last executing test programs:

22.270518777s ago: executing program 3 (id=26):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d498c4c2999aaddd8bceb38fe8eca2a8810000003766baf80cb8303fa984ef66bafc0ced660f38810b", 0x3e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22.152573209s ago: executing program 3 (id=28):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r1 = memfd_create(&(0x7f00000002c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000040)={0x5, 0x6, 0x5, 0xe52, 0x6})
ftruncate(r1, 0xffff)
fcntl$addseals(r2, 0x409, 0x0)
r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000440)={r1, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
close_range(r1, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)

22.117452742s ago: executing program 3 (id=29):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x942)
readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/33, 0x21}], 0x1)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bind$xdp(r3, &(0x7f0000000300)={0x2c, 0xa, 0x0, 0x23}, 0x10)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000840)=0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x1b6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)="616c676f3d2218", 0x7)
pwrite64(r5, &(0x7f0000000380)="0000924319a50f2e62e19f", 0xffffffffffffffd4, 0x4)
pwrite64(r4, &(0x7f00000003c0)="55aa", 0x2, 0x1fe)
r6 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x2)
ioctl$LOOP_SET_FD(r6, 0x4c00, r4)
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000006c0), 0x2)
r8 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2)
ftruncate(r8, 0xffff)
fcntl$addseals(r8, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000800)={r8, 0x0, 0x0, 0x8000})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in=@local}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000540)=0xe8)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/245, 0xf5}], 0x1, 0x40000004, 0x5)
ioctl$PPPIOCATTACH(r9, 0x4004743d, &(0x7f00000002c0)=0x2)
r10 = syz_create_resource$futex(&(0x7f0000000200)=0x2)
r11 = syz_create_resource$futex(&(0x7f0000000280)=0x2)
futex(r10, 0x5, 0x1, &(0x7f0000000240)={0x77359400}, r11, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @local}})

22.114073252s ago: executing program 3 (id=30):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000880)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)

22.104888533s ago: executing program 3 (id=32):
syz_io_uring_setup(0x5b14, &(0x7f00000001c0)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
setrlimit(0x9, &(0x7f0000000000)={0x8606, 0xffff})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0)
r2 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f00000002c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}})
syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00')
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = syz_open_dev$loop(&(0x7f0000000340), 0x200, 0x0)
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000380))
add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="fffaac3c497e", 0x6, 0x0)
socket(0x11, 0x3, 0x0)
setrlimit(0x6, &(0x7f0000000080)={0x388, 0x4})
finit_module(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_clone(0x1048200, 0x0, 0x0, 0x0, 0x0, 0x0)

22.04011153s ago: executing program 3 (id=33):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wg1\x00', 0x6bf1c2d5adba8c32})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000080)="1100f84d25d3e15c", 0x8}], 0x2)

6.922672333s ago: executing program 32 (id=33):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wg1\x00', 0x6bf1c2d5adba8c32})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000080)="1100f84d25d3e15c", 0x8}], 0x2)

5.852309212s ago: executing program 0 (id=109):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010023, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000480)=0x8, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
write(r0, &(0x7f0000000140)='bRequestType=', 0xd) (async)
write(r0, &(0x7f0000000140)='bRequestType=', 0xd)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a313830360603551c030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c3f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d330800603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xffffffffffffffff) (async)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a313830360603551c030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c3f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d330800603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xffffffffffffffff)

5.772587261s ago: executing program 0 (id=112):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20004000)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@empty, @empty, @mcast1, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r3})
ioctl$SNAPSHOT_FREE(r0, 0x3314)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000640)=""/20, &(0x7f0000000680)=0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1a0, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0xc840)

5.184036211s ago: executing program 0 (id=114):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]}) (async)

5.152490794s ago: executing program 1 (id=118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@code={0xa, 0x64, {"0fab93db000000420f3266b8cf008ec026440f234b0f01c8b805000000b9000000000f01c1f20f594538b9800000c00f3235000400000f300f0d1348b88000c0fe000000000f23d80f21f835c00000d00f23f8"}}], 0x64})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0), &(0x7f0000000600))
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000e9f000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000580)="66b9800000c00f326635008000000f3066b9800000c00f326635004000000f30363ef3ad660ff2770066b9560200000f32ba610066b86c00000066ef66b8000000000f23d80f21f86635c00000d00f23f80f78a41200f30f5ea50000baa100ed", 0x60}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x1, 0xb, 0x2, 0x6, 0x5, 0xffffffff, 0xfffffff7}, {0x4, 0x7f, 0x6, 0x101, 0x8, 0x5, 0x10000}]})
r8 = socket$key(0xf, 0x3, 0x2)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8d32})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r9, &(0x7f00000006c0)={@val={0x0, 0x888e}, @void, @eth={@random="61f85f8df675", @random="00c400000105", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x50, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x3, '\x00', {0x0, 0x6, "8ba6ed", 0x9, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2d}, [@hopopts={0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}]}}}}}}}}, 0x8a)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000400), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r12, &(0x7f0000000540)='1,0x400000,0x4', 0xe)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone(0x1100, 0x0, 0xff9e, 0x0, 0x0, 0x0)

5.064057443s ago: executing program 4 (id=119):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106d0415c200000000000109022400010000a00209040001020300020009210000400122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="0f20e035000010000f22e00f0f2f9766ba6100b0f1eec4c3dd7d6b007066ba2000ed66baa100b0abeec4c1f950c4c4e1895568ffb9800000c00f3235010000000f30b805000000b9000000000f01d9", 0x4f}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000140), 0x400, 0x62080)
ioctl$HIDIOCSUSAGE(r4, 0x4018480c, 0x0)

5.035414096s ago: executing program 1 (id=120):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00')
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="2df32a", 0x3}], 0x1) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001480)={{0x0, 0x0, 0x8, 0x3, 0xfffffffe}}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000014c0)={0x6, 0x20000006, 0x0, 0x0, 0xd}) (async)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async)
close_range(r1, r1, 0x400000000000000) (async)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) (async)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$kvm(0x0, &(0x7f00000003c0), 0x6140, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001580)={0xf006, 0x8000000, 0x0, r5})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000015c0)={0xb03, 0x3000, 0x0, r5, 0x4}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x89) (async)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000380)='7', 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/ram0\x00', 0x2, 0x0)
pwritev(r7, &(0x7f0000000900)=[{&(0x7f0000002080)="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", 0xfffffffffffffe36}, {0x0}], 0x2, 0x101, 0x72440019)
ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f0000001400)={0x8, 0x1}) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/161) (async)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) (async)
r8 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/features/freeze_notification\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000180)=0xf, 0x4)
sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000001b40)=ANY=[@ANYBLOB="40040000f403000329bd7000fddbdf2505000000010000001a000000ff030000090000000400000009000000ff7f0000ff0300000080000001010000ffffff7f030000007b410000040000000010000004000000020000003e000000000000000100008001010000ff01000000000000fffffffffe2400002d0300007007000004070000000000000100565bbe0000010000000800000081000000070000000600000002000000080000000200000009000000fb0900000500000006000000020000000300000002000000030000000400000007000000040000001700000003000000070000000300000007000000fbffffff4c090000ff03000009000000ff03000000000000cb000000090f000004000000d5020000020000000800000036080000010100000e00000001000080ffffffff0300000000080000000800000600000003000000ffff0000020100000000010004000000ff070000bcc300000000000000000000010f00000700000001000000fbffffffff0f0000070000000600000069ffffff000000008000000001010000020000000300000002000000020000000700000001000000000000000000000004000000000800000100000001000000ffffffff07000000ffffff7f01800000f7ffffff03000000ffff0000810000000200000081000000000400000a000000aa0400006b000000080000000600000008000000080000000100010000000000060000000600000002000000740000000100000001000000090000005600000006000000770000000f000000030000000700000007000000020000000800000006000000ff03000002000000090000000000008009000000e00f0000040000000300000000002400ffff00400900000007000000ff7f00000104000002000000000001000800000009000000410000000e4000000010000057aa0000c6000000040000007f00000001000000020000000300000001000000020000000200000001000000080000000200000050000000ffffff7fff7f00000000008009000000faffffff0000000008000000ffffff7f060000000f000000050000000400000093070000050000008800000029c400000200000035630000080000000300000004000000fdffffff000000000ff7000003000000100000000100010001000000040000000b000000090000000400000000800000940300000180000000000000ff7f000005000000d7070000ff7f00005e00000002000000040000006663758fbd080000040000000300000002000000b0c400000100008004000000ff7f000000feffff04000000f10e0000040000000900000003000000ea000000000000808100000008000000090000000200000093000000770000000700000001000000090000000900000001000000b66affff02000000ad000000ee0c0000a60000005300000006000000ff0700001e00000000635b2724270070726f63006f6f6d5f73636f72655f61646a00f62f2d000000adcb5741056b3602a5da53ce0039df3998433ed6c32a09cdce028accf6c75805df3ece30c7ac9d85d556e3e7358329a547c3969859bb1f1887fa7fd3ef0f5d1b8ac53ee3c78747613b64d21f6d215081f8936248043e4df7b296c203d0a9f120a6e88720419e7eb81586b60072ac049111cb823a4fa75298c37e1fb4779823e63f609bb3cae4494e8b5a0f19d34a062e995f5ab26cd34dc04881d494a32700982e75a1d1443444b69937e797fb50a7a14bb1e0442cf7e072eccfc3cfe192a3bb"], 0x440}, 0x1, 0x0, 0x0, 0x880}, 0x2000c010)
syz_clone(0x40001100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlockall(0x2)

4.634777617s ago: executing program 1 (id=121):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000180)=""/48, &(0x7f00000001c0)=0x30) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='hpfs\x00', 0x40c410, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x4099)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x100) (async)
mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"})

4.479911602s ago: executing program 1 (id=122):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180), 0x4)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={<r2=>0xffffffffffffffff, &(0x7f0000000000)='%\x00', 0x8040, &(0x7f0000000040)={@align=0x8000000000000000, {0x5, 0x7, 0x5daf, 0x1}}, 0x80, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xa000})
setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000140)=0xfff, 0x4)
ptrace(0x10, r1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000400)={'gre0\x00', <r3=>0x0, 0x80, 0x1, 0x5, 0x0, {{0x2a, 0x4, 0x2, 0x1, 0xa8, 0x66, 0x0, 0x2, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010101, {[@timestamp_addr={0x44, 0x1c, 0x98, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x26}, 0xe}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0x6}]}, @lsrr={0x83, 0x2b, 0x2f, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @local, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}]}, @cipso={0x86, 0x48, 0x3, [{0x0, 0xa, "2f7f163601480d85"}, {0x7, 0x6, "80b8dab9"}, {0x0, 0x6, "68577fed"}, {0x7, 0xb, "4d6d6b78aa06fc4844"}, {0x6, 0xf, "a7d789c47c222937797c363b65"}, {0x7, 0x12, "99d600000100cf6564016047cf1e351d"}]}, @noop, @end]}}}}})
getresuid(&(0x7f0000000240), &(0x7f0000000280)=<r4=>0x0, &(0x7f00000002c0))
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000500)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000540)={0x1, 0xf4240, 0x3, 0x0, 0x5})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@mcast1, 0x4e24, 0x0, 0x4e22, 0x5, 0x8, 0x20, 0x20, 0x3c, r3, r4}, {0x6, 0x9624, 0x5, 0x100000000000, 0x0, 0x400, 0x100000000, 0x40}, {0xfff, 0x7, 0xfffffffffffffff0}, 0x3ff, 0x6e6bbd, 0x2, 0x1, 0x7, 0x2}, {{@in=@broadcast, 0x4d4, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x3504, 0x3, 0x94c0ad5286702406, 0x7, 0x1, 0x5, 0x4}}, 0xe8)
r6 = syz_open_dev$loop(&(0x7f00000005c0), 0x200, 0x4001)
ioctl$BLKFRAGET(r6, 0x1265, &(0x7f0000000600))
ptrace$setregs(0x1a, r1, 0xc, 0x0)

4.479402752s ago: executing program 1 (id=123):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000008c0)={@empty, 0x80, r2})
recvmmsg(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/26, 0x1a}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/205, 0xcd}], 0x8, &(0x7f00000005c0)=""/161, 0xa1}, 0x6}], 0x1, 0x10000, &(0x7f00000006c0)={0x77359400})
setsockopt$inet6_int(r0, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x435c8c54dd8828a7, &(0x7f0000000000), 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000900)={0x3a, 0x20, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0xed, 0x6, [0x40, 0x9, 0x1, 0x7, 0xfda1, 0xfd, 0x7, 0x2]}}, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x6, [0x1, 0x9, 0x2, 0xb15, 0xfffffffffffffffe, 0xd8f, 0x6]}}, @calipso={0x7, 0x58, {0x0, 0x14, 0x2, 0x1000, [0x3, 0xffff, 0x2, 0x6, 0x80, 0x95, 0x0, 0x7, 0x3, 0x4]}}, @pad1, @pad1, @ra, @generic={0x40, 0x11, "d8d465e3002a23448b652a6dc66a97632c"}]}, 0x110)

