0x7f00000021c0)=""/15, 0xf}, {&(0x7f0000002200)}], 0x3}}], 0x4, 0x142, &(0x7f0000002380)={0x0, 0x3938700})
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002480), 0x1, 0x0)
ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000024c0))

77.768898ms ago: executing program 4 (id=2119):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040260933330000000000010902240001000040000904000009030004000921200000012228000905810300020308c53a160956f95376c52c820880a173e6b4b14d528c348b128ef0749c8b4eb4f902f3efff853c8683508e87ba12a7f550d5ca8aeac54bdb6a30dd1c7f58b410b4d96c2acc190505d642bcb35d6bb5c74197fe8dada41f7a514eb9645dd9b9e8b978c003f0a1df478ab73c30b0c8ad"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f00000000c0))

67.314788ms ago: executing program 5 (id=2120):
r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x7, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
ioctl$KDADDIO(r1, 0x40087101, 0x5426)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x4, 0x3, 0x6, 0xc8, 0x1, 0xff, 0x7c, 0xc, 0x8, 0x9}, {0x8, 0xa6f3, 0xa, 0xa9, 0xc, 0x7, 0xa, 0x3, 0x4, 0x13, 0x1, 0x1, 0x2}, {0x4, 0x407, 0xc, 0xf, 0x3, 0x4, 0x0, 0xfb, 0x70, 0x15, 0x1, 0x3, 0x4}], 0x9})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xab, 0x0, 0xfff, 0x10, 0x7, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16.991029ms ago: executing program 5 (id=2121):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x4, 0x6, 0x8, 0x5}, {0x58f6, 0xcd, 0xd5, 0x5}, {0xa, 0x7, 0x9, 0x5}, {0x8, 0x2, 0x13, 0x9}, {0x40, 0xf, 0x4, 0x3}, {0x100, 0xbe, 0x5, 0x9}, {0x4, 0x0, 0x7, 0x9}]})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x1a8000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={0x0, 0x3, r1, 0x5})
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x80000002, 0x31237648, 0x6, 0x2, 0x31b6}]})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x80000)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x1, 0x10100000, 0x10000, 0x3, 0x4002004c2, 0x0, 0x7, 0x0, 0x4, 0x1000082, 0x8c, 0x0, 0x8, 0x8f], 0xc000, 0x240046})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

16.319459ms ago: executing program 0 (id=2122):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x50, 0x37, 0xfc, 0x1}, {0x28, 0x1, 0xb6, 0x7fff}, {0x6, 0x6, 0x0, 0x1057c}]}, 0x10) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4) (async)
ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000040)) (async)
ptrace$cont(0x9, r4, 0x7ff, 0x3) (async)
ptrace$cont(0x21, r4, 0x80000001, 0x4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000004cc0)={0x0, <r6=>0x0}, &(0x7f0000000280)=0xfffffffffffffcbc)
setuid(r6) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2000)
stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000080)=0xc)
setresgid(0xee00, r10, r10) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000009b40)={0x0, <r12=>0x0}, &(0x7f0000009b80)=0xc) (async)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) (async)
setuid(r12) (async)
fstat(r1, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}) (async)
r15 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000140)={0x0, <r16=>0x0}, &(0x7f00000001c0)=0xc)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r16]) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002a00)={0x0, <r17=>0x0}, &(0x7f0000002a40)=0xc) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020, 0x0, 0x0, 0x0, <r18=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f0000000140)="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", 0x2000, &(0x7f0000004c00)={&(0x7f0000002140)={0x50, 0x0, 0x99, {0x7, 0x2d, 0x1, 0x1040, 0xa7, 0x9, 0x4, 0x1ff, 0x0, 0x0, 0x80, 0xf5}}, &(0x7f00000021c0)={0x18, 0xffffffffffffffda, 0x761d, {0x25}}, &(0x7f0000002200)={0x18, 0x0, 0x4, {0xfffffffffffffffb}}, &(0x7f0000002240)={0x18, 0x0, 0x64c, {0xb581}}, &(0x7f0000002280)={0x18, 0xffffffffffffffda, 0x100}, &(0x7f00000022c0)={0x28, 0x0, 0x6, {{0xff, 0x1, 0x1, r4}}}, &(0x7f0000002300)={0x60, 0x0, 0x1d9, {{0x7, 0x1, 0x81, 0x0, 0x0, 0x6377, 0x8, 0x3}}}, &(0x7f0000002380)={0x18, 0x0, 0x100000001, {0x3}}, &(0x7f00000023c0)={0x14, 0xffffffffffffffda, 0xb, {'.+[\x00'}}, &(0x7f0000002400)={0x20, 0xfffffffffffffff5, 0x3, {0x0, 0x15}}, &(0x7f0000002500)={0x78, 0x0, 0x1, {0x2, 0x615, 0x0, {0x6, 0x0, 0x100000000, 0x80000001, 0xb9b, 0xe5, 0xa2b, 0x8, 0xa0000000, 0x8000, 0x7, r6, r7, 0x2, 0x7}}}, &(0x7f0000002640)={0x90, 0xffffffffffffffda, 0x8, {0x4, 0x0, 0x1, 0x9, 0x3, 0x3, {0x0, 0xde3, 0x8, 0x6, 0x9, 0x5, 0xcd6, 0x2, 0x6a, 0xa000, 0xe3b, r8, r10, 0x101, 0x89f5}}}, &(0x7f0000004d00)=ANY=[@ANYBLOB="b8000000feffffff0d00000000000000040000000000000074fe209e9906a72b070000000000000000000000010000800100000000000000cd6100040000000000000000090000000300000000000000080000000000000004000000030000002c242b2b000000000300000000000000020000000000000002000000070000002b5c0000000000000400000000000000060000000000000002000000020013005d2f000000000000050000000000000007000000000000000000000000000400067552745092a848a0a4e15354e34e727ada"], &(0x7f0000002840)={0xb0, 0x0, 0x2, [{{0x1, 0x0, 0x0, 0x8, 0x1ff, 0x8, {0x6, 0x2fbd, 0x1, 0x2, 0x4, 0xca7, 0xc, 0x2, 0xfffffffe, 0x4000, 0x1, r12, r14, 0x1d95, 0x492}}, {0x5, 0x48c, 0x4, 0xc97, '$/#-'}}]}, &(0x7f0000002900)={0xa0, 0x0, 0xffffffff7fffffff, {{0x4, 0x0, 0x9, 0x1, 0xc0000000, 0x2, {0x3, 0xfffffffffffffffb, 0x5f4, 0x101, 0x77, 0xaf0, 0x0, 0x1, 0x9, 0xc000, 0x101, r16, 0x0, 0xf, 0x5}}, {0x0, 0x8}}}, &(0x7f00000029c0)={0x20, 0x0, 0x0, {0x101, 0x4, 0x7, 0x8}}, &(0x7f0000004ac0)={0x130, 0x0, 0x8000000000000000, {0x9, 0x3, 0x0, '\x00', {0x800, 0x9, 0xdd3c, 0x9, r17, r18, 0x1000, '\x00', 0x5, 0x0, 0x200, 0x9, {0x82, 0x7}, {0xc6, 0x6}, {0xdcc000, 0xd0e}, {0x7f, 0x7}, 0x0, 0xfffffbff, 0x9, 0x7}}}}) (async)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f0000000080))

3.42046ms ago: executing program 0 (id=2123):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c0005"], 0x30}, 0x1, 0x0, 0x0, 0xc091}, 0x4004014)

0s ago: executing program 0 (id=2124):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000880)={'fscrypt:', @auto=[0x34, 0x39, 0x64, 0x65, 0x64, 0x66, 0x36, 0x38, 0x36, 0x62, 0x37, 0x31, 0x8, 0x34, 0x62, 0x34]}, &(0x7f00000008c0)={0x0, "83be91e3956f7eeab185c5532a737cbf86a019abc3c6c5b882e77c6b66c6d809ae8c0052697af3e28ee0d067c73f9e8f2c1af82447d244584968c7ffb982e9b4", 0x1e}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x34, 0x30, 0x30, 0x30, 0x31, 0x30, 0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x33, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6d, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x61, 0x30, 0x35]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabb0600000000000000445566778899aabbccddeeff", 0x36}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "fe1b5c4bf346207d87478c27b86bb51289055bc124bb60432572800f18aa4fd90aabed9d0fe61c88c11301a15ee3f0f5cdf737eba09fed73da1807ecb5b00d17", 0x24}, 0x48, r1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x185f8000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000940)="4dfc", 0x2, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x37, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x32, 0x64, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x31, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x35, 0x30, 0x0, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x8, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x67, 0x30, 0x39, 0x33, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112200080000778899aabbccddeeff00aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa2233445566778899aabbccddeeff00", 0x3e}, 0x48, r1)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x0, 0xff, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x3, 0x20, 0x5, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x30, 0xee}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3d, 0x2f4}, [@cluster_info_segment={0x6, 0x20, 0xfe, 0xa2}, @source_unit={0xc, 0x24, 0xb, 0x80, 0x0, 0x569, 0x5, 0x6}, @mixer_unit={0xb, 0x24, 0x5, 0x6, 0x9, "8279217d67ff"}, @processing_unit={0x9, 0x24, 0x9, 0x2, 0x6, [0x0]}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0x6, [0x10, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x1, 0xb, 0x4, 0x85}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x4, 0x5, 0x2b, "6bd2313ca9d0"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6b, 0x3, 0x10, 0x9, "d5bf7719"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x5, 0x80, 0x7, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1b, 0x4, 0x0, 0x0, "bcfa7f92a03da25d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7d, 0x9, 0x6b, {0xa, 0x25, 0x25, 0x300000, 0x2, 0xaada}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x5, 0x2, "be"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x3, 0x7b, {0xa, 0x25, 0x25, 0x7fff, 0x0, 0x40}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0xa, 0x10, 0x80, 0x40, 0xc3}, 0x2f, &(0x7f0000000980)=ANY=[@ANYBLOB="050f2f0003071002206908100010010c930008070d000718100a07a300000000000100cf0000000f0000008f01ff00a925308bbf90be63e371873e85ec039b79bfd634f834a053daec4edb846bdc532644bc7b6c22132bd33d36f4bad8c0ac"]})

kernel console output (not intermixed with test programs):

[ T5007]  </TASK>
[  236.472168][  T386] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  236.639917][  T386] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.651577][  T386] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  236.660763][  T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.668793][  T386] usb 3-1: Product: syz
[  236.672985][  T386] usb 3-1: Manufacturer: syz
[  236.677673][  T386] usb 3-1: SerialNumber: syz
[  236.683522][  T386] usb 3-1: config 0 descriptor??
[  236.689428][  T386] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22
[  237.061597][ T4677] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  237.209075][ T4677] usb 5-1: Using ep0 maxpacket: 8
[  237.215339][ T4677] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.226620][ T4677] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  237.240042][ T4677] usb 5-1: config 0 interface 0 has no altsetting 0
[  237.246753][ T4677] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  237.255796][ T4677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.264501][ T4677] usb 5-1: config 0 descriptor??
[  237.526672][ T4677] usbhid 5-1:0.0: can't add hid device: -71
[  237.532702][ T4677] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  237.541888][ T4677] usb 5-1: USB disconnect, device number 32
[  237.735588][  T318] usb 1-1: new full-speed USB device number 103 using dummy_hcd
[  237.866449][  T318] usb 1-1: device descriptor read/64, error -71
[  238.128141][  T318] usb 1-1: device descriptor read/64, error -71
[  238.369693][  T318] usb 1-1: new full-speed USB device number 104 using dummy_hcd
[  238.500545][  T318] usb 1-1: device descriptor read/64, error -71
[  238.746480][  T318] usb 1-1: device descriptor read/64, error -71
[  238.859232][  T318] usb usb1-port1: attempt power cycle
[  239.005945][  T310] usb 3-1: USB disconnect, device number 95
[  239.207542][  T318] usb 1-1: new full-speed USB device number 105 using dummy_hcd
[  239.229001][  T318] usb 1-1: device descriptor read/8, error -71
[  239.361297][  T310] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  239.369779][  T318] usb 1-1: device descriptor read/8, error -71
[  239.514935][  T310] usb 3-1: Using ep0 maxpacket: 32
[  239.521147][  T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  239.531273][  T310] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  239.540242][  T310] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  239.551233][  T310] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  239.565424][  T310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  239.575154][  T310] usb 3-1: config 1 interface 1 has no altsetting 0
[  239.583206][  T310] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=9c.40
[  239.592276][  T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.600317][  T310] usb 3-1: Product: syz
[  239.604473][  T310] usb 3-1: Manufacturer: syz
[  239.609087][  T310] usb 3-1: SerialNumber: syz
[  239.618539][  T318] usb 1-1: new full-speed USB device number 106 using dummy_hcd
[  239.640281][  T318] usb 1-1: device descriptor read/8, error -71
[  239.775407][  T318] usb 1-1: device descriptor read/8, error -71
[  239.794095][ T5084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1654'.
[  239.826834][   T36] audit: type=1400 audit(1787910874.286:436): avc:  denied  { create } for  pid=5073 comm="syz.2.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  239.888739][  T318] usb usb1-port1: unable to enumerate USB device
[  239.921091][  T310] usb 3-1: selecting invalid altsetting 0
[  239.927301][  T310] usb 3-1: 1:1: cannot get freq (v2/v3): err -71
[  239.939363][  T310] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[  239.949518][  T310] usb 3-1: USB disconnect, device number 96
[  239.960375][  T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  240.586003][ T5106] input: syz1 as /devices/virtual/input/input35
[  240.646311][ T5111] FAULT_INJECTION: forcing a failure.
