last executing test programs:

2m39.475186507s ago: executing program 1 (id=510):
r0 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x3f6, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ec, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x24040020) (fail_nth: 3)

2m39.457478288s ago: executing program 1 (id=511):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x28, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff7, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x4, 0x6, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x1ff, 0x7ff, 0x2, 0xf, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x106, 0x4c2136d3, 0x4, 0x0, 0x7, 0x5, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x401, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x5, 0x6, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x2, 0x5, 0x7f, 0x4, 0x7ff, 0xff, 0x1005, 0x10000001, 0x1000, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x7, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x8, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a000100", 0x44}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0x0, 0x2, 0x1, 0x6, 0x9, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3fc, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x9, 0x80000001}, {0x4, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0x80000000f2, 0x11, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x71001, 0x2b2205})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\x00\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff(\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x00\x10\x00\x00N&\xf8#\x80z8Z\xd2}\xf5\xe4\x15\xb3r\x11g\xe7)\xaa\x91\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\r\xc2\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x1241081, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/watchdog\x00', 0x2, 0x100)
writev(r4, &(0x7f0000000780)=[{&(0x7f00000007c0)="fa97", 0x2}], 0x1)
ioctl$XFS_IOC_START_COMMIT(r3, 0x40047705, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', <r8=>0x0})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000680)={0x1d, r8}, 0x10, &(0x7f00000006c0)={&(0x7f0000000700)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x41, 0x3, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2}, 0x2400c011)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
setxattr$security_ima(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x700, 0x1)
r10 = syz_open_dev$evdev(&(0x7f00000009c0), 0x2, 0x862b01)
ioctl$EVIOCGKEYCODE(r10, 0x80084504, &(0x7f0000000a00)=""/145)
getsockopt$inet_int(r6, 0x0, 0x34, &(0x7f0000000180), &(0x7f0000000800)=0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)

2m39.36759292s ago: executing program 1 (id=512):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x1, 0x5d6, 0x8001, 0x8a, 0x79, 0x8, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x3ff, 0x18000000, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a0001", 0x43}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a000100000000000000000002200000000000000000000008000160e00000010800030001", 0x29)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m38.427673741s ago: executing program 1 (id=516):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448c8, 0x0)

2m38.427346641s ago: executing program 1 (id=517):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0x80b4, 0x100fa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0xa, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xc, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x5, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfefffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0xffff1331, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000000010001200", 0x34}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000580)='./proc/fs/nfsd\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x0, 0x2)
getdents64(r1, &(0x7f0000000600)=""/46, 0x6a)
getdents64(r1, 0xfffffffffffffffe, 0x29)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000380)={0x5, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)

2m38.350198103s ago: executing program 1 (id=520):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f0000000000", 0x1a}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x5, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00')
exit(0x3)
read$FUSE(r7, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m23.187154171s ago: executing program 32 (id=520):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f0000000000", 0x1a}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x5, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00')
exit(0x3)
read$FUSE(r7, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

32.179804811s ago: executing program 4 (id=1404):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x0, 0x41000, 0xa, 0x5, 0xfc, 0x40, 0xd, 0x1, 0x0, 0x2, 0xb, 0x1}, {0x9000, 0xf000, 0xe, 0x5, 0x8f, 0x8, 0xd, 0x8, 0x40, 0x4, 0xb, 0x2}, {0xe000, 0x54000, 0x8, 0x8, 0xff, 0xe, 0x7, 0xc0, 0x8, 0x1e, 0x2, 0x6}, {0xeeee8000, 0xfec00000, 0xd, 0x0, 0x6, 0x1, 0x3, 0xb5, 0x5, 0x4, 0x0, 0x47}, {0x58000, 0xd000, 0xd, 0x3, 0x1, 0xb, 0x30, 0x37, 0x7f, 0x3, 0x9, 0x4}, {0xfec687fe, 0xffff1000, 0xc, 0xc, 0x6, 0x0, 0x1, 0x3, 0xd6, 0xb, 0x9, 0x7}, {0xeeee0000, 0x10000, 0x0, 0x1, 0x7, 0x7, 0x9, 0x6, 0x0, 0x51, 0xf7, 0x9}, {0x9000, 0x26000, 0xa, 0x2, 0x6, 0x9, 0xc, 0x8, 0xf8, 0x0, 0x7, 0xf}, {0x2, 0xfff}, {0x25000, 0x7}, 0x40040020, 0x0, 0xe000, 0x10420, 0x3, 0x7c01, 0xfec00000, [0x1ff, 0x5, 0x2, 0x1000000000000000]})

32.105294092s ago: executing program 4 (id=1405):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f0000000000000000000000100003007665746830000000000000001000120008000100766574", 0x3b}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x2, 0x0, [{0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x1000000)

31.962122556s ago: executing program 4 (id=1406):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x10c062)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})
r3 = fcntl$dupfd(r2, 0x406, r0)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000240))

31.803752679s ago: executing program 4 (id=1407):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x80402, 0x68)
add_key$user(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0)
write(r1, &(0x7f00000003c0)="686973743a6b6579733d5b756e97d3d3367ed28c42a84fbac20e43b85549b09d5d551c77fbc839bdbd691257616c30a1089074b1f76b64f1d6bec4221a917e880240954dc9b6c3ce51935243b8207e2fa11c2d903ff23d97c79e149b3a75aaff9be5b1599c1ed217b3c8e05184fa7493a63d2424", 0x74)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4)
ioctl(r0, 0xc138fd01, &(0x7f0000000240)="0400000000000000000000003801")

31.560454165s ago: executing program 4 (id=1408):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000240)={0x2, 0x1, 0x40, 0x2}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000300)={'veth0_to_hsr\x00', &(0x7f0000000380)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x2, 0xffffdffc, 0x3}})
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000007, 0x415d132, 0xffffffffffffffff, 0x0) (async)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x8080)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x40001ff, 0x0, 0x10, r2, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x84482, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) (async, rerun: 64)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x158) (async, rerun: 32)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) (async, rerun: 32)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) (async)
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c00930014006c6ab4cd6b90ed340000030290780000000000000000110690780a01010009000000"], 0x2a) (async, rerun: 32)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) (rerun: 32)
ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)

31.36825201s ago: executing program 4 (id=1409):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f0000000340)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x800, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x220, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

31.185700404s ago: executing program 33 (id=1409):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f0000000340)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x800, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x220, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

28.991481804s ago: executing program 0 (id=1420):
r0 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e23, 0x5, @empty}, 0x1c)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)=',', 0xf338}], 0x1)
writev(r0, &(0x7f0000001680)=[{&(0x7f0000000000)="6847ccde210c6cf8673398e84e41ed73dafeb636cfd7097f792bd6caa6dcb7580d2f5564dc7d1ca81753c5b8b7fc264b2bfa35e9173abdaf742a4e00bbbb86db932e55baf9b12223158593da67c4e0dc5ec8ff5433e38c252aa4bc9b7d3ee0eab6a3ff25ee2be5962ca875d0ba5969459cf3bbb20a4e9629158b92a54d98b1efb07d7ac694c9a53e5bada60db2185996cc04249600178602f8b49d29ca2fdac3c28f328827b22448c69842d0e32514948d6715a102b0c214bd5fdfe2f5fb23b62ecb254408a4ee247e443f0152f0c61f06e8", 0xd2}, {&(0x7f0000000100)="d2cc76d70823aec37a6baddcc4cfa71e5e1326e4311f408f2a0cd60d9c633009ee1bafc4e701b9f3ce1a6adf68fd354ad2667a77fdd088036fbf68c44dd2f3ef934bf70f2cfaf7764ca31f8bc5fc1806ad055b838ce96b70da7e888a39f4001176c5200d5bc26e23d57ef6de3d", 0x6d}, {&(0x7f0000000180)="113ae862e95f6415d93ed20776968351d2f56444da62cc2ada46", 0x1a}, {&(0x7f00000001c0)="6b573e8cb0fef726f4bc157e91c2e67167a7902d44688a63c76a0b289adada07120c187ece35f9434a3bbb82e1d97f3ef0b40762aed436215b12126465287c12b2a7c90b9f3d273605621f757127f2aca3735e25539968a74541a0ecb28dc1a58d994b01091b0ca15be8e67f628355cebf84beba8be974d753f3003e518c0defdf11a4edb0c81d39ea6476ce7a59b3195ac3fbae660c164227edb2c9067f5124c34ab18d1fe112367eccc7f0049a00899fba2d541a531b3a50f447a6756aed62361e133817d482c52f69ea6edf1311a770bfebe11abde7309a08b3ce", 0xdc}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="975bee6e90021b96ce6065c24968dab3a1333c21689da07bec42f5f0c2", 0x1d}, {&(0x7f0000001640)="04a7a3ed2c49101a5117546d14f4e7", 0xf}], 0x7)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x2})
write$tun(r1, &(0x7f0000000440)=ANY=[], 0x4a)
sendmsg$inet6(r0, &(0x7f0000002f00)={&(0x7f00000002c0)={0xa, 0x4e23, 0x277, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c, &(0x7f0000002c00)=[{&(0x7f0000000300)="75fa34d6eb940f2b800dfb94c8a6bbca908d78627cfd7ceace38fa72450c14dc07522f3588d9f54c0442c5c8f137e4169b285e82fd81ac86dff836", 0x3b}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="48cf31f07571a69fbf13990be4fbd953f3db6519897cd4f9504790ba8b87ee1b6ab10a31e7c5e7111688b049833b39e3a12bb21c0e6d5f2c265ddc1b20377f7b641406a86d42c9885cc30e6b6147f2a31f9210e0aee758b58bd570f869b311c583b5de81275f8c10bd8ac93c2774faa730c158f9ee94348d684ccec1ad9423e0257597e1ade4d220bbd9c74490a082add732587d210c7af2c9dffd35f2d81934f25dc2334c90f73975b457473df53b71689b664483908c2464e8939abf43", 0xbe}, {&(0x7f00000027c0)="8ddd56bf7f8919609e8bed24f95d588c17058ae5bd1f4fd38a4f6d93342af6f337a010e5c596a28f2fc6f0e6bf65728d88a41b7bfa3f825c5cce0896954dd9fa786769a44a2a7ac8d55d74d6a347518e364dd877dd90c0ed93629c061d61a507b8d88adff3599aee679da672fb5bbbe44a5da63d5f78dc03bbcbc1508a918f7a0378e0c91a4b6a9273459afe196c020e50556e701f8d15ddb0b0f231801ac228cd5feb15c50a54c59098239749f9c4a37b75447db96b8a3059f9985ba5116606b3b4469bf348a91a2df7412e1fdf5f0d180db35b1e7983c2d592334f741a54b999bbca61", 0xe4}, {&(0x7f00000028c0)="ef6c07948b8dfc5b5f16809945d9e8409ee8bc9526733c95e65489ece5dfe1df032061ee5705e9111c1754acc19de2354ec71e88b4de948f4b91c8d3d493a339d1967614a62224b0db8e2111040aac3aa71af26ab073ba5fe82388df48a494b7ba435f51ea6f007ff0ae89e970e3fe350303fe4f9bf4a9de591e1a0d4c6130250577292d598b1815e3cda9489caffdf2655b4fc531853fd4e2219c7ad310e09b690fa9174f71a0019ace9bc1e91ea4fc4a2f9ac833b7d7b4d24040cbe016bf4d2876bc94ee0bd30e9d8ee6e967e9be5a9c554b24aa866464", 0xd8}, {&(0x7f00000029c0)="5d0964cb8213e1a27dd39489b392b9d0c2b3fb1f6e06f6481778ad9b437414c17af624a7d547d041f37a411739e6ca7969b1baf6c4ad5f6471479c5280113e97a7f9d1e9a6ca6725e40a201a6c563f4e7880196d4a2bd2e20f837be60f86b4f9019093bd9d0e160caf29378c6cc1a40ee9df4e856d18cecc68edc056170d9ec26ea1fc4322efff622f5fece423fa4f670c70d5c8f8a04ddd1e94d097e50cce044868f9fc5fd38ff12249f94d36", 0xad}, {&(0x7f0000002a80)="ffca6bb104b054e5bd6283810c4c84dd8f0e33528d212b4c358496f8cd5c863c177513933cf837173fac9d4a9b7901383f0c14986cd1a7a3716b7a0866eb1f19b7a871d7ade08b12c3b14fb0dbc77618c6dcc083adc23afcbe20064248afd255ebbd8141cf3edfa2f308642403b60a999adcfe65b1e14b914730e5b0aa93ca82319a843a8486f7c373749504400745b58e2fbc0fbb554682fcbb4160f6fb86831560645c19ffc4ff81", 0xa9}, {&(0x7f0000002b40)="211f0a85e96bc8c387772313112e62dbf327946774200a178072a1495c23438b45057c6e702a182774d9206357f5ea1bb62d8d380747893ce10bab9488a39b81cb77843b4cec52b5cc19013c35247ee2b4fd607ac5e64b2f4b27f217a601de8898c7be327d926da4829a26698bdf86345d9a6d95e299bb6df9a71395fda93ff5e0f1e56685bc09", 0x87}], 0x8, &(0x7f0000002c80)=[@hopopts={{0x170, 0x29, 0x36, {0x6a, 0x2a, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x100, [0x100, 0x3]}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x3, [0x628f, 0x6, 0x986a, 0x42, 0x6, 0x48ae, 0x63f, 0x9]}}, @generic={0xb, 0xe8, "0f5e7ac7e05e50b495c39e3b7d71107ee6202b20ddd5d33e92aaf3486a2cf5c53431d83030064930909fa9be07d80ac6fcbc66599ce19ffc10bfb10a8d6968f6620b59a3e83e6134a240dd8d4a4a3dd6a812cc17dabd51678f564c369e41fb5cdc36dedddd5cf90a43f5e98e62f02f58f1d65a84026b9c5d761ed246922a094e4b54a21f6a1d2b61f34139b24b4ec12d04f6d1c9de47310ac71befd0d7b11786ffcde8c866d415554783c33b2d36aba663c23b90da16e3f526a390af45dfc00a91d79851edcc5884ee7f3f076f84a1038a3ed41f06b1ed0c063e022e246b17e7b40adefb9bd9e50c"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0xfff}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x87, 0xf, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x2, 0x12, 0x0, 0x7, [0x8000000000000001, 0x8, 0x2, 0x22, 0x1, 0xb, 0xfffffffeffffffff, 0x5, 0x6]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x80, 0x14, "04b20d3e218c7eb5fdd04b831571235be0aa90c5"}, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1ff}}], 0x278}, 0x44810)

28.843720207s ago: executing program 0 (id=1422):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000c, 0x20010, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0xb, 0x20}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40e41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

28.778011359s ago: executing program 0 (id=1423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r1, 0x73d, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x300, 0x0, 0x4000000}, 0x4040000)

28.690640661s ago: executing program 0 (id=1424):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x4, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x2}, &(0x7f0000000380)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0x8000, 0x823e})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r3, 0x1, &(0x7f0000000400)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r4 = socket$inet6(0xa, 0x3, 0x4)
pipe2(&(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r5, 0x0, 0x2, 0x0)
shutdown(r1, 0x1)
sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001000000000008004100000001"], 0x1c}], 0x1}, 0x4080)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
pselect6(0x40, &(0x7f0000000180)={0x8, 0x5, 0x400, 0x3df655c1, 0x6, 0x1, 0x180, 0x8}, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0)
syz_clone(0x23a40080, 0x0, 0x38, 0x0, 0x0, 0x0)
write(r6, &(0x7f0000001640)="8b", 0x22000)

