last executing test programs:

1m5.4240966s ago: executing program 0 (id=258):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0xffffffff}}, 0x2e)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
setreuid(0xee01, 0xee01)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x3, 0x4)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
r3 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x8, &(0x7f0000000940)=[{}, {0xfffffffffffffff9, 0x9, 0x5}], 0x2, 0x1, 0x0, 0x0, 0x0, 0x42})

1m5.408239412s ago: executing program 0 (id=259):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_connect(0x3, 0x3a, &(0x7f00000018c0)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c03209"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0)
close_range(r0, r0, 0x2)

1m4.211077375s ago: executing program 0 (id=262):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x80002, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0)

1m2.90547288s ago: executing program 0 (id=274):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000)

1m2.892226212s ago: executing program 0 (id=275):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000740), 0x2)
r2 = memfd_create(&(0x7f0000000780)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x11, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='27', 0x2)
socket$nl_route(0x10, 0x3, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000007010e000000726f630007a22072"], 0x12)
syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff)
syz_usb_connect$cdc_ecm(0x5, 0x81, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x1, 0x20, 0x9f, "", [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x2, 0x6, 0x0, 0xf, {{0x6, 0x24, 0x6, 0x0, 0x0, "a7"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xe87c, 0xbbf, 0x1, 0x2e}, [@ncm={0x6, 0x24, 0x1a, 0x1ff, 0x3c}, @acm={0x4}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x12}, @obex={0x5, 0x24, 0x15, 0x1}, @mdlm={0x15}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x64, 0xc0}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x2e, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0x3, 0xf7}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0xe0, 0x9, 0x8a, 0xff, 0xa}, 0x19, &(0x7f0000000700)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "cffee3a928ac35919b55cea95d58f52e"}]}, 0x2, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x41b}}]})
r5 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0xfffffffffffff000, 0x2000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
preadv2(r6, 0x0, 0x0, 0xffffffff, 0x8000, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_clone(0x0, &(0x7f0000000200)="a49d82728744599883065409f34928a77fcabaee8f6f56a362b9edd720a3869d345251b0190b7e009611cfebc1d14fcf15756e74e7877cb5b46c5e2ea50124167a2e78f0aaf1743857d424aa5d0dd9acf1743fe1b499adb62caae0959675a07da1ebd79d686e1709e94b16890ab52dfbb206dea56a687c971fba5164e16f1bb4fbf516b50c18b38a72a6c3f113931d7e9e73fd33a8fe17023bfb5fc0cbacb51f2a20e7b9d572486da67a93b72c41ecb532a68653e1a9e4d0aef7b71d1801f698dd06078ff38f9db6f3eb95790fd3847bd537c1c791949f59f47bbde14fc8262ec850b5630156d1b2a56855e8e9a02cdc5ba23a67f2da4f0805bd4982d09e4ac8ee0f13c8907ac978961b107294f3e30f276aade437593e388798cef4319fdc571ccc5c5e47b68545d9d4947ede5d33820fb516bab9e0c81da497755c", 0x13c, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000180)="c248c2d710ec6d7f8121c2506ce07d80abd90fe17deaee85304496c6eebfaa8e140969260d21ae4e88c3178b68c2fc845299718fc13243989110723f667d8c4555d68f21fc74ff34553d8a59efaa1610ac5fbf81ac8dfab850e9ae3e7f4b7b172e5777cbb6966e922aff589f4280c99091e9")
mount$cgroup2(0x0, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', &(0x7f0000000480), 0x850, &(0x7f00000004c0)={[{@memory_localevents}, {@memory_hugetlb_accounting}, {}, {@memory_localevents}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@subj_role={'subj_role', 0x3d, '[{!$.!.(.:{.!/@\f{#'}}]})

1m1.340325682s ago: executing program 0 (id=284):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_connect(0x3, 0x3a, &(0x7f00000018c0)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c032090400000102090000052400100105"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0)
close_range(r0, r0, 0x2)

1m0.087355291s ago: executing program 2 (id=292):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000)

1m0.018860998s ago: executing program 2 (id=293):
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0xfffffff5, &(0x7f0000000340)=[{&(0x7f0000000380)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="d9", 0x5dc}, {0x0}], 0x2}, 0x890)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0))

59.155482207s ago: executing program 2 (id=299):
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x840482, 0x1b7)
clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0xfffffffffffffffe)
write(r0, &(0x7f00000005c0)='3', 0x4e)

57.926508194s ago: executing program 2 (id=309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000300)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./my_sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffffe}]}, 0x1c}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './my_sys/bus/pci/devices/0000:00:01.0/config', [], 0xa, "ee7c51b71f"}, 0x35)
read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020)
umount2(&(0x7f00000002c0)='./file0\x00', 0xc)
sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x10, 0x10, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)

57.812156286s ago: executing program 2 (id=310):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs]})

57.691195668s ago: executing program 2 (id=312):
r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48})
r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20000, 0x2a)
move_mount(r4, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x107)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000100)={0x2, 0x110000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, r1})
lstat(&(0x7f0000055b40)='./file0\x00', &(0x7f0000055b80))
getegid()
getuid()
stat(&(0x7f0000055c00)='./file0\x00', &(0x7f0000055c40))
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setsig(0x4203, r5, 0xa, &(0x7f0000055cc0)={0xd, 0x8, 0x8})
read$FUSE(0xffffffffffffffff, &(0x7f0000055d40)={0x2020}, 0x2020)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000058040))
fstat(r1, &(0x7f00000580c0))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x859, 0xb, 0x2fa, 0x100000001, 0x3, 0x100076c, 0xffffffffffffa594, 0x7, 0xfff, 0x3, 0x2, 0x3, 0x3, 0xbd, 0x6], 0x0, 0x4250})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

57.605542997s ago: executing program 32 (id=312):
r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48})
r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20000, 0x2a)
move_mount(r4, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x107)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000100)={0x2, 0x110000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, r1})
lstat(&(0x7f0000055b40)='./file0\x00', &(0x7f0000055b80))
getegid()
getuid()
stat(&(0x7f0000055c00)='./file0\x00', &(0x7f0000055c40))
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setsig(0x4203, r5, 0xa, &(0x7f0000055cc0)={0xd, 0x8, 0x8})
read$FUSE(0xffffffffffffffff, &(0x7f0000055d40)={0x2020}, 0x2020)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000058040))
fstat(r1, &(0x7f00000580c0))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x859, 0xb, 0x2fa, 0x100000001, 0x3, 0x100076c, 0xffffffffffffa594, 0x7, 0xfff, 0x3, 0x2, 0x3, 0x3, 0xbd, 0x6], 0x0, 0x4250})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

45.962616108s ago: executing program 33 (id=284):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_connect(0x3, 0x3a, &(0x7f00000018c0)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c032090400000102090000052400100105"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0)
close_range(r0, r0, 0x2)

6.518847867s ago: executing program 1 (id=643):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r1, &(0x7f0000000340)=""/16384, 0x4000)

3.518979637s ago: executing program 1 (id=656):
ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000000))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00')
chmod(&(0x7f00000000c0)='./file0\x00', 0x234)
lchown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x60840, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x108})
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000e36000/0x4000)=nil, &(0x7f000044d000/0x3000)=nil, 0x4000, 0x3})

3.514218457s ago: executing program 5 (id=657):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x2) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'pim6reg0\x00', {0x401}, 0xfff}) (async)
r5 = socket$inet6(0xa, 0x4, 0xa) (async)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000000c0), 0x4) (async)
connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x8, @none, 0x6}, 0xe) (async)
r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000180)=""/138, &(0x7f0000000240)=0x8a)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000002c0)={r3, r1, 0x0, 0x23, &(0x7f0000000280)="78a0e4c1618244516a12c09f9c1e08b83cb2afb672530a195ebe2cf9ee6ba76eeb8ab7", 0x7, 0x18, 0x0, 0x2, 0x4, 0x1, 0xf5d8, 'syz0\x00'}) (async)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000005c0)={0x32, 0xf7}, 0x2) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={<r7=>0xffffffffffffffff})
r8 = socket$igmp6(0xa, 0x3, 0x2)
quotactl_fd$Q_SYNC(r8, 0xffffffff80000102, 0x0, 0x0) (async)
ioctl$TCSETA(r6, 0x5406, &(0x7f0000000640)={0x5, 0x3, 0x9, 0x3, 0x19, "b989c8b53b93c6f1"})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x6) (async)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r2)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000810)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000840)) (async)
ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000008c0)={0x9, 0x0, [{0x1, 0x0, 0x5}, {0xd, 0x0, 0x4}, {0x3, 0x0, 0xcc}, {0x6, 0x0, 0x6}, {0xf, 0x0, 0x6}, {0xd7b, 0x0, 0x171}, {0x0, 0x0, 0x2}, {0x772c, 0x0, 0x5}, {0xfffffffa, 0x0, 0x1}, {0xec6a, 0x0, 0x1}, {0x42ec, 0x0, 0x6}, {0x5, 0x0, 0x1}, {0x8, 0x0, 0x9}, {0x200, 0x0, 0x40}, {0x3fc, 0x0, 0xfffffffffffffff8}, {0x9, 0x0, 0x7629}]}) (async)
sendfile(r7, r6, &(0x7f0000000a80)=0x5, 0x9e5d)
ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000ac0)) (async)
mount$binderfs(&(0x7f0000000b00), &(0x7f0000000b40)='./binderfs\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000bc0)={[{@stats}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0xd7}}, {@stats}], [{@hash}]})
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xb0, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x4010000)
r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000e00)={0x20000013})

3.431239846s ago: executing program 1 (id=658):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1a7)
mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/current_tracer\x00', 0x2, 0x8)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="7205e4", 0x3}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004001d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000090}]})

3.431097636s ago: executing program 5 (id=659):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000100000000000000000000000000000080000000000000000000000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c00000000000000ac1414bb000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000004d33c0000000a0000000000000000000000000000000000000002000000000200000002000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003030000000000000002000000000000ac1e0101000000000000000000000000000000002b000000000000000a0101010000000000000000000000000435000004e2000000000000bf0a000000000001ff010000000000000000000000000001000004d23c"], 0x23c}}, 0x4000)

3.386343021s ago: executing program 5 (id=661):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x44)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0xa, 0x0, 0x0, 0x4, 0x4, 0xa, 0x9, 0xa0, 0xa, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x9, '\x00', 0x1, 0xffffffffffffff7f})
r3 = timerfd_create(0x8, 0x0)
timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
read(r3, &(0x7f0000000180)=""/19, 0x13)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000480)={0x2, "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"})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x2, 0x4, 0x100000000001], 0x1000, 0x4fb40})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.359507144s ago: executing program 5 (id=662):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000456000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000a00)={"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"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, r2, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a5b091, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000400)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
move_mount(r4, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x262)
mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x5000004, 0x401d031, r4, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000600)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x2, 0x48f, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xa1}}}, &(0x7f00000003c0))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r8)

3.283979621s ago: executing program 1 (id=663):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x0)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0xa0000, 0x14)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000004c90020017000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000105000000cd00000000000008ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x42, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000380)="120000001200e7ef007b00000000000000", 0x11, 0x804, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000780)=""/4112, 0x1010}], 0x1}, 0x1207}], 0x1, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000017c0), 0x2, 0x862b81)
write$char_usb(r3, &(0x7f0000001800)="e2", 0x2250)
pwrite64(r1, &(0x7f0000000040)='2', 0x1, 0x8080c61)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'bridge0\x00', @broadcast})

3.283817621s ago: executing program 1 (id=664):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r1, &(0x7f0000000340)=""/16384, 0x4000)

3.170138683s ago: executing program 3 (id=667):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x22081, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x200000001494)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300))
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x7}, 0x80)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x58, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x22081, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x200000001494) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) (async)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) (async)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x3c) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) (async)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x7}, 0x80) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x58, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)

3.124996678s ago: executing program 5 (id=668):
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000a00)="dee258391006f34aa951ba9b69e0e7f60453f04ca778292c8b55633b32c38bcb3e74664c0700000000e3000000006a9e52f569856c3bcb8f0675f91d7c1c7c494cb66b4b84fd93697d79743478b91b269d1538ca305a5ab1875c432e8f4397aafc7d4de01ddafab300000000000000005c4abb00001bd5faf56f9e5730c311e7833b88166b2e323a4d978e2e9069932c57063bba23456ba1be19aed5ce296b6f8db07a26639857ff697feb05ed3cd4b350f0e60331f741087d2db00cc90c298f4e2d4276a90bb1e6ca307263903f040000006fd139bf0000000000000000000000000000000060a3c4a68f1c5a3cce7a8e453d09274fe396894c5450d82cfbc68f3c0941aebad257656483f2bb9da6ecfcab12618096e090c184690467fc7681a56da6a6b895f22c63722d7a3519c081d1fac2347a05fc18396e7970c6449687faddf94f1a63ba74cd2846c3c5fdd209cc320b23eb871385a5800f61281851ae624119660a722034c5a9e050fc3561c7eea2aaf7d4aa82e7170a8d7f42d485aa1063539c0a840030d82c", 0x18a)
clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x5, 0xb0000000000, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20000000000000, 0x3b9ac9ff, 0x0, 0x81, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0xfc9, 0x0, 0x0, 0x0, 0x5, 0x800000000})
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)='bo', 0x2)
socket$key(0xf, 0x3, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x382})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680))
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
write(r2, &(0x7f00000006c0)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

3.031180427s ago: executing program 5 (id=669):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000)

3.031008557s ago: executing program 34 (id=669):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000)

2.147850868s ago: executing program 3 (id=671):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x80108907, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000001180)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000001240)=[@cr4={0x1, 0xbe2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.047939748s ago: executing program 3 (id=675):
r0 = openat$kvm(0x0, &(0x7f0000000a00), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000a40)={0x0, &(0x7f0000000a80)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000000)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000b00)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0x0, [{0x81, 0xff, 0x4, '\x00', 0x7}, {0x2, 0xa, 0xf9, '\x00', 0x6}, {0xa0, 0x2, 0x6, '\x00', 0xc5}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x5, 0x8, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0x0, 0x8, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x80}, {0x8, 0x2, 0xe4, '\x00', 0xd}, {0xe, 0x8, 0x80, '\x00', 0xb}, {0xb, 0x9, 0x9, '\x00', 0x9}, {0x1, 0xa, 0x6, '\x00', 0xfd}, {0xa, 0x85, 0x1, '\x00', 0xf7}, {0xb7, 0x3, 0x3, '\x00', 0x81}, {0xc3, 0x33, 0x58, '\x00', 0x7e}, {0x0, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x16, '\x00', 0x9}, {0x8, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1}, {0x5b, 0x3, 0x4, '\x00', 0x7f}, {0x51, 0x0, 0x10, '\x00', 0xd}, {0x0, 0x28, 0x36, '\x00', 0x95}]}})

2.022334681s ago: executing program 6 (id=676):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/187)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10)
fallocate(r0, 0x0, 0x0, 0x1000f4)
sendfile(r0, r0, 0x0, 0x40000000800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
fallocate(r1, 0x100000000000011, 0x2000, 0x2f93)

1.795149425s ago: executing program 3 (id=677):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000456000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000a00)={"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"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, r2, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a5b091, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000400)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
move_mount(r4, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x262)
mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x5000004, 0x401d031, r4, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000600)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x2, 0x48f, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xa1}}}, &(0x7f00000003c0))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r8)

