last executing test programs:

3.504855053s ago: executing program 2 (id=203):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x101401, 0x0)
connect$pptp(r0, &(0x7f00000003c0)={0x18, 0x2, {0x3, @multicast2}}, 0x1e)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="002390000000900c47a4"], 0x0}, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0xe, 0xb, {0xb, 0x30, "07997626e37f8c4f9f"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83f}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x30, 0xe1, "0091798c82b3876a901b3b03e1f1802ef5af2827e71e2cc9c62b0304495e8b892531a69342e72c802bb550e014b3ad2b08ec9997cb5f9af63b94ce83ead23854be5a767ff33c72e4deb9de26d7861d9989919d51b2e8a2ea2654a67748b2eaad031cf383adc40e48d380d36e5a3fa960d6aadbb18741e4fdf77577a9240cb60a6c2fa3d497a1e453c665a38412ecac4c12a884c42bdcaff497bdbf0206ba372756ddd5fb08722ff76def6e4f216d11594e3781f03a95a010adb1138a6325a7ffaa3f8ae5c0ef15cf22eb778cb368fea12afff7e5554c0bf4eb8227ec4073c60536"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5e}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x77}, &(0x7f00000002c0)={0xc0, 0x5, 0x6, "ddd6a15e54a4"}, &(0x7f0000000300)={0x40, 0x5, 0x6, "1dc1b9f353c8"}})

2.640617527s ago: executing program 0 (id=211):
socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.562760345s ago: executing program 0 (id=214):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
munmap(&(0x7f0000000000/0x1000)=nil, 0x1000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x5, 0x0)
pipe2$9p(&(0x7f0000005500), 0x800)
socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000200), 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x807, 0x0, 0xffffffff}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
socket$inet6_tcp(0xa, 0x1, 0x0)

2.465529816s ago: executing program 0 (id=215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000580))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x20002, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e) (async)
gettid()
timer_create(0x3, 0x0, &(0x7f0000044000)=<r2=>0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x7, 0x4) (async)
timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000100)) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00')
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) (async)
timerfd_gettime(r3, &(0x7f0000000180)) (async)
inotify_init()

2.397137252s ago: executing program 0 (id=216):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x3, 0xaff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x7, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0x5, 0xfffe, 0x202, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x0, 0x2, 0x5, 0x8, 0x4, 0x5, 0xffffffff, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9a09, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x2, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x7, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x6fcb, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1e, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3440, 0xfff]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.392879133s ago: executing program 0 (id=217):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x3}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b91c0000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f01c80fc79d53bf0000c4b9e16dc3010122", 0x61}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x9fa42f0, 0x60, 0x9, 0x1fe, 0x1000000010000d, 0x8001, 0x8000458, 0x80000008, 0x5, 0x2000100000000, 0xfffffffffffffff, 0x200008, 0x1, 0xffff, 0x2, 0x4], 0xffffffff, 0x40445})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0)

2.093877591s ago: executing program 0 (id=221):
r0 = syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040004000000000009210000b3d50d2a75aebcc602d431bd190001220700090581", @ANYRESDEC=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000000)={0x30003, 0x0, {[0x5, 0x400006891, 0x10, 0x100000000000401, 0x1, 0x5, 0x9, 0x2]}})
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0xb6, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x8)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000300)={0x10, 0x6, [{0x50f3e2fe, 0x0, 0x22b}, {0xcc, 0x0, 0x4}, {0xc407, 0x0, 0x9}, {0xadc5, 0x0, 0x800}, {0x80000000, 0x0, 0x100}, {0x2, 0x0, 0x8}, {0x1, 0x0, 0x3}, {0x0, 0x0, 0x8}, {0xc59b, 0x0, 0x6}, {0x7fffffff, 0x0, 0xc7f}, {0xde, 0x0, 0x9}, {0x80000001, 0x0, 0x4}, {0x6, 0x0, 0x8001}, {0x80000000, 0x0, 0x4}, {0x0, 0x0, 0x9}, {0x9, 0x0, 0x6}]})

1.87407686s ago: executing program 2 (id=222):
madvise(&(0x7f00004f2000/0x1000)=nil, 0x1000, 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
mlock(&(0x7f0000158000/0x4000)=nil, 0x4000)
munlockall()
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000009c0)={0x0, &(0x7f0000000280)=[@nested_vmlaunch={0x12f, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x10, 0x4, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x3}}, @in_dx={0x69, 0x20, {0x9ed, 0x2}}, @code={0xa, 0x65, {"f3d9f10f080f01c3c744240000000000c7442402dd110000c7442406000000000f011424b8010000000f01c1260ff6b92f000000c7442400de000000c744240200000080ff2c243e6466430fecd026670f01c5a7"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x18a, {0x2, 0x4, [@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x2, 0xff}}, @uexit={0x0, 0x18, 0x81}, @nested_load_code={0x12e, 0x6a, {0x3, "b9f80200000f32c744240000000000c7442402bd500000c7442406000000000f011424f3450f1ec626640f210e432b9e0060000066470f38800b410f00560066660f388207b8010000000f01d9470f454d0a"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x9c3b}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host16=0xc0c, 0x2, 0xb5d, 0x8}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}]}}, @wr_drn={0x68, 0x20, {0x6}}, @nested_load_syzos={0x136, 0x110, {0x1, 0xbd, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x5, 0x4b730341, 0x15}}, @rdmsr={0x66, 0x18, {0x9e}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @wr_drn={0x68, 0x20, {0x7}}, @uexit={0x0, 0x18, 0x1}, @nested_load_syzos={0x136, 0x20, {0x0, 0x3}}, @nested_amd_vmload={0x182, 0x18, 0x3}]}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x100, {0x1, 0x5, [@nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x280d, 0x7f, 0x0, 0x9}}, @code={0xa, 0x68, {"0f20c035000000800f22c02e6566410f205866baf80cb87dd30d8cef66bafc0cecc744240005000000c744240227af8fc5c7442406000000000f011c24360f0d0964470f211bf3410fc7770d66ba210066ed0f22d50f30"}}]}}, @cpuid={0x64, 0x18, {0x0, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xb8, 0x6, 0x9, 0x2}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x9, 0x6, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xcf, 0x3, 0x1, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x200000, 0xbc24}}, @nested_load_code={0x12e, 0x5b, {0x0, "b9070200000f3241e0000f01f80f20c035020000000f22c066b833018ec0f20f09660fee62fdc744240023000000c744240281000000ff2c24400fb45b00430fe245f0"}}, @in_dx={0x69, 0x20, {0x5e24, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18}, @wr_drn={0x68, 0x20, {0x2, 0xfffffffffffff800}}, @out_dx={0x6a, 0x28, {0xfe72, 0x2, 0x40}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x100000001}], 0x70a})
ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f000000d000/0x1000)=nil)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

1.813150483s ago: executing program 2 (id=223):
socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.799122857s ago: executing program 1 (id=224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x3a00, 0x4040000}, 0x8040)

1.798120377s ago: executing program 2 (id=225):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x7f) (async, rerun: 32)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32)
setsockopt$inet_opts(r1, 0x29, 0x6, &(0x7f0000000380)='\a', 0x1) (async)
readv(r0, &(0x7f0000002ac0)=[{&(0x7f00000005c0)=""/177, 0xb1}], 0x1) (async)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40)
write(r2, &(0x7f0000000000)='27', 0x2)
syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
close(r0) (async)
r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
write$selinux_validatetrans(r3, &(0x7f0000000400)={'/usr/sbin/cupsd', 0x20, 'system_u:object_r:device_t:s0', 0x20, 0x9831, 0x20, '/usr/sbin/cupsd\x00'}, 0x53)
ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000180)={0x20000000000000, 0x2}) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000080)={0x7, 0xff, 0x4}, 0xc) (async)
getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8)

1.754274487s ago: executing program 1 (id=226):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000080)={0x0, 0x8}) (async)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500002d003a2d003a0040"], 0x6c}, 0x1, 0x0, 0x0, 0x20008014}, 0x20040084) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async, rerun: 64)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x8040840}, 0x0) (rerun: 64)
sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) (async)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@nullb, 0x0, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x121842, 0x110)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r5, 0xa64c000)
getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f00000000c0)) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x11, r0, 0x95e46000) (rerun: 32)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x80000000) (async)
madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0x9)

1.381091521s ago: executing program 2 (id=227):
setresuid(0xee01, 0x0, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 32)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={<r2=>0x0, <r3=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRES32=r0, @ANYRES8=0x0], 0x78) (async)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040060086c200000000000109022400010000000109040009020300000009210000000122180009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a10109e981008c0508950129309102c0"], 0x0}, 0x0) (async, rerun: 32)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0)

1.324911203s ago: executing program 1 (id=229):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$TCSETAF(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x15, "8241cd032ae9da23"}) (async)
rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffedb) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
fcntl$addseals(r3, 0x409, 0xe) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
write(r3, &(0x7f0000000200)="44e7", 0x2)

1.16096475s ago: executing program 1 (id=231):
r0 = syz_clone(0x8224c500, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)

1.032427549s ago: executing program 3 (id=235):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x4000, 0x4040000}, 0x8040)

1.021390301s ago: executing program 3 (id=236):
r0 = socket$unix(0x1, 0x2, 0x0)
flistxattr(r0, &(0x7f0000000000)=""/36, 0x24) (async)
add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010c050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e207365", 0xb2, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x597e, 0xffffffff, 0x0, {0x5, 0x2000000000000000, 0xbdd6, 0xa, 0x10000, 0x8, 0x9d1f, 0x5, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x5, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8411, 0x0) (async)
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000500)=0x8, 0x4) (async)
bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) (async, rerun: 32)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
eventfd2(0x6, 0x0)

953.038187ms ago: executing program 1 (id=237):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) (rerun: 32)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32)
r6 = userfaultfd(0x80801) (async)
r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
lseek(r7, 0xff, 0x3) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 64)
ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x404d881, &(0x7f0000000540)={0xa, 0x4e24, 0xa, @mcast1}, 0xfffffffffffffe35) (async)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b40)="e9", 0x1}, {&(0x7f0000000100)="2c9df7af8e7d98dd452d", 0xa}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="452999", 0x3}], 0x1, &(0x7f0000000080)=ANY=[], 0x68}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)='t', 0x1}], 0x1}}], 0x5, 0x240144c1) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000000340)) (async)
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
setsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="121d4465b374b70a2d7c3b6a57b4a0273a2d832f890f4e008ea2770688ad32b59c28dead60b156ad581cb04d3db97f73", 0x30}, {&(0x7f00000002c0)="5ecf91274059fc98800f14f1e932080ec0a9bf8eb2176395f35ff15d9826efec1fc60f973a96a790fc2bc5bed9cf04d6ef45293af3f0b123d6220aa829be37e55824e25b35", 0xfffffffffffffd0f}, {&(0x7f0000000440)="fc1a8828956978b8418ebdd1adc10b9d0661e7bdf1408c5fc0b30fd4e9146a563b3686a9b2b83932c6728347d8bb84f85fe5330211dfacb7bb7f068e49c3347d5c38ffd997e09fd34f158e305a5e5906f988e6dffca68c751c1df1444395", 0x6b}, {&(0x7f0000000580)="6038d8c74602a926749e48fd7c6d15578bd2602a1111eef708495eac729dd2d7adda86de153ed02bb4f6846d59e2b7521b2dc7ac42a1438743da5357ac8d8b9d1b1976753152ee3922542b0a2ac85bc6ccfb87750089c9ccf016fe4eab7e138071e745caca2693", 0x67}], 0x4}}], 0x1, 0x84)

