last executing test programs:

3m30.189596654s ago: executing program 2 (id=1699):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x9, @control_area=0x2e, 0x4, 0x7, 0x9}}], 0x38})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m30.150014058s ago: executing program 2 (id=1701):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x3, 0x5, 0x7, 0x16}, 'syz0\x00', 0x10041})

3m30.061616877s ago: executing program 2 (id=1702):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x8080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000540)={"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"})
r4 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0x80a0000, 0x5, 0x60, 0x7fffffff, 0x0, [{0x41, 0x9, 0x40, '\x00', 0xd7}, {0x51, 0xa, 0x5, '\x00', 0x9}, {0x72, 0xfb, 0x80, '\x00', 0x5}, {0x40, 0x0, 0xe9, '\x00', 0xd}, {0x1, 0x9c, 0x7f, '\x00', 0x30}, {0x7e, 0x4, 0x8, '\x00', 0x9}, {0xb, 0x58, 0x8, '\x00', 0x2}, {0x4, 0x6, 0x75}, {0x5, 0x0, 0x10, '\x00', 0x7f}, {0x8, 0x18, 0x3, '\x00', 0xb0}, {0x4, 0x7, 0x7, '\x00', 0x2}, {0x5, 0x3, 0x65, '\x00', 0xfe}, {0x10, 0x9, 0x1, '\x00', 0x4}, {0x80, 0xaa, 0x8}, {0x7f, 0x1, 0x8, '\x00', 0x8}, {0x8, 0x4, 0x5, '\x00', 0xfa}, {0x3, 0x5, 0x1, '\x00', 0x2}, {0xe8, 0x6, 0x80, '\x00', 0x5}, {0x8, 0xc, 0x4, '\x00', 0xb}, {0x8, 0x9, 0xa, '\x00', 0x7}, {0x9, 0xfe, 0x9}, {0x7, 0xc5, 0x7, '\x00', 0x40}, {0x10, 0xff, 0x4, '\x00', 0x6}, {0xd, 0xbc, 0x3, '\x00', 0x1}]}})

3m29.290096926s ago: executing program 2 (id=1708):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000100))
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', &(0x7f0000000180), 0x4000)
r1 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x8)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)

3m29.2479911s ago: executing program 2 (id=1709):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m29.156390729s ago: executing program 2 (id=1711):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x175002, 0x1f8)
read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/timers\x00', 0x41, 0x0)
write$uinput_user_dev(r2, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000580)={0x1, 0x0, [{0x1, 0xfffffffd, 0x1, 0x10000, 0x0, 0x1200000, 0x4}]})
r4 = memfd_create(&(0x7f00000005c0)='/dev/sda1\x00', 0x1)
r5 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000680)={0x0, r5, 0x9, 0x6, 0xfffffffffffffff9, 0x7})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$FIBMAP(r6, 0x2284, &(0x7f0000000640)=0x3)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x3, 0x5, 0x7, 0x16}, 'syz0\x00', 0x10041})

3m29.101658295s ago: executing program 32 (id=1711):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x175002, 0x1f8)
read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/asound/timers\x00', 0x41, 0x0)
write$uinput_user_dev(r2, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000580)={0x1, 0x0, [{0x1, 0xfffffffd, 0x1, 0x10000, 0x0, 0x1200000, 0x4}]})
r4 = memfd_create(&(0x7f00000005c0)='/dev/sda1\x00', 0x1)
r5 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000680)={0x0, r5, 0x9, 0x6, 0xfffffffffffffff9, 0x7})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$FIBMAP(r6, 0x2284, &(0x7f0000000640)=0x3)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x3, 0x5, 0x7, 0x16}, 'syz0\x00', 0x10041})

3m14.893355461s ago: executing program 3 (id=1815):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000100)=0x3000)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000180))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m14.378020423s ago: executing program 3 (id=1817):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x841}}], 0x1, 0x11)
sendfile(r1, r0, 0x0, 0xfffffffffffffffc) (async)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xe05, 0x3a, '/selinux/access\x00', 0x3a, 'kfree\x00', 0x3a, './file0'}, 0x3d) (async, rerun: 64)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040), &(0x7f0000000080)) (rerun: 64)

3m14.325584379s ago: executing program 3 (id=1818):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x9, @control_area=0x2e, 0x4, 0x7, 0x9}}], 0x38})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m14.259917696s ago: executing program 3 (id=1820):
r0 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xe3\x03\xc8\xb6\xa9D\xcc\xf4#\x9e4vmB\xd3\'\a\"\x80_N\t>\xd6\x98\x06\x00\x00\x00\x00\x00\x00\x00l\xcf\xa2\xb8\xdf4\xd8\x1d\x83\xf3\xf4\xedn_\xad\xbdt', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
pwrite64(r0, 0x0, 0x0, 0xfffffffffffffffd)

3m14.189628703s ago: executing program 3 (id=1822):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/lo/tx_queue_len\x00', 0x0, 0x0)
read(r1, &(0x7f0000000300)=""/209, 0xd1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000002c0)={0x0, &(0x7f0000000040)=[@enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0xbf, 0x1}}, @nested_vmlaunch={0x12f, 0x18}], 0x50})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r5, 0x8000000)
munmap$IORING_OFF_CQ_RING(r6, 0x2f51)
syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m14.189340853s ago: executing program 3 (id=1823):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m58.901452389s ago: executing program 33 (id=1823):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m36.729417606s ago: executing program 1 (id=2032):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

2m36.565778463s ago: executing program 1 (id=2033):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x7ff, 0x93, 0x9, 0xc0, 0xc0, 0xf, 0x21, 0x8, 0x7, 0xa, 0x0, 0x7, 0x6}, {0x5, 0x5, 0xf9, 0x8, 0xdd, 0xff, 0xd, 0x3, 0x5, 0x9, 0x7, 0xa, 0x4}, {0x3, 0xa, 0x6, 0x7, 0xf8, 0xf8, 0x8, 0xff, 0xa, 0x85, 0xc, 0xa7, 0x6}], 0xffbffffa})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000940)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000240)="0f01c9829d00000b65f20f58a427fa0f0866b8bf0600000f23c80f21f86635080040000f23f8ba410066b80000000066ef0f79d666b9ef0b000066b814d8000066ba000000000f3066b9340200000f32f0307a07", 0x54}], 0x1, 0x6e, &(0x7f00000003c0)=[@dstype0={0x6, 0x3}], 0x1)

2m36.523283777s ago: executing program 1 (id=2034):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000007c0)={0x0, &(0x7f0000000800)=[@wrmsr={0x65, 0x20, {0x40000108, 0x7}}], 0x20})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000840)={0x1, 0x0, [{0x40000001, 0x6a, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
writev(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)="22e3251524bc70f5fbc250fb7d316c", 0xf}], 0x1) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) (async, rerun: 32)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="220000001b31875e5939254315028df484954317da5a08896dedbc422a292462e6d0e23b7def8784cb7086c5b8ffeda5ebf8eeaaa0827f18dbacad3bfbb4562ac2e315c745374b5a0145a1f4d0c3265f2f1e3794d968feceff2e1cf37391656ba94a528cc3159e8cb688b2f8c4929ec2718a08657c14ae4857701c1640d98b590cd6303587b92798", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf250f0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040) (async, rerun: 64)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64)
bind$bt_hci(r7, 0x0, 0x0) (async, rerun: 64)
write(r7, &(0x7f00000000c0), 0x0) (rerun: 64)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r8, &(0x7f0000000140)='100', 0x3) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) (async)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x800080, &(0x7f0000000280)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) (rerun: 32)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x100) (async, rerun: 32)
r11 = open$dir(&(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x1200, 0x20) (rerun: 32)
statx(r11, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x6000, 0x80, &(0x7f0000000680))
move_mount(r10, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901)

2m35.429693098s ago: executing program 1 (id=2036):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000800), r1)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000200)=[@enter_looper, @increfs]})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, 0x0, 0x0, 0x10100, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/events/sched/filter\x00', 0x1, 0x0)
writev(r4, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x1a0}], 0x1)
io_setup(0x7, &(0x7f0000000100)=<r5=>0x0)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x42, 0x0)
io_submit(r5, 0x0, &(0x7f0000000240))
mkdirat(r6, &(0x7f0000000300)='./file0\x00', 0x108)
wait4(0x0, 0x0, 0x8, 0x0)
unshare(0x20000000)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_clone3(&(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r7], 0x1}, 0x58)
wait4(r8, 0x0, 0x8, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)

2m34.950739527s ago: executing program 1 (id=2041):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x123000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x9, @control_area=0x2e, 0x4, 0x7, 0x9}}], 0x38})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000340), 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x9)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000380))
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m33.949552409s ago: executing program 1 (id=2047):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000940)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000500)={{0x58000, 0x5000, 0xf, 0x0, 0x8, 0x4, 0x0, 0x2, 0x0, 0x8, 0x4, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0x1, 0x9, 0x0, 0x5, 0x7, 0xff, 0x1}, {0xa03a19760224864a, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x98, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x81, 0x8, 0x2, 0x5}, {0x6000, 0xffff1000, 0xf, 0x1, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x70000, 0x50000, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0xdddd0000, 0xddde1000, 0x11, 0x3, 0x4, 0x2, 0xa0, 0x20, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x3, 0x7, 0xb, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000}, {0x30000, 0x2}, 0x80010031, 0x0, 0x0, 0x23c, 0x1, 0x0, 0xd000, [0x3, 0x1000000000000, 0x40000000001]})

2m33.811204323s ago: executing program 34 (id=2047):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000940)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000500)={{0x58000, 0x5000, 0xf, 0x0, 0x8, 0x4, 0x0, 0x2, 0x0, 0x8, 0x4, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0x1, 0x9, 0x0, 0x5, 0x7, 0xff, 0x1}, {0xa03a19760224864a, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x98, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x81, 0x8, 0x2, 0x5}, {0x6000, 0xffff1000, 0xf, 0x1, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x70000, 0x50000, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0xdddd0000, 0xddde1000, 0x11, 0x3, 0x4, 0x2, 0xa0, 0x20, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x3, 0x7, 0xb, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000}, {0x30000, 0x2}, 0x80010031, 0x0, 0x0, 0x23c, 0x1, 0x0, 0xd000, [0x3, 0x1000000000000, 0x40000000001]})

7.518292125s ago: executing program 6 (id=2856):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x5})
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x81, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0xf, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.36956331s ago: executing program 6 (id=2857):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x26)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1}, {0x4000, 0xffffffff, 0xe, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000340)={0x1, 0x1, 0xfac8, 0x4, 0xffff, 0x500000})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'syz_tun\x00', &(0x7f0000000480)=@ethtool_coalesce={0xf, 0x28, 0x0, 0x8008004, 0x0, 0x2, 0x2, 0x40001, 0x0, 0xfffffffc, 0x80, 0x9, 0x6, 0x0, 0x20004, 0x800005, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0xfffffffc}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f00000003c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.006737614s ago: executing program 6 (id=2863):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x3a, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000180))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.002406054s ago: executing program 0 (id=2869):
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x0, 0x5e, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000024c0)=<r1=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, r1, &(0x7f0000002940)={0x0, 0x9b0d, 0x200, 0x0, 0x104}, &(0x7f00000029c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfff, 0x1004, 0x0, 0x209}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb55f, 0x8000, 0x0, 0x156}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x99d7, 0x4000, 0x0, 0x362}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3430, 0x80, 0x2, 0x256}}], 0x4, &(0x7f0000003c40)={0x2e, 0x1a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x4, 0xdb3, 0x0, &(0x7f0000002c40)=@buf_4k="0be988bcc3a9cb420dd2ed8567fc1362b882e1f69177b457b4bbe432150295c8ebb24cc3435d77f14a6dea69e5caac276e75cb2ae3b0ef826e434253ab2d78d5de06c565f0496fd6935a6eaaa595204ae7aeaff42bdd8e250c8c1f11ee47acccb8fa071ea0f63a651984a32815ca96a4def779562e95c27e54568a3b509c6440d1c077b85dd9a32b07a774b0c9c9abd5a87966cc3c18b0c550952b694cdaa585e3529974d8d82e41ba9ce194c247a30b65cc4fea7da40c86eddcbd62c277cdefb5d92215a846aac30661a8465a5015120f37a6b59757437f1bbd8df0705809d046fb41eb2a34df922bc34db2dc38d31f52f7cb131c2fdb6c4366acb6ca16aa545726e2bcedb2fd97b10a2982fe6bff8e013e68447888c620b69225d0165b11fecb2ca7fa7ee9f70dcf7514237b749788368d81d13de7f614a870ef7bd5e0f2af3de8cf576b3c5010a4b8ff05a7bc66d918c949cb656cc7848047d2574e2ed3b37c252b48adaaaeeeed88eb462c3c4544dec676f2f4ce59c3effab2dbd3044913956f618a8abdff0c681884d0347a95ffb3e3ccd1ecb00cfc259724c00ae9f89c0d64ed44d8ce981d1a51e3cc46e4fcb7d5d2024d97adefffefc57f66f444cf22e99cbcd6d00868a3b01909ce7325432d23b4a54704f8aedb3445194bcf2a8ada572c8f2d7ffa81aac37f659b8467443c72e3c6684c69a27be8a2ae39033e907e79c714982144ffdbf882a65a0146fe1608035026f3b78552ee97d23875604313648bd9caf208e8677ce6141139d99e080b00d47582a017a719bd669973ee4cba127b2ad939a3bf4da1ad7fc75138773acc7ade4fdc9cf5723fd774b6b7ae3172c3a1850d7430afd5566ecc3a5461908c355d1cbdc0620263aad2ba0048c20530f72a89ba506cbfa330da6397a57f2cb788609a443a7a3f6d4fab6c2ffdac5073057948bd1b5b869f569342ca552b34df4abd58192267f4a4aa3963d114f2b0b5b1ddf1a343d113098392ee95318be8ae1a62f2eb6b9286bcfa3b555a6bd76614ed9b6d0321a723b583a8f5e3147a003354bdf8cb452fc0d140eee8b1762aec288f0c579e417baa5d18c9367080a74af54ac8b2913c2ecbedb7b6e469d1ce35b3ef2b18f86c9d7a8bb396dd2d898b72534a0b4070213588042409d7856a43aae4034cecfea96132436a677042d2460d9fb1de8e4708140f03b44d644addfc8cce60ae36cb01da34a67c69597221b73d32b02be6fe953b5166677c3fe39665605cb8dd589aa7b76fd2d8bef53575df4b3cbd79fcc7a1468168141f553977982f69a058b805818b8ae3264eb113eb6486683c4f45ad2ae2e007e629eb91f929deb005750606c4d055e12c95808f0e59378f7b28cfe5719d950303356ec1997b9e7e1d7bed7ca86b9fefd57e0b8ad500d71af7ba6d5ab32da3494da869ffcd0d160d974201d19ade4dda2324bb2f9573e1c2fa925aee4c307a992297302bb450c93391079e829aa4d27b06c185578e15fb596895721df11a79aed0cce1ad581365c980da38bf6ba3e04b8389a55becaf801cc7c9b538674cdd1be518a0738162c58666c576af8b08ef08855aa76590dc1295d2b1d52a82862c223e4fa1cfd265caa1bd89f5d8077ea2cd4d7c8d79bc346d6b5c8d53da3abe5e898f3e586823c19a5eb7e852356a6194221593e7a771efd2fbe47ea895a176fdcabb9a0469c21dd64909c25cb9ded9b73676b3633ff28ab6140d2132c669c734ffb4e796c852148a2fba05e21f513041c5dd67cd1340c63327dfb8c028f7e7d9ee9a42ae09372573dd94407888b63accfadd9073be2a01ed61cbf05b23388e82f71486f6cf224628939feb359dc05f3afe2c102c62b69dfee39684f20a142061cdb65c1cf02ff52ae9f4d59993c515d0fc57c5b0f6275846b98678a57eef2b74213a6c3a1b85d9d80f281f68f6b312a9f5e51c88211acc58104e1857b3de57f5a7be69c37933c68f02c0ebaa41c7fd12dfb81c7d2a5a45b915acfefa170e8f82c7d62402f8bd661971b8488bfd3b6d02c9f100812aaf30604c3c452f5b497a64486f7addc5a3febe33aa1b4aaa6fd51d7a33150d2620ff4f8774efc1f1f52f401fb3b697faa553e66ff266bbda7ed8990dbea91c0ca89e5048a8b6cc8366d39955e533a145ac6f2fd48097bd42b481cbff3c4c569a6ebd8eb02cd9eea26b9642b323c8216ce809b2f2d6d1f720f48e70af8d9416042959d5a4bc6ed1a63a55633e349ad1c6de551b1c5e84019b75b310374bc2e6f2f0070f22a461304dc0695e1da5c0c57d033e66ddfc884a405c3d059846f59bd08e679bd2a2820db4272eaccb8c16473d72e4ffea17ec9af157b0d2fc6943c1518e2f1ff79733089c5b40ace2ac9ac9d63ec00f39f0e5be65baefdb06507b80eea83d82e13b6d81f3491888e8e29274038c75b7c711b2f5bb633982e9a317df6ea1b69490e57f45cd319bf85cc9d5e5e08ceba00d116ac8c87097fc8d9b402f532e13be43fc4540f598dd62294b161240cd43fc0731faeb36e5fbf5afe8cddb12347f6b1453282c5eb9b14c879a41b518b7450697738893cc7c23cdb867870814f69e1ec013099760e7288e2496245d6918b4898fa99e8e23d77c1b41a501ae128c117cfad41facf8824ea2aa79facb1d1864e4a4621ceae6878c633cae187fef7ff0a031ce57ab82cedf34191f3cc5bd16b7fb3bbed720ce14612cd8dcb978fedb71c7966e0af6af12b97e89588534f047b91914cd31c6ceb12c3d03a75d90f12e847a96b29563ae902f1115728b9705c8804dab00a3643506f20e6e046bb38fcfe58505e06966d31258e041536690133431b8557b8fc00dcb437bb0784700402645014d0b0b81d657f25ed3b19d39ecb94884778c88427c639ba6532acd40c2712e8f384d615634b149446429c5927e11f3b315309dd29b34d72b809da868d51807cc7b87347a88fcbc42806efe81ad67dd0d1026cee3163881354cceb330060769fc31457522f4f670d1017446465a82bce6fd929261607a4e4ddff7cf9439daa614107d51bf557dc9408704d08468f931e37603c578a0113f8fc2ad3640ef17ec5bb7aa8f7e5b23779f6073ae805753f68e261a6fa56c6322f0c94b3e7824f757dbbd76fe7e8637104ae3c46dda93309562761efdd6c0eb95c7570b0e5b256d6452ef2e0e578b63b2be9b844ca82673cfcf9df27b5bbd84e555498414b81f4254285088842b1c4e7725284a421d3e00357ff132c9713bc533f8af4e318ce12a3c29bfe50d7b8b95ec8388e59ed1cd3728f6a1eb421db96d3333e77b08343334a5849894756b04372c33f5558288f4c0b914dee54ffcea20f849dec19e51b0c126200a5666c47cf39bab8163e1f4fe4904712d2c30ac07f0eb1fb9ce4f597bd9edd13926bef11b12c6d5e820ace84b7ee13e8899101d3b784b82a70e0de47b0717f1f6809b2560c9a06326e60a9f59a3a07b045538b355d73eb8456122c10d68d0f16245c76728ba05cd6ac3165c9089dbfb3dda60e405139b4cf8fb445c5a84d0c730ceca80a5a020aee793d1cc72dd689f11c74fdc6ced8f8b9a54fc4a83973a663da7e92b6d77026eadcfb905ffd85c69f6814e52dd488c7acd85db344cc27bcb32879678016bd6486b3ae637546177e82a624942827ea35a88f3992da0b2bd2dd70a511630124e74874d0c1b6964edfbff2855833647b2ddac3d56c2ae3ac10620ea662654dd7fcbfb7cfa8b0bf8459dac9298e2281899eed54fa4a4652dd83cbf8f82655d513450487f60ce6b6e8d0301d7f95a25f23e467290888200524b5cc5bc149819f7bbccf1a58fbb4b58152817c564b15ee1ffed32d91710a7c39fd2c17a772daac5a83f2d8ca87d43ca4ecd84f5a728e27708e4c439575037369dec788f99b662cf542251c880ac568b6747caf6466a91e42fe25c1dd4c0e35e381f49a145aaffe38defff48d5539e7a256080ad4d558e8f68ccb9ec47ddfc56b319e0f4ffd58aed926f3f3a5f6f64e125f1ea2f5d576397322e5379960ca5b8b4671738bad4a6343c3eded59cbfa070825a2052650f9b156798f99b062b5ebe8d3d83845372d1ad6ddb28ee5a94c3e4b9b238ea5ba2eb87d52e1a2d08dcb648220582ba0e2477149b22d4732072dc8d23792801ac3cd391851ccc50b3940211f325987742fd915225349cf5197d43b9662a4115b9feb91241998d8ff73f7c71791f7e7e8ae0a4f98c805013cd155aab34cdfef1267f1d95e4620d7de62357319b88f342e6c23aa84df0057121a3cf1874258688add42ead52fb305eadfcb36e7d5ec7661ba733314755c966bd2e6384da3c7581549a823e9cd3512109e3bc6f6c88a648157610945cd290d048d766d851f1f440d905e8253a8b6a8397baf335a956c0b4af02f783451ac2244509e90d58c52e661526c235c0d693db1f2057dbd6bf02097dd2879e831567b2a00504ba2784bfd1d731ba5d283b600323a6573eb0eb39cf625d0dc2d0406901655d3d2e304c68ccfd90a21a6e24166da1c12499bbfa847a18dc4f21050c69d86c1df8ef0cf34dedfa7844442fd171f2b8c8b705bf8714a83b0ddb38de3d15881b0337c20f25b21761b2f93ee861d0f5b7334233e8f35d815783d152e62de16e4b5192e4359d5fec9d0cb478efbf818ef322f51b743ae29a21c6ccea7943a1c019f855c89695232b177a88321e792fe07765f103579bb6edaefe5f2a7dc95ff99e4dad0b3df07d4d70f7ed1879200ce820800e04c5ca808df63bd53d478c54eb30ee455b7c734c061e40e62766a13796e52967212da1667310150a4f25bf1f682fbe9b7d3c576d4f5e0c62ef6a3d01ae909d5cb8d40778bea6611f4dcc6776c07287887c309a1b9726c5f440f123ba000d0a16f195478523a0a3c5de594df9b32d4131a6f3db4dea8ab3f2b7b9ffa87004cadb862d8f77a15fcc26b22058c0cb877bac70b8f8716f4a2795b166f96b1e64d14b5ac792e0c03bd8c69461bcd5f06793c066ad11f509be2a15566eb27d95024e638509cd14a1ea2f5edaac8cb59a0b37db5c45b6509b98dad90e8307d399ff966acee81513ad0cbc7315b36f8dfdf6d21026d1568cdd6dcc94448c8b46461df57f499430336410aba03a097f922e8bf098832a4b532e6225e9273878ea01e7e35cc3b944da68ae52722e7c3008f5c548ae415ea323ba0d9353a62276e0294cec2d0705e29f82c66fa1bec2fb0d4a86f776aea9c84852c48f865ad937eb0d7a66bc31d3f04eca991e493a5ab348ff09f6186eb6c3ae9b4a63d885b5ec2819d3841d0766f6e4cbbd115275cc21b249750984020aec614ed21a294eed805be372deba5d5cf2c8d3cd58ea65f1d0fad17ca2ff7ca7305edd51def335b9772976b28c2d7b61318b0ee60e4c1b63d88beab2fb3e6f7856bb0f1a2f738eab1d7f6d62c23c9be3595e8ca87413b84c998fef9c37587af49a2c756005fa5b77836445303905f91a2ed7e4613e1e7b716ef99298b0d9b5e6f31dd070c42390fa8b0d8550810b0dbe0ce575f42f0f626bda3804fa3cacf258dc70f1e2368491a8ac11805ab64b05dc1590d1b96dbdd17082707f77f9f86af883301079b3871adfcfe42eca94fc3c782a553f8d9acccee62d221bfbc0c139a51ff76d0b7f45b0dc92492d29701746101c37bfb054b2fd44d55557d76f01595ed34543d71f00bdb3ced043e7d2c1590a83ab08aff268f6b66341cd6bfa5bebf77789ee98c198db89abd007dc939395c42d53ff8017bd4d82b22a57b8e3332156af1c"}}, &(0x7f0000003cc0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x6a, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.001188055s ago: executing program 0 (id=2871):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x5})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x81, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0xf, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.998310695s ago: executing program 6 (id=2872):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x84, 0x0, 0xfe}], 0x9})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x830}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0xfffffffb)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000740)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x28100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000840)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xffffffffffffffff], 0x1ffc, 0x102280})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000900)={[0x100, 0x5, 0x420, 0x4002, 0x9, 0x4, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x200002000001, 0x6, 0x40000000001c, 0x20e1, 0xffffffffffffffff, 0x100], 0x0, 0xe18c5})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setuid(0x0)
pipe(&(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$selinux_load(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cff7cdb9b66f9080000005345204c696eaed52be61b"], 0x10)
fcntl$setpipe(r6, 0x407, 0x401)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x8, 0x2}, {0x1, 0x3}, {0x8}, {0xf8, 0x7}, {0x10, 0x6}, {0xb, 0x5}, {0x40, 0x3}, {0x0, 0x1}, {0x7f, 0x5}, {0x40}, {0x0, 0x6}, {0x7}, {0x0, 0x3}, {0x5, 0x3}, {0x4, 0x3}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x6a, 0x3}], "8e8fdf52edc79b11"}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004881}, 0x200000c0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000540))
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r9, &(0x7f0000000380), 0x10)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000100)=@x86={0x40, 0x6, 0x7, 0x0, 0x6, 0x1, 0x2, 0x6, 0xc, 0x2, 0x9, 0x0, 0x0, 0x101, 0x4, 0x81, 0x2, 0x1, 0x8, '\x00', 0x81, 0x6e31})
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x800)

