last executing test programs:

1m18.816800319s ago: executing program 3 (id=134):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="baa00066edbaf80c66b81464d08a66efbafc0c66b80d00000066efdc24b76ff20f11c22e0f381d589d66660fc7b000000f01c9670f5bc70f1d5998", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x9, 0x0, 0x2, 0xfd, 0x3, 0x7, 0x0, 0x3, 0x1, 0x8, 0x0, 0x7bd, 0x2, 0x22, 0x6, 0x6, 0x2, '\x00', 0x63, 0x3ff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x211000, 0x1000}, 0x20)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7ac}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x10000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000894}, 0x0)
sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="baa00066edbaf80c66b81464d08a66efbafc0c66b80d00000066efdc24b76ff20f11c22e0f381d589d66660fc7b000000f01c9670f5bc70f1d5998", 0x3b}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x9, 0x0, 0x2, 0xfd, 0x3, 0x7, 0x0, 0x3, 0x1, 0x8, 0x0, 0x7bd, 0x2, 0x22, 0x6, 0x6, 0x2, '\x00', 0x63, 0x3ff}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x211000, 0x1000}, 0x20) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7ac}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x10000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000894}, 0x0) (async)
sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

1m18.541882257s ago: executing program 3 (id=135):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200000, &(0x7f0000000040)={@_ha_fsid={[0xa93, 0x3]}, {0x3, 0x7ff, 0x69, 0xd61e}}, 0x4ec, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xffffffff})
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={<r1=>r0, 0x80000001, 0x8, 0x5})
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x9, 0xa81b7c48d6f1ee10, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8040)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000003c0)=@ccm_128={{0x304}, "e88ff57012df3f09", "ea41c8a56e703efe5e158b5fda957559", "5a4dab06", "f7fdfd9f0bd463e7"}, 0x28)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
write(r2, &(0x7f0000000400)="0f287adf7b11e17f485e8347f58f9e7a8d942dd95a47b3bb86746435d9c5f29aa560990721a13c0e4b36a64b105180bfca9c47450ed491e4b2d99331fc6c89e6f7996e3cebfde476e72a542adaa295795b6f8a9e9e5764d0b61ebcefa84554f4ae37dedc40eba039b87a0a833d1701b7560a64906f41b294682f9574bb9b88c06d4e2ddf967e3b3ea20129a540fd888932ae8678671cad8fd7fff401058e5584965b07d96197e04e129cb559f9aae81f2c7a4771e9d4e1db3ab421b55a09df86be36015a2389", 0xc6)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xdc, 0x3, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x88}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x41}, 0x4004)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r1)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000800)=0x5)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00'})
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000880)={0xfffffff3, {{0xa, 0x4e24, 0x80000000, @remote}}}, 0x88)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000940)=@gcm_256={{}, "529c996b54f2f8a0", "3d6d0bfc8ab44ca26b651b15db4cad36132aa622b98ed34dc89441bf174a08f1", "aa18df34", "d53dc660f070e278"}, 0x38)
r5 = syz_open_pts(r2, 0x202000)
socket$netlink(0x10, 0x3, 0x9)
close(r1)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000e80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f00000009c0)={0x444, 0x3f3, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0x2, 0x21, [0xfffff000, 0x2, 0xbe, 0x4, 0x7, 0x0, 0x4, 0x7, 0x1ff, 0x380000, 0xfffffff9, 0x8, 0x6, 0xfffff000, 0x7, 0x9, 0x9, 0x8, 0x31c, 0x2, 0xd, 0x9, 0x7, 0x1, 0x800, 0xe, 0x4, 0x5, 0x400, 0x1, 0x9, 0x8, 0xbe6, 0x2, 0x7e8, 0x0, 0x80000000, 0xfff, 0x7, 0x9, 0xffffffff, 0x4, 0xc4, 0x7fffffff, 0x6, 0x6, 0x7f, 0x5, 0x5d, 0xfffffff0, 0xdd33, 0x7, 0x10, 0xce, 0x9, 0x10000, 0x8e61, 0x9, 0x8000, 0x9fca, 0x3, 0x3, 0x7, 0x8], [0x5, 0x8000, 0x7, 0x9, 0x2000, 0x8, 0x9, 0x36800, 0x9350, 0x100, 0x4, 0x9, 0x7fff, 0x0, 0x0, 0x7a85, 0x8, 0x0, 0xfffffffc, 0x6, 0x28, 0x6, 0xee, 0x8, 0x7, 0x4, 0x1, 0x8, 0x7, 0x2, 0x0, 0x7a0, 0x23, 0x3, 0xffff, 0x0, 0x200, 0x7, 0x1, 0x1ff, 0x2, 0x5, 0x400, 0x9, 0xb, 0x6, 0xffff, 0x9, 0x5, 0x6, 0x9, 0x5, 0x10, 0x9, 0x2, 0x1, 0x3ff, 0xa00000, 0x1, 0x9, 0x8, 0x3, 0xa, 0xfffffff7], [0x0, 0xb, 0x3, 0x1, 0xfff, 0xe6ca, 0x2, 0x45, 0x7, 0x3, 0x5, 0x3, 0x7, 0x4, 0xfbe2, 0x101, 0xe, 0x1, 0x4, 0x0, 0x80000000, 0x5, 0xf76, 0x8, 0xc, 0x0, 0xfffffffc, 0x80, 0x5, 0x9, 0x2, 0x3f, 0x101, 0x971, 0x23e, 0xb04, 0x3, 0x9, 0x77, 0x1, 0x3f0, 0x80, 0x400, 0x65, 0xfffffc01, 0x3ff, 0x1, 0x8, 0x2, 0x7, 0x40, 0x5, 0x2, 0x3, 0x7de1, 0x6, 0x5a4, 0x80000000, 0x8, 0xffffffff, 0x5a, 0x9, 0x7, 0x5], [0xfffffff6, 0x0, 0x8, 0x0, 0x9, 0xffff, 0x7, 0x5, 0xab5, 0x0, 0x400, 0xffffff16, 0x9, 0x6, 0xff, 0x6, 0x8, 0x7f, 0x2, 0x0, 0x9, 0x9, 0xb906, 0x80, 0x9, 0x22, 0x6, 0x1e7e000, 0x8, 0x9, 0x3, 0x6, 0x233, 0x3, 0x33, 0x8c, 0x7, 0x2, 0x1ff, 0x6, 0x6, 0x40, 0x7, 0x1, 0xa, 0xffff3bdc, 0x10000, 0x669, 0x7f, 0x2, 0x4, 0x8, 0xad8c, 0x2, 0x3, 0x1, 0x7, 0x3, 0x4, 0x1, 0x0, 0x200, 0xfffffffe, 0x607d], 0x22, ['TIPC\x00', '\x00', 'syz0\x00', '\x00', './=.%\x00', '\x00', 'wlan1\x00', '@\x1e[^}:+-\x00']}, ["", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000f80)={{@align=0x10000, {0x6, 0x7, 0x612, 0xc}}, {{[0x9, 0xffffffff, 0x0, 0x1]}, 0x0, 0x2, 0x2dc80, 0x0, &(0x7f0000000ec0)=[{{@_ha_fsid={[0x4, 0x5]}, {0x0, 0xa, 0x5}}, 0x1, 0x0, '/#]}$^#\x00'}, {{@_ha_fsid={[0x2, 0x8]}, {0x9, 0x69b8, 0x2000000}}, 0x5647, 0x0, './=.%\x00'}, {{@align=0x3, {0x1aac, 0x7, 0x5, 0x66d}}, 0x6, 0x0, 'TIPC\x00'}, {{@align=0x7d6, {0x7, 0x2, 0x4, 0x80000000}}, 0x18, 0x0, '\x00'}, {{@_ha_fsid={[0x4, 0x4]}, {0xd6db, 0x3, 0x407c, 0x772}}, 0x9, 0x0, 'udp:syz1\x00'}]}})
r6 = getpid()
r7 = syz_open_procfs(r6, &(0x7f0000000fc0)='net/l2cap\x00')
ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000001000)={0x7, 0x9, 0x8, 0x8000, 0x80, 0x2})
setns(r7, 0x20000000)
close_range(r4, r7, 0x2)
ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f0000001100)={0x3, 0x0, 0xaf3, 0x0, 0x2, 0x9, 0x0, &(0x7f0000001040)=[{0x27, 0xfe, 0x1}, {0x7, 0xfe, 0x5}, {0xc, 0x101, 0x9}, {0x2, 0x1ff, 0xfffffff8}, {0x1, 0x101}, {0xb, 0x101, 0x9}, {0x1b, 0xfe, 0x5}, {0x1e, 0x1ff, 0x1}, {0x18, 0xfe, 0x7fff}]})
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001140)=""/4096, &(0x7f0000002140)=0x1000)
r8 = dup2(r4, r0)
ioctl$XFS_IOC_FSGROWFSLOG(r8, 0x4008586f, &(0x7f0000002180)={0x3ff, 0x5})