885.594222ms ago: executing program 3 (id=238):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=<r1=>0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x9, 0x5, 0x2, 0x5, 0x4, r1}) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40885) (async)
r4 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x58000, 0x10, 0x22}, 0x18)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000002c0)={0x0, r4}) (async, rerun: 32)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000300)) (async, rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r4) (rerun: 64)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x57ce0a21f9492c7}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}]}, 0x2c}}, 0x200008c4) (async, rerun: 64)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000004c0)=0x4) (async, rerun: 64)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfdd5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x908}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
r6 = syz_open_procfs(r1, &(0x7f0000000640)='net/dev_mcast\x00') (async)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) (async)
ioctl$FIOCLEX(r0, 0x5451)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r6)
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r8, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfff, 0x2a}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5e1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x316}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x10}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9a}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x23}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x11}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)
r9 = socket$inet6(0xa, 0x5, 0x5)
connect$inet6(r9, &(0x7f0000000940)={0xa, 0x4e23, 0x2, @private2, 0x8}, 0x1c) (async)
setsockopt(0xffffffffffffffff, 0xff, 0x1, &(0x7f0000000980)="50626a4cee5501e644dd35d70d7155162001ebc430df772783f84dcf8b772f574ccbe5445134979582b0d07f76754f506dd6bac1d395c7e56524e5267830e4d8989026d9ba058f576135038181884b52a7ee43ed6223c7fc0669905d288e74dc1d0d95bd93ed35f2723b8408e86f62e4b3ab75662cb29442c2941266a3b33c45d634a945f542e671136f1e4d5e4c605cf20959f74861241756f71110c1b6d04d1991fd493120997a2ea774c0c0bbc89575bad464471128f73b6e243b088728475390e6b0dd394ddde85d73daaea167fed5317aa75916677879a987792efe4f70361d68185c8e1721538dad8f089fcb5dcdc84ccde41b87ca", 0xf8) (async, rerun: 32)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000a80)='bridge_slave_0\x00', 0x10) (rerun: 32)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r4)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1fc, r10, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x41}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3953}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x61}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2e}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x6000485c}, 0x880) (async)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000dc0), 0x8000, 0x0)
ioctl$BLKTRACETEARDOWN(r11, 0x1276, 0x0) (async, rerun: 32)
close_range(r11, r0, 0x2) (async, rerun: 32)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)

834.946853ms ago: executing program 2 (id=239):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b86, 0x0, {0x9, 0x21, 0x1, 0xc0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x2b, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff}}}}}]}}]}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_open_procfs(r0, &(0x7f0000000080)='auxv\x00')

834.434833ms ago: executing program 3 (id=240):
clock_gettime(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x3}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b91c0000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f01c80fc79d53bf0000c4b9e16dc3010122", 0x61}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x9fa42f0, 0x60, 0x9, 0x1fe, 0x1000000010000d, 0x8001, 0x8000458, 0x80000008, 0x5, 0x2000100000000, 0xfffffffffffffff, 0x200008, 0x1, 0xffff, 0x2, 0x4], 0xffffffff, 0x40445})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)

635.224668ms ago: executing program 3 (id=241):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) (async)
write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x14, 0x0, &(0x7f0000000040)) (async)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x14, 0x0, &(0x7f0000000040))
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000280)={0x0, 0x2195, 0x4000, 0x3, 0x3aa, 0x0, r5}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4558, 0x1000, 0x3, 0x208}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bbb, 0x20, 0x3, 0x169}, <r6=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b2, 0x1, 0x3, 0x2b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x492c, 0x8, 0x0, 0x1dc}}], 0x4, 0x0, &(0x7f0000001a00))
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0x1064}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4955, 0x2000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0x1064}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4955, 0x2000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x6, 0xd1, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}})
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x5d) (async)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x5d)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aad03, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffff"], 0x62)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_usb_connect(0x5, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400001208065000070501020002000705820200020009040001040806620007050102000200032401"], 0x0)

