last executing test programs:

4.79387261s ago: executing program 1 (id=830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x800007}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4059, 0xfdb}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000000ac0)=""/279, 0x117}, {&(0x7f0000000780)=""/173, 0xad}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000000)=""/33, 0x21}], 0xa}, 0x120c}], 0x3, 0x0, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000b4a000/0x400000)=nil)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ioctl$TCSETAF(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x5, "0241cd032ae9da23"})
rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27})
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
exit(0x1ff)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f00000001c0)=0x1)
r7 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x79}}], 0x20})
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xa, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r11 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r10)
r12 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r11)
keyctl$invalidate(0x15, r12)
close(r9)
dup2(r8, r9)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4.79315563s ago: executing program 3 (id=831):
openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x20, 0x12, 0x4, "69a2329d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.929889083s ago: executing program 1 (id=836):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080)) (async)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080))
open(&(0x7f0000000040)='./file0\x00', 0x181a01, 0x81) (async)
open(&(0x7f0000000040)='./file0\x00', 0x181a01, 0x81)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18)

3.865497634s ago: executing program 1 (id=837):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x3, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x29, {0x29, 0x21, "7d611870cced50a6dc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5dfce714d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)
syz_usb_connect(0x0, 0x2fc, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xc2, 0x17, 0x46, 0x40, 0x2020, 0x2033, 0x2241, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ea, 0x2, 0x5, 0x4, 0x0, 0x40, "", [{{0x9, 0x4, 0x4, 0xa, 0xa, 0x55, 0xfd, 0x92, 0x40, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x3, 0x10, "a79a21"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xac1, 0x2, 0x3}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x11, 0x1, 0x2, 0x9a, "f6496214e323932a"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x101, 0x7, 0x5, "19527b"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x80, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x117}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x5, 0x3, 0x6, [@generic={0xb3, 0x5, "c263483a6a7a39ca366c31251e13e9b131b11f0f4d66a6211ee2b3b96890de0c06e120fedabf819a2bd65c065ee674e593a1ce6b3c360bbac40d9fc86b57492a13c36bc8507065a779bbac437877a8966bc78396da121558a03798daec3e36ff67317705e087524a6dfbaa9b018310ba6cc1ff238b6b708adbd351a2fdbdc5a1b2537f2ccec442a409ead9c4c9dfd9800d8d7a79a64d5f883c52e839b63586ede9b49d08d8ad5dc8f5892a4c7e18e35adf"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x34db}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x3, 0x3}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x24, 0x2, 0x5}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0xd, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x41eb}, @generic={0x37, 0x8, "4a5861b3851c9fdf610d33e84ac99c2e1ca8e9afcb4383856701df15ba2e0ae016d21b445e2f96fc07e982a2d2ec025ccb267f24cf"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0x7, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x76, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x28b2}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x0, 0x2, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8, 0xd6af061e6b83882f, 0x400, 0x0, 0x8, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x5}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x2, 0x9, 0x2, [@generic={0xec, 0x22, "e70ab4a95f439db52786a76df0e6f1e40e1527c4a07f4ce7b3cce207560d5f29b0e7a4987a17ec4145881bad751b18b349cb2a64285025a944aa4d3e4c6a7d427fae399ba2b22052a87dea0832dd37ef80aac48054aab61658e4cb2530a32cc02d0a19a5fd1d8210a9b751287e93c0eefcb32b7a2378dec2052ebe394f9bdceebefd5043cce451314ba19f06dff40b90d87420cd3c0e23d6a81fbc3bdb1d8b00030ec3cd019d645f6e5185c3cd1798e81878ffb1fdae1c865900afccb9434d61e108c6dfb697c67b4a5780c7f0119bfd6f64ccd03505b606eb086e4218bf55f2163d73ea31dc01ce9661"}]}}]}}, {{0x9, 0x4, 0x3, 0x4, 0x0, 0xd9, 0xd8, 0x49, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "dd"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0x1e}, [@acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x67}]}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x1d}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x1, 0x4, "d895"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0xf2, "b9b12d51a1"}]}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0xfb, 0x0, 0x0, 0xff, 0xc}, 0xd1, &(0x7f0000000580)={0x5, 0xf, 0xd1, 0x6, [@generic={0x93, 0x10, 0x4, "ec8931501864ca2000cf30af404f4ea2ccd7a408303059b4455d511355d6cd107a199e99e642b310b50c28d513855b8a552b39f0cc95b3a84a223fedc325dac97887dc8545cd3786955db8ee62b16b401703aff0b90cd3f196ba7e1040b8e149b05a2c6714a53799289422bb0d47979efafd5cf3794c29e3109a326317cd279a3e0a10cb0d8d02609e06a4201b962ebd"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "342c7e99e480415108a96d6b964eed80"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x9, 0x0, 0x8, [0xd4ea4e12034de05c]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x4, 0x9ae}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1c, 0xb9, 0x7f, 0x1}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3}}, {0x2a, &(0x7f00000006c0)=@string={0x2a, 0x3, "375c03a91267140d5795b6b60def408b2784491bfe4aa99cdeb550ff940eb59c7f37c441c7d06934"}}, {0xd5, &(0x7f0000000700)=@string={0xd5, 0x3, "9935a707332ca030211c79afa2a7fdf46558c0c34e82a7684075b3ce3f40218484643f189bbefb4fb5b3afbcd6029a0b1b9373fe074f8c0d72177efa9ab991264c08905fec267598d84bb9b993650a1fcd5de0ed4938ff8850f7fbb48e29bebffa64a8620efd4c49afd98b1a4945998822ff1cfb1cdf5e3f2162741372b03b8c2778283ebf85dc1bc9587f076bac78fe7a6c600fb812a73fb59b312571f8efe938a3068d510bf098c0c66f3f42973ef9a19d004d471935b93ea772fb1fa8c5666c7da5acddeb2b1a8ea872d5e615be3288b7d6"}}]})

3.160833724s ago: executing program 3 (id=843):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000940)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x1, &(0x7f0000000840)=[{0x3, 0xbf07, 0x0, &(0x7f00000005c0)="cba596b77f7f091bd258bf45ed9a58e86a4738d0ff4fc3b592a56c5b91b2e140f11a9d666be71f8069ed172cdddf82", 0x2f, 0x22}]})
syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904"], 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff0300000000000000000000000000000080ffffffffffffff000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)

2.212501748s ago: executing program 1 (id=848):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x60, 0xb1, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x3, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x28, 0x10, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "478fa0273d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xee7, 0x1, 0x821, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x20}, [@acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2, 0x3, 0xe3, 0x20, 0x2}, 0x5a, &(0x7f00000000c0)={0x5, 0xf, 0x5a, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "a74cd623b4ffb1f1a277e76b05c45929"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x2, 0x689}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xf000, 0x2, [0xff3f60, 0xffc030, 0x30]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x84, 0x9, 0x4, 0xb87d, 0x38}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "1765d7a897586d041354951ef7a6f68b"}]}, 0x8, [{0x4a, &(0x7f0000000140)=@string={0x4a, 0x3, "fa996d14f5dac30c55ede3a0b69e00b275bee893d5f51d676d7c7c5015cbeda6e21a0004f0bd1b987deaf226c65972aba114d7669ae1b2af9ccdca22e30476b692a5c969e491cf3a"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc07}}, {0x21, &(0x7f0000000240)=@string={0x21, 0x3, "00a8a061b87dd356fd526e84e6ba9dde2e6bbe3d990d81802e588a7453e2fd"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3409}}, {0x8f, &(0x7f0000000340)=@string={0x8f, 0x3, "95c2e71d8bfdd711687ba58706c86890839e87563209f0a1f3c0934d9d4005fd8a562899da7ba9cfb751ba90b5f05c357e320f1a0412bc019d17df65596134f4428a2f080f0e5834eca725ef6d92ae3e0eb942871778ed94a36aecbc55713ea8deb036a6f516e96e200b1ecb997f847729ae1233e3d0df5121bd15648dc8d272ca5d57320560ff3e1ae24f5483"}}, {0xff, &(0x7f0000000400)=@string={0xff, 0x3, "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"}}]})
mkdir(&(0x7f0000000100)='./file0\x00', 0x71)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x7}}, 0x24, 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x400, 0x1)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x2, 0x4, 0xbd, 0x8, 0x5, 0x4, 0x6, 0x1, 0x4, [0x9, 0x9, 0xff, 0x5, 0x0, 0x7fff, 0x81, 0x401]}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000600)={0x0, 0xe, 0x1f, {0x1f, 0x4e6db44defbb05c3, "e8d264ded32cd3bbe95bcf848ab4a82e323b8b47831ea027e6e9630558"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x60, 0xb1, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_connect$cdc_ncm(0x3, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x28, 0x10, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "478fa0273d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xee7, 0x1, 0x821, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x20}, [@acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2, 0x3, 0xe3, 0x20, 0x2}, 0x5a, &(0x7f00000000c0)={0x5, 0xf, 0x5a, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "a74cd623b4ffb1f1a277e76b05c45929"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x2, 0x689}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xf000, 0x2, [0xff3f60, 0xffc030, 0x30]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x84, 0x9, 0x4, 0xb87d, 0x38}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "1765d7a897586d041354951ef7a6f68b"}]}, 0x8, [{0x4a, &(0x7f0000000140)=@string={0x4a, 0x3, "fa996d14f5dac30c55ede3a0b69e00b275bee893d5f51d676d7c7c5015cbeda6e21a0004f0bd1b987deaf226c65972aba114d7669ae1b2af9ccdca22e30476b692a5c969e491cf3a"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc07}}, {0x21, &(0x7f0000000240)=@string={0x21, 0x3, "00a8a061b87dd356fd526e84e6ba9dde2e6bbe3d990d81802e588a7453e2fd"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3409}}, {0x8f, &(0x7f0000000340)=@string={0x8f, 0x3, "95c2e71d8bfdd711687ba58706c86890839e87563209f0a1f3c0934d9d4005fd8a562899da7ba9cfb751ba90b5f05c357e320f1a0412bc019d17df65596134f4428a2f080f0e5834eca725ef6d92ae3e0eb942871778ed94a36aecbc55713ea8deb036a6f516e96e200b1ecb997f847729ae1233e3d0df5121bd15648dc8d272ca5d57320560ff3e1ae24f5483"}}, {0xff, &(0x7f0000000400)=@string={0xff, 0x3, "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"}}]}) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x71) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0) (async)
chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) (async)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x7}}, 0x24, 0x1) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x400, 0x1) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x2, 0x4, 0xbd, 0x8, 0x5, 0x4, 0x6, 0x1, 0x4, [0x9, 0x9, 0xff, 0x5, 0x0, 0x7fff, 0x81, 0x401]}}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000600)={0x0, 0xe, 0x1f, {0x1f, 0x4e6db44defbb05c3, "e8d264ded32cd3bbe95bcf848ab4a82e323b8b47831ea027e6e9630558"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

1.980453902s ago: executing program 2 (id=849):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x2000080)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x1c, r6, 0x901, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r9=>0x0})
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r10, 0xc1443000)
r11 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000031c0)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf250800000001000000ed"], 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', <r13=>0x0})
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r14)
ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r16=>0x0})
r17 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$USBDEVFS_SUBMITURB(r17, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0})
ioctl$USBDEVFS_REAPURB(r17, 0x4008550c, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r14, &(0x7f00000003c0)={0x0, 0xfffffffffffffdcf, &(0x7f0000000100)={&(0x7f0000000300)={0x30, r15, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x0, 0x2, r16}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2080001}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x4, 0x70bd26, 0x4, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x5b8355c3343da941}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x68}, 0x1, 0x0, 0x0, 0x20080011}, 0x20040000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r2, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000006)

1.897330173s ago: executing program 3 (id=850):
arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) (async)
arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000040)) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800401}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x3, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4881)
arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000001c0)) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) (rerun: 64)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r4) (async)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r6=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan3\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x20048000) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1c4, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfaf0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x143e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd776}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e9049d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa82e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x285c0d44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x461e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e71f207}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x691d8bb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62c1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3de59de3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61bec614}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ddc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2711a563}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x605fbb24}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45c84370}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb99c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e2bb2f1}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d6b689f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x101f13b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f74f37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bbf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13818254}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56521424}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecad}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18c7382a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4348}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eb42e21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb433}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x625098f4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61fdffd8}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4}, 0x64000800)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc084) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) (async, rerun: 32)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000a40)={0x80000000, <r11=>0xffffffffffffffff, 'id0\x00'}) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000ac0)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x18c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e41e48e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce00f08}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13161fb2}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a3a81c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x586ddce8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17c85b74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f5aea73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f05b36f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2211f439}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ab37375}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x629c976e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24b2a077}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x763802a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73820987}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40533656}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16065f73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43a50dac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c317074}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbfa7a71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ced6179}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40050}, 0x4c004) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r11)
sendmsg$TIPC_CMD_GET_LINKS(r11, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r12, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x8004) (async)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f0000001140)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f00)={0x1dc, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x192f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e4f014f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a09c85b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x592eaeb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7dc4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6495}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16773977}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ff0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2087ade8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x305a45ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68cf1215}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3aef4459}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4865229d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6691e86c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4717}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51922b64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf0354a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11a6c783}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34f3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a8b7831}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async, rerun: 64)
sendmsg$DEVLINK_CMD_GET(r11, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) (rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040104}, 0x805)

1.895803043s ago: executing program 2 (id=851):
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
capset(0x0, &(0x7f0000000080)={0x0, 0x2})
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0)
dup(r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = gettid()
timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002)
readv(r7, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000140)=""/121, 0x79}], 0x2)
read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x2020)
ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000380)={0x2, 0xb})
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000003c0)={0xc, 0x4, 0x1})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000000400)=ANY=[], 0x1a0)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000000), 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r9)
sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000043fe146ed797e8600f58aca929a84fdbfd414253737bd5e6676ae144c0f8006a1f4cd8d1eecbe6897f5309d5cbcfdeea0266d8a5bba9202cb3488b50d0", @ANYRES16=r10, @ANYBLOB="040128bd7000fbdbdf2509000000040006800800030002000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014)

1.879258193s ago: executing program 3 (id=852):
syz_open_procfs(0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_gettime(0x2, &(0x7f0000000000))
ptrace(0x10, r0)
ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140))
socket(0x26, 0x0, 0xffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0)
ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000003c0))
syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x7a, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfc, 0x2, "715eb9483414"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x1, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x1, 0x81, {0x7, 0x25, 0x1, 0xe, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xc, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})

1.478595999s ago: executing program 0 (id=857):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x800007}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4059, 0xfdb}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000000ac0)=""/279, 0x117}, {&(0x7f0000000780)=""/173, 0xad}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000000)=""/33, 0x21}], 0xa}, 0x120c}], 0x3, 0x0, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000b4a000/0x400000)=nil)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ioctl$TCSETAF(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x5, "0241cd032ae9da23"})
rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27})
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
exit(0x1ff)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f00000001c0)=0x1)
r7 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x79}}], 0x20})
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xa, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r11 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r10)
r12 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r11)
keyctl$invalidate(0x15, r12)
close(r9)
dup2(r8, r9)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

992.048956ms ago: executing program 1 (id=858):
socket(0x80000000000000a, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
setreuid(0x0, 0xee01)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') (async)
r1 = socket(0x11, 0x3, 0x1)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000000}, 0x800)
accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80800) (async)
fchdir(r0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x219)

991.522576ms ago: executing program 1 (id=859):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000940)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x1, &(0x7f0000000840)=[{0x3, 0xbf07, 0x0, &(0x7f00000005c0)="cba596b77f7f091bd258bf45ed9a58e86a4738d0ff4fc3b592a56c5b91b2e140f11a9d666be71f8069ed172cdddf82", 0x2f, 0x22}]})
syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904"], 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff0300000000000000000000000000000000ff800000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)

973.557456ms ago: executing program 2 (id=860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f84fcd3, 0x33}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xaa}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="89e5ee0c7cdad9fcb47380c988ca", 0xe}, {&(0x7f0000000100)="f4246308553ce0578264d9bd783a3ec8a929c5dc8494e6f8bce8e7d55d60b301f5", 0x21}], 0x2)