27.802786971s ago: executing program 0 (id=1426):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000001c0)=0x42140868)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x100, 0x9, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a1f14b4da9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004004}, 0x40040c4)
ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875)
r4 = syz_io_uring_complete(0x0, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @val={0xc, 0x99, {0x7, 0x71}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x2008c0d1)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000480)=0x6, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c005}, 0x20000801)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
listen(r4, 0xfffffff7)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r6, &(0x7f00000005c0)="f5df7f9daf86576bf1bf85", 0xb, 0x4000000, &(0x7f0000000600)={0x2, 0x4e23, @remote}, 0x10)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000)
recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/54, 0x36}], 0x2, &(0x7f0000000840)=""/41, 0x29}, 0x5}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/167, 0xa7}, {&(0x7f0000000ac0)=""/132, 0x84}, {&(0x7f0000000b80)=""/34, 0x22}, {&(0x7f0000000bc0)=""/62, 0x3e}], 0x5}, 0x6}, {{&(0x7f0000000c80)=@generic, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000d00)=""/1, 0x1}], 0x1, &(0x7f0000000d80)=""/49, 0x31}, 0x8}, {{&(0x7f0000000dc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/117, 0x75}], 0x1, &(0x7f0000000f00)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001f00)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001f80)=""/212, 0xd4}, {&(0x7f0000002080)=""/227, 0xe3}, {&(0x7f0000002180)=""/13, 0xd}, {&(0x7f00000021c0)=""/175, 0xaf}, {&(0x7f0000002280)=""/169, 0xa9}], 0x5, &(0x7f00000023c0)=""/214, 0xd6}, 0x3}], 0x5, 0x10000, &(0x7f0000002600)={0x77359400})
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000002640)={0x16, 0x10, 0x0, 0xf8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x35}, @loopback, @private2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, @empty, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}]}, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002700)={'team0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000002740)={@ipv4={'\x00', '\xff\xff', @remote}, 0x65, r7})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000027c0), r5)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x70, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x855}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x4)
getsockopt$SO_NETNS_COOKIE(r4, 0x1, 0x47, &(0x7f0000002900), &(0x7f0000002940)=0x8)
r10 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000002980)='./binderfs/binder_logs/state\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000029c0)={'team_slave_0\x00', @broadcast})
poll(&(0x7f0000002a00)=[{r8, 0x10001}, {r4, 0x100}, {r1}, {r8, 0x1}], 0x4, 0x4)

24.287186922s ago: executing program 3 (id=1455):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1011})

24.162161285s ago: executing program 3 (id=1457):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000009c0)=0x3)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00')
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000400)={0x2e, 0x40, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f00000004c0)=<r6=>0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x80)
pipe2(0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r6, &(0x7f0000000a00)={0x0, 0xc1, 0x20000, 0xfffffffd, 0x7f}, &(0x7f0000001d80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x12e6, 0x42, 0x4, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b00, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0)
lseek(r2, 0x3, 0x0)
getdents64(r2, &(0x7f0000000340)=""/70, 0x46)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @ioapic={0x1000, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x7, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x83}, {0x8, 0x6, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x0, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x7, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}})
r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00')
lseek(r11, 0x800000008401, 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

23.181175268s ago: executing program 3 (id=1462):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r1, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f00000001c0))
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x80, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x4, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x3ff, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0xa39f, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0x6, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x2, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x1, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x6, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x1000000, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0xe, 0x5, 0x6, 0xac8, 0x2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x3, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x82000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x5, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a5, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0xfffffff7, 0x7e, 0x100, 0xca9, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x14, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2854, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

21.898514957s ago: executing program 0 (id=1472):
capset(0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x2004)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
sendfile(r0, r0, 0x0, 0x40000000800)

21.810370909s ago: executing program 34 (id=1472):
capset(0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x2004)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
sendfile(r0, r0, 0x0, 0x40000000800)

21.385757519s ago: executing program 3 (id=1476):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000000010001200", 0x34}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
clock_settime(0x0, &(0x7f0000000300))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
clock_gettime(0x4, &(0x7f0000000140))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x5, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

20.783280043s ago: executing program 5 (id=1477):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001500)={0x1, &(0x7f0000001540)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

20.782875733s ago: executing program 3 (id=1478):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x80402, 0x68)
add_key$user(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0)
write(r1, &(0x7f00000003c0)="686973743a6b6579733d5b756e97d3d3367ed28c42a84fbac20e43b85549b09d5d551c77fbc839bdbd691257616c30a1089074b1f76b64f1d6bec4221a917e880240954dc9b6c3ce51935243b8207e2fa11c2d903ff23d97c79e149b3a75aaff9be5b1599c1ed217b3c8e05184fa7493a63d2424", 0x74)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4)

20.725817254s ago: executing program 5 (id=1479):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x100, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x4, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x0, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x80000001, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000", 0x2e}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f00000004c0)=0x40081f4, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000005c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000600)=[{{&(0x7f0000000640)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1c041, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x5, 0x0, [{0xc0000001, 0x2, 0x0, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x2, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = dup(r7)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x9, 0x7544e3b4, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x8, 0x40, 0x9}})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x4, 0x3000, 0x2000, &(0x7f0000007000/0x2000)=nil})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000007c0)={{r4, &(0x7f0000000680)='\x00', 0x404000, &(0x7f00000006c0)={@_ha_fsid={[0x2, 0xffffffff]}, {0xf, 0x5, 0x0, 0x8}}, 0xfffffff8, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x7}, {[0x0, 0x9, 0x2, 0x5]}, 0x4705, 0x3, &(0x7f0000000780)=""/3})
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38bc59db83452f3, [{{0x9, 0x2, 0xffffffffffffff05}}]}}, 0x7fe782539b0b)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

20.720096224s ago: executing program 3 (id=1480):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)

18.947147885s ago: executing program 5 (id=1481):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a", 0x41}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x1, 0x0, [{0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x280002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8490, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./mnt\x00', &(0x7f0000000580), &(0x7f00000005c0)='./mnt\x00', 0x6, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

17.795306891s ago: executing program 5 (id=1485):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a0001000000000000000000022000000000000000000000080001", 0x1f)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

16.655724627s ago: executing program 5 (id=1488):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x80402, 0x68)
add_key$user(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0)
write(r1, &(0x7f00000003c0)="686973743a6b6579733d5b756e97d3d3367ed28c42a84fbac20e43b85549b09d5d551c77fbc839bdbd691257616c30a1089074b1f76b64f1d6bec4221a917e880240954dc9b6c3ce51935243b8207e2fa11c2d903ff23d97c79e149b3a75aaff9be5b1599c1ed217b3c8e05184fa7493a63d2424", 0x74)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4)

15.605148312s ago: executing program 5 (id=1490):
socket(0x2, 0x2, 0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000140)=@abs, 0x6e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/icmp\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/165, 0xa5}], 0x1, 0x180, 0x9)

5.801760507s ago: executing program 6 (id=1473):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x20000, 0x20)
ioctl(r0, 0x400c4d00, &(0x7f00000002c0))
epoll_create1(0x80000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x11c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x981}, 0x800)
r2 = syz_clone(0x100000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000640))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000580)={r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xc7, 0x2, 0x1ff, 0x81, 0x8000, 0x2, 0x5, 'syz1\x00'})
process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0x0)
r6 = syz_ublk_setup_io_uring(0x61b, &(0x7f0000000340)={0x0, 0xe230, 0x10389, 0x0, 0x215}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000480)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0x430, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000540))
writev(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xa000005, 0x1000004, 0x10010, r6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
syz_ublk_setup_queues(r11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, 0x0)

4.071686826s ago: executing program 2 (id=1503):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
eventfd(0xd33)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = open(0x0, 0x60840, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000540), &(0x7f00000003c0))
syz_io_uring_modify_offsets$flags(r3, 0x0, 0x68, 0x1)
syz_ublk_setup_queues(r0, r1, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x228, 0x0, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0)

4.054789677s ago: executing program 35 (id=1480):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)

3.835719232s ago: executing program 2 (id=1505):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000014c0)=0x800001, 0x4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f00000006c0)={0x20, 0xb, 0x64, {0x64, 0xa, "ffc6ce682099ee7de5030892c20ff1484458e43bbee23310314e804dfa49ae0bb67db7314c420b567f70c74e50428595cbe03a8cebd5abb26e7ca3f37e697ab99003217961844441c04b38b1b8e4d23ddae784d3463198c6af0deec213c2c1d3a418"}}, &(0x7f0000000380)={0x0, 0x3, 0x73, @string={0x73, 0x3, "146fe1e13c3c9e9b4958ccc5a68b6ebe53a6d4b5dca1eb24e49a9a7677befd634b090ad56f72b37806f7b7ef6493e99be6c481bc3b42eae7460b568f0038e9684335c32657c5d1fc89d5a7214ab776646a91dc0545427dc319ca006fc57b15c52e1d91a939deb7cfaa73f5f73e63f4e78d"}}, &(0x7f0000000040)=ANY=[], &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0x7, "021ab10c", "98bdae26"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x16, 0x3, 0x9, 0x0, 0x1000, 0xfff8}}}, &(0x7f0000000c80)={0x84, &(0x7f00000007c0)={0x20, 0x30, 0xb5, "60b87c7e6194606f87e8c583003f1d7f8bb6bcf5e0fc5cbb7c1e5aa908eff8b4273c2b1db8cd6d07762232b0ec1d567a3a8a625aad77968a4fde5c13ed3e1945befe4b3edeb4cf555940410d6f48a971f532fa77a29caca3de393892d4adaff0f5ac72ea307702b754c47085aea4422f92dc3df30d7667cc4dbdd68f5a5d9b65d417e58740c97da3484bcf5d4d72a242dce693cd55b5f466513b6cd589f387143296d00c73b8801c60dec8e9d71ae21b23b2d89bea"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x89}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x5, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x1000, 0x10, [0x0]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "5bc6"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "8834"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x10}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.731136134s ago: executing program 7 (id=1504):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
eventfd(0xd33)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = open(0x0, 0x60840, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000540), &(0x7f00000003c0))
syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1)
syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x1000000, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0)

3.716366955s ago: executing program 6 (id=1473):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x20000, 0x20)
ioctl(r0, 0x400c4d00, &(0x7f00000002c0))
epoll_create1(0x80000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x11c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x981}, 0x800)
r2 = syz_clone(0x100000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000640))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000580)={r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xc7, 0x2, 0x1ff, 0x81, 0x8000, 0x2, 0x5, 'syz1\x00'})
process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0x0)
r6 = syz_ublk_setup_io_uring(0x61b, &(0x7f0000000340)={0x0, 0xe230, 0x10389, 0x0, 0x215}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000480)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0x430, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000540))
writev(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xa000005, 0x1000004, 0x10010, r6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
syz_ublk_setup_queues(r11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, 0x0)

3.326259473s ago: executing program 7 (id=1504):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
eventfd(0xd33)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = open(0x0, 0x60840, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000540), &(0x7f00000003c0))
syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1)
syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x1000000, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0)

3.184808677s ago: executing program 6 (id=1473):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x20000, 0x20)
ioctl(r0, 0x400c4d00, &(0x7f00000002c0))
epoll_create1(0x80000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x11c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x981}, 0x800)
r2 = syz_clone(0x100000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000640))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000580)={r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xc7, 0x2, 0x1ff, 0x81, 0x8000, 0x2, 0x5, 'syz1\x00'})
process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0x0)
r6 = syz_ublk_setup_io_uring(0x61b, &(0x7f0000000340)={0x0, 0xe230, 0x10389, 0x0, 0x215}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000480)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0x430, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000540))
writev(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xa000005, 0x1000004, 0x10010, r6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
syz_ublk_setup_queues(r11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, 0x0)

2.956466542s ago: executing program 2 (id=1506):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0xffffffff, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007e, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x10, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x9, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000000010", 0x31}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000480)={0x9, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000540)=@attr_other={0x0, 0x0, 0x10, &(0x7f00000004c0)})
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x1c1840, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000380)=0xc)
mount$bpf(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0xc010, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r4}}]})
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write(r0, &(0x7f00000002c0)="00ea03000000722896e78daf1b7f00d174000000", 0xfffffffffffffcf3)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000980, 0x4, 0x6, 0xf2, 0x8006, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0x8001, 0x9, 0xc], 0x8083ff8, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
gettid()
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0)

2.949544822s ago: executing program 7 (id=1504):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
eventfd(0xd33)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = open(0x0, 0x60840, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000540), &(0x7f00000003c0))
syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1)
syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x1000000, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0)

2.875880814s ago: executing program 2 (id=1507):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe0e00, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000600)={<r1=>r0, &(0x7f0000000080)='syz', 0x2000, &(0x7f0000000540)={@_ha_fsid={[0x0, 0x7]}, {0x2, 0x6, 0x3}}, 0x0, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x8001})
ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000640)={0x0, 0x22ff8, 0x1, 0x9, 0x6})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000480)={0xffffffffffffffff, r4, 0xc4, 0x0, 0x0, 0x2, 0x1, 0x2, 0x6, 0x0, 0x1, 0x3, 'syz1\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc172010400001020301090269000301fb4003080b0000011b20020904000000010120000924016b0004090000090101022000090501094000080b47082501823008200009042401010102200009058209ff038003780825011a30010500"/114], 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0202"], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r5, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000240))
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0x54000, 0x2, 0xe, 0x0, 0x10, 0x5, 0x80, 0xfb, 0x4, 0x5, 0x5, 0x2}, {0x58000, 0xe6e00002, 0x4, 0x81, 0x5, 0x1, 0x5, 0xe0, 0x1, 0xf7, 0x1, 0x3}, {0xfec00000, 0x5000, 0xe, 0xe, 0x0, 0x5, 0x2, 0x3, 0x29, 0x1, 0x0, 0x1}, {0xfec00000, 0x55000, 0x10, 0x7, 0x7, 0xf9, 0x2, 0x3, 0x3, 0x3, 0x9, 0x6}, {0xdddee000, 0x1f587cffc, 0x3, 0x58, 0x9, 0xbf, 0x3, 0x1, 0x1, 0x6, 0x10, 0x3}, {0x1, 0x200000, 0xe, 0x3, 0xb, 0xb6, 0x3, 0x4, 0x1, 0x8, 0xc, 0x3}, {0xeeee0000, 0x200000, 0xc, 0x2, 0x0, 0x0, 0x9, 0x2e, 0x4, 0x7, 0x5}, {0xeeee0000, 0x5000, 0x10, 0x0, 0x0, 0x2, 0x8, 0x0, 0x1b, 0xb2, 0x3, 0xc}, {0xffffffff, 0xd}, {0xa000, 0x73}, 0x10000, 0x0, 0xeeee8000, 0x400, 0xa, 0xe100, 0x12221efff, [0x5, 0x8, 0xa4b2, 0xfff]})

2.727432817s ago: executing program 6 (id=1473):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x20000, 0x20)
ioctl(r0, 0x400c4d00, &(0x7f00000002c0))
epoll_create1(0x80000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x11c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x981}, 0x800)
r2 = syz_clone(0x100000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000640))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000580)={r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xc7, 0x2, 0x1ff, 0x81, 0x8000, 0x2, 0x5, 'syz1\x00'})
process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0x0)
r6 = syz_ublk_setup_io_uring(0x61b, &(0x7f0000000340)={0x0, 0xe230, 0x10389, 0x0, 0x215}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000480)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0x430, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000540))
writev(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xa000005, 0x1000004, 0x10010, r6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
syz_ublk_setup_queues(r11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, 0x0)

725.520153ms ago: executing program 2 (id=1508):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x80402, 0x68)
add_key$user(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0)
write(r1, &(0x7f00000003c0)="686973743a6b6579733d5b756e97d3d3367ed28c42a84fbac20e43b85549b09d5d551c77fbc839bdbd691257616c30a1089074b1f76b64f1d6bec4221a917e880240954dc9b6c3ce51935243b8207e2fa11c2d903ff23d97c79e149b3a75aaff9be5b1599c1ed217b3c8e05184fa7493a63d2424", 0x74)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl(r0, 0xc138fd01, &(0x7f0000000240)="0400000000000000000000003801")

501.615929ms ago: executing program 6 (id=1473):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x20000, 0x20)
ioctl(r0, 0x400c4d00, &(0x7f00000002c0))
epoll_create1(0x80000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x11c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x981}, 0x800)
r2 = syz_clone(0x100000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000640))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000580)={r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xc7, 0x2, 0x1ff, 0x81, 0x8000, 0x2, 0x5, 'syz1\x00'})
process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0x0)
r6 = syz_ublk_setup_io_uring(0x61b, &(0x7f0000000340)={0x0, 0xe230, 0x10389, 0x0, 0x215}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000480)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0x430, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000540))
writev(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xa000005, 0x1000004, 0x10010, r6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
syz_ublk_setup_queues(r11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, 0x0)

307.083453ms ago: executing program 36 (id=1490):
socket(0x2, 0x2, 0x1)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000140)=@abs, 0x6e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/icmp\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/165, 0xa5}], 0x1, 0x180, 0x9)