2.716069834s ago: executing program 5 (id=2879):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000)={'/dev/syzrnull', 0x0}, 0x20802, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x7, 0x10, [0x9, 0x6, 0x841, 0x7], &(0x7f0000000040)=[0x0, 0x0]})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x4000010)
ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x4, 0x3}, 0x100, './file0\x00'})
readlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/9, 0x9)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000400))
pread64(r0, &(0x7f0000000440)=""/103, 0x67, 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfe, 0x26}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000600))
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002680)='./binderfs2/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002800)={0x8, 0x0, &(0x7f00000026c0)=[@decrefs={0x40046307, 0x1}], 0x100, 0x0, &(0x7f0000002700)})
r8 = openat(0xffffffffffffffff, &(0x7f0000002840)='./file0\x00', 0x101000, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x48, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3b, 0x61}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6f2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = accept4$vsock_stream(r8, 0x0, &(0x7f00000029c0), 0x0)
quotactl_fd$Q_GETFMT(r9, 0xffffffff80000400, r4, &(0x7f0000002a00))
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003f80), 0xc02, 0x0)
stat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
read$FUSE(r8, &(0x7f0000004080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2020)
statx(r8, &(0x7f00000060c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000006100)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
r14 = open$dir(&(0x7f00000069c0)='./file0\x00', 0x100, 0xa11110e481e7f3d6)
r15 = fcntl$dupfd(r8, 0x0, 0xffffffffffffffff)
r16 = syz_io_uring_setup(0x758c, &(0x7f0000006d80)={0x0, 0x436e, 0x400, 0x3, 0x2c, 0x0, r8}, &(0x7f0000006e00), &(0x7f0000006e40), &(0x7f0000006e80))
r17 = ioctl$UDMABUF_CREATE_LIST(r8, 0x40087543, &(0x7f0000006ec0)={0x0, 0x1, [{r8, 0x0, 0x2000, 0x2000}]})
r18 = eventfd(0x3)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000dcc0)=[{{&(0x7f0000002a40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="a552d62c3845903cebab15110c9e15d10094ea9c9168e212e0aec70699ce6f786a46e5791d71f57e075a8b58c1f3ac9ef266baabcfbc40d1d866f143ab4e12fafbbdc1bb172ec59456bc4a581a12d8b648abbfc863e8c078115bef39fd3c1fa796b815aebf712c", 0x67}, {&(0x7f0000003b40)="7afa7c1038030f60780c14094c1beb635f44fa3758f850c4bf725b8d5227e4d357a5c97e4850874e9dc65fbcd3b4ba19b7c4e63b5dde10ee1e1420f7dc1a08f04d2812b01b50c3c04539f63e88e19f2644a8c3f23f0520128e279d4ef96223de8760589b806afc92305280582480a08d2637e9a0d21a52c9a2aa793ce924a0", 0x7f}, {&(0x7f0000003bc0)="4f853fc5f9b0617b3ef73aaf06ca966f335ea1bddc1f02e7382a9f12740d3c6a45d50d4d121be02bcdce13968ad67ce5ee875d12856d2d12a2f85200f6d0ed33ed57782335ba15180589c6811835ec43", 0x50}, {&(0x7f0000003c40)="15d42eeaa4cc5cc4f6a119de7154fa126915e92de397d6aeddc089085b91c50ff867e49d7f66a5035095e4fa4ea93be8e5caa1ce02bd94babe948909ab57285e27e1dadf5e4602fe35928657120d5ace76ebdd4f2eac9bf540a5", 0x5a}, {&(0x7f0000003cc0)="b43f5c5e551fd08d06424287ef1084043eeafd017b30d0d6c51d93c42790e67ee2f44640a645bafa67c76380fb06d6664c85a4bee2beeacc19a33eff77dda25d156a3b85a6851cbc5f6e74c2c0a8e51b6eb31e681a64d186aab8b1f5926a41fcd421805da8ecc4a20789582c3332dc563d49e6b65e97a523c914c55a032d638cb8af51a5ec81bb889f3e66059260118b7f146c83acf84d3a8dfea424ba3f541714f5af8eca672eeaaaeae028020a54ee4543f8e34b0ec871671b7319ba538693905761b8bceb16662928", 0xca}, {&(0x7f0000003dc0)="d69a14faa7970f8d51802ee748b8e3fe5cea941c18b3532baf1beb74b213c2181fe1cb9e04c7508e9c85af1b86d4d69c83c903602054ca33ad99665c71304bfdef5e44dc8cf5a40a15e73376c7ba53e2de4981415e9294ba90df9048f1bf0944a28b628e1af855a01f52cf04b4e34ee45a4ad09da47ef583a13145596bca23d3ce826bdc5ebac2d444", 0x89}, {&(0x7f0000003e80)="33222fdc776ccc56cc922e563979f17e87d3b9e5df9253acef71441ded26bae1906af75378db9f497c4f06c8ecbf4372c277e8398a8ebc27391a4e371cd43ce0c4be0692b997fa2c512ebf4c4ea3c677772245b33e8fa39c54baa83e2be36ce2e59ae7f29979874ce600d5034df5009c072ee826f7becc69", 0x78}], 0x8, &(0x7f0000006200)=[@rights={{0x38, 0x1, 0x1, [r9, r8, r0, r8, r9, r9, r8, r7, r10, r9]}}, @cred={{0x1c, 0x1, 0x2, {r6, r11, r5}}}, @rights={{0x18, 0x1, 0x1, [r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r12, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r13}}}], 0xb0}}, {{&(0x7f00000062c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006900)=[{&(0x7f0000006340)="cb5e03ee0803a4cd9b2306513c2b720b546336364cf3a84739dd64aa47e9a86e80f8", 0x22}, {&(0x7f0000006380)="0e85755f2c4554c9c8ba594fa5d8c76f1a4597a0fc12ae09d57b96925d16ac2272490b707e6e0c5173074e38c6c8727318ece7523dd075b52f981fa6d986f99e3fcd777f354f176b382c4e119ba95f884176c3a0dcc725c9d74718780e9df089e2bd0949e8889d3eb75930ce1a8f9dd52eec904047d0", 0x76}, {&(0x7f0000006400)="ec426593f5c048fb7ccca3e4bed2f6f91344b0d496bd4948c402e02593041ed05266cc8463f61b442ad2407910839d0f53d552e251944347e7533660cf50bbbdb07a61326546f46e39332039664c2bebe4828d4a9cbca446aab096097baecacc067be1a2d40a957cbd8ccbc727b3b8916c69451111427daba0f88844613234a90d57a53c56cfafd4408f480ee0b29f4886b09c681f2e884378241ad400e36badfdf618ed16dd82", 0xa7}, {&(0x7f00000064c0)="51bc79cd122dfcb5df4011033bfa5dde475a8bafd571e8438164becdd5785ae600eebc49b6083b789c1cc901eebc3d4101e9e9b1a89c75379e026fafab784b6249fc656eb917b1c030c8467a1d7c9fe74ca61d1030dadc5ddf21acddeab8bad9d31a7751b47578ef2cdb68322da026e8e80db690a2d3da62f020fd935680f3fdbff00737d5708e0d21ddc4c473c7fc7ea14dd83793db1e64204d2c1ef2", 0x9d}, {&(0x7f0000006580)="844eeaa738493ff48bc73090251c93286f51fe190504d195457c1079a5476c0d6f56ddd087fd765c0260514cde9c2a084614eb4588051195d6fac1057ce170bdaaebd964011f9f486a735525bf66a5722ca87b88235f5ee813ce7ea9b2ffbf3368acca900822cf98386aeb996ebd94bf78b6d144c3044fc814e32e1907e0c8f9014eabc8db487d3da7b79a0ac07dbf93c3659804335f76bc71d4e7401074319d6d463eb27962f6c5dd76c9dfcaf010eb5e5baa6f4435ae431d477469ec66881065bbb26f8437291423a79420f6d79f0d17a48f2d804d941fc9", 0xd9}, {&(0x7f0000006680)="71fb18a61d37", 0x6}, {&(0x7f00000066c0)="ce22ecfd9a8085d5cc4393da8715d00f1d89071bbece4ea630d1456729eb17efed0bed7fb0eb014cde49d0215485c74e258ba5888187798ca1e9370c2d24f4121848826adb3959c1694a4d33035bfca0d96442e065576d91096e6b8157978854dbda6477288e054d6435a61e7a3c9422b199007acfba4a94f99ac5ab93f4a67407e1eb32af8a22ef5db0563de45b945c0f9db03a0c7481152c4a5f879f6989d62f6e94da2525acc5a7d9503d6381df71e9a02279fd874ade000d08a2a317384cb90f132490036f8388", 0xc9}, {&(0x7f00000067c0)="6d29a95f76590fb3f4544cd7818e61a8d829bd9c41ea8e842f4ab0644a45d06bf16b87e16c7aab79e175699850bda0fbd4ed4635bcc6313c93b3c3c2af3c199006e9cdbf3f06c1ee6d492bfe202e8c903ff5cee8c0debacf6239ebca46181eeb853a1bf2cb4aeb0f2c8ed5ba07b81dea99", 0x71}, {&(0x7f0000006840)="c715b781f0b3b51ab38ad245c3bec7c8ed7a39a3676f90dab466093d3a3a316d2fe78620a529ca348d8810b85a8f2b647340fbb1a34681bedd3dbaf4", 0x3c}, {&(0x7f0000006880)="dd62a625c7aa60e06728220916aaacf9aa469d266743282f6a5b6a20ad1bb4e391d26b9f118c58531d4034917472e4f28fe8c5448f9c2ba28e3665843c16c782fe11310a96ce2347b0847339b01d2c3a98aaa222e1a339b56f43bc01f93bfd32cc2e0e91799e8dc30a6b400617791decc2ec0aff71", 0x75}], 0xa, &(0x7f0000006a00)=[@rights={{0x28, 0x1, 0x1, [r14, r7, r7, r15, r8, r7]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, 0xee01}}}], 0x48, 0x40c5}}, {{&(0x7f0000006a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006d40)=[{&(0x7f0000006b00)="935f07ae5f0f7ad0719a69072ea74f24ec82515f2e363b9ebf11f3c90702a19dea99b5a89e23081754bdf6154c0568f9ea5c8cabb6e80cfb39ce6a4c3c6c1da17906c4dc83ff78abe9339811abd95019b8404b491fcda4c4a1427996d4d26bc628122099f9e554cf594269df499eee20a3ef54cbc7a68103f41c3081e424975f0ffa697d80a9a0f62c306f80231fea5eca36f46187241dcd24dab5bf9dc80893574bd040be", 0xa5}, {&(0x7f0000006bc0)="18d88ac4b8d78c042495aa70b56511f84c7bef24872b4cf4316f9723c2704426d52bcec6594f080de5d56afa10a3afc0fce34e0223721d1abad4ec4ceaaef338a4c89cacc7e51d4eec668baad8808622f3092db106667ddbbe171424be7474bf6449635c6fec3b73609a182599f9b5b40c39b020891f5a05", 0x78}, {&(0x7f0000006c40)="23a4f1f50267ac8c2c6c6f71", 0xc}, {&(0x7f0000006c80)="00bee6d85e3a8484a47c36f12f332e77e59c6410773860ad0e65fee0b29f5f56447ed18d21ed894bd9bed9563a3080e0635460c9799e6fe7dfa0fd18fb9b31847d4147159937612cae09f1d6f7413de324e6403a8b7492dce1741080503aee455fedba977122f43d617a17f143310f4fa92e12a5515865cf7cd8a04102be039b07d239fa14bd4447e71b3e57644f0e8fd5b1882e82fdba3885ee963a759f84", 0x9f}], 0x4, &(0x7f0000006f80)=[@rights={{0x30, 0x1, 0x1, [r7, r7, r0, r3, r0, r16, r0, r7]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x28, 0x1, 0x1, [r8, r17, r18, r8, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}], 0xf0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000007080), 0x0, 0x0, 0x0, 0x20008010}}, {{&(0x7f00000070c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008480)=[{&(0x7f0000007140)="3f8efe588366f4eb46849672516227ff93cd81208531f3700e21cda7304b29648e988bdcd5aef9927555d9d97a7f6369a6a738af4e657c1651c62b9aadb71807b16eb5eb63499bd7e27fc553fb5fcaea636888c9f8db95cbf905c3941ee0cbea5344dc551e19b1e66076d77028f4083a50cfdc3834f529d9c1f476c8160e5dddbcbf93e69cc6f55600a1c6b5c20344cfca9fc2c1c6a4780a2ece797134d070f05d36165c4f75b56307673a641b10e88a46894c7f75386a9dcb77b0d614b4e3cd1c4e49458f33d2d4f2978162bedfdf0b40e22eb587d75665b27dda6769871c91f30d2fa18efe73b15d1e3c", 0xeb}, {&(0x7f0000007240)="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", 0x1000}, {&(0x7f0000008240)="5d11205364a123bb2f8357b748847e258d3ca81c4869e8b0453b68a713e55d92418f6b2428cb1c5e9d097f3ece01d2b8fb489f619080b3ccf07c150af183cc83741bc11566b6ed6366723e9de2c646272fe93de5f0a628cf4abee94a72e3f0183eee0f1ea3c963a07193eecc4b", 0x6d}, {&(0x7f00000082c0)="63447b698392029ee6404173d7fdd03e21f700e5347925f8bd", 0x19}, {&(0x7f0000008300)="ebc6d700c2f5c7d7bfc3961cfa580518d6227dce1afe056e8d7b1918e6c51e6e3b5e1ab34ab9c889c1e75153d060ddcd57785311a4e3b483605341dad6b0e9f45a63f73ded413bab7e4773e8d13a3cf8d0138c05ec8aac2aa0c5a3a079a83708d085967c898030cc0204034cccea4aa026ad6ba1029a3c38dc3a2d480a91938e664b18834e4ebd6de449e1a858f99ba69bc7147ea4268911a9ac7eb05afe3c32aca369e3e5d5a785bd9ef73244f30cb0267ddbf0ac537cdeffc3ff539a43db72b0667b74", 0xc4}, {&(0x7f0000008400)="47239870600fb88a5e5fd255eac5665a989eed12a9f66b658231e5921479b46a56afeb6f3d3efca71f0b7e6c7df72455f565df75a8281e13a928d02965c6c1", 0x3f}, {&(0x7f0000008440)}], 0x7, &(0x7f000000a600)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x80, 0x4000000}}, {{&(0x7f000000a680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000a8c0)=[{&(0x7f000000a700)="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", 0xfc}, {&(0x7f000000a800)="4e112142c6790ccfb608bfec776966ca354814da0380b0cbbba6986643b869dba3d3bf698f7506a7d7862227438fbdedc9efab997e0d0b9bf85d9d08b07f2b4f7f38f8562291bf1dd1725ca94b6a973119fd8e01546d61f3fccfe3bb417686a9746c46aa00b0d96ba8695524c0cefac9", 0x70}, {&(0x7f000000a880)="8c82bb9ea51e2c0ae8c2bba99bbb2bb9d7e5c1a832bc374e53fda77e0e99e20870ccffddc4e5514f5ed01fb9d6c296a6cd2e4e5a", 0x34}], 0x3, &(0x7f000000c940)=[@rights={{0x18, 0x1, 0x1, [r8, r7]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r5}}}], 0x78, 0x4040000}}, {{&(0x7f000000c9c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000dc40)=[{&(0x7f000000ca40)="523db9f90d119b937908b76d8b72bd6689c8d66248e2ec115d4d682d4a5c6fdc3f82ef76fd63b7411d42969bfc569e7d9d0153796a65bc3039121018ea5e2938aa90db332c90c84a57a729", 0x4b}, {&(0x7f000000cac0)="20bbfb4c16e6e5b694d28229bce4f5347b4fd825348c620fa9a632372d0694c2cc300a9fe06d84ffc810a7ec11eeebd47ef18b4f593866a629750b46e20966477b73", 0x42}, {&(0x7f000000cb40)="74458f847e59b5e71a11e2b9", 0xc}, {&(0x7f000000cb80)="2b9ab46234e65cdfd6b7856a87f91b51b1abcba9360a2b5de9e6822b22c8a5fe3ca8216c1fb664ab971224e6e0128f91483a81200bfa383b75618d8c0023e9a1d2786f7e5b3f3ccd005987ae00753723a3c274cf88f06fe0aafeb41301e7e29001a2657eca79ae185a8ee29f3b6753112a306274dbd1db8ee2bbee3c3d790c222e191ab1bd8fe41cb6f7a25003466362aa3305ba508030c8dc15a808f196da3b0a04f896b43c68326933aaaa", 0xac}, {&(0x7f000000cc40)="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", 0x1000}], 0x5, 0x0, 0x0, 0x801}}], 0x7, 0x4000)