874.205748ms ago: executing program 2 (id=861):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xd, 0x7, 0x8, 0x405, 0x3, 0x6, 0xfffffff9, 0x1fe, 0x40, 0x88, 0xd2c, 0x5, 0x38, 0x2, 0x78, 0x107, 0x4}, [{0x5, 0x0, 0x6, 0x9, 0x8, 0x4, 0x269, 0x8}, {0x1, 0x8, 0x4, 0xfffffffffffffff8, 0xa, 0x5, 0x1, 0x5}]}, 0xb0)
close(r0) (async)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0xa, 0xfd}]}) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

673.290611ms ago: executing program 2 (id=862):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x200008d0}, 0x4040)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1203, 0x104)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
socket(0xf, 0x1, 0xa60c)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x90d, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb, 0x81, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="40242800000028231ba57fb04d4f1e07d695f268e872852790b2974b1fc634f26cda14d95e6688adb139e26a4779"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c001000", @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2501000000000000000141000000200017000000170000000669623a76657468305f6d61637674617000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

665.31369ms ago: executing program 3 (id=863):
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000000c0)=@filename='./file0\x00', r0, &(0x7f0000000100))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000340)=0xe8)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000200)=@filename='./file0\x00', r3, &(0x7f0000000380)='./file0\x00')
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000640)={0x3, 0x0, [{0x30000, 0xdf, &(0x7f0000000400)=""/223}, {0x25000, 0xce, &(0x7f0000000500)=""/206}, {0x5e000, 0x10, &(0x7f0000000600)=""/16}]})
readahead(r4, 0x6, 0x8)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_SREGS(r6, 0x8138ae83, &(0x7f00000006c0))
fsetxattr$security_evm(r6, &(0x7f0000000800), &(0x7f0000000840)=@sha1={0x1, "9b37c3059a528b71b68f148445728c61e45945aa"}, 0x15, 0x1)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000880), &(0x7f00000008c0), 0x2, 0x3)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000900)=0x1)
r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r7)
ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000009c0)=0x1ffd)
ioctl$FIOCLEX(r7, 0x5451)
write$binfmt_aout(r7, &(0x7f0000000a00)={{0x10b, 0x2b, 0x9, 0x399, 0x1a4, 0x5, 0x24d, 0x1}, "dde7205db0d8a0ae95f5a4e818e2e516d8fc43a86182e6ccd1f1677a78758facbeac52477c421e85300108293f822b34882edad3eade8f3388412ac4e500b11229ca4dff13780af8614567d6f537c52e06685f4c54b305888d6e1fc3077681e25289db5e236c4be83fce0dfe68dca1552ab6741e6ab7a44197aab75c96077cc0081ea026eb6c0ebbac3db62e6bf634978b43b8f23b2e926bb568f23aaa252fed68bb5abecc010b93b5e55a92db4150fdcd479935aa", ['\x00']}, 0x1d5)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c00), 0x44000, 0x0)
r9 = accept4$nfc_llcp(r7, &(0x7f0000000c40), &(0x7f0000000cc0)=0x60, 0x80800)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000d00), 0x802, 0x0)
ppoll(&(0x7f0000000d40)=[{r8, 0x28}, {r7, 0x1020}, {r7}, {r9, 0x72}, {r10, 0x40}, {r4, 0x2012}, {r4, 0x8040}, {r7, 0x4601}], 0x8, &(0x7f0000000d80)={0x77359400}, &(0x7f0000000dc0)={[0x69]}, 0x8)
r11 = openat(r7, &(0x7f0000000e00)='./file0\x00', 0x24000, 0x90)
r12 = dup2(r11, r4)
recvfrom$inet_nvme(r12, &(0x7f0000000e40)=""/70, 0x46, 0x142, &(0x7f0000000ec0)=@generic={0x21, "ce8150ecbbb4b2f55171bafcb37b803878536bd829c922d71fd447b4f79c9c981c2ab3d3d8122d7224dfc519f07733b72ba2feeeaf6f4b781be7c3d3632490624a70860f9de544bfdd06d66349eb6b4cb983655e2d1189b083d572453697c649132c0a5f49b5198dfacf0e9370f7988e24c1cdcfa2b4bd7711e99b0bf410"}, 0x80)
tkill(r1, 0x34)
eventfd(0x200)
write$binfmt_aout(r11, &(0x7f0000000f40)={{0x10b, 0x9, 0x4b, 0x3b0, 0x107, 0x7fff, 0xa2, 0x200}, "8a415941b21572b127826216aecb57bffe97ee82e6402e995bcf9f8026490babb20cb1332ec70212394227ea461eaaba63f5a6d8ab6da034ad2aa52bd5b68d052fd98f38ed996564c3e97ec5cab6f4c11839b95a357a255f30fb0f9a9df196e5a2731e2a61cd4baf41c3d12e7b3fd3d8cf64ecebe3e076f20d07eecbc81457eb7b4f31c0d4a4b427d8ff12c923504bd49eb231f5e908e462b1bd61df74c9d1d80ba13a2f428e064a991b3cad967bf65bf0ba10aaaae95ce3e20bda582e521c14c9b564829c46d0fa4d66566c0869065ea9e67ae0f4ec6233531d4ea71fdec4d77a39e58fb0b01e35fc50361171908853528ced22", ['\x00', '\x00']}, 0x314)

637.112301ms ago: executing program 3 (id=864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc71796c, 0x49}}}}, [@NL80211_ATTR_TESTDATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) (async)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x48c, 0x2b}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc6e}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa73}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x4e20, 0xa9, @remote, 0x1}, {0xa, 0x4e20, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}}, 0xffffffffffffffff, {[0x5, 0x3, 0x2, 0x8, 0x6, 0xffffffff, 0x7fff, 0x7]}}, 0x5c)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x11810}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x662}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x200c000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x37}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x50) (async)
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf0, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc4db}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}]}, 0xf0}}, 0x40)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000940)={{0xa, 0x4e23, 0x4, @local, 0x7}, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000}, 0x0, {[0x9, 0x4ea, 0x300, 0x8, 0x22b, 0x0, 0x0, 0x9a]}}, 0x5c) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040041}, 0x1) (async)
recvmsg(r0, &(0x7f0000000c40)={&(0x7f0000000b40)=@nfc, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)=""/15, 0xf}, 0x2000)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9f34}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000005}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x802902, 0x0)
fcntl$setpipe(r8, 0x407, 0x6)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), r5) (async)
r9 = socket(0xa, 0x6, 0x6)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x8000) (async)
sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf, 0x52}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x44)
r10 = getuid() (async)
statx(r8, &(0x7f0000001180)='./file0\x00', 0x4000, 0x8, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
setreuid(r10, r11)

585.687642ms ago: executing program 0 (id=865):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x1400037e)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r4 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x6, 0x30, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}})
prctl$PR_GET_NAME(0x35, &(0x7f0000000000)=""/4096)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[], 0x28)
prctl$PR_GET_NAME(0x10, &(0x7f0000001000)=""/50)

585.203352ms ago: executing program 0 (id=866):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000008961b09000000000000010902240001000002020300020009210c00fc0122280009059303ff0000000000000000009bb6b8ad0394a02b5d7df7089a1772d09c3401a3f5d257fef0a9822b7a35f6392eaec3045e546149c9e3d4a6a010e1115507ae46c37224b9356fbd2d8060203f6f206c73d4dcfd3253393bd4df486a2a2e45bf8ddf492b185464dca385fb0b98f1e33974822246"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x12000021)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1, 0x88}}}}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x9004)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
futex(&(0x7f0000000040), 0x1, 0x1, 0x0, 0x0, 0x1)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40242800000028231ba57fb04d4f1ec300000068e872"], 0x0, 0x0, 0x0, 0x0}, 0x0)

84.014689ms ago: executing program 0 (id=867):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB="56e7735adf9e881b4bc89a675a60bd5f760823d7953ef75c0b3e85b4d9db2d96d9566e873b4957cb3fa9abab67c01f8d20ada1cccf06380da2733ca1ee3ae6261d6e0f321502126017c3d5e44cad75835ec9c0a92be60f0c46297ef8c34e4e2ec8224f22dc4e15cb822586ee93cecf74febf22d8ee35e003005659634a7ba781e74b0e64d040b855158a068e7452d96206492601a9cc1b6e9712521e70ccb9cd50382cd5f69a37bf93f528137008ca68f2185dfcae453eea7cfbc7f5521f3bb1168abf211c6c0e9e0211f6fe88a21dc5c6d75b34520db795c8bc433f", @ANYRES64=r0, @ANYBLOB="080001"], 0x34}], 0x1}, 0x0)

46.52186ms ago: executing program 2 (id=868):
mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') (async)
mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000100001000007000000000000"], 0x10}], 0x1, 0x0, 0x0, 0xb305e06d8ab482f7}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00))
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00')
preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000010ffffffffffffaaaaaaaaaabb86dd6917007e00003bfffe5b00000000000000000000000000aaff01"], 0x3a)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xa9b5721f091613fd}) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xa9b5721f091613fd})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xa3, 0x2, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x40, 0xd}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r7=>0x0, 0x29, 0x4, 0xa3, 0x2, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x40, 0xd}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x7, 0x4, {{0x9, 0x4, 0x1, 0x8, 0x24, 0x64, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1c}, {[@cipso={0x86, 0xd, 0x1, [{0x6, 0x4, '+*'}, {0x7, 0x3, '\"'}]}]}}}}})
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7) (async)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x90, &(0x7f00000002c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffffffffffff89d4}}]}) (async)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x90, &(0x7f00000002c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffffffffffff89d4}}]})
sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000027c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002780)={&(0x7f0000000d40)={0x19f0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x62}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x178, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xa0, 0x2, "28d174f6beb3b0da7c4cda0825b5c6a8f5219743d8c5157d745ddf23feaa3baaa7795dde9b2753c7334d9cefa6a84859da8d9533dc6a34f5cac4163d18004f5fccf005e325129d93644d59e96dedc30707f2a286e502155197fb31fb9e772ad9a759afc47324ed66afe2c9462dbfc91bc724d7228cdc93a826ea88e025be8f8adec0a8024715ab3e5787e0d7b39595795b5abd7c2c0cd41bcdca0ce8"}, @NL80211_FTM_RESP_ATTR_LCI={0xc8, 0x2, "ae5bbd6332427f8ece61dbfb79c4fc29468026768b0349c5a512a7093bba0485209356cc98fc1b473b2119fec0a5fdb96a61d3f388c01e7f4f57ae89695fa33cd48e5de8348051f04489742def134d8d7fb6304ad441325fa226168f008066353f937d790cdb91084b7158f5fa100f24d6c050bfe604f9093827a82189d0dd8f7f9f909566d3cd2c2da6de03715de97a67ca876d51fe5ebd0b79d570c9c6fface6ee79fb602217986428249694ebadbda8bc52b7df5f5f0aa5b1c8336ac936929066c8fc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x312, 0x2a, [@link_id={0x65, 0x12, {@random="3ba74d3cbb4a", @device_b, @broadcast}}, @perr={0x84, 0x83, {0xb1, 0x9, [{{}, @device_b, 0x9, @void, 0x35}, {{}, @device_b, 0x1, @void, 0x12}, {{}, @device_b, 0x6, @void, 0xb}, {{}, @device_b, 0x86e, @void, 0x42}, {{}, @device_a, 0x1, @void, 0x1}, {{}, @device_a, 0xf, @void, 0x2a}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x3d}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x4}, {{}, @broadcast, 0x2d30, @void, 0x2d}]}}, @cf={0x4, 0x6, {0x4, 0x2, 0x1, 0x8}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3, 0x1}}, @preq={0x82, 0x78, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0xcc, 0xf8, 0x26, @device_b, 0x63, @value, 0x7ff, 0x1, 0x8, [{{0x0, 0x0, 0x1}, @broadcast, 0x9bef}, {{0x1}, @device_b, 0x54}, {{0x1, 0x0, 0x1}}, {{}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x80000001}, {{0x1, 0x0, 0x1}, @device_b, 0x7b6}]}}, @fast_bss_trans={0x37, 0xc4, {0xdd, 0x7, "330d15e13984bac0ab056287be794fd5", "6e6731f166d4d247fef9362a42e194e3032656088a65e461bbebf05fb9f06a6d", "b0481cc762829dfb100d4bae751d7321fb230abdd7239348a09a4682be552407", [{0x1, 0x25, "d53bd7b92e555fdb20c0f133ba0c19c182b3cd77dcfee80bdb328ce6a76587e03d60fc5aad"}, {0x2}, {0x4, 0x4, "660f1f94"}, {0x3, 0x1, "d1"}, {0x2, 0x1, "04"}, {0x2, 0x25, "dc4c18a68b540bbff24264640d7f8b3fe8824a607291a0ca7333ae94a9fb76396eda27b878"}, {0x2, 0x14, "def2361e41c8f7d574ad1335bc97bc2b062252b5"}]}}, @tim={0x5, 0x31, {0x3, 0x53, 0x2, "82ce3e4b681a58b1be03fb9c5194ac5a15905dfddcc34c5b92c21312e356647170c6065d02168c6224443f50f424"}}, @cf={0x4, 0x6, {0x6, 0x4, 0x3e7, 0x7}}, @random={0x9, 0xe7, "813670e46af9d3992ebee989089a8be8849b3cabdb4a8a0199eeea28800f1bf7e698ebdfabf2cc98a4af75bd3e0b78ac32764431f91ffa62a2b2b929033613978a9390b3bbeea4b2162f34745d9f3cfee59422e4c7c5a6536d8fcd933db412f73d0948616bcebd44cc810044f7e4624fc32ea8aaf30d5a2693899a1e518b91a40ff8e7b9d4546a49cca1c86229966ab891e73391622167a21c2d66bc9055b55479d9fb76de991abd9467f4cc39bfe61ed54e924f88e5398bb38024912bfaa54e1ee781564e7f3b4587cd92d40ee3a989d7b5abc448e668416a763ee5ff40baa8c44517265286da"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1354, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x7f, 0x2, "95fd540e6810486efbafae09f9ba5523d6ab82ded7a951c31865c204aacb41d8dab5fba4d8155b5fa86b76bde3bf32dc6c7c679f6302e3d5efe6faaad619e0c80b6154fee9725c3ae95f063212b84e18c45ba794b852f543051f7ad64d71a4d1591949e8b5bace46bd98641e9c42880125d4216cdc121d2582732e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd8, 0x3, "79f1d6c03e6ab6c91fff0de7ec5d6c438c242a0357a450bfbd3eb335984d454a0b1bc496dd0545d0ac07c0b374fafd79d826b9f7673a80ce706027379f9546b8227982bea9e31387505bc89d06b7cbc26aedf41ea494a52cce17e43111b7398dd16847f4e7ef4aaf7935623cd0851d1764ff6d2306af211ab06b004d171a18989afa6358ee4a5c4eb6e70fc041f1e782b750093efe8492ae750a43bca55ebb8c1d21ee0dee2b200163cddd5c5c8a45d477069051322bebbda548390a3e51f5f07f5fbe04d472a9db4ce81036383e24085b567896"}, @NL80211_FTM_RESP_ATTR_LCI={0xac, 0x2, "9d95cc5bec85c0f9cb2bbac054a3820ccbc85067af52908a2d53ae8d67747c81ed2637cd7086c111cc48279d1fbe715e5602106940b46c65d182b20b025a7895bc4cf264099ebad05524235206f2727767b76cabe5d0de9cce808582b85bffe07b1e52b1f9e30efb0a80bd0e8eed5e3ef464ecb28c84c16bdbed8c6727e008519fbf8168068ff11398e82bfeba38b5683536bda35c4886b9211b485239165041988bd33a3eaeff97"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x42, 0x3, "47162890a2cc6e9172967142f10907f1b6abb34980270fbdd04aa091233810462f9a9c6fb64badd9749f773d8d2971a7cff6a1eb4005131c8a22cbd8389a"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xb2, 0x2, "34bcaa0d7f60a630dc656eaa0cc3e58c5f54243ada0932e90987afac0f19089947ac9256a185a73a2a1dd37fdd45efe013de01ea9033b95dfd165efd8404830d08d245b14b0cb1773dfb062e6a52a53bf6cd341dd112371755dd880281564e666e3b673766e4ea85a2c30cc147a1ebc999a8af278e728ad2367844f0e88425221401a6bb4bef463ec9afc83ab4992abd0759659574a5d06df6cc801fc821f279547234d85ef58abb9360e49380a4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x45, 0x3, "953ad5bf57ee631e13d544eab641bbb40ff1f3fe6255e82357692a5b03506de1655225d451fdec460f9cf54b58a8f2c7b1819685cdb9b164d1d5cff4f18cd2e4d7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x1e7, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @from_mac=@device_b, {0x5, 0x80}}, 0x4, @random, 0xa015ca83556f2dbe, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x31, 0x80, 0x0, 0x2}}, @val={0x6, 0x2, 0xfff}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x15, 0x7}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x100, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0xd9}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xf0, "391999f3ef34bfac1fd1fb1793e6a50dfe3db3f568771f424778cf37356be86ff519671623a422d07418279db51f0e112c15fcd33af617c33f4776a9ab64f1cd2b154404c3d7d4a020da9ec31a4c5702782aa9b2a47193bdb83bbe07a51dac3a6b7cf7ba245382470d99cda7c25e54615560a70c9da0425756b819ca1467fad0f58c88479f6d42a59091b59050740b5aa5745dc3036686e1d1c0e671893cbd4fb4e78039ae38a1a58597d9e1aca7fac2f3f96491848afcee9c44beb847ea53fb6e4278f118ae1951d7c0fe4f95941215fa8b38fc91914d975075ab838a9715446a7617aa3ba191b198c8f19e90517b1f"}, {0xdd, 0x8d, "922925f8ad1e00e241d7113c2d0bc4bbebbf68b64696156753984310c43559e1bbe6698832e1f730f1a14f7905f192be582fd155733d890e0a0df4c2d7d2142c3c5b0e5b638b28281891b38264f94f6d66fe95f9683120acc8ce80b6eeba7225e1f90f2f7d93e78b1f59a01911b4ddfb7f8298631f909d1397486c488ba98407a6eb53c42ac4ef9eb62fb1c2e3"}]}}]}, 0x19f0}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000480)={0x1c0, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb, 0x5, "0182ad82d757a9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12b2c226}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffd6e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*!),[\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&/\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x934}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x82,{,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'discard'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c0}}, 0x804) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000480)={0x1c0, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb, 0x5, "0182ad82d757a9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12b2c226}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffd6e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*!),[\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&/\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x934}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x82,{,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'discard'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c0}}, 0x804)