1.08639ms ago: executing program 1 (id=242):
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', <r2=>0x0, 0x80, 0x1, 0x7, 0xfff, {{0x1c, 0x4, 0x2, 0x23, 0x70, 0x65, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x83, 0xa, "7bd62910dfb290c3"}, @noop, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x6, 0x11, "b8652d6e316f38a8c01b69fd8339a0"}]}, @generic={0x44, 0x4, "0fd1"}, @generic={0x89, 0x6, "6d511cd8"}, @noop, @ssrr={0x89, 0xf, 0xba, [@loopback, @remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0xdf, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @end]}}}}})
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)={0x8ed2, {{0x2, 0x4e23, @empty}}, 0x0, 0x1, [{{0x2, 0x4e24, @empty}}]}, 0x110)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x24000011, &(0x7f0000000340)={0xa, 0x4e21, 0x6f6e, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000018c0)={'batadv0\x00', <r4=>0x0})
sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000003c0)="9c39305cd732a7624c44f9b91a4e91a4b99af0a379e8d27e7b4bbed36bfa58e2f8b30292911408d59bf0f98b07572d4ae7492438fd", 0x35}, {&(0x7f0000000400)="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", 0xff}, {&(0x7f0000000500)="852ef18bde886fdd2b5835aac6f5438cb7acf0823480725ebb9c8e8d234cec3601e56550aa2b746b81cdb1137152d75b689aa344ab98f3519a3a1cc74743914a25fc2c312f1c67ff373234cbcc6503eb52a99e6bc7712117f85a3c9657459093bba59ee9ef5f94996baa06e7087336d3ff", 0x71}, {&(0x7f0000000580)="9e40ceceb8d94cbc54c489a903b3f06ca16702d174bf7aed65ba23c6647ae6685191", 0x22}, {&(0x7f00000005c0)="93682ab0605a5a8fea3eb1dfe17b1b1287e8af6f62d1367828667a7717dc5f04c5b7d8883f", 0x25}, {&(0x7f0000000600)="7de9bdbb1dadfa192e1b65b85a7b7b40c41eceaa76a42d38bfc3a2827fbb6d659c4278b14c738b602a4f0251ee0cffc2bb5fe5351a99db35ca59448877cd7a18f1c406c452ab1f23d26945778f663ce30d77647532228f5ce0178a9bb9ea734d061293b7d1baa2ba92cf36f06f91e5f01b33f7f463c6650ffbb58492ed9d952ed494fc26a34cf6e42c4e249ce3348bd52c53597c17658c3834c383ca976efecca0491157f40dce101674af8687887ef44a91b1cec09b14cfa8f248dfb14c0cb4329d90389d9de687f1e677cdac3120a8c7b29d9bf8de199c4108a650719593f7c6df90685ab89348562ff09bed9992a85b", 0xf1}, {&(0x7f0000000700)="5cc19381ddba54a292f87110171f5c2a7b41f6af5a1497e69eca33a1a3", 0x1d}, {&(0x7f0000000740)="80fea4129298ac301d73749bd0939589a50db8f96b3301360afcd88fae7f64c45f7bb591e6a07bae07bb2031f8965072aa4c5140a72c5d0cbc880b298309db3ce1c7348645ccb41572bc55a877971235dc229efb3c89c81e310b1a44e91ebe40162ddede213ef1c05f4a36ff1993f7087559d7bd383d33ba70fc4ec7b2996044e570c51c09c0b13b0555b9", 0x8b}, {&(0x7f0000000800)="32e2ebf490e46edf89790e2425abbc237e92c952c86a9ea498fc72bd89635a9a3bdd432c1de181bc649ab60cb4a7587649292cee3821a3b82dba5ff7561cd4f9e2b903f7164cd00dd50b535ce83c9632a7018a71b0ee84ec87352b8054374744f024b2f52c3e88c5c3c7d866f7f68539bd9df94afacffb17685b7047cee7921099a88d5172648c80fe6754e4d7ef8139e5260ec4324b6295e46190648bc2ce5f5f46407b8e3c79960fde803d344997720e674f095016f780", 0xb8}, {&(0x7f00000008c0)="9a79881340c4f9eadce063a2ab850e91eefd1ac7454289d9095b5dbedf0c47da9f70b68762cf0bb4a28e082d2490e0cd5e0df25effc911a2508ea2167cc6ab87ea153f8bb95db3ef059397864e3841a14138c6322c2d65057b5171fcf97a426481712cbd4fdb4f4c6c0d5b3ad494078d58ada597518e9fa3a83b1996064e51384c3b883c549ced7522d36470c85510eeeacd83702e75fa1e90304b0f54d76c7a52298986a78a9c0e5882c76334730ebea9759fc8f812b0c0c6c5d430d0a47414e51a299415725b3be0d1ebb572e5158d90f0959a2fac9187a7edb46d33d06ffce7db9dcf11a13fdfa20d897b5230d1fa23", 0xf1}], 0xa, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x2c}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5e}}], 0x90}}, {{&(0x7f0000000b40)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="9bed900589af72735ef39136cf748882339314984966f53f7a238bd9643b64aafef6e9b05e44610988a3778dfbc417ac4d7fc65a4a7c90f17d2b4a2e9a2b95f351c458c7398e5a04f87b657356cac1be4e8613ed229c98825e3b3fdd2521035a66a7a5953ba21061efaf759e2a99cde6909ffde6ac053953eed6c3216bfb30e6cb480dd03904d655dddea74791956a5b80c88c72a0dd3e", 0x97}, {&(0x7f0000000c40)="0174a3e32d440ce3acc48e7ce8b0899df4bec1423f24cce42472d077132cb19091927602885b524f5a532bb3b82fb033118431b9951008cde8d385269297d4a315b4c394ebd79b360cce2d19fc59966af37bf2fab6308759f50b079383deacc9dd655c7621a57bcf75fd7e953267aa15a6ac0a", 0x73}, {&(0x7f0000000cc0)="d5cf3628789717c17dae0a89b68412791dac1c27d90d60e01b5a862e85e94af599fc11b1f5a0ce3b13e301356c070cf14bbe354dbc1a8745940b3478522a0b63515eb6b7c703a0fd55861d7cf01c7548a963c6", 0x53}, {&(0x7f0000000d40)="508887f2d2c52c5d63a59b9e6ed7c1690816dc40207197a4db326702ccba35885486c0fb32fdf60003bd3f79eea521c8a37afe18f73e4de0e7a2a7bb51c8c63dcbb4c01dd8723df9f41b2fd9661cf303770740b9e8031299afb976f56eab195a1321843457f4c6e9104705c8ee234c3e6479f575084255d62ea9f623f77de9f7", 0x80}], 0x4, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x58}}, {{&(0x7f0000000e80)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000ec0)="87b63891fb50393ba7819c79435b5e45231b9f1d1621c106365a35191ed77a9e5ac99c7ba552586e09cc827d618cccfb23cabe0dc58965cd16aa92f5811d50a47bdd6c39e3490eafc77fdd2225c1a750e26340663976fef0e6bcecf0799ea8dbbefc0f059dbfcaab13cb36019008619c854ecc1b227290b953ce1b36ae5029b12d5d1736c67ad1b20a2acc288cf35481974127347ccc9bf5638c4d080e9e3529baa973655fbf29effffafd9340535ac3d46ea1bf046566b6b558129ce07f405973dc1ab053ae01f847", 0xc9}, {&(0x7f0000000fc0)="f7d0dc8f13982827229442589dbc9ad8bf31ae718296975b2895cc417a1a33ae53ecb65b15505b23e78a3421f543e1a2ede736973cd5c73c30d584f2124cc85a41e89a6b23dbe1ec4a2b016d4c2cb3560f54642b2df7a0c5afadf5651cea1ec904f673b1ab29f7b578fee9c26285bf7c33921325f12ed25291a4352eab7c06091627982019795c016b4bf32355748a96aa799776870adbd87efbf4adfb70737103f2bc55f7e5d51d667dda24324151204b85a15dad37446dea5e8673ba893a2242a09ce8e67b1a32bd0c0edce6837df633ef45b2384e092ad479212212df7c6a7d574899ef5951f3b5e7471bc2c5265b", 0xf0}, {&(0x7f00000010c0)="f832ab300ac71a41a7d626efb77812e742252d12a304da6efd2b444cc4f3b50f567db8baf0cb9c925a4fdb0a7abf62d86ac34b5cd426dc56e919ec572ca26f1c90c231435f9aefcaee0af9557a52a65d2c05e7ef224f5259b84a0713b26b88ee625a47272051c42177768f818984b84a8723aae197477c259bf4e711c6737c5efe7e5127d160fcff6ee2c23483e7e6aa771cb64b7b25f425ef810334935132f020d6510a5852a5869ba4f1edcdf208bebb912627f1fa3f022a08318991497d91161f94617a70beece4f1b4bfb3ac1781c5286c440af74f2b9c1d4d7ebc40934417c653b4fe7cccbbd55cc3a6a3b8db", 0xef}], 0x3, &(0x7f0000001200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @empty}}}, @ip_retopts={{0x12c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x64, 0x3, 0xe, [{@loopback, 0xfffffffb}]}, @cipso={0x86, 0x5b, 0x1, [{0x1, 0x9, "c3149f3d64d81d"}, {0x5, 0x11, "b74837a798a5ec36bc6792f6e69de3"}, {0x6, 0xf, "b1bc944fcc56e4177f987ffd33"}, {0x1, 0x7, "a580461c95"}, {0x2, 0xd, "9842d0504aa10e0ef80a82"}, {0x5, 0xb, "b5931cbe33106741ba"}, {0x0, 0x7, "2d13be9fb6"}, {0x5, 0x6, "4ed9750f"}]}, @timestamp={0x44, 0x20, 0xa3, 0x0, 0xe, [0x9, 0x0, 0x6, 0xa3e, 0x3, 0xd, 0x0]}, @timestamp={0x44, 0x10, 0xcf, 0x0, 0x3, [0x6, 0x5, 0x1]}, @lsrr={0x83, 0x1b, 0xd8, [@empty, @broadcast, @local, @rand_addr=0x64010100, @loopback, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x4, [{@multicast1, 0x8}, {@remote}]}, @generic={0x88, 0x9, "a4c59c3818123d"}, @ssrr={0x89, 0xb, 0x96, [@remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xbe, 0x3, 0x0, [{@broadcast, 0x8}, {@local, 0x1}, {@local, 0x4}, {@empty, 0xffffff01}, {@rand_addr=0x64010101, 0x7fffffff}, {@empty, 0x10}, {@local, 0x7}]}]}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xae, 0x0, 0x7, [0xf, 0x467, 0x8, 0x0, 0x0]}, @timestamp_addr={0x44, 0x44, 0x98, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x176}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x8}, {@broadcast, 0x200}, {@multicast1, 0x3b7}, {@loopback, 0x864}, {@private=0xa010102, 0x7fff}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @ra={0x94, 0x4}, @generic={0x86, 0xc, "c1899702e4ba517adc9b"}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x41, [@empty]}, @timestamp_prespec={0x44, 0x4c, 0xb4, 0x3, 0x7, [{@multicast2, 0x1}, {@multicast1, 0x7}, {@local, 0x9}, {@private=0xa010101, 0xc}, {@empty, 0x8001}, {@private=0xa010102, 0xa3}, {@multicast1, 0x4}, {@broadcast, 0x40}, {@local, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @loopback}}}, @ip_tos_int={{0x14}}], 0x290}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000014c0)="27b325ca37247cb3dae2ef0ba5d33507c0bafe96d9fd12a3a6c944843d394ac89953a4677ed792184d713f36597f1216", 0x30}, {&(0x7f0000001500)="ca6e8e233563ff99ca899c00e039fc129c9ef847116541c09b8ca099e259088704764440f36e7a2776bf9f3658d8843e1abac78db10a574838c3339464e7f643edf1fefbd7a2d2ec4b34d7a38cc5be16da30843c175fd6af92906c7680b71bb2092660e806a5dc47ac4f32856731bed859c744907eb2b90d3331", 0x7a}], 0x2, &(0x7f00000015c0)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x7d, 0x1, 0xa, [{@rand_addr=0x64010100, 0x1000}, {@local, 0xbb}, {@broadcast, 0x1000000}, {@private=0xa010100, 0x7}, {@loopback, 0xe2be}, {@local, 0x8}]}, @noop, @rr={0x7, 0x7, 0xa3, [@dev={0xac, 0x14, 0x14, 0x3f}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0x1, [{@loopback, 0x978}, {@loopback, 0xc17}]}, @end, @timestamp_addr={0x44, 0x1c, 0xf3, 0x1, 0xa, [{@empty, 0x1ff}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x15}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x118}}, {{&(0x7f0000001700)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001740)="c8b065fd9c009a52302d45829ab4fcdab06ab77a7cc52922bcc25afd4e3d9118ad7d8d07c5dbf8242a7290e8edfb29d16772b383adde4c3e02b2bdafe8875364c99e1761a0cfcbbcb2", 0x49}, {&(0x7f00000017c0)="77269717df21782e77651ebea562ca815f35160f91c5a1583cd9d7953b8ab6cbe7bf74780d36535a63037105ab4050ddbc7efeb6f393c3ba9121666d6dcf27616d2e1812353ac8d9b13751242668d1c06c585f70a0db8e51d3f44293119452fb61497744d056fc87019c56104ce7e7d0eb1da7ce13e6a97b96c80d5e5752f21caec645395728d8fdf5e70968310e7a9473be2617128e5fe1bf9f795100d4810f", 0xa0}], 0x2, &(0x7f0000001900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @dev={0xac, 0x14, 0x14, 0x40}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001980)="f5ef492b922d3a1bfc82fb410174b816ca422305c6c6cbf8705d0c21b57edaebf70173395ffeb88481d804c1c897df6cc36ac4a04da9f10c464c73ce5098c7d80e9ebdbb69247eaaea86f0633a2449a4c695c24ad3d5898c09bf7688fc092fe81b5329592de54dc7fa40d501448bbde0871337524fd935d3f76a3dc060c0742d9aa31008c568ceb112d553b732a2d6a0483b355aab12f5e5747c4b98c3268139569d618771577cfe2385777ebff33a882ad2ed281fba5a5fceb70a6c6b434e8ac52c7b4e163a7f182934d58df8e7e3aec2e237608d787346ba98409841ea13", 0xdf}, {&(0x7f0000001a80)="2ff32e34a319d7c683342dc514de80b3e104031ec1d29ab698cff597c178559c7fa15984d3eaaeedfaaad3745e6d4bb90aa6acf85cc3827d5ea30146d04089ba256cab0cc98c9753ba4f3cd1fce58fbe6179542d16a2c803bc6014a9a663b68c1b299eeaaa8c5f7779b851eb4dc3b2bf087436e5eaa8cca7484a618961dbbc73124f5298b182b034310671e90459b983c6dddcdac39905fdf293b02d12104551b14eb3efa8018faa08cb61d7e60c447ac588373dceed70b7371e3892d8edafda00d7b2e7eccc7baf060163aae6f6", 0xce}, {&(0x7f0000001b80)="b5e1d55aee03cec6c75b7c72383e1e66b0e2b0dbc1cd3b8731cdd971669cfb664327c771d03c4f9da64e6440431f62bdc6b1616db6dacc2d9394a2338b1f06252b7b2fd0f92924ad6a0419e2bbad949a8b809ae6ce30f1088beca45d06b1adc4589e4e6bdc53dffc753f463285845e4869876c98d5148351e0b34064bee14a1b47edabd1de64a281925ec57b9d2696845b49f9972f6d4581b1590682fcf965968b292727440a0bb02e0249cb42b2fbea9ba27100e62ac8e849bf199f2c1edf79d9151d9121e0bc56e6844bd5fb5a2dbc25db94", 0xd3}, {&(0x7f0000001c80)="09beba2a9099d57a0af1fff8a5fbef4d0278586328b0f5ab02362eadb6e7b873601b724382369e837224d3ac3c74f68bf137030b9393024adabd019a2f9c552ed9cf0a52185cf94b7670b6891883d22b0afbe7f142060c0aad032cacf57884a69007cf492504897e54bd68d8a747e1332564", 0x72}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="80d52600b0246b5b24340230d8feac8cd4bd9e42178257ed3762465fc978cf48dd", 0x21}], 0x6, &(0x7f0000002dc0)=[@ip_retopts={{0x88, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x0, [{0x7, 0xc, "bf1b8ade9d1f1826d218"}]}, @lsrr={0x83, 0xf, 0xdf, [@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, @loopback]}, @end, @generic={0x7, 0x12, "dd8cf04e3ecb74a8f272378cc32ba4d9"}, @timestamp_addr={0x44, 0x44, 0xa6, 0x1, 0x9, [{@remote, 0x2}, {@empty}, {@local, 0x9}, {@rand_addr=0x64010101, 0x4}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0x5}, {@broadcast, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @broadcast}}}], 0x120}}], 0x6, 0x2698b6f34aea2956)
ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000003080)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1})
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f00000030c0)=0x1, 0x4)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x68, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x72}]}, 0x68}, 0x1, 0x0, 0x0, 0x40400d4}, 0x40004)
close(r0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x34, 0x9, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r8 = socket$netlink(0x10, 0x3, 0x15)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mount(&(0x7f0000003380)=@filename='./file0\x00', &(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)='coda\x00', 0x110010, &(0x7f0000003440)='\xff\xff')
ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000003480))
openat$ppp(0xffffffffffffff9c, &(0x7f00000034c0), 0x800, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003500)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000003600)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000003640)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x4e24, 0x9, 0x4e22, 0x200, 0x8, 0x20, 0x80, 0x6, r4, r10}, {0x76, 0x10, 0x2, 0x2, 0xef7c, 0x4, 0xffffffffffffff81, 0xa8ed}, {0x2, 0x7, 0xffffffffffffffff, 0x9406}, 0x1000, 0x6e6bb0, 0x1, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d2, 0x3c}, 0x2, @in=@local, 0x3501, 0x0, 0x2, 0x38, 0x0, 0xfffff30f, 0x6e}}, 0xe8)
ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000003740))
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000037c0), r8)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000003b00)={&(0x7f0000003780), 0xc, &(0x7f0000003ac0)={&(0x7f0000003800)={0x2a8, r11, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}]}]}, @NL80211_ATTR_TID_CONFIG={0x80, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e8, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc, 0x167, 0x1, 0x0, 0x4, 0xcd, 0x200]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x1b, 0x6c, 0x1, 0x2, 0x12]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7ff, 0x0, 0x8, 0x8, 0x8, 0xc4c, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x36, 0x1, 0x19, 0x36, 0xc, 0x30, 0x2, 0x4, 0x6, 0x3, 0x6c, 0x60, 0xe, 0x6, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x5}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x7}, {}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x18, 0x2, 0x24, 0xc, 0xc, 0x2, 0x12, 0x36, 0x9, 0x30, 0x30, 0x1b, 0x5, 0x60, 0x5, 0x5, 0x24, 0xb, 0x48, 0x3, 0x1, 0x16, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3d1, 0xffff, 0x4, 0x1, 0x7, 0xb95, 0x9]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x57}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8824}, 0x30044807)
r12 = syz_open_dev$hiddev(&(0x7f0000003b40), 0x4, 0x5490c1)
ioctl$HIDIOCGREPORT(r12, 0x400c4807, &(0x7f0000003b80)={0x2, 0x2, 0x5})