3.276685685s ago: executing program 0 (id=127):
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa08, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000540)={0x1060, 0x1, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x10}, 0xc, 0x7, 0x2, 0xff, 0x2, 'syz1\x00', "b242dd1298d9b4595720f802a86d1a44b831343226b7d1dd087663dabbdbb4be", "a5a3d2bd9a47f631f167718d74cf023d4bf50a82394ad4f2cbc3dd08eb018e96", [{0x5, 0x2, {0x0, 0x6}}, {0x80, 0x3ff, {0x1, 0x6}}, {0x48, 0x8001, {0x2, 0xfffffff6}}, {0xfff8, 0xf3, {0x0, 0x4}}, {0x7, 0xff, {0x3, 0x5}}, {0x31c4, 0x5, {0x1, 0x100}}, {0x2, 0x43, {0x3, 0x2}}, {0xe492, 0xdc, {0x0, 0x3}}, {0xffff, 0x4ec, {0x3, 0xf4}}, {0x0, 0x9, {0x3, 0xcf6e}}, {0x3, 0x7, {0x2, 0x7f000}}, {0x10, 0x1, {0x3, 0x9f}}, {0x8, 0x3, {0x2, 0x8}}, {0x9, 0x8, {0x1, 0x80000001}}, {0x9, 0x7, {0x0, 0xfffffff7}}, {0x8000, 0xd, {0x2, 0x80}}, {0x4, 0x5, {0x2, 0x10}}, {0xd, 0xac4e, {0x2, 0x44}}, {0x6, 0x2, {0x1, 0xfffffeff}}, {0xfe00, 0x81, {0x3, 0x8}}, {0x6, 0x2, {0x1, 0xffffffff}}, {0x400, 0x1, {0x0, 0x4}}, {0x5, 0x6, {0x1, 0x8}}, {0x1, 0x2}, {0x1, 0x1ff, {0x0, 0x2}}, {0x1, 0x7, {0x1, 0x1}}, {0x200, 0x7, {0x1, 0x7fffffff}}, {0x1, 0x4, {0x2, 0xffff}}, {0xa29, 0x7fff, {0x3, 0x80000001}}, {0x0, 0x2, {0x2, 0x7ff}}, {0x2, 0x4, {0x3, 0x5}}, {0xfffa, 0x5, {0x1, 0x8}}, {0x4, 0x0, {0x1, 0x5}}, {0x400, 0x1, {0x1, 0x4}}, {0x7, 0x0, {0x2, 0xec2c}}, {0x0, 0xbe2, {0x1, 0x7}}, {0x9, 0x7, {0x2}}, {0xfffd, 0x8, {0x0, 0xa}}, {0x2, 0x5, {0x1}}, {0x8000, 0x1, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x0, 0x7, 0xa1f, 0x5, 0xf, 'syz1\x00', "f204ef079ec0d5148bf5db28e189b0fe9c650c79c2e024d9e5e663f638117936", "3270d25f793c30233b55e2f8119e0e5c3d8ceef6ae0b766981741b7ff6027dab", [{0x5659, 0x1, {0x1, 0x9}}, {0x8001, 0x1000, {0x3, 0x6}}, {0x86, 0x7fff, {0x3, 0x3b6}}, {0x2, 0x8000, {0x3, 0x1000}}, {0x7, 0x48, {0x3, 0x3}}, {0x8, 0x200, {0x0, 0x9}}, {0x4c20, 0x4, {0x1, 0x3}}, {0x7, 0x200, {0x2, 0x6}}, {0x45a4, 0xfff, {0x0, 0x1}}, {0xfffb, 0x3, {0x1, 0x63}}, {0x2, 0xc, {0x1, 0x5c}}, {0x4c31, 0x4, {0x3, 0x3}}, {0x6, 0x2, {0x2, 0x6}}, {0x8, 0x4, {0x3, 0x5a99158f}}, {0x7, 0x9, {0x0, 0x2}}, {0xd20, 0xe, {0x1}}, {0xf732, 0x1, {0x2, 0x40}}, {0x7, 0x18e2, {0x0, 0x8}}, {0x9, 0x8, {0x1, 0x6}}, {0xcb5, 0x1, {0x0, 0x6}}, {0xd, 0x400, {0x1, 0x3}}, {0x1, 0x35, {0x3, 0x4}}, {0xff, 0x200, {0x1, 0x2}}, {0x9, 0x4, {0x1, 0xa96e}}, {0x1000, 0x470, {0x3, 0x3}}, {0x4, 0x3}, {0x3ff, 0xc145, {0x3, 0x8}}, {0x4, 0xe, {0x0, 0x10}}, {0xfff8, 0x7f, {0x0, 0x8}}, {0x3, 0x2, {0x0, 0x1}}, {0x4, 0x6, {0x2, 0x2}}, {0x8001, 0x2, {0x2, 0x200}}, {0xc, 0x2, {0x2, 0x200}}, {0x8, 0x3, {0x1, 0xc}}, {0x9, 0x1ea, {0x0, 0x57}}, {0x2, 0x3, {0x3, 0x2}}, {0xfe00, 0x1, {0x0, 0xfffffffb}}, {0x0, 0x0, {0x1, 0x2}}, {0x0, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x7fff}, 0x80, 0x2, 0x5, 0x3, 0xc, 'syz0\x00', "e0ef160ab5f23277e6d0fdd8b3f8640b03e80ab5a0b351fe7b752ad432705f12", "1a0ece654b5f2d1f635cfe9d272d7ff2d8e3cb4831f4b72f79d9e94e8266fa62", [{0x8, 0x40b1}, {0x7, 0x2, {0x3, 0x5}}, {0x9, 0x4bbd, {0x0, 0x8}}, {0x5, 0x1, {0x3, 0xa235}}, {0x5, 0x1, {0x1, 0x200}}, {0x400}, {0x1ecf, 0x0, {0x3, 0x7}}, {0x8, 0x401, {0x0, 0x45b18f77}}, {0x5, 0x1, {0x0, 0x6}}, {0x7fff, 0x200, {0x3, 0x4}}, {0x691, 0x1, {0x1}}, {0xb40, 0x1, {0x0, 0xbce8111}}, {0x2e3a, 0x8000, {0x0, 0x4}}, {0x101, 0x2, {0x0, 0x4}}, {0x7, 0x8000, {0xac6c6d4d9e1135c8, 0x2}}, {0x1000, 0x406b, {0x2, 0x5}}, {0xfffe, 0x4c, {0x0, 0x5}}, {0x7, 0x7, {0x0, 0xff}}, {0x9, 0x3ff}, {0x5, 0x8, {0x2, 0x9}}, {0x2, 0xc, {0x1, 0x4}}, {0x5, 0x2, {0x1, 0x9}}, {0x100, 0x7, {0x2, 0xffffffff}}, {0x7, 0x1, {0x0, 0x7}}, {0x4, 0x2fe1, {0x2, 0x6}}, {0x7f, 0x2, {0x3}}, {0x3, 0x6, {0x2, 0x1000}}, {0x5, 0x8, {0x0, 0xcc9}}, {0x9, 0x53, {0x1, 0x6}}, {0x1, 0x4, {0x3, 0x80000001}}, {0x3, 0x10, {0x3, 0x8000}}, {0x69, 0x4, {0x0, 0x2577}}, {0x0, 0x81, {0x0, 0x3}}, {0xb7ad, 0x2, {0x3, 0x7}}, {0x7, 0x5, {0x2, 0x9}}, {0xd9d8, 0x6, {0x0, 0xfff}}, {0x9, 0x0, {0x0, 0x8}}, {0x12, 0xc229, {0x1, 0x7}}, {0x12cd, 0x3, {0x1, 0xffff}}, {0x9, 0xfffa, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xa3}, 0x0, 0xc, 0x4, 0x1, 0x10, 'syz1\x00', "d26cfb90a709f145b08e7b1b80b976e7bfc0c2112608d1c0c0cd18052dd7f5f6", "75c5553c297642f13470646cb53fbf2a3290bfc50bc58e45f88e3b6d2da60afa", [{0x38, 0x6, {0x0, 0x7fffffff}}, {0x2, 0x7, {0x3, 0x1}}, {0x987, 0x0, {0x3, 0x1}}, {0xe, 0x9, {0x2, 0x7}}, {0x7, 0x4, {0x3, 0xffff}}, {0xd984, 0x8, {0x1, 0x3}}, {0xb, 0x6, {0x1, 0xb62a}}, {0x5, 0xfff9, {0x3, 0x395}}, {0x70, 0xc53, {0x1, 0xfffffff7}}, {0x7, 0x8000, {0x3, 0x7f}}, {0x8, 0x7, {0x3, 0x2cec}}, {0x7, 0x1, {0x3, 0xe}}, {0x6, 0x2, {0x0, 0x5}}, {0x71, 0x8, {0x3, 0x8}}, {0x1, 0xec, {0x0, 0x62}}, {0x3ff, 0x9, {0x2, 0x7}}, {0x9, 0x21, {0x1, 0x9}}, {0x8, 0x6, {0x1, 0xb}}, {0x7, 0x4d3c, {0x3, 0x1}}, {0x1, 0x2, {0x1, 0xb}}, {0x6, 0x5, {0x0, 0x3}}, {0xf, 0x2, {0x0, 0xffff}}, {0xf, 0x7, {0x3}}, {0xf846, 0x1306, {0x3, 0x47}}, {0x5, 0xd, {0x3, 0x1ff}}, {0xff00, 0x3, {0x3, 0x6a}}, {0x5, 0x9, {0x3, 0x2}}, {0x9, 0xff, {0x0, 0x1}}, {0x6, 0x8, {0x2, 0x5}}, {0x200, 0xa60, {0x1, 0x8}}, {0x8, 0x7, {0x0, 0x7fff}}, {0x2, 0x3, {0x2, 0x7fffffff}}, {0x3ff, 0xacf, {0x1, 0x3}}, {0x2, 0x7, {0x3, 0x81}}, {0x8, 0x7, {0x2, 0xfffffff8}}, {0x8, 0x5, {0x3, 0x9}}, {0x4, 0x8, {0x1, 0x5}}, {0xd, 0x9, {0x2, 0x7}}, {0x1, 0x7, {0x1}}, {0x9, 0x0, {0x0, 0xd2e}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x0, 0x2, 0x7, 0x4, 0x1b, 'syz0\x00', "eeb212a616a5a85c29d0a0ba0f771c818ead7b071107f1713380c4fda9e8a223", "a7000e155e7b2fc427ba23ae6a7bdf9d850e2a9787eabe8c8fe8752e38d6af22", [{0x7, 0x6, {0x2, 0x8}}, {0x7, 0x7f, {0x3, 0x9}}, {0xb5, 0x3, {0x2, 0x8}}, {0x80, 0xa0e2, {0x0, 0x7}}, {0x40, 0x0, {0x3, 0xb}}, {0x0, 0x9, {0x2, 0x7}}, {0x6, 0x6, {0x1, 0x24a}}, {0x5, 0x5168, {0x1, 0xff}}, {0x91, 0x1, {0x3, 0x9}}, {0x5, 0x4, {0x3, 0xacab}}, {0x101, 0x8, {0x1, 0x715c}}, {0x81, 0x6, {0x2, 0x9}}, {0x5, 0x2, {0x0, 0x58}}, {0x1000, 0x8, {0x2, 0x9}}, {0x4, 0xd05f, {0x3}}, {0x8, 0x1, {0x0, 0x2}}, {0x2, 0x3ff, {0x3, 0xf194}}, {0x1, 0x3, {0x3, 0x6}}, {0xce, 0x8, {0x0, 0xfff}}, {0x4, 0x7, {0x2, 0x5}}, {0x682f, 0x3ff, {0x3, 0x1}}, {0xe779, 0xb5, {0x1, 0x101}}, {0x8, 0x4, {0x2, 0x3}}, {0x7ff, 0x1ff, {0x2, 0xb3}}, {0x9, 0x6, {0x2, 0x3}}, {0x8e5a, 0x0, {0x2, 0x1}}, {0x9, 0x6, {0x0, 0xe9}}, {0x10, 0x9, {0x3, 0x10001}}, {0x0, 0x3ff, {0x0, 0x9}}, {0xff00, 0x6, {0x2, 0x8}}, {0xd1, 0x2, {0x0, 0x2}}, {0xea, 0x100, {0x1, 0x6}}, {0x80, 0x1, {0x2, 0xffff8000}}, {0x6, 0x6, {0x0, 0x7}}, {0x6, 0x2, {0x0, 0x6}}, {0x8, 0x1, {0x0, 0xffffffff}}, {0xc, 0x1e00, {0x1, 0x1}}, {0x5e63, 0xffd4, {0x3, 0xff}}, {0x4, 0xc, {0x2, 0xab8}}, {0xb563, 0x5, {0x2, 0xfffffa72}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x4, 0x7, 0x4, 0x3, 0x105, 'syz1\x00', "8de14afd832c158886c2f41011aa4690ee3823a552ec99dc2135742a61638f23", "011431078ca7a822556f8bef81a995b0b98bd717ad03cb56d4d7aa1a0b1f9194", [{0xfff, 0x2, {0x2, 0x4}}, {0x9842, 0x3ff, {0x3, 0x8}}, {0x1ff, 0x7, {0x1, 0x81}}, {0x401, 0x3, {0x1, 0xfffffff4}}, {0x72, 0x80, {0x2, 0x10000}}, {0x3, 0x7, {0x3, 0x6}}, {0x0, 0x0, {0x1, 0x7ff}}, {0xfffb, 0x9, {0x3, 0x6}}, {0x0, 0x3, {0x0, 0x7}}, {0x9, 0x400, {0x2, 0x3}}, {0x7, 0x8, {0x2, 0x5}}, {0x2, 0x2, {0x6, 0x5e59}}, {0x9, 0x3, {0x1, 0xc0dc}}, {0x0, 0x9, {0x2, 0x6f77}}, {0x9, 0x1, {0x3, 0x4}}, {0x1, 0x7fff, {0x0, 0x7d4}}, {0x6, 0x400, {0x3, 0x1000}}, {0x0, 0xb9f, {0x3, 0x32c}}, {0x775, 0xe, {0x0, 0x7}}, {0x1, 0x400, {0x3, 0xfffffff7}}, {0x1, 0xa, {0x3, 0x4}}, {0x5, 0x3, {0x3, 0x4}}, {0x7, 0x2, {0x0, 0x4}}, {0x10, 0x800, {0x3, 0x7}}, {0xc9, 0x8, {0x3, 0x6}}, {0x1, 0x8, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x9}}, {0x2, 0xbf, {0x1, 0x1ff}}, {0x3, 0x7, {0x1, 0x77985497}}, {0x6, 0xd8, {0x0, 0x5}}, {0x5, 0xffff, {0x0, 0x1ce8}}, {0x9, 0x4, {0x2, 0x3}}, {0xb, 0x0, {0x3}}, {0x7f, 0x1, {0x6, 0x5}}, {0x3, 0x4, {0x2, 0x2}}, {0x4, 0x6, {0x2, 0x56000000}}, {0x800, 0x4, {0x2, 0xfff}}, {0x5, 0x1, {0x1, 0x9}}, {0x9, 0x4, {0x0, 0xfff}}, {0x1, 0x2, {0x2, 0xfffffd68}}]}}}, {{0x254, 0x1, {{0x1, 0x10}, 0x0, 0x5, 0x4bc, 0x3, 0x9, 'syz0\x00', "08730268db2866fcb8393d9c703c6a456eff31106fb16452701a69b08ba97ba6", "5b199e8608ba967695a7f5b89a47e6c08da4e6d0ab41a006221b56fa84e08796", [{0xfff8, 0x7fff, {0x2, 0xc}}, {0x5, 0xa, {0x1, 0x5}}, {0x9, 0x8001, {0x1, 0x1000}}, {0xbe, 0x400, {0x3, 0x91}}, {0x8, 0x32c5, {0x3, 0x4}}, {0x3, 0x7, {0x2, 0x10}}, {0x4, 0x0, {0x2, 0x8}}, {0x2400, 0x2, {0x0, 0x8}}, {0x98e, 0x6, {0x3, 0x8}}, {0x8001, 0x2, {0x1, 0x10000}}, {0x0, 0x7fff}, {0x95d8, 0x8, {0x3, 0x1ff}}, {0x1, 0x6, {0x1}}, {0x0, 0x10, {0x3, 0xffff}}, {0xf, 0xff, {0x1, 0x3}}, {0xff00, 0x8, {0x2, 0xca}}, {0x96b5, 0x9, {0x2, 0x6}}, {0x6, 0x4, {0x1, 0x6}}, {0x5, 0x1, {0x2, 0x5}}, {0xc5bf, 0x2, {0x3, 0x2}}, {0x0, 0x100, {0x3, 0x7}}, {0xffff, 0x3, {0x0, 0xffffffff}}, {0x3, 0x9b8, {0x3, 0x7}}, {0x8, 0x7, {0x1, 0x45}}, {0x6, 0x0, {0x0, 0x5b5a}}, {0x9de, 0x3, {0x2, 0x9}}, {0x7, 0x400, {0x0, 0x3}}, {0x5, 0x632, {0x3, 0x2}}, {0x2, 0x5, {0x1, 0x247}}, {0x1, 0x0, {0x1, 0xfffffffb}}, {0x2, 0xff, {0x3, 0x7ff}}, {0x7ff, 0xffff, {0x3, 0x2}}, {0x0, 0x8, {0x1, 0x5}}, {0x4, 0xfff, {0x3, 0x7}}, {0x8, 0x0, {0x2, 0x7}}, {0xa, 0x8, {0x3, 0x19d}}, {0x0, 0x7, {0x2, 0x75f}}, {0xff, 0x2, {0x3, 0x2}}, {0xb860, 0x0, {0x0, 0xffff}}, {0x80, 0x40, {0x2, 0x6}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x20, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x1001, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022310600008b0757511254"], 0x0}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040), 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000480)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x4, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000001640)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0x7f, 0x4, 0xfc, 0x38}})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000001880)={[0x6e, 0x0, 0x100000000008, 0x20, 0x3, 0x2, 0x80000000106c, 0x101, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000140)=@arm64)

2.623354622s ago: executing program 4 (id=128):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0xfffe, 0x2, 0x8, 0xb3, 0xb, "0900000009d794c1"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x9)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x20840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='\nA', 0x2}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x7fffffff, @local, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="3005", 0x2}], 0x1}}], 0x2, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f00000001c0)=0x9)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000118, 0x0, 0xb7}]})

2.563925958s ago: executing program 4 (id=129):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=<r2=>0x0)
quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff)
syz_ublk_setup_queues(r3, r2, &(0x7f0000000080)={0x0, 0x3a98, 0x1000, 0xffffffff, 0x2f6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x0, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb66c, 0x20000, 0x3, 0x20c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x2, 0xffffbff7, 0x0, r3}}], 0x1, 0x0, 0x0)

2.563361508s ago: executing program 4 (id=130):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x65, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xec5f4000)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/134, 0x86}], 0x1, 0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x16, 0x5}, 0x8)

2.562875448s ago: executing program 4 (id=131):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
open(&(0x7f0000000040)='./file0\x00', 0x108843, 0x190)
open(&(0x7f0000000080)='./file0\x00', 0x108843, 0x98)
openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket(0x3, 0x3, 0x88)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.54021824s ago: executing program 4 (id=132):
r0 = epoll_create1(0x80000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$rfkill(r2, 0x0, 0x0) (async)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x8, 0x1, "e457cae9", "d4aa19e8"}}, 0x0}, 0x0) (async, rerun: 64)
ptrace$getregs(0xc, 0x0, 0x402, 0x0) (async, rerun: 64)
r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x488000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
write$FUSE_INIT(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r5, 0x0, 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x3000000d}) (rerun: 32)

1.66281768s ago: executing program 2 (id=136):
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x180)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000001c0)=""/4096)
unshare(0x62040200)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x18, 0x200, 0x70bd2d, 0x25dfdbfe, {0x4}, [@typed={0x8, 0x94, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4804)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000011c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000001300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000001440)={0x0, {{0xa, 0x4ea3, 0x0, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @mcast2}}}, 0x108)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)

1.642531672s ago: executing program 2 (id=137):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1101)
ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000180))
connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x8914, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0})