2.10888ms ago: executing program 0 (id=869):
r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "764c3cbd4bfcea3ccf39c5d39a1b806b9b7d59625e8a066879fba0a9f3e6a82551ea6a5cfc4e9b07b71db3eeffa3445ddb573a0d465f42672a21fac054d92ba2", 0x33}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f00000024c0)='keyring\x00', &(0x7f0000002500)={'syz', 0x1}, r0)
socket(0x8, 0x800, 0x81)

0s ago: executing program 0 (id=870):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x158}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x4, 0x0, <r4=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x44, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c885}, 0x4000040)
syz_usb_control_io$uac2(r7, 0x0, 0x0)
r10 = dup(r4)
syz_ublk_setup_queues(r10, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x257, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x40, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0xffffffff, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2001}, 0x0)

kernel console output (not intermixed with test programs):

_u:object_r:cgroup_t tclass=filesystem permissive=1
[   99.287264][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[   99.339232][  T378] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 4
[   99.360848][  T378] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0
[   99.377313][  T378] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[   99.393079][  T378] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 160, setting to 0
[   99.460071][   T10] usb 4-1: config 1 has an invalid interface number: 223 but max is 1
[   99.471637][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.485413][   T10] usb 4-1: config 1 has no interface number 1
[   99.492808][   T10] usb 4-1: config 1 interface 223 has no altsetting 0
[   99.503528][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   99.514402][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.524697][   T10] usb 4-1: Product: syz
[   99.529849][   T10] usb 4-1: Manufacturer: syz
[   99.535581][   T10] usb 4-1: SerialNumber: syz
[   99.543167][   T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[   99.552245][   T10] cdc_ncm 4-1:1.0: bind() failure
[   99.746961][  T381] usb 4-1: USB disconnect, device number 31
[  100.002231][ T1594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.015685][ T1594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.314029][ T1600] syzkaller1: entered promiscuous mode
[  100.321044][ T1600] syzkaller1: entered allmulticast mode
[  100.338433][ T1600] netlink: 'syz.3.384': attribute type 3 has an invalid length.
[  100.569478][   T36] audit: type=1400 audit(1782461911.290:298): avc:  denied  { accept } for  pid=1606 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  100.598750][ T1607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.610399][ T1608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.620358][ T1608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.629901][ T1607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.647259][  T381] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  100.808932][  T381] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  100.825732][  T381] usb 4-1: config 2 has no interface number 0
[  100.834674][  T381] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64
[  100.854543][  T381] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  100.869530][  T381] usb 4-1: config 2 interface 88 has no altsetting 0
[  100.879519][  T381] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  100.892176][  T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.902941][  T381] usb 4-1: Product: syz
[  100.908089][  T381] usb 4-1: Manufacturer: syz
[  100.914233][  T381] usb 4-1: SerialNumber: syz
[  100.922106][ T1603] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  100.930922][ T1603] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  101.146824][ T1603] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  101.157038][ T1603] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  101.302329][ T1610] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  101.370928][ T1618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.386559][ T1618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.420528][  T381] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  101.436744][  T381] asix 4-1:2.88: probe with driver asix failed with error -71
[  101.450577][  T381] usb 4-1: USB disconnect, device number 32
[  101.962552][  T378] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  102.013328][  T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.047345][ T1623] mmap: syz.3.393 (1623): VmData 29073408 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  102.052977][  T378] usb 2-1: can't set config #1, error -71
[  102.092210][  T378] usb 2-1: USB disconnect, device number 35
[  102.103204][   T36] audit: type=1400 audit(1782461912.830:299): avc:  denied  { ioctl } for  pid=1626 comm="syz.1.394" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  102.238006][ T1641] tipc: Started in network mode
[  102.245040][ T1642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.247633][ T1641] tipc: Node identity ac14140f, cluster identity 4711
[  102.262899][ T1642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.274066][ T1641] tipc: New replicast peer: 255.255.255.255
[  102.290930][ T1641] tipc: Enabled bearer <udp:syz2>, priority 8
[  102.362388][   T36] audit: type=1400 audit(1782461913.080:300): avc:  denied  { create } for  pid=1652 comm="syz.0.403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.391442][   T36] audit: type=1400 audit(1782461913.100:301): avc:  denied  { mounton } for  pid=1652 comm="syz.0.403" path="/130/file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.420359][   T36] audit: type=1400 audit(1782461913.100:302): avc:  denied  { read } for  pid=1652 comm="syz.0.403" name="file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.452729][  T312] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  102.464321][   T36] audit: type=1400 audit(1782461913.100:303): avc:  denied  { open } for  pid=1652 comm="syz.0.403" path="/130/file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.637275][  T312] usb 4-1: Using ep0 maxpacket: 16
[  102.648124][  T312] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  102.666033][  T312] usb 4-1: config 0 interface 0 has no altsetting 0
[  102.677761][  T312] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  102.689304][  T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.700427][  T312] usb 4-1: config 0 descriptor??
[  102.937639][ T1662] netlink: 104 bytes leftover after parsing attributes in process `syz.2.405'.
[  102.958882][   T36] audit: type=1400 audit(1782461913.680:304): avc:  denied  { getopt } for  pid=1663 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  102.960312][ T1662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.028055][ T1662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.117877][  T312] hid-led 0003:1294:1320.0006: unknown main item tag 0x2
[  103.127246][  T312] hid-led 0003:1294:1320.0006: unknown main item tag 0x6
[  103.138420][  T312] hid-led 0003:1294:1320.0006: ignoring exceeding usage max
[  103.150560][  T312] hid-led 0003:1294:1320.0006: hidraw0: USB HID v0.02 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0
[  103.175505][  T312] hid-led 0003:1294:1320.0006: Riso Kagaku Webmail Notifier initialized
[  103.216507][ T1667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=1667 comm=syz.1.408
[  103.359580][  T378] usb 4-1: USB disconnect, device number 33
[  103.368947][    T9] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  103.387831][    T9] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  103.407227][    T9] tipc: Node number set to 2886997007
[  103.427205][    T9] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  103.827377][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  104.018229][    T9] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  104.027930][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.047622][    T9] usb 2-1: config 1 has no interface number 1
[  104.065676][    T9] usb 2-1: config 1 interface 223 has no altsetting 0
[  104.076992][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.093521][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.104818][    T9] usb 2-1: Product: syz
[  104.110955][    T9] usb 2-1: Manufacturer: syz
[  104.118054][    T9] usb 2-1: SerialNumber: syz
[  104.132486][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  104.141689][    T9] cdc_ncm 2-1:1.0: bind() failure
[  104.147431][  T312] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  104.193945][   T36] audit: type=1400 audit(1782461914.910:305): avc:  denied  { watch watch_reads } for  pid=1698 comm="syz.0.417" path="/136" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  104.298629][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.311837][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.323370][  T312] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  104.335226][  T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.349176][  T643] usb 2-1: USB disconnect, device number 36
[  104.361957][  T312] usb 4-1: config 0 descriptor??
[  104.777365][  T312] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  104.793840][  T312] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  104.805807][  T312] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  104.817526][  T312] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  104.826909][  T312] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  104.835965][  T312] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  104.846737][  T312] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  104.865772][  T312] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  104.921251][ T1710] netlink: 'syz.1.420': attribute type 16 has an invalid length.
[  104.937191][ T1710] netlink: 'syz.1.420': attribute type 3 has an invalid length.
[  104.948404][ T1710] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.420'.
[  104.976558][  T312] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00
[  105.178548][ T1688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.191990][ T1688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.197511][  T381] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  105.367239][  T381] usb 2-1: Using ep0 maxpacket: 8
[  105.375676][  T381] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  105.386928][  T381] usb 2-1: config 0 has no interface number 0
[  105.399872][  T381] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  105.427205][  T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.438811][  T381] usb 2-1: Product: syz
[  105.445237][  T381] usb 2-1: Manufacturer: syz
[  105.451064][  T381] usb 2-1: SerialNumber: syz
[  105.464144][  T381] usb 2-1: config 0 descriptor??
[  105.607687][  T312] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71
[  105.626136][  T312] usb 4-1: USB disconnect, device number 34
[  105.677486][  T381] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  105.685117][  T381] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized!
[  105.717289][  T381] usb 2-1: USB disconnect, device number 37
[  105.917440][ T1714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=1714 comm=syz.2.422
[  105.980120][ T1718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.991824][ T1718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.417300][  T312] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  106.457316][  T381] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  106.527447][   T36] audit: type=1400 audit(1782461917.250:306): avc:  denied  { remount } for  pid=1734 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  106.536824][ T1735] overlayfs: workdir and upperdir must reside under the same mount
[  106.577268][  T312] usb 4-1: Using ep0 maxpacket: 32
[  106.589640][  T312] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40
[  106.606737][  T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.615763][  T312] usb 4-1: Product: syz
[  106.628604][  T312] usb 4-1: Manufacturer: syz
[  106.634539][  T312] usb 4-1: SerialNumber: syz
[  106.648419][  T381] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  106.661104][  T381] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.675126][  T381] usb 2-1: config 1 has no interface number 1
[  106.697304][  T381] usb 2-1: config 1 interface 223 has no altsetting 0
[  106.710825][  T381] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  106.727063][  T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.739066][  T381] usb 2-1: Product: syz
[  106.743991][  T381] usb 2-1: Manufacturer: syz
[  106.753506][  T381] usb 2-1: SerialNumber: syz
[  106.765666][ T1746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.779203][ T1746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.791119][  T381] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  106.801574][  T381] cdc_ncm 2-1:1.0: bind() failure
[  106.850048][  T312] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  106.861494][  T312] usb 4-1: unit 6 not found!
[  106.876857][  T312] usb 4-1: USB disconnect, device number 35
[  106.913865][ T1747] 9pnet_fd: Insufficient options for proto=fd
[  106.993277][  T328] usb 2-1: USB disconnect, device number 38
[  107.293250][   T36] audit: type=1400 audit(1782461918.010:307): avc:  denied  { ioctl } for  pid=1750 comm="syz.0.436" path="socket:[13481]" dev="sockfs" ino=13481 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  107.535131][   T36] audit: type=1400 audit(1782461918.250:308): avc:  denied  { setattr } for  pid=1756 comm="syz.1.439" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  107.627275][  T312] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  107.787265][  T312] usb 4-1: Using ep0 maxpacket: 8
[  107.797258][  T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.811534][  T312] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  107.827239][  T328] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  107.838118][  T312] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[  107.853043][  T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.863032][  T312] usb 4-1: Product: syz
[  107.869963][  T312] usb 4-1: Manufacturer: syz
[  107.875803][  T312] usb 4-1: SerialNumber: syz
[  108.017331][  T328] usb 2-1: Using ep0 maxpacket: 8
[  108.025201][  T328] usb 2-1: config 162 has an invalid interface number: 79 but max is 1
[  108.036480][  T328] usb 2-1: config 162 has an invalid interface number: 183 but max is 1
[  108.047232][  T328] usb 2-1: config 162 has no interface number 0
[  108.055498][  T328] usb 2-1: config 162 has no interface number 1
[  108.063279][  T328] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  108.081812][  T328] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  108.097014][  T328] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  108.098806][   T36] audit: type=1400 audit(1782461918.820:309): avc:  denied  { mount } for  pid=1752 comm="syz.3.437" name="/" dev="ramfs" ino=13025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  108.112668][  T328] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  108.156565][  T328] usb 2-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  108.171383][  T328] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 55, changing to 9
[  108.186365][  T328] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid maxpacket 8496, setting to 1024
[  108.201251][  T328] usb 2-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  108.217175][  T328] usb 2-1: config 162 interface 79 has no altsetting 0
[  108.226621][  T328] usb 2-1: config 162 interface 183 has no altsetting 0
[  108.236380][  T328] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1
[  108.248904][  T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.259393][  T328] usb 2-1: Product: syz
[  108.266258][  T328] usb 2-1: Manufacturer: syz
[  108.273108][  T328] usb 2-1: SerialNumber: syz
[  108.494413][  T328] pl2303 2-1:162.79: required endpoints missing
[  108.502785][  T312] usb 4-1: Can't get UAC3 power state for id 10
[  108.512397][  T328] pl2303 2-1:162.183: pl2303 converter detected
[  108.523695][  T328] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  108.532485][  T312] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  108.541856][  T328] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[  108.553171][  T328] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  108.566045][  T328] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[  108.567380][ T1788] netlink: 'syz.0.447': attribute type 28 has an invalid length.
[  108.578377][  T328] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  108.598800][  T312] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  108.620684][  T328] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[  108.637277][  T312] usb 4-1: USB disconnect, device number 36
[  108.646728][  T328] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  108.667534][  T328] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[  108.679270][  T328] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0000]: -71
[  108.692054][  T328] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0001]: -71
[  108.699995][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  108.706464][  T328] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0002]: -71
[  108.737288][  T328] usb 2-1: pl2303 converter now attached to ttyUSB0
[  108.751283][  T328] usb 2-1: USB disconnect, device number 39
[  108.764155][  T328] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  108.774801][  T328] pl2303 2-1:162.183: device disconnected
[  109.080680][ T1790] kvm: kvm [1789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  109.091506][ T1790] kvm: kvm [1789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  109.218118][ T1799] syz.3.452: attempt to access beyond end of device
[  109.218118][ T1799] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  109.234221][ T1799] EXT4-fs (loop3): unable to read superblock
[  109.587241][  T312] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  109.597511][  T381] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  109.730555][   T36] audit: type=1326 audit(1782461920.450:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.2.434" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255879ce59 code=0x7fc00000
[  109.764523][  T312] usb 2-1: Using ep0 maxpacket: 16