1m18.541294308s ago: executing program 3 (id=136):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0xffffff00, 0x9)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socketpair$tipc(0x1e, 0xc0, 0x0, 0x0)
mremap(&(0x7f0000736000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000000)={0x11, {{0x29, 0x0, 0x3000000, @empty, 0x3}}}, 0x88)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f00000000c0)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x800, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2f, 0x0, 0x2, 0xe}}}], 0x18}}], 0x2, 0x40)
write(r1, &(0x7f0000000380)='0', 0x1)

1m18.138395469s ago: executing program 3 (id=139):
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000700)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1ff, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
chdir(&(0x7f0000000200)='./trace/trace_clock\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)})
mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace_clock\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3})
pwritev2(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0)
lseek(r0, 0x8000, 0x4)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000800)={0x0, 0x0, 0x2, 0x8, 0x3})

1m18.137988099s ago: executing program 3 (id=140):
r0 = syz_usb_connect(0x3, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x11, 0x4, "e51ec0b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0xb0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/socket\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x9})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x801, 0x2004c8, 0x400000000000003, 0x0, 0x36ae, 0x2, 0x6, 0x3, 0x6, 0x7, 0xf739], 0x80a0000})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x8008, 0x3, 0x4, 0x14, 0x3, 0x40, 0x5, 0x1, 0xd6, 0x1, 0x4, 0x8, 0x9}, {0x3, 0x6, 0x3, 0xff, 0xff, 0x8, 0x77, 0x0, 0x0, 0xd0, 0x4, 0x1, 0x40}, {0x5, 0x4, 0x3, 0x2, 0x3, 0x24, 0x81, 0x5, 0x5, 0x2, 0x1, 0x5, 0x2}], 0x601})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="a101000000000000")

1m18.054612658s ago: executing program 3 (id=141):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'geneve1\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x591, 0xe0, 0xd6}]})
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x7, 0xf4a, 0x0, 0x40, 0x44150044})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
ftruncate(r4, 0xc2b)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'veth1_to_bond\x00', 0x1})
r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r6 = eventfd2(0x1, 0x80802)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00')
lseek(r7, 0x346, 0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000400)={r6, 0x2, 0x1, r7})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r8, &(0x7f0000000240)='10', 0x2)
syz_io_uring_setup(0xec4, &(0x7f0000000280)={0x0, 0xfffffffc, 0x1, 0x3, 0x34b}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r9 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xda, 0x4, 0x7ff, 0x1}}, @nested_load_code={0x12e, 0x1a, {0x0, "f390"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0xfffffffffffffffe, @control32=0x4006, 0x4000000040000000}}, @nested_vmlaunch={0x12f, 0x18}], 0xba})
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r10, 0x3, 0x11, r9, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1m18.027300361s ago: executing program 32 (id=141):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'geneve1\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x591, 0xe0, 0xd6}]})
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x7, 0xf4a, 0x0, 0x40, 0x44150044})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
ftruncate(r4, 0xc2b)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'veth1_to_bond\x00', 0x1})
r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r6 = eventfd2(0x1, 0x80802)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00')
lseek(r7, 0x346, 0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000400)={r6, 0x2, 0x1, r7})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r8, &(0x7f0000000240)='10', 0x2)
syz_io_uring_setup(0xec4, &(0x7f0000000280)={0x0, 0xfffffffc, 0x1, 0x3, 0x34b}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
r9 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xda, 0x4, 0x7ff, 0x1}}, @nested_load_code={0x12e, 0x1a, {0x0, "f390"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0xfffffffffffffffe, @control32=0x4006, 0x4000000040000000}}, @nested_vmlaunch={0x12f, 0x18}], 0xba})
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r10, 0x3, 0x11, r9, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1m17.862033448s ago: executing program 2 (id=143):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1c5)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
umount2(&(0x7f0000000380)='./file0\x00', 0x9)
rt_sigpending(0x0, 0xfffffffffffffe03)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

1m17.772224287s ago: executing program 2 (id=144):
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff94, 0x1, 0x0, 0x55)
r1 = open(&(0x7f0000000280)='./bus\x00', 0x4c27e, 0x68)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x174a4000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x402c032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
clock_gettime(0xfffffffffffffffe, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa00090582"], 0x0)
mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f00000002c0), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB='fscontext?}'])
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000140)={0x0, 0x42cc, 0x10, 0x8000, 0x7f, 0x0, r1}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800e706, 0x4, 0x1000002, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7774, 0x8, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x8000, 0x2, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38a7, 0x800, 0x0, 0x230}}], 0x1, 0x0, 0x0)

1m16.043643555s ago: executing program 2 (id=152):
setns(0xc9, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000440)={{0x1, 0x3, 0x88a}, 0x5, 0x1000})
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r5, 0x0, 0x0, 0x8000)
setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
bind$bt_hci(r3, &(0x7f0000000380)={0x1f, 0x2}, 0x6)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab4c221}, 0x48800)

