last executing test programs:

2m17.217862686s ago: executing program 2 (id=185):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket(0x2, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x14, r4, 0x1, 0x0, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
setsockopt$inet_opts(r0, 0x0, 0x19, &(0x7f00000001c0)="a2", 0x1)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0x2, 0x2, 0xa}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x12, r5, 0x9f26a000)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xfff, 0x4)
madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m16.990345774s ago: executing program 2 (id=188):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="0f20e035020000000f22e0b805000000b9185702090f01c10f08c744240020010000c7442402771e0000ff2c2464660f388005f58a0000263e640f01d766b820008ee066ba2000ec2e36470f01c9b805000000b9020000000f01c1", 0x5b}], 0x1, 0x7d, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000402000/0x1000)=nil, 0x1000, 0xf)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

2m16.47365208s ago: executing program 2 (id=190):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=<r5=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r8, 0x1, 0x70bd28, 0x100000, {{}, {0x0, 0x4107}, {0x14, 0x19, {0xffefffff, 0x80000001, 0x1, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x50c4)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

2m15.965650276s ago: executing program 2 (id=195):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x195)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010000000000000080000700000040"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766e46e6f3d", @ANYRESHEX=r2, @ANYBLOB=',debug=0x0000000000000000,k'])

2m15.961739576s ago: executing program 2 (id=197):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prlimit64(0x0, 0x8, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x4)
mount$9p_fd(0x0, 0x0, 0x0, 0xa, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bind$802154_raw(r0, &(0x7f0000000280)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14)

2m15.788782032s ago: executing program 0 (id=203):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8050000009a00780000d00000e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c0c4e27d3095fbffffff09083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x60}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0xe0}, 0x4040)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$unix(r7, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e)
truncate(&(0x7f0000000e40)='./file0\x00', 0x3)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000800)={<r9=>r7, &(0x7f0000000200)=']\x00', 0x303543, &(0x7f0000000300)={@align=0x105397ca, {0x0, 0x101, 0x5, 0x401}}, 0x0, &(0x7f0000000780), &(0x7f00000007c0)=0x800})
syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000840)="0fc7370f20c06635000000200f22c0d84d7266b9a00800000f3266b8009800000f23c00f21f86635000005000f23f866b9c60a00000f320fc79f0000ba4000b8ab5fef67f3e032660f382a13", 0x4c}], 0x1, 0x51, &(0x7f0000000900)=[@dstype0={0x6, 0x4}, @dstype3={0x7, 0x5}], 0x2)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x6100)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000100))
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000400000014003800ff010000000000000000000000000001150002"], 0x44}}, 0x8848)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x20, 0x8, 0x48, {0x48, 0xd, "4a5b7cb010e1a18cf8354efc3afaeb6683380c5df5471137ead2c5d942d9a3895ce6f6948f4640f8eb3f754b080a9d52316f00df33d21bf03c7d28a59299cc7fa7b0f911faf9"}}, &(0x7f00000005c0)={0x0, 0x3, 0xbd, @string={0xbd, 0x3, "d8c5e8703b68446f41d385a227ff38b1d837b61c3cf9ad7a365e75a4fb5b7bcc2522c51c34c016906852c91c6d5f2715d9c58ab271a82f7f78bced5afe2d61344ccdb4bf054dd9382c413c1414d7594d8bd578f91d4aa4c2b283e4dc7b9de1e53d5a2c69ac7b5dc44e438d78805d48d6b263fd4ab51fb5ecd04c267adaca59805b567a0626ae2154e20e7c08401c87ede599765ad61bdc5ee5ed3e0e26e1c68ccadae3c2c84a1e511b7dd412bb5b735a346904641d926036d4b7e5"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0x17, 0x9e, "6dd2a664d2442005fd98704588a5e038d704efd509afd855c3a6da7560ecfad0535051d0382f6893bcd40f1e3488842de672699b0f39a05313d27914821ecb7352e8953ccc5616aa16d9e6f30af4b545adcee0d275d63ea34eedf5e0d669e38facb08953f40387446e23d461dc6175e925c674923a7204b6e77b5a972f18d1ecf5cade1ed06358578206b385c595eff87f72a69a23e771679cfaff3a2114"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x9b}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "f12b39fb8758d1308fdf68d8aeef43b4eb42bb35e5d18ca3d77a0bb830014cc5669ce6b04071ea1f3285622e3180a4"}})

2m14.088899006s ago: executing program 0 (id=208):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x19812, r0, 0xffffc000)
r1 = syz_clone(0x809a00, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/4\x00')
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000040001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x32)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_kvm_setup_cpu$x86(r8, r2, &(0x7f000035d000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="0f788f00000f300f205766b8004000000f23c00f21f86635000000000f23f8640f320f0f4580960f01c866b9880a000066b80010000066ba000000000f30ba4200b067eeba4000b87e00ef", 0x4b}], 0x1, 0x52, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x100000000003, 0xb2, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x4, 0x4, 0x11f, 0x9, 0x3, 0x9, 0x1b0ee0e8], 0x0, 0x2a80})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0xfffffffffffffffe})
syz_usb_connect$uac3(0x3, 0x9d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040f80600b0400001020301090281000301ffc010080b0002010130070904000000010130000a2401101d00070000001324032306060104330300000040000100000809040100000102300009040500010102300009050109"], 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0xfffffffffffffffe)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x1, 0x90, 0xe, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xa, 0x15, 0x50}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x307, 0x39, 0x2, 0x8, 0x9, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x2}, @as_header={0x10, 0x24, 0x1, 0x3, 0xc1, 0x1, 0x4, 0x8, 0x80000001, 0xb7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x78, 0x1, {0x8, 0x25, 0x1, 0x1, 0x33, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x8, 0x5, {0x8, 0x25, 0x1, 0x0, 0x3, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f0000000040)=""/79, 0x4f)

2m13.681596259s ago: executing program 2 (id=209):
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async)
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe)
r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2m12.70924908s ago: executing program 0 (id=211):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
pipe(&(0x7f0000000440))
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000280)=<r6=>0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0)
syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xd1}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10002, 0x1, 0x3ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x0, 0x9, 0x1e8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10, 0x3, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2030, 0x5200, 0x2, 0x9e, 0x0, r1}}], 0x16, &(0x7f0000001540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)
write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:logrotate_var_lib_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x2ba, 0x20, './file0\x00'}, 0x6b)
r7 = getuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
setresuid(r8, r8, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x0)
setuid(r9)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r10, 0xe858000)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x400c014)
ioctl$BLKRRPART(r10, 0x125f, 0x0)
madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000640)=0xe8)
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010001000000000002000100", @ANYRES32=r7, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000500", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="0000c5000081442c855998e7d1339267422f71de0c9b1a61d21f1cc49c2f30a7244c9de1657a67", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r12, @ANYBLOB="040003000000000010000000000000002000050000000000"], 0x6c, 0x3)
socket$nl_route(0x10, 0x3, 0x0)

2m12.581897714s ago: executing program 0 (id=212):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r1 = gettid()
r2 = getpgrp(r1)
kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xde, 0x6f, 0x2b, 0x8, 0x413c, 0x6119, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xac, 0x5, 0x80, 0x2, "", [{{0x9, 0x4, 0x9e, 0x2, 0x0, 0x2, 0xd, 0x0, 0x8}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

2m11.283785995s ago: executing program 0 (id=215):
unshare(0x60000600)
r0 = socket$inet(0x2, 0x4, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
syz_usb_connect(0x3, 0x59, &(0x7f0000000180)=ANY=[@ANYBLOB="120150028ecfd008ce0a021670e20102030109024700027f24800509049f00800a000201020905f30310000605f4090508014000b905030725010c0500000725018a0f009009045c140050500303020b000000000000000000"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})

2m9.908690199s ago: executing program 0 (id=224):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x20000010)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=<r7=>0x0)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)={0x14, r8, 0x101, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8000)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r13=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x24, r11, 0x801, 0x870bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000080)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="751f850a", @ANYRES16=r9, @ANYBLOB="02002dbd7000fddbdf251b00000010002e800c0004000201aaaaaaaaaaaa08000300", @ANYRES32=r13, @ANYBLOB="0c0006000300000003000000"], 0x38}, 0x1, 0x0, 0x0, 0x8950}, 0x2000c042)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r2, r7, &(0x7f00000004c0)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x22000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r2}, <r14=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x2000, 0x2, 0x40021a, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000480)=0x100000001, 0x4)
r15 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r15, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=<r16=>0x0)
r17 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x40)
mknodat(r17, 0x0, 0x8, 0xf030b20b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_delete(r16)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r14, 0x6628)

1m57.434786525s ago: executing program 32 (id=209):
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async)
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe)
r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

1m53.84494096s ago: executing program 33 (id=224):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x20000010)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=<r7=>0x0)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)={0x14, r8, 0x101, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8000)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r13=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x24, r11, 0x801, 0x870bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000080)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="751f850a", @ANYRES16=r9, @ANYBLOB="02002dbd7000fddbdf251b00000010002e800c0004000201aaaaaaaaaaaa08000300", @ANYRES32=r13, @ANYBLOB="0c0006000300000003000000"], 0x38}, 0x1, 0x0, 0x0, 0x8950}, 0x2000c042)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r2, r7, &(0x7f00000004c0)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x22000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r2}, <r14=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x2000, 0x2, 0x40021a, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000480)=0x100000001, 0x4)
r15 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r15, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=<r16=>0x0)
r17 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x40)
mknodat(r17, 0x0, 0x8, 0xf030b20b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_delete(r16)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r14, 0x6628)

1m36.007596047s ago: executing program 1 (id=430):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x800c, 0x400, 0x2, 0x1f3}, &(0x7f0000000080)=[{0x0, 0x0, <r0=>0xffffffffffffffff, {0x0, 0x98a7, 0x0, 0x3, 0x27c}, <r1=>0xffffffffffffffff, 0x0, <r2=>0x0}, {0x0, 0x0, <r3=>0xffffffffffffffff, {0x0, 0x3c9c, 0x4, 0x3, 0x265}, <r4=>0xffffffffffffffff, 0x0, <r5=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x47bc, 0x80, 0x3, 0x2f7}, <r6=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8922, 0x1000, 0x2, 0x2b3}}], 0x4, &(0x7f0000001300)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x3cf, 0x0, &(0x7f0000000300)=@buf_512="9ef2066b3a91a92f60de5eddf3ab9993d1d770ff9f8b196dec4faf348a5d8ad36d8a78dabe83a3a71088701473120828282611944a997ba79185982f6a5b979a7b0efdd8f3cf64847467d4c88e20e8b968bfcb871896c9be4e3e11261dc0129620d0aacd785fe8892e97b79a4ceb4d4f5690d867a6533f5d1719114073b796dde3f6893b95f16f60dd6d58532ee3d7313e058d41bd8079f1a4720241be62bbab7ae002bec9bd4cf33705ebfafafce30a85f6701888c9afc716532d26a9caa842c75d61cf96b284cbc2902c8369169693fa3735804a63dcb895e691271d8badb6e8077c94e1ba8ae395c439bd772061de7d8e6b1b74035d32597bf41a63722fdfec333560f257f5b4e00a13de0093772d0afe97b5b08040ae420aab377d20f304cb4a9b94e0fac487d2a798244c3058d0d3b60ed1fa261dff747c8798da9fa6281f8255f2c1b4747e36b2cee3f4352115602c1678e4ffb58d618f4c9e431542b20376e35d25d99d46c290af48bae2206822246a4097cafc88a3e16b88b0a8922bacd3d33f03fa4b88af99479d782a72ca5ef055dc00a16dd7ff24a1b52e3489efc88a2d0494011007a9301591fff81b7cb52a08813ad1edd04617ad1d6b33b05843250f736a7ec0568c96d7b0582193e50b9e9e89f2b0ecca49f64d58dc3a9e784ed52a369558d74d69981e1f581b40947ad05ec5e637fc9abab43c1d9886f560"}}, &(0x7f0000001380))
munmap$IORING_OFF_SQ_RING(r2, 0x7fffffff) (async)
r7 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x2, 0x5, 0x12, r6, 0x20000000)
r8 = syz_io_uring_complete(r7, r5) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
writev(r9, &(0x7f0000002400)=[{&(0x7f00000013c0)="2c70c21d6568d3c640a5f636617a68b124ce0b9f87f6b8abbf07669851098e2f166cbf6c404adda91389747683e83e46899672c53aa645b68df39bff29c33b720c1113f6de9ab9d0ba52be681dd97fa1dd0e47c8b1f810c4edd85bc949ab6425e13fd4ec30d517edf1af9312459a5ebf5e46ba563252118e3b4c5ff881e1235b1c67feb1f908b88307e81b8db5c7a9dbd86f9ed64a68eeff77db94d9337a6211ca38a24a7c3cb46cdc7ddc17e8b60f4a7bbf6cd9dc8214c6ba747c8e2882322a349fa6af361a7c907a57732c329b02c91b1ed6dc65645d769f080a2dcf747ef12d5e7ee96fc1081bf619578077691962820bc483bd771cb620e96d3e9014d36b371d69086b3c9f3338b27e7d9718e19266a865dc81d898b3b273db5729b9701c922ee2eaa01b6ee6b6be9e1c48d1493c712017f7e9603de2755d2408577eadc619312e96116bff158944026cf94fe13ae68999acd17d41e1ef3ca7b029d24dfdd88fdd2bbde61925251aefd3ae4960f286708c73304618c9f16792f1371f37a582eff5031115727ab160b79f8f4bddabfefdd28762a19ae32fdbbb5a90b013328a72b73c4f74dab95e673170d9d5e73911eeda5778b0c5a43467abe0abe9c716f3abd5fdd9d49d907be47dfec9fa7003704b4dc31a6acad4d39f66e796b05c5956b1f5863486f843813da6931f8061493a23abd6c6aa5f806acc448e16cf4166cb1a29e4dcd8b7b030f0483224c7116d25eb5a87a1f23100364d5c50d19a1cab3b1c63ff91b5b0425c10ac9d504f233e6ef8348d5c28175008b6eaa559f2be6e6fcec00466e9991fd31f0d7f51de1f06f763254ad566262329eb6816f0595c0eaaa8a6fe14a5448187e673092b918471cce42e65227692d92d8cb241dd3c78775e46dcccbd0eef2c5265de16da7666c13bf4b430aa56cb006d4c5fe063cabeeabc12f4b0211b725536ee43d9330f51f041d23b69356039c892b9307b1b3efac879e5db0a2d8f9db653c879f07b0aa9255cae020750eb63d8dddadcfee0ec558c6a6ffd46ccd2edd2bdee2c1bae408b35c9f5873fee23866f1e1517da0d81912b81dd6d28127a163cfd47e32d44251abc2637f40666f09e7225ac7f70b557f2450dcb9a91a11d82ab58a9798fecd46437c911f9c863ee2b504a663e7b12cf41519cece1a44e65440d6a5f37610f7254407a34517e7b839fb908405d9e93244a5624606c9186759a5fd5a868002ed2ebc3b60f8528d6ac58f7f5623d9cc29cad17a0afcece80905c4897cca8fb122778ea97763ec52dfaf0648a776d3594873c7ff36a8ac69ba96c55446fb959304505a47355bfc52e63fc6291dd9e6cac800d2a7f1ffef9504f865ee3828ddec47c30813905580c5045588f1ee6b9b010b3af2c1452b1141dc2651439947a6c4abe98548a3df65fe866b61dad7949bdcbc27316a78131d7b4c9dde4d75086f1aff5bba21a5b34e5d8d81e4ba3a9278f170c3b0d68fb35cddb03811a57a2ab496b255a62915a8fb4fc6cf2564bbe910f3f482dbae8bf972d4f5c32ad8ef1fa5dfc73187c7448c3a84eaee5afd9aeed4d3150d9205aa4192d563333cfaa51738166a5926f427fe70d83b775d0ac32f8399a4b7e26df190e16dd87efb508a2ff8eece6da1c0fd53c2bf798e164ff827101edd096e8b8587aa5aec619c38397f6bf14b38e33e318b55f2dc1cc9540ac86aab28c53af4d1a54d46b73e5834805e7cafd31f2d90eae85206fe228b3ea95c36b1a3df38fc715d2151a4072abf4fcfc93267674eb20c9825b6ae8c3d2619875de3708a954677eee187a5bbbec0bf1537ccc1db2b4e9e3ea6737ed916f9e08cba12faabe3488f5666174768e72131c99a299c13198bc6b0286b83edc5ef533a08b35c1b1c5d28ea15b87ea3eaf4577da404fcb7df7b070fe8651d5cb50c3a5cc07df8d9f9a59e170d52364ebe3f6bddc32724c0dff584eaa7f1ef5a5587b29c229d858ea9f3bdc10892b0663cd7a25c1e40efe824837d9e2720509d73a1b461e125e2d377708f1798b903ca54bc436e481744210101d0ad6f6284d802204e1368ae35e0ab39450aa3bd4c721a23da9acb47c9d4f09bfd2422b81c46adae586a2a966ab489388dd7d06b1cb2bc07f9291d59293278a0606dbff100aa5fc226232901b63f66855ab8f1d05d73e07421af1a5243cad1daa26441c7b76bd4dcaaa5d00fdd94832d4e8dc3ab6bd4b75f12be6901d602bf73ae102b7a7cd05ad59cccdaa5648ed46eb6d7f1f481d5316f370a0ea49cd153b02c8ed89c23d07ec298e35a602c2e22578e247b24f2eb9a3a149967bfd9b2fb9f58dc749ae41af8e8c1e4cf33eae5975fb8e1c85839f10fcfb26722d4e33bb7cf9cb910df51d5cae8c0b35012d3bb96b07cf0731cf37b6652c15a41a8676aaacbfcb99c73a75eb7ffab28316d14d626bb436382d295c1c2a7378629c2f75ce4d327c5d2df34a98ced536e347fffbc32f23cee920b27179727de5148f9041c75768c408749e92302a43f1947ea6287ce0e281ab8ac629ce299418214744a997d9810a0bbcdfd26d7eb4c8c4a43177ecfb37fffaaf9060fa0653b1745b31f0b357e059084b1ddf71350bb59701cd10f0f30d0cf61cf71a78f9aa5660f320ca340d0f6dc9ea080cf0b4ae684fd8f3f3227cbaf1e068e57e2a13dd7c0b01c4b477cc0862497fa0e19e57ab6deac626bcd0b8af5cef3cbf3cb4c3ab26c0e6b4704616e0fe14d4c360fe05309bb2a8ee00f88d0a9a2718f734cda226674b84cdaa326adb065658079b88790bf81d83a72511038e30a1bc2c2559e13cd6e4f662df4dbbba5eb65623ceb4985435a13bf41a150a2943058934561812f4961bf1468243fb080541ee298aab94b89bf773bcc8b8d049e15098b043ddf461277308c1b73999eab977d4d8464cd30acaa305a54f5d2c292b46df840174ab28617d41418181accd7a2a7c74fa3bdf8cf55bdb077a833b345d5fb917489ff1c89c8a2995f49bf7f9e90c07279c179a5cdce77b57163389b89f8bcec1461432cea00d7314a010cda3ff0e5bdfa2ccf4bd3a7d09db0ce64bb4e49cff3deb57908392fd082751b40a99b1139709c5ea0d8f78d0162fa1b73183601e5df21777f175d186fc76043cfb55f824ea56ff20f6315b0d4e47b0cfaa4c23b9a687c03e2ac2a2741b1fd7df069155794ffedcb3e6ff89ca23a4bc544849d6e33af633cbafbfc762f06eaf960ed5bb50fba69104a41e2998482d00ed4bcb0f371026dfefd7aa5cb57de96775789be3a98a0e9cc3d7a6e53e45562423eed022e6a130f570bf4c6d67d37a749c90a88758392a1ccf4ae10ba97c3c05b0a57bb79addeded6db8c5a184ec1cced2eb003dd2fe4b4773e2e25d1b315211d57e78a573d230f5c5acb37d232b25eff0b494c35b6aa02ec5c9fb92453feb019b47cd9eaf9ebcd9a920a63296aef98f64c6a5bd2fbadeae2162451a93cb191744c11790ce0ab181bf9463f06cf1e163afc69f4c4a2669e2cb2559c4a97aef9980f6ec35600a688012fd733d5dd202be7dd80d95a359882618e997ad689ad7ef8f8f638191388cb39f5f0dc06f7e94ebd235465eaba79bf538fb4b727051f0673da1a9fcd4482f73332b0c6aae65f35f6ac85121683eacae59fad0c8e05ca3fb6a03a83d9fd6af687e00ae8bdba024a3dfdd4d86790970e58dc5f4eea85ced907ec6d4ae108d90422fc3e0fdfdefff8001b9aabda5c36798822553bd1441b4d59f1bcd51d68341293cd40a5666dce88baabf37f0794c187cc9d0775782c97b831b19dfdba3e06c15d9ed2a78d386c06cae69c2f71a2399f8b93616010e9d297ccb9924057747027e9feafed04429c0b50f3eab2397f5a7c81c1b704a6bc30714ed67652a1b0b6d7d1599c66738be1aff6724f5fa913fad3575d037f04638dfe90a32bcaa94e044dfb69c7b95b690ec8bfa284076189bfe76c02fd7ded79e204b1d569564bc9dbe12e6aeccd26ee6552c639299cee62a474f6965861ab8f516c30ab6ec0ac8effeead81c9c44e3ff338201fc58218c9eb2634f7e8978af805c79ec29b431c1703c3b954d8c57de170c849f538124aab61e94e74eed79452aefeccbcdc9e1cecba356702d82083bfea8294e3afe77dbe51f0501e3b9489bbc000b7a7be21e91a941893c153dde2afd3d1813c4a13815cefc3b5fbbf9d4f5108c71112a205cd4081006b17ed79aee2a6cfb68ccd6f603c38e766082471902963b953387e31ef5c7ea6d74d098947691b3f8c9812bc195bb393346102c0ba623bfb64734c2a4994e1856551c02ce9f40c843afb0efec64738f6641fcb60f61d0a8304d11b80e81ca1dbd0a241f43cfb902cf11bca3e08b26808a384073764c5e80d62350c8f9d84fab594cdca2e3ecbbb4939b174b8f63501517d470ca05debbefc211647dea5a195151c25c3ef9f7436b2fae328860d85c657537e0bffca9cf7f49254850556dd92a51bff4b99bde39895ab51cef31207a7afd5141f56365def9132df6779e4d8b4d9d05af6f95e8bf60dfe9c7015b27018ecf4e3103e63a188dbcdfe773b1c5a5102cff40b8f6c4f4908e2abce7c6203ba1922c053becdca2000b16361dad7a45eccb4b6bd9adf5eb22e6546b785c6a0e44b43deb271b5ef214ce11a85dcea201d1132071880092678f6e1f092cddc83247d28c6b1e116bc8bc93dcd4b5673367f12f503fcdfb392185b76ff8344f03289239d87b6f8b07d7ceef3777e7beebf8a39523ffa8ab34675de8fb184a5a398584212a84cde91ccba4bec557c1e070a82fccb34f058096ca46e9eb52db9585589012809a3a1698178f8885449644fe976e4b2404b32ee3fffbe2dcbf173780b42994b7460e7291f5fc9410a127b7201f645219ee85d9639961fb0f8618043dffee9c1b8f281f1545384c099ef8c2cb643d231cdb89e2fd469c2c0f610c1d68e33af87becb9fe20b4e05b5bf49eb591c39211bfae0e76eb85cc4e4515adf992994aeeaf05b3746af5f79c6137890906ac9881c97bca51189c0b2893b3e1729c9f3d30ce1a467d111fd8a198406501e5d838f85064060c3bd7c3255fb3cbb92ac2dd52b29759cf9174b6b83f52172a17ee9607097110e61cbbcf977062397c7a252beaa6500a4ecef41da51cbebde4a952dcda3d2d536c29e40f546fb5442553ff0e70c86a5f67503efb94faa3615c5fa2169a369fde09cf9ae6a0442824226a7e21a78c987aff8c63d51f32a5b9f0862b0e76705929fa2d458898ab5b318b07363638c3e3f46494525c73608c70721d8e51b1f95a891f628175e77e91fed11f30da7404dcd832b17c8fc2755fb779f79235faec34889837aa0e95784a25be2f0cc0e452b5117355e499f945bdb4fb84df37509e1e9a9c34cad5e0636292b10b947be7b2cd610469a558ea0f0664a617adcb3c7186100a71a1ad035d8006863d876b64fe8c50e3af3ce2da5b7c6045fe178e28bd8b444ebab35a0b24b7ae82385ca2d4f3318c6fd83189e140ce31db7e4b384c5c2e519db65e623cae499b8516f02468465b3ebe34e577ec28241c778c442f5eb096659988d6f66a8c2ff26585f2dcef16a62be5e19e891d182be7101a0e1445a63443ae66ea4bd0387dfff2760b4c38fb3d4246c6d2044ef06c3ca1333602e988c8648a2fdb3c47c53b22f6cbada1d14b33702136f109fa2c15d5fd698e7cff79b80bbb31ad5e6c818d97372d2126ec40fba61a8d343e1e37a00146dd945edad2d88e740cb6e0a87f5dc1f1fb737c53dfc63db0e26c16de7f5c", 0x1000}, {&(0x7f00000023c0)="48b898c23bb05f4b06d2684b1c23cd8a51a646292a84", 0x16}], 0x2) (async)
ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000002440)={r0, 0x0, 0x9768000000000000, 0xd, 0x6, 0xf})
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002500), 0x2, 0x0) (async)
statx(r8, &(0x7f0000002540)='./file0\x00', 0x1000, 0x80, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, <r11=>0x0, <r12=>0x0})
getgroups(0x3, &(0x7f0000002680)=[<r13=>0x0, <r14=>0xee01, <r15=>0xee01]) (async)
r16 = getuid() (async)
ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f00000026c0)=<r17=>0x0)
mount$fuse(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x80000, &(0x7f0000002700)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r15}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@blksize}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@euid_eq={'euid', 0x3d, r16}}, {@permit_directio}, {@euid_lt={'euid<', r17}}, {@fsname={'fsname', 0x3d, '\\'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}) (async)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000002880)={0x0, <r18=>0x0, <r19=>0x0}, &(0x7f00000028c0)=0xc)
getgroups(0xa, &(0x7f0000002900)=[<r20=>r13, r14, r12, r12, r15, r14, r19, r13, r15, r15]) (async)
fdatasync(r1)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002940)={<r21=>r3, 0x1, 0x200, 0x3})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r21, 0x942e, 0x0)
lchown(&(0x7f0000002980)='./file0\x00', r18, r20) (async)
r22 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000029c0), 0x480000, 0x0)
close_range(r4, r22, 0x0) (async)
r23 = inotify_init()
ioctl$OCFS2_IOC_REFLINK(r23, 0x40186f04, &(0x7f0000002a80)={&(0x7f0000002a00)='}.\x00', &(0x7f0000002a40)='\x00', 0x433}) (async)
getresuid(&(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40))
quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, 0x0, &(0x7f0000002b80)) (async)
mount_setattr(r21, &(0x7f0000002c00)='./file0\x00', 0x800, &(0x7f0000002c40)={0x100082, 0x70, 0x100000, {r21}}, 0x20) (async)
statx(r8, &(0x7f0000002d40)='./file0\x00', 0x1000, 0x100, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, <r24=>0x0})
mount$fuseblk(&(0x7f0000002c80), &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00), 0x80004, &(0x7f0000002e80)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r24}, 0x2c, {'group_id', 0x3d, r19}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@appraise}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, 'euid'}}]}}) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
close_range(r4, r4, 0x2)