1.606911184s ago: executing program 3 (id=678):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000800)=ANY=[@ANYRES64=r0, @ANYRES8, @ANYRESDEC=r0])
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, 0x13, 0x301, 0xfffffffe, 0x25dfdbfa, {0xa}}, 0x14}}, 0x20000000)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000900)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0)
sendmsg$key(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000002080)=ANY=[@ANYBLOB="02130801020000172952ecd3fedbdf25d1dd0591b56703c92366eeede9ca40a561643c81de12484d77d786de89a5719fb466b894da7ef18bfded6e5ae13e236fcca753aaa012c9b334a69582aeb235b4a0027a0f90bcfcfe3db51392ead7c39107d4d04a8207eca533dc4942d4fd058633f31296aba5b3a1d79df9bb1824190d04de4abb56be335b600f6a8abb29bb12fa5121079a5ad9821f86c7c55aced831700e993e2883a359b94c2f340a19d482b54a77d88c560ec7fa4b4e7976b70c8a7db208675d0080a1520d218d6f398a"], 0x10}}, 0x10)
r2 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
vmsplice(r1, &(0x7f0000001f40)=[{&(0x7f0000000a80)="e00d41e505f5d0bdfa0bf4b5d9caf283de37934ca0d04938afa348ec5b9e77bf677324953e38d8263829b0ed40b6ecf2faf70cf0dcb56c261f13d156c2733f363c31b33e1c014c2fc115a9f0aa5845702d306ebd95e9d5500849f8d7c147048db4", 0x61}, {&(0x7f0000000b00)="3a4107365fef37bd836ecf23dda4a29e4c32dcdb76f657b813d6c2091730a576a969dd4201f94cf367f66d5152340087db98babac9617a0c7b5e28e92df086e4f819856b79f8beba4a03b7a203a853f84e3894b09d1698e012bfcc70c8a3a6d3d075372630c57f9226b10cddb21fb04225fe84e1f70158d7dfb94811dfb445d096d522a8cf862389d52428e87962f2788bcb4ec2dfdaa378684ac273c005bb5224bff3d547a348410427a7c5bd6b7ce62d30292ecf86db6de76a956be785831a42483e4e3fa4bc1728f23f87d2565efa84ff279bc26bf54c58039cd8f4132a258fe89367", 0xe4}, {&(0x7f0000002000)="be6246b93d6c5cd7c16cfcdf927ba8e7505bfe3b41e4f543d14d0a4c4d7ec98c203f88a6903baba3f9590ebb6ed4d697633cd14a8814f4a286f52ea021788ee32b7a200231f9a029051939683531f6", 0x4f}, {&(0x7f0000000c80)="067fcbcfd6aa85895b91de2a364dd74daf4c3c8bea6c3b2ed963de9be995a72ddf264f9120bab3a1555b46a765f054ac3b181e", 0x33}, {&(0x7f0000000cc0)="7ad899f3cc059cd3793e766323b845cb3c120bb4c92c99e304", 0x19}, {&(0x7f0000000d00)="b7f8ded99f8993a94ea418bc8d48ca24f7ebd0b1622026d8ddf1eb2e7f83b55d2df60e66fae1d4738e03ca9dae7ae444bc46c99d8dd6f600c4b751a617290b206a4836709dd54ebd17fb1d6d586b3807bbc439a33f850029f02b9d7b20f68c0904959dd35fbfa11bf5e2353ffb1a8ba79a4aae42ddb63dbad99d705dc01b4e811a787841e4a29742fcf0c7b5e8beb6480e045f40e2313234f39784c3d81928c4457f21e47f3c6154bf3549e5a59eb9563f63addf45066568294adae667207876adfc3e933f6e5eac9a28220d0e1e513c010d97cea77c350fc2cdd2a71815fc0204f434bf07e57d31d13dff1d032a6e45304f5e76c2e4b5dbf4c551903b6facc8b657b9cca6d4ccc57d2aa7a65f63d290e9a87ec3d2b90efe234662d20690006d289f3ec9009bb5d675f389cb413e4f2525d09de2376f18fba454825cc36086c1f7dcf60bc28b5ad7f8c50f2985d1711c001e8e070773f8f68c9d1ea7437d9321811eb6b22f0ad4c309cace16e36bb800c90950eff81eb27762982a774322c2516505c694700de06b8a6078dd452ab0ba699ffb92832ce0e582a0acdfdedafe3e1a64625ac4e159cdf75f8cd11bdbb600b958aa477368cfc9fa0b850747eb58f6c39c3b6e4b42e6f7e3d2322b42655cb95ba24010e14abbab2b63b5424c96c5e178acb19027b637a3e4986536e3ea608416f897bab535859fa960202a97242da03fd1796390fb4cea0deb8219c341ef78978c013e550266abefb3777ef30eb00f1bd315baf2ab1cec990ddb0a00e5b64fff485af16a55f6fc7edae3de777d576edf25ea17bad062e4004127fb9b3ac4a97a3ca7331ece3f230391a814d42c8d2915def82d909a1d469ba559abef0ea18a0c51cf18d255e2b1b4f4f94e9a98c8e5f6d8704ad0cc92417a2d36d9f128677e972ea3536a660da423db069006504b1a02a0109968d1eaf7e1a00e044a16e1ba025308a2e0c50b49f995daadc7a8e4ba95562b09061583c5ac304a8021d393f34072de182588fcc094542ff24690e77632d3e324b2788cb79bf2199d0103ded3e5d8ec93c259eb2b3b695b3d500cafa50438dd16f6168a45d4f245c5c9507a6d04ecb0bf6af6637635e7d2e9393cb79c74d62041adb4ae00d312c0869d454ab11db2a2bd3727bbdfba6cb5f41ffce8ba44330861d7e887c8397df8e709e6c287be3d9cacfb70ac57aa52d1636b48027a0133094e07eb94bd4daa380778a7bc76d193a2cae69e99418dfe78603bef7bc92a4a1ad0b3872c58a53dc03a8ceabeeeb693bba7b9e9c73795fd8afa3a77ea5e5b8e3a66dfc53d066932058c61786d4b3891a7170d61c87695ff475181de3862d8b90537adb4881413c8acbd197fa8aec4e6462428b98ce65dd7a78ea3e324f8f807074e2505f486200d32741cf64b50162e656751925e0f5848d1f777ff42f9384832b1741b27e38ac83a7718070c68fdae7f517ec6e0855059fa8db122473e093f5bfc0150ee47486712144f95f6133fb4e6028b685fda6388540d1d6226c35ece43c9736fcb9f781fa398df7f81ffb3dbeebd975c8730285aa88f0b3687015937a12ca8485bb9422c6b95a45ac09a0703725e516d968470c5292b1529b6d84ae64e9575038b334f69087846f23f7b12853c8525aa83aa32891c38b7e4599d14a0ab76781ccec878bdf92534fe21649b02c158341fe841981247d9b9eea1822a31be38b22ba8631befab375f236944b4a7d1d88d8f663c080c164656e1649f87343016f0bbfa061494b098b70a62bb279b5a72b433aa1762269d39c568114df027c8cd393b8a3faf674c1b0e59b9454c40ea12778064207864760120fcc1a2be29b88566028b8cb59bda1b60441587b0e8578185fe10829c785a59a5360c28e623d8997b1820fbcc7d255511fc360c9b4a6105235f9a0708d45cf3a48e24863790f1e5d421a25c236e2072e086a48bee09f70b230cbe91a11516a5d15cf7347128451f12006e6996314cc67060dad48aeca385bc31e345a0045e28752ead83af1ae6136dad72bd272a70251e796b17dbb04ca7e62573791b4a21646d37792398a451c943c9dc36ecd019c08076657315cdfba5d74b6c35629350e726dbec938fce788560bae70b7ac847a23114d01a3342dce900b8f290049e8eeb10a169bd4962023a37f239134a67b3ffb132b34adf983ed52f01b21f3ff7b9cef946bc91fe527897c7ff9478e824228f80c9ab8689044de13ff2e9e9635c297dff853d0e8eb7367d877985308fceed774ff18723564c8a2a2bd92879439d759d5554f56e55cefcd6204b4224cf424c75fbb1f62235b7e270abb4a7f2b61dfbd19427c4adca4a05f85c115406f9b42a653bc77036e8582ad08872dad2f2eb3f6929972439a2ceb617f488d05b65439d3da7f72e605e9ed77d70f5dd9b17d0ba7b5ca67bc44f7cddf5ef42dfb6a587dfc6bf2dd280270a03a237da4d4dfc15fb2fe9374eaf59646271a9627ebb9e6b0c96da6657fe18cb539d30e4641a949600fe878ab1e4badfb95405cf816b4efec3c3e9320604c00bbb37591f34d22592416ced53b4dd7b9dd1f101d765cd0feb2e19f1628b7039d02b05272e3c9c84ff6b7871e56932bbb91b3e9d39f9fd7d14f5e088624065aae929ebb03190e7572d07b2df613f784a1f1ac366b619d7e090b983f60e9942af40e17356846cba8945446c72bc54b54bee3d487237405d8d90395c15aaaf759522cb8af76d93f07e530dd09b48ef5659c1f1a5e9a96da64f184151655fa4c08304d3da768e8fd92fc23742cccc7d65f15083ab9f1251010937429b0100316ace46880001add380cbbb2db023b66243a86c2915a3a544e37e48dc6c90c30bd99cfde91ea28ca81ec0fc9381c587e90619ffdfc14ba2a28c4505bc1f78f2a28d9507869f7a79489cb56f6331fa63559ea811d4ff00365520a23f52c1e253c6caaa7643a83c6d0cc7615fd254f4def61a3fb1568cbf0f3ab665cca19c8c41009c7597a31cf690cafe9b0bff0582f11f8ac7ac2461deea44db4f0b2cb9e492ab1e1189f549c518d659ce9a5eb3cab3a0989527d8a973eafc55dfabd5c4361d43deba99cf7c3b5b20a3b9b70e38e153b93e2dcc9f52047c9e23bf6bca5dc1226b46a2e3ec1c7f1122b144c4b596a55bcefa8e80daf325b8b35f1c7b3732f4c3efb31dd3c02f5f4704071e0509d7c3c6adfbb4d43fe51256b4cc35f621687793ec4a9bd33cb2887d7736cebeb20503b4fdada75214dda773e70d625d3a3b78f3e848a4f17d4fb6283eb95c008018c5f3b7f20973fd75e2592fee249435225fcce37ca8abb40bd94d8351359e6e3bf831031f2e0ce8ed0bbb29aa336df6adba4cdc0fe6924f8670242acf4d66ca29263e26bb7b2eeca9eb78fb18fc5fcee93788f5e09682e37d8012bc6a6d90781a0c996f26bce27af6202ae6e544fdb350155623d969c02c00d7af8781544a2446aa9f50fe97d5d76db634599db7af97969a22b8632857b84f839564f651c61ea9be009bb665bca752d298e90341fd48aca53f9d7d3a70f4317892733da460e7aaef49783ba15a1c3366a0a4929858621f81733c431d7f5f3652a646331f42c6bcb167e9450c8c78265bf624c74f0f0f1765a87480b17b2c8b6c364c16d099a00607f659d998289c1d61082a48f19f9b8218f75e86389274fe23b5d9fbaa514458d9c1108ce8d2c157b01d31029a120affff030a9f1d172b8b79b4d9eaa7c6eebb34a452f60ec5539a2912b16fd40986421bc9cbbcc202ce66223315b0885f90c94c8d269ef26a81e3b3d6335faabf525b6dd2631a9dff8bb7632cf247451751a82e0c71628bbf4cec101165ed4df6e6b088aa3bc5963af1cefd8032f4a9b7b41a88baad7f104cb8963ac870b4017d80023b691eac3f5a056c6aa8f1b89da0b0135f45d832a41319671c75e752e97a251dc8332732d471d7578f87435e4aa69044723bb16910bdd263b3f1ca069eeaa087df1cad8c29f8a9f7377ea7688c05a6b47233a203018c6f52442095689107cc94c9f7a976ad5957fc64660f494dfb765f49c6f2125a78778655d7820ff1cbb9bcebc50bac5f258449d52854ffc04c170eb3fcb1b2f232f5d2fe61c13b48e10167ae1cecf7e78c150ac367cc0d7055214b36d3bbd52fc078b0c052223945bd81ef96300acf4aa6765b31372868fd19fa4a8c71f2922785ed96728dd725b53bc40cf40b1b57f5da45bd103ae1b354181f0defaf65b7f383e3dd46f8992f5378a1eca27d9a4302f3ca39a9f633dd447a988c9cab90da8eba512697518e36b550f0c669831f41f3d113f016a4f73c9c0dc0cfbc1831be08acde8d8be825fb0de23d2b672b9edac1c80c55f817e71bcdbd935e887ad31348d04a7c902081e966d4b24bf410b1dd73f5bee7e5b75d3ac979b2bbdd42324ad1c98cbe9d08f9a8a1b01af8d2860a1092b9afca2c9c0aa251b8886b23d50b1839d84be040f9efa40fd0647cb6277d632d1fbd62094b7892d5e8e8095d08f6851f84a97712edafbead0cd83a429459f367a4bf9b669a4dcc8a8a165ab0a7bdf2a20cfe26796239c27b0818f94e971010aa5210664a4b777eeca4f6f8b147012a1d49756fd0c1aab5bcda5a3bd6bb6b28bac2ea06115ba9218ee441ee7ac91c8cae84d77e0fdc55de9c97d5065f00c62dda1971b5528a98d34d07f81fd2dae5ab0040bd23027c91453383be4979f8dec8f9fa7adb0ebeddceb3c2fcc5e614aaae26795f461e68cbe9994dc0cfc8a626126e4e3db52582d91f8a16e81191cc4255f08c5dda5dcd0946b4ee977aee057506bba8201c45e166434f31f58c3384ef1acd641c62bbf6a2a98cf23f6788d1613410e3d0835ee7627ba9b584d7b0592a7ef09c7101829fb40999a17db200077ea4de77810edd2236fdb9236b210035a7b46cdf2a1472e8a93f9744460220bc531c182756d44ece62fa0f9216ccf6004902429f250fc80c87bf60ed0ba5159e3ee9b6325338d69ccf1a0ade25910f91919be83272aa583394eedf0fd3d81e8499663324df09b5374553f797e162775192edb3c7b0e3422aaf4d0f1114ed2aee32db8646fdce5ee32fe65d5290adf8dfb0d24bddd7c1d4a7ed304754ae9e438058ada2f0b2083d5245106431d95c7a5881b5ccbf75d406b4b88e707bdd5295b00d3627037d737e5409a65475bd539220c47eb29a35ac046bdd74258c5d5cb7d25eb1e3daba1579a3126f661f50c7e25be4aa055b6061a4e0d1c8505b0178e761369e74ae8456b8dfda7d834c5d5bf432524f6e6b351e16d6cad8add31b3ea70b46396d1baa57b07d8afbf71faf6ad82bd48df5640796ce3e7271ca730fcdf373637621ff012f5a409e5ca848f669ae0c235d6d60a96626855b7d26e21868266885f93fa7cdd844a6ff1f79f56a847fdb773b73324a586beffac05b109130f988613c40c32efb2fbaa99bf1060ac5342b185024fbb5cd900999ecc0b88e666963076a9435e3e91d7dc87b14884229685f0d06317a6ec2e49330e2a73938385c40865ccf3d74c75e9f880696699aaf2d7b5c0e76e52780f010993c2912be374c70e9bd782d75446be1399036215143706280842b4221d87e458dabbc26ee196e096d53f9421086e37dff5bdf396d92452ab7262ad188e124c2268e6b1ac64c606a390ef88f877bff7d1a190aa2604fc29725149d8a7d664e522716ed3787373c3a60e570c5e7667d30b91b274f4bc0261ef25412930184cf0f4a38fe25faf7702cb102d5ee6e87885d8214a09204199ecd1df1", 0x1000}, {&(0x7f0000001d00)="40c0ede69763c0f88b41d2f88f63c9069926cde9095372dc8730428ba4dc66d3f707b67a0989fdac20637214cf8278348c6a6023a4cbe64a9df8fafeef9c06e03c1cb26ca78be86061ad01c6412a108323f92ae62779899caf8aee2e39247f21b7f20eed9717aa56c49e5f56e25473b3866420f6f78fb9c0b616fd42349b50ef49eb591280e5e5c095c4c90f2375de4a5e2ac355f1dd96836971f0bf3a126e16173a9c0c6fd6bc8b02435260de2aa74507362d687b04296e586d24", 0xbb}, {&(0x7f0000001dc0)="2e3b8ce6dcf13fa667fe1821204908ee579ff60960c28d363dff6a9221e46540d0268b464ff8097729c832215dbc670296eaba63a98ccd845c80ef29c27c1f6d0a0d855e523530e8bcd0ac24e4078a0c82c16bbe4be8ddb6122ad0b7165fedf36b5fd5d8993fb37d6240d0fb94b8ada4dd952d37a613225280665a2d87d082302cde5b11c5dd4a86e44e70067df33d976adf24e31cd1e59df66ddf3d243d39737569ee13f4ea4237", 0xa8}, {&(0x7f0000001e80)="38ec2b6efd537a50719baade9d22708af0b6b07bdd0a41448ffd0cb6af1e20291a1d67d76a7f390cc7b3d52709280e28f4d1cf409de3a02ff25aa6fc2b15cfdfaaf74c8e78873675b6c2a2a2d8706cb97e9f60d6c352283617d06a918dc260bac956e161191e72a76d206d2861f7ab6f7ba2a5744b0f301d3b970c7fb425566d730074dea851560a0845aad842e4bc0d5dd983e739", 0x95}], 0x9, 0x4)
r3 = add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000c00)={'syz', 0x3}, 0x0, 0x0, r2)
keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000c40)='-\x00', &(0x7f0000002180))
r4 = add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000180)="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", 0x559, r2)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000700)={r4, 0x137}, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)="929835e740d6a600000000000000010100000002000040", 0x0)

1.605844174s ago: executing program 6 (id=679):
r0 = socket$inet6(0xa, 0x80002, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='mounts\x00')
read$FUSE(r1, &(0x7f0000001340)={0x2020}, 0x2020)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0203ff032d0000002abd7000fbdbdf250200090018000000c19b3c0000000000030006003c00000002004e22ac1414bb000000000000000002000100000004d400ffea0300000000030005000000000002004e21ac1e01010000000000000000210008000008"], 0x168}, 0x1, 0x7}, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @empty, 0x75e}, 0x1c)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000040)={0x4, 0x100, 0x8000000000000001, 0x4, 0xb})
sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="ad", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)='e', 0x1}], 0x1}}], 0x3, 0x4008000)

1.55266455s ago: executing program 6 (id=680):
r0 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000000)='./dm1\x00', 0x800, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x3c906000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

1.395160696s ago: executing program 3 (id=681):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x6}, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x90}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r7, &(0x7f0000000440), 0x10106, 0x2, 0x0) (async)
recvmmsg(r7, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r5, 0x309, 0x2, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000)
bind$bt_sco(r3, &(0x7f0000000140)={0x1f, @none}, 0x8) (async)
bind$bt_sco(r3, &(0x7f0000000140)={0x1f, @none}, 0x8)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4)
listen(r3, 0x401)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/215, 0xd7}], 0x1, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0)

1.377437288s ago: executing program 35 (id=681):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x6}, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x90}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r7, &(0x7f0000000440), 0x10106, 0x2, 0x0) (async)
recvmmsg(r7, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r5, 0x309, 0x2, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000)
bind$bt_sco(r3, &(0x7f0000000140)={0x1f, @none}, 0x8) (async)
bind$bt_sco(r3, &(0x7f0000000140)={0x1f, @none}, 0x8)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4)
listen(r3, 0x401)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/215, 0xd7}], 0x1, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0)