[  109.773378][  T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.791609][  T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.800524][  T381] usb 4-1: unable to get BOS descriptor or descriptor too short
[  109.805014][  T312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  109.816384][  T381] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.830402][  T312] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  109.853568][  T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.860685][  T381] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  109.866577][  T312] usb 2-1: config 0 descriptor??
[  109.894287][  T381] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  109.908481][  T381] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  109.924061][  T381] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  109.939804][  T381] usb 4-1: config 1 interface 1 has no altsetting 0
[  109.962572][  T381] usb 4-1: string descriptor 0 read error: -22
[  109.972397][  T381] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  109.983643][  T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.122712][   T36] audit: type=1400 audit(1782461920.840:311): avc:  denied  { read } for  pid=1813 comm="syz.2.458" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  110.154470][   T36] audit: type=1400 audit(1782461920.840:312): avc:  denied  { open } for  pid=1813 comm="syz.2.458" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  110.188604][   T36] audit: type=1400 audit(1782461920.840:313): avc:  denied  { setopt } for  pid=1813 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  110.222509][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.240366][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.290073][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.298275][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.315005][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.326200][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.336381][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.345298][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.356835][ T1829] netlink: 'syz.2.463': attribute type 64 has an invalid length.
[  110.357495][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.367398][ T1829] netlink: 5 bytes leftover after parsing attributes in process `syz.2.463'.
[  110.377653][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.388630][ T1829] gretap0: entered allmulticast mode
[  110.398208][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.404073][ T1829] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  110.412794][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.440198][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.450283][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.459016][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.468604][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.476916][  T312] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  110.492243][ T1806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.502299][ T1806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.517696][  T312] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input10
[  110.558634][  T312] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  110.596901][  T312] usb 2-1: USB disconnect, device number 40
[  110.614120][ T1838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.630321][ T1838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.141416][   T36] audit: type=1400 audit(1782461921.860:314): avc:  denied  { setopt } for  pid=1844 comm="syz.1.469" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  111.228268][ T1854] FAULT_INJECTION: forcing a failure.
[  111.228268][ T1854] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  111.246842][ T1854] CPU: 1 UID: 0 PID: 1854 Comm: syz.2.472 Not tainted syzkaller #0 8bb3e00b9fe4bbf63f1335aa0aed3b34b9e01cf3
[  111.246881][ T1854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  111.246906][ T1854] Call Trace:
[  111.246913][ T1854]  <TASK>
[  111.246923][ T1854]  __dump_stack+0x21/0x30
[  111.246960][ T1854]  dump_stack_lvl+0x140/0x1c0
[  111.246992][ T1854]  ? __cfi_dump_stack_lvl+0x10/0x10
[  111.247023][ T1854]  ? proc_fail_nth_write+0x184/0x220
[  111.247058][ T1854]  dump_stack+0x19/0x20
[  111.247086][ T1854]  should_fail_ex+0x3c2/0x510
[  111.247112][ T1854]  should_fail+0xf/0x20
[  111.247138][ T1854]  should_fail_usercopy+0x1e/0x30
[  111.247163][ T1854]  _copy_from_user+0x20/0xa0
[  111.247192][ T1854]  dma_buf_ioctl+0x233/0x940
[  111.247225][ T1854]  ? __kasan_check_write+0x18/0x20
[  111.247246][ T1854]  ? mutex_unlock+0x90/0x240
[  111.247275][ T1854]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  111.247311][ T1854]  ? bpf_lsm_file_ioctl+0xd/0x20
[  111.247339][ T1854]  ? security_file_ioctl+0x3e/0x110
[  111.247372][ T1854]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  111.247405][ T1854]  __se_sys_ioctl+0x132/0x1b0
[  111.247432][ T1854]  __x64_sys_ioctl+0x7f/0xa0
[  111.247458][ T1854]  x64_sys_call+0x1878/0x2ee0
[  111.247479][ T1854]  do_syscall_64+0x57/0xf0
[  111.247500][ T1854]  ? clear_bhb_loop+0x50/0xa0
[  111.247528][ T1854]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  111.247554][ T1854] RIP: 0033:0x7f255879ce59
[  111.247582][ T1854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.247601][ T1854] RSP: 002b:00007f2559664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.247624][ T1854] RAX: ffffffffffffffda RBX: 00007f2558a15fa0 RCX: 00007f255879ce59
[  111.247640][ T1854] RDX: 00002000000001c0 RSI: 00000000c0086202 RDI: 0000000000000005
[  111.247654][ T1854] RBP: 00007f2559664090 R08: 0000000000000000 R09: 0000000000000000
[  111.247668][ T1854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.247681][ T1854] R13: 00007f2558a16038 R14: 00007f2558a15fa0 R15: 00007fffde65e2a8
[  111.247708][ T1854]  </TASK>
[  111.427403][    T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  111.626264][ T1857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.668001][ T1857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.837636][    T9] usb 2-1: too many configurations: 113, using maximum allowed: 8
[  111.858771][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  111.887205][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.924327][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  111.937847][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  111.967209][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.005349][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.017862][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  112.035634][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.083075][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.102316][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  112.137211][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.163052][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.183433][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  112.207113][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.237185][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.255393][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  112.273894][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.290794][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.300190][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  112.314430][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.338469][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.340227][ T1862] netlink: 'syz.2.475': attribute type 16 has an invalid length.
[  112.347804][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11
[  112.379668][  T378] usb 4-1: USB disconnect, device number 37
[  112.394747][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.414891][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.433957][ T1866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.444725][   T36] audit: type=1326 audit(1782461923.170:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1867 comm="syz.3.478" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2c019ce59 code=0x0
[  112.448377][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.00
[  112.484774][ T1866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.494734][    T9] usb 2-1: New USB device strings: Mfr=178, Product=11, SerialNumber=81
[  112.506313][    T9] usb 2-1: Product: syz
[  112.512332][    T9] usb 2-1: Manufacturer: syz
[  112.518226][    T9] usb 2-1: SerialNumber: syz
[  112.525355][    T9] usb 2-1: config 0 descriptor??
[  112.737994][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  112.746222][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  112.758054][    T9] usb 2-1: USB disconnect, device number 41
[  113.042465][ T1877] FAULT_INJECTION: forcing a failure.
[  113.042465][ T1877] name failslab, interval 1, probability 0, space 0, times 1
[  113.056922][ T1877] CPU: 0 UID: 0 PID: 1877 Comm: syz.2.482 Not tainted syzkaller #0 8bb3e00b9fe4bbf63f1335aa0aed3b34b9e01cf3
[  113.056952][ T1877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  113.056963][ T1877] Call Trace:
[  113.056969][ T1877]  <TASK>
[  113.056977][ T1877]  __dump_stack+0x21/0x30
[  113.057022][ T1877]  dump_stack_lvl+0x140/0x1c0
[  113.057047][ T1877]  ? __cfi_dump_stack_lvl+0x10/0x10
[  113.057072][ T1877]  ? dma_resv_iter_walk_unlocked+0x7ba/0x810
[  113.057095][ T1877]  ? expand_files+0xda/0x6f0
[  113.057115][ T1877]  dump_stack+0x19/0x20
[  113.057169][ T1877]  should_fail_ex+0x3c2/0x510
[  113.057193][ T1877]  should_failslab+0xac/0x100
[  113.057219][ T1877]  __kmalloc_cache_noprof+0x41/0x470
[  113.057242][ T1877]  ? sync_file_alloc+0x5a/0x1b0
[  113.057264][ T1877]  ? _raw_spin_lock+0x92/0x120
[  113.057280][ T1877]  sync_file_alloc+0x5a/0x1b0
[  113.057302][ T1877]  sync_file_create+0x1e/0xf0
[  113.057325][ T1877]  dma_buf_ioctl+0x6f0/0x940
[  113.057348][ T1877]  ? __kasan_check_write+0x18/0x20
[  113.057363][ T1877]  ? mutex_unlock+0x90/0x240
[  113.057383][ T1877]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  113.057409][ T1877]  ? bpf_lsm_file_ioctl+0xd/0x20
[  113.057429][ T1877]  ? security_file_ioctl+0x3e/0x110
[  113.057453][ T1877]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  113.057476][ T1877]  __se_sys_ioctl+0x132/0x1b0
[  113.057495][ T1877]  __x64_sys_ioctl+0x7f/0xa0
[  113.057514][ T1877]  x64_sys_call+0x1878/0x2ee0
[  113.057534][ T1877]  do_syscall_64+0x57/0xf0
[  113.057550][ T1877]  ? clear_bhb_loop+0x50/0xa0
[  113.057570][ T1877]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  113.057588][ T1877] RIP: 0033:0x7f255879ce59
[  113.057610][ T1877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.057623][ T1877] RSP: 002b:00007f2559664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.057646][ T1877] RAX: ffffffffffffffda RBX: 00007f2558a15fa0 RCX: 00007f255879ce59
[  113.057658][ T1877] RDX: 00002000000001c0 RSI: 00000000c0086202 RDI: 0000000000000005
[  113.057669][ T1877] RBP: 00007f2559664090 R08: 0000000000000000 R09: 0000000000000000
[  113.057679][ T1877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.057688][ T1877] R13: 00007f2558a16038 R14: 00007f2558a15fa0 R15: 00007fffde65e2a8
[  113.057702][ T1877]  </TASK>
[  113.409300][ T1884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'.
[  113.428756][ T1886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.442725][ T1886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.469467][ T1891] 9pnet_fd: Insufficient options for proto=fd
[  113.547572][ T1907] overlayfs: failed to clone upperpath
[  113.605590][ T1917] FAULT_INJECTION: forcing a failure.
[  113.605590][ T1917] name failslab, interval 1, probability 0, space 0, times 0
[  113.623463][ T1917] CPU: 1 UID: 0 PID: 1917 Comm: syz.3.494 Not tainted syzkaller #0 8bb3e00b9fe4bbf63f1335aa0aed3b34b9e01cf3
[  113.623541][ T1917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  113.623555][ T1917] Call Trace:
[  113.623562][ T1917]  <TASK>
[  113.623571][ T1917]  __dump_stack+0x21/0x30
[  113.623622][ T1917]  dump_stack_lvl+0x140/0x1c0
[  113.623651][ T1917]  ? __cfi_dump_stack_lvl+0x10/0x10
[  113.623691][ T1917]  ? kasan_save_track+0x4f/0x80
[  113.623715][ T1917]  ? kasan_save_track+0x3e/0x80
[  113.623753][ T1917]  dump_stack+0x19/0x20
[  113.623783][ T1917]  should_fail_ex+0x3c2/0x510
[  113.623807][ T1917]  should_failslab+0xac/0x100
[  113.623858][ T1917]  kmem_cache_alloc_lru_noprof+0x44/0x410
[  113.623881][ T1917]  ? __d_alloc+0x42/0x8c0
[  113.623900][ T1917]  __d_alloc+0x42/0x8c0
[  113.623926][ T1917]  d_alloc_pseudo+0x23/0xc0
[  113.623951][ T1917]  alloc_file_pseudo+0xde/0x1f0
[  113.623996][ T1917]  ? __cfi_alloc_file_pseudo+0x10/0x10
[  113.624030][ T1917]  ? kasan_save_alloc_info+0x3a/0x50
[  113.624074][ T1917]  anon_inode_getfile+0xaa/0x190
[  113.624104][ T1917]  sync_file_alloc+0x7e/0x1b0
[  113.624136][ T1917]  sync_file_create+0x1e/0xf0
[  113.624168][ T1917]  dma_buf_ioctl+0x6f0/0x940
[  113.624200][ T1917]  ? __kasan_check_write+0x18/0x20
[  113.624228][ T1917]  ? mutex_unlock+0x90/0x240
[  113.624256][ T1917]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  113.624291][ T1917]  ? bpf_lsm_file_ioctl+0xd/0x20
[  113.624326][ T1917]  ? security_file_ioctl+0x3e/0x110
[  113.624358][ T1917]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  113.624396][ T1917]  __se_sys_ioctl+0x132/0x1b0
[  113.624429][ T1917]  __x64_sys_ioctl+0x7f/0xa0
[  113.624462][ T1917]  x64_sys_call+0x1878/0x2ee0
[  113.624482][ T1917]  do_syscall_64+0x57/0xf0
[  113.624503][ T1917]  ? clear_bhb_loop+0x50/0xa0
[  113.624530][ T1917]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  113.624556][ T1917] RIP: 0033:0x7ff2c019ce59
[  113.624577][ T1917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.624596][ T1917] RSP: 002b:00007ff2bebf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.624628][ T1917] RAX: ffffffffffffffda RBX: 00007ff2c0415fa0 RCX: 00007ff2c019ce59
[  113.624645][ T1917] RDX: 00002000000001c0 RSI: 00000000c0086202 RDI: 0000000000000005
[  113.624660][ T1917] RBP: 00007ff2bebf7090 R08: 0000000000000000 R09: 0000000000000000
[  113.624681][ T1917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.624694][ T1917] R13: 00007ff2c0416038 R14: 00007ff2c0415fa0 R15: 00007ffd45dcb468
[  113.624721][ T1917]  </TASK>
[  113.747477][  T378] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  114.138234][  T378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.153268][  T378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.168106][ T1932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.179872][ T1932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.191204][  T378] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  114.201672][  T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.210866][ T1931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.221555][ T1931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.234495][  T378] usb 2-1: config 0 descriptor??
[  114.267238][  T312] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  114.427206][  T312] usb 4-1: Using ep0 maxpacket: 8
[  114.448382][  T312] usb 4-1: unable to get BOS descriptor or descriptor too short
[  114.467772][  T312] usb 4-1: unable to read config index 0 descriptor/start: -71
[  114.478529][  T312] usb 4-1: can't read configurations, error -71
[  114.644817][  T378] steelseries 0003:1038:12B6.0009: unknown main item tag 0x7
[  114.658235][  T378] steelseries 0003:1038:12B6.0009: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0
[  114.801130][   T36] audit: type=1400 audit(1782461925.520:316): avc:  denied  { read } for  pid=1937 comm="syz.2.502" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  114.857775][ T1901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.882319][ T1901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.895091][  T378] steelseries 0003:1038:12B6.0009: hid_hw_raw_request() failed with -71
[  114.908503][  T378] usb 2-1: USB disconnect, device number 42
[  114.958480][   T36] audit: type=1400 audit(1782461925.680:317): avc:  denied  { create } for  pid=1942 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  114.987786][   T36] audit: type=1400 audit(1782461925.710:318): avc:  denied  { execute } for  pid=1942 comm="syz.2.504" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  115.032474][ T1945] FAULT_INJECTION: forcing a failure.
[  115.032474][ T1945] name failslab, interval 1, probability 0, space 0, times 0
[  115.047580][ T1945] CPU: 0 UID: 0 PID: 1945 Comm: syz.3.505 Not tainted syzkaller #0 8bb3e00b9fe4bbf63f1335aa0aed3b34b9e01cf3
[  115.047618][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  115.047632][ T1945] Call Trace:
[  115.047640][ T1945]  <TASK>
[  115.047650][ T1945]  __dump_stack+0x21/0x30
[  115.047686][ T1945]  dump_stack_lvl+0x140/0x1c0
[  115.047716][ T1945]  ? __cfi_dump_stack_lvl+0x10/0x10
[  115.047749][ T1945]  dump_stack+0x19/0x20
[  115.047778][ T1945]  should_fail_ex+0x3c2/0x510
[  115.047803][ T1945]  should_failslab+0xac/0x100
[  115.047829][ T1945]  kmem_cache_alloc_noprof+0x42/0x410
[  115.047851][ T1945]  ? alloc_empty_file+0xbf/0x270
[  115.047894][ T1945]  ? _raw_spin_unlock+0x45/0x60
[  115.047917][ T1945]  alloc_empty_file+0xbf/0x270
[  115.047944][ T1945]  ? _raw_spin_unlock+0x45/0x60
[  115.047967][ T1945]  alloc_file_pseudo+0x142/0x1f0
[  115.047996][ T1945]  ? __cfi_alloc_file_pseudo+0x10/0x10
[  115.048033][ T1945]  anon_inode_getfile+0xaa/0x190
[  115.048063][ T1945]  sync_file_alloc+0x7e/0x1b0
[  115.048095][ T1945]  sync_file_create+0x1e/0xf0
[  115.048134][ T1945]  dma_buf_ioctl+0x6f0/0x940
[  115.048164][ T1945]  ? __kasan_check_write+0x18/0x20
[  115.048184][ T1945]  ? mutex_unlock+0x90/0x240
[  115.048210][ T1945]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  115.048264][ T1945]  ? bpf_lsm_file_ioctl+0xd/0x20
[  115.048289][ T1945]  ? security_file_ioctl+0x3e/0x110
[  115.048320][ T1945]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  115.048364][ T1945]  __se_sys_ioctl+0x132/0x1b0
[  115.048391][ T1945]  __x64_sys_ioctl+0x7f/0xa0
[  115.048416][ T1945]  x64_sys_call+0x1878/0x2ee0
[  115.048436][ T1945]  do_syscall_64+0x57/0xf0
[  115.048463][ T1945]  ? clear_bhb_loop+0x50/0xa0
[  115.048489][ T1945]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  115.048514][ T1945] RIP: 0033:0x7ff2c019ce59
[  115.048533][ T1945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.048552][ T1945] RSP: 002b:00007ff2bebf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.048576][ T1945] RAX: ffffffffffffffda RBX: 00007ff2c0415fa0 RCX: 00007ff2c019ce59
[  115.048593][ T1945] RDX: 00002000000001c0 RSI: 00000000c0086202 RDI: 0000000000000005