1m35.986305518s ago: executing program 1 (id=431):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x88902, 0x4d)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000200)=ANY=[], 0x2d) (async)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000200)=ANY=[], 0x2d)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800243, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bc, 0x5, 0x1000, 0x6, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x1ff, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800243, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bc, 0x5, 0x1000, 0x6, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x1ff, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x5, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFMTU(r3, 0x8948, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32})
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2)
sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffa6, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x878}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x194}, 0x1, 0x0, 0x0, 0x240440c0}, 0x0)
read$FUSE(r1, &(0x7f0000001380)={0x2020, 0x0, <r6=>0x0}, 0x2020)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4)
recvmmsg(r7, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/87, 0x57}, {&(0x7f0000001500)=""/198, 0xc6}], 0x8}, 0x1012}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0)
write$FUSE_DIRENT(r0, &(0x7f00000033c0)={0x90, 0xfffffffffffffffe, r6, [{0x6, 0x8, 0x4, 0x8, '!}*\x00'}, {0x4, 0xa362, 0x0, 0x8}, {0x1, 0x1, 0x9, 0x9, 'netdevsim'}, {0x4, 0x6000000, 0x8, 0x81, 'devlink\x00'}]}, 0x90)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000003, 0x12, r0, 0x0)
personality(0x8001a0ffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000680)={0x0}}, 0x20040804)
syz_usb_connect(0x1, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40}}]}}, &(0x7f0000001340)={0x0, 0x0, 0xf, &(0x7f0000001040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x94, 0x8000}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async)
syz_usb_connect(0x1, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40}}]}}, &(0x7f0000001340)={0x0, 0x0, 0xf, &(0x7f0000001040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x94, 0x8000}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
accept$unix(r4, &(0x7f0000000880)=@abs, &(0x7f0000000900)=0x6e) (async)
r9 = accept$unix(r4, &(0x7f0000000880)=@abs, &(0x7f0000000900)=0x6e)
ioctl$AUTOFS_IOC_FAIL(r9, 0x9361, 0x10000)

1m35.339123539s ago: executing program 1 (id=433):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x150)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100), 0xa18082, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x150) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100), 0xa18082, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) (async)
renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) (async)

1m35.257399951s ago: executing program 1 (id=437):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x88000}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x200, 0x4)
sendmmsg$unix(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}}], 0x1, 0x80)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12)

1m35.247109422s ago: executing program 1 (id=438):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x81, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0xca, 0x86}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)={0x0, 0x31, 0x30, {0x30, 0x8, "83efb930f01842562348d1805a2adf827ff0d8712603b2d5dec24a456474bc478fa22a61a54607b705000000359c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="0022d2000000d222d136f39fef88103b05903c9f328558ee1454984b128e1ebd3f116ac36e2b571422945234de5ae40b0b4110aa79cb9c40fd7841d49804e8bfd906330cd66a35d708a3706ec4355bee12e90ce49e1c07620027a21f0e58132d93a8597db07206eb7e47c96ebacc470cc45384ba1c30fb66ff983d357f96ebd4ebfd7ab23ea3c2f5d621aa2478ab00cf8c32f5cfe4d11c63c534f86c3313508430bcb2108f46b1d323f53b291aee62a92f3659afcb01e27f51a09c3aa9cdded22f0a4a10808fab60d473408385d144a15098f0de4c675cdb"], &(0x7f0000000300)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "afc491c376d7b65454141bbc40e808b0495b775035e2cddcf3437526eaa2355d8a16869abc9ae88771e03f80224281991c21849fbc5d4aae7cd29d09f028c6c076b7fc36a32fd5bed39307d3146f51643a9035229878544964a6cde997c0dc20a8770ee6e69bfa0d57bd549cce7d5989edc1d8af9dfc38dff5b0"}}, &(0x7f00000003c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "55d426d4"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x1d, 0x1, {0x22, 0x1b0}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x0, 0x6, 0x38, "b6db188673c7ba3088b5cf7b4f930cc618bd6f074356d9d38bcb3d17254b73066b41c830aac2f17ece798ab7dacb4d28bcc8e8a60d9f4740"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x1, 0x3e, "0d68a8b2012401f07f137d3ccf809e8e18c5beb3cc032bfc03582fbc72e52724c274ce1d64a8440c85b5a5339d33e67dd64aa9db4b25b1ba7ce31a33b674"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x6}})

1m34.67361962s ago: executing program 1 (id=442):
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x80, 0x0, 0xe8e0cd814822780d, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8840)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

1m18.662008858s ago: executing program 34 (id=442):
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x80, 0x0, 0xe8e0cd814822780d, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8840)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

21.968470922s ago: executing program 5 (id=1122):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r2, &(0x7f0000000380)=""/148, 0x94, 0x5e)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c64000/0x4000)=nil, 0x4000}, 0xdb7ee8478ae56d12, 0x2})
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
r4 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x84, 0x3, 0xe0, 0x4}, 0x10)
listen(r4, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r4, 0x0, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x40801)
r6 = socket(0x18, 0x5, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
keyctl$invalidate(0x15, 0x0)
bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @none, 0xfe}, 0xa)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x1)
ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, 0x0)
recvfrom(r6, 0x0, 0x0, 0x100, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)

21.781625138s ago: executing program 3 (id=1123):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000440)="6bbe4af884c7f1eded115177427c6b5cb7fdad94ab213dbe84ce754acc5679d48fb3060d1fe87e0c3753d31a23baec", 0x0, 0x2f})
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0xb, 0x100a})

21.781200138s ago: executing program 3 (id=1125):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
sendfile(r1, r0, 0x0, 0x7fffffff)

21.777215808s ago: executing program 3 (id=1126):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0006280000002823f70ba381030000000000000000cba62859584fdca056"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_pts(0xffffffffffffffff, 0x0)
setresgid(0xee00, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0))

21.40624795s ago: executing program 6 (id=1132):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, 0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='proc\x00', 0x200000, 0x0)
write$snapshot(r1, &(0x7f0000000040)='X', 0x1)

21.405981739s ago: executing program 6 (id=1133):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
tee(r0, r1, 0x8f5, 0xb) (async)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', <r2=>0x0, 0x10, 0x10, 0x3ff, 0x7, {{0x1d, 0x4, 0x0, 0xf, 0x74, 0x68, 0x0, 0xd, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x15, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x26, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x8}]}, @generic={0x83, 0x4, 'k\\'}, @end, @noop, @ssrr={0x89, 0x27, 0x7a, [@multicast2, @multicast1, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x17, 0xed, [@rand_addr=0x64010102, @local, @rand_addr=0x64010102, @rand_addr=0x64010102, @rand_addr=0x64010101]}]}}}}})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r2, @multicast1, @multicast2}, 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
poll(&(0x7f0000000180)=[{r3, 0x80}], 0x1, 0x1ff) (async)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req={0x4, 0x36fb, 0x37, 0x6}, 0x10)

21.194185397s ago: executing program 3 (id=1143):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
sendfile(r1, r0, 0x0, 0x7fffffff)

21.157159817s ago: executing program 3 (id=1146):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000006401010100000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffff010000006518b9a9690f61faa4017cce30e8000000000000000000000000000000001000000003000000000000200200000000000000fffffffffffffffffeff"], 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000800600000000000000ffffffffffffffff00000000000000000000000000000000000000000000008100000000000000000400000000804000020000000000000800"/112], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x73}}, [@migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0)
syz_usb_connect$uac1(0x1, 0xaa, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0xa, 0x9, 0x8, 0x10, 0x4}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1009}}, {0x3e, &(0x7f00000000c0)=@string={0x3e, 0x3, "49efc50ac4830d8024f1f7890b77055dd811ed36f3789ad9ea08eb15860749fccb82768f011fe127be840a508247c94b58756efc0c8734ddc16cbda9"}}]})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r3=>0x0})
statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000, 0x100, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'})
sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)=@newae={0x12c, 0x1e, 0x400, 0x70bd29, 0x25dfdbff, {{@in=@rand_addr=0x64010102, 0x4d4, 0xa, 0x2b}, @in=@rand_addr=0x64010101, 0x4, 0x3503}, [@sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x9, 0x2, 0x80, 0x80, 0x3c, r3, r4}, {@in6=@private0, 0x4d4, 0xff}, @in6=@mcast1, {0xfffffffffffff372, 0x6, 0x4, 0x21c, 0x331a, 0x5, 0x100, 0x401}, {0x0, 0x9, 0xd855, 0x7f}, {0x400, 0x0, 0x9}, 0x70bd29, 0x3501, 0x2, 0x6, 0xf, 0x88}}, @extra_flags={0x8, 0x18, 0x80000000}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

20.844318558s ago: executing program 6 (id=1149):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x3, 0xc00, 0x0, 0x90d, "23c07c9fb7870081752251f19c3844fc232add80a41447c7bab84e078ef6efdad4dc6e34cf173384d4c14b744b5a952bfb1e5fd434784eb3d53d4b4aeebb9d1dbb511e11bdbc7a60520e5bd96eb363a33c443945523ad84032bf785c0686fe628bc4da2bc4c87830f45a3780b4c6ca75dae8f60c621c114d1a5a09f862aa7db3"})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='notify_on_release\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1, 0x3, 0x1)