1.371021609s ago: executing program 6 (id=683):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000000)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000005c40)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmload={0x182, 0x18}, @set_irq_handler={0xc8, 0x20, {0xb5, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @out_dx={0x6a, 0x28, {0x38d0, 0x0, 0xc}}, @nested_amd_invlpga={0x17d, 0x20, {0x26000, 0x3cbe}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x81, 0x10001, 0x660c}}, @wr_crn={0x67, 0x20, {0x3, 0x5}}, @wrmsr={0x65, 0x20, {0x3fe, 0xcce5}}, @nested_vmresume={0x130, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x866, 0x8}}, @in_dx={0x69, 0x20, {0x322a, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x57}}, @code={0xa, 0x58, {"0f01c83ef2f30f01720b48b82677f790000000000f23d80f21f835000000f00f23f83665670f01d566b8ee000f00d08fc84895c95c6426f30f073e420f01f864670f01d1440f35"}}, @code={0xa, 0x70, {"660f38dc42f6440f01c3400f06b90c0b0000b80b000000ba00000000400f01c366baf80cb86814838aef66bafc0c460f992f66ef43d9f14280c400c4810571b77b66430f3880b90500000066baf80cb83a60f085ef66bafc0c66b8000066ef"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0x8bae}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_set_state_pages={0x140, 0x28, {0x4, 0x28, @gpa=0x1ffe}}, @wr_drn={0x68, 0x20, {0x1, 0x11fffffffff}}, @set_irq_handler={0xc8, 0x20, {0xf0, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x51ffe, 0xad88}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x3a8})
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001680), 0x68c01, 0x0)
write$binfmt_format(r2, &(0x7f00000016c0)='-1\x00', 0x3)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001640)={{&(0x7f0000ebb000/0x4000)=nil, 0x4000}, 0x2})
prlimit64(0xffffffffffffffff, 0x2, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r3, &(0x7f00000005c0)=""/4096, 0x1000, 0x548)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x1, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r4, &(0x7f0000001840)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000003880)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000003900)="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", 0x2000, &(0x7f0000005900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000059c0)={0x90, 0x0, 0x4, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x5, 0x9, 0x5296, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000007d00), 0xa0402, 0x0)
io_setup(0x8, &(0x7f0000007d40)=<r9=>0x0)
mprotect(&(0x7f0000b99000/0x1000)=nil, 0x1000, 0x2000001)
io_submit(r9, 0x1, &(0x7f0000007d80)=[&(0x7f0000007dc0)={0x0, 0x0, 0x0, 0x0, 0x2, r8, &(0x7f0000007e00)="a3", 0x1, 0xe3}])
io_destroy(r9)
write(r8, &(0x7f0000007e40)="b07d", 0x2)
quotactl_fd$Q_GETINFO(r2, 0xffffffff80000502, r6, &(0x7f0000000540))
timer_create(0x0, &(0x7f0000005ac0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000100)="280325535ee9742e662a51a27ee18d41279febeff736fb80eb5c25235f27a0977b46608a4e66be22a7947d18", &(0x7f0000005bc0)="b17405bde02d8f0dce6ecfa96138d97827fd0d1cdb513e6beb5a4460d86315428346f44c8c89a01ac618bc9bbfb77d641b1a55fd58cf09a69b07069365653c46f7564245706f6a505d58"}}, &(0x7f0000005b00)=<r10=>0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000005b40)={[0x2]}, 0x8, 0x80000)
read$FUSE(r3, &(0x7f0000007e80)={0x2020}, 0x2020)
pselect6(0x40, &(0x7f0000000040)={0xff, 0x7f, 0x6, 0x1e2131e4, 0xd0, 0x5, 0x9, 0x2}, &(0x7f0000000080)={0x76cf9658, 0x10, 0x2, 0x2, 0x1ff, 0x9, 0x9, 0x9}, &(0x7f00000000c0)={0x1ff, 0x9, 0x3a, 0x8, 0xaa1b, 0x200, 0x9, 0x1}, &(0x7f00000015c0), &(0x7f0000005b80)={&(0x7f0000001600), 0x8})
timer_create(0x2, &(0x7f0000007bc0)={0x0, 0x21}, &(0x7f0000007c00))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000007c80)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r10, 0x1, &(0x7f0000007cc0)={{}, {0x0, 0x989680}}, 0x0)

1.209511105s ago: executing program 7 (id=682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x0)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0xa0000, 0x14)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000004c90020017000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000205000000cd00000000000008ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x42, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000380)="120000001200e7ef007b00000000000000", 0x11, 0x804, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000780)=""/4112, 0x1010}], 0x1}, 0x1207}], 0x1, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000017c0), 0x2, 0x862b81)
write$char_usb(r3, &(0x7f0000001800)="e2", 0x2250)
pwrite64(r1, &(0x7f0000000040)='2', 0x1, 0x8080c61)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'bridge0\x00', @broadcast})

627.048555ms ago: executing program 6 (id=684):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write$cgroup_int(r0, &(0x7f00000000c0)=0x8, 0x12)
r1 = syz_io_uring_setup(0x30da, &(0x7f0000000180)={0x0, 0x6968, 0x10000, 0x1, 0x2ca}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, 0x0, 0x0)

626.839805ms ago: executing program 4 (id=685):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="240000001e005f031400ff0100001c3700f8e553797c080008e467dc0000db5033caf3f8", 0x24)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x2002)
readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/4096, 0x18}], 0x1)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001300)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001340)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000001380)={&(0x7f00000013c0)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48040}, 0x0)
write$evdev(r1, &(0x7f00000011c0)=[{{}, 0x0, 0x2}], 0x37)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mount(&(0x7f0000001200)=@sr0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='incremental-fs\x00', 0x28e0082, &(0x7f00000012c0)='\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}}, 0x40040d0)
recvmmsg(r0, &(0x7f00000000c0), 0x400000000000166, 0x1a000, 0x0)

159.071673ms ago: executing program 6 (id=686):
mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002)
syz_usb_connect(0x5, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002d9c1b3403c411882f3b70102030109022200010006600209042593000e01007c0824020105040105082402014a0a0909"], 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1d5})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ce9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3000})
ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ff6000/0x3000)=nil, 0x3000}})

158.437143ms ago: executing program 1 (id=687):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a00)={"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"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, r1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a5b091, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000400)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
move_mount(r3, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x262)

91.740061ms ago: executing program 36 (id=687):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a00)={"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"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, r1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a5b091, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000400)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
move_mount(r3, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x262)

91.58863ms ago: executing program 4 (id=688):
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x208})
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000e36000/0x4000)=nil, &(0x7f000044d000/0x3000)=nil, 0x4000, 0x3})

91.51311ms ago: executing program 4 (id=689):
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000040)=@abs, 0x6e)
setns(0xc9, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/icmp\x00')
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/165, 0xa5}], 0x1, 0x180, 0x9)
pipe2(&(0x7f0000000000)={0x0, <r2=>0x0}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x48, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000002c0)={0x60, 0x4, 0xffffff69, 0x5, 0xb, "4cb7e4adf3e77187f7ee7a5397e4e83ae8ead1", 0xde52, 0x8})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0xb, 0x1}, 0x8000, 0x24, 0x0, 0x0, 0x4, 0xb510, 0x0, 0x1, 0xc, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)

91.376661ms ago: executing program 4 (id=690):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x800)

31.291717ms ago: executing program 4 (id=691):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005be2cd54be79b831f09365233c3699693141011c9a1a37f811b500"/53], 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22)

0s ago: executing program 4 (id=692):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x8001, &(0x7f0000000080)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000280)=0xa40, 0x4)
recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x8806b}], 0x1, 0x40010103, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000180)={&(0x7f00000001c0)=""/112, 0x70})
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='27', 0x2)
add_key$fscrypt_provisioning(0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