1.576150269s ago: executing program 2 (id=138):
r0 = add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = epoll_create1(0x0) (async)
keyctl$update(0x2, r0, &(0x7f0000000180)="47f792dc5c9ece88757879603866d5bb1a3d9d91061806d25c29da95d9e65230e586fbbb44fce5f41e33e0d3d6d54ba3db65e90830228eefcf0fddbaecc64abd0a857a1f40ff9d8be716324af6a142753f914d59241f45d585f33d179ac3112f7651e278ff3f1b846e3fdca11aaf8c6ba714355389bfd8", 0x77)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async)
r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\x00\x00\x00\x00/\x98|\x84\"xMW\x8d\xceM\x94j`23fP}\xf5/\x8e\x909`\xbd`\xf6(bg\x10\x00U\xf9!\x1b\x8b\x1b\xef\xfeZ9\xcd[\x9emA\xb6\xfbm&\xa9\x06!\xe5-\xa1\xddx\xf4z\xf4\xcc\xef\r\xae\xa3\x88\x1c+\xf9\xfe\xb8Sx\xfa\x83Ab\xee\xdd\x81r\x9ef\x17\x17\xd6\xff\al\x80\xa9Y\x1f;\v\xebJ+\x03\xd97\x16M\xef\xfcm\xe8*\x81_h\x03\x88\x17E\xfe\xc3F\xf3\x00@WR\xcf', 0x2)
ftruncate(r3, 0xffff) (async)
fcntl$addseals(r3, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x8000}) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000200)=""/208, 0x8000, 0x1400, 0x7, 0x1}, 0x20)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)

1.575640559s ago: executing program 2 (id=139):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001600), 0x2)
r1 = memfd_create(&(0x7f0000001640)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r1, 0x1000006)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000001680)={r1, 0x0, 0x0, 0x1000000})
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000016c0)={r1, 0x0, 0x0, 0x1000000})
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x100000000006, 0x105700)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000440)={<r3=>r2, &(0x7f00000001c0)='syztnl2\x00', 0x88400, &(0x7f0000000380)={@align=0x40000000000000, {0x7, 0x2, 0x8, 0xffffffff}}, 0x31d, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x1})
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'ip6gre0\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000001580)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmmsg(r4, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x885)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000014c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000104010200000000000000000a00000105000100010000000800034000000f2b50fb3c9daf919cfe04c7f4fc1516"], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x4, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000, 0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000018c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r8, &(0x7f0000001900)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001940)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r8, 0x0, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x143, 0x136)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001500)='/sys/power/mem_sleep', 0x200040, 0x38)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b06606000000000000162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

1.476077359s ago: executing program 1 (id=140):
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x2, 0x6, 0x80}) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x2, 0x6, 0x80})
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080)
r1 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000108c0d0201400001020301090212000101000001090400000001033002"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./upper\x00', 0xdc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f00000002c0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
mount(0x0, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)='overlay\x00', 0x0, &(0x7f00000003c0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x46, 0x6, 0x10001000, 0x9, 0xcf, "471070", 0x64f3}})
syz_usb_control_io$rtl8150(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

1.358656761s ago: executing program 2 (id=141):
r0 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0xffff, 0x0, @loopback={0x0, 0x7ffffffe}}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000004c0), 0x40000000000017d, 0x888)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000340)={0x40, 0x0, 0x4, "373208bb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000400), 0x7, 0x121000) (async)
r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0x7, 0x121000)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000440)={0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00140007000096f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00140007000096f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000002c0)='./bus\x00') (async)
chdir(&(0x7f00000002c0)='./bus\x00')
r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in6=@empty}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8)
quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, r5, &(0x7f0000000680)='./file0\x00') (async)
quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, r5, &(0x7f0000000680)='./file0\x00')
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x82, 0x0) (async)
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x82, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

1.209314086s ago: executing program 0 (id=142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x80400)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xfffffffffffffffe}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d1f2b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 23)