1m13.504139478s ago: executing program 2 (id=178):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x22)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000540)={0x14, &(0x7f00000003c0)={0x40, 0x4, 0xd3, {0xd3, 0xa, "6fadc66acfb113f814ec0cc110408d8b3193854372ebfd8af3c8de5805efb677eeb4ae6772a43bd2bad52b90b5579d39fcb1d2835c60dad90bb283507221f130021a3b01e0e7eddc04ac9f19fbfb60bcdd9cee1f34ab0b799d5ee44974398dac27d926719d75013dcb914c6a8b3fac5cff2d9315ad74f1ba4eee69845544c3db9a64a39c4475baef2444c1d8e68189d4fba8b718680263fc5fc487f28d7c2d7d05330cee3b1932369ba90cad42ba90f76f279a03cb40865499b7ca7b95a93fc5b6c6aa81eb6344bc7a8f32c24e681b6f18"}}, &(0x7f00000004c0)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "5c985c9721cef587ccdbd266b96d5776240baaff289fd7e9b6ac84f25e87b88c98a327dda3319807c8432eec153e8f455ceb29fe9be5f2bcd52d"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000580)={0x40, 0x6, 0x36, "2fb724569359873079de0600031ab83a28b9373d80ced7b5193b59bb620638a2d79cbbe051415c9519b58f8ef51c0e49a3f5ca74e97b"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x6000000}, &(0x7f0000000680)={0x40, 0xa0, 0x4, 0x6a4}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "4d468d3727a1bd092328f1f6a565d757cc6e078a4120d4c3774dc9a0d153e2e412aef1ba1c470ffdb5e31af8a32212"}})
syz_usb_control_io$printer(r0, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x40, 0x9, 0xb3, {0xb3, 0x21, "ec2b992518d6e0233fbfdc34c5d05bce6cfdbace57a62f5b9d64ef052265518c8fbc3978b162a34359857e0d72177a9d9f4253c70672390bf9828b578e9f912a30d1ea0f56f613865968f6304f77a87c84eed12ccebc183ef72659c11e7bdaf2863db631b49ccdbe847f19fe76de654a9213f2db8b9cc4f719591b99b2e4c2cdd64f33e2f233ebadafa6891647414647fea8935cfbdf572f448fa3c8e547d8191f71a2c864783b544b1df565cc5d39f7bd"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000880)={0x40, 0x15, 0xba, "c6d888bac0ebc809e276e89ad9808e2fa117aadb28cfe1644cd25714e96ebbd1d36d1de5f295de9720f3af16b1df7ab580be005b101a969c7c27ff123e4c9a1f7d456a3b0143b1f32802efd6b72cd7f6254569f5d0b3b09683b339e023b0c19669bc4acb9f121fdf296726297311450d745a1abbab5ce97b6d379f6c2b1c6fd1cc397e284712b5c1f337ac3f6dea62e17f7d9117519aef4ac9064123112e2d96e29467992a5a6a153cadad9c40ef58254a5073475e8bdcb25a0d"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x0, 0x42, {0x40, "43b20d62a4c005e066e59173663c3e2d3d25e578e00570d68ae8f596bf89ec8ff2e4e3bd0bdc47d0e8f0feaf1c588d038fcd923d32ec95b469d8f6ef859308f5"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x2}})
syz_usb_control_io$uac3(r0, &(0x7f0000000d00)={0x14, &(0x7f0000000b00)={0x20, 0x6, 0xcf, {0xcf, 0x7, "648545bde989c75f4e4ec4569f4c1938f3859791663e4c8a1db4b0aa237518da23bffad092b0c8396b53b1312617c7add23dce7d11d8fc5bf4d16b472b86aac48114784dcff8bc5a2f66ee261d0a446cb4671fb0368947ce3bb1953601b1799e71db14969e4dd8fd6f26645f64996b06107ab75fa1d0d62ecfb41b25d5ad21ccfc853d12ef04fd19608d7b8e3a3d5879680a87ed94cccddd984ecad4ab9f7593e1e63fe8fe4fb4dbe70bc7d5dc3d348fcf5bd67a6bebdb5c6c8da5e5a16966b1323f93a227ecbc194b0a0bccd6"}}, &(0x7f0000000c00)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "6cb5ae832f365604e2f418255024c821512dd00f48a12dbbd9c7c6d8f9f40c11273cf45606f9f06e630c8c7cc9d00c182a67239d97140a6ab9cb5a0ed7ff56c9fd811134a7bdc41aabfe4e5c2ba94c3822fee681693b8e139ba23125dad4eee998838b529c90434dca9accff9856dd7455785839a7dec040a3c25b15f5659555829632c18e9bf24f599e3dcee9bf213526200c47a4dd6bb7d8954840fd14beef207fd2a09089f1972853351bc543fd35bf2155728387c552685405f95de263664187dd8f171cf889f4a2b8ad4e9e87dc64a1a94028b7"}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000d40)={0x40, 0xa, 0x80, "46616a9cda4374154a2896704fd96791bd86cba73694e709b397934814d3fa3c5147272f88b7b869165954e7574ddffd0d0e0be8b112e228573f30f17614a65f1f9fc5c8706de6296b98ffd473f7b9af5a9345272d9348846d823aa797011ffde32783a4fd4e9c8966ea1fd03eb9fc312e8d35c154e83e3b8049c15eb51019ed"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e80)={0x20, 0x81, 0x3, "fb2cc2"}, &(0x7f0000000ec0)={0x20, 0x82, 0x1, "bb"}, &(0x7f0000000f00)={0x20, 0x83, 0x2, "ed67"}, &(0x7f0000000f40)={0x20, 0x84, 0x4, "2c4fb382"}, &(0x7f0000000f80)={0x20, 0x85, 0x3, "5aeadb"}})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004980)={0x0}}, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)
lstat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000001040)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000001080)='./file0/../file0\x00', &(0x7f00000010c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0)
mount$bind(&(0x7f0000001100)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00', 0x0, 0x18d093, 0x0)
mount$bind(&(0x7f0000001180)='.\x00', &(0x7f00000011c0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000001200)='./file0\x00', 0xb)

1m9.506428471s ago: executing program 2 (id=211):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') (async)
fstat(r0, &(0x7f0000000100)) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
r2 = socket$vsock_seqpacket(0x28, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0)

1m9.494129072s ago: executing program 2 (id=214):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0xfffffffd, 0x7, 0x2, 0x6, 0x1, 0x155f, 0x1000000e, 0x4, 0x2dcd, 0x1, 0xb4, 0x81, 0xa2b9, 0x4000006, 0x9, 0xe1, 0x3, 0xfc000000, 0x403, 0x4, 0x8, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x6, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x3, 0x81, 0x9, 0xf9a2, 0xaa, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x7, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x6, 0x1, 0x7, 0xad, 0x2, 0x809, 0x40, 0xdd5, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x5, 0x1c, 0x2, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d5, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xb0, 0x5, 0x1, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x1ff, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x6, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x280026, 0x7f, 0x400, 0x102, 0x9, 0x3e, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x5, 0x7ffe, 0x4, 0xf7cc, 0xd504, 0x8, 0x5, 0x9, 0x6, 0x1, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0x1f, 0x3, 0x1, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x8001, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0xb, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/4091, 0xffb}, {0x0}], 0x2}, 0x20000}, {{0x0, 0x0, 0x0}, 0x4741}], 0x2, 0x22120, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[], 0xfc}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001c40)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001d00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000001e00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8)
r9 = dup2(r8, r8)
listen(r9, 0x4b7f)
getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001e40)=[@text32={0x20, &(0x7f0000001e80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001ec0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1m9.460480966s ago: executing program 33 (id=214):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0xfffffffd, 0x7, 0x2, 0x6, 0x1, 0x155f, 0x1000000e, 0x4, 0x2dcd, 0x1, 0xb4, 0x81, 0xa2b9, 0x4000006, 0x9, 0xe1, 0x3, 0xfc000000, 0x403, 0x4, 0x8, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x6, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x3, 0x81, 0x9, 0xf9a2, 0xaa, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x7, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x6, 0x1, 0x7, 0xad, 0x2, 0x809, 0x40, 0xdd5, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x5, 0x1c, 0x2, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d5, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xb0, 0x5, 0x1, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x1ff, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x6, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x280026, 0x7f, 0x400, 0x102, 0x9, 0x3e, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x5, 0x7ffe, 0x4, 0xf7cc, 0xd504, 0x8, 0x5, 0x9, 0x6, 0x1, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0x1f, 0x3, 0x1, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x8001, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0xb, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/4091, 0xffb}, {0x0}], 0x2}, 0x20000}, {{0x0, 0x0, 0x0}, 0x4741}], 0x2, 0x22120, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[], 0xfc}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001c40)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001d00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000001e00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r8, &(0x7f00000000c0)={0x1f, @none}, 0x8)
r9 = dup2(r8, r8)
listen(r9, 0x4b7f)
getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001e40)=[@text32={0x20, &(0x7f0000001e80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001ec0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