20.806015349s ago: executing program 6 (id=1150):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) (async)
syz_usb_connect$uac3(0x6, 0xea, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x1e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x5, 0x10, 0xf, {0x8, 0xb, 0x1, 0x0, 0x1, 0x509ac6b1dda0f729, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x53, 0x1}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x404, 0x2, 0x0, 0xe, 0x1, 0x0, 0x3, 0x66}, @selector_unit={0x6, 0x24, 0xc, 0x2, 0x1, "c9"}, @extension_unit={0xd, 0x24, 0xa, 0x6, 0x1, [0x3, 0x3]}, @feature_unit={0x19, 0x24, 0x7, 0x5, 0x1, [0x6, 0xd, 0x8, 0x6, 0x2]}, @selector_unit={0x9, 0x24, 0xc, 0x83, 0x4, "9e089ff3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x101, 0x9, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x8, 0x1, 0x4, 0x7a}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x0, 0x7f, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x47, 0x3, {0xa, 0x25, 0x25, 0x3, 0xff, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xb, 0x7, {0xa, 0x25, 0x25, 0xe8e, 0xdc, 0xffff}}}}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x300, 0x9, 0xf, 0xba, 0x10, 0x6}, 0x19, &(0x7f0000001280)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xdf, "fb63f69ea0a53aa06edf45245e26a3ba"}]}, 0x2, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x812}}, {0xa6, &(0x7f0000001300)=@string={0xa6, 0x3, "79c9b50edda97cad87d18b8e1e7b66a379fefc192553ed34f40c69f50b4deb173d7b1ed1fc0e147e36bfe672934dd59766b29c126af5e135e2b4ba2263727226672160aba309df4c79e3514dfd4a70804240d1f282366842865bf4027c39344ca4ad7fabcdf1338e637768105f695957ba546f55e9e7f70445958ec4c94c3e6e259402370e452485307a08ed38e78b0290b5cce986d1909a525374a634a497ee22be3b61"}}]}) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
mount(0x0, 0x0, 0x0, 0x20008, &(0x7f0000000440)='\x14st\v\x88O\xc2\x9d\xf8\x12\xd6\x15\xe0\xe2\xbd-!\xef\x83b5\xb3\x00\x00\x00\x00\x80\x00\x00\x01\xf8\"\xf71\xe4\xd8K\x83\x96\x85\xa4\x81\xf7\xce\x9d\x06\xc8\xdb\xd1,A\xc6q\xfd\r\xc9?\xadt\xaa\x8b\xc1\'\xdbH\x9en\x8b\x82\x9f\xeb\xbc\xae \fP\xfa\x17\x1e\xbd\xe7nn\x18u@@>\xd6\xafnjSG\xff\x9a\x9ee\xb2\xbbM\xb4\x1b\xe2\x060CW\x85\x9d\x9a\xf6d\x89\x9dl\xe4\xda\x9d\xb7\x85\xaeK}\x19\xf8\x19A\x15\xdb\xd7H\x8f \xa5\xe9B\xc4.\xb3\xe0\xab\x1dE\x05\xaf\x99\xac\xc7\xa3\xa9:&\xe3\xba\x90\x8e\x975\xf2\x17}!R\n\x01}Z\xba]\x83\x1eB\x9d\t\xcdM-\xa3\xff\xa4\xc0\xa5\n\xfd\xbd\xb5\xc0\xd2\xa3\xcd]\xb2\x91\xd2\xe1\x8ak\xe3\x15\xc8[\x00\xc2\x16d\x1f\x92H\x86\xd1\x04\x9e\xc8\x98\x97\xabz4\xb1\xda~;\x95@\x8d\xe69\xe5\xdf%h') (async)
r2 = socket(0x11, 0x3, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x88, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x7, 0x20, 0x4, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "7f159938"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x0, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x15, 0x10, 0x8}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x80, 0x4d, [0x7ff, 0x80, 0x9, 0x0, 0x9]}, @mdlm_detail={0x1b, 0x24, 0x13, 0x3, "65190abdd56fe55869adc01f89093964262e754167bd25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x6, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xb, 0xb}}}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x200, 0x4, 0x8, 0x3, 0x20, 0x2}, 0x19, &(0x7f0000000cc0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "71e29a01c1bf9224af66df51f045387c"}]}, 0x8, [{0x4, &(0x7f0000000d00)=@lang_id={0x4}}, {0xaa, &(0x7f0000000d40)=@string={0xaa, 0x3, "47767571d7fb3e1a56dd273f689e67fb183110d3e15ba83cf62b0e16b9bba86a14fc962255412d8ace2ccbeea29df3aac35d5150bd5b1c94f6a140734affc4ed671f80d47996be28ad0c0a6cf4b4e1aa395627c72159cbcbbeeba3a2f0b0c01b4d760d3584714254756620eb25dadb7294b5e7253adf6870dadfb3370726b414a99e12f743712c37902bed0256d097f99847ae95f78c9bec524f21f065e2ddbb6e62d5dbe7ea194d"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x48fa}}, {0xad, &(0x7f0000000e40)=@string={0xad, 0x3, "9d722099fe944ee5cee0b523271f8cbd0cd049a55dde3be24fae9a4510a16bbc5ff5318ce7e004277154b81b4970da11697a9683b48c662cebbb0b7a7197bec336261e39ef5db022832504af20e8f45819b8e4ab188a3572728044fa5320eddfec88b3446002bc4b25040b6c51ba910928b428da9132a879030eb16c512d8254665ac8d97f5031d2fe62498f56773236dd97ea60ea40ed9c2f4654d590e09d2adda7c05b403930f7f058ed"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x421}}, {0xed, &(0x7f0000000f80)=@string={0xed, 0x3, "62f95630f83a5c91b44d86a8f66e1c938bfd90ffcc444f2a108421156d5c9eb5afe38a7ece574299f1fcbc875d6d1bfff17738001275aac375bdd1615fc6147fae395092f50791a68ac616d0ef917fed759d8b108982ca8a46beb3d8ef0744db529d60f47a3275c73ab3dc8d6de4138c630ac18835727360ad2cf389ea04cbeebb1675951c2139dba9270e342cc948706a6cbd6cd1cdca8964b94856d42eb47e7be1e60ddb53e352a0a5d68ac46e23182adf2aa5824522ea57601d2d2ebf06cc2be4df416f0806191fc9ae6df7418acc35169e1736aed03d4b564b70ec554070cebf169a32f6c8fb33cc9b"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x41e}}]}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = socket$packet(0x11, 0x3, 0x300)
read$FUSE(0xffffffffffffffff, &(0x7f0000002b00)={0x2020, 0x0, <r5=>0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000004b40)={0x10, 0x0, r5}, 0x10) (async)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) (async)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async, rerun: 32)
bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) (async, rerun: 32)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000280)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) (async, rerun: 64)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000140)={0x40, 0x15, 0x4, "84bd00a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
prlimit64(r6, 0xe, &(0x7f0000000040)={0x6, 0x100008b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 32)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x20b, 0x2}) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000200)="8e51610cb0b92d076c98ca795d861dc38355259ee833045bdddcd0fedd711bf53d02c20fdce041f3007e24c9121416c0a04cb29a3c69e8ddaaf998dd0ecb5a40ee8ae887db511f7309261ca3180f96f4"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f0000000440)={0x14, &(0x7f0000000240)={0x0, 0x22, 0xca, {0xca, 0xc, "ea047db7704bc4563ecf04bbce85b800ea4652326bfc08f2b8fca1037a09ff04c651170ccd13afe3b642746ef08016a39c1397a664fdac47826b3db72610b852a43ab53c7cbcf6f8b39a2f610e3bde9c9af3ce84a4ab3680928e1c6d9c98182c74c77afed171fcb29e383d74994705cc4d9bed4b01fcde9ca483afcda41f578c51a10091d86ec11b17548b0a44316d99e33c7914c572dc188ecf7360ce2883638a316f9e611f70693546996093ace0f1b26d27f941d01d0988747d596d2d1b6ee6120e1d034735ec"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x20, 0xf, 0x4, "dca7ec30"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x20, 0xa456060a4e93767b, 0xfc, {0xfc, 0xa, "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"}}, &(0x7f00000005c0)={0x0, 0x3, 0x100, @string={0x100, 0x3, "0867a5aea59bc6ea8cadd682b65e6750988d0604dbd1d2013e2f5414c1a1c1849ad7f4c3d59f6785fd5bbf93a7809101acf02444a429728eee71a3a9d949cb381467a338a29c0a6164b89f01e6af38223f7d48831247ce87807d0e70919719cc0e032f47f9ebccdfd39b56f2164d7ed15331ab57ece4b130668565a2020fcb5d5b100a92bb0d8ba80ae9cb1d6ff9110fbe3150d328f1efd48acca46c7ea2e8400a6412994e3ed15c06296a08bc55d048af2fa36ca8b741d35646e3778dd612b13318484e7a846acda46a4f0ebced98e81cb8be88809be08c477a74c3c2b543aeef16dcc59771f50b735eb77f475dad85633eeaea45f0215239db397a4cbc"}}, &(0x7f0000000700)={0x0, 0x22, 0x13, {[@main=@item_012={0x2, 0x0, 0xa, "e535"}, @global=@item_4={0x3, 0x1, 0x1, "f0e4b7de"}, @main=@item_4={0x3, 0x0, 0x9, "58aa001e"}, @main=@item_4={0x3, 0x0, 0xc, "6c36d331"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x4bc}}}}, &(0x7f0000000b80)={0x2c, &(0x7f00000008c0)={0x0, 0x6, 0xfa, "151f9b1667938e56af0f17895b138117c23555db9b045489516e9356ab65f665ed562a22b5db9ba7c017ecb829228d0c34910baad48b50e149be3fa0edf869949a3b955f1e83569f8b73f515810ee5ad0b6f95d7b305aab70fd2122e384f03676722a78f737e3c6494c0da8461a4d3f2c2e4cacb2b64f7e17d28baeee39cafd8ecb62a3f216d350cfe548f732f049a6cc09789fd53158487d7e0e09900782be1c1ee3a055e1f31a1b9ef7bd0ab4e4382c120b184ff137eac30e715f1148b1632164e1632b5cea2a5c557ab61bddc1aaaa200ec2959c7b8a5c4959a38ec635c30c329ca256994a352013da9d235588340addd2af03f90ee260261"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000a40)={0x20, 0x1, 0xc1, "e8508c391707b9c2f51ecdc6fbdfef3d151c642de58256f189699d3dc5d9242862562c4acc7b624816bdca366d9c53b13c305d52951bfaa635b5831e5789f5b16278438a02caf952da9746cdbc79df09bb7927c9dd6d2d897d06684b1e76c513015a28231ce23a037899a5c0fc0eb7c56b32704656035947496dce3b2f553d8e334ca9f12757e2d68148af1b7f44ca30a4639b20f46ff78d3bf57cf6fec5913cf279e83e4a88e7ea5842c1b4ef7a50e892e779629017d808032812d62630df4830"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x9}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

20.75376685s ago: executing program 6 (id=1151):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0006280000002823f70ba381030000000000000000cba62859584fdca056"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_pts(0xffffffffffffffff, 0x0)
setresgid(0xee00, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0))

20.751301s ago: executing program 4 (id=1152):
write$snapshot(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1)

20.75090071s ago: executing program 5 (id=1153):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc7ce700000000000000000000000000fc020000060000e300020000000000107f00000100000000000000000000000000000000d7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd0200000000000000000000000000000000000000000000440005000a010102000000000000000000000000000004d2330000000a000000fc000000000000000000000000000001ff34000004030000faffffff00010000b5000000"], 0xfc}}, 0x0)
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=""/221, 0xdd}, 0x40)
mkdirat(0xffffffffffffff9c, 0x0, 0x9) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x9)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800)

20.699669062s ago: executing program 4 (id=1154):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
sendfile(r1, r0, 0x0, 0x7fffffff)

20.699483002s ago: executing program 5 (id=1155):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000440)="6bbe4af884c7f1eded115177427c6b5cb7fdad94ab213dbe84ce754acc5679d48fb3060d1fe87e0c3753d31a23baec", 0x0, 0x2f})
ioctl$KVM_SET_CLOCK(r0, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0xb, 0x100a})

20.699268322s ago: executing program 4 (id=1156):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000180)={0x0, 0x1, 0x80, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{0x10, 0x101, 0x6}, {0x1, 0x1ff}, {0x1a, 0x101, 0xfffffffd}, {0x1a, 0xfe, 0x43b}, {0xe, 0xfe, 0x2}]})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x100000020, 0x3, 0x2, 0x4000000106c, 0x102, 0x8000000000000, 0x1000000003, 0x200007ff, 0x8, 0x10, 0x4, 0x3, 0x8006], 0x1, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

20.684749363s ago: executing program 5 (id=1157):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0)
pwritev(r0, &(0x7f00000022c0)=[{&(0x7f0000000200)="67cba6978cfa59ef", 0x8}], 0x1, 0xfffffff9, 0x9)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000040)=""/209, 0xd1}, {&(0x7f0000000880)=""/4082, 0xff2}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/126, 0x7e}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f00000003c0)=""/271, 0x10f}, {&(0x7f0000000280)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffb}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14)

20.673044813s ago: executing program 4 (id=1158):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='notify_on_release\x00', 0x2, 0x0)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
read(r2, &(0x7f0000000240)=""/123, 0x7b)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4})
preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1, 0x3, 0x1)

20.500281838s ago: executing program 5 (id=1159):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)=ANY=[@ANYBLOB='uid='])
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, &(0x7f0000000100)) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, &(0x7f0000000100))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]})
r0 = userfaultfd(0x801)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x143)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r1])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socket(0xa, 0x3, 0xff) (async)
r2 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x0, @remote, 0x5}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x0, @remote, 0x5}, 0x1c)
r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x8b, "", [{{0x9, 0x4, 0x0, 0xf, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1008, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x80, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x7af, 0x8, 0x82, 0xc}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect$midi(0x4, 0xdb, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x1, 0x1, 0x9, 0x30, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x9, [@midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x9, 0x2, [{0x9, 0x2}, {0x7, 0x3}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x7fff, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5}], [{{0x9, 0x5, 0x1, 0x10, 0x0, 0xfd, 0x2b, 0xf1, {0xf, 0x25, 0x1, 0xb, "9adab3f47119ac57a075fa"}}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x18, 0x4, 0x7, {0x7, 0x25, 0x1, 0x3, "07899c"}}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7, 0xd6, 0x0, {0xd, 0x25, 0x1, 0x9, "c9090c3375cef8b32b"}}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x9, 0x4, 0xfa, {0x14, 0x25, 0x1, 0x10, "751a8b22c0dac69f2be1f8dcc22570bf"}}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x0, 0x6, 0xe2, {0x11, 0x25, 0x1, 0xd, "138d9cecb911ce21ade31e46fa"}}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x5, 0x6, 0xb8, {0xb, 0x25, 0x1, 0x7, "9662424be03147"}}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x8, 0xff, 0xe, {0xd, 0x25, 0x1, 0x9, "f3db9527827aeeb96d"}}}]}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x8, 0x5, 0xd, 0x10, 0x9}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x807}}, {0xd5, &(0x7f0000000400)=@string={0xd5, 0x3, "9398c97271a4da4092495e8b6a6929ace1f83c60834c41ba24f2cad34407046e680210b31817ee74775b22f3b53d24f44beb5869095b755da542d22a4dd13fd3e9fa050a057c8ecb14145941bb10f6e3fb7755c1df83dc6b61ff2cdf1628d4aa2b40f7c0df007687eab90894155a8be243f6883d3222cade889b6074249e3a60e9878a27fe401c2a1f0a77bcc2e661bd331faad712034738a26eeae6f064c88b8a55851e89a77ba84db99e47c20611ae74574e3c057530f96aef54e5c9d124866f5ff804a433b78ba4c8bd0effee7bd3658d83"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2809}}]})
syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x28, {0x28, 0x23, "1ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a4779"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f00000000c0), 0x0, 0x0)

20.497122148s ago: executing program 4 (id=1160):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f3d01d85adc9bdb64ee7d001ea75a1097145e194b5322300b8bed6c5e04044f6f1f93ef8ff086042bfbb0066cd9a0fe342dabc9d2699d1eba82b4a1df555f50ed0f3a0efc5987e446e49d87201c7d116fa96ab156076e96e74d633b4495fe70d3d3db09ff1f31af18a6c51544ac3adfa206ecefba3f58c74ba4eeb7e539460fae582d860900"/152, @ANYRESHEX=r2, @ANYBLOB=',\x00'])
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x111)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r7, r8, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x6, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r7, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x64961, 0xb3836f6d7a15f2d)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x7a, &(0x7f00000003c0)=ANY=[], 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0)
r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0xdddd0000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {0x6}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})

20.496854398s ago: executing program 3 (id=1161):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {0x6}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})

17.429727766s ago: executing program 5 (id=1162):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {0x6}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) (fail_nth: 1)

17.248642412s ago: executing program 6 (id=1163):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xc43, 0x0)
flock(r0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a})
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x20400)
write$snapshot(r0, &(0x7f0000000040)="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", 0x135)

16.207338165s ago: executing program 4 (id=1164):
r0 = socket$inet6(0xa, 0x2, 0x0)
write(r0, &(0x7f0000000080)="b56942c37fb6bca8844e85d037c98145d6f9181c23572bca642272cba789358e9e2e2707bd3c681e4e7ab5eaa89b883049519762f3d702dbcf5e77b4bfecf1f872e151bb1359d8813b32f0ad1be25bc1e45fd646e5b32092a6b8418a61b4721b72f832eac5e871cdfb68ac492da9731264d537df82ddfff4c81be83efb8eac63d52d1adc8330a8ccf64a5e64ac64b89cacf9db18e588c16efbfe90829e5fc7d13cae7829103ed61d4f32169efb617c2b62bd8fa9484ee923f2f519198d7a018e9e2f6d03ab7ab27e", 0xc8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3000002, @mcast2, 0x1}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4)

0s ago: executing program 35 (id=1162):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {0x6}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) (fail_nth: 1)

kernel console output (not intermixed with test programs):