2.649694761s ago: executing program 5 (id=2880):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x3a, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000180))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.410134985s ago: executing program 0 (id=2881):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x75})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x0, 0x5e, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x6a, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.041425732s ago: executing program 5 (id=2883):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x129681, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x9, @control_area=0x2e, 0x4, 0x7, 0x9}}], 0x38})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_create_resource$futex(&(0x7f0000000340))
futex(r3, 0x6, 0x0, 0x0, 0x0, 0x1)
futex(r3, 0x6, 0x2, 0x0, 0x0, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0xff, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0xfd}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000003c0)={@private0, 0x7e, r5})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.935481723s ago: executing program 5 (id=2885):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001900010000000100000000001d0109004d001080240081801000f1800400e6800600fd001b0000000d00c280ad083f77eaa665fbae000000428184a477201aab0f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4ae000000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0x11, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x41, 0x81, 0xfb, 0x4, 0x5, 0x0, 0xfe}], 0x9})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xef, 0x9, 0x4, '\x00', 0x4})
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
setns(0xc9, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c"], 0xfc}}, 0x0)
connect$inet(r4, &(0x7f0000000980)={0x2, 0x4e20, @private=0xa010100}, 0x10)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340), 0x2d00, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='./dev\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000680)='./mnt\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events.local\x00', 0x275a, 0x0)
lseek(r7, 0x0, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

108.773669ms ago: executing program 6 (id=2886):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fsmount(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000640)={'vlan0\x00', &(0x7f0000000800)=@ethtool_drvinfo={0x3, "6360b2bdd419f9dc8fb7b6882f1039668726fb06ca7b17416923f8d350d478ad", "096ccae6d7decd6bdfea50a5a604c0693ae36bf322af8f558352ad2c604012d1", "268b12896b67e66e65fd825b0e504bc0a61a50c29d105cdf4a43364ffbb7a329", "9d700be2bbadb9d405ad1322266e56e4c6c87002f0a11592ebc4339841c340d9", "6aaae8a506d9734b818a46befb54a24ad138524cd1fde6f8f70d01e616ab0ede", "eabc1ea5afdc79e5240369f7", 0xffff, 0xec0, 0x8, 0x744e, 0x1}})
recvfrom(r2, 0x0, 0x0, 0x40018163, 0x0, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f00000004c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b80)=""/4099, 0x1003}, {&(0x7f0000002bc0)=""/105, 0x69}, {&(0x7f0000002c40)=""/51, 0x33}, {&(0x7f0000002c80)=""/95, 0x5f}, {&(0x7f0000002d00)=""/71, 0x47}, {&(0x7f0000002d80)=""/4078, 0xfee}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
r7 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8=r0], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$P9_RLOPEN(r4, &(0x7f0000000480)={0x18, 0xd, 0x1, {{0x6, 0x4, 0x8}, 0x5}}, 0x18)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001c00000000000000000000000000000000000300004e2200000000008002000000", @ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a00000000000000040000000000000002000000000000000400000000000000000000000000000000000601000000000000000000000000a1de000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a0002"], 0x104}, 0x1, 0x0, 0x0, 0x44}, 0x8000)
sendmsg$netlink(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

107.830039ms ago: executing program 4 (id=2887):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x26)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x28004041, &(0x7f0000000340)={0x2, 0x4623, @empty}, 0x7ef6d5a1be8ef3a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1}, {0x4000, 0xffffffff, 0xe, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

107.462709ms ago: executing program 4 (id=2888):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x17)
setfsgid(r2)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000)
sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000580)={0xa, 0x4e24, 0x8, @private1, 0x1}, 0x1c, 0x0}, 0x800)

107.111049ms ago: executing program 4 (id=2889):
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x5})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x9, @control_area=0x2e, 0x4, 0x7, 0x9}}], 0x38})
mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x6000, 0x0)
r0 = fsopen(&(0x7f0000000680)='smb3\x00', 0x0)
fsmount(r0, 0x1, 0x70)
r1 = open(&(0x7f0000000340)='./file2\x00', 0x81, 0x10dd722b6e14c3dd)
r2 = creat(&(0x7f0000000380)='./file0\x00', 0x88)
r3 = dup2(r1, r2)
r4 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="1c000000200009afb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x4000)
dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0x40081271, &(0x7f0000000440)={'\x00', 0x40, 0x40000a, 0x3, 0x40000000, 0x10})
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0)
write$tcp_mem(r6, &(0x7f0000000540)={0x2000000000000006, 0x20, 0xfffffffffffffffc, 0x20, 0x10001}, 0x48)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='pagemap\x00')
r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001700), 0x140, 0x0)
ioctl$RTC_UIE_ON(r8, 0x7003)
pread64(r7, &(0x7f0000000700)=""/4096, 0x1000, 0x7ffffffffffff8)
accept$unix(r6, &(0x7f00000005c0), &(0x7f0000000640)=0x6e)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0x6000, 0x8, 0xb, 0x1, 0x0, 0x0, 0x81, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x4, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1, 0x8f}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xdddd0000, 0xffffffff, 0x8, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1, 0xb}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0xf, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

106.55232ms ago: executing program 0 (id=2890):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffe, 0x40080)
ioctl$BLKFLSBUF(r0, 0x1261, 0x0) (fail_nth: 1)

103.48437ms ago: executing program 4 (id=2891):
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x20000)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x6d})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), 0x4)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x2000000000000, 0xfffffffffffffffa, 0x1, 0x9, 0x7, 0x400, 0x10000, 0x6, 0x9, 0xffffde73, 0x0, 0x6, 0xffffffffffffffff, 0x7fffffff}})
ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f00000010c0)={0x81, 0x0, 0x2})
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000001140)={"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"})
getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000001540), &(0x7f0000001580)=0x4)
io_setup(0x401, &(0x7f00000015c0)=<r2=>0x0)
io_cancel(r2, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0xfffa, r1, &(0x7f0000001600)="93307fcf2f64ba0b9bccbf896b618869e0fb3eda5b01be12816c9b7154283580cfd810406e802060a6289eed540fc3a0ddb99d38d1e047700bda7ff0e06b3c8b74abbb9810e4c7fec95dfd9004e88590ffedbc8b5aa2429158a3f60ff9715da38b06bffb755e5a44f342b4e9b3d59c81a3a4b2e1fdec01d7e2b32a5c4b429955a3c03059", 0x84, 0x1, 0x0, 0x2}, &(0x7f0000001700))
r3 = socket$netlink(0x10, 0x3, 0xa)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001740), 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), r0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001a40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001800)={0x1f0, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x76b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x90}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b3d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x28000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8e5b}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_ID={0x64, 0x3, "54f352263f9226237508922265b9e00a167c856e66c65902f39ed9c2c82bb07c8bc5102a277cf0d5052c3e3927de2930864e6e5c274cfe7b85e5382c692a3210d87a968c7c0f83a8bc6f3df983d65cf6848fcd6061d640fd3d3f67b4cfc3501c"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x41c}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c030af03632055a0b87c54013ca5899102cfb8d1a3bbad54c446076f98d"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x38000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c854)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
getsockname$netlink(r4, &(0x7f0000001a80), &(0x7f0000001ac0)=0xc)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000001b00)=0x1, 0x4)
sendmsg$can_raw(r4, &(0x7f0000001c40)={&(0x7f0000001b40), 0x10, &(0x7f0000001c00)={&(0x7f0000001b80)=@canfd={{0x2, 0x0, 0x0, 0x1}, 0x24, 0x2, 0x0, 0x0, "c31a36930d3e81801cfb128d6612165610baa353fe9379e970e38ebf076a0dd505a4425ac35fa898c227283946a82f00bddcd02ba49646cda0b4631c46113af4"}, 0x48}, 0x1, 0x0, 0x0, 0x4044805}, 0x80)
syz_ublk_setup_io_uring(0x5ee5, &(0x7f0000001c80)={0x0, 0xfc04, 0x10000, 0x3, 0x1c1}, &(0x7f0000001d00)=<r7=>0x0, &(0x7f0000001d40), &(0x7f0000001d80))
syz_io_uring_setup(0x494f, &(0x7f0000001dc0)={0x0, 0x1ec, 0x200, 0x0, 0x31b, 0x0, r4}, &(0x7f0000001e40), &(0x7f0000001e80)=<r8=>0x0, &(0x7f0000001ec0))
r9 = mmap$IORING_OFF_SQES(0x0, 0x2, 0x2000002, 0x2010, r4, 0x10000000)
r10 = fcntl$getown(r4, 0x9)
syz_ublk_add_dev(r0, r7, r8, r9, &(0x7f0000001f40)={0x2e, 0x2, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001f00)=@any_dev={0x1, 0x6c8, 0x0, 0x0, 0x1000, 0x6, r10, 0x0, 0x10}}}, &(0x7f0000001fc0))
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002000)={'vcan0\x00', <r11=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002040)={0x1d, r11}, 0x10, &(0x7f0000002100)={&(0x7f0000002080)=@canfd={{0x3, 0x0, 0x1}, 0xa, 0x3, 0x0, 0x0, "17c392a3f818a21b78b987b50719770f5b3d1b3e446886ae28e02cd589f140b207b4d8cd5a6d3d417a522d0df99c975a68c9e1fd14ea5f3581321394690740ce"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4094)
r12 = request_key(&(0x7f0000002180)='.request_key_auth\x00', &(0x7f00000021c0)={'syz', 0x2}, &(0x7f0000002200)='+]:%\x00', 0xfffffffffffffffe)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000002240)={@desc={0x1, 0x0, @desc2}, 0x40, r12, '\x00', @b})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000002300)={0x2, 0x0, @pic={0x10, 0x7f, 0x2, 0x5, 0x5, 0x8, 0x9, 0x9, 0xf4, 0xb, 0x5, 0xe, 0x97, 0x2, 0x4, 0xc}})

103.31453ms ago: executing program 0 (id=2892):
openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x0, @arbitrary=0xf0000000}}, @cpuid={0x64, 0x18, {0xd, 0xff}}], 0x70})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

102.41559ms ago: executing program 0 (id=2893):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4a800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000050b000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x34, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffe, 0x40080)
ioctl$KVM_SMI(r2, 0xaeb7)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000002340)={0x24, 0x0, 0x0, &(0x7f0000002380)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, "c0"}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @global=@item_4={0x3, 0x1, 0x2, '\t\x00'}, @main=@item_4={0x3, 0x0, 0x8, "223b54cc"}, @local=@item_012={0x1, 0x2, 0x3, "01"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "f50e16f8"}]}}, 0x0}, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x40)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000413, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}})
ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f00000022c0), 0x1)
syz_fuse_handle_req(r4, &(0x7f0000000280)="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", 0x2000, 0x0)
write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000002280)=ANY=[@ANYBLOB="2c00000006000000000000000000000001000000000000000400000000050048d34754d19d43e7"], 0x2c)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f00000023c0)={0x2, 0x4e23, @local}, 0x10)
r6 = fcntl$dupfd(r5, 0x406, r5)
r7 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f0000002540)=""/66, &(0x7f00000025c0)=0x42)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000002600)={0xa, 0x4e22, 0x3, @empty}, 0x1c)
listen(r8, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000002640)=0xb, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000002680)=[{&(0x7f00000026c0)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000002400)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f0000002440)=0x8, 0x4)

101.83221ms ago: executing program 6 (id=2894):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x6901, &(0x7f0000000100)={0x0, 0x0, 0x400}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x104}}}, &(0x7f0000000400)=<r7=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x200000, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x8a)
r8 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
preadv(r8, &(0x7f0000000240)=[{&(0x7f0000000800)=""/205, 0xcd}], 0x1, 0x5c, 0x25c)
r9 = syz_open_dev$ublk_chdev(&(0x7f0000000440), r5, 0x2)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0xbc15, 0x0, 0x1, 0x17e, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x41e8, 0x200, 0x1, 0x7a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3ee, 0x80, 0x0, 0x275, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x383d, 0x404b, 0x2, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8cf0, 0x4000, 0x0, 0x1e6, 0x0, r1}}], 0x4, &(0x7f0000000780)={0x2e, 0x10, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7e2}, 0x0, r6, '\x00', {0x1, 0x68, 0x0, 0x0}}, 0x0)

101.08151ms ago: executing program 4 (id=2895):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x1c, r2, 0x301, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x50)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c8053c8, 0x70}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "006d9bfbf1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d3bbc25c009eafd9b3c7a64987"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "66ca159cb7f245f4"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20040042)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)={<r4=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)="314a580c65c0c2792959bfb9cdb4569366c6b1c151c661d65b777a20d81e0bfb383181b003c818086ef6ee31a722ff28b2c37f03faace288c689350765451d1adf4d651ab870afde819d3009e00562c98ef6a698bbb914e88e3fa517b8483c3ea6295ad20df268f7cc61d2af1d51ce253cee4ecedb1cc1", 0x77, r4}, 0x68)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5001000010000100feffffff000100006401010000000000000000000000000020010000000000000000000000000001000107164e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x80)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

98.83252ms ago: executing program 5 (id=2896):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000003c0)={@loopback={0x0, 0x3fc}, 0x0, r1})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
mkdirat(r2, &(0x7f0000000340)='./dev\x00', 0x3b03573d56ac9228)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r3, 0x4068aea3, &(0x7f0000000180))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0xf3, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0xd, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0201fd020206637a"], 0x10}, 0x1, 0x7}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.126059ms ago: executing program 5 (id=2897):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d})
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1}, {0x4000, 0xffffffff, 0xe, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 4 (id=2898):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000900)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000980)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x120}}}, &(0x7f00000009c0)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
r5 = syz_io_uring_setup(0x1c27, &(0x7f0000000180)={0x0, 0x1cc0, 0x4, 0x1, 0x1a1, 0x0, r4}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
syz_ublk_setup_queues(r4, r2, &(0x7f0000000100)={0x0, 0xfffffffe, 0x0, 0x0, 0x1f3, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x10000, 0x0, 0x6, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad14, 0x29e0ecabe8a737b2, 0xffffffff, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8200, 0x40040005, 0x364, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):