40.094148729s ago: executing program 5 (id=447):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair(0x27, 0x0, 0x6, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x9d, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000180)={@raw_ptr={0x70742a85, 0x0, &(0x7f0000000000)="272161a84fb00aebb21698f4a960e089bdb892dba17370e79eade7dd21d4377a1a9f44a83ec7", 0xfffffffffffffe26}, @raw_ptr={0x70742a85, 0x0, &(0x7f0000000200)="9515f35af3ff3949654dbe629d3f83d4320aabaec43b2f7dbb372689dcc5e763a2816d0e7cd788f45e4ba34365e45de0a421c96c823e4a453f0b3774b970b9c9da068fd2ae268d623686d41279bdf9ba91fd48a9792508ee1ccff7d473bbcbbe20be8c1b170cbb5d40ac94b2ba37ea2bcbc0e13ce042da6e", 0x78}, @raw_ptr={0x70742a85, 0x0, &(0x7f0000000080)="d323fd71b70870e4faa4f64c77c6c51982231ff7cf11bd8ae37c567fccd33ee6503311b98ef1f06f10e8ed4768c358c03e5c500420d9db1cdf31021b8906ccdbc17aa73a7a7e939790061958dfec2444619780a83a8e916528d8db34d063acdea4ef53e924e3fe3f8aea2aa4da11d8a3f9e02112569090ab950f7339c1bafe1dcd381fa5d731d4af715678d8267c4773196d97eb6d603480a4c5eabcb081d4c458c6b62bc6b784f4f8770e4cf1b397819a3372b946bac3973dd038070ce9feb22903845f5ce909c57ce2a732075b5e2e9b9fa45b6f5eeb20b825c47a2237", 0xde}}}}], 0x100, 0x0, &(0x7f0000000f40)})

40.08136291s ago: executing program 5 (id=448):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffffffffe]}, 0x0, 0x8)
r1 = gettid()
timer_create(0x9, &(0x7f0000000100)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000240)=""/75, 0x4b}], 0x2}, 0x7}], 0x1, 0x20, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000080)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

39.946112094s ago: executing program 5 (id=450):
r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000140)='wlan0\x00'})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0x4, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x6, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x6, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/4091, 0xffb}, {&(0x7f0000001840)=""/175, 0xaf}], 0x2}, 0x20000}, {{0x0, 0x0, 0x0}, 0x4741}], 0x2, 0x22120, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000001ac0)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000001b80)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001c80)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001cc0)=[@text32={0x20, &(0x7f0000001d00)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001d40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4000, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x200000, 0x80}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x27c, 0x20000000007fff}}, @nested_vmlaunch={0x12f, 0x18}], 0xf0})
ioctl$KVM_RUN(r12, 0xae80, 0x0)

38.958033596s ago: executing program 5 (id=456):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x12) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
umount2(&(0x7f0000000500)='./file0\x00', 0x0) (async)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000340))
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet(0x2, 0x2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000280)=""/124)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80)
pipe2(0x0, 0x0) (async)
syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8) (async)
r10 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
copy_file_range(r3, &(0x7f0000000540)=0x1, r10, &(0x7f00000005c0)=0x1, 0xfffffffffffffffe, 0x0) (async)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x400, 0x3, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x2, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x4003c001, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

38.944789818s ago: executing program 5 (id=457):
clock_adjtime(0xa, &(0x7f0000001240)={0x9, 0x2, 0x5, 0x6, 0x100, 0x3, 0x9, 0x7, 0x8, 0x1, 0x83, 0x100000000, 0xdf9, 0x4, 0x4, 0x0, 0x6, 0x0, 0x5, 0x8, 0xb07, 0x4, 0x3ff, 0x80, 0x3, 0x5})
r0 = socket(0x10, 0x803, 0x0)
capset(&(0x7f0000001140)={0x20071026}, &(0x7f0000001180)={0x2, 0x6, 0xc0f, 0x83, 0xffffffff})
r1 = openat$kvm(0x0, &(0x7f0000001200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001340)={0x2710, 0x3, 0xf0000000, 0x2000, &(0x7f0000e80000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001380)={0x2710, 0x0, 0xf0000000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='pagemap\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000013c0), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001400)={@multicast1, @local}, 0xc)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x14a40, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000017c0)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000001800)='bridge0\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000001500)=[{0x6, 0x5, 0x7, 0x7ffc0000}]})
ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000001540)={0x6, [0x7, 0x3, 0xa, 0x2, 0x7, 0x5]})
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000013c0001802c000180"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0)
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000001700)={[0x100, 0x1, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffbf, 0x2000001, 0x80c5, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
pread64(r3, &(0x7f00000073c0)=""/102400, 0x19000, 0xffffffff8)
sendto(r0, &(0x7f00000000c0)="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", 0x108, 0x20000010, 0x0, 0x0)

38.929376579s ago: executing program 5 (id=458):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x53, 0x0}}, &(0x7f0000000080))
r1 = openat$binderfs_ctrl(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0xc1086201, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00004, 0x3000007, 0x4000010, 0xffffffffffffffff, 0x0)

38.901933692s ago: executing program 34 (id=458):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x53, 0x0}}, &(0x7f0000000080))
r1 = openat$binderfs_ctrl(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0xc1086201, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00004, 0x3000007, 0x4000010, 0xffffffffffffffff, 0x0)

26.442053439s ago: executing program 1 (id=577):
r0 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000540)={0xffffffffffffffff})
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r3)
r5 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3)
keyctl$KEYCTL_MOVE(0x1e, r5, r3, r4, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000340), 0xfffffdef)
r7 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000380)={0x1f, 0x5, @none}, 0xe)
connect$bt_l2cap(r8, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r9 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r10, 0xffffffffffffffff, 0x200000000000000)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r11, 0x401870cc, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

26.082480756s ago: executing program 1 (id=578):
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xdd, 0x7a, 0x48, 0x40, 0x403, 0xf850, 0x6793, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0xa0, 0x8, "", [{{0x9, 0x4, 0xc8, 0x1, 0x0, 0xfc, 0x44, 0xaf, 0x3}}]}}]}}, 0x0)

24.858588972s ago: executing program 1 (id=585):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1, 0x7}, 0x1c)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x4, 0xffff, 0x7f, 0x8, 0xa, "49e5b54d24db19e8ac74b6303444725fa34ccd", 0x4a, 0x34e}) (async)
poll(0x0, 0x0, 0x35ba) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40000}, 0x0)

24.016949609s ago: executing program 1 (id=591):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r1 = memfd_create(&(0x7f0000000240)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x86\x1b\x9f\x8d)P!\x1a\x98O\x8b\xd7\x93\xf4\xc2\x90\xdf\xa9\x05[Sm\xd9\x98\xd7\xab\xeb\xc9\xa3a\\\xff\xa3#\xfc3=Al\xd6=+`&\x97y0\xda4f.S\x8f\xc1`\xd4\xaf\n\x0e\xfdF\x1d\x9b\x7f\xe4\x94\x92*S\xd3\xf5\xe3\x1b\x9f\xde\x81a\x8fW6{[jWMkF\x99\x85\x95=\x80\x82m\x8c\x85\x81\xe8W\xb8\x1e\xe0m\xe8!\x15 \xf6X\x9dZ(\r2K\t\x84\xcb8\xae\xf7\xc8G\xfb:+\xbdY6=\xdf\xbfgU\xe3m\xb9\rG\xadi\x87\xd56\xc3\n\xe27\xb3\x85\xd4\xf6\xdc\x17O3=\xb1[\xd5\x1e\xde\xaa\x17\x95\x18\f+\xdd\xdb\xbc\xf3\xcb\xed\x97\xf6\x83\x9f2\xd4=\x9e\xa1[pg=\x1ca\x8c\x1c\xab_7t\x14\'\xa1u3f\xdd\x97\x97:\xd6\x94\xb2\n\x10\v \x96\x02tem\xc7\x16\x8d\xbbD\xdb\x829\x00'/493, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ext4\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x101000, 0x0)
ioctl$int_in(r5, 0x40086610, 0x0)
r6 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$cont(0x19, r6, 0x8d, 0x40000000000000)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000600)={'\x00', 0xfffd, 0xed, 0xfffffffd, 0x200, 0x0, r6})
sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x71}, @nested={0x10, 0xbc, 0x0, 0x1, [@nested={0x4, 0xc3}, @nested={0x8, 0x13, 0x0, 0x1, [@generic="3a48ad04"]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000040), 0x4)
r7 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000440)={r1, 0x0, 0x0, 0x4000})
poll(&(0x7f0000000480)=[{r7, 0x2204}], 0x1, 0x9)