[  115.048607][ T1945] RBP: 00007ff2bebf7090 R08: 0000000000000000 R09: 0000000000000000
[  115.048621][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.048634][ T1945] R13: 00007ff2c0416038 R14: 00007ff2c0415fa0 R15: 00007ffd45dcb468
[  115.048653][ T1945]  </TASK>
[  115.427404][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.438883][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.451778][ T1953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.462986][ T1953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.491855][   T36] audit: type=1400 audit(1782461926.210:319): avc:  denied  { ioctl } for  pid=1955 comm="syz.3.510" path="socket:[13760]" dev="sockfs" ino=13760 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  115.494406][ T1956] overlayfs: failed to resolve './file2': -2
[  115.787330][  T378] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  115.936981][ T1965] capability: warning: `syz.0.514' uses 32-bit capabilities (legacy support in use)
[  115.947819][  T378] usb 4-1: Using ep0 maxpacket: 16
[  115.957084][  T378] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  115.968555][  T381] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  115.984818][  T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.004576][  T378] usb 4-1: Product: syz
[  116.012182][  T378] usb 4-1: Manufacturer: syz
[  116.017636][  T378] usb 4-1: SerialNumber: syz
[  116.028026][  T378] usb 4-1: config 0 descriptor??
[  116.040621][  T378] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  116.050770][ T1971] FAULT_INJECTION: forcing a failure.
[  116.050770][ T1971] name failslab, interval 1, probability 0, space 0, times 0
[  116.066068][  T378] usb 4-1: Detected FT-X
[  116.067538][ T1971] CPU: 1 UID: 0 PID: 1971 Comm: syz.2.517 Not tainted syzkaller #0 8bb3e00b9fe4bbf63f1335aa0aed3b34b9e01cf3
[  116.067680][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  116.067728][ T1971] Call Trace:
[  116.067749][ T1971]  <TASK>
[  116.067780][ T1971]  __dump_stack+0x21/0x30
[  116.067883][ T1971]  dump_stack_lvl+0x140/0x1c0
[  116.067964][ T1971]  ? __cfi_dump_stack_lvl+0x10/0x10
[  116.068056][ T1971]  dump_stack+0x19/0x20
[  116.068132][ T1971]  should_fail_ex+0x3c2/0x510
[  116.068203][ T1971]  should_failslab+0xac/0x100
[  116.068280][ T1971]  kmem_cache_alloc_noprof+0x42/0x410
[  116.068334][ T1971]  ? security_file_alloc+0x49/0x220
[  116.068434][ T1971]  ? kasan_save_alloc_info+0x3a/0x50
[  116.068526][ T1971]  security_file_alloc+0x49/0x220
[  116.068612][ T1971]  init_file+0x9e/0x210
[  116.068684][ T1971]  alloc_empty_file+0xd9/0x270
[  116.068748][ T1971]  ? _raw_spin_unlock+0x45/0x60
[  116.068809][ T1971]  alloc_file_pseudo+0x142/0x1f0
[  116.068882][ T1971]  ? __cfi_alloc_file_pseudo+0x10/0x10
[  116.068964][ T1971]  anon_inode_getfile+0xaa/0x190
[  116.069062][ T1971]  sync_file_alloc+0x7e/0x1b0
[  116.069143][ T1971]  sync_file_create+0x1e/0xf0
[  116.069224][ T1971]  dma_buf_ioctl+0x6f0/0x940
[  116.069820][ T1971]  ? __kasan_check_write+0x18/0x20
[  116.069940][ T1971]  ? mutex_unlock+0x90/0x240
[  116.070021][ T1971]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  116.070117][ T1971]  ? bpf_lsm_file_ioctl+0xd/0x20
[  116.070238][ T1971]  ? security_file_ioctl+0x3e/0x110
[  116.070334][ T1971]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  116.070436][ T1971]  __se_sys_ioctl+0x132/0x1b0
[  116.070511][ T1971]  __x64_sys_ioctl+0x7f/0xa0
[  116.070591][ T1971]  x64_sys_call+0x1878/0x2ee0
[  116.070637][ T1971]  do_syscall_64+0x57/0xf0
[  116.070747][ T1971]  ? clear_bhb_loop+0x50/0xa0
[  116.070834][ T1971]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  116.070904][ T1971] RIP: 0033:0x7f255879ce59
[  116.070966][ T1971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.071019][ T1971] RSP: 002b:00007f2559664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.071091][ T1971] RAX: ffffffffffffffda RBX: 00007f2558a15fa0 RCX: 00007f255879ce59
[  116.071136][ T1971] RDX: 00002000000001c0 RSI: 00000000c0086202 RDI: 0000000000000005
[  116.071164][ T1971] RBP: 00007f2559664090 R08: 0000000000000000 R09: 0000000000000000
[  116.071205][ T1971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.071246][ T1971] R13: 00007f2558a16038 R14: 00007f2558a15fa0 R15: 00007fffde65e2a8
[  116.071302][ T1971]  </TASK>
[  116.127838][ T1973] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  116.217337][  T381] usb 2-1: Using ep0 maxpacket: 32
[  116.218254][ T1973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  116.228054][  T381] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x2 has invalid wMaxPacketSize 0
[  116.453910][  T378] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  116.464037][  T381] usb 2-1: config 0 interface 0 has no altsetting 0
[  116.472050][  T381] usb 2-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00
[  116.482306][  T381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.505438][ T1976] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  116.514206][  T381] usb 2-1: config 0 descriptor??
[  116.531348][ T1976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.543772][ T1976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.799943][  T378] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  116.811165][  T378] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  116.826375][  T378] usb 4-1: USB disconnect, device number 40
[  116.835986][  T381] usbhid 2-1:0.0: can't add hid device: -71
[  116.843698][  T381] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  116.864090][  T378] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  116.880968][  T381] usb 2-1: USB disconnect, device number 43
[  116.900153][  T378] ftdi_sio 4-1:0.0: device disconnected
[  116.959240][   T36] audit: type=1400 audit(1782461927.680:320): avc:  denied  { read write } for  pid=1987 comm="syz.1.522" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  116.991564][   T36] audit: type=1400 audit(1782461927.680:321): avc:  denied  { open } for  pid=1987 comm="syz.1.522" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  117.024828][   T36] audit: type=1400 audit(1782461927.680:322): avc:  denied  { ioctl } for  pid=1987 comm="syz.1.522" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  117.078080][ T1992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.088672][ T1992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.115522][ T1996] FAULT_INJECTION: forcing a failure.
[  117.115522][ T1996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.133422][ T1996] CPU: 0 UID: 0 PID: 1996 Comm: syz.1.526 Not tainted syzkaller #0 8bb3e00b9fe4bbf63f1335aa0aed3b34b9e01cf3
[  117.133461][ T1996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  117.133475][ T1996] Call Trace:
[  117.133483][ T1996]  <TASK>
[  117.133492][ T1996]  __dump_stack+0x21/0x30
[  117.133529][ T1996]  dump_stack_lvl+0x140/0x1c0
[  117.133559][ T1996]  ? __cfi_dump_stack_lvl+0x10/0x10
[  117.133591][ T1996]  dump_stack+0x19/0x20
[  117.133620][ T1996]  should_fail_ex+0x3c2/0x510
[  117.133645][ T1996]  should_fail+0xf/0x20
[  117.133666][ T1996]  should_fail_usercopy+0x1e/0x30
[  117.133698][ T1996]  _copy_to_user+0x24/0xa0
[  117.133728][ T1996]  dma_buf_ioctl+0x79d/0x940
[  117.133761][ T1996]  ? mutex_unlock+0x90/0x240
[  117.133788][ T1996]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  117.133822][ T1996]  ? bpf_lsm_file_ioctl+0xd/0x20
[  117.133850][ T1996]  ? security_file_ioctl+0x3e/0x110
[  117.133884][ T1996]  ? __cfi_dma_buf_ioctl+0x10/0x10
[  117.133925][ T1996]  __se_sys_ioctl+0x132/0x1b0
[  117.133951][ T1996]  __x64_sys_ioctl+0x7f/0xa0
[  117.133990][ T1996]  x64_sys_call+0x1878/0x2ee0
[  117.134011][ T1996]  do_syscall_64+0x57/0xf0
[  117.134032][ T1996]  ? clear_bhb_loop+0x50/0xa0
[  117.134059][ T1996]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  117.134085][ T1996] RIP: 0033:0x7f9de7f9ce59
[  117.134104][ T1996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.134123][ T1996] RSP: 002b:00007f9de8e62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  117.134147][ T1996] RAX: ffffffffffffffda RBX: 00007f9de8215fa0 RCX: 00007f9de7f9ce59
[  117.134164][ T1996] RDX: 00002000000001c0 RSI: 00000000c0086202 RDI: 0000000000000005
[  117.134179][ T1996] RBP: 00007f9de8e62090 R08: 0000000000000000 R09: 0000000000000000
[  117.134193][ T1996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.134205][ T1996] R13: 00007f9de8216038 R14: 00007f9de8215fa0 R15: 00007fff57cced38
[  117.134224][ T1996]  </TASK>
[  117.430050][ T2008] netlink: 'syz.3.530': attribute type 8 has an invalid length.
[  117.461868][   T36] audit: type=1400 audit(1782461928.180:323): avc:  denied  { map } for  pid=2011 comm="syz.1.532" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  117.495874][ T2012] netlink: 57 bytes leftover after parsing attributes in process `syz.1.532'.
[  117.581091][   T36] audit: type=1326 audit(1782461928.300:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.1.534" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9de7f9ce59 code=0x0
[  117.631933][ T2015] netlink: 'syz.1.534': attribute type 5 has an invalid length.
[  117.641864][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[  117.687339][  T643] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  117.727819][ T2020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.740915][ T2020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.848823][  T643] usb 4-1: config 120 has an invalid interface number: 125 but max is 0
[  117.858609][  T643] usb 4-1: config 120 has no interface number 0
[  117.866199][  T643] usb 4-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64
[  117.880286][  T643] usb 4-1: config 120 interface 125 altsetting 8 endpoint 0x84 has invalid wMaxPacketSize 0
[  117.893207][  T643] usb 4-1: config 120 interface 125 has no altsetting 0
[  117.903013][  T643] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  117.914165][  T643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.923766][  T643] usb 4-1: Product: syz
[  117.929254][  T643] usb 4-1: Manufacturer: syz
[  117.935423][  T643] usb 4-1: SerialNumber: syz
[  117.942264][ T2008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  117.957382][  T378] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  118.071152][ T2028] syz.0.538(2028): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  118.107243][  T378] usb 2-1: Using ep0 maxpacket: 16
[  118.116739][  T378] usb 2-1: unable to get BOS descriptor or descriptor too short
[  118.129090][  T378] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.140044][  T378] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  118.153915][  T378] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  118.157656][ T2008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.171257][  T378] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  118.184881][ T2008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.195632][  T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.213963][  T643] ums-usbat 4-1:120.125: USB Mass Storage device detected
[  118.213985][  T378] usb 2-1: Product: syz
[  118.230705][  T378] usb 2-1: Manufacturer: syz
[  118.236341][  T378] usb 2-1: SerialNumber: syz
[  118.249375][  T643] ums-usbat 4-1:120.125: probe with driver ums-usbat failed with error -5
[  118.275537][  T643] usb 4-1: USB disconnect, device number 41
[  118.371870][ T2036] FAULT_INJECTION: forcing a failure.
[  118.371870][ T2036] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.389813][ T2036] CPU: 0 UID: 0 PID: 2036 Comm: syz.2.541 Not tainted syzkaller #0 8bb3e00b9fe4bbf63f1335aa0aed3b34b9e01cf3
[  118.389853][ T2036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  118.389865][ T2036] Call Trace:
[  118.389871][ T2036]  <TASK>
[  118.389878][ T2036]  __dump_stack+0x21/0x30
[  118.389906][ T2036]  dump_stack_lvl+0x140/0x1c0
[  118.389929][ T2036]  ? __cfi_dump_stack_lvl+0x10/0x10
[  118.389952][ T2036]  ? check_stack_object+0x138/0x150
[  118.389970][ T2036]  dump_stack+0x19/0x20
[  118.389991][ T2036]  should_fail_ex+0x3c2/0x510
[  118.390010][ T2036]  should_fail+0xf/0x20
[  118.390025][ T2036]  should_fail_usercopy+0x1e/0x30
[  118.390044][ T2036]  _copy_to_user+0x24/0xa0
[  118.390116][ T2036]  simple_read_from_buffer+0xed/0x160
[  118.390139][ T2036]  proc_fail_nth_read+0x1aa/0x220
[  118.390162][ T2036]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  118.390185][ T2036]  ? bpf_lsm_file_permission+0xd/0x20
[  118.390206][ T2036]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  118.390229][ T2036]  vfs_read+0x28b/0xc70
[  118.390244][ T2036]  ? is_dma_buf_file+0x11/0x50
[  118.390266][ T2036]  ? __cfi_vfs_read+0x10/0x10
[  118.390280][ T2036]  ? __kasan_check_write+0x18/0x20
[  118.390296][ T2036]  ? mutex_lock+0x97/0x1d0
[  118.390315][ T2036]  ? __cfi_mutex_lock+0x10/0x10
[  118.390337][ T2036]  ksys_read+0x145/0x260
[  118.390352][ T2036]  ? __cfi_ksys_read+0x10/0x10
[  118.390368][ T2036]  ? __kasan_check_read+0x15/0x20
[  118.390383][ T2036]  __x64_sys_read+0x7f/0x90
[  118.390398][ T2036]  x64_sys_call+0x2638/0x2ee0
[  118.390413][ T2036]  do_syscall_64+0x57/0xf0
[  118.390428][ T2036]  ? clear_bhb_loop+0x50/0xa0
[  118.390448][ T2036]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  118.390467][ T2036] RIP: 0033:0x7f255875d68e
[  118.390481][ T2036] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  118.390494][ T2036] RSP: 002b:00007f2559663fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  118.390512][ T2036] RAX: ffffffffffffffda RBX: 00007f25596646c0 RCX: 00007f255875d68e
[  118.390524][ T2036] RDX: 000000000000000f RSI: 00007f25596640a0 RDI: 0000000000000006
[  118.390535][ T2036] RBP: 00007f2559664090 R08: 0000000000000000 R09: 0000000000000000
[  118.390545][ T2036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.390557][ T2036] R13: 00007f2558a16038 R14: 00007f2558a15fa0 R15: 00007fffde65e2a8
[  118.390571][ T2036]  </TASK>
[  118.744575][ T2045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.754447][  T378] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  118.765071][  T378] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  118.785841][  T378] usb 2-1: USB disconnect, device number 44
[  118.802696][ T2045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.808807][   T36] audit: type=1400 audit(1782461929.510:325): avc:  denied  { wake_alarm } for  pid=2044 comm="syz.3.545" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  118.816826][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  118.895437][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.907528][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.922733][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.934388][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.087321][  T344] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  119.107466][  T378] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  119.250063][  T344] usb 4-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[  119.265509][  T344] usb 4-1: config 192 has 0 interfaces, different from the descriptor's value: 1
[  119.278299][  T344] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3
[  119.279032][  T378] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  119.289047][  T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.299451][  T378] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.309465][  T344] usb 4-1: Product: syz
[  119.324249][  T378] usb 2-1: config 1 has no interface number 1
[  119.329722][  T344] usb 4-1: Manufacturer: syz
[  119.338133][  T378] usb 2-1: config 1 interface 223 has no altsetting 0
[  119.344531][  T344] usb 4-1: SerialNumber: syz
[  119.356458][  T378] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  119.381295][  T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.390156][  T378] usb 2-1: Product: syz
[  119.395591][  T378] usb 2-1: Manufacturer: syz
[  119.401713][  T378] usb 2-1: SerialNumber: syz
[  119.410692][  T378] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  119.420308][  T378] cdc_ncm 2-1:1.0: bind() failure
[  119.517395][ T2070] netlink: 'syz.0.553': attribute type 27 has an invalid length.
[  119.618451][  T378] usb 2-1: USB disconnect, device number 45
[  119.702944][ T2078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.714732][ T2078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.157125][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  120.165337][ T2086] SELinux:  policydb string  does not match my string SE Linux
[  120.175551][ T2086] SELinux: failed to load policy
[  120.182525][   T36] audit: type=1400 audit(1782461930.870:327): avc:  denied  { connect } for  pid=2081 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  120.207955][ T2083] netlink: 72 bytes leftover after parsing attributes in process `syz.1.559'.
[  120.219382][ T2085] netlink: 72 bytes leftover after parsing attributes in process `syz.1.559'.
[  120.231707][   T36] audit: type=1400 audit(1782461930.880:328): avc:  denied  { load_policy } for  pid=2081 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  120.266789][ T2088] overlay: Unknown parameter 'fowner'
[  120.373302][   T36] audit: type=1400 audit(1782461931.090:329): avc:  denied  { lock } for  pid=2091 comm="syz.1.562" path="socket:[15013]" dev="sockfs" ino=15013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  120.424067][ T2095] rust_binder: Failure in copy_transaction_data: EINVAL
[  120.424136][ T2095] rust_binder: 2094:2095 transaction to 2094 failed: EINVAL
[  120.472873][ T2099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'.
[  120.520955][ T2101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.539237][ T2101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.867212][  T381] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  121.029579][  T381] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  121.039542][  T381] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.053653][  T381] usb 2-1: config 1 has no interface number 1
[  121.062112][  T381] usb 2-1: config 1 interface 223 has no altsetting 0
[  121.073035][  T381] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  121.084611][  T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.095754][  T381] usb 2-1: Product: syz
[  121.106231][  T381] usb 2-1: Manufacturer: syz
[  121.111685][  T381] usb 2-1: SerialNumber: syz
[  121.118837][ T2114] overlayfs: disabling nfs_export due to verity=require
[  121.127397][ T2114] overlayfs: missing 'lowerdir'
[  121.134056][  T381] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  121.142746][  T381] cdc_ncm 2-1:1.0: bind() failure