:object_r:usb_device_t tclass=chr_file permissive=1
[   76.375547][ T1493] overlay: filesystem on ./bus is read-only
[   76.434296][   T36] audit: type=1400 audit(1793311500.306:353): avc:  denied  { mounton } for  pid=1492 comm="syz.3.316" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   76.481294][ T1501] netlink: 348 bytes leftover after parsing attributes in process `syz.3.318'.
[   76.509600][ T1500] netlink: 348 bytes leftover after parsing attributes in process `syz.3.318'.
[   76.848854][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   76.988912][   T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   77.015399][    T9] usb 2-1: config 243 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   77.025334][    T9] usb 2-1: config 243 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   77.039998][    T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   77.049220][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.057318][    T9] usb 2-1: Product: syz
[   77.061631][    T9] usb 2-1: Manufacturer: syz
[   77.066325][    T9] usb 2-1: SerialNumber: syz
[   77.080688][    T9] ums-sddr09 2-1:243.0: USB Mass Storage device detected
[   77.088648][    T9] ums-sddr09 2-1:243.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   77.088648][    T9]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   77.150903][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[   77.160074][   T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.172835][   T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   77.182190][   T31] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   77.193596][   T31] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   77.207463][    T9] ums-sddr09 2-1:243.0: probe with driver ums-sddr09 failed with error -22
[   77.207471][   T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   77.227329][   T31] usb 5-1: config 1 interface 1 has no altsetting 0
[   77.238674][   T31] usb 5-1: string descriptor 0 read error: -22
[   77.245183][   T31] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   77.260597][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.281926][    T9] usb 2-1: USB disconnect, device number 24
[   77.472903][   T31] usb 5-1: 2:0: failed to get current value for ch 0 (-32)
[   77.490269][ T1517] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   77.504963][ T1517] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   77.519662][ T1517] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[   77.682132][   T36] audit: type=1400 audit(1793311501.616:354): avc:  denied  { search } for  pid=1510 comm="syz.4.322" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   77.928533][   T36] audit: type=1400 audit(1793311501.856:355): avc:  denied  { remount } for  pid=1547 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   77.960608][ T1548] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.010177][   T36] audit: type=1400 audit(1793311501.946:356): avc:  denied  { write } for  pid=1553 comm="syz.3.336" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   78.033670][ T1554] random: crng reseeded on system resumption
[   78.063684][   T36] audit: type=1400 audit(1793311501.966:357): avc:  denied  { open } for  pid=1553 comm="syz.3.336" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   78.134162][   T36] audit: type=1400 audit(1793311502.066:358): avc:  denied  { ioctl } for  pid=1559 comm="syz.3.338" path="socket:[12598]" dev="sockfs" ino=12598 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   78.382464][   T36] audit: type=1400 audit(1793311502.316:359): avc:  denied  { setopt } for  pid=1564 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   78.490750][  T341] rust_binder: 1569: undelivered TRANSACTION_COMPLETE
[   78.515272][ T1574] /dev/sr0: Can't lookup blockdev
[   79.755108][   T31] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[   79.772105][  T341] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   79.783691][   T31] usb 5-1: USB disconnect, device number 2
[   79.801753][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   79.928857][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[   79.938809][  T341] usb 2-1: Using ep0 maxpacket: 8
[   79.945847][  T341] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   79.957227][  T341] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 102, changing to 7
[   79.970161][  T341] usb 2-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40
[   79.979363][  T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.987475][  T341] usb 2-1: Product: ᠊
[   79.991924][  T341] usb 2-1: Manufacturer: Ⰺ
[   79.996559][  T341] usb 2-1: SerialNumber: 婡즨㚤狖닋奈萕ᘔ緎ૻ惀㮯잆홏롩ﲁﾘ﫟熉솀乞ை걫鴅žᨍῊﴏꟸꪩ樸䳣ꟊ釹֒⢛窲갡⪓閃兒綝뿎죾踴⇖尯麇捷䵨帴읝쒸ヅ謌鍐鉕冸ᮻ措큂驩儜ⳗ紐싧춻珏꿑
[   80.109017][    T9] usb 4-1: Using ep0 maxpacket: 32
[   80.115512][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   80.126507][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.138819][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   80.149082][   T31] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   80.152826][    T9] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   80.168659][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.179043][    T9] usb 4-1: config 0 descriptor??
[   80.319913][   T31] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[   80.331236][   T31] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   80.342863][   T31] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   80.357501][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   80.366975][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   80.375240][   T31] usb 5-1: SerialNumber: syz
[   80.437475][ T1593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.447158][ T1593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.460519][ T1593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.469386][ T1593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.480223][  T341] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   80.487922][  T341] usb 2-1: 2:1 : unknown format tag 0x1 is detected.  processed as MPEG.
[   80.498668][  T341] usb 2-1: found format II with max.bitrate = 255, frame size=2
[   80.506773][  T341] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   80.530286][  T341] usb 2-1: USB disconnect, device number 25
[   80.600170][    T9] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[   80.607393][    T9] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x4
[   80.682191][   T31] rndis_host 5-1:253.0: RNDIS init failed, -71
[   80.702136][   T31] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71
[   80.717035][   T31] usb 5-1: USB disconnect, device number 3
[   80.798034][    T9] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71
[   80.811034][    T9] usb 4-1: USB disconnect, device number 30
[   81.024108][ T1602] rust_binder: 1601:1602 no such ref 0
[   81.418853][  T740] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   81.568827][  T740] usb 2-1: Using ep0 maxpacket: 16
[   81.575375][  T740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.591336][  T740] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.598999][   T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   81.615232][  T740] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   81.624548][  T740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.632727][  T740] usb 2-1: Product: syz
[   81.637161][  T740] usb 2-1: Manufacturer: syz
[   81.641836][  T740] usb 2-1: SerialNumber: syz
[   81.682779][ T1635] rust_binder: 1634:1635 no such ref 0
[   81.739205][ T1641] netlink: 'syz.3.366': attribute type 3 has an invalid length.
[   81.775877][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[   81.790047][   T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.806406][   T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   81.832501][   T31] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   81.843832][   T31] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   81.857315][   T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   81.859555][ T1621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.872710][   T31] usb 5-1: config 1 interface 1 has no altsetting 0
[   81.884049][ T1621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.901785][   T31] usb 5-1: string descriptor 0 read error: -22
[   81.908234][   T31] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   81.918177][  T740] usb 2-1: 0:2 : does not exist
[   81.925567][  T740] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   81.933146][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.961139][  T740] usb 2-1: USB disconnect, device number 26
[   82.153617][   T31] usb 5-1: 2:0: failed to get current value for ch 0 (-32)
[   82.248813][    T9] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[   82.409565][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[   82.419786][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.431196][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   82.440672][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.465046][    T9] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   82.478834][    T9] usb 4-1: No streaming interface found for terminal 2.
[   82.675844][  T341] usb 4-1: USB disconnect, device number 31
[   83.205823][ T1656] block device autoloading is deprecated and will be removed.
[   83.381567][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   83.381588][   T36] audit: type=1400 audit(1793311507.316:362): avc:  denied  { nlmsg_write } for  pid=1662 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   83.472768][   T36] audit: type=1400 audit(1793311507.406:363): avc:  denied  { setattr } for  pid=1665 comm="syz.3.375" path="socket:[11866]" dev="sockfs" ino=11866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   83.496531][   T36] audit: type=1400 audit(1793311507.426:364): avc:  denied  { ioctl } for  pid=1665 comm="syz.3.375" path="socket:[11867]" dev="sockfs" ino=11867 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   83.581807][ T1670] netlink: 604 bytes leftover after parsing attributes in process `syz.3.377'.
[   83.593008][   T36] audit: type=1400 audit(1793311507.526:365): avc:  denied  { connect } for  pid=1669 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   83.898818][  T715] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[   84.068805][  T715] usb 4-1: Using ep0 maxpacket: 8
[   84.075582][  T715] usb 4-1: unable to get BOS descriptor or descriptor too short
[   84.084380][  T715] usb 4-1: config 138 has an invalid interface number: 221 but max is 0
[   84.092875][  T715] usb 4-1: config 138 has no interface number 0
[   84.099609][  T715] usb 4-1: config 138 interface 221 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10
[   84.112176][  T715] usb 4-1: config 138 interface 221 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024
[   84.124242][  T715] usb 4-1: config 138 interface 221 has no altsetting 0
[   84.141006][  T715] usb 4-1: New USB device found, idVendor=0582, idProduct=ed81, bcdDevice=a7.d3
[   84.153516][  T715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.170910][  T715] usb 4-1: Product: syz
[   84.179590][  T715] usb 4-1: Manufacturer: syz
[   84.188131][  T715] usb 4-1: SerialNumber: syz
[   84.194349][ T1670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   84.373142][   T31] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[   84.404254][   T36] audit: type=1400 audit(1793311508.336:366): avc:  denied  { mount } for  pid=1669 comm="syz.3.377" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   84.434347][   T31] usb 5-1: USB disconnect, device number 4
[   84.451188][  T715] usb 4-1: USB disconnect, device number 32
[   84.486647][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:138.221/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   84.728498][  T740] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[   84.768530][   T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   84.889934][  T740] usb 2-1: not running at top speed; connect to a high speed hub
[   84.898593][  T740] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   84.908965][  T740] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   84.917883][  T740] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   84.932628][  T740] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   84.938552][   T31] usb 5-1: Using ep0 maxpacket: 16
[   84.942619][  T740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.955159][  T740] usb 2-1: Product: Ќ
[   84.959451][  T740] usb 2-1: Manufacturer: 霹梔⎗䵯Šⱽ氀Ҥ׶䈷顤륳푕䗒ባ薕絺麴ჽ낇쨏곌涿暧髖麧
[   84.959970][   T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.971805][  T740] usb 2-1: SerialNumber: 욀쏖閌쓙㏄臩ŻⳲ᭘瀊뭞搷쑼﹙垍詍扵폑㖍獂䡮꒠⮡㦎䯐俎準
[   84.999421][   T36] audit: type=1400 audit(1793311508.936:367): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   85.019439][   T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.034827][   T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   85.044006][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.053002][   T31] usb 5-1: Product: syz
[   85.058106][   T31] usb 5-1: Manufacturer: syz
[   85.062894][   T31] usb 5-1: SerialNumber: syz
[   85.071278][   T36] audit: type=1400 audit(1793311509.006:368): avc:  denied  { ioctl } for  pid=1674 comm="syz.3.379" path="socket:[11875]" dev="sockfs" ino=11875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   85.097635][ T1675] input: syz1 as /devices/virtual/input/input8
[   85.123857][ T1678] mmap: syz.3.380 (1678): VmData 29339648 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data.
[   85.208434][  T740] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[   85.215327][  T740] cdc_ncm 2-1:1.0: bind() failure
[   85.226842][  T740] usb 2-1: USB disconnect, device number 27
[   85.274590][ T1673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.296459][ T1673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.304918][   T36] audit: type=1326 audit(1793311509.226:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1683 comm="syz.3.383" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0433f9f559 code=0x7ffc0000
[   85.337996][   T31] usb 5-1: 0:2 : does not exist
[   85.340498][   T36] audit: type=1326 audit(1793311509.226:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1683 comm="syz.3.383" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0433f9f559 code=0x7ffc0000
[   85.351734][   T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   85.369217][   T36] audit: type=1326 audit(1793311509.226:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1683 comm="syz.3.383" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0433f5b9ac code=0x7ffc0000
[   85.407207][   T31] usb 5-1: USB disconnect, device number 5
[   85.421038][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   85.807933][  T715] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[   85.980407][  T715] usb 4-1: unable to get BOS descriptor or descriptor too short
[   86.000041][  T715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.018236][  T715] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   86.038428][  T715] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   86.072541][  T715] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   86.091208][  T715] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   86.103082][  T715] usb 4-1: config 1 interface 1 has no altsetting 0
[   86.126724][  T715] usb 4-1: string descriptor 0 read error: -22
[   86.133281][  T715] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   86.153018][  T715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.369782][  T715] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[   87.189139][ T1734] overlayfs: failed to resolve './file1/file0': -2
[   87.251320][ T1002] bridge_slave_1: left allmulticast mode
[   87.259312][ T1002] bridge_slave_1: left promiscuous mode
[   87.265014][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.273407][ T1002] bridge_slave_0: left allmulticast mode
[   87.277870][ T1741] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   87.279732][ T1002] bridge_slave_0: left promiscuous mode
[   87.295395][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.377209][   T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   87.389468][ T1737] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.396667][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.403816][ T1737] bridge_slave_0: entered allmulticast mode
[   87.410893][ T1737] bridge_slave_0: entered promiscuous mode
[   87.417754][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.425065][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.432237][ T1737] bridge_slave_1: entered allmulticast mode
[   87.439448][ T1737] bridge_slave_1: entered promiscuous mode
[   87.446728][ T1002] veth1_macvtap: left promiscuous mode
[   87.452658][ T1002] veth0_vlan: left promiscuous mode
[   87.547106][   T31] usb 2-1: Using ep0 maxpacket: 16
[   87.553599][   T31] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[   87.562052][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.572605][   T31] usb 2-1: config 0 has no interface number 0
[   87.579332][   T31] usb 2-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   87.590526][   T31] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.607526][   T31] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   87.615843][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.623726][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.627811][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.631240][ T1737] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.640629][   T31] usb 2-1: Product: syz
[   87.646015][ T1737] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.660509][   T31] usb 2-1: Manufacturer: syz
[   87.665304][   T31] usb 2-1: SerialNumber: syz
[   87.671393][   T31] usb 2-1: config 0 descriptor??
[   87.678776][   T31] asix 2-1:0.34: probe with driver asix failed with error -22
[   87.693805][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.701486][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.712054][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.719198][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.730892][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.738043][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.770527][ T1737] veth0_vlan: entered promiscuous mode
[   87.784127][ T1737] veth1_macvtap: entered promiscuous mode
[   87.821373][ T1749] netlink: 9 bytes leftover after parsing attributes in process `syz.5.394'.
[   87.831004][ T1749] gretap0: entered promiscuous mode
[   87.838281][ T1749] netlink: 5 bytes leftover after parsing attributes in process `syz.5.394'.
[   87.847251][ T1749] 0��{X��: renamed from gretap0
[   87.853211][ T1749] 0��{X��: left promiscuous mode
[   87.858419][ T1749] 0��{X��: entered allmulticast mode
[   87.864591][ T1749] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   87.935394][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   87.946613][ T1755] SELinux: failed to load policy
[   87.952227][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   87.960553][ T1755] SELinux: failed to load policy
[   87.967174][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   87.986246][ T1755] SELinux: failed to load policy
[   88.000887][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.008458][ T1763] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.406' sets config #1
[   88.026886][ T1755] SELinux: failed to load policy
[   88.033160][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.041453][ T1755] SELinux: failed to load policy
[   88.048325][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.056234][ T1755] SELinux: failed to load policy
[   88.107031][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.114736][ T1755] SELinux: failed to load policy
[   88.122103][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.130521][ T1755] SELinux: failed to load policy
[   88.137834][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.145813][ T1755] SELinux: failed to load policy
[   88.152159][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.160191][ T1755] SELinux: failed to load policy
[   88.166333][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.175130][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.186009][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.197595][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.208240][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.217891][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.225975][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.234843][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.243522][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.252098][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.260652][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.269064][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.279669][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.290512][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.300015][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.308316][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.316461][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.324822][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.333384][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.341363][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.349354][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.357507][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.366937][ T1755] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   88.551061][   T36] kauditd_printk_skb: 90 callbacks suppressed
[   88.551081][   T36] audit: type=1400 audit(1793311512.488:462): avc:  denied  { bind } for  pid=1765 comm="syz.4.407" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   88.577990][   T36] audit: type=1400 audit(1793311512.518:463): avc:  denied  { name_bind } for  pid=1765 comm="syz.4.407" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[   88.601441][   T36] audit: type=1400 audit(1793311512.518:464): avc:  denied  { node_bind } for  pid=1765 comm="syz.4.407" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   88.626916][  T715] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[   88.650810][  T715] usb 4-1: USB disconnect, device number 33
[   88.729446][ T1779] capability: warning: `syz.3.412' uses 32-bit capabilities (legacy support in use)
[   88.936452][  T341] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   89.066689][  T341] usb 5-1: device descriptor read/64, error -71
[   89.196330][  T715] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   89.306476][  T341] usb 5-1: device descriptor read/64, error -71
[   89.347854][  T715] usb 6-1: unable to get BOS descriptor or descriptor too short
[   89.356437][  T715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.366650][  T715] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   89.375676][  T715] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   89.386823][  T715] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   89.400347][  T715] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   89.412577][  T715] usb 6-1: config 1 interface 1 has no altsetting 0
[   89.423869][  T715] usb 6-1: string descriptor 0 read error: -22
[   89.430177][  T715] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   89.439297][  T715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.546192][  T341] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   89.652200][  T715] usb 6-1: 2:0: failed to get current value for ch 0 (-32)
[   89.656228][  T740] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[   89.686061][  T341] usb 5-1: device descriptor read/64, error -71
[   89.816003][  T740] usb 4-1: Using ep0 maxpacket: 16
[   89.822510][  T740] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[   89.830794][  T740] usb 4-1: config 1 has no interface number 0
[   89.836972][  T740] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   89.846960][  T740] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   89.857011][  T740] usb 4-1: config 1 interface 105 has no altsetting 0
[   89.865334][  T740] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   89.875271][  T740] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   89.883699][  T740] usb 4-1: Product: syz
[   89.888163][  T740] usb 4-1: Manufacturer: syz
[   89.892810][  T740] usb 4-1: SerialNumber: syz
[   89.898614][ T1797] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   89.906210][ T1797] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   89.926045][  T341] usb 5-1: device descriptor read/64, error -71
[   89.933063][  T715] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[   89.947139][  T715] usb 6-1: USB disconnect, device number 2
[   90.036077][  T341] usb usb5-port1: attempt power cycle
[   90.125950][  T740] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71
[   90.140572][  T740] usb 4-1: USB disconnect, device number 34