[  314.783253][ T7541] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  314.997136][   T36] kauditd_printk_skb: 509 callbacks suppressed
[  314.997162][   T36] audit: type=1400 audit(2000000234.963:8918): avc:  denied  { ioctl } for  pid=7548 comm="syz.4.2454" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  315.031080][ T7553] loop7: detected capacity change from 0 to 7
[  315.045632][ T7541] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  315.080115][ T7555] fuse: Invalid rootmode
[  315.088077][ T7541] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  315.145226][   T36] audit: type=1400 audit(2000000235.013:8919): avc:  denied  { ioctl } for  pid=7540 comm="syz.6.2451" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  315.271224][   T36] audit: type=1400 audit(2000000235.013:8920): avc:  denied  { ioctl } for  pid=7540 comm="syz.6.2451" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  315.418188][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2458'.
[  315.444067][   T36] audit: type=1400 audit(2000000235.013:8921): avc:  denied  { ioctl } for  pid=7540 comm="syz.6.2451" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  315.569006][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2460'.
[  315.598383][   T36] audit: type=1400 audit(2000000235.013:8922): avc:  denied  { ioctl } for  pid=7540 comm="syz.6.2451" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  315.749067][   T36] audit: type=1400 audit(2000000235.043:8923): avc:  denied  { read write } for  pid=7554 comm="syz.0.2456" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  315.790791][   T10] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  315.825793][   T10] asix 7-1:0.34: probe with driver asix failed with error -61
[  315.857975][ T7572] audit: audit_backlog=65 > audit_backlog_limit=64
[  315.894031][ T7572] audit: audit_lost=319 audit_rate_limit=0 audit_backlog_limit=64
[  315.908817][ T7576] audit: audit_backlog=65 > audit_backlog_limit=64
[  315.919746][   T36] audit: type=1400 audit(2000000235.043:8924): avc:  denied  { read write open } for  pid=7554 comm="syz.0.2456" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  316.002489][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.041374][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.020910][   T10] usb 7-1: USB disconnect, device number 14
[  317.799682][ T7606] FAULT_INJECTION: forcing a failure.
[  317.799682][ T7606] name failslab, interval 1, probability 0, space 0, times 0
[  317.859875][ T7606] CPU: 0 UID: 0 PID: 7606 Comm: syz.6.2473 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  317.859901][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  317.859913][ T7606] Call Trace:
[  317.859919][ T7606]  <TASK>
[  317.859925][ T7606]  __dump_stack+0x21/0x30
[  317.859944][ T7606]  dump_stack_lvl+0x140/0x1c0
[  317.859958][ T7606]  ? __cfi_dump_stack_lvl+0x10/0x10
[  317.859974][ T7606]  dump_stack+0x19/0x20
[  317.859987][ T7606]  should_fail_ex+0x3c2/0x510
[  317.860010][ T7606]  should_failslab+0xac/0x100
[  317.860025][ T7606]  kmem_cache_alloc_node_noprof+0x45/0x420
[  317.860048][ T7606]  ? dup_task_struct+0xc1/0xd80
[  317.860069][ T7606]  ? kasan_save_alloc_info+0x3a/0x50
[  317.860088][ T7606]  ? __kasan_kmalloc+0x96/0xb0
[  317.860103][ T7606]  ? __kmalloc_cache_noprof+0x23c/0x470
[  317.860126][ T7606]  dup_task_struct+0xc1/0xd80
[  317.860146][ T7606]  ? __kasan_check_write+0x18/0x20
[  317.860166][ T7606]  ? _raw_spin_lock_irq+0x93/0x120
[  317.860190][ T7606]  ? copy_process+0x3370/0x3370
[  317.860210][ T7606]  ? __kasan_check_write+0x18/0x20
[  317.860232][ T7606]  copy_process+0x579/0x3370
[  317.860260][ T7606]  ? kasan_save_alloc_info+0x3a/0x50
[  317.860281][ T7606]  ? __cfi_copy_process+0x10/0x10
[  317.860302][ T7606]  ? __kmalloc_cache_noprof+0x23c/0x470
[  317.860325][ T7606]  ? __kasan_check_write+0x18/0x20
[  317.860346][ T7606]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  317.860367][ T7606]  vhost_task_create+0x1f7/0x3f0
[  317.860386][ T7606]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  317.860408][ T7606]  ? __cfi_vhost_task_create+0x10/0x10
[  317.860427][ T7606]  ? __cfi_vhost_task_fn+0x10/0x10
[  317.860446][ T7606]  ? __kasan_check_write+0x18/0x20
[  317.860467][ T7606]  ? mutex_lock+0x97/0x1d0
[  317.860485][ T7606]  ? __cfi_mutex_lock+0x10/0x10
[  317.860502][ T7606]  ? kernel_text_address+0xa9/0xe0
[  317.860526][ T7606]  kvm_mmu_post_init_vm+0x161/0x300
[  317.860541][ T7606]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  317.860565][ T7606]  ? _parse_integer_limit+0x195/0x1e0
[  317.860587][ T7606]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  317.860610][ T7606]  ? kstrtoull+0x13b/0x1e0
[  317.860630][ T7606]  ? kstrtouint+0x78/0xf0
[  317.860650][ T7606]  ? ioctl_has_perm+0x1bc/0x500
[  317.860673][ T7606]  ? __asan_memcpy+0x5a/0x80
[  317.860694][ T7606]  ? ioctl_has_perm+0x408/0x500
[  317.860715][ T7606]  ? has_cap_mac_admin+0xd0/0xd0
[  317.860738][ T7606]  ? __kasan_check_write+0x18/0x20
[  317.860758][ T7606]  ? mutex_lock_killable+0x97/0x1d0
[  317.860777][ T7606]  ? __cfi_mutex_lock_killable+0x10/0x10
[  317.860795][ T7606]  ? proc_fail_nth_write+0x184/0x220
[  317.860816][ T7606]  kvm_vcpu_ioctl+0xa43/0x1000
[  317.860834][ T7606]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  317.860851][ T7606]  ? __cfi_vfs_write+0x10/0x10
[  317.860873][ T7606]  ? __kasan_check_write+0x18/0x20
[  317.860894][ T7606]  ? mutex_unlock+0x90/0x240
[  317.860915][ T7606]  ? __cfi_mutex_unlock+0x10/0x10
[  317.860935][ T7606]  ? __fget_files+0x2bc/0x330
[  317.860954][ T7606]  ? bpf_lsm_file_ioctl+0xd/0x20
[  317.860970][ T7606]  ? security_file_ioctl+0x3e/0x110
[  317.860992][ T7606]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  317.861008][ T7606]  __se_sys_ioctl+0x126/0x1b0
[  317.861026][ T7606]  __x64_sys_ioctl+0x7f/0xa0
[  317.861041][ T7606]  x64_sys_call+0x1878/0x2ee0
[  317.861058][ T7606]  do_syscall_64+0x57/0xf0
[  317.861072][ T7606]  ? clear_bhb_loop+0x50/0xa0
[  317.861092][ T7606]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  317.861110][ T7606] RIP: 0033:0x7fe160b9f559
[  317.861124][ T7606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.861137][ T7606] RSP: 002b:00007fe161af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.861154][ T7606] RAX: ffffffffffffffda RBX: 00007fe160e25fa0 RCX: 00007fe160b9f559
[  317.861166][ T7606] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  317.861176][ T7606] RBP: 00007fe161af7090 R08: 0000000000000000 R09: 0000000000000000
[  317.861186][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.861196][ T7606] R13: 00007fe160e26038 R14: 00007fe160e25fa0 R15: 00007ffd71e1bc38
[  317.861209][ T7606]  </TASK>
[  318.290512][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'.
[  318.425077][ T7612] kvm: kvm [7611]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x800
[  319.072911][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'.
[  319.483837][    T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  319.544590][ T7646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  319.660171][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.695932][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.763846][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  319.802823][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.849680][    T9] usb 1-1: config 0 descriptor??
[  319.996577][ T7650] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2488'.
[  320.027857][   T36] kauditd_printk_skb: 328 callbacks suppressed
[  320.027871][   T36] audit: type=1400 audit(2000000239.993:9223): avc:  denied  { read } for  pid=5271 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.094697][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.137285][   T36] audit: type=1400 audit(2000000240.023:9224): avc:  denied  { read open } for  pid=5271 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.188569][ T7639] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2486'.
[  320.295995][   T36] audit: type=1400 audit(2000000240.023:9225): avc:  denied  { ioctl } for  pid=5271 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.461242][   T36] audit: type=1400 audit(2000000240.053:9226): avc:  denied  { create } for  pid=7649 comm="syz.6.2488" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  320.555229][ T7662] audit: audit_backlog=65 > audit_backlog_limit=64
[  320.561774][ T7662] audit: audit_lost=330 audit_rate_limit=0 audit_backlog_limit=64
[  320.602394][   T36] audit: type=1400 audit(2000000240.053:9227): avc:  denied  { read write } for  pid=7637 comm="syz.0.2486" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  320.640484][ T7664] audit: audit_backlog=65 > audit_backlog_limit=64
[  320.648633][ T7639] audit: audit_backlog=65 > audit_backlog_limit=64
[  320.656153][ T7666] audit: audit_backlog=65 > audit_backlog_limit=64
[  320.663347][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.725513][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.154772][   T10] hid-generic 0000:0008:0000.001D: unknown main item tag 0x0
[  321.201192][   T10] hid-generic 0000:0008:0000.001D: unknown main item tag 0x0
[  321.253390][   T10] hid-generic 0000:0008:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  321.501807][ T7682] fido_id[7682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  322.282928][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  322.305836][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  322.346535][    T9] usb 1-1: USB disconnect, device number 39
[  322.634198][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  322.803643][   T10] usb 7-1: Using ep0 maxpacket: 8
[  322.817575][   T10] usb 7-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config
[  322.847002][   T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 190: 78, using maximum allowed: 30
[  322.870095][   T10] usb 7-1: config 0 interface 0 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 78
[  322.899430][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  322.918235][   T10] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  322.928332][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=129
[  322.937050][   T10] usb 7-1: SerialNumber: syz
[  322.947466][   T10] usb 7-1: config 0 descriptor??
[  323.133591][    T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  323.162207][ T7692] kvm: Disabled LAPIC found during irq injection
[  323.169051][ T7691] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=862324783 (3449299132 ns) > initial count (130111596 ns). Using initial count to start timer.
[  323.196295][   T10] usb 7-1: USB disconnect, device number 15
[  323.293601][    T9] usb 1-1: Using ep0 maxpacket: 16
[  323.305922][    T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  323.318770][    T9] usb 1-1: config 0 has no interface number 0
[  323.333038][    T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  323.354167][    T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  323.386207][ T7694] 9pnet_fd: p9_fd_create_tcp (7694): problem connecting socket to 127.0.0.1
[  323.395363][    T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  323.420007][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.441840][    T9] usb 1-1: Product: syz
[  323.453576][    T9] usb 1-1: Manufacturer: syz
[  323.458276][    T9] usb 1-1: SerialNumber: syz
[  323.464619][ T7707] netlink: 'syz.5.2504': attribute type 16 has an invalid length.
[  323.482695][    T9] usb 1-1: config 0 descriptor??
[  323.500288][ T7704] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  323.523092][ T7704] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  323.761769][ T7704] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  323.778792][ T7704] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  323.843568][ T6416] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  324.003553][ T6416] usb 5-1: Using ep0 maxpacket: 16
[  324.013381][ T6416] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.044622][ T6416] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.066691][ T6416] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  324.094339][ T6416] usb 5-1: config 0 interface 0 has no altsetting 0
[  324.111143][ T6416] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  324.132109][ T6416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.160371][ T6416] usb 5-1: config 0 descriptor??
[  324.399141][    T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  324.418817][    T9] asix 1-1:0.34: probe with driver asix failed with error -61
[  324.556790][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2515'.
[  324.603522][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.624044][ T6416] hid (null): invalid report_count 21831
[  324.631738][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.639569][ T6416] hid (null): global environment stack underflow
[  324.647435][ T6416] hid (null): global environment stack underflow
[  324.655755][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2515'.
[  324.664954][ T6416] hid (null): report_id 3168631851 is invalid
[  324.671034][ T6416] hid (null): nested delimiters
[  324.683171][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.697438][ T6416] hid (null): unknown global tag 0xc
[  324.705502][ T6416] hid (null): unknown global tag 0xc
[  324.711019][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.723544][ T6416] hid (null): invalid report_size -1951222281
[  324.833924][ T6416] usb 5-1: USB disconnect, device number 34
[  325.244507][   T36] kauditd_printk_skb: 447 callbacks suppressed
[  325.244528][   T36] audit: type=1400 audit(2000000245.213:9635): avc:  denied  { read } for  pid=5815 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.291335][   T36] audit: type=1400 audit(2000000245.243:9636): avc:  denied  { read open } for  pid=5815 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.356787][   T36] audit: type=1400 audit(2000000245.243:9637): avc:  denied  { ioctl } for  pid=5815 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.471931][   T36] audit: type=1400 audit(2000000245.253:9638): avc:  denied  { read } for  pid=7744 comm="syz.5.2516" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  325.555625][   T36] audit: type=1400 audit(2000000245.253:9639): avc:  denied  { read open } for  pid=7744 comm="syz.5.2516" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  325.630653][   T36] audit: type=1400 audit(2000000245.283:9640): avc:  denied  { ioctl } for  pid=7744 comm="syz.5.2516" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  325.718606][   T36] audit: type=1400 audit(2000000245.283:9641): avc:  denied  { read } for  pid=7744 comm="syz.5.2516" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  325.788161][   T36] audit: type=1400 audit(2000000245.283:9642): avc:  denied  { read open } for  pid=7744 comm="syz.5.2516" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  325.861331][   T36] audit: type=1400 audit(2000000245.313:9643): avc:  denied  { read } for  pid=5271 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.902312][ T6416] usb 1-1: USB disconnect, device number 40
[  325.999824][   T36] audit: type=1400 audit(2000000245.313:9644): avc:  denied  { read open } for  pid=5271 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  326.270290][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2523'.
[  326.381082][ T7766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2524'.
[  326.390167][   T55] Bluetooth: hci0: command 0x1003 tx timeout
[  326.396224][ T2756] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  326.512931][ T7768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7768 comm=syz.5.2525
[  326.673713][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.682167][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.773432][ T6416] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  326.893423][  T483] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  326.937864][ T6416] usb 7-1: config 1 has an invalid interface number: 5 but max is 2
[  326.960312][ T6416] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.992145][ T6416] usb 7-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  327.026862][ T6416] usb 7-1: config 1 has no interface number 3
[  327.043857][  T483] usb 1-1: device descriptor read/64, error -71
[  327.058046][ T7783] input: syz0 as /devices/virtual/input/input13
[  327.067417][ T6416] usb 7-1: config 1 interface 1 has no altsetting 0
[  327.117126][ T6416] usb 7-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  327.132247][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2530'.
[  327.163379][ T6416] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.194474][ T6416] usb 7-1: Product: syz
[  327.222946][ T6416] usb 7-1: Manufacturer: syz
[  327.241841][ T6416] usb 7-1: SerialNumber: syz
[  327.313395][  T483] usb 1-1: device descriptor read/64, error -71
[  327.528943][ T6416] usb 7-1: 1:1 : format type 0 is detected, processed as PCM
[  327.564840][  T483] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  327.585914][ T6416] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  327.613675][ T6416] usb 7-1: selecting invalid altsetting 0
[  327.642337][ T6416] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2
[  327.681595][ T6416] usb 7-1: 1:1 : format type 0 is detected, processed as PCM
[  327.716688][ T6416] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  327.753381][  T483] usb 1-1: device descriptor read/64, error -71
[  327.760774][ T6416] usb 7-1: selecting invalid altsetting 0
[  327.784777][ T6416] snd-usb-audio 7-1:1.5: probe with driver snd-usb-audio failed with error -2
[  327.826501][ T6416] usb 7-1: 1:1 : format type 0 is detected, processed as PCM
[  327.863037][ T6416] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  327.888249][ T6416] usb 7-1: selecting invalid altsetting 0
[  327.918739][ T6416] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2
[  327.960453][ T6416] usb 7-1: 1:1 : format type 0 is detected, processed as PCM
[  327.992933][ T6416] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  328.012003][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'.
[  328.020991][  T483] usb 1-1: device descriptor read/64, error -71
[  328.032577][ T6416] usb 7-1: selecting invalid altsetting 0
[  328.073134][ T6416] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2
[  328.135959][ T6416] usb 7-1: USB disconnect, device number 16
[  328.155301][  T483] usb usb1-port1: attempt power cycle
[  328.254450][ T7813] SELinux:  Context system_u: is not valid (left unmapped).
[  328.342936][ T1810] udevd[1810]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  328.479254][ T7817] option changes via remount are deprecated (pid=7816 comm=syz.4.2542)
[  328.533303][  T483] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  328.585460][  T483] usb 1-1: device descriptor read/8, error -71
[  328.725995][  T483] usb 1-1: device descriptor read/8, error -71
[  328.993276][  T483] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  329.039237][  T483] usb 1-1: device descriptor read/8, error -71
[  329.195373][  T483] usb 1-1: device descriptor read/8, error -71
[  329.302408][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'.
[  329.323691][  T483] usb usb1-port1: unable to enumerate USB device
[  329.361994][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.412891][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.914414][ T7855] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2555'.
[  329.955990][ T7856] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2555'.
[  330.243598][  T483] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  330.286069][   T36] kauditd_printk_skb: 509 callbacks suppressed
[  330.286082][   T36] audit: type=1400 audit(2000000250.244:10154): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.382533][   T36] audit: type=1400 audit(2000000250.284:10155): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.460816][   T36] audit: type=1400 audit(2000000250.284:10156): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.485896][  T483] usb 5-1: device descriptor read/64, error -71
[  330.545268][   T36] audit: type=1400 audit(2000000250.284:10157): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.634146][   T36] audit: type=1400 audit(2000000250.284:10158): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.733192][  T483] usb 5-1: device descriptor read/64, error -71
[  330.741694][   T36] audit: type=1400 audit(2000000250.284:10159): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.824224][   T36] audit: type=1400 audit(2000000250.284:10160): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.906335][   T36] audit: type=1400 audit(2000000250.374:10161): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.961664][   T36] audit: type=1400 audit(2000000250.564:10162): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.993192][  T483] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  331.079133][   T36] audit: type=1400 audit(2000000250.564:10163): avc:  denied  { ioctl } for  pid=7854 comm="syz.4.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.163181][  T483] usb 5-1: device descriptor read/64, error -71
[  331.403147][  T483] usb 5-1: device descriptor read/64, error -71
[  331.513551][  T483] usb usb5-port1: attempt power cycle
[  331.863137][  T483] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  331.908648][  T483] usb 5-1: device descriptor read/8, error -71
[  332.036354][ T7874] fuse: Bad value for 'fd'
[  332.056168][  T483] usb 5-1: device descriptor read/8, error -71
[  332.123094][    T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  332.295266][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  332.311400][  T483] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  332.331417][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  332.369316][  T483] usb 5-1: device descriptor read/8, error -71
[  332.392082][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  332.416837][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.442353][    T9] usb 7-1: Product: syz