[  121.331382][  T381] usb 2-1: USB disconnect, device number 46
[  121.354498][   T36] audit: type=1400 audit(1782461932.070:330): avc:  denied  { read } for  pid=2124 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  121.408927][   T36] audit: type=1400 audit(1782461932.130:331): avc:  denied  { setattr } for  pid=2124 comm="syz.2.573" name="" dev="pipefs" ino=13986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  121.754142][  T344] usb 4-1: USB disconnect, device number 42
[  121.782151][   T36] audit: type=1400 audit(1782461932.500:332): avc:  denied  { bind } for  pid=2132 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  121.811764][   T36] audit: type=1400 audit(1782461932.540:333): avc:  denied  { setopt } for  pid=2132 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  121.980693][ T2141] netlink: 'syz.3.578': attribute type 58 has an invalid length.
[  122.035229][   T36] audit: type=1326 audit(1782461932.750:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2147 comm="syz.3.579" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2c019ce59 code=0x0
[  122.103669][   T36] audit: type=1326 audit(1782461932.820:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz.2.580" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f255879ce59 code=0x0
[  122.892510][   T36] audit: type=1400 audit(1782461933.610:336): avc:  denied  { write } for  pid=2163 comm="syz.0.586" name="file0" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  122.997483][  T381] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  123.127313][    T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  123.149334][  T381] usb 2-1: unable to get BOS descriptor or descriptor too short
[  123.162032][  T381] usb 2-1: config 3 has an invalid interface number: 207 but max is 0
[  123.173221][  T381] usb 2-1: config 3 has no interface number 0
[  123.180886][  T381] usb 2-1: config 3 interface 207 has no altsetting 0
[  123.192123][  T381] usb 2-1: New USB device found, idVendor=0586, idProduct=3418, bcdDevice=5f.f6
[  123.203188][  T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.213513][  T381] usb 2-1: Product: syz
[  123.219610][  T381] usb 2-1: Manufacturer: syz
[  123.226066][  T381] usb 2-1: SerialNumber: syz
[  123.278593][    T9] usb 4-1: config 1 has an invalid interface number: 223 but max is 1
[  123.289162][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.301074][    T9] usb 4-1: config 1 has no interface number 1
[  123.307817][    T9] usb 4-1: config 1 interface 223 has no altsetting 0
[  123.317598][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.329791][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.339324][    T9] usb 4-1: Product: syz
[  123.344286][    T9] usb 4-1: Manufacturer: syz
[  123.351970][    T9] usb 4-1: SerialNumber: syz
[  123.361665][    T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  123.376204][    T9] cdc_ncm 4-1:1.0: bind() failure
[  123.433648][ T2156] netlink: 'syz.1.582': attribute type 22 has an invalid length.
[  123.449494][  T381] cdc_ether 2-1:3.207: More than one union descriptor, skipping ...
[  123.462080][  T381] usb 2-1: bad CDC descriptors
[  123.468876][  T381] usb 2-1: USB disconnect, device number 47
[  123.561215][  T344] usb 4-1: USB disconnect, device number 43
[  124.090203][ T2190] netlink: 'syz.0.595': attribute type 27 has an invalid length.
[  124.217264][    T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  124.377228][    T9] usb 2-1: Using ep0 maxpacket: 32
[  124.388219][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.401724][    T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  124.413768][    T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  124.427559][    T9] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  124.442902][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  124.455158][    T9] usb 2-1: config 1 interface 1 has no altsetting 0
[  124.464424][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  124.476875][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.487477][    T9] usb 2-1: Product: syz
[  124.493380][    T9] usb 2-1: Manufacturer: syz
[  124.499257][    T9] usb 2-1: SerialNumber: syz
[  124.720998][    T9] usb 2-1: selecting invalid altsetting 0
[  124.775166][ T2201] netlink: 148 bytes leftover after parsing attributes in process `syz.3.599'.
[  124.921735][    T9] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[  124.931379][    T9] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[  124.946212][    T9] usb 2-1: USB disconnect, device number 48
[  124.962960][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  125.127246][  T643] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  125.257264][    T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  125.289248][  T643] usb 4-1: unable to get BOS descriptor or descriptor too short
[  125.298722][  T643] usb 4-1: not running at top speed; connect to a high speed hub
[  125.313780][  T643] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40
[  125.325420][  T643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.334122][  T643] usb 4-1: Product: syz
[  125.339053][  T643] usb 4-1: Manufacturer: syz
[  125.345082][  T643] usb 4-1: SerialNumber: syz
[  125.417220][    T9] usb 2-1: Using ep0 maxpacket: 16
[  125.425248][    T9] usb 2-1: config 1 interface 0 altsetting 150 endpoint 0x81 has an invalid bInterval 44, changing to 9
[  125.439599][    T9] usb 2-1: config 1 interface 0 altsetting 150 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  125.455442][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  125.465507][    T9] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.40
[  125.478041][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.487867][    T9] usb 2-1: Product: 쥼歵嶟둎頻ᔁ붘ᯞ蒰Ⱌ⏃碁羹냅㲚麏ᄬᠧ⬁㸤ࠨ洍अ஀⬽ᭌ蝰͇몯㪵굿鷣⪙펇蝬⦬铫缦憡ﮔ無Ƽנ冢鯠Ȯ躘᫜᠊侦
[  125.510821][    T9] usb 2-1: Manufacturer: ♢風䐅㦓ോ㽳呸ࣜ꣺嬶杀㳈ꤊꤌፄ疭㻥ȡ퐯癿Ծ艑빾鶌养萂班㹻⑀嘏僅峒ᠨ至须ﺼ譕컄㋇ᢚ䋅ᴤ獔晖⛥ᩬ 店𥉉帹ꗏ홸ᗸ儆樸螊㖠씺悮Ǜ
[  125.535403][    T9] usb 2-1: SerialNumber: 깤柎筀薏슥뵥ꝷ냤蝀햐㗖蚝칠࿶亂餄
[  125.555592][ T2207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.566025][ T2207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.830494][ T2216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'.
[  126.178799][ T2207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.189194][ T2207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.202291][  T643] usb 4-1: incorrect wMaxPacketSize 0x3ff for BADD profile
[  126.214337][  T643] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  126.231256][  T643] usb 4-1: USB disconnect, device number 44
[  126.243750][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  126.466832][    T9] usbhid 2-1:1.0: can't add hid device: -71
[  126.478449][    T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  126.502219][    T9] usb 2-1: USB disconnect, device number 49
[  126.624278][ T2222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.635350][ T2222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.799798][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  126.799819][   T36] audit: type=1400 audit(1782461937.520:343): avc:  denied  { shutdown } for  pid=2228 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  126.817619][    T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  126.998893][    T9] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  127.010441][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.032050][    T9] usb 2-1: config 1 has no interface number 1
[  127.041188][    T9] usb 2-1: config 1 interface 223 has no altsetting 0
[  127.054805][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.065276][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.076405][    T9] usb 2-1: Product: syz
[  127.081642][    T9] usb 2-1: Manufacturer: syz
[  127.087722][  T378] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  127.097605][    T9] usb 2-1: SerialNumber: syz
[  127.106895][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  127.116752][    T9] cdc_ncm 2-1:1.0: bind() failure
[  127.161078][ T2234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.176070][ T2235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.176599][ T2234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.193277][ T2235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.247255][  T378] usb 4-1: Using ep0 maxpacket: 16
[  127.255929][  T378] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.270848][  T378] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.282372][  T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.293118][  T378] usb 4-1: Product: syz
[  127.299926][  T378] usb 4-1: Manufacturer: syz
[  127.305993][  T378] usb 4-1: SerialNumber: syz
[  127.314983][    T9] usb 2-1: USB disconnect, device number 50
[  127.526000][  T378] cdc_ncm 4-1:1.0: bind() failure
[  127.533376][  T378] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  127.542998][  T378] cdc_ncm 4-1:1.1: bind() failure
[  127.560036][  T378] usb 4-1: USB disconnect, device number 45
[  127.840425][ T2247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.853054][ T2247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.866276][ T2247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.876496][ T2247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.945694][ T2260] 9pnet_fd: Insufficient options for proto=fd
[  127.957261][   T36] audit: type=1400 audit(1782461938.680:344): avc:  denied  { create } for  pid=2259 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  128.011029][ T2265] x_tables: duplicate entry at hook 1
[  128.297317][  T378] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  128.457350][  T378] usb 2-1: Using ep0 maxpacket: 16
[  128.465795][  T378] usb 2-1: unable to get BOS descriptor or descriptor too short
[  128.475333][  T378] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50069, setting to 1024
[  128.491628][  T378] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.502865][  T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.520225][ T2290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.523206][  T378] usb 2-1: Product: syz
[  128.536499][  T378] usb 2-1: Manufacturer: syz
[  128.536948][ T2290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.544636][  T378] usb 2-1: SerialNumber: syz
[  128.963816][   T36] audit: type=1400 audit(1782461939.680:345): avc:  denied  { mounton } for  pid=2271 comm="syz.1.621" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  129.156511][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.168072][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.170924][  T378] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  129.199327][  T378] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  129.211302][  T378] usb 2-1: USB disconnect, device number 51
[  129.223564][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  129.257298][  T344] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  129.419511][  T344] usb 4-1: unable to get BOS descriptor or descriptor too short
[  129.430095][  T344] usb 4-1: not running at top speed; connect to a high speed hub
[  129.442415][  T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  129.456686][  T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  129.468502][  T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64
[  129.481129][  T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  129.493161][  T344] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5
[  129.510169][  T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  129.524253][  T344] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  129.536842][  T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.546338][  T344] usb 4-1: Product: syz
[  129.551191][  T344] usb 4-1: Manufacturer: syz
[  129.556334][  T344] usb 4-1: SerialNumber: syz
[  129.564638][  T344] usb 4-1: config 0 descriptor??
[  129.572345][ T2295] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  129.590571][  T344] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12
[  129.610385][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  129.660231][   T36] audit: type=1400 audit(1782461940.380:346): avc:  denied  { cmd } for  pid=2302 comm="iou-wrk-2303" path="socket:[16469]" dev="sockfs" ino=16469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  129.743362][   T36] audit: type=1400 audit(1782461940.460:347): avc:  denied  { execute } for  pid=2307 comm="syz.2.630" path="/proc/stat" dev="proc" ino=4026532036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
[  129.797704][  T378] usb 4-1: USB disconnect, device number 46
[  129.959822][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.977810][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.067203][    T9] usb 2-1: new low-speed USB device number 52 using dummy_hcd
[  130.089465][ T2324] fuse: Unknown parameter '�/H�%U�O��vʮ�:f��&Gw��}oT[bw���7����Q����)�m��j��8�.�<챯Tc��h`���[n
[  130.089465][ T2324] u���ȍ�0 �ΰ>o�-����%�`OX�5k��D9�TN�n1�8�ktW��ő8N�gX���|�(�Z�\6�P��'��	%O�1���N��'
[  130.187696][ T2324] fuse: Unknown parameter '�/H�%U�O��vʮ�:f��&Gw��}oT[bw���7����Q����)�m��j��8�.�<챯Tc��h`���[n
[  130.187696][ T2324] u���ȍ�0 �ΰ>o�-����%�`OX�5k��D9�TN�n1�8�ktW��ő8N�gX���|�(�Z�\6�P��'��	%O�1���N��'
[  130.225232][ T2324] fuse: Unknown parameter '�/H�%U�O��vʮ�:f��&Gw��}oT[bw���7����Q����)�m��j��8�.�<챯Tc��h`���[n
[  130.225232][ T2324] u���ȍ�0 �ΰ>o�-����%�`OX�5k��D9�TN�n1�8�ktW��ő8N�gX���|�(�Z�\6�P��'��	%O�1���N��'
[  130.252009][ T2324] fuse: Unknown parameter '�/H�%U�O��vʮ�:f��&Gw��}oT[bw���7����Q����)�m��j��8�.�<챯Tc��h`���[n
[  130.252009][ T2324] u���ȍ�0 �ΰ>o�-����%�`OX�5k��D9�TN�n1�8�ktW��ő8N�gX���|�(�Z�\6�P��'��	%O�1���N��'
[  130.279233][ T2324] fuse: Unknown parameter '�/H�%U�O��vʮ�:f��&Gw��}oT[bw���7����Q����)�m��j��8�.�<챯Tc��h`���[n
[  130.279233][ T2324] u���ȍ�0 �ΰ>o�-����%�`OX�5k��D9�TN�n1�8�ktW��ő8N�gX���|�(�Z�\6�P��'��	%O�1���N��'
[  130.290175][    T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  130.305739][ T2324] fuse: Unknown parameter '�/H�%U�O��vʮ�:f��&Gw��}oT[bw���7����Q����)�m��j��8�.�<챯Tc��h`���[n
[  130.305739][ T2324] u���ȍ�0 �ΰ>o�-����%�`OX�5k��D9�TN�n1�8�ktW��ő8N�gX���|�(�Z�\6�P��'��	%O�1���N��'
[  130.356318][    T9] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  130.386755][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  130.414479][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[  130.427062][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.437262][    T9] usb 2-1: config 0 descriptor??
[  130.443002][ T2313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  130.478698][ T2335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'.
[  130.571836][ T2339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.583204][ T2339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.662648][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  130.670415][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  130.689110][    T9] usb 2-1: USB disconnect, device number 52
[  130.718912][   T36] audit: type=1400 audit(1782461941.440:348): avc:  denied  { read } for  pid=2343 comm="syz.1.642" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  130.750294][   T36] audit: type=1400 audit(1782461941.440:349): avc:  denied  { open } for  pid=2343 comm="syz.1.642" path="/129/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  130.781523][   T36] audit: type=1400 audit(1782461941.440:350): avc:  denied  { ioctl } for  pid=2343 comm="syz.1.642" path="/129/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.067272][    T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  131.239010][    T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  131.252700][    T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  131.265711][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  131.274677][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  131.286850][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.296026][    T9] usb 2-1: Product: syz
[  131.301293][    T9] usb 2-1: Manufacturer: syz
[  131.317854][    T9] usb 2-1: SerialNumber: syz
[  131.332086][ T2344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  131.351639][ T2344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  131.361551][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  131.448280][ T2366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.458676][ T2366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.498437][ T2368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.651'.
[  131.502640][ T2369] SELinux:  Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped).
[  131.512671][   T36] audit: type=1400 audit(1782461942.220:351): avc:  denied  { relabelfrom } for  pid=2367 comm="syz.3.651" name="NETLINK" dev="sockfs" ino=16213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  131.550776][   T36] audit: type=1400 audit(1782461942.250:352): avc:  denied  { relabelto } for  pid=2367 comm="syz.3.651" name="NETLINK" dev="sockfs" ino=16213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0"
[  131.787216][  T344] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  131.948763][  T344] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  131.963280][  T344] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.974928][  T344] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  131.992425][  T344] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  132.003494][  T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.014850][  T344] usb 4-1: Product: syz
[  132.019919][  T344] usb 4-1: Manufacturer: syz
[  132.026498][  T344] usb 4-1: SerialNumber: syz
[  132.046717][  T344] usb 4-1: config 0 descriptor??
[  132.048671][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  132.048723][   T36] audit: type=1400 audit(1782461942.760:354): avc:  denied  { mount } for  pid=2381 comm="syz.2.656" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  132.059224][  T344] usb-storage 4-1:0.0: USB Mass Storage device detected
[  132.069402][   T36] audit: type=1326 audit(1782461942.780:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2381 comm="syz.2.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f255879ce59 code=0x0
[  132.111091][  T344] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  132.257445][  T378] usb 4-1: USB disconnect, device number 47
[  132.884780][   T36] audit: type=1400 audit(1782461943.600:356): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  133.466883][ T2393] netlink: 'syz.2.659': attribute type 2 has an invalid length.
[  133.656938][ T2402] tmpfs: Cannot retroactively limit inodes
[  133.749638][    T9] rtl8150 2-1:1.0: couldn't reset the device