[   90.157151][   T10] usb 2-1: USB disconnect, device number 28
[   90.173144][ T1803] ./dev/sda1: Can't lookup blockdev
[   90.224620][ T1805] kvm: kvm [1804]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   90.233237][ T1805] kvm: kvm [1804]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   90.249367][ T1805] kvm_intel: kvm [1804]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[   90.260337][ T1805] kvm: kvm [1804]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1
[   90.269167][ T1805] kvm: kvm [1804]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1
[   90.370568][ T1810] netlink: 17 bytes leftover after parsing attributes in process `syz.1.421'.
[   90.379580][  T341] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   90.387491][   T36] audit: type=1400 audit(1793311514.329:465): avc:  denied  { write } for  pid=1809 comm="syz.1.421" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   90.409184][  T341] usb 5-1: device descriptor read/8, error -71
[   90.436881][   T36] audit: type=1400 audit(1793311514.379:466): avc:  denied  { map } for  pid=1813 comm="syz.1.423" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   90.546738][  T341] usb 5-1: device descriptor read/8, error -71
[   90.685599][  T715] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   90.705576][ T1825] ./dev/sda1: Can't lookup blockdev
[   90.785586][  T341] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   90.806573][  T341] usb 5-1: device descriptor read/8, error -71
[   90.815558][  T715] usb 2-1: device descriptor read/64, error -71
[   90.865534][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   90.936455][  T341] usb 5-1: device descriptor read/8, error -71
[   90.965518][   T31] usb 4-1: new low-speed USB device number 35 using dummy_hcd
[   91.015435][   T10] usb 6-1: Using ep0 maxpacket: 16
[   91.021722][   T10] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[   91.029905][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.040047][   T10] usb 6-1: config 0 has no interface number 0
[   91.045899][  T341] usb usb5-port1: unable to enumerate USB device
[   91.046199][   T10] usb 6-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   91.055609][  T715] usb 2-1: device descriptor read/64, error -71
[   91.063291][   T10] usb 6-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.084022][   T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   91.093150][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.101248][   T10] usb 6-1: Product: syz
[   91.105494][   T10] usb 6-1: Manufacturer: syz
[   91.110103][   T10] usb 6-1: SerialNumber: syz
[   91.115290][   T10] usb 6-1: config 0 descriptor??
[   91.118441][   T31] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[   91.129064][   T10] asix 6-1:0.34: probe with driver asix failed with error -22
[   91.131067][   T31] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1
[   91.149949][   T31] usb 4-1: string descriptor 0 read error: -22
[   91.156246][   T31] usb 4-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17
[   91.165567][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.305574][  T715] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   91.375785][  T740] usb 4-1: USB disconnect, device number 35
[   91.435351][  T715] usb 2-1: device descriptor read/64, error -71
[   91.675210][  T715] usb 2-1: device descriptor read/64, error -71
[   91.795519][  T715] usb usb2-port1: attempt power cycle
[   91.892449][ T1837] overlayfs: missing 'workdir'
[   91.896887][ T1838] overlayfs: missing 'lowerdir'
[   91.902520][ T1838] overlayfs: missing 'lowerdir'
[   91.907649][ T1838] overlayfs: missing 'lowerdir'
[   91.912701][ T1838] overlayfs: missing 'lowerdir'
[   91.917825][ T1838] overlayfs: missing 'lowerdir'
[   91.922899][ T1838] overlayfs: missing 'lowerdir'
[   91.928033][ T1838] overlayfs: missing 'lowerdir'
[   91.933072][ T1838] overlayfs: missing 'lowerdir'
[   91.938308][ T1838] overlayfs: missing 'lowerdir'
[   91.943368][ T1838] overlayfs: missing 'lowerdir'
[   91.948977][ T1838] overlayfs: missing 'lowerdir'
[   91.954232][ T1838] overlayfs: missing 'lowerdir'
[   91.959416][ T1838] overlayfs: missing 'lowerdir'
[   91.964713][ T1838] overlayfs: missing 'lowerdir'
[   91.969904][ T1838] overlayfs: missing 'lowerdir'
[   91.975299][ T1838] overlayfs: missing 'lowerdir'
[   91.980385][ T1838] overlayfs: missing 'lowerdir'
[   91.985562][ T1838] overlayfs: missing 'lowerdir'
[   91.990696][ T1838] overlayfs: missing 'lowerdir'
[   91.995823][ T1838] overlayfs: missing 'lowerdir'
[   92.000884][ T1838] overlayfs: missing 'lowerdir'
[   92.006058][ T1838] overlayfs: missing 'lowerdir'
[   92.011147][ T1838] overlayfs: missing 'lowerdir'
[   92.016339][ T1838] overlayfs: missing 'lowerdir'
[   92.021451][ T1838] overlayfs: missing 'lowerdir'
[   92.026594][ T1838] overlayfs: missing 'lowerdir'
[   92.031692][ T1838] overlayfs: missing 'lowerdir'
[   92.037050][ T1838] overlayfs: missing 'lowerdir'
[   92.042207][ T1838] overlayfs: missing 'lowerdir'
[   92.047448][ T1838] overlayfs: missing 'lowerdir'
[   92.052496][ T1838] overlayfs: missing 'lowerdir'
[   92.057876][ T1838] overlayfs: missing 'lowerdir'
[   92.062922][ T1838] overlayfs: missing 'lowerdir'
[   92.068212][ T1838] overlayfs: missing 'lowerdir'
[   92.073286][ T1838] overlayfs: missing 'lowerdir'
[   92.078513][ T1838] overlayfs: missing 'lowerdir'
[   92.083596][ T1838] overlayfs: missing 'lowerdir'
[   92.088886][ T1838] overlayfs: missing 'lowerdir'
[   92.094022][ T1838] overlayfs: missing 'lowerdir'
[   92.099267][ T1838] overlayfs: missing 'lowerdir'
[   92.104398][ T1838] overlayfs: missing 'lowerdir'
[   92.109605][ T1838] overlayfs: missing 'lowerdir'
[   92.114756][ T1838] overlayfs: missing 'lowerdir'
[   92.115839][   T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   92.127700][ T1838] overlayfs: missing 'lowerdir'
[   92.132891][ T1838] overlayfs: missing 'lowerdir'
[   92.137891][  T715] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   92.146037][ T1838] overlayfs: missing 'lowerdir'
[   92.151288][ T1838] overlayfs: missing 'lowerdir'
[   92.156569][ T1838] overlayfs: missing 'lowerdir'
[   92.161701][ T1838] overlayfs: missing 'lowerdir'
[   92.167002][ T1838] overlayfs: missing 'lowerdir'
[   92.172324][ T1838] overlayfs: missing 'lowerdir'
[   92.177592][  T715] usb 2-1: device descriptor read/8, error -71
[   92.177610][ T1838] overlayfs: missing 'lowerdir'
[   92.189078][ T1838] overlayfs: missing 'lowerdir'
[   92.194169][ T1838] overlayfs: missing 'lowerdir'
[   92.199476][ T1838] overlayfs: missing 'lowerdir'
[   92.205003][ T1838] overlayfs: missing 'lowerdir'
[   92.210159][ T1838] overlayfs: missing 'lowerdir'
[   92.215320][ T1838] overlayfs: missing 'lowerdir'
[   92.220521][ T1838] overlayfs: missing 'lowerdir'
[   92.225776][ T1838] overlayfs: missing 'lowerdir'
[   92.230902][ T1838] overlayfs: missing 'lowerdir'
[   92.236112][ T1838] overlayfs: missing 'lowerdir'
[   92.241205][ T1838] overlayfs: missing 'lowerdir'
[   92.246425][ T1838] overlayfs: missing 'lowerdir'
[   92.251545][ T1838] overlayfs: missing 'lowerdir'
[   92.286454][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[   92.294993][   T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.305609][   T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   92.314841][   T31] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   92.326031][   T31] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   92.339311][  T715] usb 2-1: device descriptor read/8, error -71
[   92.345687][   T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   92.356577][   T31] usb 5-1: config 1 interface 1 has no altsetting 0
[   92.357908][   T36] audit: type=1400 audit(1793311516.300:467): avc:  denied  { create } for  pid=1842 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   92.366583][   T31] usb 5-1: string descriptor 0 read error: -22
[   92.390259][   T31] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   92.399579][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.584702][  T715] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[   92.605575][  T715] usb 2-1: device descriptor read/8, error -71
[   92.613308][   T31] usb 5-1: 2:0: failed to get current value for ch 0 (-32)
[   92.664800][   T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[   92.735704][  T715] usb 2-1: device descriptor read/8, error -71
[   92.815898][   T10] usb 4-1: config 1 interface 0 altsetting 81 bulk endpoint 0x82 has invalid maxpacket 128
[   92.827204][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[   92.835373][   T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=97c3, bcdDevice=4f.1d
[   92.844585][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.844825][  T715] usb usb2-port1: unable to enumerate USB device
[   92.852908][   T10] usb 4-1: Product: syz
[   92.863275][   T10] usb 4-1: Manufacturer: syz
[   92.868057][   T10] usb 4-1: SerialNumber: syz
[   92.873855][ T1848] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   92.895286][   T31] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[   92.906086][   T31] usb 5-1: USB disconnect, device number 10
[   92.913257][  T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   93.085707][   T10] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 81 proto 2 vid 0x03F0 pid 0x97C3
[   93.098761][   T10] usb 4-1: USB disconnect, device number 36
[   93.106035][   T10] usblp0: removed
[   93.457006][   T36] audit: type=1400 audit(1793311517.400:468): avc:  denied  { accept } for  pid=1855 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   93.596289][ T1860] rust_binder: 1859:1860 transaction call to 0:0 failed EINVAL, code 0 size 0-0 line process.rs:950
[   93.632504][  T740] usb 6-1: USB disconnect, device number 3
[   93.645453][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   93.688889][ T1863] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns
[   93.697642][ T1863] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[   93.784876][  T715] rust_binder: 1859: undelivered TRANSACTION_ERROR: 29201
[   93.804078][   T10] usb 5-1: Using ep0 maxpacket: 16
[   93.824763][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.843324][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.854291][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.854475][   T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[   93.863466][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.881794][   T10] usb 5-1: Product: syz
[   93.887030][   T10] usb 5-1: Manufacturer: syz
[   93.898652][   T10] usb 5-1: SerialNumber: syz
[   94.013952][   T31] usb 2-1: Using ep0 maxpacket: 16
[   94.020363][   T31] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.031709][   T31] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.041780][   T31] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   94.055103][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[   94.061810][   T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[   94.071229][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.080366][   T31] usb 2-1: config 0 descriptor??
[   94.088898][ T1869] device-mapper: table: 252:1: crypt: Device lookup failed (-ENOENT)
[   94.103444][ T1869] device-mapper: ioctl: error adding target to table
[   94.111242][ T1853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.120678][ T1853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.132056][   T10] usb 5-1: 0:2 : does not exist
[   94.146360][   T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   94.165720][   T10] usb 5-1: USB disconnect, device number 11
[   94.182150][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   94.503791][   T31] wacom 0003:056A:0094.0008: unknown main item tag 0x0
[   94.511034][   T31] wacom 0003:056A:0094.0008: unknown main item tag 0x0
[   94.518323][   T31] wacom 0003:056A:0094.0008: unknown main item tag 0x0
[   94.525436][   T31] wacom 0003:056A:0094.0008: unknown main item tag 0x0
[   94.532439][   T31] wacom 0003:056A:0094.0008: unknown main item tag 0x0
[   94.539637][   T31] wacom 0003:056A:0094.0008: Using device in hidraw-only mode
[   94.559811][   T31] wacom 0003:056A:0094.0008: hidraw0: USB HID v0.81 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0
[   94.700439][  T715] usb 2-1: USB disconnect, device number 33
[   94.833591][   T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[   94.923520][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   94.985093][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[   94.993654][   T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.003845][   T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   95.012819][   T31] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   95.023754][   T31] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   95.036985][  T351] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   95.044579][   T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   95.055439][   T31] usb 4-1: config 1 interface 1 has no altsetting 0
[   95.064149][   T31] usb 4-1: string descriptor 0 read error: -22
[   95.070351][   T31] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   95.079482][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.093456][   T10] usb 5-1: Using ep0 maxpacket: 8
[   95.102744][   T10] usb 5-1: string descriptor 0 read error: -22
[   95.109173][   T10] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[   95.118270][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.213405][  T351] usb 6-1: Using ep0 maxpacket: 32
[   95.223896][  T351] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.235087][  T351] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   95.249824][  T351] usb 6-1: config 0 interface 0 has no altsetting 0
[   95.256710][  T351] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[   95.266154][  T351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.271504][ T1897] netlink: 'syz.1.452': attribute type 4 has an invalid length.
[   95.283494][  T351] usb 6-1: config 0 descriptor??
[   95.290240][   T31] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[   95.340210][ T1904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.348946][ T1904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.534294][   T31] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[   95.545686][   T31] usb 4-1: USB disconnect, device number 37
[   95.545828][   T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   95.564981][   T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   95.573276][  T715] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[   95.584692][   T10] usb 5-1: USB disconnect, device number 12
[   95.598196][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   95.702166][  T351] input: HID 046d:c227 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C227.0009/input/input9
[   95.718163][  T351] lg-g15 0003:046D:C227.0009: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.5-1/input0
[   95.734521][  T715] usb 2-1: Using ep0 maxpacket: 8
[   95.741348][  T715] usb 2-1: unable to get BOS descriptor or descriptor too short
[   95.751041][  T715] usb 2-1: config 138 has an invalid interface number: 221 but max is 0
[   95.759953][  T715] usb 2-1: config 138 has no interface number 0
[   95.767150][  T715] usb 2-1: config 138 interface 221 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10
[   95.779077][  T715] usb 2-1: config 138 interface 221 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024
[   95.794200][  T715] usb 2-1: config 138 interface 221 has no altsetting 0
[   95.802729][  T715] usb 2-1: New USB device found, idVendor=0582, idProduct=ed81, bcdDevice=a7.d3
[   95.811925][  T715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.820010][  T715] usb 2-1: Product: syz
[   95.824229][  T715] usb 2-1: Manufacturer: syz
[   95.828860][  T715] usb 2-1: SerialNumber: syz
[   95.834661][ T1903] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   95.999776][ T1909] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   96.013989][ T1909] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   96.050501][  T715] usb 2-1: USB disconnect, device number 34
[   96.064207][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:138.221/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   96.267946][   T36] audit: type=1400 audit(1793311520.211:469): avc:  denied  { mount } for  pid=1891 comm="syz.5.450" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   96.290197][   T36] audit: type=1400 audit(1793311520.231:470): avc:  denied  { remount } for  pid=1891 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   96.309991][   T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[   96.462768][   T10] usb 4-1: Using ep0 maxpacket: 16
[   96.469213][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.479545][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.490156][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.499349][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.507580][   T10] usb 4-1: Product: syz
[   96.511783][   T10] usb 4-1: Manufacturer: syz
[   96.516469][   T10] usb 4-1: SerialNumber: syz
[   96.723329][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.732060][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.743188][   T10] usb 4-1: 0:2 : does not exist
[   96.750641][   T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   96.766237][   T10] usb 4-1: USB disconnect, device number 38
[   96.778230][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   96.852600][  T740] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[   97.013724][  T740] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   97.023647][  T740] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   97.032778][  T740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.182455][  T715] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   97.243228][  T740] usb 2-1: string descriptor 0 read error: -71
[   97.252555][  T740] hub 2-1:32.0: bad descriptor, ignoring hub
[   97.258649][  T740] hub 2-1:32.0: probe with driver hub failed with error -5
[   97.278123][ T1931] rust_binder: Write failure EINVAL in pid:486
[   97.292779][  T740] usb 2-1: USB disconnect, device number 35
[   97.332361][  T715] usb 5-1: Using ep0 maxpacket: 8
[   97.339472][  T715] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[   97.349465][  T715] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[   97.360843][  T715] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   97.370054][  T715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.378134][  T715] usb 5-1: Product: syz
[   97.382396][  T715] usb 5-1: Manufacturer: syz
[   97.387045][  T715] usb 5-1: SerialNumber: syz
[   97.542371][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[   97.693769][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   97.702364][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.712528][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   97.721520][    T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   97.732699][    T9] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   97.745949][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   97.756804][    T9] usb 4-1: config 1 interface 1 has no altsetting 0
[   97.774254][    T9] usb 4-1: string descriptor 0 read error: -22
[   97.780560][    T9] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   97.796424][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.804960][  T715] cdc_ncm 5-1:1.0: bind() failure
[   97.813666][  T715] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   97.826597][  T740] usb 6-1: USB disconnect, device number 4
[   97.833095][  T715] cdc_ncm 5-1:1.1: bind() failure
[   97.838548][   T36] audit: type=1400 audit(1793311521.772:471): avc:  denied  { unmount } for  pid=1737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   97.859028][  T715] usb 5-1: USB disconnect, device number 13
[   98.023854][    T9] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[   98.142002][   T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[   98.272851][    T9] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[   98.284481][    T9] usb 4-1: USB disconnect, device number 39
[   98.293940][   T10] usb 2-1: Using ep0 maxpacket: 32
[   98.307440][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 53397, setting to 64
[   98.324327][   T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[   98.333588][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.341619][   T10] usb 2-1: Product: syz
[   98.345966][   T10] usb 2-1: Manufacturer: syz
[   98.350807][   T10] usb 2-1: SerialNumber: syz
[   98.355933][ T1966] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(15)
[   98.362372][   T10] usb 2-1: config 0 descriptor??
[   98.386246][ T1969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1969 comm=syz.4.478
[   98.574595][  T351] usb 2-1: USB disconnect, device number 36
[   99.031586][    T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[   99.181471][    T9] usb 4-1: Using ep0 maxpacket: 32
[   99.188190][    T9] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[   99.198549][    T9] usb 4-1: config 11 has 0 interfaces, different from the descriptor's value: 1
[   99.209217][    T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[   99.218385][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.226706][    T9] usb 4-1: Product: syz
[   99.231254][    T9] usb 4-1: Manufacturer: syz
[   99.236031][    T9] usb 4-1: SerialNumber: syz
[   99.381384][  T351] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[   99.535053][  T351] usb 2-1: unable to get BOS descriptor or descriptor too short
[   99.543715][  T351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.554008][  T351] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   99.563162][  T351] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   99.574167][  T351] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   99.587362][  T351] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   99.598229][  T351] usb 2-1: config 1 interface 1 has no altsetting 0
[   99.607200][  T351] usb 2-1: string descriptor 0 read error: -22
[   99.614031][  T351] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   99.623192][  T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.835765][  T351] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  100.112978][  T351] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  100.124876][  T351] usb 2-1: USB disconnect, device number 37
[  100.154152][   T36] audit: type=1400 audit(1793311524.093:472): avc:  denied  { bind } for  pid=2002 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  100.310930][  T715] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  100.461655][  T715] usb 6-1: not running at top speed; connect to a high speed hub
[  100.470308][  T715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.480595][  T715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  100.490846][  T715] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  100.500002][  T715] usb 6-1: New USB device strings: Mfr=245, Product=194, SerialNumber=0
[  100.508442][  T715] usb 6-1: Product: syz
[  100.512668][  T715] usb 6-1: Manufacturer: syz
[  100.519286][  T715] usb 6-1: Found UVC 1.00 device syz (225a:e1d4)
[  100.525814][  T715] usb 6-1: Failed to create links for entity 1
[  100.532091][  T715] usb 6-1: Failed to register entities (-22).
[  100.550825][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  100.633168][   T36] audit: type=1400 audit(1793311524.574:473): avc:  denied  { getopt } for  pid=2007 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.676757][ T2015] rust_binder: 2014:2015 BC_FREEZE_NOTIFICATION_DONE 000000000000f000 not found
[  100.685955][ T2015] rust_binder: Write failure EINVAL in pid:337
[  100.693539][  T310] rust_binder: 2014: undelivered freeze notification, 0000000000000001
[  100.703358][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.714780][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.726091][   T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  100.735295][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.744920][  T715] usb 6-1: USB disconnect, device number 5
[  100.745795][   T10] usb 5-1: config 0 descriptor??
[  101.162548][   T10] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[  101.171490][   T10] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  101.240546][   T10] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected
[  101.248720][   T10] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted -  nothing to read
[  101.262262][   T10] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[  101.275812][   T10] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  101.460386][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  101.460380][  T504] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  101.550352][  T715] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  101.701730][  T715] usb 2-1: unable to get BOS descriptor or descriptor too short