784.58668ms ago: executing program 0 (id=143):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001200)={0x44, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0f0f09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0xc00)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x262)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x16, 0x4, "50f87673"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 2 (id=144):
socketpair(0x3, 0x4, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./tracefs_dir\x00', &(0x7f00000002c0)='tracefs\x00', 0x880040, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='3', 0x1)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket(0x1, 0x803, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x51, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/sys/kernel/nmi_watchdog\x00', 0x0, 0x0)
read(r6, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'bond_slave_0\x00', &(0x7f00000003c0)=@ethtool_wolinfo={0x5, 0x8, 0x4, "a3c3b25c4a77"}})
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000140)={r3, r2, 0x7, 0x0, 0x0, 0x50, 0x1e, 0x7, 0x5, 0x3, 0x0, 0xc, 'syz1\x00'})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0xa)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000200)={0x101ff, 0x2, 0x1ffe, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000605060100000000000000020000003400018014000180080001007f000001080002007f000001000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts.
[   20.831707][   T36] audit: type=1400 audit(1793062839.080:64): avc:  denied  { mounton } for  pid=285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.833016][  T285] cgroup: Unknown subsys name 'net'
[   20.854395][   T36] audit: type=1400 audit(1793062839.080:65): avc:  denied  { mount } for  pid=285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.881642][   T36] audit: type=1400 audit(1793062839.120:66): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.881833][  T285] cgroup: Unknown subsys name 'devices'
[   20.996730][  T285] cgroup: Unknown subsys name 'hugetlb'
[   21.002375][  T285] cgroup: Unknown subsys name 'rlimit'
[   21.114492][   T36] audit: type=1400 audit(1793062839.360:67): avc:  denied  { setattr } for  pid=285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.137760][   T36] audit: type=1400 audit(1793062839.360:68): avc:  denied  { mounton } for  pid=285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.147632][  T287] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.162705][   T36] audit: type=1400 audit(1793062839.360:69): avc:  denied  { mount } for  pid=285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.194228][   T36] audit: type=1400 audit(1793062839.430:70): avc:  denied  { relabelto } for  pid=287 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.219696][   T36] audit: type=1400 audit(1793062839.430:71): avc:  denied  { write } for  pid=287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.248526][   T36] audit: type=1400 audit(1793062839.500:72): avc:  denied  { read } for  pid=285 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.274085][   T36] audit: type=1400 audit(1793062839.500:73): avc:  denied  { open } for  pid=285 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.274466][  T285] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.533548][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.540751][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.547856][  T293] bridge_slave_0: entered allmulticast mode
[   22.554087][  T293] bridge_slave_0: entered promiscuous mode
[   22.565646][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.572693][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.579811][  T293] bridge_slave_1: entered allmulticast mode
[   22.586050][  T293] bridge_slave_1: entered promiscuous mode
[   22.606286][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.613339][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.620449][  T294] bridge_slave_0: entered allmulticast mode
[   22.626634][  T294] bridge_slave_0: entered promiscuous mode
[   22.636113][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.643152][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.650240][  T294] bridge_slave_1: entered allmulticast mode
[   22.656535][  T294] bridge_slave_1: entered promiscuous mode
[   22.662573][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.669637][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.676714][  T295] bridge_slave_0: entered allmulticast mode
[   22.682899][  T295] bridge_slave_0: entered promiscuous mode
[   22.690982][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.698064][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.705134][  T295] bridge_slave_1: entered allmulticast mode
[   22.711287][  T295] bridge_slave_1: entered promiscuous mode
[   22.742606][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.749701][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.756802][  T292] bridge_slave_0: entered allmulticast mode
[   22.763103][  T292] bridge_slave_0: entered promiscuous mode
[   22.769602][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.776668][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.783763][  T292] bridge_slave_1: entered allmulticast mode
[   22.790048][  T292] bridge_slave_1: entered promiscuous mode
[   22.930640][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.937731][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.945075][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.952097][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.966413][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.973460][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.980743][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.987775][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.008199][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.015274][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.022530][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.029565][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.055647][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.062806][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.070104][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.077146][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.103449][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.110796][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.118577][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.126586][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.134092][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.141673][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.155555][  T294] veth0_vlan: entered promiscuous mode
[   23.181025][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.188104][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.197435][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.204484][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.228441][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.235522][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.243067][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.250132][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.267733][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.274774][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.287420][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.294475][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.303722][  T294] veth1_macvtap: entered promiscuous mode
[   23.331635][  T295] veth0_vlan: entered promiscuous mode
[   23.344385][  T293] veth0_vlan: entered promiscuous mode
[   23.358524][  T295] veth1_macvtap: entered promiscuous mode
[   23.366613][  T292] veth0_vlan: entered promiscuous mode
[   23.385112][  T293] veth1_macvtap: entered promiscuous mode
[   23.412283][  T292] veth1_macvtap: entered promiscuous mode
[   23.422759][  T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.460774][  T314] rust_binder: 312:314 no such ref 0
[   23.476471][  T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.518685][  T317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   23.567733][    T9] smpboot: CPU 1 is now offline
[   23.678423][  T335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=335 comm=syz.2.7
[   23.738238][  T346] netlink: 'syz.3.10': attribute type 4 has an invalid length.
[   23.754283][  T346] kvm: kvm [345]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x8000000000001
[   23.965467][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.126434][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   24.135060][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   24.145481][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[   24.158751][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[   24.168411][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.176763][    T9] usb 3-1: Product: syz
[   24.181023][    T9] usb 3-1: Manufacturer: syz
[   24.186105][    T9] usb 3-1: SerialNumber: syz
[   24.398400][  T344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   24.428905][  T344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   24.464551][    T9] usb 3-1: Can't get UAC3 power state for id 10
[   24.490114][    T9] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[   24.509850][    T9] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[   24.525262][  T357] FAULT_INJECTION: forcing a failure.
[   24.525262][  T357] name failslab, interval 1, probability 0, space 0, times 1
[   24.560425][    T9] usb 3-1: USB disconnect, device number 2
[   24.587104][  T357] CPU: 0 UID: 0 PID: 357 Comm: syz.0.13 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   24.587123][  T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   24.587133][  T357] Call Trace:
[   24.587137][  T357]  <TASK>
[   24.587141][  T357]  __dump_stack+0x21/0x30
[   24.587162][  T357]  dump_stack_lvl+0x140/0x1c0
[   24.587177][  T357]  ? __cfi_dump_stack_lvl+0x10/0x10
[   24.587192][  T357]  ? _raw_spin_lock_irqsave+0xc1/0x160
[   24.587204][  T357]  ? security_compute_av+0xc5f/0xfb0
[   24.587217][  T357]  dump_stack+0x19/0x20
[   24.587230][  T357]  should_fail_ex+0x3c2/0x510
[   24.587239][  T357]  should_failslab+0xac/0x100
[   24.587251][  T357]  __kmalloc_cache_noprof+0x41/0x470
[   24.587266][  T357]  ? tty_alloc_file+0x5f/0x140
[   24.587280][  T357]  tty_alloc_file+0x5f/0x140
[   24.587292][  T357]  ptmx_open+0x59/0x2f0
[   24.587304][  T357]  chrdev_open+0x4e8/0x610
[   24.587317][  T357]  ? __cfi_chrdev_open+0x10/0x10
[   24.587331][  T357]  ? bpf_lsm_file_open+0xd/0x20
[   24.587349][  T357]  ? __cfi_chrdev_open+0x10/0x10
[   24.587363][  T357]  do_dentry_open+0x97f/0x1510
[   24.587377][  T357]  vfs_open+0x86/0x240
[   24.587387][  T357]  ? __cfi_vfs_open+0x10/0x10
[   24.587398][  T357]  ? may_open+0x352/0x430
[   24.587409][  T357]  path_openat+0x2c49/0x35a0
[   24.587421][  T357]  ? kasan_save_alloc_info+0x3a/0x50
[   24.587433][  T357]  ? getname+0x1b/0x30
[   24.587446][  T357]  ? x64_sys_call+0xe69/0x2ee0
[   24.587456][  T357]  ? do_syscall_64+0x57/0xf0
[   24.587467][  T357]  ? do_filp_open+0x440/0x440
[   24.587478][  T357]  do_filp_open+0x1f2/0x440
[   24.587488][  T357]  ? __cfi_do_filp_open+0x10/0x10
[   24.587500][  T357]  ? alloc_fd+0x4c1/0x570
[   24.587514][  T357]  do_sys_openat2+0x134/0x1d0
[   24.587525][  T357]  ? fput+0x1a4/0x230
[   24.587534][  T357]  ? do_sys_open+0x100/0x100
[   24.587546][  T357]  __x64_sys_openat+0x13a/0x170
[   24.587557][  T357]  x64_sys_call+0xe69/0x2ee0
[   24.587567][  T357]  do_syscall_64+0x57/0xf0
[   24.587576][  T357]  ? clear_bhb_loop+0x50/0xa0
[   24.587589][  T357]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   24.587602][  T357] RIP: 0033:0x7f411e19f559
[   24.587615][  T357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   24.587623][  T357] RSP: 002b:00007f411efbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   24.587638][  T357] RAX: ffffffffffffffda RBX: 00007f411e425fa0 RCX: 00007f411e19f559
[   24.587646][  T357] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: ffffffffffffff9c
[   24.587653][  T357] RBP: 00007f411e236b20 R08: 0000000000000000 R09: 0000000000000000
[   24.587660][  T357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   24.587666][  T357] R13: 00007f411e426038 R14: 00007f411e425fa0 R15: 00007ffc2d252c28
[   24.587676][  T357]  </TASK>
[   25.194672][  T373] fuse: Bad value for 'fd'
[   25.205302][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   25.237027][  T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.247467][  T368] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   25.334915][   T10] usb 2-1: device descriptor read/64, error -71
[   25.396070][  T310] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[   25.404371][  T310] usb 4-1: config 0 has no interface number 0
[   25.410674][  T310] usb 4-1: config 0 interface 128 has no altsetting 0
[   25.418575][  T368] usb 1-1: config 0 has an invalid interface number: 37 but max is 0
[   25.426947][  T368] usb 1-1: config 0 has no interface number 0
[   25.433172][  T368] usb 1-1: config 0 interface 37 has no altsetting 0
[   25.440574][  T310] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=7f.4e
[   25.450134][  T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.458613][  T310] usb 4-1: Product: syz
[   25.463284][  T310] usb 4-1: Manufacturer: syz
[   25.468088][  T368] usb 1-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=b7.f3
[   25.477487][  T310] usb 4-1: SerialNumber: syz
[   25.482098][  T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.492585][  T310] usb 4-1: config 0 descriptor??
[   25.498248][  T368] usb 1-1: Product: syz
[   25.505827][  T368] usb 1-1: Manufacturer: syz
[   25.510521][  T368] usb 1-1: SerialNumber: syz
[   25.518814][  T368] usb 1-1: config 0 descriptor??
[   25.584904][   T10] usb 2-1: device descriptor read/64, error -71
[   25.718878][  T310] uvcvideo 4-1:0.128: Found Unit with invalid ID 0
[   25.732519][  T310] usb 4-1: USB disconnect, device number 2
[   25.742220][  T368] uvcvideo 1-1:0.37: Found multiple Units with ID 1
[   25.750228][  T368] usb 1-1: Found UVC 0.00 device syz (413c:8218)
[   25.757531][  T368] usb 1-1: No valid video chain found.
[   25.767134][  T368] usb 1-1: USB disconnect, device number 2
[   25.824916][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   25.954912][   T10] usb 2-1: device descriptor read/64, error -71
[   26.095164][   T36] kauditd_printk_skb: 74 callbacks suppressed
[   26.095175][   T36] audit: type=1400 audit(1793062844.350:148): avc:  denied  { write } for  pid=390 comm="syz.2.22" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   26.152081][  T391] FAULT_INJECTION: forcing a failure.
[   26.152081][  T391] name failslab, interval 1, probability 0, space 0, times 0
[   26.165706][  T391] CPU: 0 UID: 0 PID: 391 Comm: syz.2.22 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   26.165726][  T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   26.165733][  T391] Call Trace:
[   26.165737][  T391]  <TASK>
[   26.165750][  T391]  __dump_stack+0x21/0x30
[   26.165770][  T391]  dump_stack_lvl+0x140/0x1c0
[   26.165784][  T391]  ? __cfi_dump_stack_lvl+0x10/0x10
[   26.165799][  T391]  dump_stack+0x19/0x20
[   26.165812][  T391]  should_fail_ex+0x3c2/0x510
[   26.165823][  T391]  should_failslab+0xac/0x100
[   26.165833][  T391]  kmem_cache_alloc_noprof+0x42/0x410
[   26.165847][  T391]  ? dup_fd+0x651/0x9c0
[   26.165860][  T391]  ? copy_fs_struct+0x5d/0x2d0
[   26.165874][  T391]  copy_fs_struct+0x5d/0x2d0
[   26.165886][  T391]  ? copy_fs+0x67/0x160
[   26.165899][  T391]  copy_fs+0x6f/0x160
[   26.165911][  T391]  copy_process+0x1220/0x3370
[   26.165925][  T391]  ? __cfi_copy_process+0x10/0x10
[   26.165938][  T391]  kernel_clone+0x233/0x810
[   26.165952][  T391]  ? __cfi_kernel_clone+0x10/0x10
[   26.165965][  T391]  ? do_futex+0x32a/0x510
[   26.165977][  T391]  __x64_sys_clone+0x1b7/0x230
[   26.165990][  T391]  ? __cfi___x64_sys_clone+0x10/0x10
[   26.166004][  T391]  ? __kasan_check_write+0x18/0x20
[   26.166017][  T391]  ? fpregs_restore_userregs+0x11c/0x260
[   26.166029][  T391]  ? switch_fpu_return+0x12/0x20
[   26.166041][  T391]  x64_sys_call+0x2b3c/0x2ee0
[   26.166051][  T391]  do_syscall_64+0x57/0xf0
[   26.166061][  T391]  ? clear_bhb_loop+0x50/0xa0
[   26.166075][  T391]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   26.166088][  T391] RIP: 0033:0x7fb32e39f559
[   26.166097][  T391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   26.166105][  T391] RSP: 002b:00007fb32f195fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   26.166117][  T391] RAX: ffffffffffffffda RBX: 00007fb32e625fa0 RCX: 00007fb32e39f559
[   26.166125][  T391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[   26.166131][  T391] RBP: 00007fb32e436b20 R08: 0000000000000000 R09: 0000000000000000
[   26.166137][  T391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   26.166143][  T391] R13: 00007fb32e626038 R14: 00007fb32e625fa0 R15: 00007ffd90c8c358
[   26.166151][  T391]  </TASK>
[   26.166903][   T36] audit: type=1400 audit(1793062844.420:149): avc:  denied  { create } for  pid=390 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.424460][   T10] usb 2-1: device descriptor read/64, error -71
[   26.532662][  T408] =======================================================
[   26.532662][  T408] WARNING: The mand mount option has been deprecated and
[   26.532662][  T408]          and is ignored by this kernel. Remove the mand
[   26.532662][  T408]          option from the mount to silence this warning.
[   26.532662][  T408] =======================================================
[   26.580700][   T10] usb usb2-port1: attempt power cycle
[   26.619525][  T422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'.
[   26.711739][   T36] audit: type=1400 audit(1793062844.690:150): avc:  denied  { read } for  pid=398 comm="syz.3.24" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   26.752873][   T36] audit: type=1400 audit(1793062844.690:151): avc:  denied  { open } for  pid=398 comm="syz.3.24" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   26.796553][   T36] audit: type=1400 audit(1793062844.690:152): avc:  denied  { create } for  pid=398 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.816732][  T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   26.852770][   T36] audit: type=1400 audit(1793062844.690:153): avc:  denied  { write } for  pid=398 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.903360][   T36] audit: type=1400 audit(1793062844.690:154): avc:  denied  { read } for  pid=398 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.924930][  T367] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   26.934927][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   26.954507][   T36] audit: type=1400 audit(1793062844.710:155): avc:  denied  { write } for  pid=401 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   26.994757][   T36] audit: type=1400 audit(1793062844.710:156): avc:  denied  { nlmsg_write } for  pid=401 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   27.024943][   T10] usb 2-1: device descriptor read/8, error -71
[   27.036968][  T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.047665][  T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   27.065061][   T36] audit: type=1400 audit(1793062844.750:157): avc:  denied  { associate } for  pid=404 comm="syz.0.25" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   27.105422][  T310] usb 1-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40
[   27.114598][  T310] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[   27.123296][  T367] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.134971][  T367] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768
[   27.155272][  T310] usb 1-1: Product: syz
[   27.159493][  T367] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   27.172423][  T310] usb 1-1: Manufacturer: syz
[   27.182501][   T10] usb 2-1: device descriptor read/8, error -71
[   27.188894][  T310] usb 1-1: SerialNumber: syz
[   27.204824][  T367] usb 3-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00