[  133.761184][    T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  133.786004][    T9] usb 2-1: USB disconnect, device number 53
[  133.852725][ T2415] x_tables: unsorted entry at hook 1
[  134.147264][  T344] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  134.247257][    T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  134.308896][  T344] usb 4-1: config 1 has an invalid interface number: 223 but max is 1
[  134.320050][  T344] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.331878][  T344] usb 4-1: config 1 has no interface number 1
[  134.339095][  T344] usb 4-1: config 1 interface 223 has no altsetting 0
[  134.348521][  T344] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.359360][  T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.369570][  T344] usb 4-1: Product: syz
[  134.375266][  T344] usb 4-1: Manufacturer: syz
[  134.381416][  T344] usb 4-1: SerialNumber: syz
[  134.390479][  T344] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  134.399802][  T344] cdc_ncm 4-1:1.0: bind() failure
[  134.423015][    T9] usb 2-1: Using ep0 maxpacket: 16
[  134.443250][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[  134.459510][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 31, changing to 7
[  134.477244][    T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  134.491998][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.502301][    T9] usb 2-1: Product: syz
[  134.507005][    T9] usb 2-1: Manufacturer: syz
[  134.512673][    T9] usb 2-1: SerialNumber: syz
[  134.593110][  T378] usb 4-1: USB disconnect, device number 48
[  134.728156][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  134.737086][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  134.749445][    T9] usb 2-1: USB disconnect, device number 54
[  134.765708][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  135.273234][   T36] audit: type=1400 audit(1782461945.990:357): avc:  denied  { lock } for  pid=2450 comm="syz.1.677" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  135.357202][  T344] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  135.378327][   T36] audit: type=1400 audit(1782461946.100:358): avc:  denied  { execute } for  pid=2452 comm="syz.2.678" dev="tmpfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  135.403767][   T36] audit: type=1400 audit(1782461946.100:359): avc:  denied  { nosuid_transition } for  pid=2452 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1
[  135.429995][   T36] audit: type=1400 audit(1782461946.100:360): avc:  denied  { transition } for  pid=2452 comm="syz.2.678" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  135.466732][   T36] audit: type=1400 audit(1782461946.100:361): avc:  denied  { entrypoint } for  pid=2452 comm="syz.2.678" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1101 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  135.507200][   T36] audit: type=1400 audit(1782461946.100:362): avc:  denied  { noatsecure } for  pid=2452 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[  135.535977][  T344] usb 4-1: Using ep0 maxpacket: 16
[  135.543913][  T344] usb 4-1: unable to get BOS descriptor or descriptor too short
[  135.546000][ T2457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.555678][  T344] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.566631][ T2457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.581235][  T344] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  135.590254][ T2457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.601718][  T344] usb 4-1: string descriptor 0 read error: -22
[  135.613224][ T2457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.624315][  T344] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  135.636564][  T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.651015][  T344] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  135.663598][  T344] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  136.065912][  T344] usb 4-1: 2:1 : can't get Cluster Descriptor
[  136.077918][  T378] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  136.238777][  T378] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  136.248418][  T378] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.262188][  T378] usb 2-1: config 1 has no interface number 1
[  136.270107][  T378] usb 2-1: config 1 interface 223 has no altsetting 0
[  136.279803][  T344] usb 4-1: USB disconnect, device number 49
[  136.284645][  T378] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.301127][  T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.310050][  T378] usb 2-1: Product: syz
[  136.314768][  T378] usb 2-1: Manufacturer: syz
[  136.320439][  T378] usb 2-1: SerialNumber: syz
[  136.328303][  T378] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  136.335698][  T378] cdc_ncm 2-1:1.0: bind() failure
[  136.530372][  T378] usb 2-1: USB disconnect, device number 55
[  136.625962][ T2483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2483 comm=syz.0.687
[  136.626779][ T2484] netlink: 'syz.0.687': attribute type 11 has an invalid length.
[  136.799693][ T2490] syzkaller1: entered promiscuous mode
[  136.805570][ T2490] syzkaller1: entered allmulticast mode
[  136.876846][ T2494] kvm: MWAIT instruction emulated as NOP!
[  137.023787][ T2498] syzkaller1: entered promiscuous mode
[  137.030062][ T2498] syzkaller1: entered allmulticast mode
[  137.268164][ T2510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.695'.
[  137.307263][  T378] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  137.396550][ T2521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'.
[  137.497260][  T378] usb 2-1: Using ep0 maxpacket: 8
[  137.515558][  T378] usb 2-1: config 3 has an invalid interface number: 45 but max is 0
[  137.530042][  T378] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  137.531419][  T344] usb 4-1: new low-speed USB device number 50 using dummy_hcd
[  137.551558][  T378] usb 2-1: config 3 has no interface number 0
[  137.568620][  T378] usb 2-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7
[  137.597164][  T378] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.616675][  T378] usb 2-1: config 3 interface 45 has no altsetting 0
[  137.626198][  T378] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  137.640044][  T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.654946][ T2528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.665760][  T378] usb 2-1: Product: syz
[  137.670325][  T378] usb 2-1: Manufacturer: syz
[  137.676530][ T2528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.685633][  T378] usb 2-1: SerialNumber: syz
[  137.768812][ T2532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'.
[  137.782971][ T2533] overlayfs: failed to clone upperpath
[  137.869060][   T36] audit: type=1400 audit(1782461948.590:363): avc:  denied  { name_bind } for  pid=2536 comm="syz.0.705" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  137.912344][  T378] usb 2-1: USB disconnect, device number 56
[  137.928225][  T653] udevd[653]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  138.007391][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.017472][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.451884][   T36] audit: type=1400 audit(1782461949.170:364): avc:  denied  { read } for  pid=2549 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  138.503865][ T2554] netlink: 188 bytes leftover after parsing attributes in process `syz.0.712'.
[  138.549347][ T2561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'.
[  138.602572][ T2567] 9pnet_fd: Insufficient options for proto=fd
[  139.109030][ T2571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.120507][ T2571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.494843][   T36] audit: type=1400 audit(1782461950.210:365): avc:  denied  { map } for  pid=2589 comm="syz.3.725" path="/dev/ashmem" dev="devtmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  139.667367][  T378] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  139.712714][ T2597] netlink: 'syz.0.727': attribute type 4 has an invalid length.
[  139.723228][ T2597] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.727'.
[  139.764622][ T2603] netlink: 'syz.0.728': attribute type 1 has an invalid length.
[  139.773963][ T2603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'.
[  139.785890][ T2603] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.829524][  T378] usb 2-1: config 0 has no interfaces?
[  139.836580][  T378] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  139.849561][  T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.861204][  T378] usb 2-1: config 0 descriptor??
[  139.883295][ T2607] netlink: 'syz.0.730': attribute type 27 has an invalid length.
[  140.069296][  T378] usb 2-1: USB disconnect, device number 57
[  140.358319][ T2616] cgroup: fork rejected by pids controller in /syz3
[  140.569281][   T36] audit: type=1400 audit(1782461951.290:366): avc:  denied  { setattr } for  pid=2657 comm="syz.0.736" name="AF_VSOCK" dev="sockfs" ino=18504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  140.667322][  T643] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  140.755264][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.767801][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.828629][  T643] usb 4-1: config 1 has an invalid interface number: 223 but max is 1
[  140.839354][  T643] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.857905][ T2685] rust_binder: Failure in copy_transaction_data: EFAULT
[  140.857940][ T2685] rust_binder: 2684:2685 transaction to 2684 failed: EFAULT
[  140.866297][  T643] usb 4-1: config 1 has no interface number 1
[  140.886953][  T643] usb 4-1: config 1 interface 223 has no altsetting 0
[  140.897073][  T643] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  140.910110][  T643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.922010][  T643] usb 4-1: Product: syz
[  140.928296][  T643] usb 4-1: Manufacturer: syz
[  140.936269][  T643] usb 4-1: SerialNumber: syz
[  140.949734][  T643] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  140.959959][  T643] cdc_ncm 4-1:1.0: bind() failure
[  141.152165][    T9] usb 4-1: USB disconnect, device number 51
[  141.310980][ T2695] 8021q: VLANs not supported on tunl0
[  141.528887][   T36] audit: type=1400 audit(1782461952.250:367): avc:  denied  { accept } for  pid=2704 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  141.849474][ T2712] can0: slcan on ttyS3.
[  142.027831][ T2712] can0 (unregistered): slcan off ttyS3.
[  142.041630][ T2747] fuse: Bad value for 'fd'
[  142.057176][    T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  142.238246][    T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  142.260463][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.285436][    T9] usb 2-1: config 0 descriptor??
[  142.316023][ T2774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.318043][   T36] audit: type=1400 audit(1782461953.030:368): avc:  denied  { setopt } for  pid=2773 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  142.328639][ T2774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.530898][    T9] usb 2-1: Cannot read MAC address
[  142.537810][    T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  142.557450][    T9] usb 2-1: USB disconnect, device number 58
[  142.879714][   T36] audit: type=1400 audit(1782461953.600:369): avc:  denied  { read append } for  pid=2779 comm="syz.2.765" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  142.909152][   T36] audit: type=1400 audit(1782461953.600:370): avc:  denied  { open } for  pid=2779 comm="syz.2.765" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  142.937682][   T36] audit: type=1400 audit(1782461953.600:371): avc:  denied  { ioctl } for  pid=2779 comm="syz.2.765" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  142.990025][ T2784] netlink: 'syz.2.765': attribute type 4 has an invalid length.
[  142.999895][ T2784] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.765'.
[  143.013444][ T2784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.024138][ T2784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.035713][   T36] audit: type=1400 audit(1782461953.760:372): avc:  denied  { connect } for  pid=2779 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  143.080009][   T36] audit: type=1400 audit(1782461953.800:373): avc:  denied  { map } for  pid=2785 comm="syz.1.766" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  143.109286][   T36] audit: type=1400 audit(1782461953.800:374): avc:  denied  { execute } for  pid=2785 comm="syz.1.766" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  143.732592][ T2797] netlink: 'syz.3.769': attribute type 4 has an invalid length.
[  144.027267][  T643] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  144.188722][  T643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.202739][  T643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.213274][  T643] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  144.223368][  T643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.235090][  T643] usb 4-1: config 0 descriptor??
[  144.305395][   T36] audit: type=1400 audit(1782461955.020:375): avc:  denied  { getopt } for  pid=2805 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  144.333984][   T36] audit: type=1400 audit(1782461955.050:376): avc:  denied  { mount } for  pid=2805 comm="syz.2.773" name="/" dev="configfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  144.337908][ T2807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.367484][   T36] audit: type=1400 audit(1782461955.050:377): avc:  denied  { search } for  pid=2805 comm="syz.2.773" name="/" dev="configfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.377978][ T2807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.405155][   T36] audit: type=1400 audit(1782461955.050:378): avc:  denied  { write } for  pid=2805 comm="syz.2.773" name="/" dev="configfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.650471][  T643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  144.660344][  T643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  144.668472][  T643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  144.677561][  T643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  144.686540][  T643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  144.693993][  T643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  144.703288][  T643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  144.712084][  T643] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  144.844588][ T2812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  144.854922][  T643] cp2112 0003:10C4:EA90.000A: error requesting version
[  144.864950][  T643] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32
[  145.165429][ T2823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.180218][ T2823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.708964][ T2825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.718950][ T2825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.854312][ T2830] 9pnet_fd: Insufficient options for proto=fd
[  146.242856][ T2834] fuse: Unknown parameter '����
�(@}A!�y��0x0000000000000003'
[  146.337240][    T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  146.489821][ T2863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.787'.
[  146.501952][    T9] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  146.518731][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.536312][    T9] usb 2-1: config 1 has no interface number 1
[  146.550840][    T9] usb 2-1: config 1 interface 223 has no altsetting 0
[  146.566241][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  146.577901][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.587392][    T9] usb 2-1: Product: syz
[  146.592986][    T9] usb 2-1: Manufacturer: syz
[  146.599747][    T9] usb 2-1: SerialNumber: syz
[  146.613532][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  146.623590][    T9] cdc_ncm 2-1:1.0: bind() failure
[  146.796690][  T643] usb 4-1: USB disconnect, device number 52
[  146.819938][    T9] usb 2-1: USB disconnect, device number 59
[  147.147223][  T643] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  147.308460][  T643] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  147.327503][  T643] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  147.343437][  T643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.356736][  T643] usb 4-1: config 0 descriptor??
[  147.509375][ T2872] syz.2.791 (2872): attempted to duplicate a private mapping with mremap.  This is not supported.
[  147.523228][ T2872] 9pnet_fd: Insufficient options for proto=fd
[  147.768956][  T643] uclogic 0003:28BD:0055.000B: interface is invalid, ignoring
[  147.958471][ T2888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  147.971582][ T2888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  147.986009][  T312] usb 4-1: USB disconnect, device number 53
[  148.064019][ T2890] netlink: 26148 bytes leftover after parsing attributes in process `syz.2.795'.
[  148.077781][ T2890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'.
[  148.497228][    T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  148.549918][ T2913] netlink: 'syz.3.803': attribute type 11 has an invalid length.
[  148.668754][    T9] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  148.678905][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.692253][    T9] usb 2-1: config 1 has no interface number 1
[  148.702118][    T9] usb 2-1: config 1 interface 223 has no altsetting 0
[  148.711599][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.722186][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.732556][    T9] usb 2-1: Product: syz
[  148.738707][    T9] usb 2-1: Manufacturer: syz
[  148.744010][    T9] usb 2-1: SerialNumber: syz
[  148.752478][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  148.761516][    T9] cdc_ncm 2-1:1.0: bind() failure
[  148.817339][  T378] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  148.953610][    T9] usb 2-1: USB disconnect, device number 60
[  148.977246][  T378] usb 4-1: Using ep0 maxpacket: 32
[  148.985548][  T378] usb 4-1: unable to get BOS descriptor or descriptor too short
[  149.002024][  T378] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  149.016569][  T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.025767][  T378] usb 4-1: Product: syz
[  149.031163][  T378] usb 4-1: Manufacturer: syz
[  149.036554][  T378] usb 4-1: SerialNumber: syz
[  149.114739][ T2925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  149.127410][ T2925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'.