[  101.709858][  T715] usb 2-1: not running at top speed; connect to a high speed hub
[  101.718563][  T715] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4
[  101.731300][  T715] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40
[  101.740429][  T715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.748460][  T715] usb 2-1: Product: syz
[  101.752690][  T715] usb 2-1: Manufacturer: syz
[  101.757409][  T715] usb 2-1: SerialNumber: syz
[  101.967745][ T2022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.980996][ T2022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.990780][    T9] usb 4-1: USB disconnect, device number 40
[  102.003191][ T2022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.012555][ T2022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.027302][  T715] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  102.034589][  T715] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  102.046321][  T715] usb 2-1: USB disconnect, device number 38
[  102.059093][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  102.145010][   T10] rust_binder: 2025: undelivered TRANSACTION_ERROR: 29189
[  102.409962][  T351] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  102.429935][   T10] usb 5-1: reset high-speed USB device number 14 using dummy_hcd
[  102.429934][   T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  102.561428][  T351] usb 6-1: unable to get BOS descriptor or descriptor too short
[  102.570029][  T351] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.580202][   T31] usb 4-1: Using ep0 maxpacket: 16
[  102.585490][  T351] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  102.594535][  T351] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  102.605601][  T351] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  102.618942][  T351] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  102.629916][  T351] usb 6-1: config 1 interface 1 has no altsetting 0
[  102.636835][   T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.647113][   T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  102.657568][   T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  102.666902][  T351] usb 6-1: string descriptor 0 read error: -22
[  102.673412][  T351] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  102.682574][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.690683][  T351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.698843][   T36] audit: type=1400 audit(1793311526.635:474): avc:  denied  { bind } for  pid=2037 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  102.718190][   T31] usb 4-1: Product: syz
[  102.722899][   T31] usb 4-1: Manufacturer: syz
[  102.730495][   T31] usb 4-1: SerialNumber: syz
[  102.744012][ T2041] FAULT_INJECTION: forcing a failure.
[  102.744012][ T2041] name failslab, interval 1, probability 0, space 0, times 0
[  102.757008][ T2041] CPU: 1 UID: 0 PID: 2041 Comm: syz.1.504 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e
[  102.757042][ T2041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  102.757058][ T2041] Call Trace:
[  102.757065][ T2041]  <TASK>
[  102.757072][ T2041]  __dump_stack+0x21/0x30
[  102.757114][ T2041]  dump_stack_lvl+0x140/0x1c0
[  102.757146][ T2041]  ? __cfi_dump_stack_lvl+0x10/0x10
[  102.757179][ T2041]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  102.757220][ T2041]  ? init_file+0x9e/0x210
[  102.757242][ T2041]  ? alloc_empty_file+0xd9/0x270
[  102.757264][ T2041]  ? path_openat+0xf4/0x35a0
[  102.757285][ T2041]  ? do_sys_openat2+0x134/0x1d0
[  102.757309][ T2041]  ? __x64_sys_openat+0x13a/0x170
[  102.757334][ T2041]  ? x64_sys_call+0xe69/0x2ee0
[  102.757355][ T2041]  dump_stack+0x19/0x20
[  102.757386][ T2041]  should_fail_ex+0x3c2/0x510
[  102.757409][ T2041]  should_failslab+0xac/0x100
[  102.757430][ T2041]  kmem_cache_alloc_lru_noprof+0x44/0x410
[  102.757461][ T2041]  ? __d_alloc+0x42/0x8c0
[  102.757489][ T2041]  __d_alloc+0x42/0x8c0
[  102.757517][ T2041]  d_alloc_parallel+0xe4/0x1370
[  102.757547][ T2041]  ? make_vfsuid+0x4d/0xa0
[  102.757574][ T2041]  ? __kasan_check_write+0x18/0x20
[  102.757604][ T2041]  ? security_inode_permission+0x77/0x150
[  102.757632][ T2041]  ? downgrade_write+0x470/0x470
[  102.757658][ T2041]  ? try_to_unlazy+0x62a/0xb50
[  102.757687][ T2041]  ? __cfi_d_alloc_parallel+0x10/0x10
[  102.757717][ T2041]  ? down_read+0x7f/0xe0
[  102.757747][ T2041]  ? __cfi_down_read+0x10/0x10
[  102.757777][ T2041]  path_openat+0xa09/0x35a0
[  102.757803][ T2041]  ? x64_sys_call+0xe69/0x2ee0
[  102.757827][ T2041]  ? do_filp_open+0x440/0x440
[  102.757852][ T2041]  do_filp_open+0x1f2/0x440
[  102.757876][ T2041]  ? __cfi_do_filp_open+0x10/0x10
[  102.757904][ T2041]  ? alloc_fd+0x4c1/0x570
[  102.757937][ T2041]  do_sys_openat2+0x134/0x1d0
[  102.757962][ T2041]  ? do_sys_open+0x100/0x100
[  102.757989][ T2041]  __x64_sys_openat+0x13a/0x170
[  102.758015][ T2041]  x64_sys_call+0xe69/0x2ee0
[  102.758038][ T2041]  do_syscall_64+0x57/0xf0
[  102.758061][ T2041]  ? clear_bhb_loop+0x50/0xa0
[  102.758092][ T2041]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  102.758120][ T2041] RIP: 0033:0x7fc86a35fd8e
[  102.758138][ T2041] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  102.758157][ T2041] RSP: 002b:00007fc868dd5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  102.758180][ T2041] RAX: ffffffffffffffda RBX: 00007fc868dd66c0 RCX: 00007fc86a35fd8e
[  102.758195][ T2041] RDX: 0000000000000002 RSI: 00007fc868dd5c00 RDI: ffffffffffffff9c
[  102.758218][ T2041] RBP: 00007fc86a436b20 R08: 0000000000000000 R09: 0000000000000000
[  102.758237][ T2041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.758248][ T2041] R13: 00007fc86a626128 R14: 00007fc86a626090 R15: 00007fff5dad1448
[  102.758262][ T2041]  </TASK>
[  103.051842][  T351] usb 6-1: 2:0: failed to get current value for ch 0 (-32)
[  103.112008][ T2047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2047 comm=syz.1.506
[  103.125450][ T2047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2047 comm=syz.1.506
[  103.126335][ T2048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2048 comm=syz.1.506
[  103.151254][ T2047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2047 comm=syz.1.506
[  103.151264][ T2048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2048 comm=syz.1.506
[  103.152561][ T2048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2048 comm=syz.1.506
[  103.164940][ T2049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2049 comm=syz.1.506
[  103.202117][ T2047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2047 comm=syz.1.506
[  103.215092][ T2047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2047 comm=syz.1.506
[  103.301307][  T351] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  103.312699][  T351] usb 6-1: USB disconnect, device number 6
[  103.324092][   T31] usb 4-1: 0:2 : does not exist
[  103.331382][   T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  103.342637][   T31] usb 4-1: USB disconnect, device number 41
[  103.359612][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  103.589658][    T9] usb 5-1: USB disconnect, device number 14
[  103.598571][    T9] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected
[  103.739298][    T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  103.820732][ T2066] No source specified
[  103.849989][ T2072] FAULT_INJECTION: forcing a failure.
[  103.849989][ T2072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.863255][ T2072] CPU: 1 UID: 0 PID: 2072 Comm: syz.5.514 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e
[  103.863314][ T2072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  103.863329][ T2072] Call Trace:
[  103.863337][ T2072]  <TASK>
[  103.863346][ T2072]  __dump_stack+0x21/0x30
[  103.863385][ T2072]  dump_stack_lvl+0x140/0x1c0
[  103.863409][ T2072]  ? __cfi_dump_stack_lvl+0x10/0x10
[  103.863433][ T2072]  ? check_stack_object+0x81/0x150
[  103.863456][ T2072]  dump_stack+0x19/0x20
[  103.863479][ T2072]  should_fail_ex+0x3c2/0x510
[  103.863494][ T2072]  should_fail+0xf/0x20
[  103.863508][ T2072]  should_fail_usercopy+0x1e/0x30
[  103.863524][ T2072]  _copy_from_user+0x20/0xa0
[  103.863544][ T2072]  memdup_user+0x81/0x170
[  103.863563][ T2072]  ? strndup_user+0x40/0xd0
[  103.863582][ T2072]  strndup_user+0x6c/0xd0
[  103.863601][ T2072]  __se_sys_fsconfig+0x661/0x870
[  103.863622][ T2072]  ? __x64_sys_fsconfig+0xf0/0xf0
[  103.863641][ T2072]  ? ksys_write+0x1f3/0x260
[  103.863666][ T2072]  ? __cfi_ksys_write+0x10/0x10
[  103.863689][ T2072]  __x64_sys_fsconfig+0xc3/0xf0
[  103.863709][ T2072]  x64_sys_call+0x11bb/0x2ee0
[  103.863725][ T2072]  do_syscall_64+0x57/0xf0
[  103.863741][ T2072]  ? clear_bhb_loop+0x50/0xa0
[  103.863763][ T2072]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  103.863784][ T2072] RIP: 0033:0x7f428e79f559
[  103.863797][ T2072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.863811][ T2072] RSP: 002b:00007f428f6ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  103.863829][ T2072] RAX: ffffffffffffffda RBX: 00007f428ea25fa0 RCX: 00007f428e79f559
[  103.863841][ T2072] RDX: 0000200000000c00 RSI: 0000000000000001 RDI: 0000000000000003
[  103.863851][ T2072] RBP: 00007f428f6ee090 R08: 0000000000000000 R09: 0000000000000000
[  103.863861][ T2072] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001
[  103.863871][ T2072] R13: 00007f428ea26038 R14: 00007f428ea25fa0 R15: 00007fff3189b8b8
[  103.863885][ T2072]  </TASK>
[  103.890391][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  104.083081][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.102696][    T9] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  104.111841][    T9] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  104.127191][    T9] usb 5-1: Product: syz
[  104.131532][    T9] usb 5-1: Manufacturer: syz
[  104.138418][    T9] usb 5-1: Found UVC 1.00 device syz (225a:e1d4)
[  104.145403][    T9] usb 5-1: No streaming interface found for terminal 2.
[  104.169095][  T351] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  104.201852][ T2077] usb 5-1: USB disconnect, device number 15
[  104.213418][ T2077] hub 5-0:1.0: USB hub found
[  104.218259][ T2077] hub 5-0:1.0: 1 port detected
[  104.319030][  T351] usb 6-1: Using ep0 maxpacket: 32
[  104.327169][  T351] usb 6-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40
[  104.336330][  T351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.345124][  T351] usb 6-1: Product: syz
[  104.349117][    T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  104.349915][  T351] usb 6-1: Manufacturer: syz
[  104.361631][  T351] usb 6-1: SerialNumber: syz
[  104.571623][  T351] usb 6-1: MIDIStreaming interface descriptor not found
[  104.581782][  T351] usb 6-1: USB disconnect, device number 7
[  104.597085][  T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  104.848777][  T715] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  104.859369][ T2088] No source specified
[  104.874196][ T2090] netlink: 'syz.4.522': attribute type 15 has an invalid length.
[  104.882159][ T2091] netlink: 'syz.4.522': attribute type 15 has an invalid length.
[  104.890467][ T2090] netlink: 'syz.4.522': attribute type 15 has an invalid length.
[  105.000049][  T715] usb 4-1: unable to get BOS descriptor or descriptor too short
[  105.008460][  T715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.018657][  T715] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  105.027638][  T715] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  105.038610][  T715] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  105.051849][  T715] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  105.062735][  T715] usb 4-1: config 1 interface 1 has no altsetting 0
[  105.079184][  T715] usb 4-1: string descriptor 0 read error: -22
[  105.085454][  T715] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  105.094921][  T715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.305785][  T715] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  105.338523][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  105.489552][   T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  105.497827][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  105.506819][   T10] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34
[  105.516036][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.524183][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  105.532738][   T10] usb 6-1: config 0 descriptor??
[  105.539147][   T10] usb 6-1: Waiting for MOTU Microbook II to boot up...
[  105.546059][   T10] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22
[  105.554255][   T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  105.566782][  T715] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  105.578708][  T715] usb 4-1: USB disconnect, device number 42
[  105.678358][    T9] usb 5-1: Using ep0 maxpacket: 16
[  105.684728][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.695249][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.706025][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.715200][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.723264][    T9] usb 5-1: Product: syz
[  105.727445][    T9] usb 5-1: Manufacturer: syz
[  105.732120][    T9] usb 5-1: SerialNumber: syz
[  105.739397][  T715] usb 6-1: USB disconnect, device number 8
[  105.939288][ T2093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.947967][ T2093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.957621][    T9] usb 5-1: 0:2 : does not exist
[  105.965240][    T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  105.983853][    T9] usb 5-1: USB disconnect, device number 17
[  105.994724][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  106.011219][   T36] audit: type=1400 audit(1793311529.936:475): avc:  denied  { accept } for  pid=2099 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  106.104372][ T2109] FAULT_INJECTION: forcing a failure.
[  106.104372][ T2109] name fail_futex, interval 1, probability 0, space 0, times 0
[  106.117461][ T2109] CPU: 0 UID: 0 PID: 2109 Comm: syz.3.527 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e
[  106.117497][ T2109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  106.117512][ T2109] Call Trace:
[  106.117519][ T2109]  <TASK>
[  106.117527][ T2109]  __dump_stack+0x21/0x30
[  106.117564][ T2109]  dump_stack_lvl+0x140/0x1c0
[  106.117595][ T2109]  ? __cfi_dump_stack_lvl+0x10/0x10
[  106.117630][ T2109]  dump_stack+0x19/0x20
[  106.117660][ T2109]  should_fail_ex+0x3c2/0x510
[  106.117681][ T2109]  should_fail+0xf/0x20
[  106.117700][ T2109]  get_futex_key+0x5c4/0x940
[  106.117721][ T2109]  ? __cfi_get_futex_key+0x10/0x10
[  106.117740][ T2109]  ? call_rcu+0x14/0x20
[  106.117771][ T2109]  futex_wake+0x150/0x950
[  106.117797][ T2109]  ? __kasan_check_write+0x18/0x20
[  106.117825][ T2109]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  106.117848][ T2109]  ? __cfi_futex_wake+0x10/0x10
[  106.117875][ T2109]  ? perf_lock_task_context+0x398/0x450
[  106.117907][ T2109]  ? __perf_event_period+0x490/0x490
[  106.117947][ T2109]  ? mutex_unlock+0x90/0x240
[  106.117976][ T2109]  do_futex+0x37d/0x510
[  106.117997][ T2109]  ? __kasan_check_read+0x15/0x20
[  106.118025][ T2109]  ? __cfi_do_futex+0x10/0x10
[  106.118047][ T2109]  ? __kasan_check_write+0x18/0x20
[  106.118081][ T2109]  mm_release+0x15f/0x300
[  106.118111][ T2109]  ? exit_mm_release+0x50/0x50
[  106.118138][ T2109]  ? futex_exit_release+0x11d/0x1f0
[  106.118160][ T2109]  exit_mm_release+0x29/0x50
[  106.118188][ T2109]  do_exit+0x832/0x2850
[  106.118218][ T2109]  ? futex_wake+0x666/0x950
[  106.118244][ T2109]  ? __cfi_do_exit+0x10/0x10
[  106.118271][ T2109]  ? futex_wait+0x2b8/0x7c0
[  106.118297][ T2109]  ? __cfi_futex_wait+0x10/0x10
[  106.118323][ T2109]  ? __kasan_check_write+0x18/0x20
[  106.118351][ T2109]  ? _raw_spin_lock_irq+0x93/0x120
[  106.118374][ T2109]  do_group_exit+0x21f/0x2f0
[  106.118406][ T2109]  ? __kasan_check_write+0x18/0x20
[  106.118435][ T2109]  ? recalc_sigpending+0x16c/0x1d0
[  106.118462][ T2109]  get_signal+0x134c/0x1490
[  106.118496][ T2109]  arch_do_signal_or_restart+0xbc/0x700
[  106.118521][ T2109]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  106.118548][ T2109]  syscall_exit_to_user_mode+0x57/0xb0
[  106.118581][ T2109]  do_syscall_64+0x63/0xf0
[  106.118603][ T2109]  ? clear_bhb_loop+0x50/0xa0
[  106.118634][ T2109]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  106.118663][ T2109] RIP: 0033:0x7f0433f9f559
[  106.118681][ T2109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.118701][ T2109] RSP: 002b:00007f0434ee80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  106.118725][ T2109] RAX: fffffffffffffe00 RBX: 00007f0434226188 RCX: 00007f0433f9f559
[  106.118740][ T2109] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0434226188
[  106.118753][ T2109] RBP: 00007f0434226180 R08: 0000000000000000 R09: 0000000000000000
[  106.118767][ T2109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.118780][ T2109] R13: 00007f0434226218 R14: 00007fff6f925580 R15: 00007fff6f925668
[  106.118799][ T2109]  </TASK>
[  106.466568][ T2115] No source specified
[  106.521532][   T36] audit: type=1400 audit(1793311530.466:476): avc:  denied  { append } for  pid=2126 comm="syz.5.536" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  106.727881][  T351] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  106.737871][  T715] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  106.745573][   T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  106.817917][  T341] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  106.879376][  T351] usb 4-1: unable to get BOS descriptor or descriptor too short
[  106.888011][  T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.898620][  T715] usb 5-1: Using ep0 maxpacket: 16
[  106.903908][  T351] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  106.913760][  T351] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  106.924876][  T715] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  106.933471][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  106.941324][  T715] usb 5-1: config 0 has no interface number 0
[  106.947528][  T715] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  106.957712][  T351] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  106.970927][  T341] usb 6-1: device descriptor read/64, error -71
[  106.977715][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.988115][   T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  106.997221][   T31] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  107.008179][  T715] usb 5-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  107.019397][  T351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  107.030399][  T351] usb 4-1: config 1 interface 1 has no altsetting 0
[  107.037149][   T31] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  107.050706][   T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  107.061942][   T31] usb 2-1: config 1 interface 1 has no altsetting 0
[  107.069907][  T715] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  107.079957][  T351] usb 4-1: string descriptor 0 read error: -22
[  107.086242][  T351] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  107.095749][  T715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.103937][  T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.112392][  T715] usb 5-1: Product: syz
[  107.116724][  T715] usb 5-1: Manufacturer: syz
[  107.121579][   T31] usb 2-1: string descriptor 0 read error: -22
[  107.127938][   T31] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  107.137013][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.146083][  T715] usb 5-1: SerialNumber: syz
[  107.153536][  T715] usb 5-1: config 0 descriptor??
[  107.165982][ T2121] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  107.176165][  T715] asix 5-1:0.34: probe with driver asix failed with error -22
[  107.237621][  T341] usb 6-1: device descriptor read/64, error -71
[  107.360167][  T351] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  107.487472][  T341] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  107.569188][  T351] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  107.579919][   T31] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  107.587934][  T351] usb 4-1: USB disconnect, device number 43
[  107.627419][  T341] usb 6-1: device descriptor read/64, error -71
[  107.839272][   T31] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  107.856930][   T31] usb 2-1: USB disconnect, device number 39
[  107.867559][  T341] usb 6-1: device descriptor read/64, error -71
[  107.977431][  T341] usb usb6-port1: attempt power cycle
[  108.285455][ T2136] veth1_macvtap: left promiscuous mode
[  108.297121][ T2136] macsec0: entered promiscuous mode
[  108.303429][ T2137] veth1_macvtap: entered promiscuous mode
[  108.309506][ T2137] macsec0: left promiscuous mode
[  108.327093][  T341] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  108.358113][  T341] usb 6-1: device descriptor read/8, error -71
[  108.488409][  T341] usb 6-1: device descriptor read/8, error -71
[  108.587015][  T314] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  108.726918][  T341] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  108.738051][  T314] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  108.750132][  T314] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  108.758963][  T341] usb 6-1: device descriptor read/8, error -71
[  108.759819][  T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.773425][  T314] usb 2-1: Product: syz
[  108.777701][  T314] usb 2-1: Manufacturer: syz
[  108.782332][  T314] usb 2-1: SerialNumber: syz
[  108.787889][  T314] usb 2-1: config 0 descriptor??
[  108.887952][  T341] usb 6-1: device descriptor read/8, error -71
[  108.995997][ T2141] netlink: 368 bytes leftover after parsing attributes in process `syz.1.539'.
[  108.999504][  T341] usb usb6-port1: unable to enumerate USB device
[  109.010740][   T36] audit: type=1400 audit(1793311532.948:477): avc:  denied  { getopt } for  pid=2140 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  109.027615][  T341] usb 2-1: USB disconnect, device number 40
[  109.306666][  T314] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  109.456550][  T314] usb 4-1: Using ep0 maxpacket: 16
[  109.462871][  T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.473211][  T314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.483848][  T314] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  109.493121][  T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.501373][  T314] usb 4-1: Product: syz
[  109.505560][  T314] usb 4-1: Manufacturer: syz
[  109.510355][  T314] usb 4-1: SerialNumber: syz
[  109.525627][  T341] usb 5-1: USB disconnect, device number 18
[  109.553138][ T2153] netlink: 9 bytes leftover after parsing attributes in process `syz.4.543'.
[  109.564354][ T2153] gretap0: entered promiscuous mode
[  109.576534][ T2156] netlink: 9 bytes leftover after parsing attributes in process `syz.4.543'.
[  109.718029][ T2149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.728248][ T2149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.738505][  T314] usb 4-1: 0:2 : does not exist
[  109.745747][  T314] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  109.760060][  T314] usb 4-1: USB disconnect, device number 44
[  109.773440][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  109.826387][  T715] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  109.926361][  T341] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  109.977725][  T715] usb 2-1: unable to get BOS descriptor or descriptor too short
[  109.986423][  T715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.996785][  T715] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  110.005757][  T715] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  110.016693][  T715] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  110.029886][  T715] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  110.040764][  T715] usb 2-1: config 1 interface 1 has no altsetting 0
[  110.049444][  T715] usb 2-1: string descriptor 0 read error: -22
[  110.055756][  T715] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  110.064958][  T715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.087310][  T341] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  110.098338][  T341] usb 5-1: config 1 interface 0 has no altsetting 0
[  110.107193][  T341] usb 5-1: string descriptor 0 read error: -22
[  110.113461][  T341] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40
[  110.122575][  T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.135365][ T2160] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  110.142680][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  110.266186][ T2164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'.
[  110.276859][ T2164] rust_binder: Write failure EINVAL in pid:543