23.756293626s ago: executing program 1 (id=592):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xf4) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9)
write(r0, &(0x7f0000000280)='27', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x181) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) (async)
r2 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x9) (async, rerun: 32)
ptrace(0x10, r2) (async, rerun: 32)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000540)={&(0x7f0000000580)=""/137, 0x89}) (async)
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r2]) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14)
write(r3, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', &(0x7f0000000040)='ecryptfs\x00', 0xd95e565feb58f877, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='27', 0x2)
openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x200601, 0x2) (async)
pipe2(&(0x7f00000004c0), 0x800) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
keyctl$join(0x1, &(0x7f0000000500)={'syz', 0x0})
unshare(0x22020600)

23.033049281s ago: executing program 1 (id=604):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058100000000", @ANYBLOB="669cd570826f2eaa996237dd265db62488635a2c78df1f1fc8c393f6ccd930f670ccf216cb9879516db59e3736ac5de60a597142a9bba6810f234c680cc6f0168e847f7264e1cf1b078dde254a7ae346cf229cb6523e493c7519d5ca5b1e8fb43e71409cba19f2aed7a42dad27158532d772f2b8bca2bdf971db87c0bf6fd5768c0ec911587be11a6cc1f7dbea665e38d9cb4a741446c46bd0cb457cd89c00204efbea7b92a1fafae14f30a6f48fda88fb342fae25cee675759ad5db7f74a24f637565b6b81d497d7ccfd8adee89aa88a3f89596a4843040a9fe", @ANYRESOCT=0x0, @ANYRES32, @ANYRES64, @ANYRES32], 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000005600010005000000000080000700000004"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
flock(r2, 0xc)
r3 = syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x0)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000005c0))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040))
ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000480)={0x2, 0xffffffff, 0x0, 0xffff, 0x1, 0x42})
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0)
recvmsg$inet_nvme(r5, &(0x7f0000000580)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/13, 0xd}], 0x3}, 0x41)

22.94965236s ago: executing program 35 (id=604):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058100000000", @ANYBLOB="669cd570826f2eaa996237dd265db62488635a2c78df1f1fc8c393f6ccd930f670ccf216cb9879516db59e3736ac5de60a597142a9bba6810f234c680cc6f0168e847f7264e1cf1b078dde254a7ae346cf229cb6523e493c7519d5ca5b1e8fb43e71409cba19f2aed7a42dad27158532d772f2b8bca2bdf971db87c0bf6fd5768c0ec911587be11a6cc1f7dbea665e38d9cb4a741446c46bd0cb457cd89c00204efbea7b92a1fafae14f30a6f48fda88fb342fae25cee675759ad5db7f74a24f637565b6b81d497d7ccfd8adee89aa88a3f89596a4843040a9fe", @ANYRESOCT=0x0, @ANYRES32, @ANYRES64, @ANYRES32], 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000005600010005000000000080000700000004"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
flock(r2, 0xc)
r3 = syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x0)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000005c0))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040))
ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000480)={0x2, 0xffffffff, 0x0, 0xffff, 0x1, 0x42})
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0)
recvmsg$inet_nvme(r5, &(0x7f0000000580)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f0000000500)=""/13, 0xd}], 0x3}, 0x41)

9.758932002s ago: executing program 7 (id=605):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r0, 0x1, &(0x7f0000000040)="35738b86")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x8e2b00)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000240)=""/127)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8)
write(r3, &(0x7f0000000180)='11', 0x2)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffbfc, 0x2}, 0x2e)

8.090412994s ago: executing program 4 (id=659):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11c0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000280)=0xb, 0x4)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2008800, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r3, &(0x7f0000000a80)={0x2020, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f0000002ac0)="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", 0x2000, &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b80)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2b, 0xfbfffffe, 0x40091000, 0x40, 0xff7e, 0x18bb0f78, 0xfffffffa, 0x0, 0x0, 0x40, 0x2}}, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file0\x00', 0x40042, 0x13)
close(r3)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
write$FUSE_POLL(r3, &(0x7f0000000340)={0x18, 0x0, r4, {0x9}}, 0x18)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
openat(r5, &(0x7f0000000140)='./file0\x00', 0x1e92c3, 0x0)

7.947721699s ago: executing program 7 (id=605):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r0, 0x1, &(0x7f0000000040)="35738b86")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x8e2b00)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000240)=""/127)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8)
write(r3, &(0x7f0000000180)='11', 0x2)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffbfc, 0x2}, 0x2e)

6.186111101s ago: executing program 4 (id=662):
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000))
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYRESDEC=r0], 0x21c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

6.083342112s ago: executing program 6 (id=664):
socket$netlink(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000680)='sockfs\x00', 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000003980)={0x2020}, 0x2020) (async)
read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000059c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x4, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000005a40)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000007a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007b00)={0x20, 0x0, 0x68cc, {0x0, 0x67aa10b038eec9ed}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r0, &(0x7f0000005a40)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000007a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007b00)={0x20, 0x0, 0x68cc, {0x0, 0x67aa10b038eec9ed}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000007b40)='./file0\x00', 0x101001, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_to_bridge\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x26b1, 0x80, 0xfffffbfd, 0x26f}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x168}}}, &(0x7f0000000280)) (async)
syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x168}}}, &(0x7f0000000280))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) (async)
r8 = syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
syz_usb_control_io$uac1(r8, &(0x7f0000000580)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003a5000000a5031d"]}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000003c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000003c0)=0x100000001, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/memory.force_empty\x00', 0x20082, 0x34) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/memory.force_empty\x00', 0x20082, 0x34)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write(r9, &(0x7f0000000600)='0', 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x800448d2, &(0x7f0000000440))

6.082084042s ago: executing program 7 (id=605):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r0, 0x1, &(0x7f0000000040)="35738b86")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x8e2b00)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000240)=""/127)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8)
write(r3, &(0x7f0000000180)='11', 0x2)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffbfc, 0x2}, 0x2e)

6.080802862s ago: executing program 4 (id=666):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x8adb81c91f8a5ff8, 0x0, &(0x7f0000000000))
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000280), 0x4) (async, rerun: 64)
sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x44) (rerun: 64)
sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x2, 0xa, 0xdf, 0x8, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x4000840) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x7, &(0x7f0000000040)=[{0x6fc, 0x5, 0xf8, 0x7}, {0x1, 0x6, 0x7, 0x65}, {0x6, 0x10, 0xf, 0x3}, {0x2, 0x28, 0x2, 0xb2}, {0x6, 0x9, 0x26, 0xb}, {0x3, 0x4, 0x8, 0x15}, {0x7, 0xfa, 0x7, 0x6}]})
r4 = fsopen(&(0x7f00000001c0)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='name', &(0x7f0000000240)='ccnA\xf6gro-p\x00', 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000007c0)=0x63, 0x4)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000800)=0x1000000, 0x4) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x715}) (async, rerun: 32)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 32)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000940)={0x73622a85, 0x100}) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x2, 0x0)
r8 = dup3(r6, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000c40)={0x73622a85, 0xa, 0x0, 0x2}) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000500)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x3, 0x6040000}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40481, 0x0)
ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f00000000c0)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)

4.253680911s ago: executing program 4 (id=668):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x40000, 0x110)
read(r1, &(0x7f0000000280)=""/256, 0x100)