dit: type=1400 audit(1798683296.281:367): avc:  denied  { ioctl } for  pid=1903 comm="syz.3.524" path="socket:[18184]" dev="sockfs" ino=18184 ioctlcmd=0x6e84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  106.987194][   T36] audit: type=1400 audit(1798683296.338:368): avc:  denied  { mount } for  pid=1914 comm="syz.3.529" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  107.009354][   T36] audit: type=1400 audit(1798683296.366:369): avc:  denied  { unmount } for  pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  107.211403][  T301] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  107.286071][  T807] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  107.381926][  T301] usb 6-1: Using ep0 maxpacket: 16
[  107.388108][  T301] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.398273][  T301] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.408538][  T301] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  107.417640][  T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.425731][  T301] usb 6-1: Product: syz
[  107.429938][  T301] usb 6-1: Manufacturer: syz
[  107.434512][  T301] usb 6-1: SerialNumber: syz
[  107.445885][  T807] usb 4-1: Using ep0 maxpacket: 16
[  107.452092][  T807] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  107.463170][  T807] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  107.476046][  T807] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[  107.485360][  T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.493393][  T807] usb 4-1: Product: syz
[  107.497562][  T807] usb 4-1: Manufacturer: syz
[  107.502162][  T807] usb 4-1: SerialNumber: syz
[  107.654466][  T301] usb 6-1: 0:2 : does not exist
[  107.661642][  T301] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  107.672346][  T301] usb 6-1: USB disconnect, device number 20
[  107.757249][  T807] usb 4-1: USB disconnect, device number 50
[  107.766855][  T598] udevd[598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  108.044724][ T1928] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  108.166029][ T1938] netlink: 64 bytes leftover after parsing attributes in process `syz.4.538'.
[  108.490448][  T807] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  108.650317][  T807] usb 6-1: Using ep0 maxpacket: 16
[  108.738605][  T807] usb 6-1: unable to get BOS descriptor or descriptor too short
[  108.749719][  T807] usb 6-1: unable to read config index 0 descriptor/start: -71
[  108.757483][  T807] usb 6-1: can't read configurations, error -71
[  109.282364][   T36] audit: type=1400 audit(1798683298.495:370): avc:  denied  { write } for  pid=1966 comm="syz.5.551" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  109.308211][   T36] audit: type=1400 audit(1798683298.505:371): avc:  denied  { map } for  pid=1966 comm="syz.5.551" path="socket:[19543]" dev="sockfs" ino=19543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  109.313832][ T1971] Unsupported ieee802154 address type: 0
[  110.273505][ T2000] netlink: 'syz.5.562': attribute type 46 has an invalid length.
[  110.297802][ T2005] fuse: Unknown parameter ''
[  110.304534][ T2006] batadv_slave_0: entered promiscuous mode
[  110.310560][   T36] audit: type=1400 audit(1798683299.462:372): avc:  denied  { connect } for  pid=2004 comm="syz.5.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  110.349189][   T36] audit: type=1400 audit(1798683299.499:373): avc:  denied  { create } for  pid=2013 comm="syz.5.565" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  110.369825][   T36] audit: type=1400 audit(1798683299.499:374): avc:  denied  { write } for  pid=2013 comm="syz.5.565" name="file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  110.393446][   T36] audit: type=1400 audit(1798683299.499:375): avc:  denied  { open } for  pid=2013 comm="syz.5.565" path="/71/file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  110.423424][ T1996] batadv_slave_0: left promiscuous mode
[  110.704432][  T807] usb 2-1: USB disconnect, device number 39
[  110.866018][ T2035] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.873230][ T2035] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.880773][ T2035] bridge_slave_0: entered allmulticast mode
[  110.888140][ T2035] bridge_slave_0: entered promiscuous mode
[  110.896623][ T2035] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.904277][ T2035] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.911766][ T2035] bridge_slave_1: entered allmulticast mode
[  110.919175][ T2035] bridge_slave_1: entered promiscuous mode
[  110.981094][ T2035] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.988263][ T2035] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.995763][ T2035] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.002806][ T2035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.046340][  T387] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.054318][  T387] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.072924][  T387] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.080021][  T387] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.088276][  T387] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.095348][  T387] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.129551][ T2035] veth0_vlan: entered promiscuous mode
[  111.142469][ T2035] veth1_macvtap: entered promiscuous mode
[  111.204856][ T2042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2042 comm=syz.6.570
[  111.524891][  T807] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  111.595604][ T2051] netlink: 1331 bytes leftover after parsing attributes in process `syz.4.574'.
[  111.688383][  T807] usb 7-1: device descriptor read/64, error -71
[  111.879899][  T525] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  111.943867][  T807] usb 7-1: device descriptor read/64, error -71
[  112.051461][  T525] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.061582][  T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.072618][  T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.082403][  T525] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  112.091463][  T525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.100043][  T525] usb 4-1: config 0 descriptor??
[  112.199674][  T807] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  112.338278][  T807] usb 7-1: device descriptor read/64, error -71
[  112.535333][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.542507][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.549562][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.557386][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.564628][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.571657][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.578708][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.585755][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.592774][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.594044][  T807] usb 7-1: device descriptor read/64, error -71
[  112.599846][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.613313][  T525] hid-rmi 0003:0461:4E72.0017: unknown main item tag 0x0
[  112.620974][  T525] hid-rmi 0003:0461:4E72.0017: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0
[  112.722289][  T807] usb usb7-port1: attempt power cycle
[  112.751390][  T301] usb 4-1: USB disconnect, device number 51
[  112.834377][   T36] audit: type=1400 audit(1798683301.826:376): avc:  denied  { mount } for  pid=2071 comm="syz.4.583" name="/" dev="pstore" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  113.084446][  T807] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  113.106675][  T807] usb 7-1: device descriptor read/8, error -71
[  113.245240][  T807] usb 7-1: device descriptor read/8, error -71
[  113.500041][  T807] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[  113.522637][  T807] usb 7-1: device descriptor read/8, error -71
[  113.660995][  T807] usb 7-1: device descriptor read/8, error -71
[  113.777271][  T807] usb usb7-port1: unable to enumerate USB device
[  114.214211][  T916] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  114.331855][ T2114] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  114.331871][ T2114] rust_binder: Read failure Err(EFAULT) in pid:394
[  114.341120][ T2114] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  114.347663][ T2114] rust_binder: Read failure Err(EFAULT) in pid:394
[  114.356658][ T2114] rust_binder: validate_parent_fixup: new_min_offset=228, sg_entry.length=0
[  114.363184][ T2114] rust_binder: Error while translating object.
[  114.371952][ T2114] rust_binder: Failure in copy_transaction_data: EINVAL
[  114.378173][  T916] usb 6-1: Using ep0 maxpacket: 32
[  114.384134][ T2114] rust_binder: 2113:2114 transaction to 2113 failed: EINVAL
[  114.386225][  T916] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  114.422361][   T36] audit: type=1400 audit(1798683303.318:377): avc:  denied  { bind } for  pid=2117 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  114.427585][  T916] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  114.450763][  T916] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  114.461110][  T916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  114.472126][  T916] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  114.482439][  T916] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  114.492632][  T916] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  114.505926][  T916] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  114.515170][  T916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.524892][  T916] usb 6-1: config 0 descriptor??
[  114.530783][ T2106] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  114.580080][ T2137] netlink: 'syz.4.612': attribute type 9 has an invalid length.
[  114.588128][ T2137] netlink: 'syz.4.612': attribute type 2 has an invalid length.
[  114.622125][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'.
[  114.631068][ T2142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'.
[  114.632590][ T2146] overlayfs: failed to clone upperpath
[  114.686804][ T2153] netlink: 72 bytes leftover after parsing attributes in process `syz.3.618'.
[  114.754285][  T916] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  114.767437][  T916] usb 6-1: USB disconnect, device number 23
[  114.774484][  T916] usblp0: removed
[  114.832404][  T525] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  114.993289][  T525] usb 7-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2
[  115.004835][  T525] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  115.015795][  T525] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  115.026728][  T525] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  115.035771][  T525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.044490][ T2120] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  115.226740][  T916] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  115.266037][   T36] audit: type=1400 audit(1798683304.106:378): avc:  denied  { create } for  pid=2119 comm="syz.6.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  115.292928][  T525] usb 7-1: string descriptor 0 read error: -71
[  115.300932][  T525] hub 7-1:32.0: bad descriptor, ignoring hub
[  115.308340][  T525] hub 7-1:32.0: probe with driver hub failed with error -5
[  115.333798][  T525] usb 7-1: USB disconnect, device number 6
[  115.386693][  T916] usb 6-1: Using ep0 maxpacket: 32
[  115.392895][  T916] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  115.401364][  T916] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  115.410035][  T916] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  115.419905][  T916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.429624][  T916] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  115.439272][  T916] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  115.449099][  T916] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  115.462075][  T916] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  115.471086][  T916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.479766][  T916] usb 6-1: config 0 descriptor??
[  115.485392][ T2106] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  115.492979][  T916] hub 6-1:0.0: bad descriptor, ignoring hub
[  115.498936][  T916] hub 6-1:0.0: probe with driver hub failed with error -5
[  115.707274][  T916] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  116.058752][  T301] usb 6-1: USB disconnect, device number 24
[  116.065287][  T301] usblp0: removed
[  116.249971][  T525] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  116.291402][   T36] audit: type=1400 audit(1798683305.063:379): avc:  denied  { setopt } for  pid=2196 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  116.364092][ T2215] sock: sock_set_timeout: `syz.4.641' (pid 2215) tries to set negative timeout
[  116.431503][  T525] usb 7-1: Using ep0 maxpacket: 8
[  116.440944][  T525] usb 7-1: config 0 interface 0 has no altsetting 0
[  116.448335][  T525] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 7.00
[  116.457724][  T525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.466978][  T525] usb 7-1: config 0 descriptor??
[  116.532316][   T36] audit: type=1400 audit(1798683305.297:380): avc:  denied  { shutdown } for  pid=2226 comm="syz.3.647" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  116.698261][ T2189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.707720][ T2189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.750962][  T301] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  116.900391][  T807] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  116.910929][  T301] usb 6-1: Using ep0 maxpacket: 32
[  116.917364][  T301] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[  116.928630][  T301] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  116.942104][  T301] usb 6-1: config 0 interface 0 has no altsetting 0
[  116.948966][  T301] usb 6-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00
[  116.949587][  T525] logitech 0003:046D:C20E.0018: rdesc size test failed for formula gp
[  116.960032][  T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.978780][  T301] usb 6-1: config 0 descriptor??
[  116.986329][  T525] logitech 0003:046D:C20E.0018: collection stack underflow
[  116.993562][  T525] logitech 0003:046D:C20E.0018: item 0 2 0 12 parsing failed
[  117.001157][  T525] logitech 0003:046D:C20E.0018: parse failed
[  117.007211][  T525] logitech 0003:046D:C20E.0018: probe with driver logitech failed with error -22
[  117.071251][  T807] usb 4-1: Using ep0 maxpacket: 16
[  117.115449][ T2230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  117.169036][  T312] usb 7-1: USB disconnect, device number 7
[  117.267837][  T807] usb 4-1: unable to get BOS descriptor or descriptor too short
[  117.276551][  T807] usb 4-1: no configurations
[  117.286948][  T807] usb 4-1: can't read configurations, error -22
[  117.324996][ T2233] overlayfs: failed to clone upperpath
[  117.411492][ T2222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.420239][ T2222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.429076][ T2242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.437508][ T2222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.439591][ T2242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.447730][ T2222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.467450][  T301] usbhid 6-1:0.0: can't add hid device: -71
[  117.473413][  T301] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  117.498491][  T301] usb 6-1: USB disconnect, device number 25
[  117.536046][ T2254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'.
[  117.546825][ T2254] overlayfs: failed to clone upperpath
[  117.783535][   T36] audit: type=1400 audit(1798683306.470:381): avc:  denied  { read } for  pid=2262 comm="syz.6.661" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  117.809009][   T36] audit: type=1400 audit(1798683306.470:382): avc:  denied  { open } for  pid=2262 comm="syz.6.661" path="/11/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  117.831352][   T36] audit: type=1400 audit(1798683306.498:383): avc:  denied  { ioctl } for  pid=2262 comm="syz.6.661" path="/11/file0" dev="overlay" ino=2 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  117.923581][  T301] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  118.061989][ T1044] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  118.083283][  T301] usb 6-1: Using ep0 maxpacket: 16
[  118.129886][  T301] usb 6-1: unable to get BOS descriptor or descriptor too short
[  118.138144][  T301] usb 6-1: unable to read config index 0 descriptor/start: -71
[  118.145697][  T301] usb 6-1: can't read configurations, error -71
[  118.189865][  T807] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  118.221829][ T1044] usb 7-1: Using ep0 maxpacket: 16
[  118.228100][ T1044] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  118.240947][ T1044] usb 7-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  118.250006][ T1044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.258618][ T1044] usb 7-1: config 0 descriptor??
[  118.351159][  T807] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11
[  118.362435][  T807] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.375316][  T807] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.381954][  T807] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  118.390980][  T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.399660][  T807] usb 4-1: config 0 descriptor??
[  118.638456][  T807] usbhid 4-1:0.0: can't add hid device: -71
[  118.644474][  T807] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  118.659007][  T807] usb 4-1: USB disconnect, device number 53
[  118.698090][ T1044] waltop 0003:172F:0500.0019: unknown main item tag 0x7
[  118.705344][ T1044] waltop 0003:172F:0500.0019: unknown main item tag 0x0
[  118.706522][   T36] audit: type=1400 audit(1798683307.343:384): avc:  denied  { mounton } for  pid=2279 comm="syz.5.668" path="/proc/231/cgroup" dev="proc" ino=21222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  118.712805][ T1044] waltop 0003:172F:0500.0019: unknown main item tag 0x1
[  118.742336][ T1044] waltop 0003:172F:0500.0019: unknown main item tag 0xd
[  118.752251][ T1044] waltop 0003:172F:0500.0019: hidraw0: USB HID v0.77 Device [HID 172f:0500] on usb-dummy_hcd.6-1/input0
[  118.782895][ T2287] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  118.782917][ T2287] rust_binder: Read failure Err(EFAULT) in pid:464
[  118.915369][  T916] usb 7-1: USB disconnect, device number 8
[  119.028245][ T2289] 9pnet_fd: Insufficient options for proto=fd
[  119.034478][  T301] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  119.127826][  T807] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  119.202446][  T301] usb 6-1: Using ep0 maxpacket: 8
[  119.208553][  T301] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.219586][  T301] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  119.232475][  T301] usb 6-1: config 0 interface 0 has no altsetting 0
[  119.239102][  T301] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  119.248139][  T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.256741][  T301] usb 6-1: config 0 descriptor??
[  119.287695][  T807] usb 4-1: Using ep0 maxpacket: 16
[  119.294187][  T807] usb 4-1: unable to get BOS descriptor or descriptor too short
[  119.301894][  T807] usb 4-1: too many configurations: 40, using maximum allowed: 8
[  119.310657][  T807] usb 4-1: unable to read config index 0 descriptor/start: -61
[  119.318222][  T807] usb 4-1: can't read configurations, error -61
[  119.458261][  T807] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  119.618126][  T807] usb 4-1: Using ep0 maxpacket: 16
[  119.624588][  T807] usb 4-1: unable to get BOS descriptor or descriptor too short
[  119.632282][  T807] usb 4-1: too many configurations: 40, using maximum allowed: 8
[  119.641006][  T807] usb 4-1: unable to read config index 0 descriptor/start: -61
[  119.648553][  T807] usb 4-1: can't read configurations, error -61
[  119.654968][  T807] usb usb4-port1: attempt power cycle
[  119.679055][ T2306] overlayfs: failed to resolve './cgroup': -2
[  119.690662][  T301] uclogic 0003:28BD:0042.001A: interface is invalid, ignoring
[  119.778011][  T525] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  119.905166][  T301] usb 6-1: USB disconnect, device number 27
[  119.938920][  T525] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  119.947024][  T525] usb 7-1: config 0 has no interface number 0
[  119.953149][  T525] usb 7-1: config 0 interface 41 has no altsetting 0
[  119.961149][  T525] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  119.970214][  T525] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.978194][  T525] usb 7-1: Product: syz
[  119.982366][  T525] usb 7-1: Manufacturer: syz
[  119.986948][  T525] usb 7-1: SerialNumber: syz
[  119.992162][  T525] usb 7-1: config 0 descriptor??
[  120.012527][  T807] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  120.034162][  T807] usb 4-1: Using ep0 maxpacket: 16
[  120.040682][  T807] usb 4-1: unable to get BOS descriptor or descriptor too short
[  120.048528][  T807] usb 4-1: too many configurations: 40, using maximum allowed: 8
[  120.057365][  T807] usb 4-1: unable to read config index 0 descriptor/start: -61
[  120.064980][  T807] usb 4-1: can't read configurations, error -61
[  120.215020][  T807] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  120.247365][  T807] usb 4-1: Using ep0 maxpacket: 16
[  120.253961][  T807] usb 4-1: unable to get BOS descriptor or descriptor too short
[  120.261857][  T807] usb 4-1: too many configurations: 40, using maximum allowed: 8
[  120.270916][  T807] usb 4-1: unable to read config index 0 descriptor/start: -61
[  120.278691][  T807] usb 4-1: can't read configurations, error -61
[  120.285304][  T807] usb usb4-port1: unable to enumerate USB device
[  120.551602][ T2320] FAULT_INJECTION: forcing a failure.
[  120.551602][ T2320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.564776][ T2320] CPU: 1 UID: 0 PID: 2320 Comm: syz.5.683 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[  120.564816][ T2320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  120.564829][ T2320] Call Trace:
[  120.564835][ T2320]  <TASK>
[  120.564842][ T2320]  __dump_stack+0x21/0x30
[  120.564876][ T2320]  dump_stack_lvl+0x140/0x1c0
[  120.564900][ T2320]  ? __cfi_dump_stack_lvl+0x10/0x10
[  120.564925][ T2320]  ? check_stack_object+0x12b/0x150
[  120.564946][ T2320]  dump_stack+0x19/0x20
[  120.564970][ T2320]  should_fail_ex+0x3d7/0x530
[  120.564993][ T2320]  should_fail+0xf/0x20
[  120.565013][ T2320]  should_fail_usercopy+0x1e/0x30
[  120.565037][ T2320]  _copy_to_user+0x24/0xa0
[  120.565055][ T2320]  simple_read_from_buffer+0xed/0x160
[  120.565081][ T2320]  proc_fail_nth_read+0x1aa/0x220
[  120.565107][ T2320]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  120.565133][ T2320]  ? bpf_lsm_file_permission+0xd/0x20
[  120.565163][ T2320]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  120.565187][ T2320]  vfs_read+0x289/0xcb0
[  120.565207][ T2320]  ? __cfi_vfs_read+0x10/0x10
[  120.565224][ T2320]  ? __kasan_check_write+0x18/0x20
[  120.565244][ T2320]  ? mutex_lock+0x97/0x1d0
[  120.565263][ T2320]  ? __cfi_mutex_lock+0x10/0x10
[  120.565281][ T2320]  ? __fget_files+0x2c5/0x340
[  120.565305][ T2320]  ksys_read+0x145/0x260
[  120.565323][ T2320]  ? __cfi_ksys_read+0x10/0x10
[  120.565341][ T2320]  ? fdget+0x188/0x1e0
[  120.565361][ T2320]  ? __kasan_check_read+0x15/0x20
[  120.565379][ T2320]  __x64_sys_read+0x7f/0x90
[  120.565399][ T2320]  x64_sys_call+0x2638/0x2ee0
[  120.565417][ T2320]  do_syscall_64+0x57/0xf0
[  120.565441][ T2320]  ? clear_bhb_loop+0x50/0xa0
[  120.565460][ T2320]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  120.565488][ T2320] RIP: 0033:0x7fb88e95d68e