0s ago: executing program 3 (id=243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_usb_connect$uac3(0x2, 0xf4, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x4, 0x80, 0x5, {0x8, 0xb, 0x2, 0x1, 0x1, 0x25, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x51, 0xb}, [@input_terminal={0x14, 0x24, 0x2, 0x5, 0x403, 0x1, 0x2, 0x8, 0x65f, 0xec23, 0x7, 0x7}, @input_terminal={0x14, 0x24, 0x2, 0x1, 0x200, 0x1, 0x2, 0x7, 0x2, 0x4, 0x4189, 0x9}, @multiply_unit={0xb, 0x24, 0xd, 0x7, 0x14, 0x3, 0xb}, @mixer_unit={0x9, 0x24, 0x5, 0x3, 0x8, "2869d8b3"}, @mixer_unit={0xb, 0x24, 0x5, 0x4, 0x2, "1293a85ee412"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x0, 0x5, 0x2, 0xcb}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x3ff, 0x9, "550f54c8cc64c364"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0x2, 0x1b, '|$~', "e3bc"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x9, 0x6, {0xa, 0x25, 0x25, 0x7f, 0x5, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x7, 0x4c, {0xa, 0x25, 0x25, 0xc6fd, 0x9, 0x7}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6, 0x7, 0x0, 0xff, 0x7}, 0x28, &(0x7f0000000200)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x2, 0x0, 0x1, [0xf, 0x1bf, 0xff3f00, 0x0, 0xc00f]}]}, 0x1, [{0x6f, &(0x7f0000000240)=@string={0x6f, 0x3, "3d69f97d791aa225a756adc4f9ff110b90525f520e7c08730959d6a80f29458f9a1e8358a8266ba0e440b4161a4d7426d64ce6cba5efc8e8387f9275f019c722b85f6e9c2b27a0d2c66435059810a4900dbb7c0fc2119a47b7080cefbdf587cdb1782beaac1cbfba9986f14fe2"}}]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet6(0xa, 0xc408655f104a227a, 0x4)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000300)={0x1, 0x0, 0x43})