299.439303ms ago: executing program 2 (id=1510):
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
clock_gettime(0x0, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {r0, r1+10000000}}, &(0x7f00000000c0))
clock_adjtime(0x0, &(0x7f0000000340)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000940)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6})
clock_settime(0x0, &(0x7f0000000040)={0x77359400}) (async)
clock_gettime(0x0, &(0x7f0000000000)) (async)
clock_gettime(0x0, &(0x7f0000000100)) (async)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {r0, r1+10000000}}, &(0x7f00000000c0)) (async)
clock_adjtime(0x0, &(0x7f0000000340)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) (async)
clock_adjtime(0x0, &(0x7f0000000940)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) (async)

299.091613ms ago: executing program 7 (id=1504):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
eventfd(0xd33)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = open(0x0, 0x60840, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000540), &(0x7f00000003c0))
syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1)
syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x1000000, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0)

0s ago: executing program 6 (id=1473):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x20000, 0x20)
ioctl(r0, 0x400c4d00, &(0x7f00000002c0))
epoll_create1(0x80000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x11c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x981}, 0x800)
r2 = syz_clone(0x100000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000640))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000580)={r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xc7, 0x2, 0x1ff, 0x81, 0x8000, 0x2, 0x5, 'syz1\x00'})
process_vm_writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0x0)
r6 = syz_ublk_setup_io_uring(0x61b, &(0x7f0000000340)={0x0, 0xe230, 0x10389, 0x0, 0x215}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000480)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x2, 0x430, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000000540))
writev(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xa000005, 0x1000004, 0x10010, r6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
syz_ublk_setup_queues(r11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 169.710428][ T3552] RBP: 00007f79017b8090 R08: 0000000000000000 R09: 0000000000000000
[  169.710442][ T3552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  169.710455][ T3552] R13: 00007f7900c26038 R14: 00007f7900c25fa0 R15: 00007ffe517277f8
[  169.710474][ T3552]  </TASK>
[  170.016349][   T36] kauditd_printk_skb: 638 callbacks suppressed
[  170.016382][   T36] audit: type=1400 audit(1792099946.329:8259): avc:  denied  { create } for  pid=3553 comm="syz.4.1148" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  170.032880][ T1097] usb 1-1: USB disconnect, device number 48
[  170.081320][   T36] audit: type=1400 audit(1792099946.329:8260): avc:  denied  { ioctl } for  pid=3553 comm="syz.4.1148" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45963 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  170.108174][   T36] audit: type=1400 audit(1792099946.329:8261): avc:  denied  { ioctl } for  pid=3553 comm="syz.4.1148" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45963 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  170.140890][   T36] audit: type=1400 audit(1792099946.339:8262): avc:  denied  { read } for  pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.165219][   T36] audit: type=1400 audit(1792099946.399:8263): avc:  denied  { read open } for  pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.190435][   T36] audit: type=1400 audit(1792099946.399:8264): avc:  denied  { ioctl } for  pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.217053][   T36] audit: type=1400 audit(1792099946.509:8265): avc:  denied  { read } for  pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.245299][ T3560] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(3145732.0.0), cmd(9)
[  170.256268][   T36] audit: type=1400 audit(1792099946.509:8266): avc:  denied  { read open } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.310293][   T36] audit: type=1400 audit(1792099946.509:8267): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.336518][   T36] audit: type=1400 audit(1792099946.579:8268): avc:  denied  { mounton } for  pid=3559 comm="syz.3.1149" path="/312/dev" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  170.600013][  T364] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  170.699952][   T31] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  170.739946][  T364] usb 3-1: device descriptor read/64, error -71
[  170.839993][   T31] usb 5-1: device descriptor read/64, error -71
[  170.889006][ T3581] rust_binder: Write failure EINVAL in pid:790
[  170.909975][   T46] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  170.981123][  T364] usb 3-1: device descriptor read/64, error -71
[  171.049098][ T3597] FAULT_INJECTION: forcing a failure.
[  171.049098][ T3597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.062230][   T46] usb 4-1: Using ep0 maxpacket: 8
[  171.062247][ T3597] CPU: 0 UID: 0 PID: 3597 Comm: syz.0.1163 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  171.062330][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  171.062376][ T3597] Call Trace:
[  171.062405][ T3597]  <TASK>
[  171.062430][ T3597]  __dump_stack+0x21/0x30
[  171.062517][ T3597]  dump_stack_lvl+0x140/0x1c0
[  171.062584][ T3597]  ? __cfi_dump_stack_lvl+0x10/0x10
[  171.062655][ T3597]  ? check_stack_object+0x138/0x150
[  171.062735][ T3597]  dump_stack+0x19/0x20
[  171.062799][ T3597]  should_fail_ex+0x3c2/0x510
[  171.062835][ T3597]  should_fail+0xf/0x20
[  171.062868][ T3597]  should_fail_usercopy+0x1e/0x30
[  171.062950][ T3597]  _copy_to_user+0x24/0xa0
[  171.063027][ T3597]  simple_read_from_buffer+0xed/0x160
[  171.063086][ T3597]  proc_fail_nth_read+0x1aa/0x220
[  171.063152][ T3597]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  171.063228][ T3597]  ? bpf_lsm_file_permission+0xd/0x20
[  171.063286][ T3597]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  171.063360][ T3597]  vfs_read+0x28b/0xc70
[  171.063427][ T3597]  ? __cfi_vfs_read+0x10/0x10
[  171.063495][ T3597]  ? __kasan_check_write+0x18/0x20
[  171.063570][ T3597]  ? mutex_lock+0x97/0x1d0
[  171.063636][ T3597]  ? __cfi_mutex_lock+0x10/0x10
[  171.063706][ T3597]  ksys_read+0x145/0x260
[  171.063806][ T3597]  ? __cfi_ksys_read+0x10/0x10
[  171.063885][ T3597]  ? __kasan_check_read+0x15/0x20
[  171.063954][ T3597]  __x64_sys_read+0x7f/0x90
[  171.064026][ T3597]  x64_sys_call+0x2638/0x2ee0
[  171.064087][ T3597]  do_syscall_64+0x57/0xf0
[  171.064133][ T3597]  ? clear_bhb_loop+0x50/0xa0
[  171.064194][ T3597]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  171.064254][ T3597] RIP: 0033:0x7fd5dd75ed8e
[  171.064292][ T3597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  171.064347][ T3597] RSP: 002b:00007fd5de608fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  171.064435][ T3597] RAX: ffffffffffffffda RBX: 00007fd5de6096c0 RCX: 00007fd5dd75ed8e
[  171.064480][ T3597] RDX: 000000000000000f RSI: 00007fd5de6090a0 RDI: 0000000000000004
[  171.064514][ T3597] RBP: 00007fd5de609090 R08: 0000000000000000 R09: 0000000000000000
[  171.064555][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.064591][ T3597] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffdd0df1db8
[  171.064653][ T3597]  </TASK>
[  171.180880][ T3599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1164'.
[  171.183001][   T31] usb 5-1: device descriptor read/64, error -71
[  171.327197][   T46] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  171.336465][   T46] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  171.344964][   T46] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  171.355088][   T46] usb 4-1: config 250 has no interface number 0
[  171.361424][   T46] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  171.373034][   T46] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  171.383497][   T46] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  171.394400][   T46] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  171.408111][   T46] usb 4-1: config 250 interface 228 has no altsetting 0
[  171.424533][   T46] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  171.435880][   T46] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  171.445095][   T46] usb 4-1: Product: syz
[  171.449296][   T46] usb 4-1: SerialNumber: syz
[  171.453957][  T364] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  171.472086][   T46] hub 4-1:250.228: bad descriptor, ignoring hub
[  171.478669][   T46] hub 4-1:250.228: probe with driver hub failed with error -5
[  171.559956][   T31] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  171.573604][ T3606] FAULT_INJECTION: forcing a failure.
[  171.573604][ T3606] name failslab, interval 1, probability 0, space 0, times 0
[  171.586636][ T3606] CPU: 0 UID: 0 PID: 3606 Comm: syz.0.1167 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  171.586669][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  171.586684][ T3606] Call Trace:
[  171.586691][ T3606]  <TASK>
[  171.586700][ T3606]  __dump_stack+0x21/0x30
[  171.586740][ T3606]  dump_stack_lvl+0x140/0x1c0
[  171.586773][ T3606]  ? __cfi_dump_stack_lvl+0x10/0x10
[  171.586810][ T3606]  dump_stack+0x19/0x20
[  171.586842][ T3606]  should_fail_ex+0x3c2/0x510
[  171.586864][ T3606]  ? security_prepare_creds+0x66/0x260
[  171.586897][ T3606]  should_failslab+0xac/0x100
[  171.586919][ T3606]  __kmalloc_noprof+0x69/0x510
[  171.586950][ T3606]  ? kasan_save_alloc_info+0x3a/0x50
[  171.586979][ T3606]  ? security_prepare_creds+0x66/0x260
[  171.587010][ T3606]  ? __kasan_slab_alloc+0x73/0x90
[  171.587032][ T3606]  security_prepare_creds+0x66/0x260
[  171.587065][ T3606]  prepare_creds+0x46d/0x6b0
[  171.587093][ T3606]  do_faccessat+0x315/0xd00
[  171.587123][ T3606]  ? fsnotify_parent+0x220/0x220
[  171.587153][ T3606]  ? __kasan_check_write+0x18/0x20
[  171.587182][ T3606]  ? fpregs_restore_userregs+0x11c/0x260
[  171.587214][ T3606]  __x64_sys_faccessat2+0x9e/0xb0
[  171.587236][ T3606]  x64_sys_call+0x2854/0x2ee0
[  171.587279][ T3606]  do_syscall_64+0x57/0xf0
[  171.587299][ T3606]  ? clear_bhb_loop+0x50/0xa0
[  171.587327][ T3606]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  171.587352][ T3606] RIP: 0033:0x7fd5dd79e559
[  171.587370][ T3606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.587389][ T3606] RSP: 002b:00007fd5de609028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7
[  171.587412][ T3606] RAX: ffffffffffffffda RBX: 00007fd5dda25fa0 RCX: 00007fd5dd79e559
[  171.587429][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  171.587444][ T3606] RBP: 00007fd5dd8358b0 R08: 0000000000000000 R09: 0000000000000000
[  171.587459][ T3606] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000
[  171.587473][ T3606] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffdd0df1db8
[  171.587492][ T3606]  </TASK>
[  171.590005][  T364] usb 3-1: device descriptor read/64, error -71
[  171.849928][ T1097] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  171.859953][   T31] usb 5-1: device descriptor read/64, error -71
[  172.019943][ T1097] usb 1-1: Using ep0 maxpacket: 32
[  172.031883][ T1097] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.049934][ T1097] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  172.050384][  T364] usb 3-1: device descriptor read/64, error -71
[  172.077787][ T1097] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  172.088819][ T1097] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  172.099819][ T1097] usb 1-1: config 1 interface 2 has no altsetting 0
[  172.112713][ T1097] usb 1-1: New USB device found, idVendor=12ef, idProduct=8212, bcdDevice= 0.40
[  172.129945][ T1097] usb 1-1: New USB device strings: Mfr=1, Product=30, SerialNumber=3
[  172.130015][   T31] usb 5-1: device descriptor read/64, error -71
[  172.138043][ T1097] usb 1-1: Product: syz
[  172.138061][ T1097] usb 1-1: Manufacturer: syz
[  172.170029][ T1097] usb 1-1: SerialNumber: syz
[  172.181040][  T364] usb usb3-port1: attempt power cycle
[  172.251022][   T31] usb usb5-port1: attempt power cycle
[  172.404400][ T1097] usb 1-1: USB disconnect, device number 49
[  172.530604][  T364] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  172.563140][  T364] usb 3-1: device descriptor read/8, error -71
[  172.590009][   T31] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  172.613653][   T31] usb 5-1: device descriptor read/8, error -71
[  172.713499][  T364] usb 3-1: device descriptor read/8, error -71
[  172.754976][   T31] usb 5-1: device descriptor read/8, error -71
[  172.983128][  T364] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  173.000596][   T31] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  173.020953][  T364] usb 3-1: device descriptor read/8, error -71
[  173.033367][   T31] usb 5-1: device descriptor read/8, error -71
[  173.162472][  T364] usb 3-1: device descriptor read/8, error -71
[  173.180863][   T31] usb 5-1: device descriptor read/8, error -71
[  173.272333][  T364] usb usb3-port1: unable to enumerate USB device
[  173.290530][   T31] usb usb5-port1: unable to enumerate USB device
[  173.576927][ T3621] netlink: 'syz.4.1170': attribute type 4 has an invalid length.
[  173.919005][ T3636] x_tables: duplicate underflow at hook 2
[  173.960086][ T1097] usb 4-1: USB disconnect, device number 40
[  174.270009][ T1064] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  174.301232][ T3652] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1183'.
[  174.316078][ T3652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1183'.
[  174.339943][   T31] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  174.439070][ T1064] usb 5-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40
[  174.449172][ T1064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.457984][ T1064] usb 5-1: Product: syz
[  174.462717][ T1064] usb 5-1: Manufacturer: syz
[  174.467309][ T1064] usb 5-1: SerialNumber: syz
[  174.499930][   T31] usb 1-1: Using ep0 maxpacket: 32
[  174.508349][   T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  174.517341][   T31] usb 1-1: config 0 has no interface number 0
[  174.523981][   T31] usb 1-1: config 0 interface 184 has no altsetting 0
[  174.534041][   T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  174.543123][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.551168][   T31] usb 1-1: Product: syz
[  174.555361][   T31] usb 1-1: Manufacturer: syz
[  174.560015][   T31] usb 1-1: SerialNumber: syz
[  174.566362][   T31] usb 1-1: config 0 descriptor??
[  174.583978][   T31] smsc75xx v1.0.0
[  175.192579][   T36] kauditd_printk_skb: 623 callbacks suppressed
[  175.192598][   T36] audit: type=1400 audit(1792099951.529:8892): avc:  denied  { ioctl } for  pid=3643 comm="syz.0.1179" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  175.225253][   T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  175.237901][   T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  175.247826][   T36] audit: type=1400 audit(1792099951.559:8893): avc:  denied  { ioctl } for  pid=3643 comm="syz.0.1179" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  175.274227][   T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  175.285221][   T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  175.296111][   T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  175.307264][   T36] audit: type=1400 audit(1792099951.559:8894): avc:  denied  { ioctl } for  pid=3643 comm="syz.0.1179" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  175.332920][   T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  175.343296][   T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61
[  175.352222][   T36] audit: type=1400 audit(1792099951.609:8895): avc:  denied  { ioctl } for  pid=3643 comm="syz.0.1179" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  175.394919][   T36] audit: type=1400 audit(1792099951.729:8896): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  175.437190][   T36] audit: type=1400 audit(1792099951.769:8897): avc:  denied  { read } for  pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.480959][   T36] audit: type=1400 audit(1792099951.769:8898): avc:  denied  { read open } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.528058][   T36] audit: type=1400 audit(1792099951.769:8899): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.577471][   T36] audit: type=1400 audit(1792099951.809:8900): avc:  denied  { ioctl } for  pid=3643 comm="syz.0.1179" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  175.613212][   T36] audit: type=1400 audit(1792099951.889:8901): avc:  denied  { create } for  pid=3662 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  175.731406][ T3665] FAULT_INJECTION: forcing a failure.
[  175.731406][ T3665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.744662][ T3665] CPU: 1 UID: 0 PID: 3665 Comm: syz.2.1187 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  175.744712][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  175.744732][ T3665] Call Trace:
[  175.744742][ T3665]  <TASK>
[  175.744753][ T3665]  __dump_stack+0x21/0x30
[  175.744801][ T3665]  dump_stack_lvl+0x140/0x1c0
[  175.744851][ T3665]  ? __cfi_dump_stack_lvl+0x10/0x10
[  175.744893][ T3665]  ? check_stack_object+0x138/0x150
[  175.744943][ T3665]  dump_stack+0x19/0x20
[  175.744985][ T3665]  should_fail_ex+0x3c2/0x510
[  175.745016][ T3665]  should_fail+0xf/0x20
[  175.745042][ T3665]  should_fail_usercopy+0x1e/0x30
[  175.745075][ T3665]  _copy_to_user+0x24/0xa0