[   27.214855][  T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.223229][  T367] usb 3-1: Product: syz
[   27.234907][  T367] usb 3-1: Manufacturer: syz
[   27.245035][  T367] usb 3-1: SerialNumber: syz
[   27.257851][  T367] usb-storage 3-1:1.0: USB Mass Storage device detected
[   27.276714][  T367] scsi host1: usb-storage 3-1:1.0
[   27.407235][  T310] usb 1-1: 0:1 : does not exist
[   27.412130][  T310] usb 1-1: 0:2 : does not exist
[   27.419607][  T310] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4)
[   27.427218][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   27.447270][  T310] usb 1-1: 4:0: failed to get current value for ch 1 (-22)
[   27.455843][   T10] usb 2-1: device descriptor read/8, error -71
[   27.490562][  T310] usb 1-1: USB disconnect, device number 3
[   27.585875][   T10] usb 2-1: device descriptor read/8, error -71
[   27.694995][   T10] usb usb2-port1: unable to enumerate USB device
[   27.965553][  T430] kvm: pic: level sensitive irq not supported
[   27.965610][  T430] kvm: pic: non byte read
[   27.992610][  T367] usb 3-1: USB disconnect, device number 3
[   28.100577][  T442] futex_wake_op: syz.0.40 tries to shift op by 144; fix this program
[   28.203560][  T447] syzkaller1: entered promiscuous mode
[   28.215245][  T447] syzkaller1: entered allmulticast mode
[   28.304903][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   28.466050][   T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   28.477604][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.263345][  T467] new mount options do not match the existing superblock, will be ignored
[   29.544906][  T367] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   29.704898][  T367] usb 1-1: Using ep0 maxpacket: 32
[   29.715680][  T367] usb 1-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8
[   29.734938][  T367] usb 1-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   29.757993][  T367] usb 1-1: config 1 interface 0 has no altsetting 0
[   29.775957][  T367] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   29.794938][  T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.813122][  T367] usb 1-1: Product: syz
[   29.817440][  T367] usb 1-1: Manufacturer: syz
[   29.822031][  T367] usb 1-1: SerialNumber: syz
[   29.837902][  T470] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   30.051966][   T10] usb 2-1: Cannot set autoneg
[   30.062020][   T10] MOSCHIP usb-ethernet driver 2-1:7.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   30.076216][  T367] usb 1-1: USB disconnect, device number 4
[   30.097410][   T10] usb 2-1: USB disconnect, device number 6
[   30.594997][  T477] capability: warning: `syz.0.50' uses 32-bit capabilities (legacy support in use)
[   31.196056][  T500] 9p: Unknown access argument 00000000000000065535¶gÊ„…èåw§š²ìŽåÆû—¨(=Çk~-¥¸zÖÑNÙÕ~N–ä^QÕ~1±1d>a(înë!Ò[H”»£.‡�€.«eÞ–9SÒ†O`5/QÈÝêBXbã'Š�ŒŽ&ƒ°
È­öø¥—ñßUðXfšÏ|ðŽŒÄ: -22
[   31.213408][   T36] kauditd_printk_skb: 24 callbacks suppressed
[   31.213419][   T36] audit: type=1400 audit(1793062849.450:182): avc:  denied  { getopt } for  pid=499 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.294894][   T36] audit: type=1400 audit(1793062849.540:183): avc:  denied  { write } for  pid=501 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   31.315121][  T367] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   31.322606][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   31.364902][   T36] audit: type=1400 audit(1793062849.540:184): avc:  denied  { mount } for  pid=501 comm="syz.2.58" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   31.405037][   T36] audit: type=1400 audit(1793062849.540:185): avc:  denied  { search } for  pid=501 comm="syz.2.58" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   31.455064][   T36] audit: type=1400 audit(1793062849.540:186): avc:  denied  { write } for  pid=501 comm="syz.2.58" name="trace_marker" dev="tracefs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   31.495832][  T367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.506829][   T10] usb 2-1: Using ep0 maxpacket: 32
[   31.517735][   T36] audit: type=1400 audit(1793062849.540:187): avc:  denied  { open } for  pid=501 comm="syz.2.58" path="/15/mnt/trace_marker" dev="tracefs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   31.544917][  T367] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   31.564319][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.575283][  T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.585479][   T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[   31.594506][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.602545][  T368] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   31.615099][  T367] usb 1-1: config 0 descriptor??
[   31.625625][   T36] audit: type=1400 audit(1793062849.540:188): avc:  denied  { read } for  pid=501 comm="syz.2.58" name="trace_pipe" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   31.667029][   T10] usb 2-1: config 0 descriptor??
[   31.682139][   T36] audit: type=1400 audit(1793062849.590:189): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   31.777066][  T368] usb 3-1: Using ep0 maxpacket: 8
[   31.793763][  T368] usb 3-1: unable to get BOS descriptor or descriptor too short
[   31.802129][  T368] usb 3-1: config 2 has an invalid interface number: 34 but max is 0
[   31.811578][  T368] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   31.835292][  T368] usb 3-1: config 2 has no interface number 0
[   31.841416][  T368] usb 3-1: config 2 interface 34 has no altsetting 0
[   31.866152][  T368] usb 3-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=67.ec
[   31.884897][  T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.903072][  T368] usb 3-1: Product: syz
[   31.907366][  T368] usb 3-1: Manufacturer: syz
[   31.911987][  T368] usb 3-1: SerialNumber: syz
[   32.025492][   T36] audit: type=1400 audit(1793062850.280:190): avc:  denied  { write } for  pid=497 comm="syz.0.56" path="socket:[6096]" dev="sockfs" ino=6096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   32.049382][  T367] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[   32.060461][  T367] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input4
[   32.093767][   T10] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0002/input/input5
[   32.143664][  T368] usb 3-1: USB disconnect, device number 4
[   32.166802][  T367] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   32.180367][   T36] audit: type=1400 audit(1793062850.420:191): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.208613][   T10] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0042.0002/input/input6
[   32.253522][   T10] uclogic 0003:5543:0042.0002: input,hidraw1: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.1-1/input0
[   32.546228][  T368] usb 1-1: USB disconnect, device number 5
[   32.794507][  T512] netlink: 'syz.2.61': attribute type 12 has an invalid length.
[   33.588409][  T516] FAULT_INJECTION: forcing a failure.
[   33.588409][  T516] name failslab, interval 1, probability 0, space 0, times 0
[   33.619304][  T519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.635028][  T516] CPU: 0 UID: 0 PID: 516 Comm: syz.0.63 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   33.635054][  T516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   33.635061][  T516] Call Trace:
[   33.635065][  T516]  <TASK>
[   33.635069][  T516]  __dump_stack+0x21/0x30
[   33.635090][  T516]  dump_stack_lvl+0x140/0x1c0
[   33.635104][  T516]  ? __cfi_dump_stack_lvl+0x10/0x10
[   33.635118][  T516]  dump_stack+0x19/0x20
[   33.635131][  T516]  should_fail_ex+0x3c2/0x510
[   33.635142][  T516]  should_failslab+0xac/0x100
[   33.635152][  T516]  kmem_cache_alloc_noprof+0x42/0x410
[   33.635166][  T516]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   33.635177][  T516]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   33.635187][  T516]  ? mutex_unlock+0x90/0x240
[   33.635200][  T516]  kvm_mmu_topup_memory_cache+0x24/0x30
[   33.635209][  T516]  kvm_mmu_load+0xa1/0x2900
[   33.635223][  T516]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   33.635238][  T516]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   33.635251][  T516]  ? kvm_apic_has_interrupt+0x77a/0x790
[   33.635265][  T516]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   33.635276][  T516]  vcpu_run+0x4d56/0x7810
[   33.635290][  T516]  ? kvm_sched_clock_read+0x15/0x30
[   33.635309][  T516]  ? signal_pending+0xc0/0xc0
[   33.635321][  T516]  ? __kasan_check_write+0x18/0x20
[   33.635335][  T516]  ? xfd_validate_state+0x68/0x140
[   33.635349][  T516]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   33.635360][  T516]  ? __kasan_check_write+0x18/0x20
[   33.635372][  T516]  ? fpregs_mark_activate+0x68/0x160
[   33.635384][  T516]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   33.635396][  T516]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   33.635408][  T516]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   33.635422][  T516]  ? _parse_integer_limit+0x195/0x1e0
[   33.635437][  T516]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   33.635450][  T516]  ? kstrtoull+0x13b/0x1e0
[   33.635463][  T516]  ? kstrtouint+0x78/0xf0
[   33.635477][  T516]  ? ioctl_has_perm+0x1bc/0x500
[   33.635490][  T516]  ? __asan_memcpy+0x5a/0x80
[   33.635502][  T516]  ? ioctl_has_perm+0x408/0x500
[   33.635518][  T516]  ? has_cap_mac_admin+0xd0/0xd0
[   33.635531][  T516]  ? __kasan_check_write+0x18/0x20
[   33.635543][  T516]  ? mutex_lock_killable+0x97/0x1d0
[   33.635555][  T516]  ? __cfi_mutex_lock_killable+0x10/0x10
[   33.635567][  T516]  ? proc_fail_nth_write+0x184/0x220
[   33.635579][  T516]  kvm_vcpu_ioctl+0xa43/0x1000
[   33.635590][  T516]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   33.635600][  T516]  ? __cfi_vfs_write+0x10/0x10
[   33.635613][  T516]  ? __kasan_check_write+0x18/0x20
[   33.635625][  T516]  ? mutex_unlock+0x90/0x240
[   33.635637][  T516]  ? __cfi_mutex_unlock+0x10/0x10
[   33.635649][  T516]  ? __fget_files+0x2bc/0x330
[   33.635658][  T516]  ? bpf_lsm_file_ioctl+0xd/0x20
[   33.635669][  T516]  ? security_file_ioctl+0x3e/0x110
[   33.635682][  T516]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   33.635692][  T516]  __se_sys_ioctl+0x126/0x1b0
[   33.635701][  T516]  __x64_sys_ioctl+0x7f/0xa0
[   33.635710][  T516]  x64_sys_call+0x1878/0x2ee0
[   33.635720][  T516]  do_syscall_64+0x57/0xf0
[   33.635729][  T516]  ? clear_bhb_loop+0x50/0xa0
[   33.635743][  T516]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   33.635755][  T516] RIP: 0033:0x7f411e19f559
[   33.635765][  T516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.635774][  T516] RSP: 002b:00007f411efbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   33.635785][  T516] RAX: ffffffffffffffda RBX: 00007f411e425fa0 RCX: 00007f411e19f559
[   33.635793][  T516] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   33.635799][  T516] RBP: 00007f411efbd090 R08: 0000000000000000 R09: 0000000000000000
[   33.635806][  T516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   33.635812][  T516] R13: 00007f411e426038 R14: 00007f411e425fa0 R15: 00007ffc2d252c28
[   33.635820][  T516]  </TASK>
[   33.643494][  T519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.157080][  T368] usb 2-1: USB disconnect, device number 7
[   34.365809][  T367] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   34.634918][  T368] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   34.685819][  T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.696788][  T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.715850][  T367] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   34.734920][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   34.742500][  T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.764805][  T367] usb 3-1: config 0 descriptor??
[   34.785829][  T368] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[   34.794670][  T368] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   34.817804][  T368] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[   34.834919][  T368] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   34.854248][  T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.876684][    T9] usb 1-1: device descriptor read/64, error -71
[   34.883183][  T368] usb 2-1: config 0 descriptor??
[   34.891859][  T368] usb 2-1: Found UVC 9.00 device <unnamed> (046d:0825)
[   34.910211][  T368] usb 2-1: No streaming interface found for terminal 2.
[   35.093971][  T368] usb 2-1: USB disconnect, device number 8
[   35.115544][    T9] usb 1-1: device descriptor read/64, error -71
[   35.173921][  T367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   35.182541][  T367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   35.200064][  T367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   35.214971][  T367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   35.232530][  T367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[   35.252768][  T367] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[   35.355637][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   35.372448][  T367] playstation 0003:054C:0DF2.0003: Invalid byte count transferred, expected 64 got 20
[   35.382200][  T367] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense firmware info: -22
[   35.402325][  T367] playstation 0003:054C:0DF2.0003: Failed to get firmware info from DualSense
[   35.422490][  T367] playstation 0003:054C:0DF2.0003: Failed to create dualsense.
[   35.433588][  T367] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -22
[   35.484927][    T9] usb 1-1: device descriptor read/64, error -71
[   35.626982][  T533] input: syz1 as /devices/virtual/input/input7
[   35.657574][  T538] 9pnet_fd: Insufficient options for proto=fd
[   35.684233][  T536] netlink: 'syz.1.68': attribute type 4 has an invalid length.
[   35.719450][  T536] netlink: 17 bytes leftover after parsing attributes in process `syz.1.68'.
[   35.728277][    T9] usb 1-1: device descriptor read/64, error -71
[   35.845001][    T9] usb usb1-port1: attempt power cycle
[   36.043162][  T549] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3099539714 (99185270848 ns) > initial count (64318035328 ns). Using initial count to start timer.
[   36.178215][  T555] mmap: syz.1.73 (555) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   36.195097][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   36.225829][    T9] usb 1-1: device descriptor read/8, error -71
[   36.256124][  T558] FAULT_INJECTION: forcing a failure.
[   36.256124][  T558] name failslab, interval 1, probability 0, space 0, times 0
[   36.300426][  T558] CPU: 0 UID: 0 PID: 558 Comm: syz.1.74 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   36.300446][  T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   36.300452][  T558] Call Trace:
[   36.300456][  T558]  <TASK>
[   36.300460][  T558]  __dump_stack+0x21/0x30
[   36.300481][  T558]  dump_stack_lvl+0x140/0x1c0
[   36.300495][  T558]  ? __cfi_dump_stack_lvl+0x10/0x10
[   36.300510][  T558]  dump_stack+0x19/0x20
[   36.300523][  T558]  should_fail_ex+0x3c2/0x510
[   36.300533][  T558]  should_failslab+0xac/0x100
[   36.300543][  T558]  kmem_cache_alloc_noprof+0x42/0x410
[   36.300557][  T558]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   36.300567][  T558]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   36.300577][  T558]  ? mutex_unlock+0x90/0x240
[   36.300590][  T558]  kvm_mmu_topup_memory_cache+0x24/0x30
[   36.300609][  T558]  kvm_mmu_load+0xa1/0x2900
[   36.300624][  T558]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   36.300639][  T558]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   36.300652][  T558]  ? kvm_apic_has_interrupt+0x77a/0x790
[   36.300665][  T558]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   36.300676][  T558]  vcpu_run+0x4d56/0x7810
[   36.300691][  T558]  ? kvm_sched_clock_read+0x15/0x30
[   36.300710][  T558]  ? signal_pending+0xc0/0xc0
[   36.300723][  T558]  ? __kasan_check_write+0x18/0x20
[   36.300736][  T558]  ? xfd_validate_state+0x68/0x140
[   36.300750][  T558]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   36.300762][  T558]  ? __kasan_check_write+0x18/0x20
[   36.300774][  T558]  ? fpregs_mark_activate+0x68/0x160
[   36.300786][  T558]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   36.300798][  T558]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   36.300810][  T558]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   36.300824][  T558]  ? _parse_integer_limit+0x195/0x1e0
[   36.300839][  T558]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   36.300852][  T558]  ? kstrtoull+0x13b/0x1e0
[   36.300866][  T558]  ? kstrtouint+0x78/0xf0
[   36.300879][  T558]  ? ioctl_has_perm+0x1bc/0x500
[   36.300892][  T558]  ? __asan_memcpy+0x5a/0x80
[   36.300904][  T558]  ? ioctl_has_perm+0x408/0x500
[   36.300917][  T558]  ? has_cap_mac_admin+0xd0/0xd0
[   36.300930][  T558]  ? __kasan_check_write+0x18/0x20
[   36.300942][  T558]  ? mutex_lock_killable+0x97/0x1d0
[   36.300955][  T558]  ? __cfi_mutex_lock_killable+0x10/0x10
[   36.300967][  T558]  ? proc_fail_nth_write+0x184/0x220
[   36.300979][  T558]  kvm_vcpu_ioctl+0xa43/0x1000
[   36.300990][  T558]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   36.301000][  T558]  ? __cfi_vfs_write+0x10/0x10
[   36.301013][  T558]  ? __kasan_check_write+0x18/0x20
[   36.301025][  T558]  ? mutex_unlock+0x90/0x240
[   36.301036][  T558]  ? __cfi_mutex_unlock+0x10/0x10
[   36.301049][  T558]  ? __fget_files+0x2bc/0x330
[   36.301058][  T558]  ? bpf_lsm_file_ioctl+0xd/0x20
[   36.301068][  T558]  ? security_file_ioctl+0x3e/0x110
[   36.301082][  T558]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   36.301091][  T558]  __se_sys_ioctl+0x126/0x1b0
[   36.301101][  T558]  __x64_sys_ioctl+0x7f/0xa0
[   36.301110][  T558]  x64_sys_call+0x1878/0x2ee0
[   36.301120][  T558]  do_syscall_64+0x57/0xf0
[   36.301129][  T558]  ? clear_bhb_loop+0x50/0xa0
[   36.301143][  T558]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   36.301155][  T558] RIP: 0033:0x7f474c19f559
[   36.301165][  T558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.301173][  T558] RSP: 002b:00007f474d11b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   36.301185][  T558] RAX: ffffffffffffffda RBX: 00007f474c425fa0 RCX: 00007f474c19f559
[   36.301193][  T558] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   36.301199][  T558] RBP: 00007f474d11b090 R08: 0000000000000000 R09: 0000000000000000
[   36.301206][  T558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   36.301212][  T558] R13: 00007f474c426038 R14: 00007f474c425fa0 R15: 00007fffe59232a8
[   36.301220][  T558]  </TASK>
[   36.690305][  T368] usb 3-1: USB disconnect, device number 5
[   36.764729][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   36.764740][   T36] audit: type=1400 audit(1793062855.010:204): avc:  denied  { create } for  pid=561 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   36.815792][    T9] usb 1-1: device descriptor read/8, error -71
[   36.837364][   T36] audit: type=1400 audit(1793062855.090:205): avc:  denied  { create } for  pid=565 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   36.985026][  T367] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   37.033177][   T36] audit: type=1400 audit(1793062855.280:206): avc:  denied  { setattr } for  pid=571 comm="syz.2.79" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   37.055917][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   37.064179][  T572] netlink: 44 bytes leftover after parsing attributes in process `syz.2.79'.
[   37.085952][    T9] usb 1-1: device descriptor read/8, error -71
[   37.136885][  T367] usb 2-1: unable to get BOS descriptor or descriptor too short
[   37.145568][  T367] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.162905][  T367] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   37.185268][  T367] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   37.204485][  T367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.215102][  T367] usb 2-1: Product: syz
[   37.224664][  T367] usb 2-1: Manufacturer: syz
[   37.229770][    T9] usb 1-1: device descriptor read/8, error -71