[  240.646311][ T5111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.659482][ T5111] CPU: 1 UID: 0 PID: 5111 Comm: syz.2.1667 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  240.659511][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  240.659523][ T5111] Call Trace:
[  240.659530][ T5111]  <TASK>
[  240.659538][ T5111]  __dump_stack+0x21/0x30
[  240.659570][ T5111]  dump_stack_lvl+0x140/0x1c0
[  240.659594][ T5111]  ? __cfi_dump_stack_lvl+0x10/0x10
[  240.659618][ T5111]  ? check_stack_object+0x138/0x150
[  240.659713][ T5111]  dump_stack+0x19/0x20
[  240.659735][ T5111]  should_fail_ex+0x3c2/0x510
[  240.659755][ T5111]  should_fail+0xf/0x20
[  240.659773][ T5111]  should_fail_usercopy+0x1e/0x30
[  240.659793][ T5111]  _copy_to_user+0x24/0xa0
[  240.659875][ T5111]  simple_read_from_buffer+0xed/0x160
[  240.659927][ T5111]  proc_fail_nth_read+0x1aa/0x220
[  240.659988][ T5111]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  240.660012][ T5111]  ? bpf_lsm_file_permission+0xd/0x20
[  240.660098][ T5111]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  240.660123][ T5111]  vfs_read+0x288/0xc70
[  240.660142][ T5111]  ? putname+0x113/0x150
[  240.660187][ T5111]  ? __cfi_vfs_read+0x10/0x10
[  240.660214][ T5111]  ? __kasan_check_write+0x18/0x20
[  240.660233][ T5111]  ? mutex_lock+0x97/0x1d0
[  240.660254][ T5111]  ? __cfi_mutex_lock+0x10/0x10
[  240.660274][ T5111]  ksys_read+0x145/0x260
[  240.660293][ T5111]  ? __cfi_ksys_read+0x10/0x10
[  240.660309][ T5111]  ? __kasan_check_write+0x18/0x20
[  240.660328][ T5111]  ? getname_flags+0x203/0x6b0
[  240.660347][ T5111]  ? __kasan_check_read+0x15/0x20
[  240.660366][ T5111]  __x64_sys_read+0x7f/0x90
[  240.660385][ T5111]  x64_sys_call+0x2638/0x2ee0
[  240.660405][ T5111]  do_syscall_64+0x57/0xf0
[  240.660430][ T5111]  ? clear_bhb_loop+0x50/0xa0
[  240.660453][ T5111]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  240.660475][ T5111] RIP: 0033:0x7f604235e98e
[  240.660492][ T5111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  240.660510][ T5111] RSP: 002b:00007f60431c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  240.660533][ T5111] RAX: ffffffffffffffda RBX: 00007f60431c96c0 RCX: 00007f604235e98e
[  240.660549][ T5111] RDX: 000000000000000f RSI: 00007f60431c90a0 RDI: 0000000000000005
[  240.660563][ T5111] RBP: 00007f60431c9090 R08: 0000000000000000 R09: 0000000000000000
[  240.660577][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.660590][ T5111] R13: 00007f6042626038 R14: 00007f6042625fa0 R15: 00007ffd8b6a4b18
[  240.660606][ T5111]  </TASK>
[  241.028807][   T36] audit: type=1400 audit(1787910875.437:437): avc:  denied  { lock } for  pid=5124 comm="syz.5.1672" path="socket:[76206]" dev="sockfs" ino=76206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  241.052691][   T36] audit: type=1400 audit(1787910875.437:438): avc:  denied  { read } for  pid=5124 comm="syz.5.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  241.245849][  T310] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  241.403195][  T310] usb 1-1: Using ep0 maxpacket: 8
[  241.409318][  T310] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.420358][  T310] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  241.433313][  T310] usb 1-1: config 0 interface 0 has no altsetting 0
[  241.439943][  T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  241.448999][  T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.457621][  T310] usb 1-1: config 0 descriptor??
[  241.487184][ T4677] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  241.647557][ T4677] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  241.656779][ T4677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.664764][ T4677] usb 5-1: Product: syz
[  241.669029][ T4677] usb 5-1: Manufacturer: syz
[  241.673648][ T4677] usb 5-1: SerialNumber: syz
[  241.710999][  T310] usbhid 1-1:0.0: can't add hid device: -71
[  241.717000][  T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  241.725798][  T310] usb 1-1: USB disconnect, device number 107
[  241.894808][ T5123] rust_binder: Failure in copy_transaction_data: EINVAL
[  241.895055][ T5123] rust_binder: 5122:5123 transaction call to 5122:0 failed EINVAL, code 0 size 0-24
[  241.912592][   T65] rust_binder: 5122: undelivered TRANSACTION_ERROR: 29201
[  241.933300][ T4677] rtl8150 5-1:1.0: couldn't reset the device
[  241.939425][ T4677] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  241.948387][ T4677] usb 5-1: USB disconnect, device number 33
[  242.131312][  T318] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  242.289933][  T318] usb 3-1: Using ep0 maxpacket: 32
[  242.296533][  T318] usb 3-1: unable to get BOS descriptor or descriptor too short
[  242.305490][  T318] usb 3-1: config 6 has an invalid interface number: 134 but max is 0
[  242.313730][  T318] usb 3-1: config 6 has no interface number 0
[  242.319928][  T318] usb 3-1: config 6 interface 134 has no altsetting 0
[  242.328133][  T318] usb 3-1: New USB device found, idVendor=050d, idProduct=825b, bcdDevice=57.ca
[  242.337229][  T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.345307][  T318] usb 3-1: Product: syz
[  242.349515][  T318] usb 3-1: Manufacturer: syz
[  242.354136][  T318] usb 3-1: SerialNumber: syz
[  242.577947][  T318] usb 3-1: Found UVC 0.00 device syz (050d:825b)
[  242.584482][  T318] usb 3-1: No valid video chain found.
[  242.591313][  T318] usb 3-1: USB disconnect, device number 97
[  242.734561][ T4677] usb 1-1: new full-speed USB device number 108 using dummy_hcd
[  242.819571][ T5153] overlayfs: failed to clone upperpath
[  242.894849][ T4677] usb 1-1: not running at top speed; connect to a high speed hub
[  242.903409][ T4677] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  242.913593][ T4677] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  242.923105][ T4677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.933422][ T4677] usb 1-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  243.156980][ T5160] netlink: 'syz.2.1684': attribute type 4 has an invalid length.
[  243.366452][ T4677] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  243.379638][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'.
[  243.386024][ T4677] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26).
[  243.404874][ T4677] uvcvideo 1-1:1.1: Failed to initialize the device (-5).
[  243.420326][ T4677] usb 1-1: USB disconnect, device number 108
[  243.503691][ T5175] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1687'.
[  243.543173][   T65] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  243.745305][   T65] usb 3-1: device descriptor read/64, error -71
[  244.012479][   T65] usb 3-1: device descriptor read/64, error -71
[  244.215530][  T315] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  244.290342][   T65] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  244.397213][  T315] usb 1-1: Using ep0 maxpacket: 8
[  244.403302][  T315] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.414247][  T315] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  244.427058][  T315] usb 1-1: config 0 interface 0 has no altsetting 0
[  244.433716][   T65] usb 3-1: device descriptor read/64, error -71
[  244.440012][  T315] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  244.449037][  T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.457695][  T315] usb 1-1: config 0 descriptor??
[  244.494378][ T5189] ./dev/sda1: Can't lookup blockdev
[  244.578901][ T4677] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  244.707171][   T65] usb 3-1: device descriptor read/64, error -71
[  244.739607][ T4677] usb 5-1: Using ep0 maxpacket: 8
[  244.741900][  T315] usbhid 1-1:0.0: can't add hid device: -71
[  244.748066][ T4677] usb 5-1: unable to get BOS descriptor or descriptor too short
[  244.753204][  T315] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  244.758483][ T4677] usb 5-1: too many configurations: 254, using maximum allowed: 8
[  244.769799][  T315] usb 1-1: USB disconnect, device number 109
[  244.774634][ T4677] usb 5-1: unable to read config index 0 descriptor/start: -71
[  244.787470][ T4677] usb 5-1: can't read configurations, error -71
[  244.824883][   T65] usb usb3-port1: attempt power cycle
[  245.096302][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1702'.
[  245.189401][   T65] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  245.211876][   T65] usb 3-1: device descriptor read/8, error -71
[  245.307562][ T5208] FAULT_INJECTION: forcing a failure.
[  245.307562][ T5208] name failslab, interval 1, probability 0, space 0, times 0
[  245.320673][ T5208] CPU: 0 UID: 0 PID: 5208 Comm: syz.4.1705 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  245.320702][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  245.320713][ T5208] Call Trace:
[  245.320720][ T5208]  <TASK>
[  245.320727][ T5208]  __dump_stack+0x21/0x30
[  245.320757][ T5208]  dump_stack_lvl+0x140/0x1c0
[  245.320780][ T5208]  ? __cfi_dump_stack_lvl+0x10/0x10
[  245.320805][ T5208]  dump_stack+0x19/0x20
[  245.320826][ T5208]  should_fail_ex+0x3c2/0x510
[  245.320847][ T5208]  should_failslab+0xac/0x100
[  245.320868][ T5208]  kmem_cache_alloc_node_noprof+0x45/0x420
[  245.320888][ T5208]  ? dup_task_struct+0xc1/0xd80
[  245.320909][ T5208]  ? kasan_save_alloc_info+0x3a/0x50
[  245.320926][ T5208]  ? __kasan_kmalloc+0x96/0xb0
[  245.321039][ T5208]  ? __kmalloc_cache_noprof+0x23c/0x470
[  245.321058][ T5208]  dup_task_struct+0xc1/0xd80
[  245.321078][ T5208]  ? __kasan_check_write+0x18/0x20
[  245.321103][ T5208]  ? _raw_spin_lock_irq+0x93/0x120
[  245.321128][ T5208]  ? copy_process+0x3350/0x3350
[  245.321149][ T5208]  ? __kasan_check_write+0x18/0x20
[  245.321167][ T5208]  copy_process+0x57c/0x3350
[  245.321190][ T5208]  ? kasan_save_alloc_info+0x3a/0x50
[  245.321206][ T5208]  ? __cfi_copy_process+0x10/0x10
[  245.321227][ T5208]  ? __kmalloc_cache_noprof+0x23c/0x470
[  245.321245][ T5208]  ? __kasan_check_write+0x18/0x20
[  245.321264][ T5208]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  245.321284][ T5208]  vhost_task_create+0x1f7/0x3f0
[  245.321337][ T5208]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  245.321357][ T5208]  ? __cfi_vhost_task_create+0x10/0x10
[  245.321377][ T5208]  ? __cfi_vhost_task_fn+0x10/0x10
[  245.321394][ T5208]  ? __kasan_check_write+0x18/0x20
[  245.321411][ T5208]  ? mutex_lock+0x97/0x1d0
[  245.321430][ T5208]  ? __cfi_mutex_lock+0x10/0x10
[  245.321448][ T5208]  ? kernel_text_address+0xa9/0xe0
[  245.321515][ T5208]  kvm_mmu_post_init_vm+0x161/0x300
[  245.321540][ T5208]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  245.321575][ T5208]  ? _parse_integer_limit+0x195/0x1e0
[  245.321594][ T5208]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  245.321618][ T5208]  ? kstrtoull+0x13b/0x1e0
[  245.321635][ T5208]  ? kstrtouint+0x78/0xf0
[  245.321653][ T5208]  ? ioctl_has_perm+0x1bc/0x500
[  245.321700][ T5208]  ? __asan_memcpy+0x5a/0x80
[  245.321717][ T5208]  ? ioctl_has_perm+0x408/0x500
[  245.321734][ T5208]  ? has_cap_mac_admin+0xd0/0xd0
[  245.321751][ T5208]  ? __kasan_check_write+0x18/0x20
[  245.321768][ T5208]  ? mutex_lock_killable+0x97/0x1d0
[  245.321787][ T5208]  ? __cfi_mutex_lock_killable+0x10/0x10
[  245.321806][ T5208]  ? proc_fail_nth_write+0x184/0x220
[  245.321831][ T5208]  kvm_vcpu_ioctl+0xa43/0x1000
[  245.321849][ T5208]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  245.321866][ T5208]  ? __cfi_vfs_write+0x10/0x10
[  245.321884][ T5208]  ? __kasan_check_write+0x18/0x20
[  245.321901][ T5208]  ? mutex_unlock+0x90/0x240
[  245.321918][ T5208]  ? __cfi_mutex_unlock+0x10/0x10
[  245.321938][ T5208]  ? __fget_files+0x2bc/0x330
[  245.321985][ T5208]  ? bpf_lsm_file_ioctl+0xd/0x20
[  245.322007][ T5208]  ? security_file_ioctl+0x3e/0x110
[  245.322046][ T5208]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  245.322062][ T5208]  __se_sys_ioctl+0x123/0x1b0
[  245.322112][ T5208]  __x64_sys_ioctl+0x7f/0xa0
[  245.322132][ T5208]  x64_sys_call+0x1878/0x2ee0
[  245.322149][ T5208]  do_syscall_64+0x57/0xf0
[  245.322172][ T5208]  ? clear_bhb_loop+0x50/0xa0
[  245.322191][ T5208]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  245.322209][ T5208] RIP: 0033:0x7fcefa99e159
[  245.322225][ T5208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.322239][ T5208] RSP: 002b:00007fcefb81d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  245.322259][ T5208] RAX: ffffffffffffffda RBX: 00007fcefac25fa0 RCX: 00007fcefa99e159
[  245.322273][ T5208] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  245.322285][ T5208] RBP: 00007fcefb81d090 R08: 0000000000000000 R09: 0000000000000000
[  245.322296][ T5208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.322308][ T5208] R13: 00007fcefac26038 R14: 00007fcefac25fa0 R15: 00007ffd3bef21a8
[  245.322323][ T5208]  </TASK>
[  245.800581][   T65] usb 3-1: device descriptor read/8, error -71
[  245.865413][   T36] audit: type=1400 audit(1787910879.987:439): avc:  denied  { ioctl } for  pid=5222 comm="syz.5.1711" path="/119/file0" dev="tmpfs" ino=653 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  246.058301][   T65] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  246.080817][   T65] usb 3-1: device descriptor read/8, error -71
[  246.208813][ T4677] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  246.209827][ T5230] FAULT_INJECTION: forcing a failure.
[  246.209827][ T5230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  246.229510][ T5230] CPU: 1 UID: 0 PID: 5230 Comm: syz.0.1714 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  246.229538][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  246.229550][ T5230] Call Trace:
[  246.229557][ T5230]  <TASK>
[  246.229565][ T5230]  __dump_stack+0x21/0x30
[  246.229590][ T5230]  dump_stack_lvl+0x140/0x1c0
[  246.229605][ T5230]  ? __cfi_dump_stack_lvl+0x10/0x10
[  246.229619][ T5230]  ? avc_has_perm_noaudit+0x289/0x360
[  246.229633][ T5230]  ? _raw_spin_unlock+0x45/0x60
[  246.229649][ T5230]  ? find_vmap_area+0x1ae/0x1c0
[  246.229758][ T5230]  dump_stack+0x19/0x20
[  246.229782][ T5230]  should_fail_ex+0x3c2/0x510
[  246.229799][ T5230]  should_fail+0xf/0x20
[  246.229810][ T5230]  should_fail_usercopy+0x1e/0x30
[  246.229825][ T5230]  _copy_from_user+0x20/0xa0
[  246.229849][ T5230]  sel_write_load+0x219/0x600
[  246.229868][ T5230]  ? __cfi_sel_write_load+0x10/0x10
[  246.229888][ T5230]  ? bpf_lsm_file_permission+0xd/0x20
[  246.229912][ T5230]  ? __cfi_sel_write_load+0x10/0x10
[  246.229932][ T5230]  vfs_write+0x3c1/0xfd0
[  246.229952][ T5230]  ? __cfi_vfs_write+0x10/0x10
[  246.229972][ T5230]  ? __kasan_check_write+0x18/0x20
[  246.229986][ T5230]  ? mutex_lock+0x97/0x1d0
[  246.229997][ T5230]  ? __cfi_mutex_lock+0x10/0x10
[  246.230009][ T5230]  ksys_write+0x145/0x260
[  246.230025][ T5230]  ? __cfi_ksys_write+0x10/0x10
[  246.230045][ T5230]  ? __kasan_check_read+0x15/0x20
[  246.230064][ T5230]  __x64_sys_write+0x7f/0x90
[  246.230084][ T5230]  x64_sys_call+0x271c/0x2ee0
[  246.230103][ T5230]  do_syscall_64+0x57/0xf0
[  246.230128][ T5230]  ? clear_bhb_loop+0x50/0xa0
[  246.230143][ T5230]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  246.230155][ T5230] RIP: 0033:0x7f969af9e159
[  246.230166][ T5230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.230179][ T5230] RSP: 002b:00007f969bd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  246.230200][ T5230] RAX: ffffffffffffffda RBX: 00007f969b225fa0 RCX: 00007f969af9e159
[  246.230215][ T5230] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000003
[  246.230229][ T5230] RBP: 00007f969bd9b090 R08: 0000000000000000 R09: 0000000000000000
[  246.230241][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.230254][ T5230] R13: 00007f969b226038 R14: 00007f969b225fa0 R15: 00007ffe611cabf8
[  246.230270][ T5230]  </TASK>
[  246.230553][   T65] usb 3-1: device descriptor read/8, error -71
[  246.257001][ T5232] tipc: Started in network mode
[  246.380882][   T65] usb usb3-port1: unable to enumerate USB device
[  246.388464][ T5232] tipc: Node identity ac14140f, cluster identity 4711
[  246.494678][ T5232] tipc: New replicast peer: 255.255.255.255
[  246.502603][ T5232] tipc: Enabled bearer <udp:syz2>, priority 10
[  246.509820][ T4677] usb 5-1: Using ep0 maxpacket: 8
[  246.516446][ T4677] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.527501][ T4677] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.540882][ T4677] usb 5-1: config 0 interface 0 has no altsetting 0
[  246.548131][ T4677] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  246.555510][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1718'.