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   22.585270][   T36] kauditd_printk_skb: 31 callbacks suppressed
[   22.585287][   T36] audit: type=1400 audit(1790437959.800:59): avc:  denied  { transition } for  pid=275 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.589740][   T36] audit: type=1400 audit(1790437959.800:60): avc:  denied  { noatsecure } for  pid=275 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.594161][   T36] audit: type=1400 audit(1790437959.810:61): avc:  denied  { write } for  pid=275 comm="sh" path="pipe:[1587]" dev="pipefs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   22.597591][   T36] audit: type=1400 audit(1790437959.810:62): avc:  denied  { rlimitinh } for  pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.600410][   T36] audit: type=1400 audit(1790437959.810:63): avc:  denied  { siginh } for  pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts.
[   30.922167][   T36] audit: type=1400 audit(1790437968.140:64): avc:  denied  { mounton } for  pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   30.925396][  T287] cgroup: Unknown subsys name 'net'
[   30.944835][   T36] audit: type=1400 audit(1790437968.140:65): avc:  denied  { mount } for  pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.972143][   T36] audit: type=1400 audit(1790437968.170:66): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.972644][  T287] cgroup: Unknown subsys name 'devices'
[   31.093799][  T287] cgroup: Unknown subsys name 'hugetlb'
[   31.099426][  T287] cgroup: Unknown subsys name 'rlimit'
[   31.214684][   T36] audit: type=1400 audit(1790437968.430:67): avc:  denied  { setattr } for  pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.237894][   T36] audit: type=1400 audit(1790437968.430:68): avc:  denied  { mounton } for  pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   31.262741][   T36] audit: type=1400 audit(1790437968.430:69): avc:  denied  { mount } for  pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   31.287092][  T289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   31.295912][   T36] audit: type=1400 audit(1790437968.510:70): avc:  denied  { relabelto } for  pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.321463][   T36] audit: type=1400 audit(1790437968.510:71): avc:  denied  { write } for  pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.354313][   T36] audit: type=1400 audit(1790437968.570:72): avc:  denied  { read } for  pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.380026][   T36] audit: type=1400 audit(1790437968.570:73): avc:  denied  { open } for  pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.380745][  T287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   32.263169][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.270242][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.277406][  T295] bridge_slave_0: entered allmulticast mode
[   32.283705][  T295] bridge_slave_0: entered promiscuous mode
[   32.293626][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.300689][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.307945][  T296] bridge_slave_0: entered allmulticast mode
[   32.314382][  T296] bridge_slave_0: entered promiscuous mode
[   32.323654][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.330709][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.338001][  T295] bridge_slave_1: entered allmulticast mode
[   32.344341][  T295] bridge_slave_1: entered promiscuous mode
[   32.357870][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.364940][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.372074][  T296] bridge_slave_1: entered allmulticast mode
[   32.378351][  T296] bridge_slave_1: entered promiscuous mode
[   32.384535][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.391622][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.398690][  T294] bridge_slave_0: entered allmulticast mode
[   32.405099][  T294] bridge_slave_0: entered promiscuous mode
[   32.413371][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.420431][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.427534][  T294] bridge_slave_1: entered allmulticast mode
[   32.433888][  T294] bridge_slave_1: entered promiscuous mode
[   32.498375][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.505479][  T297] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.512607][  T297] bridge_slave_0: entered allmulticast mode
[   32.518869][  T297] bridge_slave_0: entered promiscuous mode
[   32.528338][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.535435][  T297] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.542539][  T297] bridge_slave_1: entered allmulticast mode
[   32.548841][  T297] bridge_slave_1: entered promiscuous mode
[   32.654424][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.661521][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.668799][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.675872][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.710909][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.717997][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.725301][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.732352][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.759635][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.766725][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.774053][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.781092][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.794213][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.801297][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.808583][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.815638][  T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.835403][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.842828][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.849990][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.857408][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.865000][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.872327][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.879488][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.886886][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.908284][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.915365][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.923204][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.930249][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.963871][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.970939][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.987937][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.995020][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.016357][  T296] veth0_vlan: entered promiscuous mode
[   33.022912][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.029967][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.048336][  T296] veth1_macvtap: entered promiscuous mode
[   33.056013][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.063091][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.080397][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.087478][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.098366][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.105449][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.131943][  T294] veth0_vlan: entered promiscuous mode
[   33.165487][  T297] veth0_vlan: entered promiscuous mode
[   33.172967][  T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.198249][  T294] veth1_macvtap: entered promiscuous mode
[   33.211247][  T297] veth1_macvtap: entered promiscuous mode
[   33.228646][  T295] veth0_vlan: entered promiscuous mode
[   33.246707][  T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   33.287930][  T295] veth1_macvtap: entered promiscuous mode
[   33.398894][  T328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.417211][  T328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.426475][  T329] 9pnet_fd: Insufficient options for proto=fd
[   33.601880][   T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   33.641349][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.771353][   T45] usb 4-1: Using ep0 maxpacket: 8
[   33.778148][   T45] usb 4-1: unable to get BOS descriptor or descriptor too short
[   33.789378][   T45] usb 4-1: string descriptor 0 read error: -22
[   33.796145][   T45] usb 4-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40
[   33.801860][   T10] usb 1-1: Using ep0 maxpacket: 8
[   33.806175][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.823242][   T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=414a, bcdDevice= 0.40
[   33.828346][   T45] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[   33.840963][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.843138][   T45] usb 4-1: 1:1 : sample bitwidth 252 in over sample bytes 4
[   33.853649][   T10] usb 1-1: Product: syz
[   33.877558][   T10] usb 1-1: Manufacturer: syz
[   33.882265][   T10] usb 1-1: SerialNumber: syz
[   34.079754][   T45] usb 4-1: failed to enable PITCH for EP 0x1
[   34.089736][   T45] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   34.113437][   T10] usb 1-1: Audio class v2/v3 interfaces need an interface association
[   34.124008][   T45] usb 4-1: USB disconnect, device number 2
[   34.141326][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   34.172175][   T10] usb 1-1: USB disconnect, device number 2
[   34.199004][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   34.512134][  T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   34.579006][  T378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=378 comm=syz.2.17
[   34.592175][  T378] netlink: 'syz.2.17': attribute type 4 has an invalid length.
[   34.599768][  T378] netlink: 17 bytes leftover after parsing attributes in process `syz.2.17'.
[   34.625334][  T379] netlink: 'syz.2.17': attribute type 4 has an invalid length.
[   34.634078][  T379] netlink: 17 bytes leftover after parsing attributes in process `syz.2.17'.
[   34.681319][  T310] usb 2-1: Using ep0 maxpacket: 16
[   34.692678][  T310] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[   34.702706][  T310] usb 2-1: config 0 has no interface number 0
[   34.708832][  T310] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   34.718155][  T386] raw_sendmsg: syz.3.19 forgot to set AF_INET. Fix it!
[   34.727325][  T310] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   34.738757][  T390] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   34.757846][  T310] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   34.773442][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.775400][  T393] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   34.782257][  T310] usb 2-1: Product: syz
[   34.805367][  T310] usb 2-1: Manufacturer: syz
[   34.810013][  T310] usb 2-1: SerialNumber: syz
[   34.818887][  T310] usb 2-1: config 0 descriptor??
[   34.830672][  T362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   34.838215][  T362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   34.906360][  T402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'.
[   35.045896][  T361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   35.063067][    T9] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   35.071477][  T361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   35.091605][  T310] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   35.257978][    T9] usb 1-1: No LPM exit latency info found, disabling LPM.
[   35.272363][    T9] usb 1-1: config 24 has no interfaces?
[   35.291334][  T310] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 80
[   35.317521][  T428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[   35.581385][  T410] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   35.714297][   T10] usb 2-1: USB disconnect, device number 2
[   35.731361][  T410] usb 3-1: Using ep0 maxpacket: 8
[   35.737982][  T410] usb 3-1: unable to get BOS descriptor or descriptor too short
[   35.746503][  T410] usb 3-1: config 2 has an invalid interface number: 20 but max is 0
[   35.754701][  T410] usb 3-1: config 2 has no interface number 0
[   35.761051][  T410] usb 3-1: config 2 interface 20 has no altsetting 0
[   35.769320][  T410] usb 3-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=d4.62
[   35.778480][  T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.787308][  T410] usb 3-1: Product: syz
[   35.791680][  T410] usb 3-1: Manufacturer: syz
[   35.796357][  T410] usb 3-1: SerialNumber: syz
[   36.004578][   T36] kauditd_printk_skb: 86 callbacks suppressed
[   36.004595][   T36] audit: type=1400 audit(1790437973.220:160): avc:  denied  { mount } for  pid=427 comm="syz.2.29" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   36.033223][   T36] audit: type=1400 audit(1790437973.220:161): avc:  denied  { read append } for  pid=427 comm="syz.2.29" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   36.056491][   T36] audit: type=1400 audit(1790437973.220:162): avc:  denied  { open } for  pid=427 comm="syz.2.29" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   36.079502][   T36] audit: type=1400 audit(1790437973.220:163): avc:  denied  { map } for  pid=427 comm="syz.2.29" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   36.102423][   T36] audit: type=1400 audit(1790437973.290:164): avc:  denied  { mount } for  pid=427 comm="syz.2.29" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   36.211178][  T410] uvcvideo 3-1:2.20: Found Unit with invalid ID 0
[   36.222096][  T410] usb 3-1: USB disconnect, device number 2
[   36.367346][   T36] audit: type=1400 audit(1790437973.580:165): avc:  denied  { unmount } for  pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   36.439576][   T36] audit: type=1400 audit(1790437973.650:166): avc:  denied  { create } for  pid=445 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   36.469825][   T36] audit: type=1326 audit(1790437973.680:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=439 comm="syz.3.32" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedf1f9e159 code=0x0
[   36.553584][   T36] audit: type=1400 audit(1790437973.770:168): avc:  denied  { read } for  pid=453 comm="syz.1.34" dev="nsfs" ino=4026532530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   36.578187][   T36] audit: type=1400 audit(1790437973.770:169): avc:  denied  { open } for  pid=453 comm="syz.1.34" path="net:[4026532530]" dev="nsfs" ino=4026532530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   36.766828][  T461] netlink: 'syz.2.35': attribute type 5 has an invalid length.
[   36.775034][  T461] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.35'.
[   36.844336][  T452] tipc: Subscription rejected, illegal request
[   37.201655][  T475] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   37.201677][  T475] rust_binder: Read failure Err(EFAULT) in pid:33
[   37.211137][  T477] rust_binder: 474:477 got transaction to invalid handle 1
[   37.221609][  T476] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   37.224882][  T476] rust_binder: Read failure Err(EFAULT) in pid:33
[   37.225970][  T477] rust_binder: 474:477 transaction call to 0:0 failed ENOENT, code 0 size 120-24
[   37.262164][  T310] rust_binder: 474: undelivered TRANSACTION_ERROR: 29201
[   37.460290][  T481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19729 sclass=netlink_route_socket pid=481 comm=syz.1.42
[   37.756126][  T491] 9pnet: p9_errstr2errno: server reported unknown error 0x0
[   37.789133][  T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.797818][  T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.823753][    T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd
[   37.841761][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.851431][    T9] usb 1-1: can't set config #24, error -71
[   37.859988][    T9] usb 1-1: USB disconnect, device number 3
[   38.007175][  T495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.015803][  T495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.023677][  T436] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   38.051885][  T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   38.182618][  T436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   38.192424][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   38.199938][  T436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 36, changing to 7
[   38.210967][  T436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18095, setting to 1024
[   38.213671][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.224275][  T436] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   38.234936][  T310] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   38.243047][  T436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.252128][  T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.260189][  T436] usb 4-1: Product: syz
[   38.271978][  T310] usb 3-1: config 0 descriptor??
[   38.272368][  T436] usb 4-1: Manufacturer: syz
[   38.281650][  T436] usb 4-1: SerialNumber: syz
[   38.287258][  T436] usb 4-1: config 0 descriptor??
[   38.294324][  T436] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 39, bLength 9, bSynchAddress 24
[   38.371539][    T9] usb 1-1: Using ep0 maxpacket: 16
[   38.378309][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   38.391136][    T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   38.400475][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.408577][    T9] usb 1-1: Product: syz
[   38.412905][    T9] usb 1-1: Manufacturer: syz
[   38.417568][    T9] usb 1-1: SerialNumber: syz
[   38.423197][    T9] usb 1-1: config 0 descriptor??