[  175.745108][ T3665]  simple_read_from_buffer+0xed/0x160
[  175.745145][ T3665]  proc_fail_nth_read+0x1aa/0x220
[  175.745181][ T3665]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  175.745216][ T3665]  ? bpf_lsm_file_permission+0xd/0x20
[  175.745249][ T3665]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  175.745282][ T3665]  vfs_read+0x28b/0xc70
[  175.745321][ T3665]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  175.745363][ T3665]  ? __cfi_vfs_read+0x10/0x10
[  175.745401][ T3665]  ? __kasan_check_write+0x18/0x20
[  175.745438][ T3665]  ? mutex_lock+0x97/0x1d0
[  175.745473][ T3665]  ? __cfi_mutex_lock+0x10/0x10
[  175.745507][ T3665]  ksys_read+0x145/0x260
[  175.745557][ T3665]  ? __cfi_ksys_read+0x10/0x10
[  175.745589][ T3665]  ? __kasan_check_write+0x18/0x20
[  175.745622][ T3665]  ? fput+0x1a4/0x230
[  175.745650][ T3665]  ? __kasan_check_read+0x15/0x20
[  175.745683][ T3665]  __x64_sys_read+0x7f/0x90
[  175.745715][ T3665]  x64_sys_call+0x2638/0x2ee0
[  175.745742][ T3665]  do_syscall_64+0x57/0xf0
[  175.745763][ T3665]  ? clear_bhb_loop+0x50/0xa0
[  175.745795][ T3665]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  175.745825][ T3665] RIP: 0033:0x7f790095ed8e
[  175.745844][ T3665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  175.745866][ T3665] RSP: 002b:00007f79017b7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.745892][ T3665] RAX: ffffffffffffffda RBX: 00007f79017b86c0 RCX: 00007f790095ed8e
[  175.745943][ T3665] RDX: 000000000000000f RSI: 00007f79017b80a0 RDI: 0000000000000006
[  175.745960][ T3665] RBP: 00007f79017b8090 R08: 0000000000000000 R09: 0000000000000000
[  175.745976][ T3665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.745995][ T3665] R13: 00007f7900c26038 R14: 00007f7900c25fa0 R15: 00007ffe517277f8
[  175.746017][ T3665]  </TASK>
[  176.089926][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  176.090218][ T2161] Bluetooth: hci0: command 0x1003 tx timeout
[  176.289446][ T3676] syzkaller0: entered promiscuous mode
[  176.295207][ T3676] syzkaller0: entered allmulticast mode
[  176.394076][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  177.124492][ T1064] usb 5-1: Can't get UAC3 power state for id 10
[  177.134649][ T1064] usb 5-1: BAAD MICROPHONE c_chmask mismatch
[  177.156275][ T1064] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  177.173889][ T1064] usb 5-1: USB disconnect, device number 24
[  177.242606][ T1929] udevd[1929]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  177.371734][ T1064] usb 1-1: USB disconnect, device number 50
[  177.495441][ T3692] syzkaller1: entered promiscuous mode
[  177.501068][ T3692] syzkaller1: entered allmulticast mode
[  177.849958][  T364] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  178.003291][  T364] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  178.013023][  T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.033073][  T364] usb-storage 1-1:1.0: USB Mass Storage device detected
[  178.107590][ T3705] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  178.160437][ T1064] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  178.303912][   T46] rust_binder: 3708: undelivered TRANSACTION_ERROR: 29189
[  178.310053][ T1064] usb 3-1: Using ep0 maxpacket: 32
[  178.328495][ T1064] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  178.336787][ T1064] usb 3-1: config 0 has no interface number 0
[  178.342943][ T1064] usb 3-1: config 0 interface 184 has no altsetting 0
[  178.354117][ T1064] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  178.363270][ T1064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.371323][ T1064] usb 3-1: Product: syz
[  178.375565][ T1064] usb 3-1: Manufacturer: syz
[  178.381369][ T1064] usb 3-1: SerialNumber: syz
[  178.387733][ T1064] usb 3-1: config 0 descriptor??
[  178.403693][ T1064] smsc75xx v1.0.0
[  178.410088][ T2161] Bluetooth: hci0: command 0x1003 tx timeout
[  178.416131][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  178.445285][ T3695] cgroup: Unknown subsys name 'subj_user'
[  178.457963][  T364] scsi host1: usb-storage 1-1:1.0
[  178.476070][  T364] usb 1-1: USB disconnect, device number 51
[  178.487301][ T3713] usb usb5: usbfs: process 3713 (syz.4.1204) did not claim interface 0 before use
[  179.018052][ T1064] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  179.028988][ T1064] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  179.539941][ T1097] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  179.692168][ T1097] usb 4-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config
[  179.702812][ T1097] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  179.716548][ T1097] usb 4-1: config 0 interface 0 has no altsetting 0
[  179.723217][ T1097] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  179.732271][ T1097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.741886][ T1097] usb 4-1: config 0 descriptor??
[  180.149947][   T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  180.204633][   T36] kauditd_printk_skb: 640 callbacks suppressed
[  180.204653][   T36] audit: type=1400 audit(1792099956.539:9542): avc:  denied  { read write } for  pid=3749 comm="syz.4.1215" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.239982][   T36] audit: type=1400 audit(1792099956.539:9543): avc:  denied  { read write open } for  pid=3749 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.265056][   T36] audit: type=1400 audit(1792099956.539:9544): avc:  denied  { ioctl } for  pid=3749 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.290205][   T36] audit: type=1400 audit(1792099956.539:9545): avc:  denied  { ioctl } for  pid=3749 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.315175][   T10] usb 1-1: Using ep0 maxpacket: 8
[  180.320287][   T36] audit: type=1400 audit(1792099956.559:9546): avc:  denied  { ioctl } for  pid=3749 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.345690][   T36] audit: type=1400 audit(1792099956.559:9547): avc:  denied  { ioctl } for  pid=3749 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.371086][   T36] audit: type=1400 audit(1792099956.579:9548): avc:  denied  { ioctl } for  pid=3746 comm="syz.0.1214" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.396202][   T36] audit: type=1400 audit(1792099956.609:9549): avc:  denied  { ioctl } for  pid=3698 comm="syz.2.1199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.421127][   T36] audit: type=1400 audit(1792099956.609:9550): avc:  denied  { ioctl } for  pid=3698 comm="syz.2.1199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.446062][   T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  180.449838][   T36] audit: type=1400 audit(1792099956.659:9551): avc:  denied  { ioctl } for  pid=3749 comm="syz.4.1215" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.454187][   T10] usb 1-1: config 0 has no interface number 0
[  180.482118][  T364] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  180.498237][ T1097] usb 4-1: string descriptor 0 read error: -71
[  180.511270][ T1097] usb 4-1: USB disconnect, device number 41
[  180.519975][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  180.542630][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.560444][   T10] usb 1-1: Product: syz
[  180.568884][   T10] usb 1-1: Manufacturer: syz
[  180.574372][   T10] usb 1-1: SerialNumber: syz
[  180.581661][   T10] usb 1-1: config 0 descriptor??
[  180.639934][  T364] usb 5-1: Using ep0 maxpacket: 16
[  180.648197][  T364] usb 5-1: config 0 has an invalid interface number: 98 but max is 0
[  180.658974][  T364] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.669984][  T364] usb 5-1: config 0 has no interface number 0
[  180.676169][  T364] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  180.687152][  T364] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  180.698937][  T364] usb 5-1: config 0 interface 98 has no altsetting 0
[  180.710243][  T364] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  180.719412][  T364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.728402][  T364] usb 5-1: Product: syz
[  180.733264][  T364] usb 5-1: Manufacturer: syz
[  180.737875][  T364] usb 5-1: SerialNumber: syz
[  180.753120][  T364] usb 5-1: config 0 descriptor??
[  180.761496][ T3750] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  180.769173][ T3750] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  180.793662][   T10] usb 1-1: USB disconnect, device number 52
[  181.030278][ T3750] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  181.039135][ T3750] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  181.503061][ T1064] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  181.513997][ T1064] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  181.531068][ T1064] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  181.540539][ T1064] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  181.560006][ T1064] usb 3-1: USB disconnect, device number 46
[  181.651336][  T364] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  181.667750][  T364] asix 5-1:0.98: probe with driver asix failed with error -71
[  181.679307][  T364] usb 5-1: USB disconnect, device number 25
[  181.999964][ T1064] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  182.149938][ T1064] usb 4-1: Using ep0 maxpacket: 32
[  182.166497][ T1064] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  182.186350][ T1064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.197541][ T1064] usb 4-1: Product: ࠄ
[  182.202268][ T1064] usb 4-1: Manufacturer: 殃糏眽ၕ攌弒쿖굁羳窘⡧ꚯᛨ淓옃鬤韝ᆞᣭ໰훫滏⦙჻㸖푺︗鐗瞊㗘Ὀダ섩隇┺⭗岓菖醑躨쥎獰ᯙ둤檡㑙䏈진㎮拝唨쎌ܡ鈆䔡埘껆雈䣍뙰仁섄ᘔ싣濏끕춪갴鴁᫟횡⨴셣獁큭쫍驵ᴥ鹈茲ꌋ㉅ⲣ嗖⤻⥼➩ᄣ⯶쌶暓⒍ᰐ蹪捯帕郠뻾ᵕ慎몋喵㔾吝㘭
[  182.238215][ T1064] usb 4-1: SerialNumber: Ⰺ
[  182.396733][ T3802] syzkaller0: entered allmulticast mode
[  182.408126][ T3802] syzkaller0: entered promiscuous mode
[  182.413925][ T3802] FAULT_INJECTION: forcing a failure.
[  182.413925][ T3802] name failslab, interval 1, probability 0, space 0, times 0
[  182.426581][ T3802] CPU: 1 UID: 0 PID: 3802 Comm: syz.2.1231 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  182.426613][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  182.426627][ T3802] Call Trace:
[  182.426634][ T3802]  <TASK>
[  182.426643][ T3802]  __dump_stack+0x21/0x30
[  182.426680][ T3802]  dump_stack_lvl+0x140/0x1c0
[  182.426711][ T3802]  ? __cfi_dump_stack_lvl+0x10/0x10
[  182.426745][ T3802]  dump_stack+0x19/0x20
[  182.426775][ T3802]  should_fail_ex+0x3c2/0x510
[  182.426796][ T3802]  should_failslab+0xac/0x100
[  182.426817][ T3802]  kmem_cache_alloc_node_noprof+0x45/0x420
[  182.426847][ T3802]  ? __alloc_skb+0x10c/0x360
[  182.426869][ T3802]  __alloc_skb+0x10c/0x360
[  182.426891][ T3802]  inet6_rt_notify+0x351/0x520
[  182.426921][ T3802]  ? addrconf_init_auto_addrs+0x792/0xbf0
[  182.426948][ T3802]  ? addrconf_notify+0x85c/0xeb0
[  182.426968][ T3802]  ? sock_do_ioctl+0x249/0x330
[  182.426999][ T3802]  ? __cfi_inet6_rt_notify+0x10/0x10
[  182.427031][ T3802]  fib6_add+0x25c5/0x4c00
[  182.427058][ T3802]  ? __kasan_kmalloc+0x96/0xb0
[  182.427079][ T3802]  ? __cfi_fib6_add+0x10/0x10
[  182.427101][ T3802]  ? ipv6_addr_prefix+0x72/0x1e0
[  182.427124][ T3802]  ? __asan_memcpy+0x5a/0x80
[  182.427152][ T3802]  ? __kasan_check_write+0x18/0x20
[  182.427181][ T3802]  ? _raw_spin_lock_bh+0x96/0x130
[  182.427201][ T3802]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  182.427220][ T3802]  ? ip6_route_info_create+0xf2c/0x14c0
[  182.427251][ T3802]  ip6_route_add+0x8d/0x180
[  182.427278][ T3802]  addrconf_add_dev+0x38a/0x4b0
[  182.427308][ T3802]  ? __ipv6_isatap_ifid+0x310/0x310
[  182.427342][ T3802]  ? __kasan_check_read+0x15/0x20
[  182.427369][ T3802]  addrconf_init_auto_addrs+0x792/0xbf0
[  182.427390][ T3802]  ? __kasan_check_write+0x18/0x20
[  182.427418][ T3802]  ? addrconf_dad_run+0x5c0/0x5c0
[  182.427438][ T3802]  ? igmpv3_del_delrec+0x6f0/0x6f0
[  182.427462][ T3802]  ? __kasan_check_write+0x18/0x20
[  182.427490][ T3802]  ? _raw_spin_unlock_bh+0x54/0x60
[  182.427510][ T3802]  ? igmpv3_del_delrec+0x601/0x6f0
[  182.427533][ T3802]  ? __kasan_check_write+0x18/0x20
[  182.427561][ T3802]  ? mutex_unlock+0x90/0x240
[  182.427586][ T3802]  ? __cfi_mutex_unlock+0x10/0x10
[  182.427610][ T3802]  ? addrconf_link_ready+0x131/0x1b0
[  182.427630][ T3802]  addrconf_notify+0x85c/0xeb0
[  182.427650][ T3802]  ? __cfi_addrconf_notify+0x10/0x10
[  182.427669][ T3802]  notifier_call_chain+0x106/0x2b0
[  182.427694][ T3802]  raw_notifier_call_chain+0x31/0x40
[  182.427718][ T3802]  __dev_notify_flags+0x318/0x5a0
[  182.427747][ T3802]  ? _raw_spin_unlock_bh+0x54/0x60
[  182.427767][ T3802]  ? __cfi___dev_notify_flags+0x10/0x10
[  182.427795][ T3802]  ? __dev_change_flags+0x4ec/0x6c0
[  182.427824][ T3802]  ? __cfi___dev_change_flags+0x10/0x10
[  182.427853][ T3802]  ? ioctl_has_perm+0x39a/0x500
[  182.427883][ T3802]  dev_change_flags+0xe7/0x1b0
[  182.427911][ T3802]  dev_ifsioc+0x4ef/0xc10
[  182.427940][ T3802]  dev_ioctl+0x9c1/0x1000
[  182.427964][ T3802]  sock_do_ioctl+0x249/0x330
[  182.427996][ T3802]  ? sock_show_fdinfo+0xd0/0xd0
[  182.428026][ T3802]  ? __cfi_vfs_write+0x10/0x10
[  182.428056][ T3802]  ? __kasan_check_write+0x18/0x20
[  182.428096][ T3802]  ? mutex_unlock+0x90/0x240
[  182.428119][ T3802]  sock_ioctl+0x568/0x7e0
[  182.428147][ T3802]  ? __cfi_sock_ioctl+0x10/0x10
[  182.428175][ T3802]  ? __fget_files+0x2bc/0x330
[  182.428194][ T3802]  ? bpf_lsm_file_ioctl+0xd/0x20
[  182.428216][ T3802]  ? security_file_ioctl+0x3e/0x110
[  182.428241][ T3802]  ? __cfi_sock_ioctl+0x10/0x10
[  182.428268][ T3802]  __se_sys_ioctl+0x126/0x1b0
[  182.428287][ T3802]  __x64_sys_ioctl+0x7f/0xa0
[  182.428307][ T3802]  x64_sys_call+0x1878/0x2ee0
[  182.428328][ T3802]  do_syscall_64+0x57/0xf0
[  182.428346][ T3802]  ? clear_bhb_loop+0x50/0xa0
[  182.428371][ T3802]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  182.428395][ T3802] RIP: 0033:0x7f790099e559
[  182.428412][ T3802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.428430][ T3802] RSP: 002b:00007f79017b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.428453][ T3802] RAX: ffffffffffffffda RBX: 00007f7900c25fa0 RCX: 00007f790099e559
[  182.428469][ T3802] RDX: 00002000000004c0 RSI: 0000000000008914 RDI: 0000000000000003
[  182.428484][ T3802] RBP: 00007f79017b8090 R08: 0000000000000000 R09: 0000000000000000
[  182.428498][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.428511][ T3802] R13: 00007f7900c26038 R14: 00007f7900c25fa0 R15: 00007ffe517277f8
[  182.428530][ T3802]  </TASK>
[  182.973505][ T3804] netlink: 'syz.2.1232': attribute type 4 has an invalid length.
[  182.981373][ T3804] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1232'.
[  183.018512][ T3804] FAULT_INJECTION: forcing a failure.
[  183.018512][ T3804] name fail_futex, interval 1, probability 0, space 0, times 0
[  183.031424][ T3804] CPU: 0 UID: 0 PID: 3804 Comm: syz.2.1232 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  183.031460][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  183.031471][ T3804] Call Trace:
[  183.031477][ T3804]  <TASK>
[  183.031484][ T3804]  __dump_stack+0x21/0x30
[  183.031517][ T3804]  dump_stack_lvl+0x140/0x1c0
[  183.031549][ T3804]  ? __cfi_dump_stack_lvl+0x10/0x10
[  183.031574][ T3804]  ? is_bpf_text_address+0x17b/0x1a0
[  183.031596][ T3804]  dump_stack+0x19/0x20
[  183.031621][ T3804]  should_fail_ex+0x3c2/0x510
[  183.031638][ T3804]  should_fail+0xf/0x20
[  183.031652][ T3804]  get_futex_key+0x178/0x940
[  183.031668][ T3804]  ? ttwu_queue_wakelist+0x323/0x520
[  183.031691][ T3804]  ? __cfi_get_futex_key+0x10/0x10
[  183.031705][ T3804]  ? __smp_call_single_queue+0xd5/0x380
[  183.031729][ T3804]  ? ttwu_do_activate+0x620/0x620
[  183.031750][ T3804]  ? ttwu_queue_wakelist+0x323/0x520
[  183.031772][ T3804]  futex_wait_setup+0xae/0x260
[  183.031794][ T3804]  ? __cfi_futex_wait_setup+0x10/0x10
[  183.031815][ T3804]  ? __asan_memcpy+0x5a/0x80
[  183.031838][ T3804]  __futex_wait+0x12c/0x3d0
[  183.031867][ T3804]  ? __cfi___futex_wait+0x10/0x10
[  183.031888][ T3804]  ? __cfi_futex_wake_mark+0x10/0x10
[  183.031909][ T3804]  ? futex_wake+0x666/0x950
[  183.031930][ T3804]  futex_wait+0x128/0x7c0
[  183.031971][ T3804]  ? __cfi_futex_wait+0x10/0x10
[  183.032004][ T3804]  ? __seccomp_filter+0x897/0x1b70
[  183.032034][ T3804]  do_futex+0x32a/0x510
[  183.032052][ T3804]  ? __cfi_do_futex+0x10/0x10
[  183.032068][ T3804]  ? alloc_file_pseudo+0x191/0x1f0
[  183.032089][ T3804]  __se_sys_futex+0x13c/0x320
[  183.032107][ T3804]  ? __x64_sys_futex+0x110/0x110
[  183.032125][ T3804]  ? is_dma_buf_file+0x11/0x50
[  183.032147][ T3804]  __x64_sys_futex+0xe9/0x110
[  183.032165][ T3804]  x64_sys_call+0x227f/0x2ee0
[  183.032183][ T3804]  do_syscall_64+0x57/0xf0
[  183.032198][ T3804]  ? clear_bhb_loop+0x50/0xa0
[  183.032219][ T3804]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  183.032239][ T3804] RIP: 0033:0x7f790099e559
[  183.032254][ T3804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.032269][ T3804] RSP: 002b:00007f79017b80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  183.032287][ T3804] RAX: ffffffffffffffda RBX: 00007f7900c25fa8 RCX: 00007f790099e559
[  183.032301][ T3804] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7900c25fa8
[  183.032312][ T3804] RBP: 00007f7900c25fa0 R08: 0000000000000000 R09: 0000000000000000
[  183.032323][ T3804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.032334][ T3804] R13: 00007f7900c26038 R14: 00007ffe51727710 R15: 00007ffe517277f8
[  183.032351][ T3804]  </TASK>
[  183.404973][ T1064] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  183.411956][ T1064] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  183.418891][ T1064] usb 4-1: unit 6 not found!
[  183.427522][ T1064] usb 4-1: USB disconnect, device number 42