[  120.565510][ T2320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  120.565524][ T2320] RSP: 002b:00007fb88f802fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  120.565545][ T2320] RAX: ffffffffffffffda RBX: 00007fb88f8036c0 RCX: 00007fb88e95d68e
[  120.565559][ T2320] RDX: 000000000000000f RSI: 00007fb88f8030a0 RDI: 0000000000000005
[  120.565571][ T2320] RBP: 00007fb88f803090 R08: 0000000000000000 R09: 0000000000000000
[  120.565584][ T2320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.565595][ T2320] R13: 00007fb88ec16038 R14: 00007fb88ec15fa0 R15: 00007ffeda898e68
[  120.565611][ T2320]  </TASK>
[  120.638400][  T525] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71
[  120.821872][  T525] usb 7-1: USB disconnect, device number 9
[  121.008457][ T2326] ip6gretap0: entered promiscuous mode
[  121.013965][ T2326] ip6gretap0: entered allmulticast mode
[  121.382598][ T2352] netlink: 96 bytes leftover after parsing attributes in process `syz.4.688'.
[  121.469234][ T2363] overlayfs: failed to clone upperpath
[  121.941185][ T2370] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  121.941202][ T2370] rust_binder: Read failure Err(EFAULT) in pid:252
[  121.949845][ T2370] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  121.956431][ T2370] rust_binder: Read failure Err(EFAULT) in pid:252
[  121.965173][ T2370] FAULT_INJECTION: forcing a failure.
[  121.965173][ T2370] name failslab, interval 1, probability 0, space 0, times 1
[  121.984291][ T2370] CPU: 1 UID: 0 PID: 2370 Comm: syz.5.696 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[  121.984323][ T2370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  121.984334][ T2370] Call Trace:
[  121.984340][ T2370]  <TASK>
[  121.984346][ T2370]  __dump_stack+0x21/0x30
[  121.984375][ T2370]  dump_stack_lvl+0x140/0x1c0
[  121.984396][ T2370]  ? __cfi_dump_stack_lvl+0x10/0x10
[  121.984422][ T2370]  dump_stack+0x19/0x20
[  121.984445][ T2370]  should_fail_ex+0x3d7/0x530
[  121.984468][ T2370]  should_failslab+0xac/0x100
[  121.984490][ T2370]  __kmalloc_node_track_caller_noprof+0x68/0x4f0
[  121.984510][ T2370]  ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10e/0x720
[  121.984554][ T2370]  krealloc_noprof+0x8d/0x130
[  121.984574][ T2370]  _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10e/0x720
[  121.984617][ T2370]  ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10/0x10
[  121.984659][ T2370]  ? avc_has_perm_noaudit+0x28a/0x360
[  121.984680][ T2370]  ? avc_has_perm+0x155/0x240
[  121.984699][ T2370]  ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0
[  121.984722][ T2370]  ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10
[  121.984742][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.984758][ T2370]  ? _raw_spin_lock+0x92/0x120
[  121.984781][ T2370]  ? __cfi__raw_spin_lock+0x10/0x10
[  121.984803][ T2370]  ? selinux_binder_transaction+0x165/0x1d0
[  121.984823][ T2370]  ? bpf_lsm_binder_transaction+0xd/0x20
[  121.984847][ T2370]  _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x1801/0x4380
[  121.984870][ T2370]  ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0xc7a/0x2660
[  121.984900][ T2370]  ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10
[  121.984936][ T2370]  ? __cfi__raw_spin_lock+0x10/0x10
[  121.984957][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.984974][ T2370]  _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690
[  121.985019][ T2370]  ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10
[  121.985076][ T2370]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0
[  121.985108][ T2370]  ? __asan_memcpy+0x5a/0x80
[  121.985136][ T2370]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  121.985166][ T2370]  ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10
[  121.985196][ T2370]  ? _RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0xf8/0x250
[  121.985220][ T2370]  ? __cfi__RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0x10/0x10
[  121.985246][ T2370]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  121.985277][ T2370]  ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10
[  121.985309][ T2370]  ? _RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0xf8/0x250
[  121.985333][ T2370]  ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter11debug_tuple+0xad/0x170
[  121.985359][ T2370]  ? _RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0xd1/0x210
[  121.985386][ T2370]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  121.985411][ T2370]  ? __cfi__RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0x10/0x10
[  121.985436][ T2370]  ? _RNvXsj_NtNtCsb7ts3l0a5c3_4core3net7ip_addrNtB5_8Ipv6AddrNtNtB9_3fmt7Display3fmt+0xeb0/0x1690
[  121.985460][ T2370]  ? _RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0xd1/0x210
[  121.985485][ T2370]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0
[  121.985513][ T2370]  ? __asan_memcpy+0x5a/0x80
[  121.985530][ T2370]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  121.985560][ T2370]  ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10
[  121.985588][ T2370]  ? __asan_memcpy+0x5a/0x80
[  121.985603][ T2370]  ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0
[  121.985630][ T2370]  ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10
[  121.985658][ T2370]  ? _RNvMs2_NtNtCsb7ts3l0a5c3_4core3fmt8buildersNtB5_10DebugTuple5field+0x222/0x5c0
[  121.985683][ T2370]  ? arch_stack_walk+0x10a/0x170
[  121.985701][ T2370]  ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x307/0x810
[  121.985730][ T2370]  ? put_dec_trunc8+0x229/0x380
[  121.985753][ T2370]  ? put_dec+0xd7/0xf0
[  121.985775][ T2370]  ? __asan_memset+0x39/0x50
[  121.985793][ T2370]  ? move_right+0x8e/0xb0
[  121.985816][ T2370]  ? format_decode+0x1bb/0x1610
[  121.985838][ T2370]  ? vsnprintf+0x7b4/0x1ad0
[  121.985860][ T2370]  ? __asan_memcpy+0x5a/0x80
[  121.985877][ T2370]  ? vsnprintf+0x19ef/0x1ad0
[  121.985898][ T2370]  ? desc_read+0x202/0x3e0
[  121.985919][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.985936][ T2370]  ? desc_read+0x1ab/0x3e0
[  121.985954][ T2370]  ? prb_first_seq+0x109/0x1d0
[  121.985972][ T2370]  ? __cfi_prb_first_seq+0x10/0x10
[  121.985992][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.986008][ T2370]  ? desc_read+0x1ab/0x3e0
[  121.986026][ T2370]  ? __kasan_check_read+0x15/0x20
[  121.986041][ T2370]  ? this_cpu_in_panic+0x56/0x90
[  121.986060][ T2370]  ? _prb_read_valid+0x9f3/0xa80
[  121.986079][ T2370]  ? record_print_text+0x290/0x450
[  121.986103][ T2370]  ? update_curr+0xf8/0x9e0
[  121.986120][ T2370]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  121.986154][ T2370]  ? xfd_validate_state+0x68/0x140
[  121.986180][ T2370]  ? save_fpregs_to_fpstate+0x196/0x220
[  121.986201][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.986219][ T2370]  ? __switch_to+0xc4f/0x1300
[  121.986235][ T2370]  ? __cfi_sched_clock_cpu+0x10/0x10
[  121.986258][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.986273][ T2370]  ? _raw_spin_lock+0x92/0x120
[  121.986295][ T2370]  ? __cfi__raw_spin_lock+0x10/0x10
[  121.986316][ T2370]  ? psi_task_switch+0xad/0xa10
[  121.986339][ T2370]  ? _raw_spin_unlock+0x45/0x60
[  121.986362][ T2370]  ? __asan_set_shadow_00+0x12/0x20
[  121.986386][ T2370]  ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70
[  121.986424][ T2370]  ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[  121.986455][ T2370]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  121.986481][ T2370]  ? up+0x10a/0x1b0
[  121.986499][ T2370]  ? __cfi_up+0x10/0x10
[  121.986518][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.986535][ T2370]  ? llist_add_batch+0x10f/0x1f0
[  121.986556][ T2370]  ? prb_read_valid+0x41/0x80
[  121.986576][ T2370]  ? __cfi_llist_add_batch+0x10/0x10
[  121.986595][ T2370]  ? preempt_schedule_common+0x2d/0x60
[  121.986612][ T2370]  ? preempt_schedule+0xc5/0xe0
[  121.986628][ T2370]  ? __cfi_preempt_schedule+0x10/0x10
[  121.986645][ T2370]  ? tick_nohz_tick_stopped+0x4c/0x60
[  121.986671][ T2370]  ? __irq_work_queue_local+0xc4/0x260
[  121.986695][ T2370]  ? irq_work_queue+0xc2/0x160
[  121.986718][ T2370]  ? vprintk_emit+0x3e3/0x650
[  121.986739][ T2370]  ? __cfi_vprintk_emit+0x10/0x10
[  121.986760][ T2370]  ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xd14/0x1030
[  121.986790][ T2370]  ? __kernel_text_address+0x11/0x40
[  121.986815][ T2370]  ? vprintk_default+0x2a/0x40
[  121.986836][ T2370]  ? vprintk+0x93/0xa0
[  121.986852][ T2370]  ? _printk+0xde/0x140
[  121.986872][ T2370]  ? asm_exc_page_fault+0x2b/0x30
[  121.986890][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.986907][ T2370]  ? _raw_spin_lock+0x92/0x120
[  121.986930][ T2370]  ? __cfi__raw_spin_lock+0x10/0x10
[  121.986953][ T2370]  ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80
[  121.986982][ T2370]  ? __asan_memcpy+0x5a/0x80
[  121.987000][ T2370]  _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80
[  121.987027][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.987046][ T2370]  ? resched_curr+0x119/0x440
[  121.987063][ T2370]  ? __cfi_resched_curr+0x10/0x10
[  121.987080][ T2370]  ? __cgroup_account_cputime+0xa5/0xd0
[  121.987101][ T2370]  ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10
[  121.987137][ T2370]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  121.987162][ T2370]  ? __cfi_min_vruntime_cb_rotate+0x10/0x10
[  121.987181][ T2370]  ? __enqueue_entity+0x58a/0x630
[  121.987202][ T2370]  ? kvm_sched_clock_read+0x15/0x30
[  121.987222][ T2370]  ? sched_clock_noinstr+0xd/0x30
[  121.987240][ T2370]  ? __kasan_check_read+0x15/0x20
[  121.987254][ T2370]  ? psi_group_change+0xaae/0x1090
[  121.987278][ T2370]  ? is_bpf_text_address+0x17b/0x1a0
[  121.987300][ T2370]  ? kernel_text_address+0xa9/0xe0
[  121.987321][ T2370]  ? __kernel_text_address+0x11/0x40
[  121.987340][ T2370]  ? unwind_get_return_address+0x51/0x90
[  121.987361][ T2370]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  121.987382][ T2370]  ? arch_stack_walk+0x10a/0x170
[  121.987402][ T2370]  ? is_bpf_text_address+0x17b/0x1a0
[  121.987425][ T2370]  ? kernel_text_address+0xa9/0xe0
[  121.987447][ T2370]  ? __kernel_text_address+0x11/0x40
[  121.987469][ T2370]  ? unwind_get_return_address+0x51/0x90
[  121.987491][ T2370]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  121.987513][ T2370]  ? stack_depot_save_flags+0x38/0x800
[  121.987536][ T2370]  ? stack_trace_save+0xaa/0x100
[  121.987556][ T2370]  ? kasan_save_track+0x4f/0x80
[  121.987576][ T2370]  ? kasan_save_track+0x3e/0x80
[  121.987595][ T2370]  ? kasan_save_alloc_info+0x40/0x50
[  121.987611][ T2370]  ? __kasan_slab_alloc+0x73/0x90
[  121.987630][ T2370]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  121.987654][ T2370]  ? security_inode_alloc+0x51/0x230
[  121.987674][ T2370]  ? inode_init_always_gfp+0x756/0x9e0
[  121.987693][ T2370]  ? alloc_inode+0xc5/0x270
[  121.987713][ T2370]  ? new_inode+0x25/0x1e0
[  121.987731][ T2370]  ? proc_pid_make_inode+0x25/0x140
[  121.987750][ T2370]  ? proc_pident_instantiate+0x6d/0x2c0
[  121.987770][ T2370]  ? proc_pident_lookup+0x1c7/0x270
[  121.987790][ T2370]  ? proc_tid_base_lookup+0x2f/0x40
[  121.987805][ T2370]  ? do_filp_open+0x1f5/0x440
[  121.987828][ T2370]  ? avc_has_perm_noaudit+0x26c/0x360
[  121.987847][ T2370]  ? __asan_memcpy+0x5a/0x80
[  121.987864][ T2370]  ? avc_has_perm_noaudit+0x28a/0x360
[  121.987884][ T2370]  ? avc_has_perm+0x155/0x240
[  121.987902][ T2370]  ? __cfi_avc_has_perm+0x10/0x10
[  121.987921][ T2370]  ? kasan_save_alloc_info+0x40/0x50
[  121.987940][ T2370]  ? selinux_file_open+0x46c/0x630
[  121.987958][ T2370]  ? __cfi_selinux_file_open+0x10/0x10
[  121.987978][ T2370]  ? avc_has_extended_perms+0x80b/0xe70
[  121.987997][ T2370]  ? __asan_memcpy+0x5a/0x80
[  121.988015][ T2370]  ? avc_has_extended_perms+0x969/0xe70
[  121.988036][ T2370]  ? __asan_set_shadow_00+0x12/0x20
[  121.988061][ T2370]  ? do_vfs_ioctl+0x182d/0x2010
[  121.988082][ T2370]  ? arch_stack_walk+0x10a/0x170
[  121.988133][ T2370]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  121.988158][ T2370]  ? _parse_integer+0x2e/0x40
[  121.988180][ T2370]  ? ioctl_has_perm+0x39a/0x500
[  121.988196][ T2370]  ? has_cap_mac_admin+0xd0/0xd0
[  121.988213][ T2370]  ? proc_fail_nth_write+0x184/0x220
[  121.988235][ T2370]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  121.988260][ T2370]  ? selinux_file_ioctl+0x732/0x1480
[  121.988276][ T2370]  ? vfs_write+0x9a4/0xf90
[  121.988294][ T2370]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  121.988311][ T2370]  ? __cfi_vfs_write+0x10/0x10
[  121.988329][ T2370]  ? __kasan_check_write+0x18/0x20
[  121.988347][ T2370]  ? mutex_unlock+0x90/0x240
[  121.988366][ T2370]  ? __cfi_mutex_unlock+0x10/0x10
[  121.988382][ T2370]  ? __fget_files+0x2c5/0x340
[  121.988404][ T2370]  ? __fget_files+0x2c5/0x340
[  121.988424][ T2370]  ? bpf_lsm_file_ioctl+0xd/0x20
[  121.988447][ T2370]  ? security_file_ioctl+0x3e/0x110
[  121.988471][ T2370]  ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10
[  121.988496][ T2370]  __se_sys_ioctl+0x132/0x1b0
[  121.988518][ T2370]  __x64_sys_ioctl+0x7f/0xa0
[  121.988539][ T2370]  x64_sys_call+0x1878/0x2ee0
[  121.988557][ T2370]  do_syscall_64+0x57/0xf0
[  121.988580][ T2370]  ? clear_bhb_loop+0x50/0xa0
[  121.988598][ T2370]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  121.988623][ T2370] RIP: 0033:0x7fb88e99ce59
[  121.988639][ T2370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.988654][ T2370] RSP: 002b:00007fb88f803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.988674][ T2370] RAX: ffffffffffffffda RBX: 00007fb88ec15fa0 RCX: 00007fb88e99ce59
[  121.988688][ T2370] RDX: 0000200000000700 RSI: 00000000c0306201 RDI: 0000000000000003
[  121.988701][ T2370] RBP: 00007fb88f803090 R08: 0000000000000000 R09: 0000000000000000
[  121.988713][ T2370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.988725][ T2370] R13: 00007fb88ec16038 R14: 00007fb88ec15fa0 R15: 00007ffeda898e68
[  121.988740][ T2370]  </TASK>
[  122.400052][  T525] usb 4-1: new low-speed USB device number 58 using dummy_hcd
[  122.427909][ T2370] rust_binder: 2369:2370 transaction to 2369 failed: ENOMEM
[  122.490877][   T36] audit: type=1400 audit(1798683310.889:385): avc:  denied  { write } for  pid=2374 comm="syz.6.699" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  123.395700][ T2389] netlink: 'syz.6.701': attribute type 26 has an invalid length.
[  123.403606][ T2389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.701'.
[  123.414616][  T525] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  123.427104][  T525] usb 4-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  123.440442][ T2392] random: crng reseeded on system resumption
[  123.441532][  T525] usb 4-1: config 1 interface 0 has no altsetting 0
[  123.463392][  T525] usb 4-1: string descriptor 0 read error: -22
[  123.469866][  T525] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  123.492443][  T525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.532332][ T2409] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  123.532351][ T2409] rust_binder: Read failure Err(EFAULT) in pid:265
[  123.541616][ T2409] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  123.548266][ T2409] rust_binder: Read failure Err(EFAULT) in pid:265
[  123.572778][ T2412] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  123.573726][ T2413] netlink: 80 bytes leftover after parsing attributes in process `syz.6.711'.
[  123.719467][ T2372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.728122][ T2372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.738779][  T301] usb 4-1: USB disconnect, device number 58
[  123.853483][ T2433] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  123.853504][ T2433] rust_binder: Read failure Err(EFAULT) in pid:483
[  123.861624][ T1044] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  123.881634][  T807] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  124.030834][ T1044] usb 7-1: Using ep0 maxpacket: 32
[  124.037065][ T1044] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.048000][  T807] usb 6-1: Using ep0 maxpacket: 32
[  124.053231][ T1044] usb 7-1: config 0 interface 0 has no altsetting 0
[  124.059867][ T1044] usb 7-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  124.069160][ T1044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.078114][  T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.088220][  T807] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  124.097489][ T1044] usb 7-1: config 0 descriptor??
[  124.102489][  T807] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  124.111552][  T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.120950][  T807] usb 6-1: config 0 descriptor??
[  124.212050][  T301] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  124.371926][  T301] usb 4-1: Using ep0 maxpacket: 16
[  124.378478][  T301] usb 4-1: unable to get BOS descriptor or descriptor too short
[  124.386930][  T301] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 228, changing to 7
[  124.399461][  T301] usb 4-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40
[  124.408558][  T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.417094][  T301] usb 4-1: Product: syz
[  124.421375][  T301] usb 4-1: Manufacturer: syz
[  124.426015][  T301] usb 4-1: SerialNumber: syz
[  124.547601][ T2415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.556142][ T2415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.565074][ T1044] hid (null): global environment stack underflow
[  124.571477][ T1044] hid (null): unknown global tag 0xd
[  124.576834][ T1044] hid (null): unknown global tag 0xe
[  124.582164][ T1044] hid (null): unknown global tag 0xe
[  124.587598][ T1044] hid (null): bogus close delimiter
[  124.632304][   T36] audit: type=1400 audit(1798683312.897:386): avc:  denied  { setattr } for  pid=2442 comm="syz.4.724" name="" dev="pipefs" ino=12446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  124.654716][ T2433] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  124.654738][ T2433] rust_binder: Read failure Err(EFAULT) in pid:483
[  124.664177][ T2433] rust_binder: Error while translating object.
[  124.670903][ T2433] rust_binder: Failure in copy_transaction_data: EINVAL
[  124.677089][ T2433] rust_binder: 2432:2433 transaction to 2432 failed: EINVAL
[  124.687746][  T301] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  124.702022][  T301] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  124.711412][  T301] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  124.722005][ T2446] overlayfs: conflicting options: userxattr,verity=on
[  124.730947][  T301] usb 4-1: USB disconnect, device number 59
[  124.735528][  T525] usb 6-1: USB disconnect, device number 28
[  124.749191][  T598] udevd[598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  124.781696][ T1044] usb 7-1: string descriptor 0 read error: -71
[  124.790660][ T1044] uclogic 0003:5543:004D.001B: failed retrieving string descriptor #200: -71
[  124.799713][ T1044] uclogic 0003:5543:004D.001B: failed retrieving pen parameters: -71
[  124.807789][ T1044] uclogic 0003:5543:004D.001B: failed probing pen v2 parameters: -71
[  124.815927][ T1044] uclogic 0003:5543:004D.001B: failed probing parameters: -71
[  124.823523][ T1044] uclogic 0003:5543:004D.001B: probe with driver uclogic failed with error -71
[  124.838325][ T1044] usb 7-1: USB disconnect, device number 10
[  125.096691][  T525] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[  125.238238][ T2452] random: crng reseeded on system resumption
[  125.256625][  T525] usb 6-1: Invalid ep0 maxpacket: 16
[  125.285419][ T2454] netlink: 'syz.3.728': attribute type 27 has an invalid length.
[  125.296797][ T2454] gretap0: left promiscuous mode
[  125.307899][ T2454] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.315144][ T2454] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.397069][  T525] usb 6-1: new low-speed USB device number 30 using dummy_hcd
[  125.406381][   T36] audit: type=1400 audit(1798683313.629:387): avc:  denied  { ioctl } for  pid=2458 comm="syz.3.730" path="socket:[21732]" dev="sockfs" ino=21732 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  125.555559][  T525] usb 6-1: Invalid ep0 maxpacket: 16
[  125.563404][  T525] usb usb6-port1: attempt power cycle
[  125.570931][ T2477] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  125.570950][ T2477] rust_binder: Read failure Err(EFAULT) in pid:58
[  125.580013][ T2477] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  125.586895][ T2477] rust_binder: Read failure Err(EFAULT) in pid:58
[  125.595625][ T2477] rust_binder: 2476:2477 transaction to 0 failed: ENOENT
[  125.813630][   T36] audit: type=1400 audit(1798683314.004:388): avc:  denied  { create } for  pid=2486 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  125.842640][   T36] audit: type=1400 audit(1798683314.004:389): avc:  denied  { write } for  pid=2486 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  125.928078][  T525] usb 6-1: new low-speed USB device number 31 using dummy_hcd
[  125.949833][  T525] usb 6-1: Invalid ep0 maxpacket: 16
[  126.024001][  T301] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  126.088013][  T525] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[  126.109711][  T525] usb 6-1: Invalid ep0 maxpacket: 16
[  126.115141][  T525] usb usb6-port1: unable to enumerate USB device
[  126.194961][  T301] usb 7-1: Using ep0 maxpacket: 32
[  126.201563][  T301] usb 7-1: unable to get BOS descriptor or descriptor too short
[  126.209959][  T301] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  126.223703][  T301] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  126.234094][  T301] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  126.243221][  T301] usb 7-1: config 128 has no interface number 0
[  126.249551][  T301] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  126.259651][  T301] usb 7-1: config 128 interface 127 has no altsetting 0
[  126.268163][  T301] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  126.277250][  T301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.285413][  T301] usb 7-1: Product: syz
[  126.289577][  T301] usb 7-1: Manufacturer: syz
[  126.294207][  T301] usb 7-1: SerialNumber: syz
[  126.527553][  T301] usb 7-1: USB disconnect, device number 11
[  126.537673][  T598] udevd[598]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  126.695507][  T525] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  126.856892][  T525] usb 4-1: unable to get BOS descriptor or descriptor too short
[  126.865409][  T525] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.875572][  T525] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 66, using maximum allowed: 30
[  126.886563][  T525] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 66
[  126.901276][  T525] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  126.910372][  T525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.918360][  T525] usb 4-1: Product: syz
[  126.922580][  T525] usb 4-1: Manufacturer: syz
[  126.927182][  T525] usb 4-1: SerialNumber: syz
[  127.114940][ T2494] kvm: pic: single mode not supported
[  127.147659][  T525] usb 4-1: bad CDC descriptors
[  127.160740][  T525] usb 4-1: USB disconnect, device number 60
[  127.184787][ T2497] rust_binder: 66: no such ref 0
[  127.473636][  T301] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  127.633464][  T301] usb 7-1: Using ep0 maxpacket: 8
[  127.639662][  T301] usb 7-1: config index 0 descriptor too short (expected 1307, got 27)
[  127.647969][  T301] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  127.656072][  T301] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  127.664947][  T301] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  127.675828][  T301] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  127.694724][  T301] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  127.707548][  T301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.715583][  T301] usb 7-1: Product: syz
[  127.719780][  T301] usb 7-1: Manufacturer: syz