[  332.455254][    T9] usb 7-1: Manufacturer: syz
[  332.472885][    T9] usb 7-1: SerialNumber: syz
[  332.480154][ T7882] kvm: kvm [7881]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x800
[  332.500262][    T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  332.528753][  T483] usb 5-1: device descriptor read/8, error -71
[  332.653430][  T483] usb usb5-port1: unable to enumerate USB device
[  334.357415][ T7911] FAULT_INJECTION: forcing a failure.
[  334.357415][ T7911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.427337][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.0.2574 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  334.427364][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  334.427376][ T7911] Call Trace:
[  334.427382][ T7911]  <TASK>
[  334.427390][ T7911]  __dump_stack+0x21/0x30
[  334.427411][ T7911]  dump_stack_lvl+0x140/0x1c0
[  334.427426][ T7911]  ? __cfi_dump_stack_lvl+0x10/0x10
[  334.427442][ T7911]  ? __kasan_check_read+0x15/0x20
[  334.427465][ T7911]  ? vmx_read_guest_seg_ar+0x179/0x350
[  334.427489][ T7911]  dump_stack+0x19/0x20
[  334.427503][ T7911]  should_fail_ex+0x3c2/0x510
[  334.427527][ T7911]  should_fail+0xf/0x20
[  334.427548][ T7911]  should_fail_usercopy+0x1e/0x30
[  334.427573][ T7911]  __kvm_read_guest_page+0x177/0x210
[  334.427593][ T7911]  kvm_vcpu_read_guest_page+0x31c/0x400
[  334.427614][ T7911]  kvm_fetch_guest_virt+0x146/0x190
[  334.427631][ T7911]  ? __cfi_kvm_fetch_guest_virt+0x10/0x10
[  334.427648][ T7911]  __do_insn_fetch_bytes+0x57a/0x740
[  334.427733][ T7911]  ? x86_decode_insn+0x50b0/0x50b0
[  334.427753][ T7911]  x86_decode_insn+0x326/0x50b0
[  334.427771][ T7911]  ? is_bpf_text_address+0x17b/0x1a0
[  334.427791][ T7911]  ? kernel_text_address+0xa9/0xe0
[  334.427815][ T7911]  ? __cfi_x86_decode_insn+0x10/0x10
[  334.427857][ T7911]  ? __kasan_check_write+0x18/0x20
[  334.427879][ T7911]  ? vmx_read_guest_seg_ar+0x1c8/0x350
[  334.427902][ T7911]  ? __asan_memset+0x39/0x50
[  334.427923][ T7911]  ? init_decode_cache+0x7c/0x90
[  334.427941][ T7911]  ? init_emulate_ctxt+0x403/0x540
[  334.427963][ T7911]  ? kvm_inject_realmode_interrupt+0x2d0/0x2d0
[  334.427986][ T7911]  x86_decode_emulated_instruction+0x66/0x180
[  334.428008][ T7911]  x86_emulate_instruction+0x2d7/0x19f0
[  334.428041][ T7911]  ? __kasan_check_write+0x18/0x20
[  334.428080][ T7911]  ? _raw_spin_trylock+0xb5/0x140
[  334.428105][ T7911]  ? __cfi__raw_spin_trylock+0x10/0x10
[  334.428131][ T7911]  handle_ud+0x199/0x330
[  334.428150][ T7911]  ? __cfi_handle_ud+0x10/0x10
[  334.428169][ T7911]  ? __cfi_rcu_note_context_switch+0x10/0x10
[  334.428208][ T7911]  ? clear_bhb_loop+0x50/0xa0
[  334.428229][ T7911]  ? clear_bhb_loop+0x50/0xa0
[  334.428249][ T7911]  ? clear_bhb_loop+0x50/0xa0
[  334.428268][ T7911]  ? clear_bhb_loop+0x50/0xa0
[  334.428287][ T7911]  ? clear_bhb_loop+0x12/0xa0
[  334.428307][ T7911]  handle_exception_nmi+0x194/0xd70
[  334.428344][ T7911]  ? __cfi_handle_exception_nmi+0x10/0x10
[  334.428378][ T7911]  vmx_handle_exit+0x13b5/0x1bf0
[  334.428393][ T7911]  ? __cfi_vmx_vcpu_run+0x10/0x10
[  334.428410][ T7911]  vcpu_run+0x4bf8/0x7810
[  334.428444][ T7911]  ? signal_pending+0xc0/0xc0
[  334.428468][ T7911]  ? complete_emulated_mmio+0x4ef/0x790
[  334.428490][ T7911]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[  334.428513][ T7911]  ? _parse_integer_limit+0x195/0x1e0
[  334.428535][ T7911]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  334.428559][ T7911]  ? kstrtoull+0x13b/0x1e0
[  334.428579][ T7911]  ? kstrtouint+0x78/0xf0
[  334.428599][ T7911]  ? ioctl_has_perm+0x1bc/0x500
[  334.428622][ T7911]  ? __asan_memcpy+0x5a/0x80
[  334.428643][ T7911]  ? ioctl_has_perm+0x408/0x500
[  334.428665][ T7911]  ? has_cap_mac_admin+0xd0/0xd0
[  334.428688][ T7911]  ? __kasan_check_write+0x18/0x20
[  334.428709][ T7911]  ? mutex_lock_killable+0x97/0x1d0
[  334.428728][ T7911]  ? __cfi_mutex_lock_killable+0x10/0x10
[  334.428746][ T7911]  ? proc_fail_nth_write+0x184/0x220
[  334.428765][ T7911]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  334.428785][ T7911]  kvm_vcpu_ioctl+0xa43/0x1000
[  334.428803][ T7911]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  334.428819][ T7911]  ? __cfi_vfs_write+0x10/0x10
[  334.428842][ T7911]  ? __kasan_check_write+0x18/0x20
[  334.428868][ T7911]  ? mutex_unlock+0x90/0x240
[  334.428905][ T7911]  ? __cfi_mutex_unlock+0x10/0x10
[  334.428925][ T7911]  ? __fget_files+0x2bc/0x330
[  334.428942][ T7911]  ? bpf_lsm_file_ioctl+0xd/0x20
[  334.428959][ T7911]  ? security_file_ioctl+0x3e/0x110
[  334.428981][ T7911]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  334.428998][ T7911]  __se_sys_ioctl+0x126/0x1b0
[  334.429015][ T7911]  __x64_sys_ioctl+0x7f/0xa0
[  334.429030][ T7911]  x64_sys_call+0x1878/0x2ee0
[  334.429047][ T7911]  do_syscall_64+0x57/0xf0
[  334.429061][ T7911]  ? clear_bhb_loop+0x50/0xa0
[  334.429081][ T7911]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  334.429100][ T7911] RIP: 0033:0x7f4864b9f559
[  334.429115][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.429129][ T7911] RSP: 002b:00007f48635f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  334.429147][ T7911] RAX: ffffffffffffffda RBX: 00007f4864e25fa0 RCX: 00007f4864b9f559
[  334.429160][ T7911] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  334.429170][ T7911] RBP: 00007f48635f7090 R08: 0000000000000000 R09: 0000000000000000
[  334.429181][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.429191][ T7911] R13: 00007f4864e26038 R14: 00007f4864e25fa0 R15: 00007ffdfef471e8
[  334.429206][ T7911]  </TASK>
[  335.143917][  T483] usb 7-1: USB disconnect, device number 17
[  335.416624][   T36] kauditd_printk_skb: 320 callbacks suppressed
[  335.416639][   T36] audit: type=1400 audit(2000000255.374:10484): avc:  denied  { read } for  pid=5815 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  335.560376][   T36] audit: type=1400 audit(2000000255.414:10485): avc:  denied  { read open } for  pid=5815 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  335.596104][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'.
[  335.724036][   T36] audit: type=1400 audit(2000000255.414:10486): avc:  denied  { ioctl } for  pid=5815 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  335.886286][   T36] audit: type=1400 audit(2000000255.414:10487): avc:  denied  { read } for  pid=6286 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  335.979312][ T7921] kvm: kvm [7919]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x800
[  336.012889][   T36] audit: type=1400 audit(2000000255.414:10488): avc:  denied  { read open } for  pid=6286 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  336.130517][   T36] audit: type=1400 audit(2000000255.434:10489): avc:  denied  { read } for  pid=297 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  336.281123][   T36] audit: type=1400 audit(2000000255.434:10490): avc:  denied  { read open } for  pid=297 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  336.416826][   T36] audit: type=1400 audit(2000000255.434:10491): avc:  denied  { ioctl } for  pid=297 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  336.496272][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64
[  336.523195][  T297] audit: audit_backlog=65 > audit_backlog_limit=64
[  337.671819][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'.
[  338.012778][  T483] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  338.222795][  T483] usb 1-1: Using ep0 maxpacket: 16
[  338.263166][  T483] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  338.298432][  T483] usb 1-1: config 0 has no interface number 0
[  338.344038][  T483] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  338.385747][  T483] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  338.446618][  T483] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  338.477672][  T483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.511940][  T483] usb 1-1: Product: syz
[  338.528076][  T483] usb 1-1: Manufacturer: syz
[  338.550935][  T483] usb 1-1: SerialNumber: syz
[  338.555617][ T6416] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  338.577807][  T483] usb 1-1: config 0 descriptor??
[  338.618565][ T7963] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  338.675656][ T7963] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  338.755303][ T6416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.803513][ T6416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.840808][ T6416] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  338.880171][ T6416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.918637][ T6416] usb 5-1: config 0 descriptor??
[  338.929612][ T7983] kvm: kvm [7982]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x800
[  338.943812][ T7963] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  339.026207][ T7963] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  339.283870][ T7996] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2603'.
[  339.576478][ T6416] usb 5-1: language id specifier not provided by device, defaulting to English
[  339.666895][  T483] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  339.697035][  T483] asix 1-1:0.34: probe with driver asix failed with error -61
[  339.838477][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.918976][ T6416] uclogic 0003:256C:006D.001F: failed retrieving Huion firmware version: -71
[  339.932491][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.954875][ T6416] uclogic 0003:256C:006D.001F: failed probing parameters: -71
[  339.962391][ T6416] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71
[  340.033105][ T6416] usb 5-1: USB disconnect, device number 39
[  340.444865][   T36] kauditd_printk_skb: 411 callbacks suppressed
[  340.444880][   T36] audit: type=1400 audit(2000000260.404:10884): avc:  denied  { read write } for  pid=8013 comm="syz.6.2607" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  340.538848][   T36] audit: type=1400 audit(2000000260.444:10885): avc:  denied  { ioctl open } for  pid=8013 comm="syz.6.2607" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  340.624789][   T36] audit: type=1400 audit(2000000260.444:10886): avc:  denied  { ioctl } for  pid=8013 comm="syz.6.2607" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  340.699305][   T36] audit: type=1400 audit(2000000260.444:10887): avc:  denied  { read write } for  pid=8013 comm="syz.6.2607" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  340.821252][   T36] audit: type=1400 audit(2000000260.444:10888): avc:  denied  { read write open } for  pid=8013 comm="syz.6.2607" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  340.932729][ T6416] usb 1-1: USB disconnect, device number 45
[  341.021345][   T36] audit: type=1400 audit(2000000260.444:10889): avc:  denied  { ioctl } for  pid=8013 comm="syz.6.2607" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  341.165168][   T36] audit: type=1400 audit(2000000260.474:10890): avc:  denied  { read } for  pid=5271 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.295811][   T36] audit: type=1400 audit(2000000260.474:10891): avc:  denied  { read open } for  pid=5271 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.444430][   T36] audit: type=1400 audit(2000000260.474:10892): avc:  denied  { ioctl } for  pid=5271 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  341.586109][   T36] audit: type=1400 audit(2000000260.544:10893): avc:  denied  { create } for  pid=8017 comm="syz.4.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  342.022550][  T483] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  342.071137][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.162674][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.234379][  T483] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.274135][  T483] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  342.292312][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.372732][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.413007][  T483] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  342.456230][  T483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.482513][  T483] usb 7-1: Product: syz
[  342.504269][  T483] usb 7-1: Manufacturer: syz
[  342.508889][  T483] usb 7-1: SerialNumber: syz
[  342.596222][  T483] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  342.860042][ T1455] usb 7-1: USB disconnect, device number 18
[  343.072481][  T483] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  343.225761][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.242468][  T483] usb 1-1: Using ep0 maxpacket: 16
[  343.257866][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.277712][  T483] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.309565][  T483] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.341263][  T483] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  343.370337][  T483] usb 1-1: config 0 interface 0 has no altsetting 0
[  343.381076][  T483] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  343.396930][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.412454][  T483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.426028][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.449963][  T483] usb 1-1: config 0 descriptor??
[  343.542277][ T8063] FAULT_INJECTION: forcing a failure.
[  343.542277][ T8063] name failslab, interval 1, probability 0, space 0, times 0
[  343.555968][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.6.2624 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  343.555992][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  343.556003][ T8063] Call Trace:
[  343.556009][ T8063]  <TASK>
[  343.556016][ T8063]  __dump_stack+0x21/0x30
[  343.556037][ T8063]  dump_stack_lvl+0x140/0x1c0
[  343.556052][ T8063]  ? __cfi_dump_stack_lvl+0x10/0x10
[  343.556068][ T8063]  dump_stack+0x19/0x20
[  343.556081][ T8063]  should_fail_ex+0x3c2/0x510
[  343.556104][ T8063]  should_failslab+0xac/0x100
[  343.556119][ T8063]  __kmalloc_cache_node_noprof+0x46/0x430
[  343.556143][ T8063]  ? __get_vm_area_node+0x150/0x390
[  343.556162][ T8063]  ? kasan_save_alloc_info+0x3a/0x50
[  343.556182][ T8063]  ? __kasan_slab_alloc+0x73/0x90
[  343.556197][ T8063]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[  343.556219][ T8063]  __get_vm_area_node+0x150/0x390
[  343.556238][ T8063]  __vmalloc_node_range_noprof+0x340/0x1300
[  343.556258][ T8063]  ? copy_process+0x579/0x3370
[  343.556283][ T8063]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  343.556303][ T8063]  ? kasan_save_alloc_info+0x3a/0x50
[  343.556323][ T8063]  ? __kasan_slab_alloc+0x73/0x90
[  343.556337][ T8063]  ? arch_dup_task_struct+0x5b/0xe0
[  343.556353][ T8063]  ? __asan_memcpy+0x5a/0x80
[  343.556374][ T8063]  dup_task_struct+0x5d6/0xd80
[  343.556395][ T8063]  ? copy_process+0x579/0x3370
[  343.556415][ T8063]  ? _raw_spin_lock_irq+0x93/0x120
[  343.556440][ T8063]  ? copy_process+0x3370/0x3370
[  343.556461][ T8063]  ? __kasan_check_write+0x18/0x20
[  343.556482][ T8063]  copy_process+0x579/0x3370
[  343.556505][ T8063]  ? kasan_save_alloc_info+0x3a/0x50
[  343.556525][ T8063]  ? __cfi_copy_process+0x10/0x10
[  343.556545][ T8063]  ? __kmalloc_cache_noprof+0x23c/0x470
[  343.556567][ T8063]  ? __kasan_check_write+0x18/0x20
[  343.556588][ T8063]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  343.556609][ T8063]  vhost_task_create+0x1f7/0x3f0
[  343.556627][ T8063]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  343.556648][ T8063]  ? __cfi_vhost_task_create+0x10/0x10
[  343.556667][ T8063]  ? __cfi_vhost_task_fn+0x10/0x10
[  343.556685][ T8063]  ? __kasan_check_write+0x18/0x20
[  343.556706][ T8063]  ? mutex_lock+0x97/0x1d0
[  343.556723][ T8063]  ? __cfi_mutex_lock+0x10/0x10
[  343.556739][ T8063]  ? kernel_text_address+0xa9/0xe0
[  343.556763][ T8063]  kvm_mmu_post_init_vm+0x161/0x300
[  343.556778][ T8063]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  343.556801][ T8063]  ? _parse_integer_limit+0x195/0x1e0
[  343.556823][ T8063]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  343.556846][ T8063]  ? kstrtoull+0x13b/0x1e0
[  343.556866][ T8063]  ? kstrtouint+0x78/0xf0
[  343.556886][ T8063]  ? ioctl_has_perm+0x1bc/0x500
[  343.556914][ T8063]  ? __asan_memcpy+0x5a/0x80
[  343.556935][ T8063]  ? ioctl_has_perm+0x408/0x500
[  343.556957][ T8063]  ? has_cap_mac_admin+0xd0/0xd0
[  343.556980][ T8063]  ? __kasan_check_write+0x18/0x20
[  343.557000][ T8063]  ? mutex_lock_killable+0x97/0x1d0
[  343.557019][ T8063]  ? __cfi_mutex_lock_killable+0x10/0x10
[  343.557038][ T8063]  ? proc_fail_nth_write+0x184/0x220
[  343.557059][ T8063]  kvm_vcpu_ioctl+0xa43/0x1000
[  343.557076][ T8063]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  343.557093][ T8063]  ? __cfi_vfs_write+0x10/0x10
[  343.557115][ T8063]  ? __kasan_check_write+0x18/0x20
[  343.557137][ T8063]  ? mutex_unlock+0x90/0x240
[  343.557154][ T8063]  ? __cfi_mutex_unlock+0x10/0x10
[  343.557173][ T8063]  ? __fget_files+0x2bc/0x330
[  343.557189][ T8063]  ? bpf_lsm_file_ioctl+0xd/0x20
[  343.557206][ T8063]  ? security_file_ioctl+0x3e/0x110
[  343.557228][ T8063]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  343.557244][ T8063]  __se_sys_ioctl+0x126/0x1b0
[  343.557260][ T8063]  __x64_sys_ioctl+0x7f/0xa0
[  343.557275][ T8063]  x64_sys_call+0x1878/0x2ee0
[  343.557292][ T8063]  do_syscall_64+0x57/0xf0
[  343.557306][ T8063]  ? clear_bhb_loop+0x50/0xa0
[  343.557326][ T8063]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  343.557344][ T8063] RIP: 0033:0x7fe160b9f559
[  343.557358][ T8063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  343.557372][ T8063] RSP: 002b:00007fe161af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  343.557389][ T8063] RAX: ffffffffffffffda RBX: 00007fe160e25fa0 RCX: 00007fe160b9f559
[  343.557401][ T8063] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  343.557411][ T8063] RBP: 00007fe161af7090 R08: 0000000000000000 R09: 0000000000000000
[  343.557421][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  343.557431][ T8063] R13: 00007fe160e26038 R14: 00007fe160e25fa0 R15: 00007ffd71e1bc38
[  343.557445][ T8063]  </TASK>
[  343.557463][ T8063] syz.6.2624: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0
[  344.046228][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.6.2624 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  344.046251][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  344.046262][ T8063] Call Trace:
[  344.046268][ T8063]  <TASK>
[  344.046274][ T8063]  __dump_stack+0x21/0x30
[  344.046292][ T8063]  dump_stack_lvl+0x140/0x1c0
[  344.046306][ T8063]  ? __cfi_dump_stack_lvl+0x10/0x10
[  344.046321][ T8063]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  344.046341][ T8063]  dump_stack+0x19/0x20
[  344.046354][ T8063]  warn_alloc+0x1e7/0x2c0
[  344.046373][ T8063]  ? __kasan_kmalloc+0x28/0xb0
[  344.046389][ T8063]  ? __cfi_warn_alloc+0x10/0x10
[  344.046407][ T8063]  ? __get_vm_area_node+0x150/0x390
[  344.046426][ T8063]  ? kasan_save_alloc_info+0x3a/0x50
[  344.046447][ T8063]  ? __get_vm_area_node+0x382/0x390
[  344.046467][ T8063]  __vmalloc_node_range_noprof+0x365/0x1300
[  344.046491][ T8063]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  344.046512][ T8063]  ? kasan_save_alloc_info+0x3a/0x50
[  344.046532][ T8063]  ? __kasan_slab_alloc+0x73/0x90
[  344.046547][ T8063]  ? arch_dup_task_struct+0x5b/0xe0
[  344.046563][ T8063]  ? __asan_memcpy+0x5a/0x80
[  344.046584][ T8063]  dup_task_struct+0x5d6/0xd80
[  344.046606][ T8063]  ? copy_process+0x579/0x3370
[  344.046627][ T8063]  ? _raw_spin_lock_irq+0x93/0x120
[  344.046650][ T8063]  ? copy_process+0x3370/0x3370
[  344.046671][ T8063]  ? __kasan_check_write+0x18/0x20
[  344.046693][ T8063]  copy_process+0x579/0x3370
[  344.046716][ T8063]  ? kasan_save_alloc_info+0x3a/0x50
[  344.046737][ T8063]  ? __cfi_copy_process+0x10/0x10
[  344.046758][ T8063]  ? __kmalloc_cache_noprof+0x23c/0x470
[  344.046781][ T8063]  ? __kasan_check_write+0x18/0x20
[  344.046802][ T8063]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  344.046823][ T8063]  vhost_task_create+0x1f7/0x3f0
[  344.046842][ T8063]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  344.046863][ T8063]  ? __cfi_vhost_task_create+0x10/0x10
[  344.046889][ T8063]  ? __cfi_vhost_task_fn+0x10/0x10
[  344.046907][ T8063]  ? __kasan_check_write+0x18/0x20
[  344.046928][ T8063]  ? mutex_lock+0x97/0x1d0
[  344.046944][ T8063]  ? __cfi_mutex_lock+0x10/0x10
[  344.046961][ T8063]  ? kernel_text_address+0xa9/0xe0
[  344.046986][ T8063]  kvm_mmu_post_init_vm+0x161/0x300
[  344.047001][ T8063]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  344.047024][ T8063]  ? _parse_integer_limit+0x195/0x1e0
[  344.047046][ T8063]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  344.047070][ T8063]  ? kstrtoull+0x13b/0x1e0
[  344.047089][ T8063]  ? kstrtouint+0x78/0xf0
[  344.047109][ T8063]  ? ioctl_has_perm+0x1bc/0x500
[  344.047132][ T8063]  ? __asan_memcpy+0x5a/0x80
[  344.047152][ T8063]  ? ioctl_has_perm+0x408/0x500
[  344.047174][ T8063]  ? has_cap_mac_admin+0xd0/0xd0
[  344.047196][ T8063]  ? __kasan_check_write+0x18/0x20
[  344.047217][ T8063]  ? mutex_lock_killable+0x97/0x1d0
[  344.047235][ T8063]  ? __cfi_mutex_lock_killable+0x10/0x10
[  344.047254][ T8063]  ? proc_fail_nth_write+0x184/0x220
[  344.047274][ T8063]  kvm_vcpu_ioctl+0xa43/0x1000
[  344.047292][ T8063]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  344.047310][ T8063]  ? __cfi_vfs_write+0x10/0x10
[  344.047332][ T8063]  ? __kasan_check_write+0x18/0x20
[  344.047352][ T8063]  ? mutex_unlock+0x90/0x240
[  344.047370][ T8063]  ? __cfi_mutex_unlock+0x10/0x10
[  344.047389][ T8063]  ? __fget_files+0x2bc/0x330
[  344.047404][ T8063]  ? bpf_lsm_file_ioctl+0xd/0x20
[  344.047421][ T8063]  ? security_file_ioctl+0x3e/0x110
[  344.047442][ T8063]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  344.047458][ T8063]  __se_sys_ioctl+0x126/0x1b0
[  344.047474][ T8063]  __x64_sys_ioctl+0x7f/0xa0