[  183.557192][  T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  183.589917][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  183.680207][ T1064] smpboot: CPU 1 is now offline
[  183.719975][  T364] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  183.741719][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  183.758226][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  183.778822][   T10] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  183.797369][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.827705][   T10] usb-storage 5-1:1.0: USB Mass Storage device detected
[  183.855282][   T10] scsi host1: usb-storage 5-1:1.0
[  183.880419][  T364] usb 1-1: Using ep0 maxpacket: 32
[  183.907667][  T364] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  183.932075][  T364] usb 1-1: config 0 has no interface number 0
[  183.952816][  T364] usb 1-1: config 0 interface 184 has no altsetting 0
[  183.981953][  T364] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  184.006089][  T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.021635][  T364] usb 1-1: Product: syz
[  184.025897][  T364] usb 1-1: Manufacturer: syz
[  184.052333][ T3809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.069539][  T364] usb 1-1: SerialNumber: syz
[  184.086479][  T364] usb 1-1: config 0 descriptor??
[  184.108992][  T364] smsc75xx v1.0.0
[  184.147797][ T3809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.206285][ T1097] usb 5-1: USB disconnect, device number 26
[  184.379913][   T10] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  184.531356][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  184.541993][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.552280][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  184.562154][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.578004][   T10] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  184.592073][   T10] usb 3-1: No streaming interface found for terminal 2.
[  184.725466][  T364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  184.746916][  T364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  184.766431][  T364] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  184.788003][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.811251][  T364] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32
[  184.833172][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.866497][ T3838] TCP: TCP_TX_DELAY enabled
[  184.930822][ T1064] usb 3-1: USB disconnect, device number 47
[  185.109932][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  185.260421][   T36] kauditd_printk_skb: 601 callbacks suppressed
[  185.260434][   T36] audit: type=1400 audit(1792099961.599:10153): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.292724][   T36] audit: type=1400 audit(1792099961.639:10154): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.319022][   T36] audit: type=1400 audit(1792099961.659:10155): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.344531][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  185.360107][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.382645][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  185.392551][   T36] audit: type=1400 audit(1792099961.659:10156): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.431210][   T10] usb 5-1: New USB device found, idVendor=1235, idProduct=8207, bcdDevice= 0.40
[  185.443180][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.459954][   T10] usb 5-1: Product: syz
[  185.466372][   T36] audit: type=1400 audit(1792099961.659:10157): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.500708][   T10] usb 5-1: Manufacturer: syz
[  185.505936][   T10] usb 5-1: SerialNumber: syz
[  185.561924][   T36] audit: type=1400 audit(1792099961.659:10158): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.644670][   T36] audit: type=1400 audit(1792099961.659:10159): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.739050][   T36] audit: type=1400 audit(1792099961.699:10160): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.784751][   T10] usb 5-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8207); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  185.831091][ T3852] kvm: kvm [3851]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  185.855671][   T10] usb 5-1: Error initialising Clarett USB Mixer Driver: -22
[  185.865810][ T3852] kvm: kvm [3851]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  185.887463][   T36] audit: type=1400 audit(1792099961.699:10161): avc:  denied  { ioctl } for  pid=3842 comm="syz.4.1243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  185.915019][ T3858] audit: audit_backlog=65 > audit_backlog_limit=64
[  185.929072][   T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  185.971488][   T10] usb 5-1: USB disconnect, device number 27
[  186.115138][  T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  186.329912][ T1097] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  186.485177][   T10] usb 1-1: USB disconnect, device number 53
[  186.497757][ T1097] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  186.549092][ T1097] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.602240][ T1097] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  186.628561][ T1097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  186.651286][ T1097] usb 3-1: Product: syz
[  186.655462][ T1097] usb 3-1: Manufacturer: syz
[  186.675964][ T1097] usb 3-1: SerialNumber: syz
[  187.219920][ T1097] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  187.249917][ T1064] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  187.372144][ T1097] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.382691][ T1097] usb 5-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00
[  187.392613][ T1097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.403805][ T1097] ums-sddr55 5-1:1.0: USB Mass Storage device detected
[  187.420203][ T1064] usb 1-1: unable to get BOS descriptor or descriptor too short
[  187.439069][ T1064] usb 1-1: not running at top speed; connect to a high speed hub
[  187.470589][ T1064] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  187.489473][ T1064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.506352][ T1064] usb 1-1: Product: syz
[  187.511087][ T1064] usb 1-1: Manufacturer: syz
[  187.515718][ T1064] usb 1-1: SerialNumber: syz
[  187.608989][ T1097] usb 5-1: USB disconnect, device number 28
[  187.739699][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.767815][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.795242][ T1064] usb 1-1: 1:1 : bogus bTerminalLink 3
[  187.807543][ T1064] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  187.830896][ T1064] usb 1-1: USB disconnect, device number 54
[  187.951582][  T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  188.587328][ T3907] cgroup2: Unknown parameter 'pid'
[  189.090545][ T1097] usb 3-1: USB disconnect, device number 48
[  189.570946][ T3946] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f]
[  189.620471][ T3946] caller generic_access_phys+0x153/0x310 mapping multiple BARs
[  189.899912][ T1097] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  190.075169][ T1097] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  190.102397][ T1097] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.137765][ T1097] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  190.173003][ T1097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  190.199438][ T1097] usb 5-1: Product: syz
[  190.210835][ T1097] usb 5-1: Manufacturer: syz
[  190.225610][ T1097] usb 5-1: SerialNumber: syz
[  190.288357][   T36] kauditd_printk_skb: 550 callbacks suppressed
[  190.288369][   T36] audit: type=1400 audit(1792099966.619:10698): avc:  denied  { read write } for  pid=3964 comm="syz.3.1286" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  190.419912][   T36] audit: type=1400 audit(1792099966.659:10699): avc:  denied  { read write open } for  pid=3964 comm="syz.3.1286" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  190.458894][   T36] audit: type=1400 audit(1792099966.659:10700): avc:  denied  { mounton } for  pid=3964 comm="syz.3.1286" path="/361/file0" dev="tmpfs" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  190.502623][   T36] audit: type=1400 audit(1792099966.659:10701): avc:  denied  { mount } for  pid=3964 comm="syz.3.1286" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  190.572294][   T36] audit: type=1400 audit(1792099966.679:10702): avc:  denied  { read } for  pid=293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  190.614444][   T36] audit: type=1400 audit(1792099966.679:10703): avc:  denied  { read open } for  pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  190.673474][   T36] audit: type=1400 audit(1792099966.679:10704): avc:  denied  { ioctl } for  pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  190.732308][   T36] audit: type=1400 audit(1792099966.789:10705): avc:  denied  { ioctl } for  pid=3949 comm="syz.4.1279" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  190.758011][   T36] audit: type=1400 audit(1792099966.829:10706): avc:  denied  { mounton } for  pid=3967 comm="syz.0.1287" path="/331/dev" dev="tmpfs" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  190.787712][   T36] audit: type=1400 audit(1792099966.829:10707): avc:  denied  { mount } for  pid=3967 comm="syz.0.1287" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  191.387372][ T3986] FAULT_INJECTION: forcing a failure.
[  191.387372][ T3986] name failslab, interval 1, probability 0, space 0, times 0
[  191.427612][ T3986] CPU: 0 UID: 0 PID: 3986 Comm: syz.0.1292 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  191.427634][ T3986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  191.427644][ T3986] Call Trace:
[  191.427649][ T3986]  <TASK>
[  191.427655][ T3986]  __dump_stack+0x21/0x30
[  191.427681][ T3986]  dump_stack_lvl+0x140/0x1c0
[  191.427703][ T3986]  ? __cfi_dump_stack_lvl+0x10/0x10
[  191.427726][ T3986]  dump_stack+0x19/0x20
[  191.427747][ T3986]  should_fail_ex+0x3c2/0x510
[  191.427761][ T3986]  should_failslab+0xac/0x100
[  191.427775][ T3986]  __kmalloc_cache_noprof+0x41/0x470
[  191.427796][ T3986]  ? kasan_save_alloc_info+0x3a/0x50
[  191.427814][ T3986]  ? ovl_init_fs_context+0x65/0x790
[  191.427836][ T3986]  ? __kasan_kmalloc+0x96/0xb0
[  191.427850][ T3986]  ovl_init_fs_context+0x65/0x790
[  191.427871][ T3986]  alloc_fs_context+0x5c7/0x800
[  191.427888][ T3986]  fs_context_for_mount+0x26/0x40
[  191.427903][ T3986]  __se_sys_fsopen+0xab/0x390
[  191.427921][ T3986]  __x64_sys_fsopen+0x5f/0x80
[  191.427956][ T3986]  x64_sys_call+0x2d40/0x2ee0
[  191.427971][ T3986]  do_syscall_64+0x57/0xf0
[  191.427984][ T3986]  ? clear_bhb_loop+0x50/0xa0
[  191.428004][ T3986]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  191.428022][ T3986] RIP: 0033:0x7fd5dd79e559
[  191.428034][ T3986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.428047][ T3986] RSP: 002b:00007fd5de609028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  191.428063][ T3986] RAX: ffffffffffffffda RBX: 00007fd5dda25fa0 RCX: 00007fd5dd79e559
[  191.428075][ T3986] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000300
[  191.428085][ T3986] RBP: 00007fd5dd8358b0 R08: 0000000000000000 R09: 0000000000000000
[  191.428095][ T3986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.428104][ T3986] R13: 00007fd5dda26038 R14: 00007fd5dda25fa0 R15: 00007ffdd0df1db8
[  191.428117][ T3986]  </TASK>
[  191.774567][ T3997] syz.3.1295: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0
[  191.790596][ T3997] CPU: 0 UID: 0 PID: 3997 Comm: syz.3.1295 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  191.790616][ T3997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  191.790625][ T3997] Call Trace:
[  191.790630][ T3997]  <TASK>
[  191.790635][ T3997]  __dump_stack+0x21/0x30
[  191.790660][ T3997]  dump_stack_lvl+0x140/0x1c0
[  191.790680][ T3997]  ? __cfi_dump_stack_lvl+0x10/0x10
[  191.790701][ T3997]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  191.790715][ T3997]  dump_stack+0x19/0x20
[  191.790734][ T3997]  warn_alloc+0x1e7/0x2c0
[  191.790751][ T3997]  ? __cfi_warn_alloc+0x10/0x10
[  191.790766][ T3997]  ? __kmalloc_node_noprof+0x252/0x500
[  191.790786][ T3997]  ? __vmalloc_node_range_noprof+0x529/0x1300
[  191.790804][ T3997]  __vmalloc_node_range_noprof+0x100b/0x1300
[  191.790825][ T3997]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  191.790842][ T3997]  ? kasan_save_alloc_info+0x3a/0x50
[  191.790860][ T3997]  ? __kasan_slab_alloc+0x73/0x90
[  191.790873][ T3997]  ? arch_dup_task_struct+0x5b/0xe0
[  191.790886][ T3997]  ? __asan_memcpy+0x5a/0x80
[  191.790905][ T3997]  dup_task_struct+0x5d6/0xd80
[  191.790924][ T3997]  ? copy_process+0x57c/0x3350
[  191.790942][ T3997]  ? _raw_spin_lock_irq+0x93/0x120
[  191.790954][ T3997]  ? copy_process+0x3350/0x3350
[  191.790972][ T3997]  ? __kasan_check_write+0x18/0x20
[  191.790990][ T3997]  copy_process+0x57c/0x3350
[  191.791010][ T3997]  ? kasan_save_alloc_info+0x3a/0x50
[  191.791027][ T3997]  ? __cfi_copy_process+0x10/0x10
[  191.791045][ T3997]  ? __kmalloc_cache_noprof+0x23c/0x470
[  191.791065][ T3997]  ? __kasan_check_write+0x18/0x20
[  191.791083][ T3997]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  191.791100][ T3997]  vhost_task_create+0x1f7/0x3f0
[  191.791116][ T3997]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  191.791135][ T3997]  ? __cfi_vhost_task_create+0x10/0x10
[  191.791151][ T3997]  ? __cfi_vhost_task_fn+0x10/0x10
[  191.791172][ T3997]  ? __kasan_check_write+0x18/0x20
[  191.791190][ T3997]  ? mutex_lock+0x97/0x1d0
[  191.791205][ T3997]  ? __cfi_mutex_lock+0x10/0x10
[  191.791220][ T3997]  ? kernel_text_address+0xa9/0xe0
[  191.791241][ T3997]  kvm_mmu_post_init_vm+0x161/0x300
[  191.791254][ T3997]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  191.791275][ T3997]  ? _parse_integer_limit+0x195/0x1e0
[  191.791296][ T3997]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  191.791316][ T3997]  ? kstrtoull+0x13b/0x1e0
[  191.791336][ T3997]  ? kstrtouint+0x78/0xf0
[  191.791355][ T3997]  ? ioctl_has_perm+0x1bc/0x500
[  191.791375][ T3997]  ? __asan_memcpy+0x5a/0x80
[  191.791393][ T3997]  ? ioctl_has_perm+0x408/0x500
[  191.791411][ T3997]  ? has_cap_mac_admin+0xd0/0xd0
[  191.791430][ T3997]  ? __kasan_check_write+0x18/0x20
[  191.791448][ T3997]  ? mutex_lock_killable+0x97/0x1d0
[  191.791464][ T3997]  ? __cfi_mutex_lock_killable+0x10/0x10
[  191.791481][ T3997]  ? proc_fail_nth_write+0x184/0x220
[  191.791499][ T3997]  kvm_vcpu_ioctl+0xa43/0x1000
[  191.791514][ T3997]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  191.791529][ T3997]  ? __cfi_vfs_write+0x10/0x10
[  191.791566][ T3997]  ? __kasan_check_write+0x18/0x20
[  191.791586][ T3997]  ? mutex_unlock+0x90/0x240
[  191.791602][ T3997]  ? __cfi_mutex_unlock+0x10/0x10
[  191.791619][ T3997]  ? __fget_files+0x2bc/0x330
[  191.791634][ T3997]  ? bpf_lsm_file_ioctl+0xd/0x20
[  191.791648][ T3997]  ? security_file_ioctl+0x3e/0x110
[  191.791668][ T3997]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  191.791683][ T3997]  __se_sys_ioctl+0x126/0x1b0
[  191.791697][ T3997]  __x64_sys_ioctl+0x7f/0xa0
[  191.791711][ T3997]  x64_sys_call+0x1878/0x2ee0
[  191.791726][ T3997]  do_syscall_64+0x57/0xf0
[  191.791739][ T3997]  ? clear_bhb_loop+0x50/0xa0
[  191.791757][ T3997]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  191.791774][ T3997] RIP: 0033:0x7fe654f9e559
[  191.791786][ T3997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.791799][ T3997] RSP: 002b:00007fe655de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  191.791814][ T3997] RAX: ffffffffffffffda RBX: 00007fe655226090 RCX: 00007fe654f9e559
[  191.791826][ T3997] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  191.791836][ T3997] RBP: 00007fe655de4090 R08: 0000000000000000 R09: 0000000000000000
[  191.791846][ T3997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.791855][ T3997] R13: 00007fe655226128 R14: 00007fe655226090 R15: 00007ffe063b6978
[  191.791871][ T3997]  </TASK>
[  191.791877][ T3997] Mem-Info:
[  192.274087][ T3997] active_anon:25379 inactive_anon:7 isolated_anon:0
[  192.274087][ T3997]  active_file:21495 inactive_file:12025 isolated_file:0
[  192.274087][ T3997]  unevictable:0 dirty:238 writeback:1
[  192.274087][ T3997]  slab_reclaimable:4711 slab_unreclaimable:70953
[  192.274087][ T3997]  mapped:25297 shmem:17133 pagetables:991
[  192.274087][ T3997]  sec_pagetables:6 bounce:0
[  192.274087][ T3997]  kernel_misc_reclaimable:0
[  192.274087][ T3997]  free:1491774 free_pcp:1978 free_cma:0
[  192.329852][ T3997] Node 0 active_anon:101516kB inactive_anon:28kB active_file:85980kB inactive_file:48100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101188kB dirty:952kB writeback:4kB shmem:68532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4832kB pagetables:3964kB sec_pagetables:24kB all_unreclaimable? no
[  192.420142][ T3997] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955032kB mlocked:0kB bounce:0kB free_pcp:5060kB local_pcp:5060kB free_cma:0kB
[  192.457327][ T3997] lowmem_reserve[]: 0 3920 3920
[  192.462749][ T3997] Normal free:3019696kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101412kB inactive_anon:28kB active_file:85980kB inactive_file:48100kB unevictable:0kB writepending:1008kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:1160kB local_pcp:1160kB free_cma:0kB
[  192.533282][ T3997] lowmem_reserve[]: 0 0 0
[  192.543292][ T3997] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB
[  192.577769][ T3997] Normal: 1138*4kB (UE) 757*8kB (UME) 921*16kB (UME) 797*32kB (UME) 394*64kB (UME) 193*128kB (UME) 84*256kB (UME) 19*512kB (UM) 6*1024kB (UME) 5*2048kB (UME) 701*4096kB (UM) = 3019680kB
[  192.623722][ T3997] 50657 total pagecache pages