[  246.568939][ T4677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.570913][   T36] audit: type=1400 audit(1787910880.639:440): avc:  denied  { ioctl } for  pid=5239 comm="syz.5.1718" path="socket:[77566]" dev="sockfs" ino=77566 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  246.580443][ T5248] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  246.609503][ T4677] usb 5-1: config 0 descriptor??
[  246.612229][ T5248] SELinux: failed to load policy
[  246.886086][  T315] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  246.895932][ T4677] usbhid 5-1:0.0: can't add hid device: -71
[  246.901974][ T4677] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  246.913462][ T4677] usb 5-1: USB disconnect, device number 36
[  246.962986][ T5278] ./dev/sda1: Can't lookup blockdev
[  247.047509][  T315] usb 3-1: Using ep0 maxpacket: 16
[  247.054059][  T315] usb 3-1: unable to get BOS descriptor or descriptor too short
[  247.062612][  T315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.072750][  T315] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  247.083574][  T315] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  247.095893][  T315] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  247.105010][  T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.113089][  T315] usb 3-1: Product: syz
[  247.117246][  T315] usb 3-1: Manufacturer: syz
[  247.121841][  T315] usb 3-1: SerialNumber: syz
[  247.344445][  T315] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  247.352767][  T315] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  247.499074][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'.
[  247.520662][ T5286] FAULT_INJECTION: forcing a failure.
[  247.520662][ T5286] name failslab, interval 1, probability 0, space 0, times 0
[  247.530347][ T5297] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  247.533441][ T5286] CPU: 0 UID: 0 PID: 5286 Comm: syz.4.1734 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  247.533470][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  247.533484][ T5286] Call Trace:
[  247.533493][ T5286]  <TASK>
[  247.533501][ T5286]  __dump_stack+0x21/0x30
[  247.533532][ T5286]  dump_stack_lvl+0x140/0x1c0
[  247.533555][ T5286]  ? __cfi_dump_stack_lvl+0x10/0x10
[  247.533580][ T5286]  ? __kasan_check_write+0x18/0x20
[  247.533600][ T5286]  ? copy_mm+0x307/0x1da0
[  247.533623][ T5286]  dump_stack+0x19/0x20
[  247.533646][ T5286]  should_fail_ex+0x3c2/0x510
[  247.533668][ T5286]  should_failslab+0xac/0x100
[  247.533691][ T5286]  kmem_cache_alloc_noprof+0x42/0x410
[  247.533710][ T5286]  ? alloc_pid+0xa5/0xb80
[  247.533731][ T5286]  ? __asan_memcpy+0x5a/0x80
[  247.533749][ T5286]  alloc_pid+0xa5/0xb80
[  247.533769][ T5286]  copy_process+0x1467/0x3350
[  247.533795][ T5286]  ? __cfi_copy_process+0x10/0x10
[  247.533816][ T5286]  ? __kmalloc_cache_noprof+0x23c/0x470
[  247.533837][ T5286]  ? __kasan_check_write+0x18/0x20
[  247.533855][ T5286]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  247.533877][ T5286]  vhost_task_create+0x1f7/0x3f0
[  247.533896][ T5286]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  247.533919][ T5286]  ? __cfi_vhost_task_create+0x10/0x10
[  247.533940][ T5286]  ? __cfi_vhost_task_fn+0x10/0x10
[  247.533958][ T5286]  ? __kasan_check_write+0x18/0x20
[  247.533977][ T5286]  ? mutex_lock+0x97/0x1d0
[  247.533997][ T5286]  ? __cfi_mutex_lock+0x10/0x10
[  247.534016][ T5286]  ? kernel_text_address+0xa9/0xe0
[  247.534041][ T5286]  kvm_mmu_post_init_vm+0x161/0x300
[  247.534066][ T5286]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  247.534091][ T5286]  ? _parse_integer_limit+0x195/0x1e0
[  247.534111][ T5286]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  247.534135][ T5286]  ? kstrtoull+0x13b/0x1e0
[  247.534154][ T5286]  ? kstrtouint+0x78/0xf0
[  247.534173][ T5286]  ? ioctl_has_perm+0x1bc/0x500
[  247.534192][ T5286]  ? __asan_memcpy+0x5a/0x80
[  247.534211][ T5286]  ? ioctl_has_perm+0x408/0x500
[  247.534229][ T5286]  ? has_cap_mac_admin+0xd0/0xd0
[  247.534254][ T5286]  ? __kasan_check_write+0x18/0x20
[  247.534271][ T5286]  ? mutex_lock_killable+0x97/0x1d0
[  247.534291][ T5286]  ? __cfi_mutex_lock_killable+0x10/0x10
[  247.534311][ T5286]  ? proc_fail_nth_write+0x184/0x220
[  247.534338][ T5286]  kvm_vcpu_ioctl+0xa43/0x1000
[  247.534357][ T5286]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  247.534375][ T5286]  ? __cfi_vfs_write+0x10/0x10
[  247.534395][ T5286]  ? __kasan_check_write+0x18/0x20
[  247.534413][ T5286]  ? mutex_unlock+0x90/0x240
[  247.534432][ T5286]  ? __cfi_mutex_unlock+0x10/0x10
[  247.534453][ T5286]  ? __fget_files+0x2bc/0x330
[  247.534475][ T5286]  ? bpf_lsm_file_ioctl+0xd/0x20
[  247.534498][ T5286]  ? security_file_ioctl+0x3e/0x110
[  247.534516][ T5286]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  247.534534][ T5286]  __se_sys_ioctl+0x123/0x1b0
[  247.534556][ T5286]  __x64_sys_ioctl+0x7f/0xa0
[  247.534577][ T5286]  x64_sys_call+0x1878/0x2ee0
[  247.534595][ T5286]  do_syscall_64+0x57/0xf0
[  247.534619][ T5286]  ? clear_bhb_loop+0x50/0xa0
[  247.534640][ T5286]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  247.534660][ T5286] RIP: 0033:0x7fcefa99e159
[  247.534676][ T5286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.534692][ T5286] RSP: 002b:00007fcefb81d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  247.534714][ T5286] RAX: ffffffffffffffda RBX: 00007fcefac25fa0 RCX: 00007fcefa99e159
[  247.534728][ T5286] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  247.534741][ T5286] RBP: 00007fcefb81d090 R08: 0000000000000000 R09: 0000000000000000
[  247.534754][ T5286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.534766][ T5286] R13: 00007fcefac26038 R14: 00007fcefac25fa0 R15: 00007ffd3bef21a8
[  247.534782][ T5286]  </TASK>
[  247.562979][ T5253] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  247.715228][ T4677] tipc: Node number set to 2886997007
[  247.847480][  T315] usb 3-1: 2:1 : bogus bTerminalLink 6
[  247.946915][   T36] audit: type=1326 audit(1787910881.921:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.0.1740" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f969af9e159 code=0x0
[  248.351122][   T65] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  248.512901][   T65] usb 5-1: Using ep0 maxpacket: 8
[  248.519082][   T65] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.530634][   T65] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  248.543440][   T65] usb 5-1: config 0 interface 0 has no altsetting 0
[  248.550107][   T65] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  248.559162][   T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.567984][   T65] usb 5-1: config 0 descriptor??
[  248.838923][   T65] usbhid 5-1:0.0: can't add hid device: -71
[  248.847824][   T65] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  248.865036][  T315] usb 3-1: USB disconnect, device number 102
[  248.872960][   T65] usb 5-1: USB disconnect, device number 37
[  248.929173][ T5324] SELinux: failed to load policy
[  248.947681][   T36] audit: type=1400 audit(1787910882.848:442): avc:  denied  { write } for  pid=5325 comm="syz.0.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  249.246547][ T4677] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  249.384195][   T36] audit: type=1400 audit(1787910883.246:443): avc:  denied  { mounton } for  pid=5337 comm="syz.5.1755" path="/144/file1" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  249.419597][ T4677] usb 1-1: Using ep0 maxpacket: 16
[  249.431662][ T4677] usb 1-1: unable to get BOS descriptor or descriptor too short
[  249.445244][ T4677] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.455627][ T4677] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.464555][ T4677] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 87, using maximum allowed: 30
[  249.475447][ T4677] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 87
[  249.498750][ T4677] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  249.513361][ T4677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.521504][ T4677] usb 1-1: Product: syz
[  249.526892][ T4677] usb 1-1: Manufacturer: syz
[  249.531671][ T4677] usb 1-1: SerialNumber: syz
[  249.532278][   T36] audit: type=1400 audit(1787910883.385:444): avc:  denied  { create } for  pid=5349 comm="syz.5.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  249.775528][  T315] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  249.861918][   T65] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  249.937475][  T315] usb 3-1: Using ep0 maxpacket: 16
[  249.943932][  T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.954970][  T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.964820][  T315] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.977624][  T315] usb 3-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.00
[  249.986687][  T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.995385][  T315] usb 3-1: config 0 descriptor??
[  250.025223][   T65] usb 5-1: unable to get BOS descriptor or descriptor too short
[  250.033627][   T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.043766][   T65] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  250.056659][   T65] usb 5-1: config 1 interface 0 has no altsetting 0
[  250.064705][   T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  250.073792][   T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.081801][   T65] usb 5-1: Product: syz
[  250.085961][   T65] usb 5-1: Manufacturer: syz
[  250.090664][   T65] usb 5-1: SerialNumber: syz
[  250.312996][ T4677] usb 1-1: unknown interface protocol 0xa5, assuming v1
[  250.320141][ T4677] usb 1-1: cannot find UAC_HEADER
[  250.325563][ T5358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.336963][ T4677] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  250.346150][ T5358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.357766][ T4677] usb 1-1: USB disconnect, device number 110
[  250.363947][   T65] cdc_mbim 5-1:1.0: MBIM functional descriptor missing
[  250.371928][   T65] cdc_mbim 5-1:1.0: bind() failure
[  250.372690][  T444] udevd[444]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  250.380570][   T65] usb 5-1: USB disconnect, device number 38
[  250.436598][  T315] input: HID 047d:2041 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:047D:2041.0024/input/input36
[  250.450963][  T315] kensington 0003:047D:2041.0024: input,hidraw0: USB HID v1.00 Joystick [HID 047d:2041] on usb-dummy_hcd.2-1/input0
[  250.494998][ T5366] lo: entered promiscuous mode
[  250.500442][ T5366] lo: left promiscuous mode
[  250.844970][ T4677] usb 1-1: new full-speed USB device number 111 using dummy_hcd
[  250.958155][ T5386] kvm: kvm [5385]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  250.967083][ T5386] kvm: kvm [5385]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  250.985478][ T4677] usb 1-1: device descriptor read/64, error -71
[  251.244787][ T4677] usb 1-1: device descriptor read/64, error -71
[  251.298831][  T318] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  251.311360][ T5391] tipc: Invalid UDP bearer configuration
[  251.311377][ T5391] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  251.462069][  T318] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.472305][  T318] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  251.482824][  T318] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[  251.491957][  T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.500498][  T318] usb 5-1: Product: syz
[  251.504720][ T4677] usb 1-1: new full-speed USB device number 112 using dummy_hcd
[  251.512401][  T318] usb 5-1: Manufacturer: syz
[  251.517270][  T318] usb 5-1: SerialNumber: syz
[  251.655658][ T4677] usb 1-1: device descriptor read/64, error -71
[  251.740646][   T36] audit: type=1400 audit(1787910885.431:445): avc:  denied  { read } for  pid=5388 comm="syz.4.1777" path="socket:[78413]" dev="sockfs" ino=78413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  251.795988][ T5406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.805562][ T5406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.925967][ T4677] usb 1-1: device descriptor read/64, error -71
[  252.045028][ T4677] usb usb1-port1: attempt power cycle
[  252.423340][ T4677] usb 1-1: new full-speed USB device number 113 using dummy_hcd
[  252.445999][ T4677] usb 1-1: device descriptor read/8, error -71
[  252.586609][ T4677] usb 1-1: device descriptor read/8, error -71
[  252.772940][  T310] usb 3-1: USB disconnect, device number 103
[  252.845280][ T4677] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[  252.868007][ T4677] usb 1-1: device descriptor read/8, error -71
[  252.963774][   T36] audit: type=1400 audit(1787910886.559:446): avc:  denied  { create } for  pid=5415 comm="syz.2.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  252.969161][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1786'.
[  253.008566][ T4677] usb 1-1: device descriptor read/8, error -71
[  253.126610][ T4677] usb usb1-port1: unable to enumerate USB device
[  254.186794][   T65] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  254.296412][  T318] usb 5-1: cannot find UAC_HEADER
[  254.304186][  T318] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  254.316238][  T318] usb 5-1: USB disconnect, device number 39
[  254.323849][  T444] udevd[444]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  254.359953][   T65] usb 1-1: Using ep0 maxpacket: 8
[  254.366056][   T65] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.377414][   T65] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.390260][   T65] usb 1-1: config 0 interface 0 has no altsetting 0
[  254.396994][   T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  254.406053][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.414714][   T65] usb 1-1: config 0 descriptor??
[  254.636266][ T5442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1795'.
[  254.698342][   T65] usbhid 1-1:0.0: can't add hid device: -71
[  254.704406][   T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  254.713131][   T65] usb 1-1: USB disconnect, device number 115
[  254.771191][  T318] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  254.845094][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'.
[  254.866442][ T5449] SELinux:  unknown common 
[  254.871083][   T36] audit: type=1400 audit(1787910888.315:447): avc:  denied  { search } for  pid=5450 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.897156][ T5449] SELinux: failed to load policy
[  254.922539][   T36] audit: type=1400 audit(1787910888.352:448): avc:  denied  { read } for  pid=5451 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.949719][  T318] usb 5-1: device descriptor read/64, error -71
[  254.956127][   T36] audit: type=1400 audit(1787910888.352:449): avc:  denied  { open } for  pid=5451 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.981588][   T36] audit: type=1400 audit(1787910888.352:450): avc:  denied  { getattr } for  pid=5451 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  254.981799][ T5455] FAULT_INJECTION: forcing a failure.