[   38.429204][    T9] asix 1-1:0.0: probe with driver asix failed with error -22
[   38.631969][  T502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.640667][  T502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.649221][    T9] usb 1-1: USB disconnect, device number 4
[   38.884710][  T498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.893410][  T498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.011474][  T436] usb 4-1: USB disconnect, device number 3
[   39.036238][  T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   39.094220][  T509] fuse: Unknown parameter '0x0000000000000008'
[   39.215079][  T515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'.
[   39.224931][  T515] kernel read not supported for file /policy (pid: 515 comm: syz.0.55)
[   39.512150][  T530] Zero length message leads to an empty skb
[   39.535510][  T535] tipc: Started in network mode
[   39.540455][  T535] tipc: Node identity , cluster identity 4711
[   39.546703][  T535] tipc: Failed to obtain node identity
[   39.552257][  T535] tipc: Enabling of bearer <eth:ip_vti0> rejected, failed to enable media
[   39.746191][  T543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'.
[   39.755415][  T544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'.
[   39.811337][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   39.961335][    T9] usb 1-1: Using ep0 maxpacket: 32
[   39.967655][    T9] usb 1-1: config 7 has an invalid interface number: 52 but max is 3
[   39.975942][    T9] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[   39.984718][    T9] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[   40.001476][    T9] usb 1-1: config 7 has an invalid interface number: 112 but max is 3
[   40.009696][    T9] usb 1-1: config 7 has an invalid interface number: 122 but max is 3
[   40.022806][    T9] usb 1-1: config 7 has an invalid interface number: 80 but max is 3
[   40.030943][    T9] usb 1-1: config 7 has 5 interfaces, different from the descriptor's value: 4
[   40.039964][    T9] usb 1-1: config 7 has no interface number 0
[   40.046099][    T9] usb 1-1: config 7 has no interface number 1
[   40.052239][    T9] usb 1-1: config 7 has no interface number 2
[   40.058335][    T9] usb 1-1: config 7 has no interface number 4
[   40.064507][  T436] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   40.072092][    T9] usb 1-1: config 7 interface 52 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64
[   40.083086][    T9] usb 1-1: config 7 interface 52 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[   40.094218][    T9] usb 1-1: config 7 interface 52 altsetting 6 has a duplicate endpoint with address 0x9, skipping
[   40.104909][    T9] usb 1-1: config 7 interface 52 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[   40.115671][    T9] usb 1-1: config 7 interface 3 altsetting 251 has a duplicate endpoint with address 0x1, skipping
[   40.126452][    T9] usb 1-1: config 7 interface 3 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[   40.137580][    T9] usb 1-1: config 7 interface 3 altsetting 251 has a duplicate endpoint with address 0xD, skipping
[   40.148338][    T9] usb 1-1: config 7 interface 3 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[   40.159269][   T66] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[   40.166709][    T9] usb 1-1: config 7 interface 3 altsetting 251 has a duplicate endpoint with address 0xB, skipping
[   40.177517][    T9] usb 1-1: config 7 interface 3 altsetting 251 has a duplicate endpoint with address 0x2, skipping
[   40.188280][    T9] usb 1-1: config 7 interface 112 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[   40.199172][    T9] usb 1-1: config 7 interface 112 altsetting 4 bulk endpoint 0x83 has invalid maxpacket 64
[   40.209397][    T9] usb 1-1: config 7 interface 112 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64
[   40.220386][    T9] usb 1-1: config 7 interface 112 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 10
[   40.233551][    T9] usb 1-1: too many endpoints for config 7 interface 122 altsetting 188: 107, using maximum allowed: 30
[   40.244749][    T9] usb 1-1: config 7 interface 122 altsetting 188 has a duplicate endpoint with address 0xA, skipping
[   40.255663][    T9] usb 1-1: config 7 interface 122 altsetting 188 has a duplicate endpoint with address 0xE, skipping
[   40.266754][  T436] usb 2-1: device descriptor read/64, error -71
[   40.273096][    T9] usb 1-1: config 7 interface 122 altsetting 188 has a duplicate endpoint with address 0xA, skipping
[   40.284002][    T9] usb 1-1: config 7 interface 122 altsetting 188 has a duplicate endpoint with address 0xB, skipping
[   40.294965][    T9] usb 1-1: config 7 interface 122 altsetting 188 has an invalid descriptor for endpoint zero, skipping
[   40.306174][    T9] usb 1-1: config 7 interface 122 altsetting 188 has a duplicate endpoint with address 0x9, skipping
[   40.317095][    T9] usb 1-1: config 7 interface 122 altsetting 188 has 7 endpoint descriptors, different from the interface descriptor's value: 107
[   40.330630][    T9] usb 1-1: config 7 interface 80 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[   40.341357][    T9] usb 1-1: config 7 interface 80 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   40.352175][    T9] usb 1-1: config 7 interface 80 altsetting 9 has a duplicate endpoint with address 0x1, skipping
[   40.362893][    T9] usb 1-1: config 7 interface 80 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[   40.373561][    T9] usb 1-1: config 7 interface 52 has no altsetting 0
[   40.380389][    T9] usb 1-1: config 7 interface 3 has no altsetting 0
[   40.387120][    T9] usb 1-1: config 7 interface 112 has no altsetting 0
[   40.394027][    T9] usb 1-1: config 7 interface 122 has no altsetting 0
[   40.400919][    T9] usb 1-1: config 7 interface 80 has no altsetting 0
[   40.408138][   T66] usb 4-1: unable to get BOS descriptor or descriptor too short
[   40.417004][   T66] usb 4-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config
[   40.427411][    T9] usb 1-1: New USB device found, idVendor=0930, idProduct=0220, bcdDevice=d2.bc
[   40.436692][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.444795][   T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt
[   40.454715][    T9] usb 1-1: Product: syz
[   40.458911][    T9] usb 1-1: Manufacturer: 鮞ឿ襬锨缹ퟶ냞┳ບ靊롗瀂碧园揓掽닑む唋ᝮ焄惉홊鎽艊﹡㶙ᦣ౓⟢쬍썹售墕ᑑ줷烁컔់ධ뮈쾭磈病঒⭕홛堭⡭볣Ẽ뉾릙᜘첽όꁡ윙ዅ褈엏诪窱₻礊꧀厖縰芏䒣뗞凤⾂韒䏖ፄ毷⷏鈔䐴汔芮컏努겋헗叶ꓦጙ쮡⒓嵯牧풖狸磾펜紳들뿱ឭߕ
[   40.492633][   T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt
[   40.502513][   T66] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   40.515635][    T9] usb 1-1: SerialNumber: syz
[   40.522186][   T66] usb 4-1: string descriptor 0 read error: -22
[   40.528461][   T66] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[   40.538664][   T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.546861][  T537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   40.554327][  T547] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[   40.561611][  T547] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[   40.570938][   T66] usb 4-1: MIDIStreaming interface descriptor not found
[   40.578020][  T436] usb 2-1: device descriptor read/64, error -71
[   40.775407][    T9] usb 1-1: USB disconnect, device number 5
[   40.782135][   T31] usb 4-1: USB disconnect, device number 4
[   40.827900][  T436] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   40.828807][  T310] usbhid 3-1:0.0: can't add hid device: -71
[   40.847718][  T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   40.856822][  T310] usb 3-1: USB disconnect, device number 3
[   40.910721][  T555] netlink: 'syz.2.68': attribute type 1 has an invalid length.
[   40.971355][  T436] usb 2-1: device descriptor read/64, error -71
[   41.211371][  T436] usb 2-1: device descriptor read/64, error -71
[   41.271385][  T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   41.297902][   T36] kauditd_printk_skb: 44 callbacks suppressed
[   41.297920][   T36] audit: type=1400 audit(1790437978.510:214): avc:  denied  { read } for  pid=559 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   41.326153][  T436] usb usb2-port1: attempt power cycle
[   41.375432][   T36] audit: type=1400 audit(1790437978.590:215): avc:  denied  { append } for  pid=564 comm="syz.3.72" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   41.431356][  T310] usb 3-1: Using ep0 maxpacket: 32
[   41.507009][   T36] audit: type=1400 audit(1790437978.720:216): avc:  denied  { ioctl } for  pid=557 comm="syz.2.69" path="/dev/usbmon1" dev="devtmpfs" ino=90 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   41.537541][  T568] kvm: kvm [567]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x187) = 0x9fa0000
[   41.546634][  T568] kvm: kvm [567]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x186) = 0x9fa0000
[   41.561804][  T568] kvm: kvm [567]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x11e) = 0x9fa0000
[   41.562957][  T310] usb 3-1: unable to get BOS descriptor or descriptor too short
[   41.577978][  T568] kvm: kvm [567]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc2) = 0x9fa0000
[   41.579389][  T310] usb 3-1: too many configurations: 159, using maximum allowed: 8
[   41.587490][  T568] kvm: kvm [567]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc1) = 0x9fa0000
[   41.596819][  T310] usb 3-1: unable to read config index 0 descriptor/start: -71
[   41.611568][  T310] usb 3-1: can't read configurations, error -71
[   41.671389][  T436] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   41.692442][  T436] usb 2-1: device descriptor read/8, error -71
[   41.822352][  T436] usb 2-1: device descriptor read/8, error -71
[   41.901355][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   42.052481][    T9] usb 4-1: config 6 has an invalid interface number: 240 but max is 0
[   42.060876][    T9] usb 4-1: config 6 has no interface number 0
[   42.067257][  T436] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   42.074818][    T9] usb 4-1: config 6 interface 240 altsetting 68 endpoint 0x6 has invalid wMaxPacketSize 0
[   42.087525][    T9] usb 4-1: config 6 interface 240 altsetting 68 endpoint 0xD has invalid maxpacket 1024, setting to 64
[   42.098839][    T9] usb 4-1: config 6 interface 240 has no altsetting 0
[   42.106827][  T436] usb 2-1: device descriptor read/8, error -71
[   42.113584][  T575] tipc: Started in network mode
[   42.113683][    T9] usb 4-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=c4.60
[   42.118603][  T575] tipc: Node identity , cluster identity 4711
[   42.128060][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.135345][  T575] tipc: Failed to obtain node identity
[   42.142216][    T9] usb 4-1: Product: syz
[   42.147732][  T575] tipc: Enabling of bearer <eth:ip_vti0> rejected, failed to enable media
[   42.151760][    T9] usb 4-1: Manufacturer: syz
[   42.165608][    T9] usb 4-1: SerialNumber: syz
[   42.242430][  T436] usb 2-1: device descriptor read/8, error -71
[   42.351463][  T436] usb usb2-port1: unable to enumerate USB device
[   42.376912][    T9] usbhid 4-1:6.240: couldn't find an input interrupt endpoint
[   42.387945][    T9] usb 4-1: USB disconnect, device number 5
[   42.651386][  T310] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   42.755761][   T36] audit: type=1400 audit(1790437979.970:217): avc:  denied  { unmount } for  pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.801732][  T310] usb 3-1: no configurations
[   42.806421][  T310] usb 3-1: can't read configurations, error -22
[   42.817562][  T310] usb usb3-port1: attempt power cycle
[   42.851347][   T36] audit: type=1400 audit(1790437980.060:218): avc:  denied  { setopt } for  pid=585 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   43.011201][  T597] kvm: kvm [596]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x187) = 0x9fa0000
[   43.020381][  T597] kvm: kvm [596]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x186) = 0x9fa0000
[   43.031955][  T597] kvm: kvm [596]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x11e) = 0x9fa0000
[   43.043254][  T597] kvm: kvm [596]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc2) = 0x9fa0000
[   43.052245][  T597] kvm: kvm [596]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc1) = 0x9fa0000
[   43.123603][  T611] netlink: 'syz.1.87': attribute type 4 has an invalid length.
[   43.128563][   T36] audit: type=1400 audit(1790437980.340:219): avc:  denied  { read } for  pid=609 comm="syz.1.87" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   43.154074][   T36] audit: type=1400 audit(1790437980.340:220): avc:  denied  { open } for  pid=609 comm="syz.1.87" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   43.161941][  T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   43.177760][   T36] audit: type=1400 audit(1790437980.340:221): avc:  denied  { ioctl } for  pid=609 comm="syz.1.87" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   43.209945][  T310] usb 3-1: no configurations
[   43.214815][  T310] usb 3-1: can't read configurations, error -22
[   43.218049][   T36] audit: type=1400 audit(1790437980.430:222): avc:  denied  { write } for  pid=609 comm="syz.1.87" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   43.351367][  T310] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   43.371366][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   43.372724][  T310] usb 3-1: no configurations
[   43.383585][  T310] usb 3-1: can't read configurations, error -22
[   43.390000][  T310] usb usb3-port1: unable to enumerate USB device
[   43.501345][    T9] usb 2-1: device descriptor read/64, error -71
[   43.741342][    T9] usb 2-1: device descriptor read/64, error -71
[   43.828427][  T617] input: syz1 as /devices/virtual/input/input5
[   43.834748][  T617] input: failed to attach handler leds to device input5, error: -6
[   43.843751][   T36] audit: type=1400 audit(1790437981.060:223): avc:  denied  { read } for  pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=479 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.981390][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   44.111345][    T9] usb 2-1: device descriptor read/64, error -71
[   44.191348][   T66] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   44.341350][   T66] usb 4-1: Using ep0 maxpacket: 32
[   44.347810][   T66] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   44.358189][    T9] usb 2-1: device descriptor read/64, error -71
[   44.364742][   T66] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3
[   44.374341][   T66] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   44.387011][   T66] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[   44.396517][   T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.404803][   T66] usb 4-1: Product: syz
[   44.409186][   T66] usb 4-1: Manufacturer: syz
[   44.414886][   T66] usb 4-1: SerialNumber: syz
[   44.430110][   T66] usb 4-1: Fast Track Pro config OK
[   44.481500][    T9] usb usb2-port1: attempt power cycle
[   44.622567][   T66] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[   44.630461][   T66] usb 4-1: 1:1 : format type 0 is detected, processed as PCM
[   44.638372][   T66] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4
[   44.651775][   T66] usb 4-1: 0:2 : does not exist
[   44.656694][   T66] usb 4-1: unit 5 not found!
[   44.666475][   T66] usb 4-1: unit 6 not found!
[   44.686967][   T66] usb 4-1: USB disconnect, device number 6
[   44.706765][  T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.821341][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   44.860101][    T9] usb 2-1: device descriptor read/8, error -71
[   44.991334][  T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   44.999665][    T9] usb 2-1: device descriptor read/8, error -71
[   45.146523][  T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.157053][  T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.168584][  T310] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   45.183322][  T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   45.202548][  T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.216388][  T310] usb 1-1: Product: syz
[   45.220663][  T310] usb 1-1: Manufacturer: syz
[   45.225751][  T310] usb 1-1: SerialNumber: syz
[   45.233153][  T310] cdc_mbim 1-1:1.0: skipping garbage
[   45.261317][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   45.292381][    T9] usb 2-1: device descriptor read/8, error -71
[   45.430427][    T9] usb 2-1: device descriptor read/8, error -71
[   45.521370][   T66] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   45.541444][    T9] usb usb2-port1: unable to enumerate USB device
[   45.587576][  T651] device-mapper: ioctl: only supply one of name or uuid, cmd(10)
[   45.673259][   T66] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1088, setting to 1024
[   45.685600][   T66] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   45.699373][   T66] usb 4-1: config 0 interface 0 has no altsetting 0
[   45.706275][   T66] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[   45.715562][   T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.732331][   T66] usb 4-1: config 0 descriptor??
[   45.738422][  T641] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   45.745995][  T656] process 'syz.2.104' launched '/dev/fd/4' with NULL argv: empty string added
[   45.825419][  T662] synth uevent: /bus/acpi: unknown uevent action string
[   46.146579][  T671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'.
[   46.156866][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.164157][  T671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'.