[   37.245009][  T367] usb 2-1: SerialNumber: syz
[   37.344973][    T9] usb usb1-port1: unable to enumerate USB device
[   37.384939][  T368] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   37.458121][  T367] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   37.475118][  T367] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[   37.482977][  T367] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   37.506693][   T36] audit: type=1400 audit(1793062855.760:207): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   37.548788][  T368] usb 3-1: config index 0 descriptor too short (expected 1051, got 27)
[   37.559193][  T367] usb 2-1: USB disconnect, device number 9
[   37.581298][  T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[   37.598100][  T521] udevd[521]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.613833][   T36] audit: type=1400 audit(1793062855.800:208): avc:  denied  { map } for  pid=579 comm="syz.0.82" path="socket:[7207]" dev="sockfs" ino=7207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   37.664940][  T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 16394, setting to 64
[   37.696439][  T368] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[   37.715449][   T36] audit: type=1400 audit(1793062855.800:209): avc:  denied  { read } for  pid=579 comm="syz.0.82" path="socket:[7207]" dev="sockfs" ino=7207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   37.742466][  T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.760952][  T368] usb 3-1: Product: syz
[   37.767357][  T585] FAULT_INJECTION: forcing a failure.
[   37.767357][  T585] name failslab, interval 1, probability 0, space 0, times 0
[   37.784918][  T368] usb 3-1: Manufacturer: syz
[   37.789555][  T368] usb 3-1: SerialNumber: syz
[   37.806261][  T368] usb 3-1: config 0 descriptor??
[   37.811305][  T585] CPU: 0 UID: 0 PID: 585 Comm: syz.0.84 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   37.811322][  T585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   37.811330][  T585] Call Trace:
[   37.811333][  T585]  <TASK>
[   37.811338][  T585]  __dump_stack+0x21/0x30
[   37.811358][  T585]  dump_stack_lvl+0x140/0x1c0
[   37.811372][  T585]  ? __cfi_dump_stack_lvl+0x10/0x10
[   37.811387][  T585]  dump_stack+0x19/0x20
[   37.811400][  T585]  should_fail_ex+0x3c2/0x510
[   37.811410][  T585]  should_failslab+0xac/0x100
[   37.811420][  T585]  kmem_cache_alloc_noprof+0x42/0x410
[   37.811434][  T585]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   37.811444][  T585]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   37.811454][  T585]  ? mutex_unlock+0x90/0x240
[   37.811473][  T585]  kvm_mmu_topup_memory_cache+0x24/0x30
[   37.811483][  T585]  kvm_mmu_load+0xa1/0x2900
[   37.811497][  T585]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   37.811512][  T585]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   37.811524][  T585]  ? kvm_apic_has_interrupt+0x77a/0x790
[   37.811538][  T585]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   37.811548][  T585]  vcpu_run+0x4d56/0x7810
[   37.811568][  T585]  ? signal_pending+0xc0/0xc0
[   37.811580][  T585]  ? __kasan_check_write+0x18/0x20
[   37.811594][  T585]  ? xfd_validate_state+0x68/0x140
[   37.811608][  T585]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   37.811620][  T585]  ? __kasan_check_write+0x18/0x20
[   37.811632][  T585]  ? fpregs_mark_activate+0x68/0x160
[   37.811644][  T585]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   37.811656][  T585]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   37.811670][  T585]  ? _parse_integer_limit+0x195/0x1e0
[   37.811685][  T585]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   37.811698][  T585]  ? kstrtoull+0x13b/0x1e0
[   37.811711][  T585]  ? kstrtouint+0x78/0xf0
[   37.811725][  T585]  ? ioctl_has_perm+0x1bc/0x500
[   37.811738][  T585]  ? __asan_memcpy+0x5a/0x80
[   37.811751][  T585]  ? ioctl_has_perm+0x408/0x500
[   37.811763][  T585]  ? has_cap_mac_admin+0xd0/0xd0
[   37.811776][  T585]  ? __kasan_check_write+0x18/0x20
[   37.811788][  T585]  ? mutex_lock_killable+0x97/0x1d0
[   37.811801][  T585]  ? __cfi_mutex_lock_killable+0x10/0x10
[   37.811813][  T585]  ? proc_fail_nth_write+0x184/0x220
[   37.811825][  T585]  kvm_vcpu_ioctl+0xa43/0x1000
[   37.811836][  T585]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   37.811846][  T585]  ? __cfi_vfs_write+0x10/0x10
[   37.811859][  T585]  ? __kasan_check_write+0x18/0x20
[   37.811871][  T585]  ? mutex_unlock+0x90/0x240
[   37.811882][  T585]  ? __cfi_mutex_unlock+0x10/0x10
[   37.811895][  T585]  ? __fget_files+0x2bc/0x330
[   37.811904][  T585]  ? bpf_lsm_file_ioctl+0xd/0x20
[   37.811914][  T585]  ? security_file_ioctl+0x3e/0x110
[   37.811926][  T585]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   37.811936][  T585]  __se_sys_ioctl+0x126/0x1b0
[   37.811946][  T585]  __x64_sys_ioctl+0x7f/0xa0
[   37.811955][  T585]  x64_sys_call+0x1878/0x2ee0
[   37.811964][  T585]  do_syscall_64+0x57/0xf0
[   37.811974][  T585]  ? clear_bhb_loop+0x50/0xa0
[   37.811988][  T585]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   37.812001][  T585] RIP: 0033:0x7f411e19f559
[   37.812010][  T585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.812018][  T585] RSP: 002b:00007f411efbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   37.812030][  T585] RAX: ffffffffffffffda RBX: 00007f411e425fa0 RCX: 00007f411e19f559
[   37.812037][  T585] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   37.812044][  T585] RBP: 00007f411efbd090 R08: 0000000000000000 R09: 0000000000000000
[   37.812050][  T585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   37.812056][  T585] R13: 00007f411e426038 R14: 00007f411e425fa0 R15: 00007ffc2d252c28
[   37.812065][  T585]  </TASK>
[   38.846911][   T36] audit: type=1400 audit(1793062857.100:210): avc:  denied  { ioctl } for  pid=596 comm="syz.1.88" path="socket:[7318]" dev="sockfs" ino=7318 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   38.894923][   T36] audit: type=1400 audit(1793062857.100:211): avc:  denied  { write } for  pid=596 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   38.954713][  T575] P: Can't lookup blockdev
[   38.985650][   T10] usb 3-1: USB disconnect, device number 6
[   39.084936][  T368] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   39.133193][  T609] IPv6: NLM_F_CREATE should be specified when creating new route
[   39.166533][  T613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.91'.
[   39.185827][  T613] FAULT_INJECTION: forcing a failure.
[   39.185827][  T613] name failslab, interval 1, probability 0, space 0, times 0
[   39.212843][  T613] CPU: 0 UID: 0 PID: 613 Comm: syz.1.91 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   39.212866][  T613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   39.212874][  T613] Call Trace:
[   39.212878][  T613]  <TASK>
[   39.212882][  T613]  __dump_stack+0x21/0x30
[   39.212904][  T613]  dump_stack_lvl+0x140/0x1c0
[   39.212919][  T613]  ? __cfi_dump_stack_lvl+0x10/0x10
[   39.212936][  T613]  ? kasan_save_track+0x4f/0x80
[   39.212950][  T613]  ? kasan_save_track+0x3e/0x80
[   39.212964][  T613]  dump_stack+0x19/0x20
[   39.212978][  T613]  should_fail_ex+0x3c2/0x510
[   39.212988][  T613]  should_failslab+0xac/0x100
[   39.212998][  T613]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   39.213012][  T613]  ? __d_alloc+0x42/0x8c0
[   39.213025][  T613]  __d_alloc+0x42/0x8c0
[   39.213037][  T613]  ? _raw_spin_lock+0x92/0x120
[   39.213048][  T613]  d_alloc_pseudo+0x23/0xc0
[   39.213060][  T613]  alloc_file_pseudo+0xde/0x1f0
[   39.213072][  T613]  ? __cfi_alloc_file_pseudo+0x10/0x10
[   39.213083][  T613]  anon_inode_getfd+0xda/0x1d0
[   39.213094][  T613]  __se_sys_fsopen+0x260/0x390
[   39.213107][  T613]  __x64_sys_fsopen+0x5f/0x80
[   39.213118][  T613]  x64_sys_call+0x2d40/0x2ee0
[   39.213129][  T613]  do_syscall_64+0x57/0xf0
[   39.213140][  T613]  ? clear_bhb_loop+0x50/0xa0
[   39.213153][  T613]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   39.213166][  T613] RIP: 0033:0x7f474c19f559
[   39.213176][  T613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.213185][  T613] RSP: 002b:00007f474d11b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   39.213198][  T613] RAX: ffffffffffffffda RBX: 00007f474c425fa0 RCX: 00007f474c19f559
[   39.213205][  T613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[   39.213212][  T613] RBP: 00007f474c236b20 R08: 0000000000000000 R09: 0000000000000000
[   39.213218][  T613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.213224][  T613] R13: 00007f474c426038 R14: 00007f474c425fa0 R15: 00007fffe59232a8
[   39.213233][  T613]  </TASK>
[   39.213707][   T36] audit: type=1400 audit(1793062857.460:212): avc:  denied  { connect } for  pid=612 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.512643][  T368] usb 1-1: Using ep0 maxpacket: 32
[   39.607798][  T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.634951][  T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.671731][  T368] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   39.692249][  T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.720940][  T368] usb 1-1: config 0 descriptor??
[   39.733448][  T368] hub 1-1:0.0: USB hub found
[   39.738892][  T617] syz.2.92: attempt to access beyond end of device
[   39.738892][  T617] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[   39.765367][  T617] FAT-fs (loop2): unable to read boot sector
[   39.808016][  T621] FAULT_INJECTION: forcing a failure.
[   39.808016][  T621] name failslab, interval 1, probability 0, space 0, times 0
[   39.839136][   T36] audit: type=1400 audit(1793062857.700:213): avc:  denied  { write } for  pid=612 comm="syz.1.91" path="socket:[7363]" dev="sockfs" ino=7363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.874987][  T621] CPU: 0 UID: 0 PID: 621 Comm: syz.1.94 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   39.875009][  T621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   39.875016][  T621] Call Trace:
[   39.875019][  T621]  <TASK>
[   39.875023][  T621]  __dump_stack+0x21/0x30
[   39.875044][  T621]  dump_stack_lvl+0x140/0x1c0
[   39.875058][  T621]  ? __cfi_dump_stack_lvl+0x10/0x10
[   39.875072][  T621]  ? __kasan_kmalloc+0x96/0xb0
[   39.875082][  T621]  dump_stack+0x19/0x20
[   39.875095][  T621]  should_fail_ex+0x3c2/0x510
[   39.875108][  T621]  should_failslab+0xac/0x100
[   39.875117][  T621]  kmem_cache_alloc_noprof+0x42/0x410
[   39.875131][  T621]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   39.875141][  T621]  ? __kasan_check_write+0x18/0x20
[   39.875153][  T621]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   39.875164][  T621]  ? mutex_unlock+0x90/0x240
[   39.875177][  T621]  kvm_mmu_topup_memory_cache+0x24/0x30
[   39.875186][  T621]  kvm_mmu_load+0xa1/0x2900
[   39.875200][  T621]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   39.875214][  T621]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   39.875226][  T621]  ? kvm_apic_has_interrupt+0x77a/0x790
[   39.875240][  T621]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   39.875251][  T621]  vcpu_run+0x4d56/0x7810
[   39.875271][  T621]  ? signal_pending+0xc0/0xc0
[   39.875283][  T621]  ? __kasan_check_write+0x18/0x20
[   39.875295][  T621]  ? xfd_validate_state+0x68/0x140
[   39.875316][  T621]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   39.875328][  T621]  ? __kasan_check_write+0x18/0x20
[   39.875340][  T621]  ? fpregs_mark_activate+0x68/0x160
[   39.875352][  T621]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   39.875364][  T621]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   39.875378][  T621]  ? _parse_integer_limit+0x195/0x1e0
[   39.875393][  T621]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   39.875406][  T621]  ? kstrtoull+0x13b/0x1e0
[   39.875420][  T621]  ? kstrtouint+0x78/0xf0
[   39.875433][  T621]  ? ioctl_has_perm+0x1bc/0x500
[   39.875447][  T621]  ? __asan_memcpy+0x5a/0x80
[   39.875460][  T621]  ? ioctl_has_perm+0x408/0x500
[   39.875473][  T621]  ? has_cap_mac_admin+0xd0/0xd0
[   39.875485][  T621]  ? __kasan_check_write+0x18/0x20
[   39.875498][  T621]  ? mutex_lock_killable+0x97/0x1d0
[   39.875510][  T621]  ? __cfi_mutex_lock_killable+0x10/0x10
[   39.875526][  T621]  ? proc_fail_nth_write+0x184/0x220
[   39.875538][  T621]  kvm_vcpu_ioctl+0xa43/0x1000
[   39.875549][  T621]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   39.875560][  T621]  ? __cfi_vfs_write+0x10/0x10
[   39.875573][  T621]  ? __kasan_check_write+0x18/0x20
[   39.875585][  T621]  ? mutex_unlock+0x90/0x240
[   39.875597][  T621]  ? __cfi_mutex_unlock+0x10/0x10
[   39.875609][  T621]  ? __fget_files+0x2bc/0x330
[   39.875619][  T621]  ? bpf_lsm_file_ioctl+0xd/0x20
[   39.875629][  T621]  ? security_file_ioctl+0x3e/0x110
[   39.875642][  T621]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   39.875652][  T621]  __se_sys_ioctl+0x126/0x1b0
[   39.875662][  T621]  __x64_sys_ioctl+0x7f/0xa0
[   39.875671][  T621]  x64_sys_call+0x1878/0x2ee0
[   39.875680][  T621]  do_syscall_64+0x57/0xf0
[   39.875690][  T621]  ? clear_bhb_loop+0x50/0xa0
[   39.875704][  T621]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   39.875716][  T621] RIP: 0033:0x7f474c19f559
[   39.875726][  T621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.875735][  T621] RSP: 002b:00007f474d11b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   39.875747][  T621] RAX: ffffffffffffffda RBX: 00007f474c425fa0 RCX: 00007f474c19f559
[   39.875754][  T621] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   39.875761][  T621] RBP: 00007f474d11b090 R08: 0000000000000000 R09: 0000000000000000
[   39.875767][  T621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   39.875773][  T621] R13: 00007f474c426038 R14: 00007f474c425fa0 R15: 00007fffe59232a8
[   39.875781][  T621]  </TASK>
[   40.786809][  T368] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[   40.980986][  T632] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.014927][  T368] usbhid 1-1:0.0: can't add hid device: -71
[   41.034979][  T368] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   41.050758][  T634] x_tables: arp_tables: NFLOG target: not valid for this family
[   41.095628][  T368] usb 1-1: USB disconnect, device number 10
[   41.364898][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   41.376796][  T647] FAULT_INJECTION: forcing a failure.
[   41.376796][  T647] name failslab, interval 1, probability 0, space 0, times 0
[   41.402394][  T647] CPU: 0 UID: 0 PID: 647 Comm: syz.0.104 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   41.402413][  T647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   41.402421][  T647] Call Trace:
[   41.402424][  T647]  <TASK>
[   41.402428][  T647]  __dump_stack+0x21/0x30
[   41.402448][  T647]  dump_stack_lvl+0x140/0x1c0
[   41.402462][  T647]  ? __cfi_dump_stack_lvl+0x10/0x10
[   41.402477][  T647]  dump_stack+0x19/0x20
[   41.402490][  T647]  should_fail_ex+0x3c2/0x510
[   41.402501][  T647]  should_failslab+0xac/0x100
[   41.402511][  T647]  kmem_cache_alloc_noprof+0x42/0x410
[   41.402525][  T647]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   41.402535][  T647]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   41.402545][  T647]  ? mutex_unlock+0x90/0x240
[   41.402558][  T647]  kvm_mmu_topup_memory_cache+0x24/0x30
[   41.402567][  T647]  kvm_mmu_load+0xa1/0x2900
[   41.402582][  T647]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   41.402596][  T647]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   41.402609][  T647]  ? kvm_apic_has_interrupt+0x77a/0x790
[   41.402623][  T647]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   41.402634][  T647]  vcpu_run+0x4d56/0x7810
[   41.402648][  T647]  ? kvm_sched_clock_read+0x15/0x30
[   41.402666][  T647]  ? signal_pending+0xc0/0xc0
[   41.402679][  T647]  ? __kasan_check_write+0x18/0x20
[   41.402693][  T647]  ? xfd_validate_state+0x68/0x140
[   41.402707][  T647]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   41.402719][  T647]  ? __kasan_check_write+0x18/0x20
[   41.402731][  T647]  ? fpregs_mark_activate+0x68/0x160
[   41.402743][  T647]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   41.402755][  T647]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   41.402767][  T647]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   41.402781][  T647]  ? _parse_integer_limit+0x195/0x1e0
[   41.402795][  T647]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   41.402809][  T647]  ? kstrtoull+0x13b/0x1e0
[   41.402822][  T647]  ? kstrtouint+0x78/0xf0
[   41.402835][  T647]  ? ioctl_has_perm+0x1bc/0x500
[   41.402848][  T647]  ? __asan_memcpy+0x5a/0x80
[   41.402861][  T647]  ? ioctl_has_perm+0x408/0x500
[   41.402873][  T647]  ? has_cap_mac_admin+0xd0/0xd0
[   41.402886][  T647]  ? __kasan_check_write+0x18/0x20
[   41.402898][  T647]  ? mutex_lock_killable+0x97/0x1d0
[   41.402911][  T647]  ? __cfi_mutex_lock_killable+0x10/0x10
[   41.402923][  T647]  ? proc_fail_nth_write+0x184/0x220
[   41.402935][  T647]  kvm_vcpu_ioctl+0xa43/0x1000
[   41.402946][  T647]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   41.402956][  T647]  ? __cfi_vfs_write+0x10/0x10
[   41.402969][  T647]  ? __kasan_check_write+0x18/0x20
[   41.402981][  T647]  ? mutex_unlock+0x90/0x240
[   41.402992][  T647]  ? __cfi_mutex_unlock+0x10/0x10
[   41.403004][  T647]  ? __fget_files+0x2bc/0x330
[   41.403014][  T647]  ? bpf_lsm_file_ioctl+0xd/0x20
[   41.403024][  T647]  ? security_file_ioctl+0x3e/0x110
[   41.403036][  T647]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   41.403046][  T647]  __se_sys_ioctl+0x126/0x1b0
[   41.403055][  T647]  __x64_sys_ioctl+0x7f/0xa0
[   41.403064][  T647]  x64_sys_call+0x1878/0x2ee0
[   41.403074][  T647]  do_syscall_64+0x57/0xf0
[   41.403084][  T647]  ? clear_bhb_loop+0x50/0xa0
[   41.403098][  T647]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   41.403110][  T647] RIP: 0033:0x7f411e19f559
[   41.403119][  T647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.403134][  T647] RSP: 002b:00007f411efbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   41.403146][  T647] RAX: ffffffffffffffda RBX: 00007f411e425fa0 RCX: 00007f411e19f559
[   41.403154][  T647] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   41.403160][  T647] RBP: 00007f411efbd090 R08: 0000000000000000 R09: 0000000000000000
[   41.403167][  T647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   41.403173][  T647] R13: 00007f411e426038 R14: 00007f411e425fa0 R15: 00007ffc2d252c28
[   41.403181][  T647]  </TASK>
[   41.784970][  T650] overlayfs: unescaped trailing colons in lowerdir mount option.
[   41.895247][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   41.895262][   T36] audit: type=1400 audit(1793062860.090:225): avc:  denied  { execute } for  pid=654 comm="syz.0.106" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   41.988220][   T36] audit: type=1400 audit(1793062860.210:226): avc:  denied  { mounton } for  pid=665 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   42.009679][   T36] audit: type=1400 audit(1793062860.210:227): avc:  denied  { create } for  pid=665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   42.041405][  T665] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.050123][  T665] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.057387][  T665] bridge_slave_0: entered allmulticast mode
[   42.063657][  T665] bridge_slave_0: entered promiscuous mode
[   42.069743][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   42.078911][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.086894][    T9] usb 2-1: Product: syz
[   42.091067][    T9] usb 2-1: Manufacturer: syz
[   42.095658][    T9] usb 2-1: SerialNumber: syz
[   42.142211][  T368] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   42.153205][  T665] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.160420][  T665] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.167870][  T665] bridge_slave_1: entered allmulticast mode
[   42.174106][  T665] bridge_slave_1: entered promiscuous mode