4.236698872s ago: executing program 0 (id=669):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
prlimit64(0x0, 0x7, &(0x7f00000004c0), 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_STEAL_TIME(r3, 0x4068aea3, &(0x7f0000000080))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000300)={0x7, 0x2, "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"})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xce20, 0x4, @empty, 0x2}, 0x1c)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffe3c}], 0x1, 0xd, 0x0, 0x0)
capset(&(0x7f0000000100)={0x19980330}, &(0x7f00000001c0)={0x200000, 0x200000, 0x0, 0x4000, 0x0, 0xffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/reboot/mode\x00', 0x401, 0x1c)
write(r4, &(0x7f0000000540)='p', 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.180240458s ago: executing program 0 (id=670):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
io_setup(0x66, &(0x7f0000000000)=<r1=>0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f0000000200)='-5', 0x12, 0x0, 0x0, 0x4}])
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x32, {0x0, "488b042500304000488904250030400066ba420066b81d0066ef"}}, @nested_vmlaunch={0x12f, 0x18}], 0x7a})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000440)={0xb, 0x1, 0x400000, 0x100000, &(0x7f0000c68000/0x100000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x692, 0x7d, 0x80006, 0x4000000010000e51, 0x102, 0x547a, 0x103d, 0x200000000006, 0xfffffffffffffffd, 0x3aa, 0xfffffffffffff9de, 0x1, 0x5, 0x40000000009, 0x378, 0xfffffffffffff802], 0x6000, 0x194110})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000480)={0xcc, 0x0, 0x1})

4.176335779s ago: executing program 4 (id=671):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000380)=0x10100, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gre0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000400)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000440)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000300)='./file0\x00') (async)
r6 = open(&(0x7f0000000340)='./bus\x00', 0x18537e, 0x98)
fallocate(r6, 0x0, 0xf4001000, 0x1000f4)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000000)=0x3000) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
eventfd2(0x4, 0x0) (async)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x0, 0xdddd1000, 0x4, 0x9, 0x5, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x4000, 0x3, 0x4, 0x40, 0x5, 0xd8, 0x6, 0x5, 0x3, 0x3, 0xfd}, {0xeeef0000, 0xeeef0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x4, 0x4}, {0xffff1000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xed, 0x80, 0x7, 0x2, 0xdb, 0x1}, {0x60000, 0x3ff8, 0x10, 0x7, 0xb1, 0x4, 0x21, 0xd0, 0x9, 0xff, 0x1}, {0xdddd0000, 0x8000000, 0x3, 0x7, 0x2, 0x5, 0x7, 0x3, 0x5, 0x7f, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x27, 0xc, 0x34, 0x2, 0x7, 0xb0, 0x9}, {0x10000, 0x1000}, {0x5000, 0x7ff}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x100000000, 0x80, 0xfff]})

4.16720542s ago: executing program 0 (id=672):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="100200000000010000000000fddbdf2825"], 0x10}], 0x1}, 0x20000010)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300)
recvmmsg(0xffffffffffffffff, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/19, 0x13}, 0x8819520}], 0x1, 0x45833af92e4a38bf, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/vlan/vlan0\x00')
lseek(r2, 0x4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x96\xd0\aJ^4`\x97C\xf0\xb9\x8a\xdc\xe5`\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
write$binfmt_misc(r4, &(0x7f00000008c0)="cf059abf599ef37ad5bb62076c0d5949ad8734450db2ccf2a7906e75da7796e82332eaf59f3599086601c36ef45b74989919b484eda83a1d53d6a41731783bce77ae3ac5c76ce21462c432c22991c1a32e6474558171c166ad346ed91c3e2d5eb0d8ae2f586825c07036", 0x6a)
sendfile(r3, r4, &(0x7f0000000880)=0x2, 0xfffb)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000840)=0x6f)
fcntl$addseals(r4, 0x409, 0x8)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103002, 0x0)
ioctl$TIOCMSET(r5, 0x5418, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x98)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000300)='6', 0x1)
fsopen(&(0x7f0000000440)='sysfs\x00', 0x1)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000140)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b38ff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0})

4.144291472s ago: executing program 7 (id=605):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r0, 0x1, &(0x7f0000000040)="35738b86")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x8e2b00)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000240)=""/127)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8)
write(r3, &(0x7f0000000180)='11', 0x2)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffbfc, 0x2}, 0x2e)

2.189880614s ago: executing program 0 (id=673):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0xa001, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="2eab9fbdcb4fe1d5e3", 0x9}, {&(0x7f0000000200)="b15bad3ed8bd6576", 0x8}], 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f00000000c0)=[@acquire, @enter_looper], 0x53})
landlock_restrict_self(0xffffffffffffffff, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x3c, 0x6}, {0x6}]})
r2 = socket$inet(0x2, 0xa, 0x90f)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e27, @broadcast}, {0x306, @broadcast}, 0x48, {0x2, 0x8104, @multicast2}})
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000002c0)='batadv_slave_1\x00')

2.189171704s ago: executing program 6 (id=674):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000660e0000000000000000000502"], 0x18}}], 0x1, 0x40) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000580)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) (async)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r5 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000740)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x9002}, 0x4)
close(0x3) (async, rerun: 64)
sendmmsg$unix(r1, &(0x7f0000000080), 0x318, 0x0) (async, rerun: 64)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r8, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCGSTAMP(r9, 0x8906, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x40, &(0x7f0000000080)=0x3d, 0x4) (async)
ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'veth1_macvtap\x00', 0x1})
truncate(0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, 0x0)

2.188543794s ago: executing program 4 (id=675):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0xa, 0x62080) (async, rerun: 64)
r2 = socket$inet_tcp(0x2, 0x1, 0x6) (async, rerun: 64)
r3 = epoll_create1(0x80000) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000003c0)={0xe000001a}) (async)
read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) (async)
epoll_pwait(r3, &(0x7f0000002440)=[{}], 0x1, 0xdf3, 0x0, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x6) (async)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) (async)
pipe2(&(0x7f0000000200)={<r6=>0xffffffffffffffff}, 0x0)
vmsplice(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)="c6", 0x1}], 0x1, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000340)={0x5, 0x6, 0x9d, 0x8, 0x7, 0x80, 0x329}, 0xc)
listen(r2, 0x5)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) (async)
accept$inet(r2, 0x0, 0x0) (async)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000001c0)={0x3, 0x1, 0xfffd}) (async)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB])

2.115493072s ago: executing program 7 (id=605):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r0, 0x1, &(0x7f0000000040)="35738b86")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x8e2b00)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000240)=""/127)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8)
write(r3, &(0x7f0000000180)='11', 0x2)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffbfc, 0x2}, 0x2e)

90.8837ms ago: executing program 0 (id=676):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='-:m', 0x3)
r1 = socket$netlink(0x10, 0x3, 0x6)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000ac0)={0x2, 0x4e22, @empty}, 0x10)
listen(r2, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000d00)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYBLOB="4487aedbc842a0d56427055727017429ec912dec5a5008d60b78f46676f4e9ca96c6a28724bac2f713deb870995d6005acc7", @ANYRES16=r2, @ANYRESDEC=r3, @ANYRES16=0x0, @ANYBLOB="8ad3b9a503d615a4db4879fe63ed702da13693589deb874156bea63328ecc9ea8d246b9392d7347185067babd577c6f18e1becdbf2d6c427926199da5dbf5e022514b6ac39609204ef4388a44d4a6094dd74212aee63130d6715a911cf751afbc6667cec07ab63098bafb9c90cc6c102557ac5a026daa5f5a12763e74fe667644e94aba11abea061fd7ac99206bd3c3499e6cde274cc05a2172e86030b664e5db72989f790ba5cb33b1037b641ecc08cdcfbcb99abb681a838d2cc58c37856b91339af39"], 0x54}}, 0x20044010)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000a00)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190019000400ad000d00030000000006040000000000f93132", 0x39}], 0x1)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x9, @none, 0x6, 0x1}, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000b80)='./trace/events/sched/sched_switch/trigger\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
pipe(&(0x7f0000000a40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0xffffffffffffffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000900)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000940)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1c00001907002114d5f2e50400"/26], 0x20}}], 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/sched/sched_switch/trigger\x00', 0x64200, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x6, 0x11, 0x0, &(0x7f0000000a80))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x78b})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000340)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e706916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639670fc2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29863a0c71e3367846cffe17c4a29a76eb635e95c6d7f4d846f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda4983608dc2f5d5e92392a141b0f2f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f55d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37d72efc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"})
ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000000840)={r9, &(0x7f0000000740)='}:$}.\x00', 0x101000, &(0x7f0000000780)={@_ha_fsid={[0x4, 0x400]}, {0x44d8, 0x8, 0x8, 0x84}}, 0x8000, &(0x7f00000007c0), &(0x7f0000000800)})
write(r7, &(0x7f0000000180)="686973743a6b6579733d63ead6f77e0d373e66017f4758cd4af72eee6f241f90a813633b8e7295a59da65d06dc9ca1d0f3054aa18494b327c939f970b6e273ceb695736c3f87db80d311e488b8029c2d24", 0x51)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000bc0)={0x7, 0x0, [{0x80000001, 0x9, 0x0, 0x100, 0x4, 0xffffffa1, 0xa}, {0x4, 0xe, 0xd, 0x8001, 0x1, 0x9, 0x2}, {0x1, 0x9d, 0x4, 0x6, 0x3, 0x9, 0x5}, {0xa, 0x8, 0x4, 0x1f83, 0x9, 0x6, 0x7fd}, {0x4, 0xfd60, 0x5, 0x3ff, 0xede5, 0x3, 0x699}, {0x80000008, 0x2, 0x1, 0x81, 0x7, 0x2a8547db, 0x7fffffff}, {0x80000001, 0xc82, 0x5, 0x4e5a, 0x2, 0x6, 0x5}]})