[  110.284792][  T715] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  110.297888][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  110.307733][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.311526][ T2166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'.
[  110.318244][   T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  110.335962][   T10] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  110.347717][   T10] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  110.361519][   T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  110.373277][   T10] usb 6-1: config 1 interface 1 has no altsetting 0
[  110.382285][   T10] usb 6-1: string descriptor 0 read error: -22
[  110.388704][   T10] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  110.397870][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.493818][  T715] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  110.506608][  T715] usb 2-1: USB disconnect, device number 41
[  110.610112][   T10] usb 6-1: 2:0: failed to get current value for ch 0 (-32)
[  110.665990][  T351] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  110.719389][ T2160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.728089][ T2160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.815909][  T351] usb 4-1: Using ep0 maxpacket: 16
[  110.822455][  T351] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  110.830684][  T351] usb 4-1: config 0 has no interface number 0
[  110.836954][  T351] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  110.847059][  T351] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  110.859531][  T351] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  110.868684][  T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.876839][  T351] usb 4-1: Product: syz
[  110.881077][  T351] usb 4-1: Manufacturer: syz
[  110.881710][   T10] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  110.885713][  T351] usb 4-1: SerialNumber: syz
[  110.901015][   T10] usb 6-1: USB disconnect, device number 13
[  110.921266][  T351] usb 4-1: config 0 descriptor??
[  110.927436][ T2173] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  110.935537][  T351] asix 4-1:0.34: probe with driver asix failed with error -22
[  111.422959][ T2180] rust_binder: 2179:2180 got transaction to invalid handle 1
[  111.430624][ T2180] rust_binder: 2179:2180 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958
[  111.444589][   T10] rust_binder: 2179: undelivered TRANSACTION_ERROR: 29201
[  111.664117][   T36] audit: type=1326 audit(1793311535.609:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.5.555" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f428e79f559 code=0x0
[  111.667751][ T2186] netlink: 60 bytes leftover after parsing attributes in process `syz.5.555'.
[  112.335183][    T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  112.486342][    T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  112.494594][    T9] usb 2-1: config 1 has no interface number 0
[  112.500859][    T9] usb 2-1: config 1 interface 105 has no altsetting 0
[  112.509228][    T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  112.518487][    T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  112.526803][    T9] usb 2-1: Product: syz
[  112.531410][    T9] usb 2-1: Manufacturer: syz
[  112.536125][    T9] usb 2-1: SerialNumber: syz
[  112.614955][  T341] usbhid 5-1:1.0: can't add hid device: -71
[  112.621365][  T341] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  112.630521][  T341] usb 5-1: USB disconnect, device number 19
[  112.784965][  T351] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  112.934925][  T351] usb 6-1: Using ep0 maxpacket: 16
[  112.941275][  T351] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.951473][  T351] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.961975][  T351] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.971191][  T341] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  112.978851][  T351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.987581][  T351] usb 6-1: Product: syz
[  112.991826][  T351] usb 6-1: Manufacturer: syz
[  112.996554][  T351] usb 6-1: SerialNumber: syz
[  113.082478][    T9] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71
[  113.103399][    T9] usb 2-1: USB disconnect, device number 42
[  113.144782][  T341] usb 5-1: Using ep0 maxpacket: 32
[  113.151355][  T341] usb 5-1: unable to get BOS descriptor or descriptor too short
[  113.161283][  T341] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a
[  113.170407][  T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.178473][  T341] usb 5-1: Product: syz
[  113.182670][  T341] usb 5-1: Manufacturer: syz
[  113.187331][  T341] usb 5-1: SerialNumber: syz
[  113.203491][ T2194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.212144][ T2194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.221910][  T351] usb 6-1: 0:2 : does not exist
[  113.228700][  T351] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  113.239914][  T351] usb 6-1: USB disconnect, device number 14
[  113.254562][  T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  113.396194][  T341] usb_ehset_test 5-1:8.0: probe with driver usb_ehset_test failed with error -32
[  113.406280][  T341] usb 5-1: USB disconnect, device number 20
[  113.444669][    T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  113.455955][  T351] usb 4-1: USB disconnect, device number 45
[  113.596026][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  113.604444][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.614742][    T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  113.623732][    T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  113.634675][    T9] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  113.647900][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  113.658729][    T9] usb 2-1: config 1 interface 1 has no altsetting 0
[  113.667615][    T9] usb 2-1: string descriptor 0 read error: -22
[  113.673841][    T9] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  113.682937][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.766872][  T351] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  113.783330][ T2211] kvm: kvm [2210]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010004) = 0x8000
[  113.866860][ T2217] FAULT_INJECTION: forcing a failure.
[  113.866860][ T2217] name failslab, interval 1, probability 0, space 0, times 0
[  113.879591][ T2217] CPU: 0 UID: 0 PID: 2217 Comm: syz.5.566 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e
[  113.879628][ T2217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  113.879648][ T2217] Call Trace:
[  113.879655][ T2217]  <TASK>
[  113.879661][ T2217]  __dump_stack+0x21/0x30
[  113.879690][ T2217]  dump_stack_lvl+0x140/0x1c0
[  113.879716][ T2217]  ? __cfi_dump_stack_lvl+0x10/0x10
[  113.879739][ T2217]  ? do_vfs_ioctl+0x1824/0x2010
[  113.879756][ T2217]  dump_stack+0x19/0x20
[  113.879778][ T2217]  should_fail_ex+0x3c2/0x510
[  113.879794][ T2217]  should_failslab+0xac/0x100
[  113.879809][ T2217]  kmem_cache_alloc_node_noprof+0x45/0x420
[  113.879831][ T2217]  ? __alloc_skb+0x10c/0x360
[  113.879848][ T2217]  __alloc_skb+0x10c/0x360
[  113.879865][ T2217]  create_monitor_ctrl_open+0x161/0x830
[  113.879884][ T2217]  ? selinux_capable+0x38/0x50
[  113.879902][ T2217]  ? security_capable+0x44/0x130
[  113.879925][ T2217]  ? hci_sock_gen_cookie+0x120/0x120
[  113.879944][ T2217]  ? ns_capable+0x90/0xf0
[  113.879960][ T2217]  hci_sock_ioctl+0x3b8/0x9e0
[  113.879979][ T2217]  sock_do_ioctl+0x118/0x330
[  113.879994][ T2217]  ? sock_show_fdinfo+0xd0/0xd0
[  113.880009][ T2217]  ? __cfi_vfs_write+0x10/0x10
[  113.880029][ T2217]  ? __kasan_check_write+0x18/0x20
[  113.880050][ T2217]  ? mutex_unlock+0x90/0x240
[  113.880070][ T2217]  sock_ioctl+0x568/0x7e0
[  113.880083][ T2217]  ? __cfi_sock_ioctl+0x10/0x10
[  113.880098][ T2217]  ? __fget_files+0x2bc/0x330
[  113.880112][ T2217]  ? bpf_lsm_file_ioctl+0xd/0x20
[  113.880128][ T2217]  ? security_file_ioctl+0x3e/0x110
[  113.880149][ T2217]  ? __cfi_sock_ioctl+0x10/0x10
[  113.880162][ T2217]  __se_sys_ioctl+0x123/0x1b0
[  113.880176][ T2217]  __x64_sys_ioctl+0x7f/0xa0
[  113.880191][ T2217]  x64_sys_call+0x1878/0x2ee0
[  113.880206][ T2217]  do_syscall_64+0x57/0xf0
[  113.880221][ T2217]  ? clear_bhb_loop+0x50/0xa0
[  113.880243][ T2217]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  113.880263][ T2217] RIP: 0033:0x7f428e79f559
[  113.880277][ T2217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.880289][ T2217] RSP: 002b:00007f428f6ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.880306][ T2217] RAX: ffffffffffffffda RBX: 00007f428ea25fa0 RCX: 00007f428e79f559
[  113.880318][ T2217] RDX: 0000000000000000 RSI: 00000000800448d3 RDI: 0000000000000004
[  113.880328][ T2217] RBP: 00007f428f6ee090 R08: 0000000000000000 R09: 0000000000000000
[  113.880338][ T2217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.880348][ T2217] R13: 00007f428ea26038 R14: 00007f428ea25fa0 R15: 00007fff3189b8b8
[  113.880361][ T2217]  </TASK>
[  113.945958][   T36] audit: type=1400 audit(1793311537.850:479): avc:  denied  { lock } for  pid=2218 comm="syz.4.567" path="socket:[19842]" dev="sockfs" ino=19842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  113.955365][    T9] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  114.196849][  T351] usb 4-1: unable to get BOS descriptor or descriptor too short
[  114.205365][  T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.215570][  T351] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  114.225778][  T351] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  114.236852][  T351] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  114.250074][  T351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  114.260960][  T351] usb 4-1: config 1 interface 1 has no altsetting 0
[  114.274064][  T351] usb 4-1: string descriptor 0 read error: -22
[  114.281026][  T351] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  114.290337][  T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.504152][   T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  114.655125][   T10] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  114.663457][   T10] usb 6-1: config 1 has no interface number 0
[  114.669730][   T10] usb 6-1: config 1 interface 105 has no altsetting 0
[  114.677995][   T10] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  114.687147][   T10] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  114.695302][   T10] usb 6-1: Product: syz
[  114.699510][   T10] usb 6-1: Manufacturer: syz
[  114.704173][   T10] usb 6-1: SerialNumber: syz
[  115.155910][   T10] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71
[  115.175490][   T10] usb 6-1: USB disconnect, device number 15
[  115.205153][    T9] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  115.216538][    T9] usb 2-1: USB disconnect, device number 43
[  115.217168][  T351] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  115.373155][ T2235] netlink: 156 bytes leftover after parsing attributes in process `syz.4.573'.
[  115.433966][  T351] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  115.452518][  T351] usb 4-1: USB disconnect, device number 46
[  115.465905][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  115.517999][   T36] audit: type=1400 audit(1793311539.471:480): avc:  denied  { mounton } for  pid=2243 comm="syz.4.576" path="/46/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  115.553697][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  115.703553][   T10] usb 6-1: Using ep0 maxpacket: 16
[  115.714695][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.734352][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  115.748374][   T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  115.763517][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.774692][   T10] usb 6-1: Product: syz
[  115.778989][   T10] usb 6-1: Manufacturer: syz
[  115.790580][   T10] usb 6-1: SerialNumber: syz
[  116.005779][ T2233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.019046][ T2233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.033398][    T9] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  116.052070][   T10] usb 6-1: 0:2 : does not exist
[  116.059412][   T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  116.077377][   T10] usb 6-1: USB disconnect, device number 16
[  116.087609][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  116.194680][    T9] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.213313][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  116.220098][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00
[  116.233609][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.243722][  T740] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  116.264325][    T9] usb 2-1: config 0 descriptor??
[  116.414592][  T740] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  116.425820][  T740] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  116.443422][  T740] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  116.464554][  T740] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.473903][  T740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.482066][  T740] usb 4-1: Product: syz
[  116.492140][  T740] usb 4-1: Manufacturer: syz
[  116.496856][  T740] usb 4-1: SerialNumber: syz
[  116.504160][ T2256] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  116.632457][ T2260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.582'.
[  116.688069][    T9] wacom 0003:056A:00BC.000C: item fetching failed at offset 5/6
[  116.697545][    T9] wacom 0003:056A:00BC.000C: parse failed
[  116.703592][    T9] wacom 0003:056A:00BC.000C: probe with driver wacom failed with error -22
[  116.718654][ T2256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.731064][ T2256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.739812][ T2256] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  116.747412][ T2256] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  116.793105][  T310] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  116.888727][   T10] usb 2-1: USB disconnect, device number 44
[  116.945256][  T310] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  116.954466][  T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.962540][  T310] usb 6-1: Product: syz
[  116.966879][  T310] usb 6-1: Manufacturer: syz
[  116.971535][  T310] usb 6-1: SerialNumber: syz
[  117.002958][  T351] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  117.154386][  T351] usb 5-1: unable to get BOS descriptor or descriptor too short
[  117.163030][  T351] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.173261][  T351] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  117.182259][  T351] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  117.185375][   T36] audit: type=1326 audit(1793311541.131:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2257 comm="syz.5.581" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f428e79f559 code=0x0
[  117.193856][  T351] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  117.231095][  T351] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  117.238420][ T2269] rust_binder: 2257:2269 no such ref 0
[  117.241935][  T351] usb 5-1: config 1 interface 1 has no altsetting 0
[  117.256342][  T351] usb 5-1: string descriptor 0 read error: -22
[  117.262614][  T351] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  117.271766][  T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.374677][ T2256] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  117.381982][ T2256] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  117.482557][  T351] usb 5-1: 2:0: failed to get current value for ch 0 (-32)
[  117.590258][  T740] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  117.596876][  T740] cdc_ncm 4-1:1.0: setting tx_max = 184
[  117.672653][   T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  117.793567][  T740] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  117.807438][  T740] usb 4-1: USB disconnect, device number 47
[  117.815122][  T740] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  117.830566][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  117.841899][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.852186][   T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  117.867739][   T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  117.879922][   T10] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  117.899774][   T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  117.910972][   T10] usb 2-1: config 1 interface 1 has no altsetting 0
[  117.924308][   T10] usb 2-1: string descriptor 0 read error: -22
[  117.930613][   T10] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  117.939942][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.582242][  T740] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  118.733326][  T740] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4
[  118.746035][  T740] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40
[  118.755218][  T740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.763263][  T740] usb 4-1: Product: syz
[  118.767503][  T740] usb 4-1: Manufacturer: syz
[  118.772203][  T740] usb 4-1: SerialNumber: syz
[  118.861215][  T351] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  118.871108][   T10] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  118.874117][  T351] usb 5-1: USB disconnect, device number 21
[  118.982298][  T740] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  118.992355][  T740] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71
[  119.002404][  T740] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71
[  119.014454][  T740] usb 4-1: USB disconnect, device number 48
[  119.086930][   T10] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  119.097502][   T10] usb 2-1: USB disconnect, device number 45
[  119.108532][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  119.582748][  T310] usb 6-1: USB disconnect, device number 17
[  119.613185][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  119.630985][  T351] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  119.660193][ T2320] sit0: entered promiscuous mode
[  119.666913][ T2320] netlink: 'syz.5.595': attribute type 1 has an invalid length.
[  119.680336][ T2320] netlink: 1 bytes leftover after parsing attributes in process `syz.5.595'.
[  119.781649][  T715] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  119.791679][  T351] usb 5-1: Using ep0 maxpacket: 16
[  119.797853][  T351] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.808041][  T351] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.818514][  T351] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  119.827686][  T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.835969][  T351] usb 5-1: Product: syz
[  119.840265][  T351] usb 5-1: Manufacturer: syz
[  119.844924][  T351] usb 5-1: SerialNumber: syz
[  119.917577][ T2334] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  119.925036][  T715] usb 4-1: device descriptor read/64, error -71
[  119.990322][ T2334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.600'.
[  120.021536][  T310] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  120.054006][ T2309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.064263][ T2309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.075651][  T351] usb 5-1: 0:2 : does not exist
[  120.083737][  T351] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  120.097951][  T351] usb 5-1: USB disconnect, device number 22
[  120.110488][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  120.184148][  T310] usb 6-1: unable to get BOS descriptor or descriptor too short
[  120.192736][  T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.203365][  T310] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  120.212508][  T310] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  120.221685][  T715] usb 4-1: device descriptor read/64, error -71
[  120.224021][  T310] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  120.243072][  T310] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  120.254231][  T310] usb 6-1: config 1 interface 1 has no altsetting 0
[  120.263315][  T310] usb 6-1: string descriptor 0 read error: -22
[  120.269679][  T310] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  120.278988][  T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.461337][  T715] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  120.490051][  T310] usb 6-1: 2:0: failed to get current value for ch 0 (-32)
[  120.551330][  T351] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  120.591310][  T715] usb 4-1: device descriptor read/64, error -71
[  120.615518][   T36] audit: type=1400 audit(1793311544.563:482): avc:  denied  { create } for  pid=2341 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  120.732701][  T351] usb 2-1: unable to get BOS descriptor or descriptor too short
[  120.741307][  T351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.751792][  T351] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  120.760958][  T351] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  120.772194][  T351] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  120.785839][  T351] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  120.796975][  T351] usb 2-1: config 1 interface 1 has no altsetting 0
[  120.806004][  T351] usb 2-1: string descriptor 0 read error: -22
[  120.812664][  T351] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  120.821925][  T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.841147][  T715] usb 4-1: device descriptor read/64, error -71
[  120.951558][  T715] usb usb4-port1: attempt power cycle
[  121.290945][  T715] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  121.312037][  T715] usb 4-1: device descriptor read/8, error -71
[  121.441992][  T715] usb 4-1: device descriptor read/8, error -71
[  121.680761][  T715] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  121.686865][   T36] audit: type=1400 audit(1793311545.634:483): avc:  denied  { mounton } for  pid=2354 comm="syz.4.607" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  121.702466][  T715] usb 4-1: device descriptor read/8, error -71
[  121.731755][ T2355] syzkaller0: entered promiscuous mode
[  121.737313][ T2355] syzkaller0: entered allmulticast mode
[  121.743053][  T310] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  121.755033][  T351] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  121.762970][  T310] usb 6-1: USB disconnect, device number 18
[  121.841768][  T715] usb 4-1: device descriptor read/8, error -71
[  121.950748][  T715] usb usb4-port1: unable to enumerate USB device
[  121.967548][  T351] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  121.980938][  T351] usb 2-1: USB disconnect, device number 46
[  122.262875][ T2360] netlink: 72 bytes leftover after parsing attributes in process `syz.5.608'.
[  122.275285][ T2363] 2N: renamed from vcan0 (while UP)
[  122.333071][ T2367] cgroup: fork rejected by pids controller in /syz5
[  122.500380][  T310] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  122.565702][ T2411] FAULT_INJECTION: forcing a failure.
[  122.565702][ T2411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.580521][ T2411] CPU: 0 UID: 0 PID: 2411 Comm: syz.1.613 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e
[  122.580560][ T2411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  122.580574][ T2411] Call Trace:
[  122.580582][ T2411]  <TASK>
[  122.580590][ T2411]  __dump_stack+0x21/0x30
[  122.580628][ T2411]  dump_stack_lvl+0x140/0x1c0
[  122.580662][ T2411]  ? __cfi_dump_stack_lvl+0x10/0x10
[  122.580696][ T2411]  dump_stack+0x19/0x20
[  122.580726][ T2411]  should_fail_ex+0x3c2/0x510
[  122.580749][ T2411]  should_fail+0xf/0x20
[  122.580768][ T2411]  should_fail_usercopy+0x1e/0x30
[  122.580789][ T2411]  _copy_from_user+0x20/0xa0
[  122.580815][ T2411]  userfaultfd_ioctl+0x369/0x45c0
[  122.580849][ T2411]  ? __asan_set_shadow_00+0x12/0x20
[  122.580874][ T2411]  ? arch_stack_walk+0x10a/0x170
[  122.580898][ T2411]  ? __ia32_compat_sys_ioctl+0x980/0x980
[  122.580921][ T2411]  ? __cfi_userfaultfd_ioctl+0x10/0x10
[  122.580954][ T2411]  ? _parse_integer+0x2e/0x40
[  122.580990][ T2411]  ? ioctl_has_perm+0x39a/0x500
[  122.581021][ T2411]  ? has_cap_mac_admin+0xd0/0xd0
[  122.581054][ T2411]  ? proc_fail_nth_write+0x184/0x220
[  122.581080][ T2411]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  122.581107][ T2411]  ? selinux_file_ioctl+0x732/0x1480
[  122.581137][ T2411]  ? vfs_write+0xbcf/0xfd0
[  122.581166][ T2411]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  122.581196][ T2411]  ? __cfi_vfs_write+0x10/0x10
[  122.581224][ T2411]  ? __kasan_check_write+0x18/0x20
[  122.581251][ T2411]  ? mutex_unlock+0x90/0x240
[  122.581280][ T2411]  ? __cfi_mutex_unlock+0x10/0x10
[  122.581310][ T2411]  ? __fget_files+0x2bc/0x330
[  122.581331][ T2411]  ? bpf_lsm_file_ioctl+0xd/0x20
[  122.581352][ T2411]  ? security_file_ioctl+0x3e/0x110