[   46.173022][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.180313][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.187763][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.195051][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.202304][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.209483][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.216727][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.230307][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.235810][  T310] cdc_mbim 1-1:1.0: bind() failure
[   46.239430][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.247664][  T310] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   46.251907][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.257982][  T310] cdc_ncm 1-1:1.1: bind() failure
[   46.264019][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.275995][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.283385][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.298950][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.317637][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.324880][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.332560][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.339757][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.346974][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.354227][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.361428][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.368613][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.375841][   T66] logitech 0003:046D:C626.0001: unknown main item tag 0x0
[   46.385586][   T66] logitech 0003:046D:C626.0001: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0
[   46.399306][   T66] usb 4-1: USB disconnect, device number 7
[   46.441421][  T676] fido_id[676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   46.458782][  T639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   46.470062][   T10] usb 1-1: USB disconnect, device number 6
[   46.541413][  T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   46.691383][  T310] usb 2-1: Using ep0 maxpacket: 32
[   46.697660][  T310] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[   46.706103][  T310] usb 2-1: config 0 has no interface number 0
[   46.712260][  T310] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   46.723678][  T310] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   46.732780][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.740787][  T310] usb 2-1: Product: syz
[   46.744986][  T310] usb 2-1: Manufacturer: syz
[   46.749595][  T310] usb 2-1: SerialNumber: syz
[   46.755010][  T310] usb 2-1: config 0 descriptor??
[   46.760334][  T675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   46.860843][  T678] capability: warning: `syz.2.114' uses deprecated v2 capabilities in a way that may be insecure
[   46.895199][  T680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=680 comm=syz.2.115
[   46.936622][  T682] overlay: ./file0 is not a directory
[   46.950445][   T36] kauditd_printk_skb: 14 callbacks suppressed
[   46.950462][   T36] audit: type=1400 audit(1790437984.160:238): avc:  denied  { bind } for  pid=683 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   46.979888][  T675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   46.996441][   T36] audit: type=1400 audit(1790437984.190:239): avc:  denied  { listen } for  pid=683 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   47.044536][   T36] audit: type=1400 audit(1790437984.190:240): avc:  denied  { connect } for  pid=683 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   47.091361][   T36] audit: type=1400 audit(1790437984.190:241): avc:  denied  { write } for  pid=683 comm="syz.3.117" path="socket:[6039]" dev="sockfs" ino=6039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   47.136206][  T689] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   47.167815][   T36] audit: type=1400 audit(1790437984.300:242): avc:  denied  { write } for  pid=696 comm="syz.0.119" name="instances" dev="tracefs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   47.207319][  T688] fuse: Bad value for 'user_id'
[   47.212466][  T688] fuse: Bad value for 'user_id'
[   47.221351][   T36] audit: type=1400 audit(1790437984.300:243): avc:  denied  { add_name } for  pid=696 comm="syz.0.119" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   47.255567][   T36] audit: type=1400 audit(1790437984.300:244): avc:  denied  { create } for  pid=696 comm="syz.0.119" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1
[   47.278499][   T36] audit: type=1400 audit(1790437984.420:245): avc:  denied  { mounton } for  pid=674 comm="syz.1.113" path="/34/file0" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   47.401350][   T66] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   47.461344][  T548] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   47.551327][   T66] usb 4-1: device descriptor read/64, error -71
[   47.611386][  T548] usb 1-1: Using ep0 maxpacket: 32
[   47.617589][  T548] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7
[   47.630250][  T548] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40
[   47.639374][  T548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.647415][  T548] usb 1-1: Product: syz
[   47.651634][  T548] usb 1-1: Manufacturer: syz
[   47.656259][  T548] usb 1-1: SerialNumber: syz
[   47.811343][   T66] usb 4-1: device descriptor read/64, error -71
[   47.865648][  T548] usb 1-1: Invalid firmware size=105.
[   47.871913][  T548] usb 1-1: Invalid firmware size=105.
[   47.878047][  T548] usb 1-1: Invalid firmware size=105.
[   47.884549][  T548] usb 1-1: USB disconnect, device number 7
[   48.051333][   T66] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   48.191338][   T66] usb 4-1: device descriptor read/64, error -71
[   48.237966][   T36] audit: type=1400 audit(1790437985.450:246): avc:  denied  { append } for  pid=709 comm="syz.2.122" name="uprobe_events" dev="tracefs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   48.241782][  T710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   48.307634][   T36] audit: type=1400 audit(1790437985.520:247): avc:  denied  { create } for  pid=714 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   48.431348][   T66] usb 4-1: device descriptor read/64, error -71
[   48.541466][   T66] usb usb4-port1: attempt power cycle
[   48.881333][   T66] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   48.902430][   T66] usb 4-1: device descriptor read/8, error -71
[   49.032457][   T66] usb 4-1: device descriptor read/8, error -71
[   49.141723][  T718] x86/PAT: syz.2.124:718 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[   49.150763][  T718] x86/PAT: syz.2.124:718 freeing invalid memtype [mem 0xfe005000-0xfe005fff]
[   49.212394][  T737] wireguard: wg1: Could not create IPv4 socket
[   49.271338][   T66] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   49.292373][   T66] usb 4-1: device descriptor read/8, error -71
[   49.379372][  T310] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   49.393554][  T310] asix 2-1:0.188: probe with driver asix failed with error -71
[   49.411392][  T310] usb 2-1: USB disconnect, device number 11
[   49.430045][   T66] usb 4-1: device descriptor read/8, error -71
[   49.521892][  T748] 9pnet_fd: Insufficient options for proto=fd
[   49.551443][   T66] usb usb4-port1: unable to enumerate USB device
[   50.202342][  T757] SELinux: security policydb version 15 (MLS) not backwards compatible
[   50.210646][  T757] SELinux: failed to load policy
[   50.271093][  T761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=761 comm=syz.3.140
[   50.284300][  T761] SELinux:  Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped).
[   50.531633][  T548] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   50.561351][   T66] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   50.661374][  T310] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[   50.682505][  T548] usb 4-1: config 1 has an invalid interface number: 33 but max is 1
[   50.690745][  T548] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.701126][  T548] usb 4-1: config 1 has no interface number 1
[   50.707426][  T548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.718626][  T548] usb 4-1: config 1 interface 33 has no altsetting 0
[   50.719591][   T66] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   50.728023][  T548] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   50.745649][  T548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.751491][   T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.754223][  T548] usb 4-1: Product: syz
[   50.768995][  T548] usb 4-1: Manufacturer: syz
[   50.771373][   T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.774890][  T548] usb 4-1: SerialNumber: syz
[   50.792698][  T548] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[   50.801399][   T66] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   50.803963][  T548] cdc_ncm 4-1:1.0: bind() failure
[   50.822031][   T66] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   50.831107][   T66] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   50.842489][  T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   50.849470][   T66] usb 3-1: Manufacturer: syz
[   50.853761][  T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   50.859511][   T66] usb 3-1: config 0 descriptor??
[   50.874947][  T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.885286][  T310] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[   50.894715][  T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.906997][  T310] usb 2-1: config 0 descriptor??
[   50.997267][    T9] usb 4-1: USB disconnect, device number 12
[   51.295329][   T66] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[   51.303152][   T66] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[   51.311972][   T66] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[   51.321145][  T310] hid-picolcd 0003:04D8:F002.0003: item fetching failed at offset 3/5
[   51.331635][  T310] hid-picolcd 0003:04D8:F002.0003: device report parse failed
[   51.339166][  T310] hid-picolcd 0003:04D8:F002.0003: probe with driver hid-picolcd failed with error -22
[   51.497239][  T548] usb 3-1: USB disconnect, device number 8
[   51.516930][   T66] usb 2-1: USB disconnect, device number 12
[   51.532264][   T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   51.546790][  T771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.555628][  T771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.671357][   T31] usb 1-1: device descriptor read/64, error -71
[   51.781355][    T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[   51.911345][    T9] usb 4-1: device descriptor read/64, error -71
[   51.931339][   T31] usb 1-1: device descriptor read/64, error -71
[   52.036865][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   52.036883][   T36] audit: type=1400 audit(1790437989.250:257): avc:  denied  { write } for  pid=772 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   52.150929][   T36] audit: type=1400 audit(1790437989.360:258): avc:  denied  { relabelfrom } for  pid=787 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   52.170657][    T9] usb 4-1: device descriptor read/64, error -71
[   52.177037][   T36] audit: type=1400 audit(1790437989.360:259): avc:  denied  { relabelto } for  pid=787 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   52.191761][   T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   52.331361][   T31] usb 1-1: device descriptor read/64, error -71
[   52.431352][    T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[   52.481348][   T66] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   52.561374][    T9] usb 4-1: device descriptor read/64, error -71
[   52.571374][   T31] usb 1-1: device descriptor read/64, error -71
[   52.631355][   T66] usb 2-1: Using ep0 maxpacket: 32
[   52.637730][   T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.648858][   T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.658810][   T66] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   52.667912][   T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.677018][   T66] usb 2-1: config 0 descriptor??
[   52.684250][   T66] hub 2-1:0.0: USB hub found
[   52.691566][   T31] usb usb1-port1: attempt power cycle
[   52.801344][    T9] usb 4-1: device descriptor read/64, error -71
[   52.891479][   T66] hub 2-1:0.0: 1 port detected
[   52.911434][    T9] usb usb4-port1: attempt power cycle
[   53.031350][   T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   53.052447][   T31] usb 1-1: device descriptor read/8, error -71
[   53.092402][  T790] overlayfs: failed to resolve './bus': -2
[   53.098978][   T66] hub 2-1:0.0: hub_hub_status failed (err = -71)
[   53.110203][   T66] hub 2-1:0.0: config failed, can't get hub status (err -71)
[   53.119079][   T66] usbhid 2-1:0.0: can't add hid device: -71
[   53.125115][   T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   53.151695][   T66] usb 2-1: USB disconnect, device number 13
[   53.192479][   T31] usb 1-1: device descriptor read/8, error -71
[   53.261350][    T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[   53.282491][    T9] usb 4-1: device descriptor read/8, error -71
[   53.412535][    T9] usb 4-1: device descriptor read/8, error -71
[   53.431392][   T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   53.452512][   T31] usb 1-1: device descriptor read/8, error -71
[   53.582654][   T31] usb 1-1: device descriptor read/8, error -71
[   53.651345][    T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[   53.672528][    T9] usb 4-1: device descriptor read/8, error -71
[   53.683341][   T36] audit: type=1400 audit(1790437990.900:260): avc:  denied  { read write } for  pid=791 comm="syz.1.150" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   53.707937][   T31] usb usb1-port1: unable to enumerate USB device
[   53.716230][   T36] audit: type=1400 audit(1790437990.900:261): avc:  denied  { open } for  pid=791 comm="syz.1.150" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   53.802947][    T9] usb 4-1: device descriptor read/8, error -71
[   53.821164][  T795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.151'.
[   53.831626][  T795] overlayfs: conflicting options: userxattr,verity=on
[   53.838917][  T795] x_tables: unsorted underflow at hook 4
[   53.911460][    T9] usb usb4-port1: unable to enumerate USB device
[   54.131363][   T55] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.276044][   T36] audit: type=1400 audit(1790437991.490:262): avc:  denied  { mounton } for  pid=804 comm="syz.2.154" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   54.375174][   T36] audit: type=1400 audit(1790437991.590:263): avc:  denied  { ioctl } for  pid=808 comm="syz.0.156" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   54.399579][   T36] audit: type=1400 audit(1790437991.590:264): avc:  denied  { read } for  pid=808 comm="syz.0.156" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   54.423463][   T36] audit: type=1400 audit(1790437991.590:265): avc:  denied  { open } for  pid=808 comm="syz.0.156" path="/34/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   54.450748][  T811] =======================================================
[   54.450748][  T811] WARNING: The mand mount option has been deprecated and
[   54.450748][  T811]          and is ignored by this kernel. Remove the mand
[   54.450748][  T811]          option from the mount to silence this warning.
[   54.450748][  T811] =======================================================
[   54.455679][   T36] audit: type=1400 audit(1790437991.590:266): avc:  denied  { ioctl } for  pid=808 comm="syz.0.156" path="/34/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   54.489305][  T811] SELinux: security_context_str_to_sid (sytem_u�Gйg���jij�l�B�FFfXg�鴥	=�`�
�R���L�%O�L���{(LĴ/=����LD�s'p3\5D��MT�)F]o���NyJ9&V�H��3) failed with errno=-22
[   54.581356][  T548] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   54.621772][  T817] SELinux: failed to load policy
[   54.731315][  T548] usb 3-1: Using ep0 maxpacket: 32
[   54.743769][  T548] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   54.757460][  T548] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[   54.767136][  T548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.776484][  T548] usb 3-1: config 0 descriptor??
[   54.962788][  T841] SELinux:  policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c
[   54.973200][  T841] SELinux: failed to load policy
[   54.981346][   T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   55.141339][   T31] usb 2-1: Using ep0 maxpacket: 8
[   55.147442][   T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 7
[   55.159826][   T31] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[   55.168912][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.177092][   T31] usb 2-1: Product: syz
[   55.181461][   T31] usb 2-1: Manufacturer: syz
[   55.186128][   T31] usb 2-1: SerialNumber: syz
[   55.192239][  T548] magicmouse 0003:05AC:0265.0004: unknown main item tag 0x7
[   55.200837][  T548] magicmouse 0003:05AC:0265.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0
[   55.393291][  T548] usb 3-1: USB disconnect, device number 9
[   55.424892][   T31] usb 2-1: USB disconnect, device number 14
[   55.444174][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   55.811357][   T66] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[   55.972744][   T66] usb 4-1: unable to get BOS descriptor or descriptor too short