[  344.047489][ T8063]  x64_sys_call+0x1878/0x2ee0
[  344.047505][ T8063]  do_syscall_64+0x57/0xf0
[  344.047519][ T8063]  ? clear_bhb_loop+0x50/0xa0
[  344.047539][ T8063]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  344.047558][ T8063] RIP: 0033:0x7fe160b9f559
[  344.047571][ T8063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.047586][ T8063] RSP: 002b:00007fe161af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  344.047603][ T8063] RAX: ffffffffffffffda RBX: 00007fe160e25fa0 RCX: 00007fe160b9f559
[  344.047616][ T8063] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  344.047626][ T8063] RBP: 00007fe161af7090 R08: 0000000000000000 R09: 0000000000000000
[  344.047637][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.047647][ T8063] R13: 00007fe160e26038 R14: 00007fe160e25fa0 R15: 00007ffd71e1bc38
[  344.047662][ T8063]  </TASK>
[  344.047692][ T8063] Mem-Info:
[  344.489392][ T6416] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  344.502893][  T483] hid (null): invalid report_count 21831
[  344.508599][  T483] hid (null): global environment stack underflow
[  344.516216][  T483] hid (null): global environment stack underflow
[  344.523276][  T483] hid (null): report_id 3168631851 is invalid
[  344.529368][  T483] hid (null): nested delimiters
[  344.534279][  T483] hid (null): unknown global tag 0xc
[  344.539576][  T483] hid (null): unknown global tag 0xc
[  344.544985][  T483] hid (null): invalid report_size -1951222281
[  344.704893][    T9] usb 1-1: USB disconnect, device number 46
[  344.734663][ T6416] usb 5-1: unable to get BOS descriptor or descriptor too short
[  344.744654][ T6416] usb 5-1: not running at top speed; connect to a high speed hub
[  344.773178][ T8063] active_anon:12973 inactive_anon:13948 isolated_anon:0
[  344.773178][ T8063]  active_file:25010 inactive_file:793 isolated_file:0
[  344.773178][ T8063]  unevictable:16463 dirty:416 writeback:0
[  344.773178][ T8063]  slab_reclaimable:7780 slab_unreclaimable:68844
[  344.773178][ T8063]  mapped:26140 shmem:19287 pagetables:993
[  344.773178][ T8063]  sec_pagetables:0 bounce:0
[  344.773178][ T8063]  kernel_misc_reclaimable:0
[  344.773178][ T8063]  free:1481686 free_pcp:284 free_cma:0
[  344.818831][ T6416] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.851717][ T6416] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  344.891876][ T6416] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  344.923087][ T6416] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  344.932273][ T6416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  344.952798][ T8063] Node 0 active_anon:51996kB inactive_anon:62968kB active_file:100040kB inactive_file:3172kB unevictable:65852kB isolated(anon):0kB isolated(file):0kB mapped:110540kB dirty:1664kB writeback:0kB shmem:84272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5120kB pagetables:4128kB sec_pagetables:0kB all_unreclaimable? no
[  344.985596][ T6416] usb 5-1: Product: syz
[  344.989770][ T6416] usb 5-1: Manufacturer: syz
[  345.023006][ T6416] usb 5-1: Found UVC 1.00 device syz (8086:0ad2)
[  345.043669][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2627'.
[  345.052671][ T8063] DMA32 free:2954936kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955004kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:68kB free_cma:0kB
[  345.112376][ T8063] lowmem_reserve[]: 0 3920 3920
[  345.119297][ T8063] Normal free:2955488kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51996kB inactive_anon:68220kB active_file:100040kB inactive_file:3172kB unevictable:65852kB writepending:1664kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4000kB local_pcp:4000kB free_cma:0kB
[  345.212362][ T8063] lowmem_reserve[]: 0 0 0
[  345.238389][ T8063] DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 5*32kB (M) 5*64kB (M) 5*128kB (M) 4*256kB (M) 5*512kB (M) 5*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2954936kB
[  345.302360][ T8063] Normal: 34*4kB (UE) 13*8kB (UME) 57*16kB (ME) 133*32kB (UME) 397*64kB (UME) 164*128kB (UME) 226*256kB (UME) 172*512kB (UME) 70*1024kB (UME) 25*2048kB (UM) 641*4096kB (UM) = 2946144kB
[  345.377384][ T8063] 67372 total pagecache pages
[  345.397503][ T8063] 64 pages in swap cache
[  345.401779][ T8063] Free swap  = 123824kB
[  345.418278][ T8063] Total swap = 124996kB
[  345.432353][ T8063] 2097051 pages RAM
[  345.456765][ T8063] 0 pages HighMem/MovableOnly
[  345.477724][   T36] kauditd_printk_skb: 286 callbacks suppressed
[  345.477739][   T36] audit: type=1400 audit(2000000265.434:11180): avc:  denied  { create } for  pid=8059 comm="syz.4.2623" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  345.514573][ T8063] 354590 pages reserved
[  345.518771][ T8063] 0 pages cma reserved
[  345.545995][ T8063] Memory allocations:
[  345.569037][ T8063]          0 B        0 init/main.c:1477 func:do_initcalls
[  345.581648][   T36] audit: type=1400 audit(2000000265.484:11181): avc:  denied  { map } for  pid=8059 comm="syz.4.2623" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=161613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  345.628286][ T8063]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  345.662886][ T8063]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  345.700829][ T8063]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  345.715109][   T36] audit: type=1400 audit(2000000265.484:11182): avc:  denied  { read write } for  pid=8059 comm="syz.4.2623" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=161613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  345.757126][ T8063]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  345.791659][ T8063]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  345.828436][ T8063]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  345.846584][   T36] audit: type=1400 audit(2000000265.484:11183): avc:  denied  { map } for  pid=8059 comm="syz.4.2623" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=161613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  345.881835][ T8063]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  345.908118][ T8063]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  345.933950][ T8063]          0 B        0 init/initramfs.c:101 func:find_link
[  345.948482][   T36] audit: type=1400 audit(2000000265.484:11184): avc:  denied  { read write } for  pid=8059 comm="syz.4.2623" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=161613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  346.066266][   T36] audit: type=1400 audit(2000000265.494:11185): avc:  denied  { map } for  pid=8059 comm="syz.4.2623" path="socket:[161611]" dev="sockfs" ino=161611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  346.184846][   T36] audit: type=1400 audit(2000000265.544:11186): avc:  denied  { read write } for  pid=8083 comm="syz.5.2630" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.301163][   T36] audit: type=1400 audit(2000000265.544:11187): avc:  denied  { read write open } for  pid=8083 comm="syz.5.2630" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.425413][   T36] audit: type=1400 audit(2000000265.544:11188): avc:  denied  { ioctl } for  pid=8083 comm="syz.5.2630" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.551257][   T36] audit: type=1400 audit(2000000265.574:11189): avc:  denied  { sys_module } for  pid=8083 comm="syz.5.2630" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  346.722346][ T8094] fuse: Unknown parameter 'fd0x0000000000000003'
[  346.906969][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 7 on unit 1: -71 (exp. 1).
[  346.921604][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[  346.967736][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1).
[  347.004603][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1).
[  347.031421][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1).
[  347.059145][ T8101] FAULT_INJECTION: forcing a failure.
[  347.059145][ T8101] name failslab, interval 1, probability 0, space 0, times 0
[  347.095364][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[  347.126847][ T8101] CPU: 0 UID: 0 PID: 8101 Comm: syz.4.2636 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  347.126872][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  347.126883][ T8101] Call Trace:
[  347.126888][ T8101]  <TASK>
[  347.126896][ T8101]  __dump_stack+0x21/0x30
[  347.126914][ T8101]  dump_stack_lvl+0x140/0x1c0
[  347.126928][ T8101]  ? __cfi_dump_stack_lvl+0x10/0x10
[  347.126942][ T8101]  ? __kasan_check_write+0x18/0x20
[  347.126965][ T8101]  ? copy_mm+0x307/0x1da0
[  347.126986][ T8101]  dump_stack+0x19/0x20
[  347.126999][ T8101]  should_fail_ex+0x3c2/0x510
[  347.127022][ T8101]  should_failslab+0xac/0x100
[  347.127037][ T8101]  kmem_cache_alloc_node_noprof+0x45/0x420
[  347.127060][ T8101]  ? alloc_io_context+0x44/0x300
[  347.127149][ T8101]  ? _raw_spin_lock+0x92/0x120
[  347.127174][ T8101]  alloc_io_context+0x44/0x300
[  347.127187][ T8101]  ? __copy_io+0x95/0x1d0
[  347.127201][ T8101]  __copy_io+0xb1/0x1d0
[  347.127215][ T8101]  copy_process+0x1332/0x3370
[  347.127239][ T8101]  ? __cfi_copy_process+0x10/0x10
[  347.127260][ T8101]  ? __kmalloc_cache_noprof+0x23c/0x470
[  347.127283][ T8101]  ? __kasan_check_write+0x18/0x20
[  347.127304][ T8101]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  347.127325][ T8101]  vhost_task_create+0x1f7/0x3f0
[  347.127344][ T8101]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  347.127365][ T8101]  ? __cfi_vhost_task_create+0x10/0x10
[  347.127384][ T8101]  ? __cfi_vhost_task_fn+0x10/0x10
[  347.127402][ T8101]  ? __kasan_check_write+0x18/0x20
[  347.127422][ T8101]  ? mutex_lock+0x97/0x1d0
[  347.127439][ T8101]  ? __cfi_mutex_lock+0x10/0x10
[  347.127456][ T8101]  ? kernel_text_address+0xa9/0xe0
[  347.127480][ T8101]  kvm_mmu_post_init_vm+0x161/0x300
[  347.127495][ T8101]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  347.127518][ T8101]  ? _parse_integer_limit+0x195/0x1e0
[  347.127540][ T8101]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  347.127563][ T8101]  ? kstrtoull+0x13b/0x1e0
[  347.127582][ T8101]  ? kstrtouint+0x78/0xf0
[  347.127608][ T8101]  ? ioctl_has_perm+0x1bc/0x500
[  347.127633][ T8101]  ? __asan_memcpy+0x5a/0x80
[  347.127654][ T8101]  ? ioctl_has_perm+0x408/0x500
[  347.127676][ T8101]  ? has_cap_mac_admin+0xd0/0xd0
[  347.127699][ T8101]  ? __kasan_check_write+0x18/0x20
[  347.127719][ T8101]  ? mutex_lock_killable+0x97/0x1d0
[  347.127738][ T8101]  ? __cfi_mutex_lock_killable+0x10/0x10
[  347.127757][ T8101]  ? proc_fail_nth_write+0x184/0x220
[  347.127778][ T8101]  kvm_vcpu_ioctl+0xa43/0x1000
[  347.127796][ T8101]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  347.127813][ T8101]  ? __cfi_vfs_write+0x10/0x10
[  347.127836][ T8101]  ? __kasan_check_write+0x18/0x20
[  347.127857][ T8101]  ? mutex_unlock+0x90/0x240
[  347.127875][ T8101]  ? __cfi_mutex_unlock+0x10/0x10
[  347.127894][ T8101]  ? __fget_files+0x2bc/0x330
[  347.127910][ T8101]  ? bpf_lsm_file_ioctl+0xd/0x20
[  347.127926][ T8101]  ? security_file_ioctl+0x3e/0x110
[  347.127948][ T8101]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  347.127964][ T8101]  __se_sys_ioctl+0x126/0x1b0
[  347.127980][ T8101]  __x64_sys_ioctl+0x7f/0xa0
[  347.127995][ T8101]  x64_sys_call+0x1878/0x2ee0
[  347.128011][ T8101]  do_syscall_64+0x57/0xf0
[  347.128024][ T8101]  ? clear_bhb_loop+0x50/0xa0
[  347.128044][ T8101]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  347.128062][ T8101] RIP: 0033:0x7fdb1259f559
[  347.128076][ T8101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  347.128091][ T8101] RSP: 002b:00007fdb13501028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  347.128108][ T8101] RAX: ffffffffffffffda RBX: 00007fdb12825fa0 RCX: 00007fdb1259f559
[  347.128121][ T8101] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  347.128132][ T8101] RBP: 00007fdb13501090 R08: 0000000000000000 R09: 0000000000000000
[  347.128142][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  347.128152][ T8101] R13: 00007fdb12826038 R14: 00007fdb12825fa0 R15: 00007fffb9780ad8
[  347.128166][ T8101]  </TASK>
[  347.519751][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1).
[  347.555034][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 8 on unit 1: -71 (exp. 1).
[  347.576448][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[  347.595454][ T6416] usb 5-1: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1).
[  347.604459][ T6416] usb 5-1: No streaming interface found for terminal 2.
[  347.668376][ T6416] usb 5-1: USB disconnect, device number 40
[  347.903497][ T8100] kvm: kvm [8098]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0xbe702911
[  348.052196][  T483] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  348.092194][ T6416] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  348.202204][  T483] usb 7-1: Using ep0 maxpacket: 16
[  348.213971][  T483] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.236305][  T483] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.246250][ T6416] usb 5-1: Using ep0 maxpacket: 16
[  348.262969][ T6416] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  348.274469][  T483] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  348.300056][ T6416] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  348.313874][  T483] usb 7-1: config 0 interface 0 has no altsetting 0
[  348.320598][ T6416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.336025][  T483] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  348.347972][ T6416] usb 5-1: Product: syz
[  348.356494][ T6416] usb 5-1: Manufacturer: syz
[  348.365444][  T483] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.376293][ T6416] usb 5-1: SerialNumber: syz
[  348.393803][ T6416] r8152-cfgselector 5-1: Unknown version 0x0000
[  348.400114][ T6416] r8152-cfgselector 5-1: config 0 descriptor??
[  348.410733][  T483] usb 7-1: config 0 descriptor??
[  348.652659][ T6416] r8152-cfgselector 5-1: Unknown version 0x0000
[  348.669718][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.686355][ T6416] r8152-cfgselector 5-1: bad CDC descriptors
[  348.715504][ T6416] r8152-cfgselector 5-1: USB disconnect, device number 41
[  348.724466][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.853680][  T483] hid (null): invalid report_count 21831
[  348.879629][  T483] hid (null): global environment stack underflow
[  348.897964][  T483] hid (null): global environment stack underflow
[  348.914315][  T483] hid (null): report_id 3168631851 is invalid
[  348.932318][  T483] hid (null): nested delimiters
[  348.937250][  T483] hid (null): unknown global tag 0xc
[  348.963163][  T483] hid (null): unknown global tag 0xc
[  348.972793][  T483] hid (null): invalid report_size -1951222281
[  349.052783][  T483] usb 7-1: USB disconnect, device number 19
[  349.343051][ T2801] bridge_slave_1: left allmulticast mode
[  349.348832][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.379411][ T2801] bridge_slave_0: left allmulticast mode
[  349.409392][ T2801] bridge_slave_0: left promiscuous mode
[  349.425187][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.479133][ T8121] FAULT_INJECTION: forcing a failure.
[  349.479133][ T8121] name failslab, interval 1, probability 0, space 0, times 0
[  349.520516][ T2801] bridge0 (unregistering): left allmulticast mode
[  349.533165][ T8121] CPU: 0 UID: 0 PID: 8121 Comm: syz.5.2644 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  349.533189][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  349.533203][ T8121] Call Trace:
[  349.533209][ T8121]  <TASK>
[  349.533216][ T8121]  __dump_stack+0x21/0x30
[  349.533235][ T8121]  dump_stack_lvl+0x140/0x1c0
[  349.533249][ T8121]  ? __cfi_dump_stack_lvl+0x10/0x10
[  349.533264][ T8121]  ? avc_has_perm+0x155/0x240
[  349.533281][ T8121]  ? __cfi_avc_has_perm+0x10/0x10
[  349.533296][ T8121]  ? avc_perm_nonode+0x118/0x1d0
[  349.533317][ T8121]  dump_stack+0x19/0x20
[  349.533331][ T8121]  should_fail_ex+0x3c2/0x510
[  349.533354][ T8121]  should_failslab+0xac/0x100
[  349.533371][ T8121]  __kmalloc_cache_noprof+0x41/0x470
[  349.533395][ T8121]  ? vhost_task_create+0x12c/0x3f0
[  349.533415][ T8121]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  349.533436][ T8121]  vhost_task_create+0x12c/0x3f0
[  349.533454][ T8121]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  349.533475][ T8121]  ? __cfi_vhost_task_create+0x10/0x10
[  349.533495][ T8121]  ? __cfi_vhost_task_fn+0x10/0x10
[  349.533513][ T8121]  ? __kasan_check_write+0x18/0x20
[  349.533535][ T8121]  ? mutex_lock+0x97/0x1d0
[  349.533559][ T8121]  ? __cfi_mutex_lock+0x10/0x10
[  349.533576][ T8121]  ? kernel_text_address+0xa9/0xe0
[  349.533601][ T8121]  kvm_mmu_post_init_vm+0x161/0x300
[  349.533616][ T8121]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  349.533640][ T8121]  ? _parse_integer_limit+0x195/0x1e0
[  349.533663][ T8121]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  349.533686][ T8121]  ? kstrtoull+0x13b/0x1e0
[  349.533706][ T8121]  ? kstrtouint+0x78/0xf0
[  349.533726][ T8121]  ? ioctl_has_perm+0x1bc/0x500
[  349.533748][ T8121]  ? __asan_memcpy+0x5a/0x80
[  349.533770][ T8121]  ? ioctl_has_perm+0x408/0x500
[  349.533792][ T8121]  ? has_cap_mac_admin+0xd0/0xd0
[  349.533814][ T8121]  ? __kasan_check_write+0x18/0x20
[  349.533835][ T8121]  ? mutex_lock_killable+0x97/0x1d0
[  349.533853][ T8121]  ? __cfi_mutex_lock_killable+0x10/0x10
[  349.533872][ T8121]  ? proc_fail_nth_write+0x184/0x220
[  349.533893][ T8121]  kvm_vcpu_ioctl+0xa43/0x1000
[  349.533910][ T8121]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  349.533945][ T8121]  ? __cfi_vfs_write+0x10/0x10
[  349.533968][ T8121]  ? __kasan_check_write+0x18/0x20
[  349.533990][ T8121]  ? mutex_unlock+0x90/0x240
[  349.534008][ T8121]  ? __cfi_mutex_unlock+0x10/0x10
[  349.534028][ T8121]  ? __fget_files+0x2bc/0x330
[  349.534044][ T8121]  ? bpf_lsm_file_ioctl+0xd/0x20
[  349.534061][ T8121]  ? security_file_ioctl+0x3e/0x110
[  349.534083][ T8121]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  349.534100][ T8121]  __se_sys_ioctl+0x126/0x1b0
[  349.534116][ T8121]  __x64_sys_ioctl+0x7f/0xa0
[  349.534131][ T8121]  x64_sys_call+0x1878/0x2ee0
[  349.534147][ T8121]  do_syscall_64+0x57/0xf0
[  349.534161][ T8121]  ? clear_bhb_loop+0x50/0xa0
[  349.534182][ T8121]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  349.534201][ T8121] RIP: 0033:0x7f0c4b19f559
[  349.534214][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.534228][ T8121] RSP: 002b:00007f0c4c00f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  349.534245][ T8121] RAX: ffffffffffffffda RBX: 00007f0c4b425fa0 RCX: 00007f0c4b19f559
[  349.534257][ T8121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  349.534268][ T8121] RBP: 00007f0c4c00f090 R08: 0000000000000000 R09: 0000000000000000
[  349.534279][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.534288][ T8121] R13: 00007f0c4b426038 R14: 00007f0c4b425fa0 R15: 00007ffdda774e88
[  349.534302][ T8121]  </TASK>
[  350.001107][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2645'.
[  350.090933][ T8125] netlink: 'syz.6.2646': attribute type 63 has an invalid length.
[  350.098893][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2646'.
[  350.112905][ T2801] veth1_macvtap: left promiscuous mode
[  350.118498][ T2801] veth0_vlan: left promiscuous mode
[  350.177458][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.189924][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.198295][ T8117] bridge_slave_0: entered allmulticast mode
[  350.204573][ T8117] bridge_slave_0: entered promiscuous mode
[  350.212845][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.220379][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.228505][ T8117] bridge_slave_1: entered allmulticast mode
[  350.234768][ T8117] bridge_slave_1: entered promiscuous mode
[  350.361741][  T483] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0
[  350.388238][  T483] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0
[  350.406446][  T483] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0
[  350.436956][  T483] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0
[  350.469648][  T483] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0
[  350.494640][  T483] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0
[  350.502554][   T36] kauditd_printk_skb: 229 callbacks suppressed
[  350.502567][   T36] audit: type=1400 audit(2000000270.465:11419): avc:  denied  { ioctl } for  pid=8129 comm="syz.4.2647" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  350.547532][  T483] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0
[  350.572565][  T483] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0
[  350.590278][   T36] audit: type=1400 audit(2000000270.535:11420): avc:  denied  { ioctl } for  pid=8129 comm="syz.4.2647" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  350.627855][  T483] hid-generic 0000:0000:0001.0022: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  350.637742][ T6416] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  350.723045][ T2802] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.730129][ T2802] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.746573][   T36] audit: type=1400 audit(2000000270.615:11421): avc:  denied  { ioctl } for  pid=8129 comm="syz.4.2647" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  350.812409][ T6416] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.852217][ T6416] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  350.875791][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.882918][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.917282][ T6416] usb 5-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=a0.27
[  350.930287][   T36] audit: type=1400 audit(2000000270.615:11422): avc:  denied  { ioctl } for  pid=8129 comm="syz.4.2647" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  350.969000][ T6416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.009810][ T6416] usb 5-1: Product: syz
[  351.038390][ T6416] usb 5-1: Manufacturer: syz