[  192.642548][ T3997] 8 pages in swap cache
[  192.653936][ T3997] Free swap  = 124640kB
[  192.675004][ T1097] usb 5-1: USB disconnect, device number 29
[  192.737571][ T3997] Total swap = 124996kB
[  192.760911][ T3997] 2097051 pages RAM
[  192.764726][ T3997] 0 pages HighMem/MovableOnly
[  192.769392][ T3997] 354583 pages reserved
[  192.800024][ T4011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  192.842088][ T3997] 0 pages cma reserved
[  192.861492][ T3997] Memory allocations:
[  192.880119][ T3997]          0 B        0 init/main.c:1477 func:do_initcalls
[  192.917724][ T3997]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  192.952888][ T3997]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  192.984887][ T3997]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  193.023235][ T3997]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  193.056102][ T3997]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  193.091887][ T3997]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  193.128957][ T3997]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  193.162659][ T3997]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  193.206814][ T3997]          0 B        0 init/initramfs.c:101 func:find_link
[  193.359650][ T4034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1309'.
[  193.409915][ T1097] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  193.549914][ T1064] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  193.579904][ T1097] usb 1-1: Using ep0 maxpacket: 32
[  193.607196][ T1097] usb 1-1: config 0 has no interfaces?
[  193.629928][ T1097] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  193.649761][ T1097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.676550][ T1097] usb 1-1: config 0 descriptor??
[  193.719926][ T1064] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  193.739121][ T1064] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.779383][ T1064] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  193.790669][ T1064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  193.809543][ T1064] usb 3-1: Product: syz
[  193.817116][ T1064] usb 3-1: Manufacturer: syz
[  193.827178][ T1064] usb 3-1: SerialNumber: syz
[  193.962178][ T1064] usb 1-1: USB disconnect, device number 55
[  195.142443][ T1097] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  195.176902][ T1097] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  195.197030][ T1064] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  195.290593][   T36] kauditd_printk_skb: 386 callbacks suppressed
[  195.290604][   T36] audit: type=1400 audit(1792099971.629:11094): avc:  denied  { ioctl } for  pid=4059 comm="syz.0.1315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.370569][ T1064] usb 1-1: Using ep0 maxpacket: 16
[  195.388967][ T1064] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.408944][   T36] audit: type=1400 audit(1792099971.679:11095): avc:  denied  { read write } for  pid=4064 comm="syz.3.1318" name="hidraw0" dev="devtmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.433451][ T1064] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.472193][ T1064] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.501996][ T1064] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  195.520869][   T36] audit: type=1400 audit(1792099971.679:11096): avc:  denied  { read write open } for  pid=4064 comm="syz.3.1318" path="/dev/hidraw0" dev="devtmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.562441][ T1064] usb 1-1: config 0 interface 0 has no altsetting 0
[  195.576146][ T1064] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  195.592063][   T36] audit: type=1400 audit(1792099971.719:11097): avc:  denied  { ioctl } for  pid=4059 comm="syz.0.1315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.618777][ T4071] ./dev/sda1: Can't lookup blockdev
[  195.626215][ T1064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.652651][ T1064] usb 1-1: config 0 descriptor??
[  195.689665][   T36] audit: type=1400 audit(1792099971.719:11098): avc:  denied  { ioctl } for  pid=4059 comm="syz.0.1315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.809161][   T36] audit: type=1400 audit(1792099971.719:11099): avc:  denied  { ioctl } for  pid=4059 comm="syz.0.1315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.881980][   T36] audit: type=1400 audit(1792099971.719:11100): avc:  denied  { ioctl } for  pid=4059 comm="syz.0.1315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.935573][   T36] audit: type=1400 audit(1792099971.719:11101): avc:  denied  { ioctl } for  pid=4059 comm="syz.0.1315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.988331][   T36] audit: type=1400 audit(1792099971.739:11102): avc:  denied  { ioctl } for  pid=4059 comm="syz.0.1315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  196.042369][   T36] audit: type=1400 audit(1792099971.829:11103): avc:  denied  { read } for  pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  196.077972][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.119597][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.131111][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.139291][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.148185][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.156861][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.165575][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.174337][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.182948][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.191618][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.199739][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.209753][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.218465][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.227060][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.235765][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.244355][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.253024][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.261592][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.269798][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.290286][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.298471][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.313589][  T354] usb 3-1: USB disconnect, device number 49
[  196.329952][ T1097] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  196.359093][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.417858][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.444972][ T1064] logitech-djreceiver 0003:046D:C53A.0024: unknown main item tag 0x0
[  196.500728][ T1097] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  196.532502][ T1097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.573123][ T4083] kvm: kvm [4082]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  196.597321][ T1097] usb-storage 5-1:1.0: USB Mass Storage device detected
[  196.635026][ T4083] kvm: kvm [4082]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  197.033474][ T1097] scsi host1: usb-storage 5-1:1.0
[  197.063297][ T1097] usb 5-1: USB disconnect, device number 30
[  197.439910][  T354] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  197.601418][  T354] usb 3-1: Using ep0 maxpacket: 16
[  197.640067][  T354] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  197.665751][  T354] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.693236][  T354] usb 3-1: config 0 has no interface number 0
[  197.706374][  T354] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  197.726321][  T354] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  197.745861][ T4110] ./dev/sda1: Can't lookup blockdev
[  197.754400][  T354] usb 3-1: config 0 interface 98 has no altsetting 0
[  197.772468][  T354] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  197.788197][  T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.805614][  T354] usb 3-1: Product: syz
[  197.814798][  T354] usb 3-1: Manufacturer: syz
[  197.823736][  T354] usb 3-1: SerialNumber: syz
[  197.829944][ T1064] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  197.850446][  T354] usb 3-1: config 0 descriptor??
[  197.871953][ T4100] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  197.890281][ T4100] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  197.903035][ T1097] usb 1-1: USB disconnect, device number 56
[  197.992778][ T4112] ./file0: Can't open blockdev
[  198.012397][ T1064] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  198.024849][ T1064] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.057830][ T1064] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  198.076309][ T1064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  198.104630][ T1064] usb 4-1: Product: syz
[  198.123222][ T1064] usb 4-1: Manufacturer: syz
[  198.135938][ T1064] usb 4-1: SerialNumber: syz
[  198.187426][ T4100] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  198.215137][ T4100] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  198.851634][  T354] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  198.900755][  T354] asix 3-1:0.98: probe with driver asix failed with error -71
[  198.936262][  T354] usb 3-1: USB disconnect, device number 50
[  199.148076][ T4128] fuse: Bad value for 'user_id'
[  199.158273][ T4128] fuse: Bad value for 'user_id'
[  199.509904][  T354] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  199.681933][  T354] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  199.702592][  T354] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024
[  199.721949][ T1064] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  199.733880][  T354] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.761150][  T354] usb 1-1: config 0 interface 0 has no altsetting 0
[  199.775808][  T354] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[  199.794066][  T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.813531][  T354] usb 1-1: config 0 descriptor??
[  199.833026][ T4131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  199.901945][ T1064] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  199.926641][ T1064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.955669][ T1064] usb-storage 3-1:1.0: USB Mass Storage device detected
[  200.254604][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.267135][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.289577][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.304583][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.319714][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.334799][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.349989][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.364773][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.381809][ T1064] scsi host1: usb-storage 3-1:1.0
[  200.399358][ T1064] usb 3-1: USB disconnect, device number 51
[  200.409404][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.436093][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.463225][   T36] kauditd_printk_skb: 1400 callbacks suppressed
[  200.463237][   T36] audit: type=1400 audit(1792099976.799:12504): avc:  denied  { ioctl } for  pid=4130 comm="syz.0.1338" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  200.516131][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.553436][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.610730][ T1097] usb 4-1: USB disconnect, device number 43
[  200.616713][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.649918][  T354] acrux 0003:1A34:F705.0025: unknown main item tag 0x0
[  200.662488][   T36] audit: type=1400 audit(1792099976.799:12505): avc:  denied  { read } for  pid=4130 comm="syz.0.1338" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  200.717940][  T354] acrux 0003:1A34:F705.0025: unbalanced collection at end of report description
[  200.777732][  T354] acrux 0003:1A34:F705.0025: parse failed
[  200.803242][  T354] acrux 0003:1A34:F705.0025: probe with driver acrux failed with error -22
[  200.816339][   T36] audit: type=1400 audit(1792099976.799:12506): avc:  denied  { read open } for  pid=4130 comm="syz.0.1338" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  200.857188][  T354] usb 1-1: USB disconnect, device number 57
[  200.907438][   T36] audit: type=1400 audit(1792099976.839:12507): avc:  denied  { ioctl } for  pid=4130 comm="syz.0.1338" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  200.947656][ T4153] ./dev/sda1: Can't lookup blockdev
[  201.015618][   T36] audit: type=1400 audit(1792099976.869:12508): avc:  denied  { read write } for  pid=4130 comm="syz.0.1338" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  201.091666][   T36] audit: type=1400 audit(1792099976.869:12509): avc:  denied  { read write open } for  pid=4130 comm="syz.0.1338" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  201.147735][ T4161] audit: audit_backlog=65 > audit_backlog_limit=64
[  201.164817][ T4161] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64
[  201.173179][   T36] audit: type=1400 audit(1792099976.869:12510): avc:  denied  { ioctl } for  pid=4130 comm="syz.0.1338" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  201.197856][ T4161] audit: backlog limit exceeded
[  201.369940][  T354] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  201.509906][ T1097] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  201.533050][  T354] usb 3-1: unable to get BOS descriptor or descriptor too short
[  201.543034][  T354] usb 3-1: not running at top speed; connect to a high speed hub
[  201.561228][  T354] usb 3-1: config 87 has an invalid descriptor of length 0, skipping remainder of the config
[  201.581937][  T354] usb 3-1: config 87 has 0 interfaces, different from the descriptor's value: 1
[  201.604585][  T354] usb 3-1: New USB device found, idVendor=0df6, idProduct=004a, bcdDevice=36.71
[  201.622824][  T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.638914][  T354] usb 3-1: Product: syz
[  201.648005][  T354] usb 3-1: Manufacturer: syz
[  201.658062][  T354] usb 3-1: SerialNumber: syz
[  201.672975][ T1097] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  201.696402][ T1097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.740310][ T1097] usb-storage 5-1:1.0: USB Mass Storage device detected
[  201.826404][ T4170] random: crng reseeded on system resumption
[  202.150118][ T4161] cgroup: Unknown subsys name 'subj_user'
[  202.381293][ T1097] scsi host1: usb-storage 5-1:1.0
[  202.408789][ T1097] usb 5-1: USB disconnect, device number 31
[  202.782576][  T354] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  202.874965][ T4200] ./dev/sda1: Can't lookup blockdev
[  202.941759][  T354] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  202.951199][  T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.962866][  T354] usb-storage 1-1:1.0: USB Mass Storage device detected
[  203.159901][   T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  203.171885][  T354] scsi host1: usb-storage 1-1:1.0
[  203.192871][  T354] usb 1-1: USB disconnect, device number 58
[  203.322192][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.332392][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  203.342218][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  203.358836][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.368529][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.377172][   T10] usb 5-1: Product: syz
[  203.382076][   T10] usb 5-1: Manufacturer: syz
[  203.386710][   T10] usb 5-1: SerialNumber: syz
[  203.395018][   T10] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  203.409895][   T10] cdc_ncm 5-1:1.0: bind() failure
[  203.790089][ T4211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1362'.
[  203.800009][ T4209] rust_binder: 4208:4209 no such ref 3
[  203.805481][ T4209] rust_binder: Write failure EFAULT in pid:927
[  204.106141][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'.
[  204.139977][  T354] usb 3-1: USB disconnect, device number 52
[  204.690461][ T4249] netlink: 'syz.3.1374': attribute type 1 has an invalid length.
[  204.698315][ T4249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1374'.
[  205.143605][ T4259] proc: Unknown parameter '{#*#!w'
[  205.470380][   T36] kauditd_printk_skb: 925 callbacks suppressed
[  205.470393][   T36] audit: type=1400 audit(1792099981.809:13415): avc:  denied  { ioctl } for  pid=4262 comm="syz.0.1380" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  205.569373][   T36] audit: type=1400 audit(1792099981.859:13416): avc:  denied  { read } for  pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  205.621836][ T4265] FAULT_INJECTION: forcing a failure.
[  205.621836][ T4265] name failslab, interval 1, probability 0, space 0, times 0
[  205.645877][   T36] audit: type=1400 audit(1792099981.859:13417): avc:  denied  { read open } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  205.670368][   T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  205.679950][ T4265] CPU: 0 UID: 0 PID: 4265 Comm: syz.2.1381 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  205.679971][ T4265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  205.679985][ T4265] Call Trace:
[  205.679990][ T4265]  <TASK>
[  205.679996][ T4265]  __dump_stack+0x21/0x30
[  205.680021][ T4265]  dump_stack_lvl+0x140/0x1c0
[  205.680041][ T4265]  ? __cfi_dump_stack_lvl+0x10/0x10
[  205.680061][ T4265]  ? avc_has_perm+0x155/0x240
[  205.680075][ T4265]  ? __cfi_avc_has_perm+0x10/0x10
[  205.680095][ T4265]  ? avc_perm_nonode+0x118/0x1d0
[  205.680108][ T4265]  dump_stack+0x19/0x20
[  205.680127][ T4265]  should_fail_ex+0x3c2/0x510
[  205.680141][ T4265]  should_failslab+0xac/0x100
[  205.680154][ T4265]  __kmalloc_cache_noprof+0x41/0x470
[  205.680174][ T4265]  ? vhost_task_create+0x12c/0x3f0