[  127.724368][  T301] usb 7-1: SerialNumber: syz
[  127.730307][  T301] usb 7-1: config 0 descriptor??
[  127.737264][  T301] hub 7-1:0.0: bad descriptor, ignoring hub
[  127.743396][  T301] hub 7-1:0.0: probe with driver hub failed with error -5
[  127.752248][  T301] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input20
[  127.956902][ T2502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1801 sclass=netlink_route_socket pid=2502 comm=syz.6.745
[  127.999822][  T525] usb 7-1: USB disconnect, device number 12
[  128.016477][   T36] audit: type=1400 audit(1798683316.068:390): avc:  denied  { ioctl } for  pid=2513 comm="syz.5.749" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  128.084934][ T2520] kvm: pic: single mode not supported
[  128.107230][   T36] audit: type=1400 audit(1798683316.162:391): avc:  denied  { read } for  pid=2524 comm="syz.6.754" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  128.159745][ T2533] syzkaller1: entered promiscuous mode
[  128.165280][ T2533] syzkaller1: entered allmulticast mode
[  128.174611][   T36] audit: type=1400 audit(1798683316.218:392): avc:  denied  { create } for  pid=2532 comm="syz.6.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  128.453012][ T2552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.763'.
[  128.530923][ T2560] kvm: pic: single mode not supported
[  128.660058][ T2573] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.665709][ T2573] rust_binder: inc_ref_done called when no active inc_refs
[  128.672527][ T2573] rust_binder: 112: no such ref 1
[  128.685711][ T2573] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  128.685731][ T2573] rust_binder: Read failure Err(EFAULT) in pid:112
[  128.694117][ T2573] rust_binder: 2572:2573 transaction to 0 failed: ENOENT
[  128.720959][ T2576] random: crng reseeded on system resumption
[  128.964477][ T2606] bridge: RTM_NEWNEIGH with invalid ether address
[  128.971267][ T2606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2606 comm=syz.4.781
[  128.997629][ T2611] rust_binder: 2603:2611 transaction to 0 failed: ENOENT
[  128.998277][ T2611] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  129.005385][ T2611] rust_binder: Read failure Err(EFAULT) in pid:298
[  129.083442][ T2628] incfs: Backing dir is not set, filesystem can't be mounted.
[  129.097749][ T2628] incfs: mount failed -2
[  129.146999][  T807] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  129.168319][  T525] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  129.318556][  T807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.329505][  T807] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  129.340821][  T807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  129.349877][  T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.350893][  T525] usb 7-1: unable to get BOS descriptor or descriptor too short
[  129.357928][  T807] usb 4-1: Product: syz
[  129.366571][  T525] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  129.369770][  T807] usb 4-1: Manufacturer: syz
[  129.382393][  T525] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  129.385307][  T807] usb 4-1: SerialNumber: syz
[  129.394585][  T525] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.400478][  T807] cdc_mbim 4-1:1.0: skipping garbage
[  129.412348][  T525] usb 7-1: Product: syz
[  129.416551][  T525] usb 7-1: Manufacturer: syz
[  129.421248][  T525] usb 7-1: SerialNumber: syz
[  129.614415][ T2599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.644800][ T2601] x_tables: duplicate underflow at hook 2
[  129.653226][  T525] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2
[  129.663099][  T525] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2
[  129.674889][  T525] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2
[  129.686164][  T525] usb 7-1: USB disconnect, device number 13
[  129.697502][  T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  129.780464][   T36] audit: type=1326 audit(1798683317.728:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.4.794" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0f0b9ce59 code=0x0
[  129.835106][ T2645] netlink: 'syz.4.794': attribute type 7 has an invalid length.
[  130.263091][ T2599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  130.271863][  T807] cdc_mbim 4-1:1.0: setting tx_max = 184
[  130.278056][  T807] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  130.284736][  T807] wwan wwan0: port wwan0mbim0 attached
[  130.292605][  T807] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, da:da:74:f4:5b:5d
[  130.424090][  T150] 8021q: adding VLAN 0 to HW filter on device wwan0
[  130.503163][  T807] usb 4-1: USB disconnect, device number 61
[  130.510874][  T807] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  130.574555][  T807] wwan wwan0: port wwan0mbim0 disconnected
[  131.052772][ T2703] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  131.052788][ T2703] rust_binder: Read failure Err(EFAULT) in pid:530
[  131.061696][ T2703] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  131.068419][ T2703] rust_binder: Read failure Err(EFAULT) in pid:530
[  131.076736][ T2703] rust_binder: 2702:2703 transaction to 0 failed: ENOENT
[  131.163920][ T2709] kvm: pic: single mode not supported
[  131.180053][   T36] audit: type=1400 audit(1798683319.042:394): avc:  denied  { attach_queue } for  pid=2713 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  131.244561][ T2721] fuse: Bad value for 'fd'
[  131.249076][   T36] audit: type=1400 audit(1798683319.098:395): avc:  denied  { mounton } for  pid=2720 comm="syz.4.809" path="/195/file0" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  131.258205][ T2723] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  131.272012][ T2723] rust_binder: Read failure Err(EFAULT) in pid:145
[  131.284613][ T2723] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  131.291138][ T2723] rust_binder: Read failure Err(EFAULT) in pid:145
[  131.299428][ T2723] rust_binder: 2722:2723 transaction to 0 failed: ENOENT
[  131.438650][  T318] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  131.566542][  T525] usb 7-1: new low-speed USB device number 14 using dummy_hcd
[  131.610156][  T318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  131.619942][  T318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  131.631149][  T318] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  131.640182][  T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.648189][  T318] usb 4-1: Product: syz
[  131.662482][  T318] usb 4-1: Manufacturer: syz
[  131.667095][  T318] usb 4-1: SerialNumber: syz
[  131.672757][  T318] usb 4-1: config 0 descriptor??
[  131.679886][ T2714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.687050][ T2714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.748745][  T525] usb 7-1: config index 0 descriptor too short (expected 1307, got 27)
[  131.757036][  T525] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  131.765131][  T525] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  131.774048][  T525] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  131.784865][  T525] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  131.795825][  T525] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8
[  131.806458][  T525] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  131.826130][  T525] usb 7-1: string descriptor 0 read error: -22
[  131.832491][  T525] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  131.851746][  T525] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.872993][  T525] usb 7-1: config 0 descriptor??
[  131.882551][ T2725] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  131.891841][  T525] hub 7-1:0.0: bad descriptor, ignoring hub
[  131.897847][  T525] hub 7-1:0.0: probe with driver hub failed with error -5
[  131.912662][  T525] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21
[  131.924083][ T2714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.935891][ T2714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  132.104019][ T2725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.112545][ T2725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.122022][ T2725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.130423][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.131069][ T2725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.139013][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.158365][  T525] usb 7-1: USB disconnect, device number 14
[  132.371064][  T318] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  132.464070][ T2760] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  132.464106][ T2760] rust_binder: Read failure Err(EFAULT) in pid:317
[  132.472693][ T2760] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  132.479208][ T2760] rust_binder: Read failure Err(EFAULT) in pid:317
[  132.487503][ T2760] rust_binder: 2759:2760 transaction to 0 failed: ENOENT
[  132.503052][   T36] audit: type=1400 audit(1798683320.280:396): avc:  denied  { nlmsg_read } for  pid=2762 comm="syz.5.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  132.530815][  T525] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  132.538592][   T36] audit: type=1400 audit(1798683320.290:397): avc:  denied  { execute } for  pid=2766 comm="syz.5.822" name="file1" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  132.569361][ T2771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2771 comm=syz.5.824
[  132.581992][ T2771] netlink: 32 bytes leftover after parsing attributes in process `syz.5.824'.
[  132.592700][  T318] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  132.603749][  T318] usb 4-1: USB disconnect, device number 62
[  132.718743][  T525] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  132.732420][  T525] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.741553][  T525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  132.749754][  T525] usb 7-1: SerialNumber: syz
[  133.058749][  T488] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  133.184679][ T2751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.193606][ T2751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.218627][  T488] usb 6-1: Using ep0 maxpacket: 16
[  133.224866][  T488] usb 6-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[  133.234060][  T488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.242777][  T488] usb 6-1: config 0 descriptor??
[  133.369419][ T2783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'.
[  133.391537][   T36] audit: type=1400 audit(1798683321.115:398): avc:  denied  { cmd } for  pid=2784 comm="syz.4.829" path="socket:[23249]" dev="sockfs" ino=23249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  133.418165][  T525] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42
[  133.453847][  T318] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  133.467244][ T2790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.478769][ T2790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.636317][ T2781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.644836][ T2781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.680712][  T488] usbhid 6-1:0.0: can't add hid device: -71
[  133.688211][  T488] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  133.701809][  T488] usb 6-1: USB disconnect, device number 33
[  133.843484][  T318] usb 4-1: unable to get BOS descriptor or descriptor too short
[  133.854875][  T301] usb 7-1: USB disconnect, device number 15
[  133.856023][  T318] usb 4-1: unable to read config index 0 descriptor/start: -71
[  133.861468][  T301] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device
[  133.868459][  T318] usb 4-1: can't read configurations, error -71
[  134.256805][ T2837] random: crng reseeded on system resumption
[  134.397473][ T2848] overlayfs: failed to resolve './file2': -2
[  134.418295][   T36] audit: type=1400 audit(1798683322.082:399): avc:  denied  { create } for  pid=2851 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  134.469179][  T404] Bluetooth: hci0: Frame reassembly failed (-84)
[  135.009300][  T318] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  135.131163][ T2871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=2871 comm=syz.4.845
[  135.170191][  T318] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  135.178340][  T318] usb 4-1: config 2 has no interface number 0
[  135.184479][  T318] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64
[  135.195338][  T318] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  135.206774][  T318] usb 4-1: config 2 interface 88 has no altsetting 0
[  135.216741][  T318] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  135.225889][  T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.234205][  T318] usb 4-1: Product: syz
[  135.238437][  T318] usb 4-1: Manufacturer: syz
[  135.243060][  T318] usb 4-1: SerialNumber: syz
[  135.250896][ T2857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.258269][ T2857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.339715][  T488] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  135.489584][ T2857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.496809][ T2857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.521060][  T488] usb 7-1: Using ep0 maxpacket: 32
[  135.527475][  T488] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  135.535638][  T488] usb 7-1: config 0 has no interface number 0
[  135.543358][  T488] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  135.552763][  T488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.561139][  T488] usb 7-1: Product: syz
[  135.565515][  T488] usb 7-1: Manufacturer: syz
[  135.570359][  T488] usb 7-1: SerialNumber: syz
[  135.579436][  T488] usb 7-1: config 0 descriptor??
[  135.587584][  T488] smsc95xx v2.0.0
[  135.806166][  T488] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  135.817047][  T488] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  135.826575][  T488] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  135.837701][  T488] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  135.847007][  T488] usb 7-1: USB disconnect, device number 16
[  135.947704][ T2893] SELinux:  Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped).
[  136.232691][ T2896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'.
[  136.309656][  T488] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  136.470945][  T488] usb 7-1: unable to get BOS descriptor or descriptor too short
[  136.479016][  T488] usb 7-1: not running at top speed; connect to a high speed hub
[  136.487476][  T488] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  136.499885][  T488] usb 7-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40
[  136.508963][  T488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.516968][  T488] usb 7-1: Product: syz
[  136.521110][  T488] usb 7-1: Manufacturer: syz
[  136.525740][  T488] usb 7-1: SerialNumber: syz
[  136.682751][  T329] Bluetooth: hci0: command 0x1003 tx timeout
[  136.683053][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  136.729824][ T2898] kvm: pic: single mode not supported
[  136.745809][ T2901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.759998][ T2901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.773344][  T488] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  136.781143][  T488] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  136.789796][ T2903] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  136.798975][  T488] usb 7-1: 2:1: All rates were zero
[  136.808809][ T2907] netlink: 288 bytes leftover after parsing attributes in process `syz.4.857'.
[  136.814533][  T488] usb 7-1: USB disconnect, device number 17
[  136.854809][   T36] audit: type=1400 audit(1798683324.371:400): avc:  denied  { name_bind } for  pid=2916 comm="syz.5.860" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  136.932250][ T2930] kvm: pic: single mode not supported
[  137.664287][  T318] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  137.680566][  T318] asix 4-1:2.88: probe with driver asix failed with error -71
[  137.689845][  T318] usb 4-1: USB disconnect, device number 64
[  145.915254][ T2962] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  145.915278][ T2962] rust_binder: Read failure Err(EFAULT) in pid:550
[  145.924338][ T2962] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  145.931641][ T2962] rust_binder: Read failure Err(EFAULT) in pid:550
[  146.105003][  T525] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  146.200971][   T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  146.276613][  T525] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  146.287607][  T525] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.297360][  T525] usb 6-1: config 0 interface 0 has no altsetting 0
[  146.303951][  T525] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  146.312997][  T525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.321463][  T525] usb 6-1: config 0 descriptor??
[  146.360795][   T10] usb 4-1: Using ep0 maxpacket: 8
[  146.366874][   T10] usb 4-1: config 3 has an invalid interface number: 45 but max is 0
[  146.375151][   T10] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  146.385261][   T10] usb 4-1: config 3 has no interface number 0
[  146.391347][   T10] usb 4-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7
[  146.402208][   T10] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.415286][   T10] usb 4-1: config 3 interface 45 has no altsetting 0
[  146.424905][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  146.433953][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.441951][   T10] usb 4-1: Product: syz
[  146.446132][   T10] usb 4-1: Manufacturer: syz
[  146.450723][   T10] usb 4-1: SerialNumber: syz
[  146.528355][ T2972] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.879' resets device
[  146.538249][   T36] audit: type=1400 audit(1798683333.453:401): avc:  denied  { mounton } for  pid=2971 comm="syz.6.879" path="/63/file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  146.547311][ T2972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.879'.
[  146.570281][ T2956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.579228][ T2956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.727836][  T525] hid-steam 0003:28DE:1102.001C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0
[  146.797837][  T525] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' connected
[  146.808007][  T525] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.001C/input/input22
[  146.831910][  T525] hid-steam 0003:28DE:1102.001D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0
[  146.883088][  T916] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  146.941088][ T1044] usb 6-1: USB disconnect, device number 34
[  146.960521][ T1044] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' disconnected
[  147.034620][ T2985] overlayfs: failed to clone upperpath
[  147.044036][  T916] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  147.065802][  T916] usb 7-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40
[  147.074883][  T916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.083194][  T916] usb 7-1: Product: syz
[  147.087489][  T916] usb 7-1: Manufacturer: syz
[  147.092130][  T916] usb 7-1: SerialNumber: syz
[  147.495373][ T2987] netlink: 'syz.5.883': attribute type 20 has an invalid length.
[  147.749139][   T36] audit: type=1400 audit(1798683334.588:402): avc:  denied  { bind } for  pid=3000 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  147.773699][ T1044] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  147.938300][ T1044] usb 6-1: Using ep0 maxpacket: 32
[  147.951334][ T1044] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11
[  147.974002][ T1044] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  148.002234][ T1044] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.024750][ T1044] usb 6-1: config 0 interface 0 has no altsetting 0
[  148.042792][ T1044] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  148.062552][ T1044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.082265][ T1044] usb 6-1: config 0 descriptor??
[  148.087552][ T2989] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  148.739411][ T2989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.759195][ T2989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.790001][ T1044] usbhid 6-1:0.0: can't add hid device: -71
[  148.801732][ T1044] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  148.810500][ T1044] usb 6-1: USB disconnect, device number 35
[  148.904247][ T3029] netlink: 188 bytes leftover after parsing attributes in process `syz.5.894'.
[  149.213316][   T10] usb 4-1: USB disconnect, device number 65
[  149.232213][ T3010] udevd[3010]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  149.264624][ T3044] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  149.264646][ T3044] rust_binder: Read failure Err(EFAULT) in pid:556
[  149.275337][ T3044] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  149.285015][ T3044] rust_binder: Read failure Err(EFAULT) in pid:556
[  149.407134][   T36] audit: type=1400 audit(1798683336.136:403): avc:  denied  { getopt } for  pid=3046 comm="syz.3.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  149.547451][   T36] audit: type=1400 audit(1798683336.267:404): avc:  denied  { getopt } for  pid=3059 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  149.559065][ T3060] overlayfs: failed to clone upperpath
[  149.582261][ T3056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2421 sclass=netlink_route_socket pid=3056 comm=syz.5.902
[  149.595118][ T3056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3056 comm=syz.5.902
[  149.595673][ T3063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'.
[  149.651272][ T3067] overlayfs: failed to clone upperpath
[  149.682840][ T3070] fuse: Bad value for 'user_id'
[  149.687836][ T3070] fuse: Bad value for 'user_id'
[  149.845717][  T916] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  149.852854][  T916] usb 7-1: unit 4 not found!
[  149.857657][  T916] usb 7-1: unit 8 not found!
[  149.865379][  T916] usb 7-1: USB disconnect, device number 18
[  149.893564][ T3010] udevd[3010]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  150.529364][ T1044] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  150.614108][ T3108] tipc: Enabling of bearer <edp:syz2> rejected, media not registered
[  150.688240][ T1044] usb 4-1: Using ep0 maxpacket: 16
[  150.694390][ T1044] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  150.703552][  T488] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  150.711141][ T1044] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.719867][ T1044] usb 4-1: config 0 descriptor??
[  150.820128][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'.
[  150.869506][ T1054] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  150.881456][  T488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.882687][   T36] audit: type=1326 audit(1798683337.524:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3111 comm="syz.4.924" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0f0b9ce59 code=0x0
[  150.892439][  T488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.926751][  T488] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  150.935840][  T488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.937671][   T36] audit: type=1326 audit(1798683337.581:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3111 comm="syz.4.924" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f0b9ce59 code=0x7ffc0000
[  150.956350][  T488] usb 6-1: config 0 descriptor??
[  150.971936][   T36] audit: type=1326 audit(1798683337.581:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3111 comm="syz.4.924" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f0b9ce59 code=0x7ffc0000