[  351.060310][ T6416] usb 5-1: SerialNumber: syz
[  351.087347][   T36] audit: type=1400 audit(2000000270.615:11423): avc:  denied  { ioctl } for  pid=8129 comm="syz.4.2647" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  351.112610][ T6416] usb 5-1: config 0 descriptor??
[  351.200246][ T8117] audit: audit_backlog=65 > audit_backlog_limit=64
[  351.224534][   T36] audit: type=1400 audit(2000000270.615:11424): avc:  denied  { sys_module } for  pid=8117 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  351.253000][ T8136] kvm: kvm [8135]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0xbe702911
[  351.262120][ T8117] audit: audit_lost=352 audit_rate_limit=0 audit_backlog_limit=64
[  351.269928][ T8117] audit: backlog limit exceeded
[  351.320044][ T8136] kvm: kvm [8135]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x800
[  351.338308][ T8130] audit: audit_backlog=65 > audit_backlog_limit=64
[  351.385173][ T8117] veth0_vlan: entered promiscuous mode
[  351.534226][ T8117] veth1_macvtap: entered promiscuous mode
[  351.875359][ T6416] usb 5-1: USB disconnect, device number 42
[  352.024610][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2641'.
[  352.128620][ T8156] device-mapper: table: 252:5: too large device
[  352.141439][ T8156] device-mapper: ioctl: error adding target to table
[  352.681954][ T6416] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  352.855867][ T6416] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  352.906728][ T6416] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  352.973402][ T6416] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  353.006763][ T6416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.060883][ T6416] usb 1-1: Product: syz
[  353.084102][ T6416] usb 1-1: Manufacturer: syz
[  353.105324][ T6416] usb 1-1: SerialNumber: syz
[  353.123211][ T6416] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  353.334235][ T6416] usb 1-1: USB disconnect, device number 47
[  353.711903][   T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  353.750436][ T6416] kernel read not supported for file /newroot/244 (pid: 6416 comm: kworker/0:5)
[  353.943740][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  353.982401][   T10] usb 7-1: config 1 has an invalid interface number: 156 but max is 2
[  354.005537][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.029755][   T10] usb 7-1: config 1 has no interface number 2
[  354.043394][   T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  354.087440][   T10] usb 7-1: config 1 interface 1 has no altsetting 0
[  354.105868][   T10] usb 7-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[  354.122868][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.140533][   T10] usb 7-1: Product: syz
[  354.150841][   T10] usb 7-1: Manufacturer: syz
[  354.169017][   T10] usb 7-1: SerialNumber: syz
[  354.401236][   T10] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor
[  354.437729][   T10] usb 7-1: 1:1 : sample bitwidth 62 in over sample bytes 2
[  354.461310][   T10] usb 7-1: 1:1 : unsupported format bits 0x7b6c0006
[  354.485866][   T10] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  354.515994][   T10] usb 7-1: selecting invalid altsetting 0
[  354.535944][   T10] usb 7-1: selecting invalid altsetting 0
[  354.554673][   T10] usb 7-1: unit 2 not found!
[  354.570179][   T10] usb 7-1: unit 236 not found!
[  354.601040][   T10] usb 7-1: USB disconnect, device number 20
[  354.759191][  T942] udevd[942]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  355.000263][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'.
[  355.172618][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'.
[  355.446686][ T8210] FAULT_INJECTION: forcing a failure.
[  355.446686][ T8210] name fail_futex, interval 1, probability 0, space 0, times 0
[  355.520720][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.5.2675 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  355.520746][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  355.520758][ T8210] Call Trace:
[  355.520764][ T8210]  <TASK>
[  355.520771][ T8210]  __dump_stack+0x21/0x30
[  355.520790][ T8210]  dump_stack_lvl+0x140/0x1c0
[  355.520805][ T8210]  ? __cfi_dump_stack_lvl+0x10/0x10
[  355.520822][ T8210]  dump_stack+0x19/0x20
[  355.520836][ T8210]  should_fail_ex+0x3c2/0x510
[  355.520861][ T8210]  should_fail+0xf/0x20
[  355.520889][ T8210]  get_futex_key+0x178/0x940
[  355.520906][ T8210]  ? kasan_save_track+0x3e/0x80
[  355.520921][ T8210]  ? __cfi_get_futex_key+0x10/0x10
[  355.520936][ T8210]  ? do_sys_openat2+0x170/0x1d0
[  355.520957][ T8210]  ? x64_sys_call+0xe69/0x2ee0
[  355.520973][ T8210]  ? do_syscall_64+0x57/0xf0
[  355.520989][ T8210]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  355.521009][ T8210]  futex_wake+0x150/0x950
[  355.521030][ T8210]  ? __cfi_futex_wake+0x10/0x10
[  355.521052][ T8210]  do_futex+0x37d/0x510
[  355.521069][ T8210]  ? __cfi_do_futex+0x10/0x10
[  355.521087][ T8210]  __se_sys_futex+0x13c/0x320
[  355.521103][ T8210]  ? fput+0x1a4/0x230
[  355.521140][ T8210]  ? __x64_sys_futex+0x110/0x110
[  355.521201][ T8210]  __x64_sys_futex+0xe9/0x110
[  355.521220][ T8210]  x64_sys_call+0x227f/0x2ee0
[  355.521237][ T8210]  do_syscall_64+0x57/0xf0
[  355.521251][ T8210]  ? clear_bhb_loop+0x50/0xa0
[  355.521272][ T8210]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  355.521293][ T8210] RIP: 0033:0x7f0c4b19f559
[  355.521307][ T8210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.521322][ T8210] RSP: 002b:00007f0c4c00f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  355.521340][ T8210] RAX: ffffffffffffffda RBX: 00007f0c4b425fa8 RCX: 00007f0c4b19f559
[  355.521353][ T8210] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c4b425fac
[  355.521364][ T8210] RBP: 00007f0c4b425fa0 R08: 4000000000000000 R09: 0000000000000000
[  355.521377][ T8210] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  355.521388][ T8210] R13: 00007f0c4b426038 R14: 00007ffdda774da0 R15: 00007ffdda774e88
[  355.521403][ T8210]  </TASK>
[  356.038294][   T36] kauditd_printk_skb: 446 callbacks suppressed
[  356.038310][   T36] audit: type=1400 audit(2000000275.945:11869): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  356.111674][   T36] audit: type=1400 audit(2000000275.965:11870): avc:  denied  { read } for  pid=5815 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.211735][   T36] audit: type=1400 audit(2000000275.965:11871): avc:  denied  { read open } for  pid=5815 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.312421][   T36] audit: type=1400 audit(2000000275.965:11872): avc:  denied  { ioctl } for  pid=5815 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.401798][   T36] audit: type=1400 audit(2000000276.105:11873): avc:  denied  { read } for  pid=8216 comm="syz.5.2677" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  356.510795][   T36] audit: type=1400 audit(2000000276.105:11874): avc:  denied  { read open } for  pid=8216 comm="syz.5.2677" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  356.599798][   T36] audit: type=1400 audit(2000000276.105:11875): avc:  denied  { ioctl } for  pid=8216 comm="syz.5.2677" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  356.675568][   T36] audit: type=1400 audit(2000000276.105:11876): avc:  denied  { mounton } for  pid=8216 comm="syz.5.2677" path="/214/file0" dev="tmpfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  356.751724][   T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  356.765912][   T36] audit: type=1400 audit(2000000276.115:11877): avc:  denied  { unlink } for  pid=8216 comm="syz.5.2677" name="#9" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  356.852242][   T36] audit: type=1400 audit(2000000276.135:11878): avc:  denied  { mount } for  pid=8216 comm="syz.5.2677" name="/" dev="overlay" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  356.911719][   T10] usb 1-1: Using ep0 maxpacket: 16
[  356.933834][   T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.976984][   T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.025109][   T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  357.073107][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  357.092788][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  357.122299][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.150908][   T10] usb 1-1: config 0 descriptor??
[  357.356849][ T8235] overlay: ./file0 is not a directory
[  357.784405][   T10] usb 1-1: USB disconnect, device number 48
[  358.266495][ T8255] device-mapper: ioctl: Unable to rename non-existent device,  to uuid syzf3
[  358.554616][ T8264] FAULT_INJECTION: forcing a failure.
[  358.554616][ T8264] name failslab, interval 1, probability 0, space 0, times 0
[  358.615179][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.6.2691 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  358.615206][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  358.615218][ T8264] Call Trace:
[  358.615224][ T8264]  <TASK>
[  358.615231][ T8264]  __dump_stack+0x21/0x30
[  358.615254][ T8264]  dump_stack_lvl+0x140/0x1c0
[  358.615269][ T8264]  ? __cfi_dump_stack_lvl+0x10/0x10
[  358.615284][ T8264]  ? is_bpf_text_address+0x17b/0x1a0
[  358.615306][ T8264]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  358.615325][ T8264]  dump_stack+0x19/0x20
[  358.615338][ T8264]  should_fail_ex+0x3c2/0x510
[  358.615363][ T8264]  should_failslab+0xac/0x100
[  358.615381][ T8264]  __kmalloc_node_noprof+0x69/0x500
[  358.615406][ T8264]  ? __kvmalloc_node_noprof+0x128/0x300
[  358.615429][ T8264]  ? __kasan_check_write+0x18/0x20
[  358.615451][ T8264]  __kvmalloc_node_noprof+0x128/0x300
[  358.615473][ T8264]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  358.615494][ T8264]  ? xas_start+0x317/0x3e0
[  358.615510][ T8264]  ? __kasan_check_write+0x18/0x20
[  358.615531][ T8264]  ? enqueue_timer+0x1c5/0x4b0
[  358.615551][ T8264]  __kvm_mmu_topup_memory_cache+0x58e/0x7e0
[  358.615575][ T8264]  ? mutex_unlock+0x90/0x240
[  358.615595][ T8264]  kvm_mmu_topup_memory_cache+0x24/0x30
[  358.615611][ T8264]  kvm_mmu_load+0xa1/0x2900
[  358.615634][ T8264]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[  358.615658][ T8264]  ? kvm_deliver_exception_payload+0xd0/0x1e0
[  358.615681][ T8264]  ? kvm_apic_has_interrupt+0x77a/0x790
[  358.615705][ T8264]  vcpu_run+0x4d56/0x7810
[  358.615729][ T8264]  ? kvm_sched_clock_read+0x15/0x30
[  358.615758][ T8264]  ? signal_pending+0xc0/0xc0
[  358.615779][ T8264]  ? __kasan_check_write+0x18/0x20
[  358.615800][ T8264]  ? xfd_validate_state+0x68/0x140
[  358.615825][ T8264]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[  358.615845][ T8264]  ? __kasan_check_write+0x18/0x20
[  358.615866][ T8264]  ? fpregs_mark_activate+0x68/0x160
[  358.615886][ T8264]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[  358.615907][ T8264]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[  358.615930][ T8264]  ? _parse_integer_limit+0x195/0x1e0
[  358.615953][ T8264]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  358.615976][ T8264]  ? kstrtoull+0x13b/0x1e0
[  358.615996][ T8264]  ? kstrtouint+0x78/0xf0
[  358.616015][ T8264]  ? ioctl_has_perm+0x1bc/0x500
[  358.616039][ T8264]  ? __asan_memcpy+0x5a/0x80
[  358.616060][ T8264]  ? ioctl_has_perm+0x408/0x500
[  358.616082][ T8264]  ? has_cap_mac_admin+0xd0/0xd0
[  358.616103][ T8264]  ? __kasan_check_write+0x18/0x20
[  358.616124][ T8264]  ? mutex_lock_killable+0x97/0x1d0
[  358.616143][ T8264]  ? __cfi_mutex_lock_killable+0x10/0x10
[  358.616161][ T8264]  ? proc_fail_nth_write+0x184/0x220
[  358.616183][ T8264]  kvm_vcpu_ioctl+0xa43/0x1000
[  358.616200][ T8264]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  358.616222][ T8264]  ? __cfi_vfs_write+0x10/0x10
[  358.616254][ T8264]  ? __kasan_check_write+0x18/0x20
[  358.616273][ T8264]  ? mutex_unlock+0x90/0x240
[  358.616289][ T8264]  ? __cfi_mutex_unlock+0x10/0x10
[  358.616307][ T8264]  ? __fget_files+0x2bc/0x330
[  358.616321][ T8264]  ? bpf_lsm_file_ioctl+0xd/0x20
[  358.616336][ T8264]  ? security_file_ioctl+0x3e/0x110
[  358.616375][ T8264]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  358.616391][ T8264]  __se_sys_ioctl+0x126/0x1b0
[  358.616408][ T8264]  __x64_sys_ioctl+0x7f/0xa0
[  358.616423][ T8264]  x64_sys_call+0x1878/0x2ee0
[  358.616439][ T8264]  do_syscall_64+0x57/0xf0
[  358.616453][ T8264]  ? clear_bhb_loop+0x50/0xa0
[  358.616473][ T8264]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  358.616492][ T8264] RIP: 0033:0x7fe160b9f559
[  358.616505][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.616519][ T8264] RSP: 002b:00007fe161af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  358.616536][ T8264] RAX: ffffffffffffffda RBX: 00007fe160e25fa0 RCX: 00007fe160b9f559
[  358.616549][ T8264] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  358.616559][ T8264] RBP: 00007fe161af7090 R08: 0000000000000000 R09: 0000000000000000
[  358.616573][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  358.616583][ T8264] R13: 00007fe160e26038 R14: 00007fe160e25fa0 R15: 00007ffd71e1bc38
[  358.616597][ T8264]  </TASK>
[  360.129967][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2695'.
[  360.160631][ T8273] FAULT_INJECTION: forcing a failure.
[  360.160631][ T8273] name failslab, interval 1, probability 0, space 0, times 0
[  360.241187][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.0.2694 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  360.241211][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  360.241222][ T8273] Call Trace:
[  360.241227][ T8273]  <TASK>
[  360.241234][ T8273]  __dump_stack+0x21/0x30
[  360.241251][ T8273]  dump_stack_lvl+0x140/0x1c0
[  360.241264][ T8273]  ? __cfi_dump_stack_lvl+0x10/0x10
[  360.241278][ T8273]  ? avc_has_perm+0x155/0x240
[  360.241294][ T8273]  ? __cfi_avc_has_perm+0x10/0x10
[  360.241308][ T8273]  ? avc_perm_nonode+0x118/0x1d0
[  360.241322][ T8273]  dump_stack+0x19/0x20
[  360.241334][ T8273]  should_fail_ex+0x3c2/0x510
[  360.241355][ T8273]  should_failslab+0xac/0x100
[  360.241370][ T8273]  __kmalloc_cache_noprof+0x41/0x470
[  360.241398][ T8273]  ? vhost_task_create+0x12c/0x3f0
[  360.241417][ T8273]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  360.241437][ T8273]  vhost_task_create+0x12c/0x3f0
[  360.241454][ T8273]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  360.241473][ T8273]  ? __cfi_vhost_task_create+0x10/0x10
[  360.241495][ T8273]  ? __cfi_vhost_task_fn+0x10/0x10
[  360.241512][ T8273]  ? __kasan_check_write+0x18/0x20
[  360.241533][ T8273]  ? mutex_lock+0x97/0x1d0
[  360.241550][ T8273]  ? __cfi_mutex_lock+0x10/0x10
[  360.241566][ T8273]  ? kernel_text_address+0xa9/0xe0
[  360.241589][ T8273]  kvm_mmu_post_init_vm+0x161/0x300
[  360.241604][ T8273]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  360.241626][ T8273]  ? _parse_integer_limit+0x195/0x1e0
[  360.241647][ T8273]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  360.241668][ T8273]  ? kstrtoull+0x13b/0x1e0
[  360.241687][ T8273]  ? kstrtouint+0x78/0xf0
[  360.241705][ T8273]  ? ioctl_has_perm+0x1bc/0x500
[  360.241726][ T8273]  ? __asan_memcpy+0x5a/0x80
[  360.241745][ T8273]  ? ioctl_has_perm+0x408/0x500
[  360.241766][ T8273]  ? has_cap_mac_admin+0xd0/0xd0
[  360.241786][ T8273]  ? __kasan_check_write+0x18/0x20
[  360.241806][ T8273]  ? mutex_lock_killable+0x97/0x1d0
[  360.241823][ T8273]  ? __cfi_mutex_lock_killable+0x10/0x10
[  360.241841][ T8273]  ? proc_fail_nth_write+0x184/0x220
[  360.241860][ T8273]  kvm_vcpu_ioctl+0xa43/0x1000
[  360.241877][ T8273]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  360.241893][ T8273]  ? __cfi_vfs_write+0x10/0x10
[  360.241914][ T8273]  ? __kasan_check_write+0x18/0x20
[  360.241933][ T8273]  ? mutex_unlock+0x90/0x240
[  360.241949][ T8273]  ? __cfi_mutex_unlock+0x10/0x10
[  360.241967][ T8273]  ? __fget_files+0x2bc/0x330
[  360.241982][ T8273]  ? bpf_lsm_file_ioctl+0xd/0x20
[  360.241997][ T8273]  ? security_file_ioctl+0x3e/0x110
[  360.242017][ T8273]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  360.242033][ T8273]  __se_sys_ioctl+0x126/0x1b0
[  360.242047][ T8273]  __x64_sys_ioctl+0x7f/0xa0
[  360.242061][ T8273]  x64_sys_call+0x1878/0x2ee0
[  360.242076][ T8273]  do_syscall_64+0x57/0xf0
[  360.242089][ T8273]  ? clear_bhb_loop+0x50/0xa0
[  360.242108][ T8273]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  360.242125][ T8273] RIP: 0033:0x7f7c6959f559
[  360.242138][ T8273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.242169][ T8273] RSP: 002b:00007f7c6a38c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  360.242186][ T8273] RAX: ffffffffffffffda RBX: 00007f7c69825fa0 RCX: 00007f7c6959f559
[  360.242199][ T8273] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  360.242209][ T8273] RBP: 00007f7c6a38c090 R08: 0000000000000000 R09: 0000000000000000
[  360.242219][ T8273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.242230][ T8273] R13: 00007f7c69826038 R14: 00007f7c69825fa0 R15: 00007ffdae412c28
[  360.242244][ T8273]  </TASK>
[  361.331063][   T36] kauditd_printk_skb: 207 callbacks suppressed
[  361.331079][   T36] audit: type=1400 audit(2000000281.235:12086): avc:  denied  { read } for  pid=5271 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  361.458953][   T36] audit: type=1400 audit(2000000281.245:12087): avc:  denied  { read open } for  pid=5271 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  361.547752][   T36] audit: type=1400 audit(2000000281.245:12088): avc:  denied  { ioctl } for  pid=5271 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  361.651492][   T36] audit: type=1400 audit(2000000281.345:12089): avc:  denied  { read } for  pid=8288 comm="syz.4.2700" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  361.678628][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2701'.
[  361.687995][ T8293] device-mapper: ioctl: Unable to rename non-existent device,  to uuid syze3
[  361.753704][   T36] audit: type=1400 audit(2000000281.345:12090): avc:  denied  { read open } for  pid=8288 comm="syz.4.2700" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  361.871431][   T36] audit: type=1400 audit(2000000281.345:12091): avc:  denied  { ioctl } for  pid=8288 comm="syz.4.2700" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  361.985590][   T36] audit: type=1400 audit(2000000281.465:12092): avc:  denied  { read } for  pid=6286 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  362.137959][   T36] audit: type=1400 audit(2000000281.465:12093): avc:  denied  { read open } for  pid=6286 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  362.256221][   T36] audit: type=1400 audit(2000000281.465:12094): avc:  denied  { ioctl } for  pid=6286 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  362.387185][   T36] audit: type=1400 audit(2000000281.555:12095): avc:  denied  { read } for  pid=5271 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  362.571954][ T6416] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  362.731491][ T6416] usb 1-1: Using ep0 maxpacket: 16
[  362.777358][ T6416] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.831405][ T6416] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.841257][ T6416] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  362.925716][ T6416] usb 1-1: config 0 interface 0 has no altsetting 0
[  362.956027][ T6416] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  362.995417][ T6416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.032372][ T6416] usb 1-1: config 0 descriptor??
[  363.287998][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2713'.
[  363.679936][   T10] usb 1-1: USB disconnect, device number 49
[  363.709085][ T8332] overlayfs: failed to resolve './file0': -2
[  363.936052][ T8341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2717'.
[  364.310814][ T8402] fuse: Bad value for 'user_id'
[  364.341299][ T8402] fuse: Bad value for 'user_id'
[  366.086204][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2738'.
[  366.141565][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2738'.
[  366.408134][   T36] kauditd_printk_skb: 695 callbacks suppressed
[  366.408148][   T36] audit: type=1400 audit(2000000286.372:12791): avc:  denied  { read } for  pid=8117 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  366.518895][   T36] audit: type=1400 audit(2000000286.412:12792): avc:  denied  { read open } for  pid=8117 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  366.633732][   T36] audit: type=1400 audit(2000000286.412:12793): avc:  denied  { ioctl } for  pid=8117 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  366.782278][   T36] audit: type=1400 audit(2000000286.462:12794): avc:  denied  { read write } for  pid=8460 comm="syz.0.2740" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  366.903378][   T36] audit: type=1400 audit(2000000286.462:12795): avc:  denied  { ioctl open } for  pid=8460 comm="syz.0.2740" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  367.043398][   T36] audit: type=1400 audit(2000000286.462:12796): avc:  denied  { ioctl } for  pid=8460 comm="syz.0.2740" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  367.172508][   T36] audit: type=1400 audit(2000000286.482:12797): avc:  denied  { read write } for  pid=8460 comm="syz.0.2740" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  367.215443][ T8474] overlayfs: conflicting options: metacopy=off,verity=on
[  367.301218][   T36] audit: type=1400 audit(2000000286.482:12798): avc:  denied  { read write open } for  pid=8460 comm="syz.0.2740" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  367.413370][   T36] audit: type=1400 audit(2000000286.482:12799): avc:  denied  { ioctl } for  pid=8460 comm="syz.0.2740" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  367.563786][   T36] audit: type=1400 audit(2000000286.652:12800): avc:  denied  { read } for  pid=6286 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  367.938874][ T8486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2750'.
[  368.094598][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2752'.