[  205.680191][ T4265]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  205.680209][ T4265]  vhost_task_create+0x12c/0x3f0
[  205.680224][ T4265]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  205.680242][ T4265]  ? __cfi_vhost_task_create+0x10/0x10
[  205.680259][ T4265]  ? __cfi_vhost_task_fn+0x10/0x10
[  205.680274][ T4265]  ? __kasan_check_write+0x18/0x20
[  205.680293][ T4265]  ? mutex_lock+0x97/0x1d0
[  205.680308][ T4265]  ? __cfi_mutex_lock+0x10/0x10
[  205.680323][ T4265]  ? kernel_text_address+0xa9/0xe0
[  205.680344][ T4265]  kvm_mmu_post_init_vm+0x161/0x300
[  205.680357][ T4265]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  205.680377][ T4265]  ? _parse_integer_limit+0x195/0x1e0
[  205.680398][ T4265]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  205.680418][ T4265]  ? kstrtoull+0x13b/0x1e0
[  205.680437][ T4265]  ? kstrtouint+0x78/0xf0
[  205.680457][ T4265]  ? ioctl_has_perm+0x1bc/0x500
[  205.680476][ T4265]  ? __asan_memcpy+0x5a/0x80
[  205.680494][ T4265]  ? ioctl_has_perm+0x408/0x500
[  205.680512][ T4265]  ? has_cap_mac_admin+0xd0/0xd0
[  205.680530][ T4265]  ? __kasan_check_write+0x18/0x20
[  205.680548][ T4265]  ? mutex_lock_killable+0x97/0x1d0
[  205.680564][ T4265]  ? __cfi_mutex_lock_killable+0x10/0x10
[  205.680581][ T4265]  ? proc_fail_nth_write+0x184/0x220
[  205.680599][ T4265]  kvm_vcpu_ioctl+0xa43/0x1000
[  205.680614][ T4265]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  205.680628][ T4265]  ? __cfi_vfs_write+0x10/0x10
[  205.680648][ T4265]  ? __kasan_check_write+0x18/0x20
[  205.680665][ T4265]  ? mutex_unlock+0x90/0x240
[  205.680681][ T4265]  ? __cfi_mutex_unlock+0x10/0x10
[  205.680697][ T4265]  ? __fget_files+0x2bc/0x330
[  205.680711][ T4265]  ? bpf_lsm_file_ioctl+0xd/0x20
[  205.680724][ T4265]  ? security_file_ioctl+0x3e/0x110
[  205.680742][ T4265]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  205.680756][ T4265]  __se_sys_ioctl+0x126/0x1b0
[  205.680770][ T4265]  __x64_sys_ioctl+0x7f/0xa0
[  205.680782][ T4265]  x64_sys_call+0x1878/0x2ee0
[  205.680796][ T4265]  do_syscall_64+0x57/0xf0
[  205.680808][ T4265]  ? clear_bhb_loop+0x50/0xa0
[  205.680826][ T4265]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  205.680842][ T4265] RIP: 0033:0x7f790099e559
[  205.680853][ T4265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.680865][ T4265] RSP: 002b:00007f79017b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.680879][ T4265] RAX: ffffffffffffffda RBX: 00007f7900c25fa0 RCX: 00007f790099e559
[  205.680890][ T4265] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  205.680899][ T4265] RBP: 00007f79017b8090 R08: 0000000000000000 R09: 0000000000000000
[  205.680908][ T4265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.680916][ T4265] R13: 00007f7900c26038 R14: 00007f7900c25fa0 R15: 00007ffe517277f8
[  205.680928][ T4265]  </TASK>
[  206.419904][   T36] audit: type=1400 audit(1792099981.859:13418): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  206.474266][   T36] audit: type=1400 audit(1792099981.889:13419): avc:  denied  { read } for  pid=4264 comm="syz.2.1381" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  206.561828][   T36] audit: type=1400 audit(1792099981.889:13420): avc:  denied  { read open } for  pid=4264 comm="syz.2.1381" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  206.645352][   T36] audit: type=1400 audit(1792099981.889:13421): avc:  denied  { ioctl } for  pid=4264 comm="syz.2.1381" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  206.698951][ T1064] usb 5-1: USB disconnect, device number 32
[  206.739903][   T36] audit: type=1400 audit(1792099981.939:13422): avc:  denied  { ioctl } for  pid=4262 comm="syz.0.1380" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  206.807762][   T36] audit: type=1400 audit(1792099981.949:13423): avc:  denied  { read write } for  pid=4264 comm="syz.2.1381" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  206.857414][   T36] audit: type=1400 audit(1792099981.949:13424): avc:  denied  { read write open } for  pid=4264 comm="syz.2.1381" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  207.105768][   T10] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  207.156329][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  207.206437][   T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  207.224566][ T4279] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1387' resets device
[  207.234329][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.250494][   T10] usb 1-1: Product: syz
[  207.265340][   T10] usb 1-1: Manufacturer: syz
[  207.272543][   T10] usb 1-1: SerialNumber: syz
[  207.313263][   T10] usb 1-1: config 0 descriptor??
[  207.389560][ T4292] 9pnet_fd: Insufficient options for proto=fd
[  207.533595][ T4263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.548621][ T4263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.068672][  T354] usb 1-1: USB disconnect, device number 59
[  208.682555][ T4317] FAULT_INJECTION: forcing a failure.
[  208.682555][ T4317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.742865][ T4317] CPU: 0 UID: 0 PID: 4317 Comm: syz.2.1399 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  208.742887][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  208.742898][ T4317] Call Trace:
[  208.742902][ T4317]  <TASK>
[  208.742908][ T4317]  __dump_stack+0x21/0x30
[  208.742933][ T4317]  dump_stack_lvl+0x140/0x1c0
[  208.742953][ T4317]  ? __cfi_dump_stack_lvl+0x10/0x10
[  208.742974][ T4317]  ? check_stack_object+0x138/0x150
[  208.742995][ T4317]  dump_stack+0x19/0x20
[  208.743014][ T4317]  should_fail_ex+0x3c2/0x510
[  208.743028][ T4317]  should_fail+0xf/0x20
[  208.743039][ T4317]  should_fail_usercopy+0x1e/0x30
[  208.743053][ T4317]  _copy_to_user+0x24/0xa0
[  208.743069][ T4317]  simple_read_from_buffer+0xed/0x160
[  208.743085][ T4317]  proc_fail_nth_read+0x1aa/0x220
[  208.743102][ T4317]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  208.743119][ T4317]  ? bpf_lsm_file_permission+0xd/0x20
[  208.743133][ T4317]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  208.743150][ T4317]  vfs_read+0x28b/0xc70
[  208.743169][ T4317]  ? __cfi_vfs_read+0x10/0x10
[  208.743187][ T4317]  ? __kasan_check_write+0x18/0x20
[  208.743206][ T4317]  ? mutex_lock+0x97/0x1d0
[  208.743221][ T4317]  ? __cfi_mutex_lock+0x10/0x10
[  208.743238][ T4317]  ksys_read+0x145/0x260
[  208.743257][ T4317]  ? __cfi_ksys_read+0x10/0x10
[  208.743275][ T4317]  ? __kasan_check_write+0x18/0x20
[  208.743293][ T4317]  ? fput+0x1a4/0x230
[  208.743307][ T4317]  ? __kasan_check_read+0x15/0x20
[  208.743325][ T4317]  __x64_sys_read+0x7f/0x90
[  208.743346][ T4317]  x64_sys_call+0x2638/0x2ee0
[  208.743360][ T4317]  do_syscall_64+0x57/0xf0
[  208.743372][ T4317]  ? clear_bhb_loop+0x50/0xa0
[  208.743388][ T4317]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  208.743405][ T4317] RIP: 0033:0x7f790095ed8e
[  208.743421][ T4317] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  208.743433][ T4317] RSP: 002b:00007f79017b7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  208.743448][ T4317] RAX: ffffffffffffffda RBX: 00007f79017b86c0 RCX: 00007f790095ed8e
[  208.743459][ T4317] RDX: 000000000000000f RSI: 00007f79017b80a0 RDI: 0000000000000006
[  208.743468][ T4317] RBP: 00007f79017b8090 R08: 0000000000000000 R09: 0000000000000000
[  208.743477][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.743486][ T4317] R13: 00007f7900c26038 R14: 00007f7900c25fa0 R15: 00007ffe517277f8
[  208.743498][ T4317]  </TASK>
[  209.279941][   T10] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  209.586186][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  209.597876][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.652428][  T354] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  209.660098][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  209.687205][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  209.727938][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.768393][   T10] usb 1-1: config 0 descriptor??
[  209.819897][  T354] usb 4-1: Using ep0 maxpacket: 32
[  209.840298][  T354] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  209.859663][  T354] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  209.885828][  T354] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  209.902983][  T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  209.933547][  T354] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  209.951960][  T354] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  210.006416][  T354] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  210.015608][ T1064] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  210.045791][  T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.075316][  T354] usb 4-1: config 0 descriptor??
[  210.159904][ T1064] usb 3-1: device descriptor read/64, error -71
[  210.199563][   T10] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving
[  210.248923][   T10] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  210.317590][  T354] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  210.369379][  T354] usb 4-1: USB disconnect, device number 44
[  210.396697][  T354] usblp0: removed
[  210.409905][ T1064] usb 3-1: device descriptor read/64, error -71
[  210.513788][   T36] kauditd_printk_skb: 356 callbacks suppressed
[  210.513800][   T36] audit: type=1400 audit(1792099986.850:13781): avc:  denied  { read write } for  pid=4310 comm="syz.0.1398" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  210.544590][ T4338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.587548][ T4338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.623868][  T933] bridge_slave_1: left allmulticast mode
[  210.629526][  T933] bridge_slave_1: left promiscuous mode
[  210.646360][  T933] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.667243][   T36] audit: type=1400 audit(1792099986.890:13782): avc:  denied  { read write open } for  pid=4310 comm="syz.0.1398" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  210.691706][ T1064] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  210.738647][  T933] bridge_slave_0: left allmulticast mode
[  210.754002][  T933] bridge_slave_0: left promiscuous mode
[  210.779734][  T933] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.812052][   T36] audit: type=1400 audit(1792099986.890:13783): avc:  denied  { ioctl } for  pid=4310 comm="syz.0.1398" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  210.891958][ T1064] usb 3-1: device descriptor read/64, error -71
[  210.901607][  T933] veth1_macvtap: left promiscuous mode
[  210.907109][  T933] veth0_vlan: left promiscuous mode
[  210.912343][  T354] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  210.936604][   T36] audit: type=1400 audit(1792099986.890:13784): avc:  denied  { ioctl } for  pid=4310 comm="syz.0.1398" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  211.044165][   T36] audit: type=1400 audit(1792099986.900:13785): avc:  denied  { read write } for  pid=4318 comm="syz.3.1400" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  211.108461][   T36] audit: type=1400 audit(1792099986.900:13786): avc:  denied  { read write open } for  pid=4318 comm="syz.3.1400" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  211.139966][ T1064] usb 3-1: device descriptor read/64, error -71
[  211.146773][  T354] usb 4-1: Using ep0 maxpacket: 32
[  211.166954][  T354] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  211.183749][  T354] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  211.199991][   T36] audit: type=1400 audit(1792099986.900:13787): avc:  denied  { ioctl } for  pid=4318 comm="syz.3.1400" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  211.230661][  T354] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  211.249955][ T1064] usb usb3-port1: attempt power cycle
[  211.257018][  T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  211.276856][   T36] audit: type=1400 audit(1792099986.900:13788): avc:  denied  { ioctl } for  pid=4318 comm="syz.3.1400" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  211.301910][  T354] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  211.315692][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.324274][  T354] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  211.337761][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.345405][ T4341] bridge_slave_0: entered allmulticast mode
[  211.351827][  T354] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  211.361344][   T36] audit: type=1400 audit(1792099986.900:13789): avc:  denied  { ioctl } for  pid=4323 comm="syz.2.1402" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  211.386722][ T4341] bridge_slave_0: entered promiscuous mode
[  211.394611][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.402219][  T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.410714][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.419001][  T354] usb 4-1: config 0 descriptor??
[  211.434817][ T4341] bridge_slave_1: entered allmulticast mode
[  211.450006][   T36] audit: type=1400 audit(1792099986.900:13790): avc:  denied  { ioctl } for  pid=4323 comm="syz.2.1402" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  211.480249][ T4341] bridge_slave_1: entered promiscuous mode
[  211.589922][ T1064] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  211.599397][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.606439][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.613709][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.620728][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.631425][ T1064] usb 3-1: device descriptor read/8, error -71
[  211.646237][  T354] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  211.690168][  T127] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.697515][  T127] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.752418][  T127] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.759553][  T127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.770980][ T1064] usb 3-1: device descriptor read/8, error -71
[  211.789079][  T127] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.796137][  T127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.857852][ T4341] veth0_vlan: entered promiscuous mode
[  211.889490][ T4341] veth1_macvtap: entered promiscuous mode
[  211.999387][ T4348] usblp0:failed reading printer status (-32)
[  212.010763][  T354] usb 4-1: USB disconnect, device number 45
[  212.017766][  T354] usblp0: removed
[  212.021451][ T1064] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  212.072259][ T1064] usb 3-1: device descriptor read/8, error -71
[  212.232141][ T1064] usb 3-1: device descriptor read/8, error -71
[  212.270209][ T1097] usb 1-1: USB disconnect, device number 60
[  212.340329][ T1064] usb usb3-port1: unable to enumerate USB device
[  212.876360][ T4366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1417'.
[  213.020642][ T1064] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  213.202080][ T1064] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  213.225384][ T1064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.399898][ T1097] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  213.469052][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.510004][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.567942][ T1097] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.590205][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.598633][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.626246][ T1097] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  213.682347][ T1097] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  213.695216][  T309] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82
[  213.729612][ T1097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.748480][ T1064] net1080 6-1:1.0: probe with driver net1080 failed with error -71
[  213.776944][ T1097] usb 3-1: Product: syz
[  213.797796][ T1064] usb 6-1: USB disconnect, device number 2
[  213.805820][ T1097] usb 3-1: Manufacturer: syz
[  213.822594][ T1097] usb 3-1: SerialNumber: syz
[  213.849521][ T1097] cdc_mbim 3-1:1.0: skipping garbage
[  214.063864][ T4377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.079946][  T309] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  214.091845][ T4377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.132064][ T1097] cdc_mbim 3-1:1.0: bind() failure
[  214.157899][ T1097] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  214.180895][ T1097] cdc_ncm 3-1:1.1: bind() failure
[  214.200342][ T1097] usb 3-1: USB disconnect, device number 57
[  214.239917][  T309] usb 4-1: device descriptor read/64, error -71
[  214.333346][ T4391] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1427'.
[  214.509926][  T309] usb 4-1: device descriptor read/64, error -71
[  214.759912][  T309] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  214.922870][  T309] usb 4-1: device descriptor read/64, error -71
[  215.189924][ T1097] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  215.199897][  T309] usb 4-1: device descriptor read/64, error -71
[  215.311344][  T309] usb usb4-port1: attempt power cycle
[  215.361656][ T1097] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.379957][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  215.407869][ T1097] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 0.09
[  215.422365][ T1097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  215.439903][ T1097] usb 6-1: SerialNumber: syz
[  215.451856][ T1097] usb-storage 6-1:1.0: USB Mass Storage device detected
[  215.610355][   T36] kauditd_printk_skb: 635 callbacks suppressed
[  215.610369][   T36] audit: type=1400 audit(1792099991.950:14426): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  215.664822][ T1097] usb 6-1: USB disconnect, device number 3