[  254.981799][ T5455] name failslab, interval 1, probability 0, space 0, times 0
[  255.006743][   T36] audit: type=1400 audit(1787910888.352:451): avc:  denied  { getattr } for  pid=5451 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  255.030611][ T5455] CPU: 0 UID: 0 PID: 5455 Comm: syz.2.1798 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  255.030645][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  255.030658][ T5455] Call Trace:
[  255.030665][ T5455]  <TASK>
[  255.030672][ T5455]  __dump_stack+0x21/0x30
[  255.030704][ T5455]  dump_stack_lvl+0x140/0x1c0
[  255.030728][ T5455]  ? __cfi_dump_stack_lvl+0x10/0x10
[  255.030753][ T5455]  dump_stack+0x19/0x20
[  255.030777][ T5455]  should_fail_ex+0x3c2/0x510
[  255.030798][ T5455]  should_failslab+0xac/0x100
[  255.030821][ T5455]  __kmalloc_node_track_caller_noprof+0x65/0x4f0
[  255.030842][ T5455]  ? vfs_parse_fs_string+0xd9/0x180
[  255.030871][ T5455]  kmemdup_nul+0x5a/0x1a0
[  255.030888][ T5455]  vfs_parse_fs_string+0xd9/0x180
[  255.030910][ T5455]  ? __kmalloc_cache_noprof+0x23c/0x470
[  255.030930][ T5455]  ? __cfi_vfs_parse_fs_string+0x10/0x10
[  255.030954][ T5455]  ? bpf_lsm_sb_eat_lsm_opts+0xd/0x20
[  255.030973][ T5455]  shmem_parse_options+0x15c/0x220
[  255.031080][ T5455]  parse_monolithic_mount_data+0x7f/0x90
[  255.031103][ T5455]  path_mount+0xba5/0xff0
[  255.031124][ T5455]  __se_sys_mount+0x2bf/0x480
[  255.031144][ T5455]  ? ksys_write+0x1f3/0x260
[  255.031163][ T5455]  ? __x64_sys_mount+0xf0/0xf0
[  255.031184][ T5455]  __x64_sys_mount+0xc3/0xf0
[  255.031203][ T5455]  x64_sys_call+0x2021/0x2ee0
[  255.031220][ T5455]  do_syscall_64+0x57/0xf0
[  255.031246][ T5455]  ? clear_bhb_loop+0x50/0xa0
[  255.031267][ T5455]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  255.031288][ T5455] RIP: 0033:0x7f604239e159
[  255.031305][ T5455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.031322][ T5455] RSP: 002b:00007f60431c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  255.031343][ T5455] RAX: ffffffffffffffda RBX: 00007f6042625fa0 RCX: 00007f604239e159
[  255.031357][ T5455] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000
[  255.031371][ T5455] RBP: 00007f60431c9090 R08: 0000200000000300 R09: 0000000000000000
[  255.031384][ T5455] R10: 000000000008402a R11: 0000000000000246 R12: 0000000000000001
[  255.031398][ T5455] R13: 00007f6042626038 R14: 00007f6042625fa0 R15: 00007ffd8b6a4b18
[  255.031413][ T5455]  </TASK>
[  255.269354][   T36] audit: type=1400 audit(1787910888.370:452): avc:  denied  { read } for  pid=5453 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  255.293882][   T36] audit: type=1400 audit(1787910888.370:453): avc:  denied  { open } for  pid=5453 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  255.319014][   T36] audit: type=1400 audit(1787910888.490:454): avc:  denied  { write } for  pid=5450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  255.474755][  T318] usb 5-1: device descriptor read/64, error -71
[  255.734518][  T318] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  255.875248][  T318] usb 5-1: device descriptor read/64, error -71
[  256.135071][  T318] usb 5-1: device descriptor read/64, error -71
[  256.145893][ T4677] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  256.254232][  T318] usb usb5-port1: attempt power cycle
[  256.308292][ T4677] usb 3-1: Using ep0 maxpacket: 8
[  256.314340][ T4677] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.325275][ T4677] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  256.338145][ T4677] usb 3-1: config 0 interface 0 has no altsetting 0
[  256.344977][ T4677] usb 3-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  256.354043][ T4677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.362706][ T4677] usb 3-1: config 0 descriptor??
[  256.643918][  T318] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  256.666546][  T318] usb 5-1: device descriptor read/8, error -71
[  256.678501][ T4677] usbhid 3-1:0.0: can't add hid device: -71
[  256.690654][ T4677] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  256.701522][ T4677] usb 3-1: USB disconnect, device number 104
[  256.807244][  T318] usb 5-1: device descriptor read/8, error -71
[  256.968689][   T45] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  257.066130][  T318] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  257.088769][  T318] usb 5-1: device descriptor read/8, error -71
[  257.109433][   T45] usb 1-1: device descriptor read/64, error -71
[  257.229744][  T318] usb 5-1: device descriptor read/8, error -71
[  257.347749][  T318] usb usb5-port1: unable to enumerate USB device
[  257.380134][   T45] usb 1-1: device descriptor read/64, error -71
[  257.510039][   T65] usb 3-1: new full-speed USB device number 105 using dummy_hcd
[  257.639985][   T45] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  257.685591][   T65] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23
[  257.694736][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.703309][   T65] usb 3-1: Product: syz
[  257.707590][   T65] usb 3-1: Manufacturer: syz
[  257.712895][ T5547] FAULT_INJECTION: forcing a failure.
[  257.712895][ T5547] name fail_futex, interval 1, probability 0, space 0, times 1
[  257.713885][   T65] usb 3-1: SerialNumber: syz
[  257.727149][ T5547] CPU: 1 UID: 0 PID: 5547 Comm: syz.4.1819 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  257.727179][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  257.727192][ T5547] Call Trace:
[  257.727199][ T5547]  <TASK>
[  257.727207][ T5547]  __dump_stack+0x21/0x30
[  257.727240][ T5547]  dump_stack_lvl+0x140/0x1c0
[  257.727265][ T5547]  ? __cfi_dump_stack_lvl+0x10/0x10
[  257.727293][ T5547]  ? __cfi_copy_fpstate_to_sigframe+0x10/0x10
[  257.727420][ T5547]  dump_stack+0x19/0x20
[  257.727446][ T5547]  should_fail_ex+0x3c2/0x510
[  257.727469][ T5547]  should_fail+0xf/0x20
[  257.727490][ T5547]  get_futex_key+0x178/0x940
[  257.727514][ T5547]  ? fpu__alloc_mathframe+0xb7/0x150
[  257.727538][ T5547]  ? __cfi_get_futex_key+0x10/0x10
[  257.727560][ T5547]  ? get_sigframe+0x60d/0x830
[  257.727578][ T5547]  futex_wake+0x150/0x950
[  257.727595][ T5547]  ? __kasan_check_read+0x15/0x20
[  257.727615][ T5547]  ? __cfi_futex_wake+0x10/0x10
[  257.727632][ T5547]  ? copy_siginfo_to_user+0x98/0xb0
[  257.727697][ T5547]  ? x64_setup_rt_frame+0x906/0xc20
[  257.727717][ T5547]  do_futex+0x37d/0x510
[  257.727744][ T5547]  ? __set_current_blocked+0x98/0x2d0
[  257.727771][ T5547]  ? __cfi_do_futex+0x10/0x10
[  257.727796][ T5547]  ? signal_setup_done+0x201/0x2e0
[  257.727823][ T5547]  __se_sys_futex+0x13c/0x320
[  257.727848][ T5547]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  257.727868][ T5547]  ? __x64_sys_futex+0x110/0x110
[  257.727893][ T5547]  ? __kasan_check_read+0x15/0x20
[  257.727912][ T5547]  __x64_sys_futex+0xe9/0x110
[  257.727936][ T5547]  x64_sys_call+0x227f/0x2ee0
[  257.727954][ T5547]  do_syscall_64+0x57/0xf0
[  257.727980][ T5547]  ? clear_bhb_loop+0x50/0xa0
[  257.728002][ T5547]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  257.728022][ T5547] RIP: 0033:0x7fcefa99e159
[  257.728039][ T5547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.728056][ T5547] RSP: 002b:00007fcefb81d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  257.728085][ T5547] RAX: ffffffffffffffda RBX: 00007fcefac25fa8 RCX: 00007fcefa99e159
[  257.728100][ T5547] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcefac25fac
[  257.728114][ T5547] RBP: 00007fcefac25fa0 R08: 4000000000000000 R09: 0000000000000000
[  257.728128][ T5547] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  257.728142][ T5547] R13: 00007fcefac26038 R14: 00007ffd3bef20c0 R15: 00007ffd3bef21a8
[  257.728160][ T5547]  </TASK>
[  257.802381][   T45] usb 1-1: device descriptor read/64, error -71
[  257.808391][   T65] usb 3-1: config 0 descriptor??
[  257.991252][   T65] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG
[  258.084361][   T45] usb 1-1: device descriptor read/64, error -71
[  258.203123][   T45] usb usb1-port1: attempt power cycle
[  258.219659][   T65] usb 3-1: USB disconnect, device number 105
[  258.441279][  T318] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  258.592861][  T318] usb 5-1: device descriptor read/64, error -71
[  258.599150][   T45] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  258.626297][   T45] usb 1-1: device descriptor read/8, error -71
[  258.768778][   T45] usb 1-1: device descriptor read/8, error -71
[  258.809032][ T5570] ±ÿ: renamed from xfrm0 (while UP)
[  258.816961][ T5570] fuse: blksize only supported for fuseblk
[  258.850339][   T36] kauditd_printk_skb: 8 callbacks suppressed
[  258.850350][   T36] audit: type=1400 audit(1787910892.000:463): avc:  denied  { write } for  pid=5580 comm="syz.5.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  258.857064][ T5581] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1832'.
[  258.876562][  T318] usb 5-1: device descriptor read/64, error -71
[  258.892368][   T36] audit: type=1400 audit(1787910892.009:464): avc:  denied  { nlmsg_write } for  pid=5580 comm="syz.5.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  258.913041][   T36] audit: type=1400 audit(1787910892.009:465): avc:  denied  { nlmsg_read } for  pid=5580 comm="syz.5.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  259.047675][   T45] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  259.070294][   T45] usb 1-1: device descriptor read/8, error -71
[  259.145132][  T318] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  259.211127][   T45] usb 1-1: device descriptor read/8, error -71
[  259.285920][  T318] usb 5-1: device descriptor read/64, error -71
[  259.329315][   T45] usb usb1-port1: unable to enumerate USB device
[  259.545821][  T318] usb 5-1: device descriptor read/64, error -71
[  259.665045][  T318] usb usb5-port1: attempt power cycle
[  259.946528][   T45] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  259.964393][ T5591] FAULT_INJECTION: forcing a failure.
[  259.964393][ T5591] name fail_futex, interval 1, probability 0, space 0, times 0
[  259.977221][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: syz.0.1837 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  259.977254][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  259.977264][ T5591] Call Trace:
[  259.977269][ T5591]  <TASK>
[  259.977274][ T5591]  __dump_stack+0x21/0x30
[  259.977296][ T5591]  dump_stack_lvl+0x140/0x1c0
[  259.977311][ T5591]  ? __cfi_dump_stack_lvl+0x10/0x10
[  259.977326][ T5591]  ? __cfi_copy_fpstate_to_sigframe+0x10/0x10
[  259.977342][ T5591]  dump_stack+0x19/0x20
[  259.977355][ T5591]  should_fail_ex+0x3c2/0x510
[  259.977368][ T5591]  should_fail+0xf/0x20
[  259.977379][ T5591]  get_futex_key+0x178/0x940
[  259.977393][ T5591]  ? fpu__alloc_mathframe+0xb7/0x150
[  259.977406][ T5591]  ? __cfi_get_futex_key+0x10/0x10
[  259.977418][ T5591]  ? get_sigframe+0x60d/0x830
[  259.977428][ T5591]  futex_wake+0x150/0x950
[  259.977438][ T5591]  ? __kasan_check_read+0x15/0x20
[  259.977449][ T5591]  ? __cfi_futex_wake+0x10/0x10
[  259.977459][ T5591]  ? copy_siginfo_to_user+0x98/0xb0
[  259.977479][ T5591]  ? x64_setup_rt_frame+0x906/0xc20
[  259.977500][ T5591]  do_futex+0x37d/0x510
[  259.977514][ T5591]  ? __set_current_blocked+0x98/0x2d0
[  259.977529][ T5591]  ? __cfi_do_futex+0x10/0x10
[  259.977542][ T5591]  ? signal_setup_done+0x201/0x2e0
[  259.977556][ T5591]  __se_sys_futex+0x13c/0x320
[  259.977569][ T5591]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  259.977580][ T5591]  ? __x64_sys_futex+0x110/0x110
[  259.977604][ T5591]  ? __kasan_check_read+0x15/0x20
[  259.977623][ T5591]  __x64_sys_futex+0xe9/0x110
[  259.977646][ T5591]  x64_sys_call+0x227f/0x2ee0
[  259.977663][ T5591]  do_syscall_64+0x57/0xf0
[  259.977685][ T5591]  ? clear_bhb_loop+0x50/0xa0
[  259.977698][ T5591]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  259.977710][ T5591] RIP: 0033:0x7f969af9e159
[  259.977722][ T5591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.977732][ T5591] RSP: 002b:00007f969bd9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  259.977744][ T5591] RAX: ffffffffffffffda RBX: 00007f969b225fa8 RCX: 00007f969af9e159
[  259.977753][ T5591] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f969b225fac
[  259.977760][ T5591] RBP: 00007f969b225fa0 R08: 4000000000000000 R09: 0000000000000000
[  259.977768][ T5591] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  259.977775][ T5591] R13: 00007f969b226038 R14: 00007ffe611cab10 R15: 00007ffe611cabf8
[  259.977785][ T5591]  </TASK>
[  260.033135][  T318] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  260.250818][  T318] usb 5-1: device descriptor read/8, error -71
[  260.257091][   T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.268165][   T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.278060][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  260.287207][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.297572][   T45] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  260.303533][   T45] cdc_wdm 3-1:1.0: Unknown control protocol
[  260.391613][  T318] usb 5-1: device descriptor read/8, error -71
[  260.498844][ T4677] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  260.513431][ T5589] cdc_wdm 3-1:1.0: Error submitting int urb - -90
[  260.519947][ T5589] FAULT_INJECTION: forcing a failure.