[  150.999053][   T36] audit: type=1326 audit(1798683337.581:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3111 comm="syz.4.924" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f0b9ce59 code=0x7ffc0000
[  151.024959][   T36] audit: type=1326 audit(1798683337.581:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3111 comm="syz.4.924" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f0b9ce59 code=0x7ffc0000
[  151.029400][ T1054] usb 7-1: Using ep0 maxpacket: 8
[  151.050155][   T36] audit: type=1326 audit(1798683337.581:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3111 comm="syz.4.924" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f0b9ce59 code=0x7ffc0000
[  151.057051][ T1054] usb 7-1: unable to get BOS descriptor or descriptor too short
[  151.088657][ T1054] usb 7-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config
[  151.099155][ T1054] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  151.108073][ T1054] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  151.122274][ T1054] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.131373][ T1054] usb 7-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3
[  151.139561][ T1054] usb 7-1: Product: syz
[  151.143713][ T1054] usb 7-1: Manufacturer: syz
[  151.148318][ T1054] usb 7-1: SerialNumber: syz
[  151.170244][ T1044] elecom 0003:056E:011C.001E: unknown main item tag 0x7
[  151.177260][ T1044] elecom 0003:056E:011C.001E: unknown global tag 0xd
[  151.183980][ T1044] elecom 0003:056E:011C.001E: item 0 0 1 13 parsing failed
[  151.191457][ T1044] elecom 0003:056E:011C.001E: probe with driver elecom failed with error -22
[  151.369161][ T1054] cdc_ncm 7-1:1.0: invalid descriptor buffer length
[  151.375832][ T1054] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  151.382621][ T1054] cdc_ncm 7-1:1.0: bind() failure
[  151.390647][ T1054] usb 7-1: USB disconnect, device number 19
[  151.416144][ T3101] hub 9-0:1.0: USB hub found
[  151.420849][ T3101] hub 9-0:1.0: 1 port detected
[  151.427974][  T488] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  151.435154][  T488] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  151.442122][  T488] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  151.449106][  T488] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  151.456097][  T488] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  151.463036][  T488] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  151.470019][  T488] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  151.479094][  T488] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  151.640496][  T488] cp2112 0003:10C4:EA90.001F: Part Number: 0x00 Device Version: 0x8B
[  151.694556][  T525] usb 4-1: USB disconnect, device number 66
[  152.052589][  T525] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  152.087382][  T488] cp2112 0003:10C4:EA90.001F: error setting SMBus config
[  152.094930][  T488] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -71
[  152.109865][  T488] usb 6-1: USB disconnect, device number 36
[  152.180482][   T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  152.213810][  T525] usb 4-1: unable to get BOS descriptor or descriptor too short
[  152.221828][  T525] usb 4-1: not running at top speed; connect to a high speed hub
[  152.230265][  T525] usb 4-1: config 74 has an invalid interface number: 193 but max is 0
[  152.238537][  T525] usb 4-1: config 74 has an invalid interface number: 244 but max is 0
[  152.246802][  T525] usb 4-1: config 74 has 2 interfaces, different from the descriptor's value: 1
[  152.255937][  T525] usb 4-1: config 74 has no interface number 0
[  152.262091][  T525] usb 4-1: config 74 has no interface number 1
[  152.268379][  T525] usb 4-1: config 74 interface 193 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  152.279445][  T525] usb 4-1: config 74 interface 193 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64
[  152.290434][  T525] usb 4-1: config 74 interface 193 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  152.303563][  T525] usb 4-1: too many endpoints for config 74 interface 244 altsetting 55: 72, using maximum allowed: 30
[  152.314950][  T525] usb 4-1: config 74 interface 244 altsetting 55 has an invalid descriptor for endpoint zero, skipping
[  152.326128][  T525] usb 4-1: config 74 interface 244 altsetting 55 has an invalid descriptor for endpoint zero, skipping
[  152.337257][  T525] usb 4-1: config 74 interface 244 altsetting 55 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  152.348738][  T525] usb 4-1: config 74 interface 244 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 72
[  152.362431][   T10] usb 7-1: Using ep0 maxpacket: 16
[  152.368531][  T525] usb 4-1: config 74 interface 193 has no altsetting 0
[  152.376004][  T525] usb 4-1: config 74 interface 244 has no altsetting 0
[  152.383818][   T10] usb 7-1: config 184 has an invalid interface number: 19 but max is 0
[  152.392157][   T10] usb 7-1: config 184 has no interface number 0
[  152.398580][   T10] usb 7-1: config 184 interface 19 altsetting 6 bulk endpoint 0xB has invalid maxpacket 8
[  152.408585][   T10] usb 7-1: config 184 interface 19 altsetting 6 bulk endpoint 0xE has invalid maxpacket 1024
[  152.418865][  T525] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=d3.89
[  152.428064][   T10] usb 7-1: config 184 interface 19 has no altsetting 0
[  152.435207][  T525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.443307][  T525] usb 4-1: Product: syz
[  152.447529][  T525] usb 4-1: Manufacturer: syz
[  152.452125][  T525] usb 4-1: SerialNumber: syz
[  152.457653][  T525] usb 4-1: Interface #244 referenced by multiple IADs
[  152.465322][ T3119] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  152.472513][   T10] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01dd, bcdDevice=c4.6b
[  152.481582][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.489865][   T10] usb 7-1: Product: syz
[  152.494053][   T10] usb 7-1: Manufacturer: syz
[  152.498636][   T10] usb 7-1: SerialNumber: syz
[  152.504238][ T3125] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  152.511494][ T3125] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  152.680651][ T3152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.689242][ T3152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.701062][  T525] rndis_host 4-1:74.193: skipping garbage
[  152.706877][  T525] usb 4-1: bad CDC descriptors
[  152.711950][  T525] cdc_acm 4-1:74.193: skipping garbage
[  152.720439][  T525] usb 4-1: USB disconnect, device number 67
[  152.733429][   T10] ftdi_sio 7-1:184.19: FTDI USB Serial Device converter detected
[  152.741614][   T10] ftdi_sio ttyUSB0: unknown device type: 0xc46b
[  152.750011][   T10] usb 7-1: USB disconnect, device number 20
[  152.760060][   T10] ftdi_sio 7-1:184.19: device disconnected
[  152.792550][   T36] kauditd_printk_skb: 593 callbacks suppressed
[  152.792568][   T36] audit: type=1400 audit(1798683339.316:1004): avc:  denied  { search } for  pid=3160 comm="syz.5.940" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  152.824149][   T36] audit: type=1400 audit(1798683339.316:1005): avc:  denied  { read } for  pid=3160 comm="syz.5.940" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  152.846363][   T36] audit: type=1400 audit(1798683339.316:1006): avc:  denied  { open } for  pid=3160 comm="syz.5.940" path="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  152.926655][ T1054] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  152.981539][   T36] audit: type=1400 audit(1798683339.495:1007): avc:  denied  { getopt } for  pid=3167 comm="syz.5.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  153.007219][   T36] audit: type=1326 audit(1798683339.513:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3169 comm="syz.5.944" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88e99ce59 code=0x7ffc0000
[  153.032631][   T36] audit: type=1326 audit(1798683339.513:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3169 comm="syz.5.944" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fb88e99ce59 code=0x7ffc0000
[  153.040722][ T3175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.058061][   T36] audit: type=1326 audit(1798683339.513:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3169 comm="syz.5.944" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88e99ce59 code=0x7ffc0000
[  153.067425][ T3175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.093621][   T36] audit: type=1326 audit(1798683339.513:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3169 comm="syz.5.944" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88e99ce59 code=0x7ffc0000
[  153.124446][   T36] audit: type=1326 audit(1798683339.523:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3169 comm="syz.5.944" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fb88e99ce59 code=0x7ffc0000
[  153.149744][   T36] audit: type=1326 audit(1798683339.523:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3169 comm="syz.5.944" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88e99ce59 code=0x7ffc0000
[  153.651042][ T3206] 9pnet_fd: p9_fd_create_tcp (3206): problem connecting socket to 127.0.0.1
[  153.662306][   T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  153.811242][   T10] usb 7-1: device descriptor read/64, error -71
[  154.067063][   T10] usb 7-1: device descriptor read/64, error -71
[  154.334435][   T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  154.349343][ T3225] FAULT_INJECTION: forcing a failure.
[  154.349343][ T3225] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.362765][ T3225] CPU: 1 UID: 0 PID: 3225 Comm: syz.3.959 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[  154.362795][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  154.362807][ T3225] Call Trace:
[  154.362814][ T3225]  <TASK>
[  154.362823][ T3225]  __dump_stack+0x21/0x30
[  154.362855][ T3225]  dump_stack_lvl+0x140/0x1c0
[  154.362880][ T3225]  ? __cfi_dump_stack_lvl+0x10/0x10
[  154.362905][ T3225]  ? check_stack_object+0x12b/0x150
[  154.362926][ T3225]  dump_stack+0x19/0x20
[  154.362949][ T3225]  should_fail_ex+0x3d7/0x530
[  154.362980][ T3225]  should_fail+0xf/0x20
[  154.362999][ T3225]  should_fail_usercopy+0x1e/0x30
[  154.363022][ T3225]  _copy_to_user+0x24/0xa0
[  154.363038][ T3225]  simple_read_from_buffer+0xed/0x160
[  154.363062][ T3225]  proc_fail_nth_read+0x1aa/0x220
[  154.363089][ T3225]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  154.363114][ T3225]  ? bpf_lsm_file_permission+0xd/0x20
[  154.363138][ T3225]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  154.363164][ T3225]  vfs_read+0x289/0xcb0
[  154.363182][ T3225]  ? do_writev+0x2e0/0x2e0
[  154.363206][ T3225]  ? __cfi_vfs_read+0x10/0x10
[  154.363224][ T3225]  ? __kasan_check_write+0x18/0x20
[  154.363244][ T3225]  ? mutex_lock+0x97/0x1d0
[  154.363263][ T3225]  ? __cfi_mutex_lock+0x10/0x10
[  154.363282][ T3225]  ? __fget_files+0x2c5/0x340
[  154.363305][ T3225]  ksys_read+0x145/0x260
[  154.363323][ T3225]  ? fput+0x1a4/0x240
[  154.363346][ T3225]  ? __cfi_ksys_read+0x10/0x10
[  154.363364][ T3225]  ? __x64_sys_pwritev+0x1e4/0x2c0
[  154.363386][ T3225]  ? __kasan_check_read+0x15/0x20
[  154.363405][ T3225]  __x64_sys_read+0x7f/0x90
[  154.363425][ T3225]  x64_sys_call+0x2638/0x2ee0
[  154.363443][ T3225]  do_syscall_64+0x57/0xf0
[  154.363466][ T3225]  ? clear_bhb_loop+0x50/0xa0
[  154.363486][ T3225]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  154.363514][ T3225] RIP: 0033:0x7f0ea335d68e
[  154.363529][ T3225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  154.363545][ T3225] RSP: 002b:00007f0ea4211fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  154.363566][ T3225] RAX: ffffffffffffffda RBX: 00007f0ea42126c0 RCX: 00007f0ea335d68e
[  154.363582][ T3225] RDX: 000000000000000f RSI: 00007f0ea42120a0 RDI: 0000000000000004
[  154.363594][ T3225] RBP: 00007f0ea4212090 R08: 0000000000000000 R09: 0000000000000000
[  154.363605][ T3225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.363617][ T3225] R13: 00007f0ea3616038 R14: 00007f0ea3615fa0 R15: 00007ffe26ab2758
[  154.363635][ T3225]  </TASK>
[  154.568087][   T10] usb 7-1: device descriptor read/64, error -71
[  154.638206][ T3242] netlink: 'syz.4.966': attribute type 10 has an invalid length.
[  154.845162][ T1044] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  154.887778][   T10] usb 7-1: device descriptor read/64, error -71
[  155.005096][   T10] usb usb7-port1: attempt power cycle
[  155.006121][ T1044] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  155.022092][ T1044] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  155.033034][ T1044] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  155.042849][ T1044] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  155.055751][ T1044] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  155.064824][ T1044] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.073851][ T1044] usb 4-1: config 0 descriptor??
[  155.367443][   T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  155.389752][   T10] usb 7-1: device descriptor read/8, error -71
[  155.508061][ T1044] plantronics 0003:047F:FFFF.0020: ignoring exceeding usage max
[  155.517342][ T1044] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving
[  155.526238][ T1044] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  155.549979][   T10] usb 7-1: device descriptor read/8, error -71
[  155.815089][   T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  155.837550][   T10] usb 7-1: device descriptor read/8, error -71
[  155.975980][   T10] usb 7-1: device descriptor read/8, error -71
[  156.092292][   T10] usb usb7-port1: unable to enumerate USB device
[  156.118687][ T3264] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  156.118711][ T3264] rust_binder: Read failure Err(EFAULT) in pid:456
[  156.127698][ T3264] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  156.134219][ T3264] rust_binder: Read failure Err(EFAULT) in pid:456
[  156.348447][ T3284] SELinux:  Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped).
[  156.377172][ T3286] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  156.377194][ T3286] rust_binder: Read failure Err(EFAULT) in pid:478
[  156.386260][ T3286] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  156.392796][ T3286] rust_binder: Read failure Err(EFAULT) in pid:478
[  156.477506][ T3291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.493027][ T3291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.629294][ T3293] overlayfs: missing 'lowerdir'
[  157.040859][ T1044] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  157.179402][ T1044] usb 7-1: device descriptor read/64, error -71
[  157.435247][ T1044] usb 7-1: device descriptor read/64, error -71
[  157.469002][ T3315] overlayfs: missing 'lowerdir'
[  157.701696][ T1044] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  157.797650][  T488] usb 4-1: reset high-speed USB device number 68 using dummy_hcd
[  157.840252][ T1044] usb 7-1: device descriptor read/64, error -71
[  157.957903][  T488] usb 4-1: device firmware changed
[  157.963233][   T10] usb 4-1: USB disconnect, device number 68
[  158.106703][   T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  158.106703][ T1044] usb 7-1: device descriptor read/64, error -71
[  158.234732][ T1044] usb usb7-port1: attempt power cycle
[  158.267701][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.278711][   T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  158.287752][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.296625][   T10] usb 4-1: config 0 descriptor??
[  158.479770][ T1054] usb 6-1: device descriptor read/64, error -110
[  158.516535][ T3319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.525117][ T3319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.597068][ T1044] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  158.619400][ T1044] usb 7-1: device descriptor read/8, error -71
[  158.735577][ T1054] usb 6-1: device descriptor read/64, error -32
[  158.754127][   T10] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor
[  158.763566][ T1044] usb 7-1: device descriptor read/8, error -71
[  158.767579][   T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0021/input/input23
[  158.849859][   T10] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  159.012707][ T1054] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  159.023350][ T1044] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  159.045795][ T1044] usb 7-1: device descriptor read/8, error -71
[  159.151265][ T1054] usb 6-1: device descriptor read/64, error -32
[  159.184694][ T1044] usb 7-1: device descriptor read/8, error -71
[  159.300579][ T1044] usb usb7-port1: unable to enumerate USB device
[  159.407057][ T1054] usb 6-1: device descriptor read/64, error -32
[  159.524452][ T1054] usb usb6-port1: attempt power cycle
[  159.530041][ T1054] raw-gadget.1 gadget.5: failed to queue reset event
[  159.609612][ T1054] raw-gadget.1 gadget.5: failed to queue resume event
[  159.616629][ T1054] raw-gadget.1 gadget.5: failed to queue reset event
[  159.648071][ T3326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.657412][ T3326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.828932][   T36] kauditd_printk_skb: 14 callbacks suppressed
[  159.828951][   T36] audit: type=1400 audit(1798683345.921:1028): avc:  denied  { link } for  pid=3328 comm="syz.3.1000" name="#15" dev="tmpfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  159.838858][ T3329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.857784][   T36] audit: type=1400 audit(1798683345.921:1029): avc:  denied  { rename } for  pid=3328 comm="syz.3.1000" name="#16" dev="tmpfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  159.866159][ T1054] raw-gadget.1 gadget.5: failed to queue resume event
[  159.889416][ T3329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.950661][ T1054] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  159.972133][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  159.979379][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  159.986680][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  159.993780][ T1054] usb 6-1: device descriptor read/8, error -32
[  160.132029][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.139293][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.146552][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.153664][ T1054] usb 6-1: device descriptor read/8, error -32
[  160.270452][ T1054] raw-gadget.1 gadget.5: failed to queue suspend event
[  160.277517][ T1054] raw-gadget.1 gadget.5: failed to queue reset event
[  160.313117][   T10] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[  160.330120][   T36] audit: type=1400 audit(1798683346.390:1030): avc:  denied  { watch_reads } for  pid=3343 comm="syz.5.1006" path="/179" dev="tmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  160.355820][ T1054] raw-gadget.1 gadget.5: failed to queue resume event
[  160.363775][ T3349] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  160.363796][ T3349] rust_binder: Read failure Err(EFAULT) in pid:499
[  160.372167][ T3349] rust_binder: 3348:3349 transaction to 0 failed: ENOENT
[  160.388224][ T3351] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1008'.
[  160.407460][ T3351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'.
[  160.416406][ T3351] bridge_slave_1: left allmulticast mode
[  160.422083][ T3351] bridge_slave_1: left promiscuous mode
[  160.427693][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.430295][ T1054] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  160.442501][ T3351] bridge_slave_0: left allmulticast mode
[  160.448251][ T3351] bridge_slave_0: left promiscuous mode
[  160.454012][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.462550][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.469858][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.477374][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.484652][ T1054] usb 6-1: device descriptor read/8, error -32
[  160.486705][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  160.501816][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  160.513385][   T10] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  160.526330][   T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  160.538554][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  160.547610][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.555597][   T10] usb 7-1: Product: syz
[  160.559813][   T10] usb 7-1: Manufacturer: syz
[  160.564423][   T10] usb 7-1: SerialNumber: syz
[  160.576196][ T3336] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  160.622309][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.629596][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.636862][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  160.645434][ T1054] usb 6-1: device descriptor read/8, error -32
[  160.760764][ T1054] raw-gadget.1 gadget.5: failed to queue suspend event
[  160.767741][ T1054] usb usb6-port1: unable to enumerate USB device
[  160.805088][ T3336] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  160.812836][ T3363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.821411][ T3363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.149369][ T3366] overlayfs: missing 'lowerdir'
[  161.163532][ T3368] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1015'.
[  161.167458][ T3369] ptm ptm11: ldisc open failed (-12), clearing slot 11
[  161.190344][ T3373] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  161.190367][ T3373] rust_binder: Read failure Err(EFAULT) in pid:511
[  161.198778][ T3373] rust_binder: 3372:3373 transaction to 0 failed: ENOENT
[  161.247648][   T10] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS
[  161.260744][   T10] cdc_ncm 7-1:1.0: bind() failure
[  161.266689][   T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  161.273505][   T10] cdc_ncm 7-1:1.1: bind() failure
[  161.328144][ T3375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.336698][ T3375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.380425][ T3383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.388957][ T3383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.625566][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.634275][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.963927][ T3391] overlayfs: missing 'lowerdir'
[  161.996831][ T3395] sit0: entered promiscuous mode
[  162.004196][ T3397] netlink: 744 bytes leftover after parsing attributes in process `syz.3.1024'.
[  162.005206][ T3395] netlink: 'syz.5.1025': attribute type 1 has an invalid length.
[  162.021890][   T36] audit: type=1400 audit(1798683347.976:1031): avc:  denied  { create } for  pid=3392 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  162.022029][ T3395] netlink: 'syz.5.1025': attribute type 3 has an invalid length.
[  162.049807][ T3398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.058862][ T3398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.118545][ T3400] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  162.118569][ T3400] rust_binder: Read failure Err(EFAULT) in pid:618
[  162.127096][ T3400] rust_binder: 3399:3400 transaction to 0 failed: ENOENT
[  162.150455][ T3403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.166179][ T3403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.625413][ T3408] fuse: Unknown parameter '0000000000000000000500000000000000000000011'
[  162.635613][ T3408] overlayfs: failed to resolve './file0/file2': -2
[  162.877345][ T3426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'.
[  162.888028][ T3426] random: crng reseeded on system resumption
[  162.935417][ T3431] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  162.935443][ T3431] rust_binder: Read failure Err(EFAULT) in pid:544
[  162.944943][ T3431] rust_binder: 3430:3431 transaction to 0 failed: ENOENT
[  162.972715][   T36] audit: type=1400 audit(1798683348.867:1032): avc:  denied  { shutdown } for  pid=3435 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  163.004010][   T36] audit: type=1400 audit(1798683348.895:1033): avc:  denied  { getopt } for  pid=3440 comm="syz.5.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  163.026777][ T3441] syzkaller1: entered promiscuous mode