[  215.699931][  T309] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  215.720432][   T36] audit: type=1400 audit(1792099992.060:14427): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  215.757674][  T309] usb 4-1: device descriptor read/8, error -71
[  215.773674][   T36] audit: type=1400 audit(1792099992.090:14428): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  215.824992][   T36] audit: type=1400 audit(1792099992.090:14429): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  215.877458][   T36] audit: type=1400 audit(1792099992.090:14430): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  215.919953][  T309] usb 4-1: device descriptor read/8, error -71
[  215.979930][   T36] audit: type=1400 audit(1792099992.090:14431): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  216.035278][   T36] audit: type=1400 audit(1792099992.110:14432): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  216.084528][   T36] audit: type=1400 audit(1792099992.250:14433): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  216.139933][   T36] audit: type=1400 audit(1792099992.250:14434): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  216.170091][  T309] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  216.189906][   T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  216.221685][  T309] usb 4-1: device descriptor read/8, error -71
[  216.241931][   T36] audit: type=1400 audit(1792099992.250:14435): avc:  denied  { ioctl } for  pid=4387 comm="syz.3.1425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  216.349930][   T10] usb 3-1: Using ep0 maxpacket: 16
[  216.359895][  T309] usb 4-1: device descriptor read/8, error -71
[  216.376685][   T10] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  216.389899][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.410851][   T10] usb 3-1: config 0 has no interface number 0
[  216.427493][   T10] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  216.470234][  T309] usb usb4-port1: unable to enumerate USB device
[  216.476608][   T10] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  216.501444][   T10] usb 3-1: config 0 interface 98 has no altsetting 0
[  216.508381][ T4429] incfs: Options parsing error. -22
[  216.528359][ T4429] incfs: mount failed -22
[  216.534038][ T4429] incfs: Options parsing error. -22
[  216.541912][   T10] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  216.556604][ T4429] incfs: mount failed -22
[  216.560960][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.588418][   T10] usb 3-1: Product: syz
[  216.603333][   T10] usb 3-1: Manufacturer: syz
[  216.608025][   T10] usb 3-1: SerialNumber: syz
[  216.638374][   T10] usb 3-1: config 0 descriptor??
[  216.663955][ T4421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  216.681750][ T4421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  216.746806][ T4433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1442'.
[  216.909248][ T4421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  216.917658][ T4435] netlink: 'syz.5.1443': attribute type 13 has an invalid length.
[  216.940290][ T4421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  217.581604][   T10] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  217.607628][   T10] asix 3-1:0.98: probe with driver asix failed with error -71
[  217.661515][   T10] usb 3-1: USB disconnect, device number 58
[  218.040375][ T4470] FAULT_INJECTION: forcing a failure.
[  218.040375][ T4470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.074335][ T4470] CPU: 0 UID: 0 PID: 4470 Comm: syz.5.1458 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8
[  218.074357][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  218.074366][ T4470] Call Trace:
[  218.074370][ T4470]  <TASK>
[  218.074379][ T4470]  __dump_stack+0x21/0x30
[  218.074404][ T4470]  dump_stack_lvl+0x140/0x1c0
[  218.074424][ T4470]  ? __cfi_dump_stack_lvl+0x10/0x10
[  218.074463][ T4470]  ? check_stack_object+0x138/0x150
[  218.074487][ T4470]  dump_stack+0x19/0x20
[  218.074510][ T4470]  should_fail_ex+0x3c2/0x510
[  218.074526][ T4470]  should_fail+0xf/0x20
[  218.074539][ T4470]  should_fail_usercopy+0x1e/0x30
[  218.074556][ T4470]  _copy_to_user+0x24/0xa0
[  218.074575][ T4470]  simple_read_from_buffer+0xed/0x160
[  218.074594][ T4470]  proc_fail_nth_read+0x1aa/0x220
[  218.074614][ T4470]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  218.074634][ T4470]  ? bpf_lsm_file_permission+0xd/0x20
[  218.074651][ T4470]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  218.074670][ T4470]  vfs_read+0x28b/0xc70
[  218.074692][ T4470]  ? __cfi_vfs_read+0x10/0x10
[  218.074713][ T4470]  ? __kasan_check_write+0x18/0x20
[  218.074735][ T4470]  ? mutex_lock+0x97/0x1d0
[  218.074753][ T4470]  ? __cfi_mutex_lock+0x10/0x10
[  218.074773][ T4470]  ksys_read+0x145/0x260
[  218.074795][ T4470]  ? __cfi_ksys_read+0x10/0x10
[  218.074817][ T4470]  ? __kasan_check_write+0x18/0x20
[  218.074837][ T4470]  ? fput+0x1a4/0x230
[  218.074854][ T4470]  ? __kasan_check_read+0x15/0x20
[  218.074875][ T4470]  __x64_sys_read+0x7f/0x90
[  218.074898][ T4470]  x64_sys_call+0x2638/0x2ee0
[  218.074914][ T4470]  do_syscall_64+0x57/0xf0
[  218.074928][ T4470]  ? clear_bhb_loop+0x50/0xa0
[  218.074948][ T4470]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  218.074966][ T4470] RIP: 0033:0x7f69a6f5ed8e
[  218.074980][ T4470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  218.074994][ T4470] RSP: 002b:00007f69a7f35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  218.075011][ T4470] RAX: ffffffffffffffda RBX: 00007f69a7f366c0 RCX: 00007f69a6f5ed8e
[  218.075023][ T4470] RDX: 000000000000000f RSI: 00007f69a7f360a0 RDI: 0000000000000006
[  218.075034][ T4470] RBP: 00007f69a7f36090 R08: 0000000000000000 R09: 0000000000000000
[  218.075045][ T4470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.075055][ T4470] R13: 00007f69a7226038 R14: 00007f69a7225fa0 R15: 00007ffea0166d48
[  218.075069][ T4470]  </TASK>
[  218.752365][  T293] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid
[  218.872462][  T293] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid
[  218.897467][ T4480] rust_binder: 4472:4480 no such ref 3
[  218.954724][ T4480] rust_binder: 4472:4480 got reply transaction with no transaction stack
[  219.009913][ T4480] rust_binder: 4472:4480 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1547
[  219.056611][   T44] bridge_slave_1: left allmulticast mode
[  219.062302][   T44] bridge_slave_1: left promiscuous mode
[  219.067882][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.112050][   T44] bridge_slave_0: left allmulticast mode
[  219.139796][   T44] bridge_slave_0: left promiscuous mode
[  219.158059][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.165599][   T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  219.280999][   T44] tipc: Disabling bearer <udp:syz0>
[  219.308616][   T44] tipc: Disabling bearer <eth:dummy0>
[  219.322637][   T44] tipc: Left network mode
[  219.341846][   T44] veth1_macvtap: left promiscuous mode
[  219.352304][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  219.382074][   T44] veth0_vlan: left promiscuous mode
[  219.409889][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  219.449363][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.552643][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  219.581865][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  219.591618][  T309] rust_binder: 4472: undelivered TRANSACTION_ERROR: 29201
[  219.640486][   T10] usb 4-1: Product: syz
[  219.644662][   T10] usb 4-1: Manufacturer: syz
[  219.649250][   T10] usb 4-1: SerialNumber: syz
[  219.930938][   T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  220.131865][ T1097] usb 4-1: USB disconnect, device number 50
[  220.153109][ T1097] usblp0: removed
[  220.432210][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'.
[  220.645997][   T36] kauditd_printk_skb: 399 callbacks suppressed
[  220.646009][   T36] audit: type=1400 audit(1792099996.980:14835): avc:  denied  { read } for  pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  220.750983][   T36] audit: type=1400 audit(1792099997.020:14836): avc:  denied  { read open } for  pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  220.852828][   T36] audit: type=1400 audit(1792099997.020:14837): avc:  denied  { ioctl } for  pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  220.886645][   T36] audit: type=1400 audit(1792099997.070:14838): avc:  denied  { read } for  pid=4517 comm="syz.3.1476" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  220.909924][   T36] audit: type=1400 audit(1792099997.070:14839): avc:  denied  { read open } for  pid=4517 comm="syz.3.1476" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  220.934064][   T36] audit: type=1400 audit(1792099997.070:14840): avc:  denied  { execmem } for  pid=4517 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  220.953821][   T36] audit: type=1400 audit(1792099997.088:14841): avc:  denied  { read } for  pid=4517 comm="syz.3.1476" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  220.977059][   T36] audit: type=1400 audit(1792099997.088:14842): avc:  denied  { read open } for  pid=4517 comm="syz.3.1476" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  221.001089][   T36] audit: type=1400 audit(1792099997.088:14843): avc:  denied  { ioctl } for  pid=4517 comm="syz.3.1476" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  221.026185][   T36] audit: type=1400 audit(1792099997.128:14844): avc:  denied  { unmount } for  pid=4341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  221.659896][ T1097] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  221.820726][ T1097] usb 6-1: too many configurations: 243, using maximum allowed: 8
[  221.836441][ T1097] usb 6-1: config index 0 descriptor too short (expected 65285, got 68)
[  221.850769][ T1097] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  221.871828][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  221.900030][ T1097] usb 6-1: config index 1 descriptor too short (expected 65285, got 68)
[  221.917430][ T1097] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  221.938728][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  221.967254][ T1097] usb 6-1: config index 2 descriptor too short (expected 65285, got 68)
[  221.981248][ T1097] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  222.002617][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  222.030771][ T1097] usb 6-1: config index 3 descriptor too short (expected 65285, got 68)
[  222.051589][ T1097] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  222.082497][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  222.126506][ T1097] usb 6-1: config index 4 descriptor too short (expected 65285, got 68)
[  222.139662][ T1097] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  222.172643][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  222.214084][ T1097] usb 6-1: config index 5 descriptor too short (expected 65285, got 68)
[  222.223223][ T1097] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  222.254264][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  222.297473][ T1097] usb 6-1: config index 6 descriptor too short (expected 65285, got 68)
[  222.316172][ T1097] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  222.351402][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  222.380265][ T1097] usb 6-1: config index 7 descriptor too short (expected 65285, got 68)
[  222.388635][ T1097] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  222.407179][ T1097] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  222.517796][ T1097] usb 6-1: string descriptor 0 read error: -71
[  222.548325][ T1097] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  222.584556][ T1097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.611942][ T1097] usb 6-1: can't set config #1, error -71
[  222.639353][ T1097] usb 6-1: USB disconnect, device number 4
[  224.273511][ T4552] ./dev/sda1: Can't lookup blockdev
[  225.206264][ T4560] overlayfs: failed to clone upperpath
[  225.649909][   T36] kauditd_printk_skb: 9674 callbacks suppressed
[  225.649921][   T36] audit: type=1400 audit(1792100001.998:24519): avc:  denied  { search } for  pid=296 comm="syz-executor" name="instances" dev="tracefs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  225.691904][  T296] audit: audit_backlog=65 > audit_backlog_limit=64
[  225.698405][  T296] audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64
[  225.706281][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  225.712786][ T4341] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64
[  225.721678][ T4341] audit: backlog limit exceeded
[  225.726822][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  225.733380][   T36] audit: type=1400 audit(1792100002.018:24520): avc:  denied  { read open } for  pid=4341 comm="syz-executor" path="/31/trace/instances/foo/per_cpu/cpu1/buffer_size_kb" dev="tracefs" ino=17677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  225.761177][  T296] audit: backlog limit exceeded
[  225.766408][  T296] audit: audit_backlog=65 > audit_backlog_limit=64
[  230.659889][   T36] kauditd_printk_skb: 20889 callbacks suppressed
[  230.659902][   T36] audit: type=1400 audit(1792100006.988:44239): avc:  denied  { search } for  pid=4341 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  230.688427][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  230.696916][  T296] audit: audit_backlog=65 > audit_backlog_limit=64
[  230.703445][ T4341] audit: audit_lost=408 audit_rate_limit=0 audit_backlog_limit=64
[  230.719902][  T296] audit: audit_lost=409 audit_rate_limit=0 audit_backlog_limit=64
[  230.727704][  T296] audit: backlog limit exceeded
[  230.734680][ T4341] audit: backlog limit exceeded
[  230.739850][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  230.743370][ T4586] audit: audit_backlog=65 > audit_backlog_limit=64
[  230.758373][ T4588] audit: audit_backlog=65 > audit_backlog_limit=64
[  230.792164][ T4588] fuse: Bad value for 'fd'
[  234.231231][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'.
[  235.669988][   T36] kauditd_printk_skb: 21381 callbacks suppressed
[  235.670014][   T36] audit: type=1400 audit(1792100012.018:65168): avc:  denied  { search } for  pid=4341 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  235.710767][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  235.717363][ T4341] audit: audit_lost=562 audit_rate_limit=0 audit_backlog_limit=64
[  235.726927][  T296] audit: audit_backlog=65 > audit_backlog_limit=64
[  235.733443][ T4341] audit: backlog limit exceeded
[  235.738443][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  235.744964][  T296] audit: audit_lost=563 audit_rate_limit=0 audit_backlog_limit=64
[  235.753745][  T296] audit: backlog limit exceeded
[  235.758904][  T296] audit: audit_backlog=65 > audit_backlog_limit=64
[  235.765450][   T36] audit: type=1400 audit(1792100012.038:65169): avc:  denied  { read open } for  pid=296 comm="syz-executor" path="/415/trace/instances/foo/per_cpu/cpu1/buffer_size_kb" dev="tracefs" ino=17677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  238.351837][   T12] veth0_vlan: left allmulticast mode
[  238.357288][   T12] bridge0: port 3(veth0_vlan) entered disabled state
[  238.387002][   T12] bridge_slave_1: left allmulticast mode
[  238.409808][   T12] bridge_slave_1: left promiscuous mode
[  238.434134][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.463405][   T12] bridge_slave_0: left allmulticast mode
[  238.469065][   T12] bridge_slave_0: left promiscuous mode
[  238.511549][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.652248][   T12] tipc: Disabling bearer <udp:syz0>
[  238.660860][   T12] tipc: Disabling bearer <udp:syz2>
[  238.682623][   T12] tipc: Left network mode
[  238.719118][   T12] veth1_macvtap: left promiscuous mode
[  238.749915][   T12] veth0_vlan: left promiscuous mode
[  239.098821][ T4630] bpf: Bad value for 'gid'
[  240.680031][   T36] kauditd_printk_skb: 18451 callbacks suppressed
[  240.680044][   T36] audit: type=1400 audit(1792100017.028:82375): avc:  denied  { search } for  pid=4341 comm="syz-executor" name="cpu1" dev="tracefs" ino=17672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  240.721756][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  240.728269][ T4341] audit: audit_lost=980 audit_rate_limit=0 audit_backlog_limit=64
[  240.737842][ T4341] audit: backlog limit exceeded
[  240.743185][   T36] audit: type=1400 audit(1792100017.048:82376): avc:  denied  { read } for  pid=4341 comm="syz-executor" name="buffer_size_kb" dev="tracefs" ino=17677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  240.766931][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  240.774082][ T4341] audit: audit_lost=981 audit_rate_limit=0 audit_backlog_limit=64
[  240.781935][ T4341] audit: backlog limit exceeded
[  240.786942][ T4341] audit: audit_backlog=65 > audit_backlog_limit=64
[  240.794428][   T36] audit: type=1400 audit(1792100017.048:82377): avc:  denied  { read open } for  pid=4341 comm="syz-executor" path="/31/trace/instances/foo/per_cpu/cpu1/buffer_size_kb" dev="tracefs" ino=17677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  241.861686][   T12] bridge_slave_1: left allmulticast mode
[  241.867349][   T12] bridge_slave_1: left promiscuous mode
[  241.888032][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.920741][   T12] bridge_slave_0: left allmulticast mode
[  241.926385][   T12] bridge_slave_0: left promiscuous mode
[  241.960347][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=6 req=1473 state=3 status=67 (errno 32: Broken pipe)
[  242.081937][   T12] veth1_macvtap: left promiscuous mode
[  242.087460][   T12] veth0_vlan: left promiscuous mode