90.476961ms ago: executing program 6 (id=677):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket(0x400000000010, 0x3, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
read(r1, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x80)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000040)='SMC_PNETID\x00', 0x81, &(0x7f0000000080)={@align=0x8, {0xfff1, 0x5, 0x5}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f00000001c0)=0x5}, 0x1, &(0x7f0000000300)=[{0x0, 0x3, &(0x7f0000000200)='SMC_PNETID\x00', &(0x7f0000000240)="0bd09fa9fcf85a89910d909da1279a9b3a6b503e9565cade177d26d35cd48d87b3c5421a2d9cc935909f26fa761c5c087ce581b14ba49d544d53e845c3c3c092d4037663676f40dfa51f3e03ffc44d62f678dd9106e8536dafd94def6899aff98ddb61887182864109768fd59fce6a6876100525ac02132766cc5ca8cde09345e9170d3451c870d584a96d9fb185", 0x8e, 0x4}]})
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000030617347d05ed72a676b19ba005009f010000aeeb000000000002000000080900020073797a3001170000"], 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x4041)

75.432502ms ago: executing program 6 (id=678):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffff14}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x11c, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x48, 0x2, "10fd73910e11579a9ad9c295ee9f8411fee69f8b9e1539744f94d48a4013419d4222d9ac6045636e8fe8e02ba3f79dd3698257a3fa435c6cc96a7dc5bacf60bb8a181bb2"}}, {0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc7, 0x1, "fd031be2024ad93e4e6b45b806ae7c4e87697945b398838c1d3558cb4a8afdf2ed8d8af279d42a2493a10dd4c809faf309e0b610e0330b04f93dbfb82dd80e394148470c601ffa24e414a4d932e069dfc7997f05c610b4f531be6f51701025e9db31d954140e0722a0d8eb1bbb03dc037cbd04ab653827ff9e1513abb3e9cf465fad8c9e8e6a7897e22984b1d131e6ac97ccd13e3ca54e9786a19fca19fad20fca183b2918a849ceef148604f6fdf2738bdcdf94f54e266dce4911e67d7d5ba80bfde2"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x101}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000080)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x80}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa8, 0x4a}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x1, 0x0, {0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3}, 0x300, 0x5, 0xd4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x10000) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'caif0\x00', <r3=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000680)={'ip_vti0\x00', <r4=>0x0, 0x700, 0x700, 0x2, 0x4, {{0xa, 0x4, 0x1, 0x2b, 0x28, 0x67, 0x0, 0x4, 0x4, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x5e, 0x0, 0xc, [0xfffffffb, 0xae9]}, @ra={0x94, 0x4}]}}}}}) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000780)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', <r6=>0x0, 0x2f, 0x5, 0xd, 0x1000, 0x22, @local, @dev={0xfe, 0x80, '\x00', 0x32}, 0x80, 0x8, 0x4, 0x2}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x6, 0x4, 0x4, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x10001, 0x7}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'syztnl2\x00', <r8=>0x0, 0x2f, 0x8, 0x3, 0xfffffc01, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x20, 0x80, 0xfff, 0xf5}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'tunl0\x00', <r9=>0x0}) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a80)=0x14)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1a0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x240100d0}, 0x810) (async)
write(r0, &(0x7f0000000d00)="cea7d022e72ae468ba22fab014405147273c91a463d538681600ee89a0b98b1c5d94c58778a42402c21d4914668f4bdb6b2cb83d1551224e4d1492952e07647d90a60c5ee50bd7d4fa170d961a23bb3cd39b170468b9d0a800ec9c8eed6ea329e5c9a25126a013bf9c50c5d731b740a7c9fc5cb5632d367985ecb99b760de44677", 0x81) (async)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e00), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001280)={&(0x7f0000000dc0), 0xc, &(0x7f0000001240)={&(0x7f0000000e40)={0x400, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffb}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x368, 0x8, 0x0, 0x1, [{0x364, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x334, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e56d0f1662e3fec317f3ce28c2412d4018357d2867fde37f96f364c4a132adeb"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x83e}]}, 0x400}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) (async)
fstat(r0, &(0x7f00000012c0))
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x80)
userfaultfd(0x1) (async)
r12 = socket(0x2c, 0x1, 0xd46b) (async)
r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x414043, 0x0)
ioctl$TIOCMIWAIT(r13, 0x545c, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)="a741db21e7a3796783b6bbca0288d61f1789be19c465b4fc569ca0ceb89e72b2d5d38664d4feb412f23748f3c9b623beced28a9842c97057956a0018ac4b9533b803dd48d56a5db92a208abe67fd7120c5c51a1a9d058143c6cbb1dd625216fcd3ed94837e0b47ff9c8f455ffbad303d744139d9e51950b08128e2f75b92af72973f132fd835db56a5f1af06b7d1f1f93e56263420cdf2605156f80901e54afc63b62d22e2156c85d8c15ccb54376fdf97c88da1bdb04f1d28eb3268fa2f88", 0xbf}, {&(0x7f0000001580)="976b8b92bf7bf93cfeeaf7663fd220ac5bd27f5ddc716a2369cce81aeb62f38c5e4c10619ecaed77e419737f569b37defc1084ce20b0", 0x36}, {&(0x7f00000015c0)="256d904f2cf70954c85d63fc1b2d05be47894d71270b8625efdcb16556baa1c749272507c5b3bcd5fa83c38bb057fc982f4523aa7cd75da32239bbf203ffabb9de7578a5e390adfa7a7eb63935b15b17fa93f9e71451af149dce970b3abf6e05f7ce7e5f541f88dd0de8c5c8c27007e4e65b8aba13e0528388e743ac7aac87ccbe98643cc3c5998f4826415106c72097be21eb8f040f10b77754cb49c0857ad9d2bdefcc01c7de8911d5a50e0afcc939e65f2f4219fc489cab38aba4a955c0fa54c5a1fd5ff09508c0f8f9c609b1ce8b3002c7965d0d1b3b26ac979dbe40eaec7a6e5e6bc32f4fbf392551b24cd00598", 