[   42.247433][  T665] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.254512][  T665] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.261799][  T665] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.268816][  T665] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.277403][  T367] rust_binder: 331: undelivered freeze notification, 0000000000000001
[   42.286247][  T367] rust_binder: 331: undelivered transaction 5, process died
[   42.293664][  T367] rust_binder: 331: undelivered transaction 4, process died
[   42.300992][  T368] usb 3-1: Using ep0 maxpacket: 8
[   42.307312][  T368] usb 3-1: config 0 has an invalid interface number: 151 but max is 1
[   42.316250][   T13] bridge_slave_1: left allmulticast mode
[   42.321990][  T368] usb 3-1: config 0 has no interface number 1
[   42.328298][   T13] bridge_slave_1: left promiscuous mode
[   42.333987][  T368] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   42.345796][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.353393][   T13] bridge_slave_0: left allmulticast mode
[   42.361036][    T9] cdc_ncm 2-1:1.0: bind() failure
[   42.366647][    T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   42.373613][  T368] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[   42.385493][    T9] cdc_ncm 2-1:1.1: bind() failure
[   42.390531][   T13] bridge_slave_0: left promiscuous mode
[   42.400727][    T9] usb 2-1: USB disconnect, device number 10
[   42.406881][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.414005][  T368] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[   42.434786][  T368] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[   42.450628][  T368] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   42.464555][  T368] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[   42.486666][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.493936][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.502239][  T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024
[   42.514835][   T13] veth1_macvtap: left promiscuous mode
[   42.520574][   T13] veth0_vlan: left promiscuous mode
[   42.528184][  T368] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[   42.549658][  T368] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[   42.560289][  T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.575676][  T368] usb 3-1: Product: syz
[   42.584217][  T368] usb 3-1: Manufacturer: syz
[   42.594739][  T368] usb 3-1: SerialNumber: syz
[   42.602093][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.609142][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.629094][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.636247][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.644340][  T368] usb 3-1: config 0 descriptor??
[   42.651425][  T650] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   42.687281][  T665] veth0_vlan: entered promiscuous mode
[   42.698829][  T665] veth1_macvtap: entered promiscuous mode
[   42.716510][   T36] audit: type=1400 audit(1793062860.970:228): avc:  denied  { mounton } for  pid=665 comm="syz-executor" path="/root/syzkaller.zIH3xx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   42.761090][   T36] audit: type=1400 audit(1793062861.010:229): avc:  denied  { search } for  pid=676 comm="syz.4.108" name="/" dev="configfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   42.875549][   T36] audit: type=1400 audit(1793062861.130:230): avc:  denied  { name_bind } for  pid=679 comm="syz.0.109" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   42.921654][   T36] audit: type=1326 audit(1793062861.170:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=684 comm="syz.1.111" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f474c19f559 code=0x0
[   42.957521][  T689] random: crng reseeded on system resumption
[   42.963584][   T36] audit: type=1400 audit(1793062861.210:232): avc:  denied  { write } for  pid=688 comm="syz.0.112" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   43.010937][  T691] FAULT_INJECTION: forcing a failure.
[   43.010937][  T691] name failslab, interval 1, probability 0, space 0, times 0
[   43.028967][  T689] netlink: 'syz.0.112': attribute type 11 has an invalid length.
[   43.037062][   T36] audit: type=1400 audit(1793062861.210:233): avc:  denied  { open } for  pid=688 comm="syz.0.112" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   43.060710][  T691] CPU: 0 UID: 0 PID: 691 Comm: syz.1.113 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   43.060730][  T691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   43.060737][  T691] Call Trace:
[   43.060741][  T691]  <TASK>
[   43.060745][  T691]  __dump_stack+0x21/0x30
[   43.060769][  T691]  dump_stack_lvl+0x140/0x1c0
[   43.060783][  T691]  ? __cfi_dump_stack_lvl+0x10/0x10
[   43.060798][  T691]  dump_stack+0x19/0x20
[   43.060811][  T691]  should_fail_ex+0x3c2/0x510
[   43.060822][  T691]  should_failslab+0xac/0x100
[   43.060832][  T691]  kmem_cache_alloc_noprof+0x42/0x410
[   43.060845][  T691]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   43.060856][  T691]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   43.060866][  T691]  ? mutex_unlock+0x90/0x240
[   43.060879][  T691]  kvm_mmu_topup_memory_cache+0x24/0x30
[   43.060888][  T691]  kvm_mmu_load+0xa1/0x2900
[   43.060902][  T691]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   43.060917][  T691]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   43.060929][  T691]  ? kvm_apic_has_interrupt+0x77a/0x790
[   43.060943][  T691]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   43.060962][  T691]  vcpu_run+0x4d56/0x7810
[   43.060977][  T691]  ? kvm_sched_clock_read+0x15/0x30
[   43.060996][  T691]  ? signal_pending+0xc0/0xc0
[   43.061008][  T691]  ? __kasan_check_write+0x18/0x20
[   43.061022][  T691]  ? xfd_validate_state+0x68/0x140
[   43.061036][  T691]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   43.061048][  T691]  ? __kasan_check_write+0x18/0x20
[   43.061060][  T691]  ? fpregs_mark_activate+0x68/0x160
[   43.061072][  T691]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   43.061084][  T691]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   43.061096][  T691]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   43.061110][  T691]  ? _parse_integer_limit+0x195/0x1e0
[   43.061125][  T691]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   43.061138][  T691]  ? kstrtoull+0x13b/0x1e0
[   43.061151][  T691]  ? kstrtouint+0x78/0xf0
[   43.061165][  T691]  ? ioctl_has_perm+0x1bc/0x500
[   43.061179][  T691]  ? __asan_memcpy+0x5a/0x80
[   43.061191][  T691]  ? ioctl_has_perm+0x408/0x500
[   43.061204][  T691]  ? has_cap_mac_admin+0xd0/0xd0
[   43.061217][  T691]  ? __kasan_check_write+0x18/0x20
[   43.061229][  T691]  ? mutex_lock_killable+0x97/0x1d0
[   43.061241][  T691]  ? __cfi_mutex_lock_killable+0x10/0x10
[   43.061253][  T691]  ? proc_fail_nth_write+0x184/0x220
[   43.061266][  T691]  kvm_vcpu_ioctl+0xa43/0x1000
[   43.061276][  T691]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   43.061286][  T691]  ? __cfi_vfs_write+0x10/0x10
[   43.061299][  T691]  ? __kasan_check_write+0x18/0x20
[   43.061311][  T691]  ? mutex_unlock+0x90/0x240
[   43.061323][  T691]  ? __cfi_mutex_unlock+0x10/0x10
[   43.061335][  T691]  ? __fget_files+0x2bc/0x330
[   43.061345][  T691]  ? bpf_lsm_file_ioctl+0xd/0x20
[   43.061355][  T691]  ? security_file_ioctl+0x3e/0x110
[   43.061367][  T691]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   43.061377][  T691]  __se_sys_ioctl+0x126/0x1b0
[   43.061386][  T691]  __x64_sys_ioctl+0x7f/0xa0
[   43.061395][  T691]  x64_sys_call+0x1878/0x2ee0
[   43.061405][  T691]  do_syscall_64+0x57/0xf0
[   43.061415][  T691]  ? clear_bhb_loop+0x50/0xa0
[   43.061428][  T691]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   43.061441][  T691] RIP: 0033:0x7f474c19f559
[   43.061451][  T691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.061459][  T691] RSP: 002b:00007f474d11b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   43.061471][  T691] RAX: ffffffffffffffda RBX: 00007f474c425fa0 RCX: 00007f474c19f559
[   43.061478][  T691] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   43.061485][  T691] RBP: 00007f474d11b090 R08: 0000000000000000 R09: 0000000000000000
[   43.061492][  T691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   43.061498][  T691] R13: 00007f474c426038 R14: 00007f474c425fa0 R15: 00007fffe59232a8
[   43.061506][  T691]  </TASK>
[   43.461300][   T36] audit: type=1400 audit(1793062861.280:234): avc:  denied  { ioctl } for  pid=688 comm="syz.0.112" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   43.512035][  T696] device-mapper: table: 252:1: verity: Device must be readonly (-EINVAL)
[   43.520557][  T696] device-mapper: ioctl: error adding target to table
[   43.542118][  T699] Zero length message leads to an empty skb
[   43.556483][  T704] capability: warning: `syz.1.117' uses deprecated v2 capabilities in a way that may be insecure
[   43.676213][  T706] x86/PAT: syz.1.118:706 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[   43.693885][  T713] FAULT_INJECTION: forcing a failure.
[   43.693885][  T713] name failslab, interval 1, probability 0, space 0, times 0
[   43.706744][  T713] CPU: 0 UID: 0 PID: 713 Comm: syz.1.120 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   43.706761][  T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   43.706768][  T713] Call Trace:
[   43.706772][  T713]  <TASK>
[   43.706775][  T713]  __dump_stack+0x21/0x30
[   43.706796][  T713]  dump_stack_lvl+0x140/0x1c0
[   43.706809][  T713]  ? __cfi_dump_stack_lvl+0x10/0x10
[   43.706824][  T713]  ? kernel_text_address+0xa9/0xe0
[   43.706838][  T713]  dump_stack+0x19/0x20
[   43.706852][  T713]  should_fail_ex+0x3c2/0x510
[   43.706862][  T713]  should_failslab+0xac/0x100
[   43.706872][  T713]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   43.706886][  T713]  ? __d_alloc+0x42/0x8c0
[   43.706898][  T713]  ? stack_depot_save_flags+0x38/0x800
[   43.706909][  T713]  __d_alloc+0x42/0x8c0
[   43.706921][  T713]  d_alloc_parallel+0xe4/0x1370
[   43.706934][  T713]  ? security_file_alloc+0x49/0x220
[   43.706947][  T713]  ? init_file+0x9e/0x210
[   43.706958][  T713]  ? alloc_empty_file+0xd9/0x270
[   43.706976][  T713]  ? path_openat+0xf4/0x35a0
[   43.706986][  T713]  ? do_filp_open+0x1f2/0x440
[   43.706996][  T713]  ? do_sys_openat2+0x134/0x1d0
[   43.707007][  T713]  ? __x64_sys_openat+0x13a/0x170
[   43.707018][  T713]  ? x64_sys_call+0xe69/0x2ee0
[   43.707028][  T713]  ? do_syscall_64+0x57/0xf0
[   43.707038][  T713]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   43.707053][  T713]  ? avc_has_perm_noaudit+0x26b/0x360
[   43.707063][  T713]  ? __cfi_d_alloc_parallel+0x10/0x10
[   43.707077][  T713]  ? __kasan_check_write+0x18/0x20
[   43.707090][  T713]  ? rwsem_read_trylock+0x275/0x5a0
[   43.707103][  T713]  ? downgrade_write+0x470/0x470
[   43.707114][  T713]  __lookup_slow+0x150/0x420
[   43.707123][  T713]  ? try_to_unlazy+0x62a/0xb50
[   43.707137][  T713]  ? lookup_one_len+0x300/0x300
[   43.707146][  T713]  ? down_read+0x7f/0xe0
[   43.707160][  T713]  lookup_slow+0x57/0x80
[   43.707169][  T713]  link_path_walk+0x991/0xeb0
[   43.707183][  T713]  path_openat+0x298/0x35a0
[   43.707194][  T713]  ? kasan_save_alloc_info+0x3a/0x50
[   43.707206][  T713]  ? __kasan_slab_alloc+0x73/0x90
[   43.707215][  T713]  ? getname+0x1b/0x30
[   43.707228][  T713]  ? x64_sys_call+0xe69/0x2ee0
[   43.707238][  T713]  ? do_syscall_64+0x57/0xf0
[   43.707248][  T713]  ? do_filp_open+0x440/0x440
[   43.707259][  T713]  do_filp_open+0x1f2/0x440
[   43.707269][  T713]  ? __cfi_do_filp_open+0x10/0x10
[   43.707281][  T713]  ? alloc_fd+0x4c1/0x570
[   43.707295][  T713]  do_sys_openat2+0x134/0x1d0
[   43.707306][  T713]  ? fput+0x1a4/0x230
[   43.707316][  T713]  ? do_sys_open+0x100/0x100
[   43.707327][  T713]  __x64_sys_openat+0x13a/0x170
[   43.707339][  T713]  x64_sys_call+0xe69/0x2ee0
[   43.707348][  T713]  do_syscall_64+0x57/0xf0
[   43.707358][  T713]  ? clear_bhb_loop+0x50/0xa0
[   43.707370][  T713]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   43.707383][  T713] RIP: 0033:0x7f474c19f559
[   43.707392][  T713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.707401][  T713] RSP: 002b:00007f474d11b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   43.707413][  T713] RAX: ffffffffffffffda RBX: 00007f474c425fa0 RCX: 00007f474c19f559
[   43.707421][  T713] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: ffffffffffffff9c
[   43.707428][  T713] RBP: 00007f474c236b20 R08: 0000000000000000 R09: 0000000000000000
[   43.707434][  T713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   43.707441][  T713] R13: 00007f474c426038 R14: 00007f474c425fa0 R15: 00007fffe59232a8
[   43.707449][  T713]  </TASK>
[   44.061105][  T367] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   44.093620][  T724] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   44.093760][  T725] 
@0Ù: renamed from bond_slave_1
[   44.244906][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   44.266472][  T367] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[   44.279248][  T367] usb 1-1: config 192 has 0 interfaces, different from the descriptor's value: 1
[   44.289994][  T367] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3
[   44.299592][  T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.307730][  T367] usb 1-1: Product: syz
[   44.311979][  T367] usb 1-1: Manufacturer: syz
[   44.316802][  T367] usb 1-1: SerialNumber: syz
[   44.377487][  T368] usb 3-1: USB disconnect, device number 7
[   44.402619][    T9] usb 5-1: Using ep0 maxpacket: 16
[   44.409949][    T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.421396][    T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.437090][  T733] FAULT_INJECTION: forcing a failure.
[   44.437090][  T733] name failslab, interval 1, probability 0, space 0, times 0
[   44.450039][    T9] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   44.462983][  T733] CPU: 0 UID: 0 PID: 733 Comm: syz.2.124 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   44.463003][  T733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   44.463011][  T733] Call Trace:
[   44.463014][  T733]  <TASK>
[   44.463018][  T733]  __dump_stack+0x21/0x30
[   44.463039][  T733]  dump_stack_lvl+0x140/0x1c0
[   44.463053][  T733]  ? __cfi_dump_stack_lvl+0x10/0x10
[   44.463068][  T733]  dump_stack+0x19/0x20
[   44.463084][  T733]  should_fail_ex+0x3c2/0x510
[   44.463095][  T733]  should_failslab+0xac/0x100
[   44.463105][  T733]  kmem_cache_alloc_noprof+0x42/0x410
[   44.463119][  T733]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   44.463130][  T733]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   44.463140][  T733]  ? mutex_unlock+0x90/0x240
[   44.463154][  T733]  kvm_mmu_topup_memory_cache+0x24/0x30
[   44.463163][  T733]  kvm_mmu_load+0xa1/0x2900
[   44.463177][  T733]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   44.463192][  T733]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   44.463205][  T733]  ? kvm_apic_has_interrupt+0x77a/0x790
[   44.463218][  T733]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   44.463230][  T733]  vcpu_run+0x4d56/0x7810
[   44.463244][  T733]  ? kvm_sched_clock_read+0x15/0x30
[   44.463263][  T733]  ? signal_pending+0xc0/0xc0
[   44.463276][  T733]  ? __kasan_check_write+0x18/0x20
[   44.463289][  T733]  ? xfd_validate_state+0x68/0x140
[   44.463304][  T733]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   44.463316][  T733]  ? __kasan_check_write+0x18/0x20
[   44.463328][  T733]  ? fpregs_mark_activate+0x68/0x160
[   44.463340][  T733]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   44.463352][  T733]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   44.463364][  T733]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   44.463378][  T733]  ? _parse_integer_limit+0x195/0x1e0
[   44.463393][  T733]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   44.463407][  T733]  ? kstrtoull+0x13b/0x1e0
[   44.463421][  T733]  ? kstrtouint+0x78/0xf0
[   44.463435][  T733]  ? ioctl_has_perm+0x1bc/0x500
[   44.463448][  T733]  ? __asan_memcpy+0x5a/0x80
[   44.463460][  T733]  ? ioctl_has_perm+0x408/0x500
[   44.463473][  T733]  ? has_cap_mac_admin+0xd0/0xd0
[   44.463486][  T733]  ? __kasan_check_write+0x18/0x20
[   44.463499][  T733]  ? mutex_lock_killable+0x97/0x1d0
[   44.463511][  T733]  ? __cfi_mutex_lock_killable+0x10/0x10
[   44.463523][  T733]  ? proc_fail_nth_write+0x184/0x220
[   44.463536][  T733]  kvm_vcpu_ioctl+0xa43/0x1000
[   44.463546][  T733]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   44.463556][  T733]  ? __cfi_vfs_write+0x10/0x10
[   44.463569][  T733]  ? __kasan_check_write+0x18/0x20
[   44.463582][  T733]  ? mutex_unlock+0x90/0x240
[   44.463593][  T733]  ? __cfi_mutex_unlock+0x10/0x10
[   44.463606][  T733]  ? __fget_files+0x2bc/0x330
[   44.463615][  T733]  ? bpf_lsm_file_ioctl+0xd/0x20
[   44.463625][  T733]  ? security_file_ioctl+0x3e/0x110
[   44.463638][  T733]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   44.463648][  T733]  __se_sys_ioctl+0x126/0x1b0
[   44.463658][  T733]  __x64_sys_ioctl+0x7f/0xa0
[   44.463667][  T733]  x64_sys_call+0x1878/0x2ee0
[   44.463677][  T733]  do_syscall_64+0x57/0xf0
[   44.463686][  T733]  ? clear_bhb_loop+0x50/0xa0
[   44.463700][  T733]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   44.463713][  T733] RIP: 0033:0x7fb32e39f559
[   44.463723][  T733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.463732][  T733] RSP: 002b:00007fb32f196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   44.463744][  T733] RAX: ffffffffffffffda RBX: 00007fb32e625fa0 RCX: 00007fb32e39f559
[   44.463751][  T733] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   44.463758][  T733] RBP: 00007fb32f196090 R08: 0000000000000000 R09: 0000000000000000
[   44.463764][  T733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   44.463770][  T733] R13: 00007fb32e626038 R14: 00007fb32e625fa0 R15: 00007ffd90c8c358
[   44.463778][  T733]  </TASK>
[   44.843022][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[   44.849641][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00
[   44.858660][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.870584][  T736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.879120][  T736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.887506][    T9] usb 5-1: config 0 descriptor??
[   44.902851][  T367] usb 1-1: USB disconnect, device number 11
[   44.945373][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   45.194891][   T10] usb 2-1: Using ep0 maxpacket: 32
[   45.201013][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   45.212326][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   45.221419][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.229433][   T10] usb 2-1: Product: syz
[   45.233599][   T10] usb 2-1: Manufacturer: syz
[   45.238209][   T10] usb 2-1: SerialNumber: syz
[   45.246485][   T10] usb 2-1: config 0 descriptor??
[   45.253080][   T10] smsc75xx v1.0.0
[   45.257069][   T10] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   45.267347][   T10] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22
[   45.326946][    T9] input: HID 046d:c215 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C215.0004/input/input8
[   45.343611][    T9] logitech 0003:046D:C215.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.4-1/input0
[   45.575796][   T10] usb 5-1: USB disconnect, device number 2
[   45.684909][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   45.834893][    T9] usb 1-1: Using ep0 maxpacket: 32
[   45.841156][    T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 125, changing to 10
[   45.852538][    T9] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   45.865513][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   45.872130][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00
[   45.882232][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.891533][    T9] usb 1-1: config 0 descriptor??
[   46.301135][    T9] wacom 0003:056A:00DA.0005: Unknown device_type for 'HID 056a:00da'. Assuming pen.
[   46.313040][    T9] wacom 0003:056A:00DA.0005: hidraw0: USB HID v10.01 Device [HID 056a:00da] on usb-dummy_hcd.0-1/input0