[  368.574769][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'.
[  369.929783][ T8524] netlink: 'syz.4.2766': attribute type 40 has an invalid length.
[  370.602574][ T8536] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2770'.
[  370.642983][ T8536] overlayfs: failed to clone upperpath
[  370.871203][ T6416] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  371.071197][ T6416] usb 1-1: device descriptor read/64, error -71
[  371.321188][ T6416] usb 1-1: device descriptor read/64, error -71
[  371.423760][   T36] kauditd_printk_skb: 220 callbacks suppressed
[  371.423774][   T36] audit: type=1400 audit(2000000291.392:13021): avc:  denied  { create } for  pid=8558 comm="syz.4.2778" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  371.509046][   T36] audit: type=1400 audit(2000000291.422:13022): avc:  denied  { ioctl } for  pid=8558 comm="syz.4.2778" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=166856 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  371.591184][ T6416] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  371.626479][   T36] audit: type=1400 audit(2000000291.422:13023): avc:  denied  { execmem } for  pid=8558 comm="syz.4.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  371.664867][ T8559] audit: audit_backlog=66 > audit_backlog_limit=64
[  371.692652][ T8540] audit: audit_backlog=66 > audit_backlog_limit=64
[  371.702405][ T8540] audit: audit_lost=354 audit_rate_limit=0 audit_backlog_limit=64
[  371.714934][ T8562] audit: audit_backlog=66 > audit_backlog_limit=64
[  371.732784][   T36] audit: type=1400 audit(2000000291.422:13024): avc:  denied  { ioctl } for  pid=8558 comm="syz.4.2778" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=166856 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  371.759141][ T6416] usb 1-1: device descriptor read/64, error -71
[  371.768898][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2778'.
[  371.777829][ T8540] audit: backlog limit exceeded
[  371.808822][ T8559] audit: audit_lost=355 audit_rate_limit=0 audit_backlog_limit=64
[  372.041187][ T6416] usb 1-1: device descriptor read/64, error -71
[  372.163270][ T6416] usb usb1-port1: attempt power cycle
[  372.300569][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2780'.
[  372.484067][ T8576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2783'.
[  372.543831][ T6416] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  372.598752][ T6416] usb 1-1: device descriptor read/8, error -71
[  372.762870][ T6416] usb 1-1: device descriptor read/8, error -71
[  373.001229][ T6416] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  373.046427][ T6416] usb 1-1: device descriptor read/8, error -71
[  373.063505][ T8594] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8594 comm=syz.4.2791
[  373.102213][ T8591] netlink: 'syz.4.2791': attribute type 8 has an invalid length.
[  373.158875][ T8596] overlayfs: failed to resolve './file2': -2
[  373.183698][ T6416] usb 1-1: device descriptor read/8, error -71
[  373.314756][ T6416] usb usb1-port1: unable to enumerate USB device
[  374.485198][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2800'.
[  375.096326][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'.
[  375.471155][    T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  375.634857][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.690813][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.721903][    T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  375.741780][ T8667] 9pnet_fd: Insufficient options for proto=fd
[  375.775320][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.964478][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2823'.
[  376.215500][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x2
[  376.252318][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.275416][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.291870][ T8688] overlayfs: failed to clone upperpath
[  376.301206][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.323996][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.346281][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.372261][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.394802][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.425690][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.479065][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.501672][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.525222][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.552917][    T9] hid-picolcd 0003:04D8:C002.0025: unknown main item tag 0x0
[  376.631168][    T9] hid-picolcd 0003:04D8:C002.0025: unsupported KEY_STATE report
[  376.653714][    T9] hid-picolcd 0003:04D8:C002.0025: probe with driver hid-picolcd failed with error -22
[  376.698209][    T9] usb 7-1: USB disconnect, device number 21
[  376.804883][   T36] kauditd_printk_skb: 735 callbacks suppressed
[  376.804898][   T36] audit: type=1400 audit(2000000296.772:13682): avc:  denied  { read } for  pid=8117 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  376.922832][ T8702] FAULT_INJECTION: forcing a failure.
[  376.922832][ T8702] name failslab, interval 1, probability 0, space 0, times 0
[  376.935529][   T36] audit: type=1400 audit(2000000296.802:13683): avc:  denied  { read open } for  pid=8117 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  376.995238][ T8702] CPU: 0 UID: 0 PID: 8702 Comm: syz.0.2833 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  376.995265][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  376.995277][ T8702] Call Trace:
[  376.995283][ T8702]  <TASK>
[  376.995290][ T8702]  __dump_stack+0x21/0x30
[  376.995323][ T8702]  dump_stack_lvl+0x140/0x1c0
[  376.995337][ T8702]  ? __cfi_dump_stack_lvl+0x10/0x10
[  376.995352][ T8702]  ? avc_has_perm+0x155/0x240
[  376.995368][ T8702]  ? __cfi_avc_has_perm+0x10/0x10
[  376.995384][ T8702]  ? avc_perm_nonode+0x118/0x1d0
[  376.995400][ T8702]  dump_stack+0x19/0x20
[  376.995413][ T8702]  should_fail_ex+0x3c2/0x510
[  376.995435][ T8702]  should_failslab+0xac/0x100
[  376.995451][ T8702]  __kmalloc_cache_noprof+0x41/0x470
[  376.995474][ T8702]  ? vhost_task_create+0x12c/0x3f0
[  376.995494][ T8702]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  376.995515][ T8702]  vhost_task_create+0x12c/0x3f0
[  376.995533][ T8702]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  376.995554][ T8702]  ? __cfi_vhost_task_create+0x10/0x10
[  376.995573][ T8702]  ? __cfi_vhost_task_fn+0x10/0x10
[  376.995591][ T8702]  ? __kasan_check_write+0x18/0x20
[  376.995612][ T8702]  ? mutex_lock+0x97/0x1d0
[  376.995630][ T8702]  ? __cfi_mutex_lock+0x10/0x10
[  376.995647][ T8702]  ? kernel_text_address+0xa9/0xe0
[  376.995672][ T8702]  kvm_mmu_post_init_vm+0x161/0x300
[  376.995687][ T8702]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  376.995711][ T8702]  ? _parse_integer_limit+0x195/0x1e0
[  376.995732][ T8702]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  376.995755][ T8702]  ? kstrtoull+0x13b/0x1e0
[  376.995775][ T8702]  ? kstrtouint+0x78/0xf0
[  376.995794][ T8702]  ? ioctl_has_perm+0x1bc/0x500
[  376.995816][ T8702]  ? __asan_memcpy+0x5a/0x80
[  376.995837][ T8702]  ? ioctl_has_perm+0x408/0x500
[  376.995864][ T8702]  ? has_cap_mac_admin+0xd0/0xd0
[  376.995887][ T8702]  ? __kasan_check_write+0x18/0x20
[  376.995908][ T8702]  ? mutex_lock_killable+0x97/0x1d0
[  376.995927][ T8702]  ? __cfi_mutex_lock_killable+0x10/0x10
[  376.995946][ T8702]  ? proc_fail_nth_write+0x184/0x220
[  376.995967][ T8702]  kvm_vcpu_ioctl+0xa43/0x1000
[  376.995985][ T8702]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  376.996003][ T8702]  ? __cfi_vfs_write+0x10/0x10
[  376.996025][ T8702]  ? __kasan_check_write+0x18/0x20
[  376.996046][ T8702]  ? mutex_unlock+0x90/0x240
[  376.996063][ T8702]  ? __cfi_mutex_unlock+0x10/0x10
[  376.996082][ T8702]  ? __fget_files+0x2bc/0x330
[  376.996098][ T8702]  ? bpf_lsm_file_ioctl+0xd/0x20
[  376.996114][ T8702]  ? security_file_ioctl+0x3e/0x110
[  376.996136][ T8702]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  376.996152][ T8702]  __se_sys_ioctl+0x126/0x1b0
[  376.996168][ T8702]  __x64_sys_ioctl+0x7f/0xa0
[  376.996183][ T8702]  x64_sys_call+0x1878/0x2ee0
[  376.996199][ T8702]  do_syscall_64+0x57/0xf0
[  376.996213][ T8702]  ? clear_bhb_loop+0x50/0xa0
[  376.996233][ T8702]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  376.996252][ T8702] RIP: 0033:0x7f7c6959f559
[  376.996265][ T8702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.996282][ T8702] RSP: 002b:00007f7c6a38c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  376.996299][ T8702] RAX: ffffffffffffffda RBX: 00007f7c69825fa0 RCX: 00007f7c6959f559
[  376.996311][ T8702] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  376.996321][ T8702] RBP: 00007f7c6a38c090 R08: 0000000000000000 R09: 0000000000000000
[  376.996331][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.996341][ T8702] R13: 00007f7c69826038 R14: 00007f7c69825fa0 R15: 00007ffdae412c28
[  376.996354][ T8702]  </TASK>
[  377.628668][ T8705] GUP no longer grows the stack in syz.5.2834 (8705): 200000004000-20000000a000 (200000003000)
[  377.639126][ T8705] CPU: 0 UID: 0 PID: 8705 Comm: syz.5.2834 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  377.639151][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  377.639162][ T8705] Call Trace:
[  377.639167][ T8705]  <TASK>
[  377.639174][ T8705]  __dump_stack+0x21/0x30
[  377.639193][ T8705]  dump_stack_lvl+0x140/0x1c0
[  377.639207][ T8705]  ? __cfi_dump_stack_lvl+0x10/0x10
[  377.639222][ T8705]  ? find_vma+0xd3/0x120
[  377.639326][ T8705]  ? vma_is_secretmem+0x11/0x50
[  377.639346][ T8705]  ? check_vma_flags+0x2a5/0x3a0
[  377.639365][ T8705]  dump_stack+0x19/0x20
[  377.639378][ T8705]  __get_user_pages+0x1e20/0x22d0
[  377.639400][ T8705]  ? populate_vma_page_range+0x220/0x220
[  377.639419][ T8705]  __gup_longterm_locked+0xc53/0x1570
[  377.639438][ T8705]  ? __kasan_check_write+0x18/0x20
[  377.639460][ T8705]  ? rwsem_read_trylock+0x275/0x5a0
[  377.639503][ T8705]  pin_user_pages_remote+0x177/0x230
[  377.639521][ T8705]  ? __cfi_pin_user_pages_remote+0x10/0x10
[  377.639540][ T8705]  ? up_read+0x26/0x1c0
[  377.639558][ T8705]  ? mm_access+0x18c/0x210
[  377.639580][ T8705]  process_vm_rw+0x66d/0xc70
[  377.639598][ T8705]  ? __ia32_sys_process_vm_writev+0x110/0x110
[  377.639620][ T8705]  ? __se_sys_futex+0x13c/0x320
[  377.639640][ T8705]  ? __kasan_check_write+0x18/0x20
[  377.639662][ T8705]  __x64_sys_process_vm_writev+0xeb/0x100
[  377.639679][ T8705]  x64_sys_call+0x1ab/0x2ee0
[  377.639696][ T8705]  do_syscall_64+0x57/0xf0
[  377.639710][ T8705]  ? clear_bhb_loop+0x50/0xa0
[  377.639731][ T8705]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  377.639750][ T8705] RIP: 0033:0x7f0c4b19f559
[  377.639764][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.639777][ T8705] RSP: 002b:00007f0c4c00f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  377.639795][ T8705] RAX: ffffffffffffffda RBX: 00007f0c4b425fa0 RCX: 00007f0c4b19f559
[  377.639839][ T8705] RDX: 0000000000000067 RSI: 00002000000005c0 RDI: 0000000000000308
[  377.639849][ T8705] RBP: 00007f0c4b236b50 R08: 0000000000000001 R09: 0000000000000000
[  377.639859][ T8705] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000
[  377.639869][ T8705] R13: 00007f0c4b426038 R14: 00007f0c4b425fa0 R15: 00007ffdda774e88
[  377.639882][ T8705]  </TASK>
[  377.640694][ T8705] netlink: 'syz.5.2834': attribute type 11 has an invalid length.
[  377.876665][   T36] audit: type=1400 audit(2000000296.802:13684): avc:  denied  { ioctl } for  pid=8117 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  377.902445][   T36] audit: type=1400 audit(2000000296.842:13685): avc:  denied  { create } for  pid=8697 comm="syz.5.2831" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  377.934657][   T36] audit: type=1400 audit(2000000296.842:13686): avc:  denied  { create } for  pid=8697 comm="syz.5.2831" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  377.970768][   T36] audit: type=1400 audit(2000000296.852:13687): avc:  denied  { read } for  pid=8699 comm="syz.0.2833" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  378.047321][   T36] audit: type=1400 audit(2000000296.852:13688): avc:  denied  { read open } for  pid=8699 comm="syz.0.2833" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  378.081685][   T36] audit: type=1400 audit(2000000296.852:13689): avc:  denied  { ioctl } for  pid=8699 comm="syz.0.2833" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  378.108118][   T36] audit: type=1400 audit(2000000296.872:13690): avc:  denied  { read } for  pid=8699 comm="syz.0.2833" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  378.183809][   T36] audit: type=1400 audit(2000000296.872:13691): avc:  denied  { read open } for  pid=8699 comm="syz.0.2833" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  379.060464][ T8733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2844'.
[  379.142681][ T8735] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2845'.
[  379.466949][ T8755] fuse: Bad value for 'fd'
[  381.671135][   T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  381.821159][   T10] usb 7-1: device descriptor read/64, error -71
[  381.931701][   T36] kauditd_printk_skb: 412 callbacks suppressed
[  381.931716][   T36] audit: type=1400 audit(2000000301.902:14104): avc:  denied  { ioctl } for  pid=8790 comm="syz.6.2863" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  381.995187][   T36] audit: type=1400 audit(2000000301.932:14105): avc:  denied  { ioctl } for  pid=8790 comm="syz.6.2863" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  382.069772][   T36] audit: type=1400 audit(2000000301.942:14106): avc:  denied  { ioctl } for  pid=8790 comm="syz.6.2863" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  382.112753][   T10] usb 7-1: device descriptor read/64, error -71
[  382.155373][   T36] audit: type=1400 audit(2000000301.942:14107): avc:  denied  { ioctl } for  pid=8790 comm="syz.6.2863" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  382.229740][   T36] audit: type=1400 audit(2000000301.942:14108): avc:  denied  { ioctl } for  pid=8790 comm="syz.6.2863" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  382.341122][   T36] audit: type=1400 audit(2000000301.952:14109): avc:  denied  { ioctl } for  pid=8790 comm="syz.6.2863" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  382.381127][   T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  382.458401][   T36] audit: type=1400 audit(2000000301.952:14110): avc:  denied  { ioctl } for  pid=8790 comm="syz.6.2863" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  382.503491][   T36] audit: type=1400 audit(2000000302.022:14111): avc:  denied  { ioctl } for  pid=8790 comm="syz.6.2863" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  382.551138][   T10] usb 7-1: device descriptor read/64, error -71
[  382.560732][   T36] audit: type=1400 audit(2000000302.072:14112): avc:  denied  { create } for  pid=8803 comm="syz.4.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  382.603666][   T36] audit: type=1400 audit(2000000302.072:14113): avc:  denied  { write } for  pid=8803 comm="syz.4.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  382.791116][   T10] usb 7-1: device descriptor read/64, error -71
[  382.901531][   T10] usb usb7-port1: attempt power cycle
[  383.251146][   T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  383.283320][   T10] usb 7-1: device descriptor read/8, error -71
[  383.413964][   T10] usb 7-1: device descriptor read/8, error -71
[  383.651164][   T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  383.673402][   T10] usb 7-1: device descriptor read/8, error -71
[  383.803552][   T10] usb 7-1: device descriptor read/8, error -71
[  383.911645][   T10] usb usb7-port1: unable to enumerate USB device
[  384.817711][ T8819] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2874'.
[  384.870486][ T8820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  385.998313][ T8852] ./dev: Can't lookup blockdev
[  386.251272][    T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  386.411114][    T9] usb 7-1: Using ep0 maxpacket: 16
[  386.418546][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  386.430160][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  386.441385][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  386.450862][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  386.459829][    T9] usb 7-1: SerialNumber: syz
[  386.470865][    T9] usb 7-1: 0:2 : does not exist
[  386.591096][   T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  386.749531][   T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.770329][   T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  386.785661][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  386.792913][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  386.802597][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.812765][   T10] usb 1-1: config 0 descriptor??
[  387.022605][   T36] kauditd_printk_skb: 285 callbacks suppressed
[  387.022620][   T36] audit: type=1400 audit(2000000306.992:14399): avc:  denied  { ioctl } for  pid=8864 comm="syz.0.2893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  387.055289][   T36] audit: type=1400 audit(2000000307.022:14400): avc:  denied  { ioctl } for  pid=8864 comm="syz.0.2893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  387.093106][    T9] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  387.120992][    T9] usb 7-1: USB disconnect, device number 26
[  387.160921][ T1810] udevd[1810]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  387.255774][   T36] audit: type=1400 audit(2000000307.222:14401): avc:  denied  { ioctl } for  pid=8864 comm="syz.0.2893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  387.286707][   T10] wacom 0003:056A:003F.0026: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.0-1/input0
[  387.312135][   T36] audit: type=1400 audit(2000000307.252:14402): avc:  denied  { ioctl } for  pid=8864 comm="syz.0.2893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  387.484478][   T36] audit: type=1400 audit(2000000307.452:14403): avc:  denied  { read write } for  pid=8864 comm="syz.0.2893" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  387.518275][    T9] usb 1-1: USB disconnect, device number 54
[  387.572570][   T36] audit: type=1400 audit(2000000307.472:14404): avc:  denied  { read write open } for  pid=8864 comm="syz.0.2893" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  387.619261][   T36] audit: type=1400 audit(2000000307.472:14405): avc:  denied  { mounton } for  pid=8864 comm="syz.0.2893" path="/44/file0" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  387.657207][   T36] audit: type=1400 audit(2000000307.472:14406): avc:  denied  { mount } for  pid=8864 comm="syz.0.2893" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  387.731110][   T36] audit: type=1400 audit(2000000307.472:14407): avc:  denied  { name_bind } for  pid=8864 comm="syz.0.2893" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  387.841200][   T36] audit: type=1400 audit(2000000307.482:14408): avc:  denied  { node_bind } for  pid=8864 comm="syz.0.2893" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  387.869223][ T8376] ------------[ cut here ]------------
[  387.874760][ T8376] WARNING: CPU: 0 PID: 8376 at drivers/block/ublk_drv.c:1583 ublk_uring_cmd_cancel_fn+0x351/0x410
[  387.885468][ T8376] Modules linked in:
[  387.889368][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: kworker/u8:45 Not tainted syzkaller #0 1736d3b6ee88961c9d73e511fbf4428dbce80e3d
[  387.901237][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  387.911336][ T8376] Workqueue: iou_exit io_ring_exit_work
[  387.916918][ T8376] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410
[  387.923290][ T8376] Code: 5d c3 cc cc cc cc cc e8 fd 05 31 fe 0f 0b eb e3 e8 f4 05 31 fe 0f 0b eb da e8 eb 05 31 fe 0f 0b e9 4d fe ff ff e8 df 05 31 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89
[  387.942916][ T8376] RSP: 0018:ffffc90001ed7990 EFLAGS: 00010293
[  387.948988][ T8376] RAX: ffffffff83585151 RBX: 1ffff11023a35ca5 RCX: ffff88814f2ebb40
[  387.957000][ T8376] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000104
[  387.965001][ T8376] RBP: ffffc90001ed79e0 R08: 0000000000000003 R09: 0000000000000004
[  387.972995][ T8376] R10: 0000000000000000 R11: ffffffff83584130 R12: ffff88811cb48000
[  387.980971][ T8376] R13: ffff88811d1ae500 R14: ffff88812fd44000 R15: ffff88812fd44010
[  387.988964][ T8376] FS:  0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
[  387.997914][ T8376] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  388.004525][ T8376] CR2: 00007f0c4bf556c8 CR3: 0000000007caa000 CR4: 00000000003526b0
[  388.012534][ T8376] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004
[  388.020507][ T8376] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  388.028493][ T8376] Call Trace:
[  388.031798][ T8376]  <TASK>
[  388.034737][ T8376]  ublk_ch_uring_cmd+0x6f/0xa0
[  388.039523][ T8376]  io_uring_try_cancel_uring_cmd+0x193/0x280
[  388.045587][ T8376]  io_uring_try_cancel_requests+0x4d6/0x5b5
[  388.051538][ T8376]  ? io_uring_cancel_generic+0x6eb/0x6eb
[  388.057174][ T8376]  ? __cfi___switch_to+0x10/0x10
[  388.062326][ T8376]  io_ring_exit_work+0x23d/0x83b
[  388.067270][ T8376]  ? _raw_spin_unlock+0x45/0x60
[  388.072145][ T8376]  ? __cfi_io_ring_exit_work+0x10/0x10
[  388.077607][ T8376]  ? kick_pool+0xb9/0x540
[  388.082014][ T8376]  process_scheduled_works+0x7f7/0x1060
[  388.087568][ T8376]  worker_thread+0xc99/0x13f0
[  388.092267][ T8376]  kthread+0x2c7/0x360
[  388.096382][ T8376]  ? __cfi_worker_thread+0x10/0x10
[  388.101516][ T8376]  ? __cfi_kthread+0x10/0x10
[  388.106115][ T8376]  ret_from_fork+0x64/0xa0
[  388.110546][ T8376]  ? __cfi_kthread+0x10/0x10
[  388.115175][ T8376]  ret_from_fork_asm+0x1a/0x30
[  388.119943][ T8376]  </TASK>
[  388.122990][ T8376] ---[ end trace 0000000000000000 ]---
[  388.149639][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2897'.