[  260.519947][ T5589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.533067][ T5589] CPU: 0 UID: 0 PID: 5589 Comm: syz.2.1836 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  260.533095][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  260.533106][ T5589] Call Trace:
[  260.533113][ T5589]  <TASK>
[  260.533122][ T5589]  __dump_stack+0x21/0x30
[  260.533153][ T5589]  dump_stack_lvl+0x140/0x1c0
[  260.533177][ T5589]  ? __cfi_dump_stack_lvl+0x10/0x10
[  260.533203][ T5589]  ? check_stack_object+0x138/0x150
[  260.533225][ T5589]  dump_stack+0x19/0x20
[  260.533249][ T5589]  should_fail_ex+0x3c2/0x510
[  260.533271][ T5589]  should_fail+0xf/0x20
[  260.533291][ T5589]  should_fail_usercopy+0x1e/0x30
[  260.533313][ T5589]  _copy_to_user+0x24/0xa0
[  260.533340][ T5589]  simple_read_from_buffer+0xed/0x160
[  260.533367][ T5589]  proc_fail_nth_read+0x1aa/0x220
[  260.533391][ T5589]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  260.533414][ T5589]  ? bpf_lsm_file_permission+0xd/0x20
[  260.533439][ T5589]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  260.533465][ T5589]  vfs_read+0x288/0xc70
[  260.533486][ T5589]  ? __cfi_vfs_read+0x10/0x10
[  260.533505][ T5589]  ? __kasan_check_write+0x18/0x20
[  260.533525][ T5589]  ? mutex_lock+0x97/0x1d0
[  260.533546][ T5589]  ? __cfi_mutex_lock+0x10/0x10
[  260.533568][ T5589]  ksys_read+0x145/0x260
[  260.533586][ T5589]  ? xfd_validate_state+0x68/0x140
[  260.533612][ T5589]  ? __cfi_ksys_read+0x10/0x10
[  260.533632][ T5589]  ? __kasan_check_write+0x18/0x20
[  260.533651][ T5589]  ? fpregs_restore_userregs+0x11c/0x260
[  260.533674][ T5589]  __x64_sys_read+0x7f/0x90
[  260.533694][ T5589]  x64_sys_call+0x2638/0x2ee0
[  260.533712][ T5589]  do_syscall_64+0x57/0xf0
[  260.533737][ T5589]  ? clear_bhb_loop+0x50/0xa0
[  260.533770][ T5589]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  260.533791][ T5589] RIP: 0033:0x7f604235e98e
[  260.533810][ T5589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  260.533828][ T5589] RSP: 002b:00007f60431c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  260.533851][ T5589] RAX: ffffffffffffffda RBX: 00007f60431c96c0 RCX: 00007f604235e98e
[  260.533867][ T5589] RDX: 000000000000000f RSI: 00007f60431c90a0 RDI: 0000000000000004
[  260.533881][ T5589] RBP: 00007f60431c9090 R08: 0000000000000000 R09: 0000000000000000
[  260.533896][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.533910][ T5589] R13: 00007f6042626038 R14: 00007f6042625fa0 R15: 00007ffd8b6a4b18
[  260.533927][ T5589]  </TASK>
[  260.537301][   T65] usb 3-1: USB disconnect, device number 106
[  260.661257][  T318] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  260.795450][ T4677] usb 1-1: Using ep0 maxpacket: 8
[  260.801754][ T4677] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.812693][ T4677] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  260.829487][ T4677] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.842193][  T318] usb 5-1: device descriptor read/8, error -71
[  260.848513][ T4677] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  260.857728][ T4677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.870814][ T4677] usb 1-1: config 0 descriptor??
[  260.987284][  T318] usb 5-1: device descriptor read/8, error -71
[  261.116472][  T318] usb usb5-port1: unable to enumerate USB device
[  261.185278][ T4677] usbhid 1-1:0.0: can't add hid device: -71
[  261.191353][ T4677] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  261.202367][ T4677] usb 1-1: USB disconnect, device number 120
[  261.628469][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'.
[  261.637551][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'.
[  261.906794][ T4677] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  262.025900][   T65] usb 5-1: new low-speed USB device number 48 using dummy_hcd
[  262.069203][ T4677] usb 3-1: Using ep0 maxpacket: 16
[  262.075475][ T4677] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  262.083737][ T4677] usb 3-1: config 1 has no interface number 0
[  262.089830][ T4677] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  262.100053][ T4677] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  262.110254][ T4677] usb 3-1: config 1 interface 105 has no altsetting 0
[  262.118508][ T4677] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  262.127588][ T4677] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  262.135705][ T4677] usb 3-1: Product: syz
[  262.139865][ T4677] usb 3-1: Manufacturer: syz
[  262.144474][ T4677] usb 3-1: SerialNumber: syz
[  262.150340][ T5630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  262.157655][ T5630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  262.199173][   T65] usb 5-1: Invalid ep0 maxpacket: 64
[  262.339989][   T65] usb 5-1: new low-speed USB device number 49 using dummy_hcd
[  262.382456][ T5629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  262.389693][ T5629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  262.502435][   T65] usb 5-1: Invalid ep0 maxpacket: 64
[  262.507904][   T65] usb usb5-port1: attempt power cycle
[  262.598783][ T4677] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[  262.609849][ T4677] aqc111 3-1:1.105: probe with driver aqc111 failed with error -32
[  262.881572][   T65] usb 5-1: new low-speed USB device number 50 using dummy_hcd
[  262.903528][   T65] usb 5-1: Invalid ep0 maxpacket: 64
[  263.044014][   T65] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[  263.065714][    T9] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  263.074245][   T65] usb 5-1: Invalid ep0 maxpacket: 64
[  263.079827][   T65] usb usb5-port1: unable to enumerate USB device
[  263.249761][    T9] usb 1-1: Using ep0 maxpacket: 8
[  263.258094][    T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.262991][ T5671] netlink: 'syz.5.1866': attribute type 4 has an invalid length.
[  263.269068][    T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  263.289605][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  263.292717][ T5671] netlink: 'syz.5.1866': attribute type 4 has an invalid length.
[  263.296286][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  263.313102][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.325869][    T9] usb 1-1: config 0 descriptor??
[  263.619783][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  263.625786][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  263.635350][    T9] usb 1-1: USB disconnect, device number 121
[  264.119214][ T5681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.127855][ T5681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.181295][   T36] audit: type=1400 audit(1787910896.931:466): avc:  denied  { connect } for  pid=5685 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  264.201102][   T36] audit: type=1400 audit(1787910896.931:467): avc:  denied  { setopt } for  pid=5685 comm="syz.0.1871" laddr=fe80::f444:d3ff:fe8e:810f lport=3 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  264.242810][ T5688] FAULT_INJECTION: forcing a failure.
[  264.242810][ T5688] name failslab, interval 1, probability 0, space 0, times 0
[  264.255518][ T5688] CPU: 0 UID: 0 PID: 5688 Comm: syz.0.1872 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  264.255551][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  264.255563][ T5688] Call Trace:
[  264.255570][ T5688]  <TASK>
[  264.255575][ T5688]  __dump_stack+0x21/0x30
[  264.255598][ T5688]  dump_stack_lvl+0x140/0x1c0
[  264.255612][ T5688]  ? __cfi_dump_stack_lvl+0x10/0x10
[  264.255627][ T5688]  ? kasan_save_track+0x4f/0x80
[  264.255640][ T5688]  ? kasan_save_track+0x3e/0x80
[  264.255651][ T5688]  ? kasan_save_alloc_info+0x3a/0x50
[  264.255661][ T5688]  ? __kmalloc_cache_node_noprof+0x225/0x430
[  264.255674][ T5688]  ? __get_vm_area_node+0x150/0x390
[  264.255689][ T5688]  dump_stack+0x19/0x20
[  264.255703][ T5688]  should_fail_ex+0x3c2/0x510
[  264.255715][ T5688]  should_failslab+0xac/0x100
[  264.255729][ T5688]  kmem_cache_alloc_node_noprof+0x45/0x420
[  264.255740][ T5688]  ? alloc_vmap_area+0x230/0x26f0
[  264.255755][ T5688]  alloc_vmap_area+0x230/0x26f0
[  264.255770][ T5688]  ? kasan_save_alloc_info+0x3a/0x50
[  264.255780][ T5688]  ? vm_map_ram+0xdd0/0xdd0
[  264.255794][ T5688]  ? __kmalloc_cache_node_noprof+0x225/0x430
[  264.255805][ T5688]  ? __get_vm_area_node+0x150/0x390
[  264.255820][ T5688]  __get_vm_area_node+0x1f8/0x390
[  264.255834][ T5688]  __vmalloc_node_range_noprof+0x340/0x1300
[  264.255850][ T5688]  ? copy_process+0x57c/0x3350
[  264.255868][ T5688]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  264.255883][ T5688]  ? kasan_save_alloc_info+0x3a/0x50
[  264.255893][ T5688]  ? __kasan_slab_alloc+0x73/0x90
[  264.255905][ T5688]  ? arch_dup_task_struct+0x5b/0xe0
[  264.255921][ T5688]  ? __asan_memcpy+0x5a/0x80
[  264.255932][ T5688]  dup_task_struct+0x5d6/0xd80
[  264.255945][ T5688]  ? copy_process+0x57c/0x3350
[  264.255957][ T5688]  ? _raw_spin_lock_irq+0x93/0x120
[  264.255973][ T5688]  ? copy_process+0x3350/0x3350
[  264.255985][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.255996][ T5688]  copy_process+0x57c/0x3350
[  264.256010][ T5688]  ? kasan_save_alloc_info+0x3a/0x50
[  264.256019][ T5688]  ? __cfi_copy_process+0x10/0x10
[  264.256032][ T5688]  ? __kmalloc_cache_noprof+0x23c/0x470
[  264.256043][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.256053][ T5688]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  264.256066][ T5688]  vhost_task_create+0x1f7/0x3f0
[  264.256077][ T5688]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  264.256089][ T5688]  ? __cfi_vhost_task_create+0x10/0x10
[  264.256101][ T5688]  ? __cfi_vhost_task_fn+0x10/0x10
[  264.256111][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.256121][ T5688]  ? mutex_lock+0x97/0x1d0
[  264.256132][ T5688]  ? __cfi_mutex_lock+0x10/0x10
[  264.256143][ T5688]  ? kernel_text_address+0xa9/0xe0
[  264.256157][ T5688]  kvm_mmu_post_init_vm+0x161/0x300
[  264.256173][ T5688]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  264.256187][ T5688]  ? _parse_integer_limit+0x195/0x1e0
[  264.256199][ T5688]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  264.256213][ T5688]  ? kstrtoull+0x13b/0x1e0
[  264.256223][ T5688]  ? kstrtouint+0x78/0xf0
[  264.256233][ T5688]  ? ioctl_has_perm+0x1bc/0x500
[  264.256244][ T5688]  ? __asan_memcpy+0x5a/0x80
[  264.256254][ T5688]  ? ioctl_has_perm+0x408/0x500
[  264.256264][ T5688]  ? has_cap_mac_admin+0xd0/0xd0
[  264.256274][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.256296][ T5688]  ? mutex_lock_killable+0x97/0x1d0
[  264.256307][ T5688]  ? __cfi_mutex_lock_killable+0x10/0x10
[  264.256318][ T5688]  ? proc_fail_nth_write+0x184/0x220
[  264.256334][ T5688]  kvm_vcpu_ioctl+0xa43/0x1000
[  264.256345][ T5688]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  264.256360][ T5688]  ? __cfi_vfs_write+0x10/0x10
[  264.256371][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.256381][ T5688]  ? mutex_unlock+0x90/0x240
[  264.256392][ T5688]  ? __cfi_mutex_unlock+0x10/0x10
[  264.256404][ T5688]  ? __fget_files+0x2bc/0x330
[  264.256417][ T5688]  ? bpf_lsm_file_ioctl+0xd/0x20
[  264.256432][ T5688]  ? security_file_ioctl+0x3e/0x110
[  264.256442][ T5688]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  264.256451][ T5688]  __se_sys_ioctl+0x123/0x1b0
[  264.256465][ T5688]  __x64_sys_ioctl+0x7f/0xa0
[  264.256477][ T5688]  x64_sys_call+0x1878/0x2ee0
[  264.256487][ T5688]  do_syscall_64+0x57/0xf0
[  264.256502][ T5688]  ? clear_bhb_loop+0x50/0xa0
[  264.256514][ T5688]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  264.256526][ T5688] RIP: 0033:0x7f969af9e159
[  264.256536][ T5688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.256546][ T5688] RSP: 002b:00007f969bd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  264.256559][ T5688] RAX: ffffffffffffffda RBX: 00007f969b225fa0 RCX: 00007f969af9e159
[  264.256567][ T5688] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  264.256574][ T5688] RBP: 00007f969bd9b090 R08: 0000000000000000 R09: 0000000000000000
[  264.256582][ T5688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.256589][ T5688] R13: 00007f969b226038 R14: 00007f969b225fa0 R15: 00007ffe611cabf8
[  264.256598][ T5688]  </TASK>
[  264.256622][ T5688] syz.0.1872: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[  264.757299][ T5688] CPU: 1 UID: 0 PID: 5688 Comm: syz.0.1872 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  264.757326][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  264.757338][ T5688] Call Trace:
[  264.757344][ T5688]  <TASK>
[  264.757351][ T5688]  __dump_stack+0x21/0x30
[  264.757401][ T5688]  dump_stack_lvl+0x140/0x1c0
[  264.757426][ T5688]  ? __cfi_dump_stack_lvl+0x10/0x10
[  264.757454][ T5688]  dump_stack+0x19/0x20
[  264.757478][ T5688]  warn_alloc+0x1e7/0x2c0
[  264.757583][ T5688]  ? __cfi_warn_alloc+0x10/0x10
[  264.757607][ T5688]  ? __get_vm_area_node+0x211/0x390
[  264.757635][ T5688]  ? __get_vm_area_node+0x211/0x390
[  264.757661][ T5688]  __vmalloc_node_range_noprof+0x365/0x1300
[  264.757692][ T5688]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  264.757720][ T5688]  ? kasan_save_alloc_info+0x3a/0x50
[  264.757738][ T5688]  ? __kasan_slab_alloc+0x73/0x90
[  264.757760][ T5688]  ? arch_dup_task_struct+0x5b/0xe0
[  264.757787][ T5688]  ? __asan_memcpy+0x5a/0x80
[  264.757807][ T5688]  dup_task_struct+0x5d6/0xd80
[  264.757832][ T5688]  ? copy_process+0x57c/0x3350
[  264.757856][ T5688]  ? _raw_spin_lock_irq+0x93/0x120
[  264.757883][ T5688]  ? copy_process+0x3350/0x3350
[  264.757908][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.757929][ T5688]  copy_process+0x57c/0x3350
[  264.757953][ T5688]  ? kasan_save_alloc_info+0x3a/0x50
[  264.757971][ T5688]  ? __cfi_copy_process+0x10/0x10
[  264.757994][ T5688]  ? __kmalloc_cache_noprof+0x23c/0x470
[  264.758015][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.758034][ T5688]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  264.758056][ T5688]  vhost_task_create+0x1f7/0x3f0
[  264.758077][ T5688]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  264.758099][ T5688]  ? __cfi_vhost_task_create+0x10/0x10
[  264.758121][ T5688]  ? __cfi_vhost_task_fn+0x10/0x10
[  264.758140][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.758159][ T5688]  ? mutex_lock+0x97/0x1d0
[  264.758178][ T5688]  ? __cfi_mutex_lock+0x10/0x10
[  264.758196][ T5688]  ? kernel_text_address+0xa9/0xe0
[  264.758222][ T5688]  kvm_mmu_post_init_vm+0x161/0x300
[  264.758248][ T5688]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  264.758273][ T5688]  ? _parse_integer_limit+0x195/0x1e0
[  264.758294][ T5688]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  264.758319][ T5688]  ? kstrtoull+0x13b/0x1e0
[  264.758338][ T5688]  ? kstrtouint+0x78/0xf0
[  264.758357][ T5688]  ? ioctl_has_perm+0x1bc/0x500
[  264.758383][ T5688]  ? __asan_memcpy+0x5a/0x80
[  264.758401][ T5688]  ? ioctl_has_perm+0x408/0x500
[  264.758420][ T5688]  ? has_cap_mac_admin+0xd0/0xd0
[  264.758439][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.758458][ T5688]  ? mutex_lock_killable+0x97/0x1d0
[  264.758481][ T5688]  ? __cfi_mutex_lock_killable+0x10/0x10
[  264.758504][ T5688]  ? proc_fail_nth_write+0x184/0x220
[  264.758533][ T5688]  kvm_vcpu_ioctl+0xa43/0x1000
[  264.758554][ T5688]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  264.758574][ T5688]  ? __cfi_vfs_write+0x10/0x10
[  264.758594][ T5688]  ? __kasan_check_write+0x18/0x20
[  264.758614][ T5688]  ? mutex_unlock+0x90/0x240
[  264.758634][ T5688]  ? __cfi_mutex_unlock+0x10/0x10
[  264.758655][ T5688]  ? __fget_files+0x2bc/0x330
[  264.758678][ T5688]  ? bpf_lsm_file_ioctl+0xd/0x20
[  264.758703][ T5688]  ? security_file_ioctl+0x3e/0x110
[  264.758722][ T5688]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  264.758740][ T5688]  __se_sys_ioctl+0x123/0x1b0