[   55.984221][   T66] usb 4-1: config 3 has an invalid interface number: 67 but max is 0
[   55.992422][   T66] usb 4-1: config 3 has no interface number 0
[   55.998514][   T66] usb 4-1: config 3 interface 67 has no altsetting 0
[   56.010065][   T66] usb 4-1: string descriptor 0 read error: -22
[   56.016587][   T66] usb 4-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28
[   56.025724][   T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.046230][   T66] uvcvideo 4-1:3.67: Found multiple Units with ID 1
[   56.053413][   T66] usb 4-1: Found UVC 0.00 device <unnamed> (13d3:5103)
[   56.060703][   T66] usb 4-1: No valid video chain found.
[   56.141376][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   56.244757][   T66] usb 4-1: USB disconnect, device number 17
[   56.293451][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7
[   56.306040][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   56.315188][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.323232][   T10] usb 3-1: Product: syz
[   56.327416][   T10] usb 3-1: Manufacturer: syz
[   56.332153][   T10] usb 3-1: SerialNumber: syz
[   57.031371][   T66] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   57.182476][   T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.193553][   T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.203354][   T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   57.216293][   T66] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.225383][   T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.231400][   T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   57.236747][   T66] usb 4-1: config 0 descriptor??
[   57.391350][   T31] usb 1-1: Using ep0 maxpacket: 16
[   57.397773][   T31] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.407841][   T31] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   57.420824][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[   57.429963][   T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.00
[   57.439433][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.447836][  T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.459233][   T31] usb 1-1: config 0 descriptor??
[   57.467552][  T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.486053][  T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.495598][  T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.505174][  T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.517208][  T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.530466][  T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.539811][  T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.564032][  T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.573733][  T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.682454][  T910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.691054][  T910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.700548][   T31] usbhid 1-1:0.0: can't add hid device: -71
[   57.706584][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   57.715494][   T31] usb 1-1: USB disconnect, device number 12
[   57.796852][   T66] usbhid 4-1:0.0: can't add hid device: -71
[   57.803560][   T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   57.812943][   T66] usb 4-1: USB disconnect, device number 18
[   57.821519][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   57.971317][    T9] usb 2-1: Using ep0 maxpacket: 16
[   57.977655][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.988657][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.998473][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   58.011363][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   58.020442][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.029167][    T9] usb 2-1: config 0 descriptor??
[   58.235662][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   58.235679][   T36] audit: type=1400 audit(1790437995.450:295): avc:  denied  { execute } for  pid=906 comm="syz.1.187" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   58.240898][    T9] microsoft 0003:045E:07DA.0005: invalid report_count 37742
[   58.276327][  T915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.281405][    T9] microsoft 0003:045E:07DA.0005: item 0 2 1 9 parsing failed
[   58.290474][  T915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.297513][    T9] microsoft 0003:045E:07DA.0005: parse failed
[   58.323267][   T36] audit: type=1400 audit(1790437995.540:296): avc:  denied  { bind } for  pid=911 comm="syz.0.188" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   58.328821][    T9] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22
[   58.345429][   T36] audit: type=1400 audit(1790437995.540:297): avc:  denied  { node_bind } for  pid=911 comm="syz.0.188" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   58.421731][  T928] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[   58.485273][    T9] usb 2-1: USB disconnect, device number 15
[   58.576913][  T937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2109485070 (270014088960 ns) > initial count (2560 ns). Using initial count to start timer.
[   58.724713][   T36] audit: type=1400 audit(1790437995.940:298): avc:  denied  { getattr } for  pid=942 comm="syz.0.196" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   58.935413][   T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   58.950144][  T947] tmpfs: Bad value for 'nr_inodes'
[   58.955624][   T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   58.974169][   T10] usb 3-1: USB disconnect, device number 10
[   59.005465][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   59.015644][   T36] audit: type=1400 audit(1790437996.230:299): avc:  denied  { accept } for  pid=948 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   59.047095][  T548] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   59.190197][   T36] audit: type=1400 audit(1790437996.400:300): avc:  denied  { read } for  pid=958 comm="syz.2.202" name="/" dev="configfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   59.219174][   T36] audit: type=1400 audit(1790437996.400:301): avc:  denied  { open } for  pid=958 comm="syz.2.202" path="/" dev="configfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   59.246480][   T36] audit: type=1400 audit(1790437996.400:302): avc:  denied  { create } for  pid=958 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   59.269815][   T36] audit: type=1400 audit(1790437996.400:303): avc:  denied  { create } for  pid=958 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   59.301303][   T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   59.314306][  T548] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.324721][  T548] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.334755][  T548] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   59.344099][  T548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   59.352415][  T548] usb 1-1: SerialNumber: syz
[   59.462667][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.473759][   T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   59.482889][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.492056][   T31] usb 2-1: config 0 descriptor??
[   59.515844][   T36] audit: type=1400 audit(1790437996.730:304): avc:  denied  { mounton } for  pid=963 comm="syz.3.204" path="/36/proc_dir" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   59.551366][   T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   59.561824][  T548] usb 1-1: skipping empty audio interface (v1)
[   59.569853][  T548] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   59.588462][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   59.604750][  T548] usb 1-1: USB disconnect, device number 13
[   59.712515][   T45] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   59.720648][   T45] usb 3-1: config 0 has no interface number 0
[   59.726864][   T45] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.738419][   T45] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.748225][   T45] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   59.757342][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.766224][   T45] usb 3-1: config 0 descriptor??
[   59.894306][  T978] kvm: kvm [977]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x187) = 0x9fa0000
[   59.903469][  T978] kvm: kvm [977]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x186) = 0x9fa0000
[   59.908936][   T31] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[   59.919537][  T978] kvm: kvm [977]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x11e) = 0x9fa0000
[   59.932846][  T978] kvm: kvm [977]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc2) = 0x9fa0000
[   59.941601][   T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input6
[   59.953446][  T978] kvm: kvm [977]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc1) = 0x9fa0000
[   60.031526][   T31] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[   60.187059][   T45] prodikeys 0003:041E:2801.0007: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1
[   60.221580][  T996] rust_binder: 995:996 no such ref 0
[   60.228615][   T45] hid_prodikeys: hid-prodikeys: failed to find output report
[   60.228615][   T45] 
[   60.335939][ T1009] rust_binder: 1008:1009 no such ref 0
[   60.342419][ T1010] rust_binder: 1008:1010 got transaction to invalid handle 1
[   60.349980][ T1010] rust_binder: 1008:1010 transaction call to 0:0 failed ENOENT, code 0 size 0-0
[   60.359657][   T45] rust_binder: 1008: undelivered TRANSACTION_ERROR: 29201
[   60.378267][   T45] usb 3-1: USB disconnect, device number 11
[   60.427544][   T31] usb 2-1: USB disconnect, device number 16
[   60.510410][ T1015] kvm: kvm [1014]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x187) = 0x9fa0000
[   60.528327][ T1015] kvm: kvm [1014]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x186) = 0x9fa0000
[   60.540939][ T1015] kvm: kvm [1014]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x11e) = 0x9fa0000
[   60.556197][ T1015] kvm: kvm [1014]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc2) = 0x9fa0000
[   60.565331][ T1015] kvm: kvm [1014]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc1) = 0x9fa0000
Stopping sshd: stopped /usr/sbin/sshd (pid 203)
OK
Stopping crond: stopped /usr/sbin/crond (pid 195)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 149)
Stopping network: OK
Stopping iptables: OK
Stopping system message bus: [   60.941328][   T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd
done
[   60.993276][ T1063] FAULT_INJECTION: forcing a failure.
[   60.993276][ T1063] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   61.023467][ T1063] CPU: 0 UID: 0 PID: 1063 Comm: syz.2.225 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[   61.023502][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   61.023526][ T1063] Call Trace:
[   61.023534][ T1063]  <TASK>
[   61.023541][ T1063]  __dump_stack+0x21/0x30
[   61.023581][ T1063]  dump_stack_lvl+0x140/0x1c0
[   61.023609][ T1063]  ? __cfi_dump_stack_lvl+0x10/0x10
[   61.023640][ T1063]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[   61.023663][ T1063]  ? __x64_sys_clone+0x1b7/0x230
[   61.023694][ T1063]  ? do_syscall_64+0x57/0xf0
[   61.023719][ T1063]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   61.023747][ T1063]  dump_stack+0x19/0x20
[   61.023778][ T1063]  should_fail_ex+0x3c2/0x510
[   61.023805][ T1063]  should_fail_alloc_page+0xec/0x110
[   61.023833][ T1063]  __alloc_pages_noprof+0x1c0/0x7e0
[   61.023867][ T1063]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   61.023901][ T1063]  ? kasan_save_alloc_info+0x3a/0x50
[   61.023922][ T1063]  get_free_pages_noprof+0x14/0x40
[   61.023954][ T1063]  pgd_alloc+0x3c/0x350
[   61.023978][ T1063]  mm_init+0x530/0xbf0
[   61.024003][ T1063]  copy_mm+0x1f4/0x1da0
[   61.024033][ T1063]  ? copy_signal+0x6a0/0x6a0
[   61.024061][ T1063]  ? __kasan_check_write+0x18/0x20
[   61.024083][ T1063]  ? _raw_spin_lock+0x92/0x120
[   61.024105][ T1063]  ? __asan_memset+0x39/0x50
[   61.024135][ T1063]  ? __init_rwsem+0x110/0x1f0
[   61.024167][ T1063]  ? copy_signal+0x4d5/0x6a0
[   61.024194][ T1063]  copy_process+0x12a4/0x3350
[   61.024224][ T1063]  ? __cfi_copy_process+0x10/0x10
[   61.024251][ T1063]  ? proc_fail_nth_write+0x184/0x220
[   61.024286][ T1063]  kernel_clone+0x233/0x810
[   61.024314][ T1063]  ? __cfi_kernel_clone+0x10/0x10
[   61.024342][ T1063]  ? do_futex+0x37d/0x510
[   61.024374][ T1063]  __x64_sys_clone+0x1b7/0x230
[   61.024403][ T1063]  ? __cfi___x64_sys_clone+0x10/0x10
[   61.024436][ T1063]  ? __kasan_check_write+0x18/0x20
[   61.024458][ T1063]  ? fpregs_restore_userregs+0x11c/0x260
[   61.024485][ T1063]  ? switch_fpu_return+0x12/0x20
[   61.024512][ T1063]  x64_sys_call+0x2b3c/0x2ee0
[   61.024533][ T1063]  do_syscall_64+0x57/0xf0
[   61.024554][ T1063]  ? clear_bhb_loop+0x50/0xa0
[   61.024582][ T1063]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   61.024608][ T1063] RIP: 0033:0x7fe09039e159
[   61.024634][ T1063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.024652][ T1063] RSP: 002b:00007fe09129cfd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   61.024687][ T1063] RAX: ffffffffffffffda RBX: 00007fe090626090 RCX: 00007fe09039e159
[   61.024704][ T1063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002080
[   61.024718][ T1063] RBP: 00007fe09043506b R08: 0000000000000000 R09: 0000000000000000
[   61.024732][ T1063] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   61.024745][ T1063] R13: 00007fe090626128 R14: 00007fe090626090 R15: 00007ffde42a5fc8
[   61.024764][ T1063]  </TASK>
[   61.312953][   T31] usb 1-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config
[   61.341629][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[   61.370281][   T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[   61.405690][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Stopping klogd: [   61.430056][   T31] usb 1-1: config 0 descriptor??
OK
Stopping acpid: [   61.654500][ T1106] fuse: Bad value for 'rootmode'
[   61.777093][ T1119] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=22910 (366560 ns) > initial count (1920 ns). Using initial count to start timer.
[   62.140087][ T1145] Bluetooth: ISO socket layer initialized
[   62.181324][   T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   62.341347][   T31] usb 3-1: Using ep0 maxpacket: 8
[   62.347827][   T31] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   62.359200][   T31] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   62.372360][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.379053][   T31] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[   62.388281][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.397124][   T31] usb 3-1: config 0 descriptor??
OK
Stopping syslogd: stopped /sbin/syslogd (pid 93)
OK
umount: can't remount debugfs read-only
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[   62.781712][   T31] usbhid 3-1:0.0: can't add hid device: -71
[   62.794385][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
Connection to 10.128.0.155 closed by remote host.
[   62.854186][   T31] usb 3-1: USB disconnect, device number 12
[   62.904333][   T10] usb 1-1: USB disconnect, device number 14
[   62.940552][  T381] bridge_slave_1: left allmulticast mode
[   62.946316][  T381] bridge_slave_1: left promiscuous mode
[   62.971464][  T381] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.991512][  T381] bridge_slave_0: left allmulticast mode
[   62.997211][  T381] bridge_slave_0: left promiscuous mode
[   63.029266][  T381] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.164123][  T381] veth1_macvtap: left promiscuous mode
[   63.169666][  T381] veth0_vlan: left promiscuous mode
[   63.474422][  T381] bridge_slave_1: left allmulticast mode
[   63.480089][  T381] bridge_slave_1: left promiscuous mode
[   63.485769][  T381] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.493384][  T381] bridge_slave_0: left allmulticast mode
[   63.499025][  T381] bridge_slave_0: left promiscuous mode
[   63.504730][  T381] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.512558][  T381] bridge_slave_1: left allmulticast mode
[   63.518204][  T381] bridge_slave_1: left promiscuous mode
[   63.523881][  T381] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.531489][  T381] bridge_slave_0: left allmulticast mode
[   63.537146][  T381] bridge_slave_0: left promiscuous mode
[   63.542756][  T381] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.550451][  T381] bridge_slave_1: left allmulticast mode
[   63.556150][  T381] bridge_slave_1: left promiscuous mode
[   63.561834][  T381] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.569263][  T381] bridge_slave_0: left allmulticast mode
[   63.575302][  T381] bridge_slave_0: left promiscuous mode
[   63.580933][  T381] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.817178][  T381] veth1_macvtap: left promiscuous mode
[   63.822719][  T381] veth0_vlan: left promiscuous mode
[   63.828267][  T381] veth1_macvtap: left promiscuous mode
[   63.833860][  T381] veth0_vlan: left promiscuous mode
[   63.839398][  T381] veth1_macvtap: left promiscuous mode
[   63.844938][  T381] veth0_vlan: left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[   64.952750][ T1157] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   64.959560][ T1157] ACPI: PM: Preparing to enter system sleep state S5
[   64.966532][ T1157] kvm: exiting hardware virtualization
[   64.972055][ T1157] reboot: Power down
serialport: VM disconnected.