[  122.581382][ T2411]  ? __cfi_userfaultfd_ioctl+0x10/0x10
[  122.581412][ T2411]  __se_sys_ioctl+0x123/0x1b0
[  122.581440][ T2411]  __x64_sys_ioctl+0x7f/0xa0
[  122.581461][ T2411]  x64_sys_call+0x1878/0x2ee0
[  122.581484][ T2411]  do_syscall_64+0x57/0xf0
[  122.581504][ T2411]  ? clear_bhb_loop+0x50/0xa0
[  122.581535][ T2411]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  122.581563][ T2411] RIP: 0033:0x7fc86a39f559
[  122.581581][ T2411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.581598][ T2411] RSP: 002b:00007fc868df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.581620][ T2411] RAX: ffffffffffffffda RBX: 00007fc86a625fa0 RCX: 00007fc86a39f559
[  122.581636][ T2411] RDX: 0000200000000200 RSI: 00000000c028aa05 RDI: 0000000000000003
[  122.581651][ T2411] RBP: 00007fc868df7090 R08: 0000000000000000 R09: 0000000000000000
[  122.581665][ T2411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.581678][ T2411] R13: 00007fc86a626038 R14: 00007fc86a625fa0 R15: 00007fff5dad1448
[  122.581695][ T2411]  </TASK>
[  122.941603][  T310] usb 6-1: unable to get BOS descriptor or descriptor too short
[  122.949707][  T310] usb 6-1: not running at top speed; connect to a high speed hub
[  122.959512][  T310] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  122.968637][  T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.976764][  T310] usb 6-1: Product: syz
[  122.981006][  T310] usb 6-1: Manufacturer: syz
[  122.985631][  T310] usb 6-1: SerialNumber: syz
[  123.120084][  T314] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  123.130129][  T740] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  123.160048][   T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  123.192193][ T2361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.200907][ T2361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.209048][ T2361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.217620][ T2361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.225827][ T2361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.234445][ T2361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.242613][ T2361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.251168][ T2361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.259310][ T2361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.267914][ T2361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.270674][  T314] usb 2-1: Using ep0 maxpacket: 8
[  123.282372][  T740] usb 5-1: unable to get BOS descriptor or descriptor too short
[  123.291034][  T740] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.301274][  T740] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  123.310454][  T314] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice= 0.40
[  123.319588][  T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.327711][  T740] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  123.338727][  T314] usb 2-1: Product: syz
[  123.343107][  T740] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  123.356338][  T314] usb 2-1: Manufacturer: syz
[  123.361282][  T314] usb 2-1: SerialNumber: syz
[  123.366124][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.376695][  T740] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  123.388067][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.399535][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.409425][  T740] usb 5-1: config 1 interface 1 has no altsetting 0
[  123.416129][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  123.430111][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.439320][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  123.447463][   T10] usb 4-1: SerialNumber: syz
[  123.453259][  T740] usb 5-1: string descriptor 0 read error: -22
[  123.461866][   T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  123.470265][  T740] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  123.479354][  T740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.660748][   T10] usb 4-1: USB disconnect, device number 53
[  123.697713][  T740] usb 5-1: 2:0: failed to get current value for ch 0 (-32)
[  124.115289][ T2422] loop5: detected capacity change from 0 to 7
[  124.123011][  T656] Buffer I/O error on dev loop5, logical block 0, async page read
[  124.131268][  T656] Buffer I/O error on dev loop5, logical block 0, async page read
[  124.139388][  T656] Buffer I/O error on dev loop5, logical block 0, async page read
[  124.147692][  T656] Buffer I/O error on dev loop5, logical block 0, async page read
[  124.155994][  T656] Buffer I/O error on dev loop5, logical block 0, async page read
[  124.182522][ T2424] netlink: 260 bytes leftover after parsing attributes in process `syz.1.618'.
[  124.210875][ T2429] netlink: 124 bytes leftover after parsing attributes in process `syz.1.620'.
[  124.215092][ T2430] 9pnet_fd: Insufficient options for proto=fd
[  124.222297][   T36] audit: type=1400 audit(1793311548.175:484): avc:  denied  { mounton } for  pid=2427 comm="syz.1.620" path="/155/file0" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  124.222724][ T2429] fuse: Bad value for 'rootmode'
[  124.255768][   T36] audit: type=1400 audit(1793311548.215:485): avc:  denied  { map } for  pid=2427 comm="syz.1.620" path="/155/file0" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  124.353520][ T2433] syz.1.622 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  124.379648][ T2436] FAULT_INJECTION: forcing a failure.
[  124.379648][ T2436] name failslab, interval 1, probability 0, space 0, times 0
[  124.392517][ T2436] CPU: 1 UID: 0 PID: 2436 Comm: syz.3.623 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e
[  124.392557][ T2436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  124.392575][ T2436] Call Trace:
[  124.392583][ T2436]  <TASK>
[  124.392593][ T2436]  __dump_stack+0x21/0x30
[  124.392635][ T2436]  dump_stack_lvl+0x140/0x1c0
[  124.392671][ T2436]  ? __cfi_dump_stack_lvl+0x10/0x10
[  124.392714][ T2436]  ? do_pipe2+0xab/0x190
[  124.392749][ T2436]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  124.392795][ T2436]  dump_stack+0x19/0x20
[  124.392829][ T2436]  should_fail_ex+0x3c2/0x510
[  124.392855][ T2436]  should_failslab+0xac/0x100
[  124.392878][ T2436]  kmem_cache_alloc_lru_noprof+0x44/0x410
[  124.392911][ T2436]  ? __d_alloc+0x42/0x8c0
[  124.392941][ T2436]  __d_alloc+0x42/0x8c0
[  124.392971][ T2436]  d_alloc_pseudo+0x23/0xc0
[  124.393002][ T2436]  alloc_file_pseudo+0xde/0x1f0
[  124.393029][ T2436]  ? __cfi_alloc_file_pseudo+0x10/0x10
[  124.393054][ T2436]  ? __mutex_init+0xa6/0x1a0
[  124.393079][ T2436]  create_pipe_files+0x287/0x6c0
[  124.393110][ T2436]  __do_pipe_flags+0x50/0x2f0
[  124.393140][ T2436]  do_pipe2+0xab/0x190
[  124.393171][ T2436]  ? xfd_validate_state+0x68/0x140
[  124.393206][ T2436]  ? pipe_fcntl+0x520/0x520
[  124.393239][ T2436]  __x64_sys_pipe2+0x5e/0x70
[  124.393271][ T2436]  x64_sys_call+0x8be/0x2ee0
[  124.393295][ T2436]  do_syscall_64+0x57/0xf0
[  124.393318][ T2436]  ? clear_bhb_loop+0x50/0xa0
[  124.393348][ T2436]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  124.393379][ T2436] RIP: 0033:0x7f0433f9f559
[  124.393400][ T2436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.393420][ T2436] RSP: 002b:00007f0434f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  124.393446][ T2436] RAX: ffffffffffffffda RBX: 00007f0434225fa0 RCX: 00007f0433f9f559
[  124.393464][ T2436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  124.393482][ T2436] RBP: 00007f0434036b20 R08: 0000000000000000 R09: 0000000000000000
[  124.393498][ T2436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.393512][ T2436] R13: 00007f0434226038 R14: 00007f0434225fa0 R15: 00007fff6f925668
[  124.393531][ T2436]  </TASK>
[  125.508962][  T715] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  125.658862][  T715] usb 4-1: Using ep0 maxpacket: 32
[  125.665601][  T715] usb 4-1: unable to get BOS descriptor or descriptor too short
[  125.674248][  T715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.684551][  T715] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  125.695489][  T715] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  125.705277][  T715] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.719664][  T715] usb 4-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40
[  125.728756][  T715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.736828][  T715] usb 4-1: Product: syz
[  125.741059][  T715] usb 4-1: Manufacturer: syz
[  125.745699][  T715] usb 4-1: SerialNumber: syz
[  125.873577][ T2460] overlayfs: failed to resolve './file0': -2
[  125.910665][  T740] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  125.922133][  T314] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  125.932033][  T740] usb 5-1: USB disconnect, device number 23
[  125.938487][  T314] usb 2-1: unit 4 not found!
[  125.944430][ T2464] FAULT_INJECTION: forcing a failure.
[  125.944430][ T2464] name failslab, interval 1, probability 0, space 0, times 0
[  125.963699][  T310] usb 6-1: MIDIStreaming interface descriptor not found
[  125.972830][ T2464] CPU: 1 UID: 0 PID: 2464 Comm: syz.1.634 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e
[  125.972863][ T2464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  125.972877][ T2464] Call Trace:
[  125.972885][ T2464]  <TASK>
[  125.972892][ T2464]  __dump_stack+0x21/0x30
[  125.972928][ T2464]  dump_stack_lvl+0x140/0x1c0
[  125.972959][ T2464]  ? __cfi_dump_stack_lvl+0x10/0x10
[  125.972990][ T2464]  ? mas_prev+0x5f/0xa0
[  125.973021][ T2464]  dump_stack+0x19/0x20
[  125.973052][ T2464]  should_fail_ex+0x3c2/0x510
[  125.973074][ T2464]  should_failslab+0xac/0x100
[  125.973097][ T2464]  kmem_cache_alloc_noprof+0x42/0x410
[  125.973126][ T2464]  ? __anon_vma_prepare+0xec/0x590
[  125.973158][ T2464]  __anon_vma_prepare+0xec/0x590
[  125.973188][ T2464]  uffd_lock_vma+0x1d8/0x2a0
[  125.973218][ T2464]  move_pages+0xfd/0x1020
[  125.973247][ T2464]  ? avc_has_extended_perms+0x7fb/0xe60
[  125.973270][ T2464]  ? __kasan_check_write+0x18/0x20
[  125.973301][ T2464]  userfaultfd_ioctl+0x358e/0x45c0
[  125.973336][ T2464]  ? arch_stack_walk+0x10a/0x170
[  125.973358][ T2464]  ? __ia32_compat_sys_ioctl+0x980/0x980
[  125.973380][ T2464]  ? __cfi_userfaultfd_ioctl+0x10/0x10
[  125.973412][ T2464]  ? _parse_integer+0x2e/0x40
[  125.973448][ T2464]  ? ioctl_has_perm+0x39a/0x500
[  125.973479][ T2464]  ? has_cap_mac_admin+0xd0/0xd0
[  125.973510][ T2464]  ? proc_fail_nth_write+0x184/0x220
[  125.973537][ T2464]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  125.973562][ T2464]  ? selinux_file_ioctl+0x732/0x1480
[  125.973592][ T2464]  ? vfs_write+0xbcf/0xfd0
[  125.973622][ T2464]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  125.973653][ T2464]  ? __cfi_vfs_write+0x10/0x10
[  125.973682][ T2464]  ? __kasan_check_write+0x18/0x20
[  125.973710][ T2464]  ? mutex_unlock+0x90/0x240
[  125.973740][ T2464]  ? __cfi_mutex_unlock+0x10/0x10
[  125.973780][ T2464]  ? __fget_files+0x2bc/0x330
[  125.973802][ T2464]  ? bpf_lsm_file_ioctl+0xd/0x20
[  125.973827][ T2464]  ? security_file_ioctl+0x3e/0x110
[  125.973867][ T2464]  ? __cfi_userfaultfd_ioctl+0x10/0x10
[  125.973901][ T2464]  __se_sys_ioctl+0x123/0x1b0
[  125.973923][ T2464]  __x64_sys_ioctl+0x7f/0xa0
[  125.973946][ T2464]  x64_sys_call+0x1878/0x2ee0
[  125.973969][ T2464]  do_syscall_64+0x57/0xf0
[  125.973991][ T2464]  ? clear_bhb_loop+0x50/0xa0
[  125.974023][ T2464]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  125.974054][ T2464] RIP: 0033:0x7fc86a39f559
[  125.974073][ T2464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.974091][ T2464] RSP: 002b:00007fc868df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  125.974114][ T2464] RAX: ffffffffffffffda RBX: 00007fc86a625fa0 RCX: 00007fc86a39f559
[  125.974130][ T2464] RDX: 0000200000000200 RSI: 00000000c028aa05 RDI: 0000000000000003
[  125.974144][ T2464] RBP: 00007fc868df7090 R08: 0000000000000000 R09: 0000000000000000
[  125.974158][ T2464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.974171][ T2464] R13: 00007fc86a626038 R14: 00007fc86a625fa0 R15: 00007fff5dad1448
[  125.974190][ T2464]  </TASK>
[  125.983445][  T314] usb 2-1: USB disconnect, device number 47
[  126.036024][  T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  126.061091][  T310] usb 6-1: USB disconnect, device number 19
[  126.089175][ T2468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.635'.
[  126.146070][  T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  126.151862][  T715] usb 4-1: MIDIStreaming interface descriptor not found
[  126.358367][  T715] usb 4-1: USB disconnect, device number 54
[  126.410898][   T36] audit: type=1400 audit(1793311550.366:486): avc:  denied  { map } for  pid=2476 comm="syz.4.639" path="socket:[21876]" dev="sockfs" ino=21876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  126.444428][   T36] audit: type=1400 audit(1793311550.386:487): avc:  denied  { block_suspend } for  pid=2472 comm="syz.5.637" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  126.568165][   T36] audit: type=1400 audit(1793311550.516:488): avc:  denied  { accept } for  pid=2491 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  126.738396][  T310] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  126.738396][  T351] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  126.808427][  T740] usb 4-1: new low-speed USB device number 55 using dummy_hcd
[  126.889625][  T351] usb 2-1: unable to get BOS descriptor or descriptor too short
[  126.898150][  T351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.908410][  T351] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  126.917409][  T351] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  126.920300][  T310] usb 6-1: unable to get BOS descriptor or descriptor too short
[  126.928632][  T351] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  126.938478][  T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.949373][  T351] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  126.960279][  T310] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  126.970489][  T351] usb 2-1: config 1 interface 1 has no altsetting 0
[  126.980207][  T310] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  126.989001][  T351] usb 2-1: string descriptor 0 read error: -22
[  126.997836][  T310] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  127.003379][  T351] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  127.017215][  T310] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  127.025481][  T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.036256][  T740] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 252, changing to 4
[  127.055129][  T740] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 0
[  127.065971][  T310] usb 6-1: config 1 interface 1 has no altsetting 0
[  127.072657][  T740] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16, setting to 8
[  127.085467][  T310] usb 6-1: string descriptor 0 read error: -22
[  127.091790][  T310] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  127.100918][  T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.272181][  T351] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  128.257639][  T715] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  128.418685][  T715] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  128.439055][  T715] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.457704][  T715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.465824][  T715] usb 5-1: Product: syz
[  128.475923][  T715] usb 5-1: Manufacturer: syz
[  128.480745][  T715] usb 5-1: SerialNumber: syz
[  128.499721][ T2523] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  128.722455][  T715] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  128.734560][  T715] usb 5-1: USB disconnect, device number 24
[  129.497097][  T314] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  129.513254][  T351] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  129.536341][  T310] usb 6-1: 2:0: failed to get current value for ch 0 (-71)
[  129.544738][  T351] usb 2-1: USB disconnect, device number 48
[  129.557213][ T2533] binder: Unknown parameter 'hash'
[  129.571353][  T310] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  129.582316][ T2536] netlink: 'syz.1.658': attribute type 29 has an invalid length.
[  129.594889][  T740] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40
[  129.612101][  T310] usb 6-1: USB disconnect, device number 20
[  129.625123][  T740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.640527][  T740] usb 4-1: Product: Щ
[  129.647040][  T314] usb 5-1: device descriptor read/64, error -71
[  129.665561][  T740] usb 4-1: Manufacturer: Ⰱ
[  129.675930][  T740] usb 4-1: can't set config #1, error -71
[  129.683339][  T740] usb 4-1: USB disconnect, device number 55
[  129.740201][ T2545] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer.
[  129.789193][ T2555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'.
[  129.853486][ T2555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'.
[  129.886911][  T314] usb 5-1: device descriptor read/64, error -71
[  130.036844][  T351] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  130.111418][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.118572][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.125705][ T2570] bridge_slave_0: entered allmulticast mode
[  130.132561][ T2570] bridge_slave_0: entered promiscuous mode
[  130.136886][  T314] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  130.141828][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.153210][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.160381][ T2570] bridge_slave_1: entered allmulticast mode
[  130.167015][ T2570] bridge_slave_1: entered promiscuous mode
[  130.176810][   T12] bridge_slave_1: left allmulticast mode
[  130.182533][   T12] bridge_slave_1: left promiscuous mode
[  130.188338][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.196006][   T12] bridge_slave_0: left allmulticast mode
[  130.201862][   T12] bridge_slave_0: left promiscuous mode
[  130.207779][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.209452][  T351] usb 2-1: unable to get BOS descriptor or descriptor too short
[  130.223356][  T351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.233571][  T351] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  130.242784][  T351] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  130.254287][  T351] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  130.267915][  T351] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  130.276803][  T314] usb 5-1: device descriptor read/64, error -71
[  130.278837][  T351] usb 2-1: config 1 interface 1 has no altsetting 0
[  130.294618][  T351] usb 2-1: string descriptor 0 read error: -22
[  130.300912][  T351] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  130.310052][  T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.369711][   T12] veth1_macvtap: left promiscuous mode
[  130.375308][   T12] veth0_vlan: left promiscuous mode
[  130.439673][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.446853][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.454149][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.461325][ T2570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.484490][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.492293][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.503050][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.510164][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.519671][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.525440][  T351] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  130.526776][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.546945][  T314] usb 5-1: device descriptor read/64, error -71
[  130.564513][ T2570] veth0_vlan: entered promiscuous mode
[  130.577876][ T2570] veth1_macvtap: entered promiscuous mode
[  130.656803][  T314] usb usb5-port1: attempt power cycle
[  130.972358][   T36] audit: type=1400 audit(1793311554.928:489): avc:  denied  { mounton } for  pid=2587 comm="syz.6.674" path="/3/file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  130.997277][ T2588] 9pnet_fd: Insufficient options for proto=fd
[  131.006375][  T314] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  131.027649][  T314] usb 5-1: device descriptor read/8, error -71
[  131.050217][ T2590] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3276594798 (26212758384 ns) > initial count (15403876168 ns). Using initial count to start timer.
[  131.157790][  T314] usb 5-1: device descriptor read/8, error -71
[  131.269939][ T2597] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer.
[  131.396218][  T314] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  131.417190][  T314] usb 5-1: device descriptor read/8, error -71
[  131.446047][   T36] audit: type=1400 audit(1793311555.398:490): avc:  denied  { mounton } for  pid=2600 comm="syz.6.679" path="/5/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  131.448791][ T2601] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  131.557543][  T314] usb 5-1: device descriptor read/8, error -71
[  131.657454][ T1002] bridge_slave_1: left allmulticast mode
[  131.663201][ T1002] bridge_slave_1: left promiscuous mode
[  131.669014][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.677355][ T1002] bridge_slave_0: left allmulticast mode
[  131.684475][ T1002] bridge_slave_0: left promiscuous mode
[  131.684484][  T314] usb usb5-port1: unable to enumerate USB device
[  131.697462][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.705765][   T36] audit: type=1404 audit(1793311555.658:491): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  131.746667][   T36] audit: type=1400 audit(1793311555.708:492): avc:  denied  { read write } for  pid=2607 comm="syz.6.683" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0
[  131.810215][   T36] audit: type=1400 audit(1793311555.768:493): avc:  denied  { read } for  pid=2610 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  131.893668][   T36] audit: type=1400 audit(1793311555.848:494): avc:  denied  { execmem } for  pid=2612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  131.920339][   T36] audit: type=1400 audit(1793311555.878:495): avc:  denied  { execmem } for  pid=2613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  131.944798][   T36] audit: type=1400 audit(1793311555.898:496): avc:  denied  { execmem } for  pid=2614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  131.965306][ T1002] veth1_macvtap: left promiscuous mode
[  131.971710][ T1002] veth0_vlan: left promiscuous mode
[  131.972525][   T36] audit: type=1400 audit(1793311555.928:497): avc:  denied  { read } for  pid=2570 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  132.308026][   T36] audit: type=1400 audit(1793311556.269:498): avc:  denied  { read } for  pid=1479 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  132.373830][   T36] audit: type=1400 audit(1793311556.329:499): avc:  denied  { execmem } for  pid=2615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  132.398182][ T2619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'.
[  132.412620][ T2619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'.
[  132.745394][  T351] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  132.761062][  T351] usb 2-1: USB disconnect, device number 49
[  132.817577][   T12] bridge_slave_1: left allmulticast mode
[  132.823468][   T12] bridge_slave_1: left promiscuous mode
[  132.829602][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.837520][   T12] bridge_slave_0: left allmulticast mode
[  132.843252][   T12] bridge_slave_0: left promiscuous mode
[  132.849314][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.950872][   T12] veth1_macvtap: left promiscuous mode
[  132.959789][   T12] veth0_vlan: left promiscuous mode
[  132.989775][ T2638] selinux_netlink_send: 7 callbacks suppressed
[  132.989797][ T2638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57947 sclass=netlink_route_socket pid=2638 comm=syz.4.691
[  133.377632][   T12] bridge_slave_1: left allmulticast mode
[  133.383349][   T12] bridge_slave_1: left promiscuous mode
[  133.389393][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.397286][   T12] bridge_slave_0: left allmulticast mode
[  133.402971][   T12] bridge_slave_0: left promiscuous mode
[  133.409419][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.528608][   T12] veth1_macvtap: left promiscuous mode
[  133.534270][   T12] veth0_vlan: left promiscuous mode
[  133.736981][   T12] bridge_slave_1: left allmulticast mode
[  133.742670][   T12] bridge_slave_1: left promiscuous mode
[  133.748386][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.756099][   T12] bridge_slave_0: left allmulticast mode
[  133.761778][   T12] bridge_slave_0: left promiscuous mode
[  133.767711][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.837333][   T12] veth1_macvtap: left promiscuous mode
[  133.842886][   T12] veth0_vlan: left promiscuous mode