[  163.032395][ T3441] syzkaller1: entered allmulticast mode
[  163.117321][ T3459] random: crng reseeded on system resumption
[  163.164583][ T3470] 9pnet_fd: Insufficient options for proto=fd
[  163.249538][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.264145][ T3488] bridge0: port 3(veth0_to_bridge) entered blocking state
[  163.266612][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.271440][ T3488] bridge0: port 3(veth0_to_bridge) entered disabled state
[  163.286343][ T3488] veth0_to_bridge: entered allmulticast mode
[  163.292781][ T3488] veth0_to_bridge: entered promiscuous mode
[  163.299045][ T3488] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  163.311358][ T3488] bridge0: port 3(veth0_to_bridge) entered blocking state
[  163.318475][ T3488] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  163.326334][  T916] usb 7-1: USB disconnect, device number 29
[  163.364382][ T3496] netlink: 'syz.6.1064': attribute type 27 has an invalid length.
[  163.375448][ T3500] random: crng reseeded on system resumption
[  163.389495][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'.
[  163.399165][ T3504] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  163.399188][ T3504] rust_binder: Read failure Err(EFAULT) in pid:235
[  163.415483][ T3504] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  163.428781][ T3504] rust_binder: Read failure Err(EFAULT) in pid:235
[  163.459079][ T3507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.478353][ T3507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.684156][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.692762][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.924327][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.933015][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.083857][   T36] audit: type=1400 audit(1798683349.909:1034): avc:  denied  { remove_name } for  pid=3520 comm="syz.3.1075" name="bus" dev="incremental-fs" ino=1350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  164.115699][   T36] audit: type=1400 audit(1798683349.909:1035): avc:  denied  { rename } for  pid=3520 comm="syz.3.1075" name="bus" dev="incremental-fs" ino=1350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  164.139263][   T36] audit: type=1400 audit(1798683349.909:1036): avc:  denied  { add_name } for  pid=3520 comm="syz.3.1075" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  164.153357][ T3524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.169018][ T3524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.207900][ T3534] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  164.216854][ T3534] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  164.397110][ T3524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.408194][ T3524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.747075][  T488] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  164.907012][  T488] usb 7-1: Using ep0 maxpacket: 16
[  164.913242][  T488] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.923404][  T488] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.934305][  T488] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.943387][  T488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.951403][  T488] usb 7-1: Product: syz
[  164.955557][  T488] usb 7-1: Manufacturer: syz
[  164.960138][  T488] usb 7-1: SerialNumber: syz
[  165.021618][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'.
[  165.129668][ T3561] overlayfs: missing 'lowerdir'
[  165.167780][ T3563] random: crng reseeded on system resumption
[  165.196740][   T36] audit: type=1400 audit(1798683350.960:1037): avc:  denied  { create } for  pid=3562 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  165.221502][   T36] audit: type=1400 audit(1798683350.978:1038): avc:  denied  { create } for  pid=3562 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  165.313863][ T3572] overlay: ./file1 is not a directory
[  165.366014][ T3578] fuse: Bad value for 'group_id'
[  165.371032][ T3578] fuse: Bad value for 'group_id'
[  165.393654][   T36] audit: type=1400 audit(1798683351.138:1039): avc:  denied  { listen } for  pid=3539 comm="syz.6.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  165.413986][ T3579] netlink: 'syz.6.1083': attribute type 25 has an invalid length.
[  165.453135][ T3588] overlayfs: missing 'lowerdir'
[  165.470393][   T36] audit: type=1400 audit(1798683351.203:1040): avc:  denied  { watch } for  pid=3589 comm="syz.4.1099" path="/316/file0" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  166.239168][   T36] audit: type=1400 audit(1798683351.926:1041): avc:  denied  { associate } for  pid=3616 comm="syz.4.1108" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  167.070853][   T36] audit: type=1400 audit(1798683352.714:1042): avc:  denied  { map } for  pid=3618 comm="syz.4.1109" path="pipe:[29909]" dev="pipefs" ino=29909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  167.093891][   T36] audit: type=1326 audit(1798683352.714:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3618 comm="syz.4.1109" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0f0b9ce59 code=0x0
[  167.146453][ T3632] overlayfs: missing 'workdir'
[  167.328927][ T3645] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  167.328952][ T3645] rust_binder: Read failure Err(EFAULT) in pid:567
[  167.338042][ T3645] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  167.344765][ T3645] rust_binder: Read failure Err(EFAULT) in pid:567
[  167.393975][   T36] audit: type=1400 audit(1798683353.014:1044): avc:  denied  { listen } for  pid=3648 comm="syz.5.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.420058][   T36] audit: type=1400 audit(1798683353.014:1045): avc:  denied  { accept } for  pid=3648 comm="syz.5.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.451363][   T36] audit: type=1400 audit(1798683353.070:1046): avc:  denied  { read } for  pid=3648 comm="syz.5.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  167.471708][  T488] usb 7-1: 0:2 : does not exist
[  167.479289][  T488] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  167.493892][  T488] usb 7-1: USB disconnect, device number 30
[  167.542544][ T3657] overlayfs: missing 'workdir'
[  167.560314][ T3659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.569728][ T3659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.579257][ T3659] fuse: Bad value for 'fd'
[  167.628790][ T3661] kvm: pic: single mode not supported
[  167.628804][ T3661] kvm: pic: level sensitive irq not supported
[  167.790998][ T3668] random: crng reseeded on system resumption
[  167.880442][ T3672] random: crng reseeded on system resumption
[  167.920034][ T3677] overlayfs: missing 'workdir'
[  168.195659][ T3710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.205670][ T3710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.234416][ T3712] netlink: 'syz.4.1148': attribute type 27 has an invalid length.
[  168.259378][ T3712] sit0: left promiscuous mode
[  168.283124][ T3712] bridge0: port 3(veth0_to_bridge) entered disabled state
[  168.290369][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.297573][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.391297][ T3713] netlink: 'syz.4.1148': attribute type 27 has an invalid length.
[  168.421225][ T3713] bridge0: port 3(veth0_to_bridge) entered blocking state
[  168.428402][ T3713] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  168.458393][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.465462][ T3713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.489223][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.496317][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.530952][ T3713] veth0_vlan: left promiscuous mode
[  168.537184][ T3713] veth0_vlan: entered promiscuous mode
[  168.545333][ T3713] veth1_macvtap: left promiscuous mode
[  168.551806][ T3713] veth1_macvtap: entered promiscuous mode
[  168.594017][ T3732] overlayfs: failed to clone upperpath
[  168.674847][ T3743] debugfs: Bad value for 'uid'
[  168.679983][ T3743] debugfs: Bad value for 'uid'
[  168.685403][ T3744] debugfs: Bad value for 'uid'
[  168.690180][ T3744] debugfs: Bad value for 'uid'
[  168.702206][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.714511][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.726772][ T3747] 9pnet_fd: Insufficient options for proto=fd
[  168.726775][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.744921][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.757154][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.769425][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.781714][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.793840][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.806030][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  168.818119][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.540483][    C1] sched: DL replenish lagged too much
[  174.041442][    C1] net_ratelimit: 121624 callbacks suppressed
[  174.041464][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  174.041485][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.047588][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  174.059507][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.071342][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.083322][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.095334][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.107140][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.119045][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  174.130970][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.381439][    C0] net_ratelimit: 104609 callbacks suppressed
[  179.381465][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.381499][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.387561][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.399483][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  179.411396][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.423498][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.435296][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.447205][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.459216][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.471022][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.721459][    C0] net_ratelimit: 106325 callbacks suppressed
[  184.721482][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  184.721539][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.727727][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.739595][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.751456][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.763308][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.775290][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.787280][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  184.799097][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.811004][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  190.061474][    C1] net_ratelimit: 109598 callbacks suppressed
[  190.061498][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.061526][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  190.067674][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.079635][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.091444][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  190.103431][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.115355][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  190.127285][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  190.139297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  190.151109][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.650397][   T37] INFO: task syz.0.224:1053 blocked for more than 123 seconds.
[  195.401505][    C0] net_ratelimit: 109637 callbacks suppressed
[  195.401527][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.401584][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.407599][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.419548][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.431353][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.443348][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.455340][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  195.467172][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.479207][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  195.491023][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  199.475157][   T37]       Not tainted syzkaller #0
[  200.146777][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  200.266100][   T37] task:syz.0.224       state:D stack:0     pid:1053  tgid:1052  ppid:295    flags:0x00004004
[  200.276328][   T37] Call Trace:
[  200.279629][   T37]  <TASK>
[  200.282578][   T37]  __schedule+0x14ce/0x2100
[  200.287161][   T37]  ? __sched_text_start+0x10/0x10
[  200.292209][   T37]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  200.297704][   T37]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  200.303628][   T37]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  200.309462][   T37]  schedule+0xc5/0x240
[  200.313537][   T37]  super_lock+0x168/0x330
[  200.317898][   T37]  ? user_get_super+0x350/0x350
[  200.322756][   T37]  ? __cfi_var_wake_function+0x10/0x10
[  200.328223][   T37]  ? __kasan_check_write+0x18/0x20
[  200.333338][   T37]  iterate_supers+0x8a/0x560
[  200.337936][   T37]  ? __cfi_quota_sync_one+0x10/0x10
[  200.343137][   T37]  ? security_quotactl+0x45/0x130
[  200.348166][   T37]  __se_sys_quotactl+0x34e/0x7e0
[  200.353112][   T37]  ? __fget_files+0x2c5/0x340
[  200.357801][   T37]  ? __x64_sys_quotactl+0xc0/0xc0
[  200.362830][   T37]  ? __kasan_check_write+0x18/0x20
[  200.367939][   T37]  ? fpregs_restore_userregs+0x11c/0x260
[  200.373581][   T37]  __x64_sys_quotactl+0x9f/0xc0
[  200.378438][   T37]  x64_sys_call+0x2818/0x2ee0
[  200.383127][   T37]  do_syscall_64+0x57/0xf0
[  200.387558][   T37]  ? clear_bhb_loop+0x50/0xa0
[  200.392267][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  200.398197][   T37] RIP: 0033:0x7faae999ce59
[  200.402632][   T37] RSP: 002b:00007faaea7b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  200.411060][   T37] RAX: ffffffffffffffda RBX: 00007faae9c15fa0 RCX: 00007faae999ce59
[  200.419041][   T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100
[  200.427025][   T37] RBP: 00007faae9a32e6f R08: 0000000000000000 R09: 0000000000000000
[  200.435010][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.442986][   T37] R13: 00007faae9c16038 R14: 00007faae9c15fa0 R15: 00007fff5cf50d58
[  200.450990][   T37]  </TASK>
[  200.486045][ T3145] raw-gadget.1 gadget.5: failed to queue disconnect event
[  200.741530][    C0] net_ratelimit: 105967 callbacks suppressed
[  200.741552][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.741600][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.747596][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  200.759627][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  200.771507][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:08:ab:6d:a2:19, vlan:0)
[  200.783346][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  200.795385][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.807201][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.819083][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  200.830916][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.074212][   T37] NMI backtrace for cpu 1
[  201.074231][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[  201.074258][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  201.074270][   T37] Call Trace:
[  201.074276][   T37]  <TASK>
[  201.074284][   T37]  __dump_stack+0x21/0x30
[  201.074314][   T37]  dump_stack_lvl+0x140/0x1c0
[  201.074340][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  201.074367][   T37]  dump_stack+0x19/0x20
[  201.074391][   T37]  nmi_cpu_backtrace+0x2ba/0x2d0
[  201.074423][   T37]  ? rcu_read_unlock_special+0x14d/0x440
[  201.074449][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  201.074473][   T37]  ? sched_show_task+0x371/0x530
[  201.074499][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  201.074523][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  201.074549][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  201.074573][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  201.074597][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  201.074621][   T37]  watchdog+0xdad/0xf00
[  201.074642][   T37]  ? __kasan_check_write+0x18/0x20
[  201.074664][   T37]  ? __cfi_watchdog+0x10/0x10
[  201.074683][   T37]  ? __kasan_check_read+0x15/0x20
[  201.074702][   T37]  ? __kthread_parkme+0x137/0x180
[  201.074722][   T37]  ? schedule+0xc5/0x240
[  201.074739][   T37]  kthread+0x2c9/0x370
[  201.074760][   T37]  ? __cfi_watchdog+0x10/0x10
[  201.074779][   T37]  ? __cfi_kthread+0x10/0x10
[  201.074800][   T37]  ret_from_fork+0x67/0xa0
[  201.074818][   T37]  ? __cfi_kthread+0x10/0x10
[  201.074839][   T37]  ret_from_fork_asm+0x1a/0x30
[  201.074859][   T37]  </TASK>
[  201.074867][   T37] Sending NMI from CPU 1 to CPUs 0:
[  201.283699][    C0] NMI backtrace for cpu 0
[  201.283713][    C0] CPU: 0 UID: 0 PID: 525 Comm: kworker/0:4 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba
[  201.283734][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  201.283744][    C0] Workqueue: mld mld_dad_work
[  201.283768][    C0] RIP: 0010:kasan_check_range+0x30/0x2b0
[  201.283792][    C0] Code: 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 29 02 00 00 49 89 f9 49 c1 e9 2f <41> 81 f9 ff ff 01 00 0f 82 15 02 00 00 49 89 ff 49 c1 ef 03 49 ba
[  201.283804][    C0] RSP: 0018:ffffc90000006fc8 EFLAGS: 00000a06
[  201.283816][    C0] RAX: 0000000000000001 RBX: 0000000000000058 RCX: ffffffff847e55c8
[  201.283827][    C0] RDX: 0000000000000001 RSI: 0000000000000058 RDI: ffff88815279a6c0
[  201.283837][    C0] RBP: ffffc90000006ff0 R08: ffff88815279a718 R09: 000000000001ffff
[  201.283848][    C0] R10: dffffc0000000000 R11: ffffed102a4f3443 R12: 0000000000000000
[  201.283858][    C0] R13: ffffffff847e55c8 R14: ffff88815279a1c0 R15: ffff88815279a6c0
[  201.283870][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  201.283883][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.283893][    C0] CR2: 0000200000001000 CR3: 000000010c7be000 CR4: 00000000003526b0
[  201.283907][    C0] DR0: 000000000000002a DR1: ffffffffff7fff00 DR2: 0000000080000001
[  201.283933][    C0] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  201.283943][    C0] Call Trace:
[  201.283948][    C0]  <IRQ>
[  201.283956][    C0]  ? __copy_skb_header+0x3a8/0x4e0
[  201.283974][    C0]  __asan_memcpy+0x48/0x80
[  201.283989][    C0]  __copy_skb_header+0x3a8/0x4e0
[  201.284005][    C0]  __skb_clone+0x64/0x7a0
[  201.284021][    C0]  ? skb_clone+0x229/0x460
[  201.284038][    C0]  skb_clone+0x260/0x460
[  201.284054][    C0]  dev_queue_xmit_nit+0x1ad/0xae0
[  201.284076][    C0]  dev_hard_start_xmit+0x187/0x760
[  201.284093][    C0]  __dev_queue_xmit+0x1927/0x3680
[  201.284108][    C0]  ? __dev_queue_xmit+0x267/0x3680
[  201.284124][    C0]  ? kasan_save_track+0x4f/0x80
[  201.284140][    C0]  ? kasan_save_alloc_info+0x40/0x50
[  201.284154][    C0]  ? __kasan_slab_alloc+0x73/0x90
[  201.284170][    C0]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  201.284185][    C0]  ? skb_clone+0x229/0x460
[  201.284201][    C0]  ? br_flood+0x4ed/0x730
[  201.284219][    C0]  ? br_handle_frame_finish+0x11eb/0x17a0
[  201.284238][    C0]  ? br_handle_frame+0x5a6/0xba0
[  201.284257][    C0]  ? __netif_receive_skb_core+0xfae/0x3ab0
[  201.284273][    C0]  ? __cfi___dev_queue_xmit+0x10/0x10
[  201.284288][    C0]  ? __do_softirq+0xf/0x16
[  201.284301][    C0]  ? do_softirq+0xb8/0x110
[  201.284316][    C0]  ? __local_bh_enable_ip+0x74/0x80
[  201.284330][    C0]  ? ip6t_do_table+0x130c/0x14d0
[  201.284346][    C0]  ? ip6table_mangle_hook+0x26d/0x730
[  201.284364][    C0]  ? nf_hook_slow+0xd5/0x240
[  201.284381][    C0]  ? mld_sendpack+0xcd5/0xd50
[  201.284400][    C0]  ? mld_send_initial_cr+0x1c0/0x320
[  201.284419][    C0]  ? mld_dad_work+0x43/0x4e0
[  201.284436][    C0]  ? process_scheduled_works+0x7d4/0x1020
[  201.284451][    C0]  ? worker_thread+0xc51/0x1370
[  201.284466][    C0]  ? kthread+0x2c9/0x370
[  201.284482][    C0]  ? ret_from_fork+0x67/0xa0
[  201.284496][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  201.284518][    C0]  br_dev_queue_push_xmit+0x55c/0x700
[  201.284542][    C0]  ? __cfi_br_dev_queue_push_xmit+0x10/0x10
[  201.284563][    C0]  ? __skb_clone+0x47a/0x7a0
[  201.284583][    C0]  __br_forward+0x25c/0x390
[  201.284605][    C0]  br_flood+0x50e/0x730
[  201.284629][    C0]  br_handle_frame_finish+0x11eb/0x17a0
[  201.284652][    C0]  ? ip_rcv_finish_core+0xc13/0x1440
[  201.284671][    C0]  ? ip_rcv+0xe8/0x2e0
[  201.284690][    C0]  ? __cfi_br_handle_frame_finish+0x10/0x10
[  201.284714][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  201.284738][    C0]  br_handle_frame+0x5a6/0xba0
[  201.284763][    C0]  ? __cfi_br_handle_frame+0x10/0x10
[  201.284787][    C0]  __netif_receive_skb_core+0xfae/0x3ab0
[  201.284808][    C0]  ? __kasan_slab_free+0x6a/0x80
[  201.284829][    C0]  ? kmem_cache_free+0x1bd/0x4f0
[  201.284848][    C0]  ? __kfree_skb+0x18f/0x210
[  201.284867][    C0]  ? ip_rcv_finish_core+0xc13/0x1440
[  201.284887][    C0]  ? sk_skb_reason_drop+0xd8/0x310
[  201.284907][    C0]  ? qdisc_run_end+0x120/0x120
[  201.284933][    C0]  ? ip_rcv+0xfe/0x2e0
[  201.284951][    C0]  ? __cfi_ip_rcv+0x10/0x10
[  201.284969][    C0]  ? __cfi_ip_rcv_finish+0x10/0x10
[  201.284987][    C0]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  201.285013][    C0]  process_backlog+0x3e5/0xad0
[  201.285034][    C0]  ? clockevents_program_event+0x254/0x350
[  201.285055][    C0]  __napi_poll+0xd0/0x610
[  201.285070][    C0]  net_rx_action+0x5ea/0xd80
[  201.285092][    C0]  ? __cfi_net_rx_action+0x10/0x10
[  201.285113][    C0]  ? hrtimer_reprogram+0x341/0x3e0
[  201.285138][    C0]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  201.285164][    C0]  handle_softirqs+0x1aa/0x630
[  201.285184][    C0]  __do_softirq+0xf/0x16
[  201.285201][    C0]  do_softirq+0xb8/0x110
[  201.285219][    C0]  </IRQ>
[  201.285226][    C0]  <TASK>
[  201.285233][    C0]  ? __cfi_do_softirq+0x10/0x10
[  201.285250][    C0]  ? pick_next_task_fair+0xb1/0x770
[  201.285275][    C0]  __local_bh_enable_ip+0x74/0x80
[  201.285294][    C0]  ip6t_do_table+0x130c/0x14d0
[  201.285318][    C0]  ? ip6t_do_table+0x1e0/0x14d0
[  201.285338][    C0]  ? __cfi_ip6t_do_table+0x10/0x10
[  201.285361][    C0]  ? __asan_memcpy+0x5a/0x80
[  201.285379][    C0]  ip6table_mangle_hook+0x26d/0x730
[  201.285403][    C0]  ? __cfi_ip6table_mangle_hook+0x10/0x10
[  201.285426][    C0]  ? xfrm_lookup+0x3c/0x50
[  201.285445][    C0]  ? __cfi_ip6table_mangle_hook+0x10/0x10
[  201.285468][    C0]  nf_hook_slow+0xd5/0x240
[  201.285490][    C0]  mld_sendpack+0xcd5/0xd50
[  201.285515][    C0]  ? add_grec+0x11e0/0x11e0
[  201.285538][    C0]  ? add_grhead+0x137/0x310
[  201.285561][    C0]  ? __cfi_dst_output+0x10/0x10
[  201.285584][    C0]  ? add_grec+0x132/0x11e0
[  201.285609][    C0]  mld_send_initial_cr+0x1c0/0x320
[  201.285633][    C0]  mld_dad_work+0x43/0x4e0
[  201.285656][    C0]  process_scheduled_works+0x7d4/0x1020
[  201.285679][    C0]  worker_thread+0xc51/0x1370
[  201.285699][    C0]  ? __kasan_check_read+0x15/0x20
[  201.285719][    C0]  kthread+0x2c9/0x370
[  201.285738][    C0]  ? __cfi_worker_thread+0x10/0x10
[  201.285757][    C0]  ? __cfi_kthread+0x10/0x10
[  201.285777][    C0]  ret_from_fork+0x67/0xa0
[  201.285794][    C0]  ? __cfi_kthread+0x10/0x10
[  201.285814][    C0]  ret_from_fork_asm+0x1a/0x30
[  201.285834][    C0]  </TASK>