[  149.245195][  T378] usb 4-1: unit 4 not found!
[  149.250953][  T378] usb 4-1: unit 0 not found!
[  149.445249][ T2913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.457249][ T2913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.478052][ T2913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.490693][ T2913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.706741][ T2913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.717928][ T2913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.729110][ T2913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.740102][    T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  149.740418][ T2913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.760744][  T378] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  149.774890][  T378] usb 4-1: unit 4 not found!
[  149.780623][  T378] usb 4-1: unit 0 not found!
[  149.788358][  T378] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  149.800673][  T378] usb 4-1: unit 4 not found!
[  149.807469][  T378] usb 4-1: unit 0 not found!
[  149.819552][  T378] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  149.831533][  T378] usb 4-1: USB disconnect, device number 54
[  149.845432][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  149.867528][    T9] usb 2-1: device descriptor read/64, error -71
[  150.117754][    T9] usb 2-1: device descriptor read/64, error -71
[  150.357200][    T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  150.393562][   T36] kauditd_printk_skb: 8875 callbacks suppressed
[  150.393581][   T36] audit: type=1326 audit(1782461961.110:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2947 comm="syz.3.814" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2c019ce59 code=0x0
[  150.497226][    T9] usb 2-1: device descriptor read/64, error -71
[  150.737265][    T9] usb 2-1: device descriptor read/64, error -71
[  150.858247][    T9] usb usb2-port1: attempt power cycle
[  150.868695][   T36] audit: type=1400 audit(1782461961.590:9255): avc:  denied  { read } for  pid=2950 comm="syz.2.815" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.898092][   T36] audit: type=1400 audit(1782461961.590:9256): avc:  denied  { open } for  pid=2950 comm="syz.2.815" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.924547][ T2952] netlink: 80 bytes leftover after parsing attributes in process `syz.2.815'.
[  150.942745][ T2951] exFAT-fs (rnullb0): invalid boot record signature
[  150.950566][ T2951] exFAT-fs (rnullb0): failed to read boot sector
[  150.959144][ T2951] exFAT-fs (rnullb0): failed to recognize exfat type
[  150.995025][   T36] audit: type=1400 audit(1782461961.710:9257): avc:  denied  { bpf } for  pid=2953 comm="syz.2.816" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.207406][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  151.249645][    T9] usb 2-1: device descriptor read/8, error -71
[  151.388422][    T9] usb 2-1: device descriptor read/8, error -71
[  151.477243][  T643] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  151.629201][  T643] usb 4-1: config 1 has an invalid interface number: 223 but max is 1
[  151.641856][  T643] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.647354][    T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  151.653758][  T643] usb 4-1: config 1 has no interface number 1
[  151.672197][  T643] usb 4-1: config 1 interface 223 has no altsetting 0
[  151.682917][  T643] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.688770][    T9] usb 2-1: device descriptor read/8, error -71
[  151.695719][  T643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.712378][  T643] usb 4-1: Product: syz
[  151.717075][  T643] usb 4-1: Manufacturer: syz
[  151.722542][  T643] usb 4-1: SerialNumber: syz
[  151.735607][  T643] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  151.744302][  T643] cdc_ncm 4-1:1.0: bind() failure
[  151.828443][    T9] usb 2-1: device descriptor read/8, error -71
[  151.937065][  T643] usb 4-1: USB disconnect, device number 55
[  151.957333][    T9] usb usb2-port1: unable to enumerate USB device
[  152.607346][ T2981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.627398][ T2981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.037197][  T643] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  153.168690][   T36] audit: type=1400 audit(1782461963.890:9258): avc:  denied  { write } for  pid=3005 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  153.194765][   T36] audit: type=1400 audit(1782461963.910:9259): avc:  denied  { accept } for  pid=3005 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  153.197321][  T643] usb 4-1: Using ep0 maxpacket: 32
[  153.227305][  T643] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  153.239149][  T643] usb 4-1: config 0 has no interface number 0
[  153.248970][  T643] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  153.260414][  T643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.271264][  T643] usb 4-1: Product: syz
[  153.276538][  T643] usb 4-1: Manufacturer: syz
[  153.283544][  T643] usb 4-1: SerialNumber: syz
[  153.293764][  T643] usb 4-1: config 0 descriptor??
[  153.303027][  T643] smsc95xx v2.0.0
[  153.902320][  T643] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  153.916861][  T643] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  153.917698][    T9] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  153.939757][  T643] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  153.955475][  T643] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  153.969496][  T643] usb 4-1: USB disconnect, device number 56
[  154.088469][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  154.104468][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  154.123381][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00
[  154.134828][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.149209][    T9] usb 2-1: config 0 descriptor??
[  154.150090][ T3028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.163440][ T3013] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  154.166894][ T3028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.187791][ T3028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.198029][ T3028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.462622][   T36] audit: type=1326 audit(1782461965.180:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3031 comm="syz.0.844" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94fd59ce59 code=0x0
[  154.587317][    T9] wacom 0003:056A:00B0.000C: unknown main item tag 0x7
[  154.596263][    T9] wacom 0003:056A:00B0.000C: unknown main item tag 0x0
[  154.605517][    T9] wacom 0003:056A:00B0.000C: unknown main item tag 0x1
[  154.614705][    T9] wacom 0003:056A:00B0.000C: unknown main item tag 0xd
[  154.623384][    T9] wacom 0003:056A:00B0.000C: Unknown device_type for 'HID 056a:00b0'. Assuming pen.
[  154.634981][    T9] wacom 0003:056A:00B0.000C: hidraw0: USB HID v0.77 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0
[  154.657211][    T9] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.000C/input/input14
[  154.674092][   T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  154.786558][ T3013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.799079][ T3013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.810720][    T9] usb 2-1: USB disconnect, device number 65
[  154.828472][   T10] usb 4-1: config 1 has an invalid interface number: 223 but max is 1
[  154.841089][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.853781][   T10] usb 4-1: config 1 has no interface number 1
[  154.861695][   T10] usb 4-1: config 1 interface 223 has no altsetting 0
[  154.875456][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  154.886446][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.896344][   T10] usb 4-1: Product: syz
[  154.901420][   T10] usb 4-1: Manufacturer: syz
[  154.906759][   T10] usb 4-1: SerialNumber: syz
[  154.914806][   T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  154.925658][   T10] cdc_ncm 4-1:1.0: bind() failure
[  155.117567][  T344] usb 4-1: USB disconnect, device number 57
[  155.322603][   T36] audit: type=1400 audit(1782461966.040:9261): avc:  denied  { audit_read } for  pid=3043 comm="syz.0.847" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  155.346483][ T3044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.847'.
[  155.402879][ T3044] team_slave_1: entered promiscuous mode
[  155.410592][ T3044] team_slave_1: entered allmulticast mode
[  155.607233][    T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  155.621004][   T36] audit: type=1400 audit(1782461966.340:9262): avc:  denied  { execmem } for  pid=3064 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  155.682198][ T3072] sit0: entered promiscuous mode
[  155.711113][ T3072] netlink: 'syz.2.851': attribute type 1 has an invalid length.
[  155.723787][ T3072] netlink: 'syz.2.851': attribute type 3 has an invalid length.
[  155.729679][   T36] audit: type=1400 audit(1782461966.450:9263): avc:  denied  { create } for  pid=3074 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  155.791181][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  155.802853][    T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30
[  155.817457][    T9] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  155.834214][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  155.846003][    T9] usb 2-1: string descriptor 0 read error: -22
[  155.854703][    T9] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40
[  155.867356][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.951696][   T36] audit: type=1400 audit(1782461966.670:9264): avc:  denied  { create } for  pid=3079 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  155.975826][   T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  156.127351][   T10] usb 4-1: Using ep0 maxpacket: 8
[  156.137394][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  156.150953][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[  156.162512][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.172089][   T10] usb 4-1: Product: syz
[  156.176847][   T10] usb 4-1: Manufacturer: syz
[  156.183201][   T10] usb 4-1: SerialNumber: syz
[  156.278730][ T3046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.290104][ T3046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.304149][    T9] monterey 0003:0566:3004.000D: unknown main item tag 0xd
[  156.313120][    T9] monterey 0003:0566:3004.000D: report_id 0 is invalid
[  156.321009][    T9] monterey 0003:0566:3004.000D: item 0 0 1 8 parsing failed
[  156.330263][    T9] monterey 0003:0566:3004.000D: probe with driver monterey failed with error -22
[  156.393662][   T10] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  156.404221][   T10] usb 4-1: 1:1 : sample bitwidth 252 in over sample bytes 4
[  156.415551][   T10] usb 4-1: failed to enable PITCH for EP 0x1
[  156.425249][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  156.438042][   T10] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  156.449876][   T10] usb 4-1: 1:1 : sample bitwidth 252 in over sample bytes 4
[  156.460368][   T10] usb 4-1: failed to enable PITCH for EP 0x1
[  156.468262][   T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  156.480704][   T10] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  156.490632][   T10] usb 4-1: 1:1 : sample bitwidth 252 in over sample bytes 4
[  156.501665][   T10] usb 4-1: failed to enable PITCH for EP 0x1
[  156.518966][   T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  156.531441][    T9] usb 2-1: USB disconnect, device number 66
[  156.550148][   T10] usb 4-1: USB disconnect, device number 58
[  156.569074][  T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  156.621015][ T3104] tipc: Started in network mode
[  156.626017][ T3104] tipc: Node identity bacfa0676e2c, cluster identity 4711
[  156.636368][ T3104] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.644377][ T3104] syzkaller0: entered allmulticast mode
[  156.651328][ T3103] tipc: Disabling bearer <eth:syzkaller0>
[  156.770573][   T36] audit: type=1400 audit(1782461967.490:9265): avc:  denied  { execute_no_trans } for  pid=3105 comm="syz.2.861" path="/259/file0" dev="tmpfs" ino=1411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  156.897402][    T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  156.980273][ T3110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.992092][ T3110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.058741][    T9] usb 2-1: config 1 has an invalid interface number: 223 but max is 1
[  157.069431][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.084100][    T9] usb 2-1: config 1 has no interface number 1
[  157.090741][    T9] usb 2-1: config 1 interface 223 has no altsetting 0
[  157.102078][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.114089][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.124294][    T9] usb 2-1: Product: syz
[  157.129265][    T9] usb 2-1: Manufacturer: syz
[  157.134994][    T9] usb 2-1: SerialNumber: syz
[  157.143125][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  157.152117][    T9] cdc_ncm 2-1:1.0: bind() failure
[  157.345387][   T36] audit: type=1400 audit(1782461968.060:9266): avc:  denied  { write } for  pid=3101 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  157.346618][    T9] usb 2-1: USB disconnect, device number 67
[  157.373485][   T36] audit: type=1400 audit(1782461968.060:9267): avc:  denied  { nlmsg_write } for  pid=3101 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  157.501795][ T3123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.867'.
[  157.513549][ T3123] gre0: entered allmulticast mode
[  157.539918][ T3125] No source specified
[  157.545394][ T3126] No source specified
[  157.552591][   T36] audit: type=1400 audit(1782461968.280:9268): avc:  denied  { create } for  pid=3127 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  157.580354][ T3125] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  157.601038][   T36] audit: type=1400 audit(1782461968.320:9269): avc:  denied  { write } for  pid=3124 comm="syz.2.868" name="unix" dev="proc" ino=4026532337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  157.609819][ T3125] ------------[ cut here ]------------
[  157.633832][ T3125] WARNING: CPU: 0 PID: 3125 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0
[  157.640026][ T3126] incfs: Error allocating mount info. -12
[  157.644388][ T3125] Modules linked in:
[  157.653901][ T3126] incfs: mount failed -12
[  157.654862][ T3125] CPU: 0 UID: 0 PID: 3125 Comm: syz.2.868 Not tainted syzkaller #0 8bb3e00b9fe4bbf63f1335aa0aed3b34b9e01cf3
[  157.673825][ T3125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  157.685267][ T3125] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0
[  157.691543][ T3125] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 db 0b 06 00 0f 85 c2 00 00 00 c6 05 95 db 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24
[  157.715321][ T3125] RSP: 0018:ffffc9000fd0f880 EFLAGS: 00010246
[  157.721788][ T3125] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000
[  157.731065][ T3125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000fd0f938
[  157.741071][ T3125] RBP: ffffc9000fd0f9a8 R08: ffffc9000fd0f937 R09: 0000000000000000
[  157.749572][ T3125] R10: ffffc9000fd0f920 R11: fffff52001fa1f27 R12: ffffc9000fd0f8c0
[  157.762255][ T3125] R13: dffffc0000000000 R14: 1ffff92001fa1f14 R15: 0000000000000000
[  157.772636][ T3125] FS:  00007f25596646c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  157.784232][ T3125] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  157.792859][ T3125] CR2: 00007f94fd5ea540 CR3: 000000011927e000 CR4: 00000000003526b0
[  157.802168][ T3125] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  157.812372][ T3125] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  157.823663][ T3125] Call Trace:
[  157.827557][ T3125]  <TASK>
[  157.831324][ T3125]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  157.838024][ T3125]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  157.846587][ T3125]  ? incfs_realloc_mount_info+0xa7/0x4c0
[  157.854096][ T3125]  ___kmalloc_large_node+0x81/0x220
[  157.860805][ T3125]  ? incfs_realloc_mount_info+0xa7/0x4c0
[  157.868058][ T3125]  __kmalloc_large_node_noprof+0x1e/0xd0
[  157.876606][ T3125]  ? incfs_realloc_mount_info+0xa7/0x4c0
[  157.884890][ T3125]  __kmalloc_noprof+0x326/0x510
[  157.891263][ T3125]  ? __cfi_lockref_get+0x10/0x10
[  157.898360][ T3125]  incfs_realloc_mount_info+0xa7/0x4c0
[  157.905499][ T3125]  ? incfs_add_sysfs_node+0x118/0x230
[  157.912917][ T3125]  ? __kasan_check_write+0x18/0x20
[  157.919792][ T3125]  incfs_alloc_mount_info+0x478/0x5f0
[  157.927258][ T3125]  incfs_mount_fs+0x3ca/0x970
[  157.934071][ T3125]  ? __cfi_incfs_mount_fs+0x10/0x10
[  157.940177][ T3125]  ? selinux_capable+0x38/0x50
[  157.945894][ T3125]  legacy_get_tree+0x103/0x1b0
[  157.951795][ T3125]  ? __cfi_incfs_mount_fs+0x10/0x10
[  157.957984][ T3125]  vfs_get_tree+0x9e/0x290
[  157.962631][ T3125]  do_new_mount+0x251/0xb40
[  157.970240][ T3125]  ? security_capable+0x44/0x130
[  157.976773][ T3125]  path_mount+0x66a/0xff0
[  157.982380][ T3125]  ? putname+0x113/0x150
[  157.987886][ T3125]  __se_sys_mount+0x2bf/0x480
[  157.994093][ T3125]  ? __x64_sys_mount+0xf0/0xf0
[  158.001860][ T3125]  ? __kasan_check_write+0x18/0x20
[  158.009572][ T3125]  ? fpregs_restore_userregs+0x11c/0x260
[  158.016425][ T3125]  __x64_sys_mount+0xc3/0xf0
[  158.022174][ T3125]  x64_sys_call+0x2021/0x2ee0
[  158.027797][ T3125]  do_syscall_64+0x57/0xf0
[  158.033648][ T3125]  ? clear_bhb_loop+0x50/0xa0
[  158.041952][ T3125]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  158.049202][ T3125] RIP: 0033:0x7f255879ce59
[  158.053853][ T3125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.077177][ T3125] RSP: 002b:00007f2559664028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  158.087557][ T3125] RAX: ffffffffffffffda RBX: 00007f2558a15fa0 RCX: 00007f255879ce59
[  158.098074][ T3125] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000000
[  158.107241][ T3125] RBP: 00007f2558832e6f R08: 00002000000002c0 R09: 0000000000000000
[  158.117397][ T3125] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000
[  158.127448][ T3125] R13: 00007f2558a16038 R14: 00007f2558a15fa0 R15: 00007fffde65e2a8
[  158.137978][ T3125]  </TASK>
[  158.141270][ T3125] ---[ end trace 0000000000000000 ]---
[  158.147346][ T3125] incfs: Error allocating mount info. -12
[  158.155607][ T3125] incfs: mount failed -12