[  264.758764][ T5688]  __x64_sys_ioctl+0x7f/0xa0
[  264.758787][ T5688]  x64_sys_call+0x1878/0x2ee0
[  264.758806][ T5688]  do_syscall_64+0x57/0xf0
[  264.758831][ T5688]  ? clear_bhb_loop+0x50/0xa0
[  264.758850][ T5688]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  264.758869][ T5688] RIP: 0033:0x7f969af9e159
[  264.758884][ T5688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.758900][ T5688] RSP: 002b:00007f969bd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  264.758921][ T5688] RAX: ffffffffffffffda RBX: 00007f969b225fa0 RCX: 00007f969af9e159
[  264.758935][ T5688] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  264.758948][ T5688] RBP: 00007f969bd9b090 R08: 0000000000000000 R09: 0000000000000000
[  264.758961][ T5688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.758974][ T5688] R13: 00007f969b226038 R14: 00007f969b225fa0 R15: 00007ffe611cabf8
[  264.758991][ T5688]  </TASK>
[  264.758999][ T5688] Mem-Info:
[  265.184847][ T5688] active_anon:23191 inactive_anon:9 isolated_anon:0
[  265.184847][ T5688]  active_file:16183 inactive_file:2543 isolated_file:0
[  265.184847][ T5688]  unevictable:0 dirty:135 writeback:0
[  265.184847][ T5688]  slab_reclaimable:7185 slab_unreclaimable:69785
[  265.184847][ T5688]  mapped:25232 shmem:15659 pagetables:1206
[  265.184847][ T5688]  sec_pagetables:0 bounce:0
[  265.184847][ T5688]  kernel_misc_reclaimable:0
[  265.184847][ T5688]  free:1504790 free_pcp:2544 free_cma:0
[  265.230263][ T5688] Node 0 active_anon:92764kB inactive_anon:36kB active_file:64732kB inactive_file:10172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100928kB dirty:540kB writeback:0kB shmem:62636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5800kB pagetables:4124kB sec_pagetables:0kB all_unreclaimable? no
[  265.262489][ T5688] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963384kB mlocked:0kB bounce:0kB free_pcp:5220kB local_pcp:0kB free_cma:0kB
[  265.269017][   T65] usb 3-1: USB disconnect, device number 107
[  265.292727][ T5688] lowmem_reserve[]: 0 3921 3921
[  265.305873][ T5688] Normal free:3063920kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92764kB inactive_anon:36kB active_file:64732kB inactive_file:10172kB unevictable:0kB writepending:540kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:128kB free_cma:0kB
[  265.337338][ T5688] lowmem_reserve[]: 0 0 0
[  265.341781][ T5688] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  265.357353][ T5688] Normal: 496*4kB (UME) 641*8kB (UME) 511*16kB (UME) 462*32kB (UME) 407*64kB (UME) 79*128kB (UME) 28*256kB (UME) 13*512kB (UME) 14*1024kB (UME) 6*2048kB (UME) 722*4096kB (UM) = 3063992kB
[  265.376202][ T5688] 34394 total pagecache pages
[  265.380894][ T5688] 15 pages in swap cache
[  265.385180][ T5688] Free swap  = 55852kB
[  265.389250][ T5688] Total swap = 124996kB
[  265.393410][ T5688] 2097051 pages RAM
[  265.397243][ T5688] 0 pages HighMem/MovableOnly
[  265.401908][ T5688] 352239 pages reserved
[  265.406083][ T5688] 0 pages cma reserved
[  265.411232][ T5688] Memory allocations:
[  265.415208][ T5688]          0 B        0 init/main.c:1477 func:do_initcalls
[  265.422450][ T5688]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  265.430700][ T5688]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  265.438562][ T5688]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  265.446460][ T5688]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  265.454632][ T5688]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  265.463333][ T5688]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  265.471273][ T5688]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  265.479196][ T5688]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  265.487305][ T5688]          0 B        0 init/initramfs.c:101 func:find_link
[  265.513530][  T318] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  265.552066][ T5704] ./dev/sda1: Can't open blockdev
[  265.557732][ T5704] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[  265.567618][   T36] audit: type=1400 audit(1787910898.196:468): avc:  denied  { relabelto } for  pid=5703 comm="syz.0.1878" name="sda1" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  265.594754][   T36] audit: type=1400 audit(1787910898.205:469): avc:  denied  { associate } for  pid=5703 comm="syz.0.1878" name="sda1" dev="devtmpfs" ino=99 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0"
[  265.654323][  T318] usb 5-1: device descriptor read/64, error -71
[  265.805969][   T65] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  265.849271][ T4677] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  265.914257][  T318] usb 5-1: device descriptor read/64, error -71
[  265.969809][   T65] usb 3-1: unable to get BOS descriptor or descriptor too short
[  265.978253][   T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.991039][   T65] usb 3-1: string descriptor 0 read error: -22
[  265.997237][   T65] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  266.006323][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.011723][ T4677] usb 1-1: Using ep0 maxpacket: 8
[  266.020409][ T4677] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.031423][ T4677] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  266.044451][ T4677] usb 1-1: config 0 interface 0 has no altsetting 0
[  266.051245][ T4677] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  266.060317][ T4677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.069036][ T4677] usb 1-1: config 0 descriptor??
[  266.185037][  T318] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  266.319651][ T4677] usbhid 1-1:0.0: can't add hid device: -71
[  266.326741][  T318] usb 5-1: device descriptor read/64, error -71
[  266.333086][ T4677] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  266.341906][ T4677] usb 1-1: USB disconnect, device number 122
[  266.585799][  T318] usb 5-1: device descriptor read/64, error -71
[  266.670122][   T65] usb 3-1: current rate 6100856 is different from the runtime rate 48000
[  266.705044][  T318] usb usb5-port1: attempt power cycle
[  267.073217][  T318] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  267.095890][  T318] usb 5-1: device descriptor read/8, error -71
[  267.149051][ T4677] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  267.236685][  T318] usb 5-1: device descriptor read/8, error -71
[  267.311517][ T4677] usb 1-1: Using ep0 maxpacket: 16
[  267.317767][ T4677] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  267.326035][ T4677] usb 1-1: config 0 has no interface number 0
[  267.332153][ T4677] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  267.342302][ T4677] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  267.353656][ T4677] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  267.362838][ T4677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.371055][ T4677] usb 1-1: Product: syz
[  267.375207][ T4677] usb 1-1: Manufacturer: syz
[  267.379814][ T4677] usb 1-1: SerialNumber: syz
[  267.385033][ T4677] usb 1-1: config 0 descriptor??
[  267.390294][ T5711] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  267.397497][ T5711] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  267.506497][  T318] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  267.529140][  T318] usb 5-1: device descriptor read/8, error -71
[  267.622120][ T5711] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  267.629402][ T5711] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  267.669978][  T318] usb 5-1: device descriptor read/8, error -71
[  267.706591][ T5715] ./dev/sda1: Can't lookup blockdev
[  267.712905][ T5717] ./dev/sda1: Can't lookup blockdev
[  267.728754][ T5719] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1884'.
[  267.737901][ T5719] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1884'.
[  267.747494][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1884'.
[  267.788186][  T318] usb usb5-port1: unable to enumerate USB device
[  267.853874][ T4677] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  268.288080][ T4677] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  268.298162][ T4677] asix 1-1:0.34: probe with driver asix failed with error -61
[  268.320676][ T5723] ./dev/sda1: Can't lookup blockdev
[  268.659561][  T310] usb 3-1: USB disconnect, device number 108
[  268.735382][ T5750] UDC core: g1: couldn't find an available UDC or it's busy
[  268.743854][ T5751] UDC core: g1: couldn't find an available UDC or it's busy
[  268.795797][   T36] audit: type=1400 audit(1787910901.187:470): avc:  denied  { mounton } for  pid=5753 comm="syz.4.1898" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  268.795882][ T5754] binder: Bad value for 'defcontext'
[  268.889477][ T5756] overlayfs: empty lowerdir
[  269.165768][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1900'.
[  269.177459][   T36] audit: type=1400 audit(1787910901.538:471): avc:  denied  { lock } for  pid=5763 comm="syz.5.1900" path="socket:[82171]" dev="sockfs" ino=82171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  269.311528][   T36] audit: type=1400 audit(1787910901.658:472): avc:  denied  { connect } for  pid=5771 comm="syz.5.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  269.902084][    T9] usb 3-1: new full-speed USB device number 109 using dummy_hcd
[  269.952255][ T5792] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1911'.
[  270.120142][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  270.131293][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  270.149594][    T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  270.152950][  T310] usb 1-1: USB disconnect, device number 123
[  270.158651][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.173687][   T36] audit: type=1400 audit(1787910902.452:473): avc:  denied  { create } for  pid=5845 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  270.193820][    T9] usb 3-1: config 0 descriptor??
[  270.203566][   T36] audit: type=1400 audit(1787910902.452:474): avc:  denied  { read } for  pid=5845 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  270.222949][ T5774] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  270.225227][ T4677] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  270.399623][ T4677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  270.410497][ T4677] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  270.423336][ T4677] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  270.432400][ T4677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.441274][ T4677] usb 5-1: config 0 descriptor??
[  270.446538][ T5794] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  270.669723][    T9] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor
[  270.679701][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0025/input/input37
[  270.760338][    T9] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  270.788678][  T310] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  270.890209][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.899467][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.903838][ T4677] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor
[  270.909971][ T5774] netlink: 'syz.2.1905': attribute type 15 has an invalid length.
[  270.918171][ T4677] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0026/input/input38
[  270.928546][ T5774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1905'.
[  270.964310][  T310] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  270.973540][  T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.981702][  T310] usb 1-1: Product: syz
[  270.986044][  T310] usb 1-1: Manufacturer: syz
[  270.991367][  T310] usb 1-1: SerialNumber: syz
[  271.005716][ T4677] keytouch 0003:0926:3333.0026: input,hidraw1: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  271.236811][  T310] rtl8150 1-1:1.0: couldn't reset the device
[  271.242913][  T310] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  271.252061][  T310] usb 1-1: USB disconnect, device number 124
[  271.376170][ T5872] netlink: 'syz.5.1927': attribute type 4 has an invalid length.
[  271.376709][ T5873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=5873 comm=syz.5.1927
[  271.398032][ T5873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=5873 comm=syz.5.1927
[  271.419460][   T36] audit: type=1326 audit(1787910903.606:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.5.1928" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7619e159 code=0x0
[  271.529567][ T5878] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1928'.
[  272.261642][  T315] usb 5-1: reset full-speed USB device number 56 using dummy_hcd
[  272.837274][ T5903] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  272.846774][ T5903] kvm: pic: non byte read
[  272.851348][ T5903] kvm: pic: level sensitive irq not supported
[  272.851389][ T5903] kvm: pic: non byte read
[  272.862094][ T5903] kvm: pic: level sensitive irq not supported
[  272.862142][ T5903] kvm: pic: non byte read
[  272.872957][ T5903] kvm: pic: level sensitive irq not supported
[  272.873000][ T5903] kvm: pic: non byte read
[  273.052494][    T9] usb 3-1: USB disconnect, device number 109
[  273.203978][    T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  273.258142][  T425] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  273.300342][ T5918] netlink: 'syz.4.1944': attribute type 58 has an invalid length.
[  273.366472][    T9] usb 3-1: Using ep0 maxpacket: 8
[  273.371907][    T9] usb 3-1: no configurations
[  273.376496][    T9] usb 3-1: can't read configurations, error -22
[  273.420618][  T425] usb 1-1: Using ep0 maxpacket: 8
[  273.426700][  T425] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.437621][  T425] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  273.450904][  T425] usb 1-1: config 0 interface 0 has no altsetting 0
[  273.457678][  T425] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  273.466821][  T425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.475566][  T425] usb 1-1: config 0 descriptor??
[  273.528957][    T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  273.691555][    T9] usb 3-1: Using ep0 maxpacket: 8
[  273.696995][    T9] usb 3-1: no configurations
[  273.701621][    T9] usb 3-1: can't read configurations, error -22
[  273.708300][    T9] usb usb3-port1: attempt power cycle
[  273.737229][  T425] usbhid 1-1:0.0: can't add hid device: -71
[  273.743207][  T425] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  273.751861][  T425] usb 1-1: USB disconnect, device number 125
[  273.886452][  T315] usb 5-1: device descriptor read/64, error -71
[  274.060339][ T5926] overlay: Unknown parameter 'fowner'
[  274.084068][    T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  274.099842][ T5935] fuse: Bad value for 'fd'
[  274.114188][    T9] usb 3-1: Using ep0 maxpacket: 8
[  274.120084][    T9] usb 3-1: no configurations
[  274.124790][    T9] usb 3-1: can't read configurations, error -22
[  274.137371][   T36] audit: type=1400 audit(1787910906.117:476): avc:  denied  { associate } for  pid=5946 comm="syz.5.1954" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  274.168798][   T36] audit: type=1400 audit(1787910906.144:477): avc:  denied  { ioctl } for  pid=5919 comm="syz.4.1945" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  274.193811][  T315] usb 5-1: device firmware changed
[  274.203347][   T65] usb 5-1: USB disconnect, device number 56
[  274.265503][    T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  274.287512][    T9] usb 3-1: Using ep0 maxpacket: 8
[  274.293457][    T9] usb 3-1: no configurations
[  274.298367][    T9] usb 3-1: can't read configurations, error -22
[  274.311830][    T9] usb usb3-port1: unable to enumerate USB device
[  274.362984][   T65] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  274.493525][ T5962] FAULT_INJECTION: forcing a failure.