[   46.337309][    T9] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00DA.0005/input/input9
[   46.424897][  T368] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   46.436987][  T762] FAULT_INJECTION: forcing a failure.
[   46.436987][  T762] name failslab, interval 1, probability 0, space 0, times 0
[   46.449713][  T762] CPU: 0 UID: 0 PID: 762 Comm: syz.2.133 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   46.449731][  T762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   46.449739][  T762] Call Trace:
[   46.449744][  T762]  <TASK>
[   46.449749][  T762]  __dump_stack+0x21/0x30
[   46.449769][  T762]  dump_stack_lvl+0x140/0x1c0
[   46.449784][  T762]  ? __cfi_dump_stack_lvl+0x10/0x10
[   46.449799][  T762]  dump_stack+0x19/0x20
[   46.449812][  T762]  should_fail_ex+0x3c2/0x510
[   46.449823][  T762]  should_failslab+0xac/0x100
[   46.449833][  T762]  kmem_cache_alloc_noprof+0x42/0x410
[   46.449847][  T762]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   46.449858][  T762]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   46.449868][  T762]  ? mutex_unlock+0x90/0x240
[   46.449881][  T762]  kvm_mmu_topup_memory_cache+0x24/0x30
[   46.449891][  T762]  kvm_mmu_load+0xa1/0x2900
[   46.449905][  T762]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   46.449920][  T762]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   46.449932][  T762]  ? kvm_apic_has_interrupt+0x77a/0x790
[   46.449946][  T762]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   46.449958][  T762]  vcpu_run+0x4d56/0x7810
[   46.449972][  T762]  ? kvm_sched_clock_read+0x15/0x30
[   46.449990][  T762]  ? signal_pending+0xc0/0xc0
[   46.450003][  T762]  ? __kasan_check_write+0x18/0x20
[   46.450016][  T762]  ? xfd_validate_state+0x68/0x140
[   46.450031][  T762]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   46.450043][  T762]  ? __kasan_check_write+0x18/0x20
[   46.450055][  T762]  ? fpregs_mark_activate+0x68/0x160
[   46.450067][  T762]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   46.450079][  T762]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   46.450092][  T762]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   46.450105][  T762]  ? _parse_integer_limit+0x195/0x1e0
[   46.450120][  T762]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   46.450134][  T762]  ? kstrtoull+0x13b/0x1e0
[   46.450147][  T762]  ? kstrtouint+0x78/0xf0
[   46.450161][  T762]  ? ioctl_has_perm+0x1bc/0x500
[   46.450174][  T762]  ? __asan_memcpy+0x5a/0x80
[   46.450190][  T762]  ? ioctl_has_perm+0x408/0x500
[   46.450203][  T762]  ? has_cap_mac_admin+0xd0/0xd0
[   46.450216][  T762]  ? __kasan_check_write+0x18/0x20
[   46.450229][  T762]  ? mutex_lock_killable+0x97/0x1d0
[   46.450241][  T762]  ? __cfi_mutex_lock_killable+0x10/0x10
[   46.450253][  T762]  ? proc_fail_nth_write+0x184/0x220
[   46.450266][  T762]  kvm_vcpu_ioctl+0xa43/0x1000
[   46.450277][  T762]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   46.450287][  T762]  ? __cfi_vfs_write+0x10/0x10
[   46.450300][  T762]  ? __kasan_check_write+0x18/0x20
[   46.450313][  T762]  ? mutex_unlock+0x90/0x240
[   46.450325][  T762]  ? __cfi_mutex_unlock+0x10/0x10
[   46.450337][  T762]  ? __fget_files+0x2bc/0x330
[   46.450347][  T762]  ? bpf_lsm_file_ioctl+0xd/0x20
[   46.450358][  T762]  ? security_file_ioctl+0x3e/0x110
[   46.450372][  T762]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   46.450382][  T762]  __se_sys_ioctl+0x126/0x1b0
[   46.450391][  T762]  __x64_sys_ioctl+0x7f/0xa0
[   46.450401][  T762]  x64_sys_call+0x1878/0x2ee0
[   46.450411][  T762]  do_syscall_64+0x57/0xf0
[   46.450420][  T762]  ? clear_bhb_loop+0x50/0xa0
[   46.450434][  T762]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   46.450446][  T762] RIP: 0033:0x7fb32e39f559
[   46.450456][  T762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.450465][  T762] RSP: 002b:00007fb32f196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   46.450477][  T762] RAX: ffffffffffffffda RBX: 00007fb32e625fa0 RCX: 00007fb32e39f559
[   46.450484][  T762] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   46.450491][  T762] RBP: 00007fb32f196090 R08: 0000000000000000 R09: 0000000000000000
[   46.450498][  T762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   46.450504][  T762] R13: 00007fb32e626038 R14: 00007fb32e625fa0 R15: 00007ffd90c8c358
[   46.450513][  T762]  </TASK>
[   46.897510][    T9] usb 1-1: USB disconnect, device number 12
[   46.922748][  T767] tipc: MTU too low for tipc bearer
[   46.960875][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   46.960887][   T36] audit: type=1400 audit(1793062865.200:248): avc:  denied  { listen } for  pid=766 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   46.986648][   T36] audit: type=1400 audit(1793062865.200:249): avc:  denied  { accept } for  pid=766 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   47.018760][   T36] audit: type=1400 audit(1793062865.270:250): avc:  denied  { write } for  pid=770 comm="syz.2.135" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   47.049091][  T368] usb 5-1: Using ep0 maxpacket: 32
[   47.091165][  T368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.115872][  T368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.174992][   T36] audit: type=1400 audit(1793062865.430:251): avc:  denied  { append } for  pid=781 comm="syz.2.139" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   47.198837][   T36] audit: type=1400 audit(1793062865.460:252): avc:  denied  { ioctl } for  pid=781 comm="syz.2.139" path="socket:[9242]" dev="sockfs" ino=9242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.223462][   T36] audit: type=1400 audit(1793062865.480:253): avc:  denied  { bind } for  pid=781 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.252404][  T368] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   47.267672][  T782] loop2: detected capacity change from 0 to 8
[   47.273829][  T368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.282532][    T9] usb 2-1: USB disconnect, device number 11
[   47.337361][  T368] usb 5-1: config 0 descriptor??
[   47.351637][  T368] hub 5-1:0.0: USB hub found
[   47.367578][   T36] audit: type=1400 audit(1793062865.620:254): avc:  denied  { connect } for  pid=788 comm="syz.2.141" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   47.409085][   T36] audit: type=1400 audit(1793062865.660:255): avc:  denied  { read } for  pid=788 comm="syz.2.141" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   47.432526][   T36] audit: type=1400 audit(1793062865.660:256): avc:  denied  { open } for  pid=788 comm="syz.2.141" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   47.474948][   T36] audit: type=1400 audit(1793062865.660:257): avc:  denied  { ioctl } for  pid=788 comm="syz.2.141" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   47.502298][  T794] FAULT_INJECTION: forcing a failure.
[   47.502298][  T794] name failslab, interval 1, probability 0, space 0, times 0
[   47.515337][  T794] CPU: 0 UID: 0 PID: 794 Comm: syz.0.142 Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   47.515356][  T794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   47.515363][  T794] Call Trace:
[   47.515369][  T794]  <TASK>
[   47.515373][  T794]  __dump_stack+0x21/0x30
[   47.515393][  T794]  dump_stack_lvl+0x140/0x1c0
[   47.515407][  T794]  ? __cfi_dump_stack_lvl+0x10/0x10
[   47.515423][  T794]  dump_stack+0x19/0x20
[   47.515436][  T794]  should_fail_ex+0x3c2/0x510
[   47.515447][  T794]  should_failslab+0xac/0x100
[   47.515457][  T794]  kmem_cache_alloc_noprof+0x42/0x410
[   47.515471][  T794]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   47.515482][  T794]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[   47.515492][  T794]  ? mutex_unlock+0x90/0x240
[   47.515505][  T794]  kvm_mmu_topup_memory_cache+0x24/0x30
[   47.515520][  T794]  kvm_mmu_load+0xa1/0x2900
[   47.515534][  T794]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[   47.515549][  T794]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   47.515562][  T794]  ? kvm_apic_has_interrupt+0x77a/0x790
[   47.515576][  T794]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[   47.515587][  T794]  vcpu_run+0x4d56/0x7810
[   47.515601][  T794]  ? kvm_sched_clock_read+0x15/0x30
[   47.515619][  T794]  ? signal_pending+0xc0/0xc0
[   47.515632][  T794]  ? __kasan_check_write+0x18/0x20
[   47.515645][  T794]  ? xfd_validate_state+0x68/0x140
[   47.515660][  T794]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   47.515672][  T794]  ? __kasan_check_write+0x18/0x20
[   47.515684][  T794]  ? fpregs_mark_activate+0x68/0x160
[   47.515696][  T794]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   47.515708][  T794]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   47.515721][  T794]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[   47.515734][  T794]  ? _parse_integer_limit+0x195/0x1e0
[   47.515749][  T794]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   47.515763][  T794]  ? kstrtoull+0x13b/0x1e0
[   47.515776][  T794]  ? kstrtouint+0x78/0xf0
[   47.515790][  T794]  ? ioctl_has_perm+0x1bc/0x500
[   47.515803][  T794]  ? __asan_memcpy+0x5a/0x80
[   47.515816][  T794]  ? ioctl_has_perm+0x408/0x500
[   47.515828][  T794]  ? has_cap_mac_admin+0xd0/0xd0
[   47.515841][  T794]  ? __kasan_check_write+0x18/0x20
[   47.515854][  T794]  ? mutex_lock_killable+0x97/0x1d0
[   47.515866][  T794]  ? __cfi_mutex_lock_killable+0x10/0x10
[   47.515878][  T794]  ? proc_fail_nth_write+0x184/0x220
[   47.515891][  T794]  kvm_vcpu_ioctl+0xa43/0x1000
[   47.515902][  T794]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   47.515912][  T794]  ? __cfi_vfs_write+0x10/0x10
[   47.515925][  T794]  ? __kasan_check_write+0x18/0x20
[   47.515937][  T794]  ? mutex_unlock+0x90/0x240
[   47.515949][  T794]  ? __cfi_mutex_unlock+0x10/0x10
[   47.515962][  T794]  ? __fget_files+0x2bc/0x330
[   47.515971][  T794]  ? bpf_lsm_file_ioctl+0xd/0x20
[   47.515981][  T794]  ? security_file_ioctl+0x3e/0x110
[   47.515994][  T794]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   47.516004][  T794]  __se_sys_ioctl+0x126/0x1b0
[   47.516013][  T794]  __x64_sys_ioctl+0x7f/0xa0
[   47.516022][  T794]  x64_sys_call+0x1878/0x2ee0
[   47.516032][  T794]  do_syscall_64+0x57/0xf0
[   47.516048][  T794]  ? clear_bhb_loop+0x50/0xa0
[   47.516062][  T794]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   47.516075][  T794] RIP: 0033:0x7f411e19f559
[   47.516084][  T794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.516093][  T794] RSP: 002b:00007f411efbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   47.516105][  T794] RAX: ffffffffffffffda RBX: 00007f411e425fa0 RCX: 00007f411e19f559
[   47.516113][  T794] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   47.516120][  T794] RBP: 00007f411efbd090 R08: 0000000000000000 R09: 0000000000000000
[   47.516126][  T794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   47.516133][  T794] R13: 00007f411e426038 R14: 00007f411e425fa0 R15: 00007ffc2d252c28
[   47.516141][  T794]  </TASK>
[   47.910596][  T368] hub 5-1:0.0: 5 ports detected
[   47.916091][  T368] hub 5-1:0.0: insufficient power available to use all downstream ports
[   47.964898][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   48.114891][    T9] usb 2-1: Using ep0 maxpacket: 16
[   48.121242][  T368] hub 5-1:0.0: hub_hub_status failed (err = -32)
[   48.127860][  T368] hub 5-1:0.0: config failed, can't get hub status (err -32)
[   48.135895][    T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   48.144972][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.152971][    T9] usb 2-1: Product: syz
[   48.157387][    T9] usb 2-1: Manufacturer: syz
[   48.161993][    T9] usb 2-1: SerialNumber: syz
[   48.174895][  T371] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   48.324942][  T371] usb 1-1: Using ep0 maxpacket: 32
[   48.331076][  T371] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   48.339424][  T371] usb 1-1: config 0 has no interface number 0
[   48.346850][  T371] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   48.356086][  T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.364108][  T371] usb 1-1: Product: syz
[   48.368516][  T371] usb 1-1: Manufacturer: syz
[   48.373507][  T786] overlayfs: failed to resolve 'lower': -2
[   48.379561][  T371] usb 1-1: SerialNumber: syz
[   48.384411][  T785] overlayfs: failed to resolve 'lower': -2
[   48.393455][  T371] usb 1-1: config 0 descriptor??
[   48.398991][  T368] usbhid 5-1:0.0: can't add hid device: -32
[   48.405277][  T368] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[   48.414902][  T371] smsc95xx v2.0.0
[   48.709127][  T293] ------------[ cut here ]------------
[   48.714655][  T293] WARNING: CPU: 0 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190
[   48.724235][  T293] Modules linked in:
[   48.728153][  T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   48.739804][  T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   48.749877][  T293] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   48.755531][  T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2e 58 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 ca 3d ff <0f> 0b e9 3e ff ff ff e8 ba ca 3d ff 0f 0b e9 6e ff ff ff 44 89 f9
[   48.775176][  T293] RSP: 0018:ffffc9000120fb88 EFLAGS: 00010293
[   48.781234][  T293] RAX: ffffffff824b8b7a RBX: 0000000000000000 RCX: ffff88812206a780
[   48.789239][  T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   48.797307][  T293] RBP: ffffc9000120fbb0 R08: ffff88811b78e4ff R09: 1ffff110236f1c9f
[   48.805280][  T293] R10: dffffc0000000000 R11: ffffed10236f1ca0 R12: 0000000000000000
[   48.813241][  T293] R13: dffffc0000000000 R14: ffff88811b78e460 R15: ffff8881210de000
[   48.821237][  T293] FS:  0000555572f52500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
[   48.830165][  T293] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   48.836743][  T293] CR2: 00007ffd90c8af70 CR3: 000000012434a000 CR4: 00000000003526b0
[   48.844707][  T293] Call Trace:
[   48.847979][  T293]  <TASK>
[   48.850902][  T293]  ovl_do_remove+0x824/0xd10
[   48.855491][  T293]  ? ovl_set_redirect+0x780/0x780
[   48.860508][  T293]  ? __cfi_down_write+0x10/0x10
[   48.865359][  T293]  ovl_rmdir+0x1e/0x30
[   48.869414][  T293]  vfs_rmdir+0x3db/0x560
[   48.873647][  T293]  incfs_kill_sb+0x102/0x220
[   48.878240][  T293]  deactivate_locked_super+0xd2/0x270
[   48.883600][  T293]  deactivate_super+0xb8/0xe0
[   48.888274][  T293]  cleanup_mnt+0x438/0x4d0
[   48.892674][  T293]  __cleanup_mnt+0x1d/0x40
[   48.897079][  T293]  task_work_run+0x1e8/0x260
[   48.901657][  T293]  ? __cfi_task_work_run+0x10/0x10
[   48.906766][  T293]  ? __x64_sys_umount+0x12e/0x180
[   48.911778][  T293]  ? __cfi___x64_sys_umount+0x10/0x10
[   48.917150][  T293]  resume_user_mode_work+0x35/0x50
[   48.922269][  T293]  syscall_exit_to_user_mode+0x63/0xb0
[   48.927728][  T293]  do_syscall_64+0x63/0xf0
[   48.932151][  T293]  ? clear_bhb_loop+0x50/0xa0
[   48.936910][  T293]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   48.942883][  T293] RIP: 0033:0x7fb32e3a0797
[   48.947301][  T293] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   48.967093][  T293] RSP: 002b:00007ffd90c8b5c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[   48.975536][  T293] RAX: 0000000000000000 RBX: 00007fb32e435f63 RCX: 00007fb32e3a0797
[   48.983517][  T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd90c8b680
[   48.991492][  T293] RBP: 00007ffd90c8b680 R08: 00007ffd90c8c680 R09: 00000000ffffffff
[   48.999467][  T293] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd90c8c710
[   49.007451][  T293] R13: 00007fb32e435f63 R14: 000000000000bc31 R15: 00007ffd90c8c750
[   49.015435][  T293]  </TASK>
[   49.018441][  T293] ---[ end trace 0000000000000000 ]---
[   49.027273][  T293] ------------[ cut here ]------------
[   49.032742][  T293] WARNING: CPU: 0 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190
[   49.042138][  T293] Modules linked in:
[   49.046032][  T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Tainted: G        W          syzkaller #0 89738cdce93e33c1079eaf7360b55d01ca9e3330
[   49.059138][  T293] Tainted: [W]=WARN
[   49.062925][  T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   49.073000][  T293] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   49.078639][  T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 2e 58 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 ca 3d ff <0f> 0b e9 3e ff ff ff e8 ba ca 3d ff 0f 0b e9 6e ff ff ff 44 89 f9
[   49.098273][  T293] RSP: 0018:ffffc9000120fb88 EFLAGS: 00010293
[   49.104334][  T293] RAX: ffffffff824b8b7a RBX: 0000000000000000 RCX: ffff88812206a780
[   49.112313][  T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   49.120401][  T293] RBP: ffffc9000120fbb0 R08: ffff88811b78e4ff R09: 1ffff110236f1c9f
[   49.128379][  T293] R10: dffffc0000000000 R11: ffffed10236f1ca0 R12: 0000000000000000
[   49.136354][  T293] R13: dffffc0000000000 R14: ffff88811b78e460 R15: ffff8881210de000
[   49.144338][  T293] FS:  0000555572f52500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
[   49.153269][  T293] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   49.159853][  T293] CR2: 00007f474d0d7fe0 CR3: 000000012434a000 CR4: 00000000003526b0
[   49.167856][  T293] Call Trace:
[   49.171140][  T293]  <TASK>
[   49.174074][  T293]  ovl_do_remove+0x824/0xd10
[   49.178714][  T293]  ? ovl_set_redirect+0x780/0x780
[   49.183736][  T293]  ? __cfi_down_write+0x10/0x10
[   49.188595][  T293]  ovl_rmdir+0x1e/0x30
[   49.192672][  T293]  vfs_rmdir+0x3db/0x560
[   49.197080][  T293]  incfs_kill_sb+0x197/0x220
[   49.201668][  T293]  deactivate_locked_super+0xd2/0x270
[   49.207043][  T293]  deactivate_super+0xb8/0xe0
[   49.211708][  T293]  cleanup_mnt+0x438/0x4d0
[   49.216127][  T293]  __cleanup_mnt+0x1d/0x40
[   49.220530][  T293]  task_work_run+0x1e8/0x260
[   49.225159][  T293]  ? __cfi_task_work_run+0x10/0x10
[   49.230281][  T293]  ? __x64_sys_umount+0x12e/0x180
[   49.235311][  T293]  ? __cfi___x64_sys_umount+0x10/0x10
[   49.240692][  T293]  resume_user_mode_work+0x35/0x50
[   49.245802][  T293]  syscall_exit_to_user_mode+0x63/0xb0
[   49.251258][  T293]  do_syscall_64+0x63/0xf0
[   49.255678][  T293]  ? clear_bhb_loop+0x50/0xa0
[   49.260356][  T293]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   49.266249][  T293] RIP: 0033:0x7fb32e3a0797
[   49.270648][  T293] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   49.290277][  T293] RSP: 002b:00007ffd90c8b5c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[   49.298696][  T293] RAX: 0000000000000000 RBX: 00007fb32e435f63 RCX: 00007fb32e3a0797
[   49.306660][  T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd90c8b680
[   49.314635][  T293] RBP: 00007ffd90c8b680 R08: 00007ffd90c8c680 R09: 00000000ffffffff
[   49.322600][  T293] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd90c8c710
[   49.330565][  T293] R13: 00007fb32e435f63 R14: 000000000000bc31 R15: 00007ffd90c8c750
[   49.338532][  T293]  </TASK>
[   49.341550][  T293] ---[ end trace 0000000000000000 ]---
[   49.351513][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[   49.372795][    T9] usb 2-1: USB disconnect, device number 12
[   49.474937][  T368] usb 5-1: USB disconnect, device number 3
[   49.565365][  T371] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   49.576594][  T371] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   49.586656][  T371] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   49.598379][  T371] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   49.609062][  T371] usb 1-1: USB disconnect, device number 13
[   50.135036][  T309] bridge_slave_1: left allmulticast mode
[   50.142913][  T309] bridge_slave_1: left promiscuous mode
[   50.156023][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.169295][  T309] bridge_slave_0: left allmulticast mode
[   50.175017][  T309] bridge_slave_0: left promiscuous mode
[   50.180635][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.226330][  T309] veth1_macvtap: left promiscuous mode
[   50.231893][  T309] veth0_vlan: left promiscuous mode