[  274.493525][ T5962] name failslab, interval 1, probability 0, space 0, times 0
[  274.506565][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.0.1960 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  274.506597][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  274.506611][ T5962] Call Trace:
[  274.506618][ T5962]  <TASK>
[  274.506626][ T5962]  __dump_stack+0x21/0x30
[  274.506662][ T5962]  dump_stack_lvl+0x140/0x1c0
[  274.506688][ T5962]  ? __cfi_dump_stack_lvl+0x10/0x10
[  274.506715][ T5962]  ? is_bpf_text_address+0x17b/0x1a0
[  274.506866][ T5962]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  274.506898][ T5962]  dump_stack+0x19/0x20
[  274.506922][ T5962]  should_fail_ex+0x3c2/0x510
[  274.506947][ T5962]  should_failslab+0xac/0x100
[  274.506973][ T5962]  __kmalloc_node_noprof+0x69/0x500
[  274.506996][ T5962]  ? __kvmalloc_node_noprof+0x128/0x300
[  274.507016][ T5962]  ? __kasan_check_write+0x18/0x20
[  274.507037][ T5962]  __kvmalloc_node_noprof+0x128/0x300
[  274.507057][ T5962]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  274.507075][ T5962]  ? xas_start+0x317/0x3e0
[  274.507094][ T5962]  ? __kasan_check_write+0x18/0x20
[  274.507114][ T5962]  ? enqueue_timer+0x1c5/0x4b0
[  274.507175][ T5962]  __kvm_mmu_topup_memory_cache+0x58e/0x7e0
[  274.507204][ T5962]  ? mutex_unlock+0x90/0x240
[  274.507225][ T5962]  kvm_mmu_topup_memory_cache+0x24/0x30
[  274.507252][ T5962]  kvm_mmu_load+0xa1/0x2900
[  274.507277][ T5962]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[  274.507304][ T5962]  ? queue_delayed_work_on+0x16f/0x1f0
[  274.507357][ T5962]  ? kvm_apic_has_interrupt+0x77a/0x790
[  274.507384][ T5962]  vcpu_run+0x4d72/0x7830
[  274.507411][ T5962]  ? kvm_sched_clock_read+0x15/0x30
[  274.507444][ T5962]  ? signal_pending+0xc0/0xc0
[  274.507468][ T5962]  ? __kasan_check_write+0x18/0x20
[  274.507488][ T5962]  ? xfd_validate_state+0x68/0x140
[  274.507515][ T5962]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[  274.507539][ T5962]  ? __kasan_check_write+0x18/0x20
[  274.507559][ T5962]  ? fpregs_mark_activate+0x68/0x160
[  274.507582][ T5962]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[  274.507605][ T5962]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[  274.507628][ T5962]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[  274.507655][ T5962]  ? _parse_integer_limit+0x195/0x1e0
[  274.507677][ T5962]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  274.507703][ T5962]  ? kstrtoull+0x13b/0x1e0
[  274.507729][ T5962]  ? kstrtouint+0x78/0xf0
[  274.507750][ T5962]  ? ioctl_has_perm+0x1bc/0x500
[  274.507771][ T5962]  ? __asan_memcpy+0x5a/0x80
[  274.507791][ T5962]  ? ioctl_has_perm+0x408/0x500
[  274.507811][ T5962]  ? has_cap_mac_admin+0xd0/0xd0
[  274.507830][ T5962]  ? __kasan_check_write+0x18/0x20
[  274.507850][ T5962]  ? mutex_lock_killable+0x97/0x1d0
[  274.507873][ T5962]  ? __cfi_mutex_lock_killable+0x10/0x10
[  274.507895][ T5962]  ? proc_fail_nth_write+0x184/0x220
[  274.507925][ T5962]  kvm_vcpu_ioctl+0xa43/0x1000
[  274.507945][ T5962]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  274.507965][ T5962]  ? __cfi_vfs_write+0x10/0x10
[  274.507986][ T5962]  ? __kasan_check_write+0x18/0x20
[  274.508005][ T5962]  ? mutex_unlock+0x90/0x240
[  274.508026][ T5962]  ? __cfi_mutex_unlock+0x10/0x10
[  274.508049][ T5962]  ? __fget_files+0x2bc/0x330
[  274.508073][ T5962]  ? bpf_lsm_file_ioctl+0xd/0x20
[  274.508099][ T5962]  ? security_file_ioctl+0x3e/0x110
[  274.508119][ T5962]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  274.508138][ T5962]  __se_sys_ioctl+0x123/0x1b0
[  274.508163][ T5962]  __x64_sys_ioctl+0x7f/0xa0
[  274.508186][ T5962]  x64_sys_call+0x1878/0x2ee0
[  274.508205][ T5962]  do_syscall_64+0x57/0xf0
[  274.508231][ T5962]  ? clear_bhb_loop+0x50/0xa0
[  274.508254][ T5962]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  274.508275][ T5962] RIP: 0033:0x7f969af9e159
[  274.508294][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.508312][ T5962] RSP: 002b:00007f969bd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  274.508335][ T5962] RAX: ffffffffffffffda RBX: 00007f969b225fa0 RCX: 00007f969af9e159
[  274.508351][ T5962] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  274.508364][ T5962] RBP: 00007f969bd9b090 R08: 0000000000000000 R09: 0000000000000000
[  274.508377][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.508391][ T5962] R13: 00007f969b226038 R14: 00007f969b225fa0 R15: 00007ffe611cabf8
[  274.508408][ T5962]  </TASK>
[  274.526568][   T65] usb 5-1: config 127 has an invalid interface number: 57 but max is 0
[  274.939044][   T65] usb 5-1: config 127 has no interface number 0
[  274.945324][   T65] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  274.957945][   T65] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  274.967040][   T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.975185][   T65] usb 5-1: Product: syz
[  274.979348][   T65] usb 5-1: Manufacturer: syz
[  274.983974][   T65] usb 5-1: SerialNumber: syz
[  274.993943][ T5920] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  275.001304][   T36] audit: type=1400 audit(1787910906.911:478): avc:  denied  { read write } for  pid=5965 comm="syz.0.1961" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  275.024907][   T36] audit: type=1400 audit(1787910906.911:479): avc:  denied  { open } for  pid=5965 comm="syz.0.1961" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  275.251201][  T310] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  275.414709][  T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.425648][  T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.435513][  T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  275.444596][  T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.444742][ T5920] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  275.458950][  T310] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  275.465622][  T310] cdc_wdm 1-1:1.0: Unknown control protocol
[  275.675255][ T5966] cdc_wdm 1-1:1.0: Error submitting int urb - -90
[  275.680307][   T65] asix 5-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random
[  275.682568][  T310] usb 1-1: USB disconnect, device number 126
[  275.849383][   T36] audit: type=1400 audit(1787910907.695:480): avc:  denied  { setopt } for  pid=5987 comm="syz.2.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  275.851127][ T5988] tipc: Started in network mode
[  275.873810][ T5988] tipc: Node identity ac14140f, cluster identity 4711
[  275.880716][ T5988] tipc: New replicast peer: 255.255.255.255
[  275.886833][ T5988] tipc: Enabled bearer <udp:syz2>, priority 10
[  275.897318][   T65] asix 5-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  275.908238][   T65] asix 5-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  275.919190][   T65] asix 5-1:127.57: probe with driver asix failed with error -71
[  275.934568][ T5991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  275.935714][   T65] usb 5-1: USB disconnect, device number 57
[  275.974757][   T36] audit: type=1400 audit(1787910907.806:481): avc:  denied  { setattr } for  pid=5994 comm="syz.2.1972" name="sda1" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  276.011686][ T5997] SELinux: failed to load policy
[  276.280208][  T425] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  276.429589][   T36] audit: type=1400 audit(1787910908.231:482): avc:  denied  { create } for  pid=6010 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  276.450079][  T425] usb 3-1: Using ep0 maxpacket: 8
[  276.459580][  T425] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.478590][  T425] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  276.491509][  T425] usb 3-1: config 0 interface 0 has no altsetting 0
[  276.498376][  T425] usb 3-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  276.514049][  T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.525296][  T425] usb 3-1: config 0 descriptor??
[  276.676239][   T36] audit: type=1400 audit(1787910908.462:483): avc:  denied  { ioctl } for  pid=6026 comm="syz.0.1985" path="socket:[83616]" dev="sockfs" ino=83616 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  276.803328][  T425] usbhid 3-1:0.0: can't add hid device: -71
[  276.809385][  T425] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  276.818336][  T425] usb 3-1: USB disconnect, device number 114
[  276.837445][   T36] audit: type=1400 audit(1787910908.609:484): avc:  denied  { mounton } for  pid=6039 comm="syz.4.1991" path="/dev/snd/timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  276.837985][ T6040] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  276.871114][ T6040] SELinux: failed to load policy
[  276.955700][ T6049] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1995'.
[  276.965480][ T6050] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1995'.
[  276.974608][ T4677] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  277.103455][  T425] tipc: Node number set to 2886997007
[  277.135946][ T4677] usb 1-1: Using ep0 maxpacket: 32
[  277.142210][ T4677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.153329][ T4677] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  277.163196][ T4677] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  277.173060][ T4677] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  277.186845][ T4677] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  277.195945][ T4677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  277.204156][ T4677] usb 1-1: SerialNumber: syz
[  277.209601][ T6029] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  277.216825][ T6029] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  277.224432][ T4677] hub 1-1:1.0: bad descriptor, ignoring hub
[  277.230338][ T4677] hub 1-1:1.0: probe with driver hub failed with error -5
[  277.237615][ T4677] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  277.341769][  T310] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  277.366619][   T36] audit: type=1400 audit(1787910909.099:485): avc:  denied  { getopt } for  pid=6065 comm="syz.2.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  277.444772][ T4677] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  277.472251][ T4677] usb 1-1: USB disconnect, device number 127
[  277.525904][  T310] usb 5-1: Using ep0 maxpacket: 16
[  277.532532][  T310] usb 5-1: unable to get BOS descriptor or descriptor too short
[  277.541376][  T310] usb 5-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config
[  277.551689][  T310] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64
[  277.561610][  T310] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  277.572874][  T310] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  277.581973][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.589957][  T310] usb 5-1: Product: syz
[  277.594294][  T310] usb 5-1: Manufacturer: syz
[  277.598890][  T310] usb 5-1: SerialNumber: syz
[  277.604521][ T6060] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  277.611679][ T6060] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  277.634223][  T479] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  277.796667][  T479] usb 3-1: Using ep0 maxpacket: 8
[  277.802789][  T479] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8
[  277.812484][  T479] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64
[  277.822333][  T479] usb 3-1: config 1 interface 0 has no altsetting 0
[  277.830295][  T479] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  277.839456][  T479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.847629][  T479] usb 3-1: Product: syz
[  277.852149][  T479] usb 3-1: Manufacturer: syz
[  277.856787][  T479] usb 3-1: SerialNumber: syz
[  277.863007][  T479] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  277.871817][  T479] usb 3-1: no configuration chosen from 1 choice
[  277.878354][  T310] usb 5-1: MIDIStreaming interface descriptor not found
[  277.888359][  T310] usb 5-1: USB disconnect, device number 58
[  278.003618][   T36] audit: type=1400 audit(1787910909.690:486): avc:  denied  { create } for  pid=6082 comm="syz.0.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  278.196681][ T6092] fuse: Bad value for 'fd'
[  278.303974][   T36] audit: type=1400 audit(1787910909.957:487): avc:  denied  { getopt } for  pid=6093 comm="syz.0.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  278.330986][   T36] audit: type=1400 audit(1787910909.985:488): avc:  denied  { write } for  pid=6093 comm="syz.0.2014" path="socket:[83962]" dev="sockfs" ino=83962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  278.472734][ T6102] netlink: 'syz.0.2018': attribute type 10 has an invalid length.
[  278.480670][   T36] audit: type=1400 audit(1787910910.114:489): avc:  denied  { read } for  pid=6103 comm="syz.4.2017" name="sda1" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  278.507540][   T36] audit: type=1400 audit(1787910910.114:490): avc:  denied  { open } for  pid=6103 comm="syz.4.2017" path="/dev/sda1" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  278.536323][   T36] audit: type=1400 audit(1787910910.114:491): avc:  denied  { ioctl } for  pid=6103 comm="syz.4.2017" path="/dev/sda1" dev="devtmpfs" ino=99 ioctlcmd=0x2272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  278.576898][    T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  278.588082][    T9] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  278.652795][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'.
[  278.825714][  T310] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  278.989215][  T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  278.999387][  T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.009675][  T310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  279.018787][  T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.026792][  T310] usb 1-1: Product: syz
[  279.030952][  T310] usb 1-1: Manufacturer: syz
[  279.035565][  T310] usb 1-1: SerialNumber: syz
[  279.074830][    T9] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  279.238513][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  279.249460][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  279.260336][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  279.268409][  T310] usb 1-1: 0:2 : does not exist
[  279.276476][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  279.280854][  T310] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  279.287166][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.305576][    T9] usb 5-1: config 0 descriptor??
[  279.310698][  T310] usb 1-1: USB disconnect, device number 2
[  279.316685][ T6122] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  279.326005][ T6122] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  279.769499][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.778066][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.788571][    T9] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor
[  279.800767][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0028/input/input41
[  279.879501][    T9] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  279.921460][   T36] audit: type=1400 audit(1787910911.462:492): avc:  denied  { mounton } for  pid=6138 comm="syz.0.2032" path="/468/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  280.007139][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.015655][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.201354][  T310] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  280.364886][  T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  280.375720][  T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  280.388688][  T310] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  280.398085][  T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.406833][  T310] usb 1-1: config 0 descriptor??
[  280.412067][ T6145] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  280.628349][  T479] usb 3-1: USB disconnect, device number 115
[  280.639780][   T45] usb 5-1: USB disconnect, device number 59
[  280.730548][   T36] audit: type=1400 audit(1787910912.201:493): avc:  denied  { setattr } for  pid=6152 comm="syz.4.2036" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  280.731030][ T6156] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2036'.
[  280.857371][  T310] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor
[  280.866755][  T310] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0029/input/input42
[  280.940506][  T310] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  281.075664][  T425] usb 1-1: USB disconnect, device number 3
[  281.389954][ T6173] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  281.663829][  T425] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  281.827179][  T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.838282][  T425] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  281.847306][  T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.856058][  T425] usb 3-1: config 0 descriptor??
[  281.912796][   T45] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  282.053602][   T45] usb 1-1: device descriptor read/64, error -71
[  282.080465][  T425] usbhid 3-1:0.0: can't add hid device: -71
[  282.086485][  T425] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  282.094987][  T425] usb 3-1: USB disconnect, device number 116
[  282.313600][   T45] usb 1-1: device descriptor read/64, error -71
[  282.448317][ T6188] kvm: kvm [6187]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  282.457176][ T6188] kvm: kvm [6187]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  282.551904][  T425] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[  282.573532][   T45] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  282.714349][   T45] usb 1-1: device descriptor read/64, error -71
[  282.715439][  T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  282.731622][  T425] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  282.740670][  T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.749159][  T425] usb 3-1: config 0 descriptor??
[  282.974314][   T45] usb 1-1: device descriptor read/64, error -71
[  283.093587][   T45] usb usb1-port1: attempt power cycle
[  283.190056][  T425] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor
[  283.201809][  T425] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002A/input/input43
[  283.284006][  T425] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  283.421043][   T36] audit: type=1326 audit(1787910914.684:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6192 comm="syz.4.2052" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa99e159 code=0x7fc00000
[  283.462822][   T45] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  283.484475][   T45] usb 1-1: device descriptor read/8, error -71
[  283.540991][   T36] audit: type=1400 audit(1787910914.795:495): avc:  denied  { read } for  pid=6227 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  283.625294][   T45] usb 1-1: device descriptor read/8, error -71
Stopping sshd: stopped /usr/sbin/sshd (pid 201)
OK
[  283.754254][    T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd
Stopping crond: stopped /usr/sbin/crond (pid 194)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 148)
Stopping network: [  283.880699][   T36] audit: type=1400 audit(1787910915.109:496): avc:  denied  { unlink } for  pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1
[  283.905004][   T45] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  283.916682][    T9] usb 5-1: Using ep0 maxpacket: 8
[  283.923206][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.933898][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  283.940077][   T45] usb 1-1: device descriptor read/8, error -71
[  283.942852][   T36] audit: type=1400 audit(1787910915.164:497): avc:  denied  { read write } for  pid=6248 comm="ip" path="/dev/console" dev="rootfs" ino=102 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
[  283.973520][    T9] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[  283.982671][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.990763][    T9] usb 5-1: Product: syz
[  283.995137][    T9] usb 5-1: Manufacturer: syz
[  283.999801][    T9] usb 5-1: SerialNumber: syz
OK
Stopping iptables: [  284.029087][   T36] audit: type=1400 audit(1787910915.247:498): avc:  denied  { read write } for  pid=6252 comm="iptables" path="/dev/console" dev="rootfs" ino=102 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1
OK[  284.052813][   T36] audit: type=1400 audit(1787910915.247:499): avc:  denied  { search } for  pid=6252 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1

[  284.074938][   T36] audit: type=1400 audit(1787910915.247:500): avc:  denied  { write } for  pid=6252 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Stopping system [  284.096933][   T36] audit: type=1400 audit(1787910915.247:501): avc:  denied  { add_name } for  pid=6252 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
message bus: [  284.100102][   T45] usb 1-1: device descriptor read/8, error -71
[  284.119835][   T36] audit: type=1400 audit(1787910915.247:502): avc:  denied  { create } for  pid=6252 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  284.148449][   T36] audit: type=1400 audit(1787910915.247:503): avc:  denied  { read open } for  pid=6252 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=10176 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  284.230190][    T9] usb 5-1: 0:1 : does not exist
[  284.241792][   T45] usb usb1-port1: unable to enumerate USB device
done
[  284.295867][    T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  284.308408][    T9] usb 5-1: USB disconnect, device number 60
[  284.321838][  T444] udevd[444]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
Stopping klogd: OK
Stopping acpid: [  284.887733][  T310] usb 3-1: USB disconnect, device number 117
[  284.945455][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2081'.
[  285.018897][ T6312] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2084'.
[  285.097365][    T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  285.270681][    T9] usb 5-1: Using ep0 maxpacket: 8
[  285.276792][    T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.287732][    T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  285.300563][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  285.307223][   T65] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  285.314747][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  285.323776][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.324819][  T310] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  285.332987][    T9] usb 5-1: config 0 descriptor??
[  285.498133][  T310] usb 3-1: Using ep0 maxpacket: 32
[  285.499249][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  285.504437][  T310] usb 3-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  285.514158][   T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  285.527082][  T310] usb 3-1: config 0 interface 0 has no altsetting 0
[  285.539838][   T65] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  285.546504][  T310] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  285.564515][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.564571][  T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
OK
[  285.583915][  T310] usb 3-1: config 0 descriptor??
[  285.584204][   T65] usb 1-1: config 0 descriptor??
[  285.595695][ T6315] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
Stopping syslogd: stopped /sbin/syslogd (pid 92)
OK
[  285.632361][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  285.638348][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  285.647528][    T9] usb 5-1: USB disconnect, device number 61
[  285.815007][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.835421][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.844026][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.851945][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.052998][   T65] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor
[  286.063099][   T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002B/input/input44
[  286.089607][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.096660][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.103774][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.110963][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.118142][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.125387][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.132641][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.139904][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.147193][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.149847][   T65] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  286.154240][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.174291][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.181286][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.188560][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.195838][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.203100][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.211121][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.220949][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.228673][ T6364] tmpfs: Unknown parameter 'grpquota_inode_hardlimit'
[  286.228733][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.242790][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.249964][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.257139][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.264664][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.280576][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2103'.
[  286.282721][ T6370] tipc: Started in network mode
[  286.293914][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.294673][ T6370] tipc: Node identity , cluster identity 4711
[  286.305309][   T45] usb 1-1: USB disconnect, device number 8
[  286.307592][ T6370] tipc: Failed to obtain node identity
[  286.307608][ T6370] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  286.315452][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.347403][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.355639][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.363899][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.371629][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.379442][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.386960][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.394435][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.398631][ T6372] overlay: Unknown parameter '/'
[  286.403560][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.413767][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.418465][ T6372] incfs: Can't find or create .index dir in ./file0
[  286.423963][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.427440][ T6372] incfs: mount failed -30
[  286.434810][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.446508][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.453862][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.461027][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.474411][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.482511][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.489798][  T310] lenovo 0003:17EF:60A3.002C: unknown main item tag 0x0
[  286.498027][  T310] lenovo 0003:17EF:60A3.002C: hidraw0: USB HID v0.7a Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0
[  286.612972][ T6388] batadv_slave_1: entered promiscuous mode
[  286.975318][ T6397] ./dev/sda1: Can't lookup blockdev
[  287.560661][ T6385] batadv_slave_1: left promiscuous mode
[  287.837842][   T65] usb 5-1: new full-speed USB device number 62 using dummy_hcd
umount: can't remount debugfs read-only
umount: sysfs busy - remounted r[  287.967845][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
ead-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.0.250 closed by remote host.
[  288.020348][  T310] usb 3-1: USB disconnect, device number 118
Sent SIGTERM to all processes
[  288.207388][ T5827] bridge_slave_1: left allmulticast mode
[  288.213075][ T5827] bridge_slave_1: left promiscuous mode
[  288.247915][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.260862][ T5827] bridge_slave_0: left allmulticast mode
[  288.266527][ T5827] bridge_slave_0: left promiscuous mode
[  288.292839][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.373809][  T310] rust_binder: 3571: undelivered transaction 123, process died
[  288.414406][ T5827] veth1_macvtap: left promiscuous mode
[  288.455309][   T65] usb 5-1: device not accepting address 62, error -71
[  288.498588][  T310] rust_binder: 3544: undelivered TRANSACTION_ERROR: 29201
[  288.505770][  T310] rust_binder: 3544: undelivered TRANSACTION_ERROR: 29201
[  288.695337][ T5827] bridge_slave_1: left allmulticast mode
[  288.701006][ T5827] bridge_slave_1: left promiscuous mode
[  288.706644][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.714003][ T5827] bridge_slave_0: left allmulticast mode
[  288.719677][ T5827] bridge_slave_0: left promiscuous mode
[  288.725345][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.732863][ T5827] bridge_slave_1: left allmulticast mode
[  288.738525][ T5827] bridge_slave_1: left promiscuous mode
[  288.744188][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.751553][ T5827] bridge_slave_0: left allmulticast mode
[  288.757171][ T5827] bridge_slave_0: left promiscuous mode
[  288.762773][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.770321][ T5827] bridge_slave_1: left allmulticast mode
[  288.775937][ T5827] bridge_slave_1: left promiscuous mode
[  288.781593][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.789063][ T5827] bridge_slave_0: left allmulticast mode
[  288.794736][ T5827] bridge_slave_0: left promiscuous mode
[  288.800302][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.021355][ T5827] tipc: Disabling bearer <udp:syz2>
[  289.026739][ T5827] tipc: Left network mode
[  289.031347][ T5827] tipc: Disabling bearer <udp:syz2>
[  289.036610][ T5827] tipc: Left network mode
[  289.042712][ T5827] veth1_macvtap: left promiscuous mode
[  289.048210][ T5827] veth0_vlan: left promiscuous mode
[  289.053710][ T5827] veth1_macvtap: left promiscuous mode
[  289.059185][ T5827] veth0_vlan: left promiscuous mode
[  289.064898][ T5827] veth1_macvtap: left promiscuous mode
[  289.070387][ T5827] veth0_vlan: left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[  289.573294][ T5827] ------------[ cut here ]------------
[  289.578789][ T5827] WARNING: CPU: 0 PID: 5827 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140
[  289.588959][ T5827] Modules linked in:
[  289.592868][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u8:61 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  289.604701][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.614780][ T5827] Workqueue: netns cleanup_net
[  289.619618][ T5827] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140
[  289.625605][ T5827] Code: e8 61 e3 d5 fc 4b 83 3c 3e 00 75 19 e8 e5 08 7d fc 49 81 ff f8 07 00 00 74 1b e8 d7 08 7d fc 49 83 c7 08 eb c9 e8 cc 08 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
[  289.645234][ T5827] RSP: 0018:ffffc90004627b90 EFLAGS: 00010293
[  289.651316][ T5827] RAX: ffffffff850a6874 RBX: ffff88812057a380 RCX: ffff88813137a600
[  289.659312][ T5827] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811bc28000
[  289.667266][ T5827] RBP: ffffc90004627bb0 R08: 0000000000000003 R09: 0000000000000004
[  289.675430][ T5827] R10: dffffc0000000000 R11: fffff520008c4f04 R12: dffffc0000000000
[  289.683418][ T5827] R13: dffffc0000000000 R14: ffff88811bc28000 R15: 0000000000000000
[  289.691404][ T5827] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  289.700328][ T5827] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  289.706924][ T5827] CR2: 00007fcefabef2f8 CR3: 00000000074aa000 CR4: 00000000003526b0
[  289.714907][ T5827] Call Trace:
[  289.718173][ T5827]  <TASK>
[  289.721090][ T5827]  cleanup_net+0x6ba/0xc90
[  289.725526][ T5827]  ? __cfi_cleanup_net+0x10/0x10
[  289.730456][ T5827]  ? kick_pool+0xb9/0x540
[  289.734791][ T5827]  process_scheduled_works+0x7f4/0x1060
[  289.740325][ T5827]  worker_thread+0xc99/0x13f0
[  289.745003][ T5827]  kthread+0x2c4/0x360
[  289.749057][ T5827]  ? __cfi_worker_thread+0x10/0x10
[  289.754142][ T5827]  ? __cfi_kthread+0x10/0x10
[  289.758830][ T5827]  ret_from_fork+0x64/0xa0
[  289.763241][ T5827]  ? __cfi_kthread+0x10/0x10
[  289.767843][ T5827]  ret_from_fork_asm+0x1a/0x30
[  289.772596][ T5827]  </TASK>
[  289.775592][ T5827] ---[ end trace 0000000000000000 ]---
[  289.781442][ T5827] ------------[ cut here ]------------
[  289.786892][ T5827] WARNING: CPU: 1 PID: 5827 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140
[  289.797102][ T5827] Modules linked in:
[  289.801005][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/u8:61 Tainted: G        W          syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  289.814306][ T5827] Tainted: [W]=WARN
[  289.818085][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.828136][ T5827] Workqueue: netns cleanup_net
[  289.832924][ T5827] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140
[  289.838990][ T5827] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 08 7d fc 49 81 ff f8 07 00 00 74 1b e8 82 08 7d fc 49 83 c7 08 eb c5 e8 77 08 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 08 7d fc 5b 41 5c 41 5e 41
[  289.858614][ T5827] RSP: 0018:ffffc90004627b90 EFLAGS: 00010293
[  289.864690][ T5827] RAX: ffffffff850a68c9 RBX: ffff88811bc28800 RCX: ffff88813137a600
[  289.872669][ T5827] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811bc28808
[  289.880642][ T5827] RBP: ffffc90004627bb0 R08: 0000000000000003 R09: 0000000000000004
[  289.888631][ T5827] R10: dffffc0000000000 R11: fffff520008c4f04 R12: dffffc0000000000
[  289.896626][ T5827] R13: dffffc0000000000 R14: ffff88811bc28000 R15: 0000000000000008
[  289.904580][ T5827] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  289.913509][ T5827] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  289.920108][ T5827] CR2: 00007fdb897f84c0 CR3: 000000010b3a0000 CR4: 00000000003526b0
[  289.928076][ T5827] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006
[  289.936050][ T5827] DR3: 00000000000071a5 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  289.944038][ T5827] Call Trace:
[  289.947305][ T5827]  <TASK>
[  289.950237][ T5827]  cleanup_net+0x6ba/0xc90
[  289.954645][ T5827]  ? __cfi_cleanup_net+0x10/0x10
[  289.959557][ T5827]  ? kick_pool+0xb9/0x540
[  289.963898][ T5827]  process_scheduled_works+0x7f4/0x1060
[  289.969434][ T5827]  worker_thread+0xc99/0x13f0
[  289.974113][ T5827]  kthread+0x2c4/0x360
[  289.978173][ T5827]  ? __cfi_worker_thread+0x10/0x10
[  289.983289][ T5827]  ? __cfi_kthread+0x10/0x10
[  289.987872][ T5827]  ret_from_fork+0x64/0xa0
[  289.992369][ T5827]  ? __cfi_kthread+0x10/0x10
[  289.996958][ T5827]  ret_from_fork_asm+0x1a/0x30
[  290.001722][ T5827]  </TASK>
[  290.004746][ T5827] ---[ end trace 0000000000000000 ]---
[  290.016221][ T5827] ------------[ cut here ]------------
[  290.021697][ T5827] WARNING: CPU: 0 PID: 5827 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310
[  290.031363][ T5827] Modules linked in:
[  290.035263][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u8:61 Tainted: G        W          syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666
[  290.048550][ T5827] Tainted: [W]=WARN
[  290.052337][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.062423][ T5827] Workqueue: netns cleanup_net
[  290.067272][ T5827] RIP: 0010:xfrm_state_fini+0x2be/0x310
[  290.072830][ T5827] Code: 3c 20 00 74 08 48 89 df e8 7f a1 f0 fc 48 8b 3b e8 97 92 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 97 b7 00 cc e8 f2 c6 97 fc <0f> 0b e9 b0 fd ff ff e8 e6 c6 97 fc 0f 0b e9 18 fe ff ff e8 da c6
[  290.092543][ T5827] RSP: 0018:ffffc90004627b70 EFLAGS: 00010293
[  290.098601][ T5827] RAX: ffffffff84efaa4e RBX: ffff88812057a380 RCX: ffff88813137a600
[  290.106577][ T5827] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88813137a600
[  290.114569][ T5827] RBP: ffffc90004627b98 R08: ffffffff87d433c7 R09: 1ffffffff0fa8678
[  290.122537][ T5827] R10: dffffc0000000000 R11: fffffbfff0fa8679 R12: 1ffffffff0fa83cc
[  290.130519][ T5827] R13: dffffc0000000000 R14: ffff88812057af80 R15: dffffc0000000000
[  290.138524][ T5827] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  290.147491][ T5827] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.154094][ T5827] CR2: 00007fcefabef2f8 CR3: 00000000074aa000 CR4: 00000000003526b0
[  290.162104][ T5827] Call Trace:
[  290.165381][ T5827]  <TASK>
[  290.168312][ T5827]  xfrm_net_exit+0x31/0x80
[  290.172791][ T5827]  cleanup_net+0x6ba/0xc90
[  290.177193][ T5827]  ? __cfi_cleanup_net+0x10/0x10
[  290.182146][ T5827]  ? kick_pool+0xb9/0x540
[  290.186490][ T5827]  process_scheduled_works+0x7f4/0x1060
[  290.192042][ T5827]  worker_thread+0xc99/0x13f0
[  290.196720][ T5827]  kthread+0x2c4/0x360
[  290.200818][ T5827]  ? __cfi_worker_thread+0x10/0x10
[  290.205927][ T5827]  ? __cfi_kthread+0x10/0x10
[  290.210522][ T5827]  ret_from_fork+0x64/0xa0
[  290.214949][ T5827]  ? __cfi_kthread+0x10/0x10
[  290.219522][ T5827]  ret_from_fork_asm+0x1a/0x30
[  290.224296][ T5827]  </TASK>
[  290.227309][ T5827] ---[ end trace 0000000000000000 ]---
[  290.533568][ T6426] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  290.540396][ T6426] ACPI: PM: Preparing to enter system sleep state S5
[  290.547567][ T6426] kvm: exiting hardware virtualization
[  290.553056][ T6426] reboot: Power down
serialport: VM disconnected.