0xf0}, {&(0x7f00000016c0)="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", 0x1000}], 0x4, &(0x7f0000002700)=[{0xa0, 0x10e, 0x7d, "1c6e3c59f482b9fd3aa33d587689ff177369332be7d8811d8afd43001feac4a7faf92c03c2b56ff09b4404717dd7dd8b874a9e13b191f9fdb491217b8b1a8b0b0b68af6d295735a4e45506725611fc75c24a5c21dba4047803c62d4f5413baf1685f2a74e00fa757e3b51f45abaf6d33027e8af42ec4a554f072c4405c146574b0d5b81b5c1bb099f5388f83191d"}, {0xb0, 0x11, 0x6, "7336b660e3c3f8645e164fe1d3746a8a28766845b09181b6d7fad61eebbbfbfbc822fe7b31790baad98167a6832eae5246128bf59e5a6a9f6aef8f3b9e61409e3b36084172ee5bebe6bc0a1f5477ec4c1dc72707b013776624313afcb8017df172dd7dcfbb40ed82a2360e9789adc0a4576b6d960d1e44743277d9e622f2c12bc6dbcff6ba5c375b792e814274af44b9d9b0cdbf3b25daae15c71c10beffa0"}], 0x150}}, {{&(0x7f0000002880)=@caif=@dbg={0x25, 0xb, 0x6}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002900)="5988ecd58d3a27b038d77363281e1af4be424a78d25f4aeaaafed508d04f2eb1862e7359c5c0fd3d8c10e6cb2154119ca30733eae41597a8c7570ba1a238ca227980b8f39d5733d2cf1d10392b6e2e7f3dcf4655df5b77ecd6872768940cb4619210ac4bbaf58d5dec74bd7df3438d275890fc89246cfffdcb1411aa86e19d1070b3c89673907a17b6cc01d86c4ac5710b81d4b5f42721bf78ca2fe60c58bd3b6ffefeff82998c6966aa8d5a1ea75ec05ebab7dbafc5d22f19ac6560a2be45f569cb20", 0xc3}], 0x1, &(0x7f0000002a40)=[{0xd0, 0x111, 0x80000001, "91db94f018e92609f8f7bf7bed49440f9bd634824220838ffbb1b28a97dba2bfa70d0d48cb852cc35d699bf79e838a54f0e8fb1b52b61eee76ff33d9242f428112d264a9a8640a2c5a2d6162c2584c35cb498f46c97e1592d756255b4c72b1a6183801bfb92a414fc555bbbd99150e21de10756b6035bb79e9059e57c9eb9e059a43ffa9bfe340f87446dd0fc334f194e143cba1a6d30eb22c2ce098d2e2b1e624673c2355b7d1cd8365d5d7f8ac6c033f6abc26eb89f1f9d9b7fe7654"}, {0x88, 0x114, 0x4962dccb, "618255f4249eda28a3e64b12be62df85808e749c53c1f763e0afdb4b3a1ef7e5461dc6060e4c389186bfa94d0568605b6be044719b442ca4f733810848d7148a343db561d618fb7bffdfa724c56a3996fab2f68ab7fdf7c21a3f4c40d706e7fdd052bfe253d21f74317a0682e5c5da5b0dd5"}, {0x1010, 0x10b, 0x7e, "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"}, {0x68, 0x115, 0x200, "52332f19ec609fc958b9fdca0c2cb816ee5f2b5ca77b66dfd4acaf8cb5fa8d83ee4e7eaf0582e2336a0622fdd93a54f9ecffb3bdec841bc05b2251d3d59d5443eda1d8ab16847e38ce903b399da9dfeaa20e8e33840494"}, {0x28, 0x115, 0x2, "f4b15386abb9ced26162d86b7e9e4db273af712d"}, {0x20, 0x84, 0x2, "8f19246896015366adef"}, {0x18, 0x104, 0x200, "2df4c06e33d596bd"}], 0x1230}}, {{&(0x7f0000003c80)=@nl=@unspec, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003d00)="9cce98fd3c97ef26567b02be27788c81e0103bdea8895288802e2bb877b6bece5c60f767b18e57f1663f0553a3c371b847fdbe040803f184385477845a2cbafc2104eee5b52c12ae31e1a56ec415af3a06a2ee608b8b49e4789e520cb4fae8cb0d09fa20d970533fe59a4c2d162c3f33ccf24264a2740b8bc2902bd1bcf34456640c4b9d0d541ed3923715a89b3b5ef328c5b5021c115b509ed06769cc9bccfc3ad3883a4ceb8d1f900472db52f83ad13642007ff121950ee7cdf8054309baf776151b0a8df1a7700f0b3033f769a3160c5149668fe0e47a8b4039bec5d6b3b6e2e46b6745b49c581a26ae8df262519f8d940fbaa8", 0xf5}, {&(0x7f0000003e00)="1177185123588ae571234ea92c80072443e9ba052cc5b225500bb6bf968a4f2271c18b0ab03a8cc07205af5a454b6cd199bc3bd18589126d75468614856ba8208e0798ef3ee7ccba5dbf812a00b595067719552dce1f454b622583f45d52c188d7bead045ee300356a234a6c16740c464cd42b9b6cad4d5886d9b51484e6c458295955ed6fde388bfa1fc2e0bbe425b2879ee13249a0466127d436f4befe60af", 0xa0}], 0x2, &(0x7f0000003f00)=[{0xc0, 0x84, 0x6, "060a857e2d12658d3e052b131774e09881c10776e338a1f53f59d99a8efbfe49fe4e4d25d62c2361eb8420d64ac1cb9643ec35f4fe5aafe3fcec854a77586b64681b38747740ed7bb25bcf763e06bd3b1b51f19c07c8863908e7d0d85c254af3450fcd8ab486a785a85d1e3615476d906e01a76a58dd6b58b3706cf3226c18970209ee7023353b7bdd62cadf4eeb27d98b6f7761b3e1a46787dd781a65a6ed5ac55dcb62eacd34924614"}], 0xc0}}, {{&(0x7f0000003fc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004040)="eef6c8156714e11afa23", 0xa}, {&(0x7f0000004080)="791703d97cd47deb65e045a502f2f569fd8d74778da2512a7caab87e4167a2dcd82a982fadf8b1e1977f88b823cae4ad695d07ff233b5f039c676616baec21d1ac9291b521c1bc14de704f96429cc7f3eb8224d139c660750912350d374e50ecc1a6a2c3114ece347325ccddf29d72558a10de50a8e916a542e92d22e7cf1fb4167e6d09a6f6ea41f0154bff79747dbfb9b909dce10d8848af95a2ff7853a8c83ae2f60ee31b7f74d91e12d8dc176c8853f69b82b9cab13f9fd3345220d55e38df11b39b8cd5d4fbca7dbe3c88fcf97b7d942fa9e2fa112f9444af4bb631dc76e4899d0f41d307b8266b0d2a1f4e5348666f427a3bf18c1d2c86e4c9751fd6c9e29560c4f3228dc78c64ecd0bab94adc6fead88fe42c0f0aacd7e5f500473e623a9649b048132c6498f1f03f92c6d24afd6631301eebdf7d9cf43e09e2247f79b3e0775d2cf15ba44fff8dea0b183ee35984503eb980a4bc4a489499025910d43a37564f6ca574adcd8febeb21bc351544eb00f7b0802d06c06d458ebdae82970711aebf83f1895c076abd6416a6cd7f64263269b00b9a54ee98f65c3b247a874537e71b416e4b8d74c2ac17df11d469d0b1c62eb0d85ad84d74ad0dd72515bad678cdc8a51ab53660761df51db6184a6dd3100d4b6fd2c08114f416a8ed6515b4f10c70965dad6dfe0b82b608f14c2d68809166957adcee88fec7327413946316f023c822c199e93c639c2c36068ed8704cee3e2f4cd6fe34808659e951bc54cae00e0dca600a71d48c26d11cd9d3add99b4a2a55b09a09ddb357972dec8c30155f50ff64b132f43f17c03160a4e2d1f0becf6e2541596f8669f9b0aa9765b8fa5c5ecd13376c099c8fee968cf8c20e61afafe3f2bed0f057860d2c52c4980e3fdd1aaef06162c48649256958a25bebf50e11d1fbe2f526c36e80785038777a12f5db542b6c2078c43e2f39f80318650a690920e2a2e355a0a9cfe46630fd96107274d77c7e0ccdfe1a51a0aa497b9fcbb4c975b1bbc0f81f8e9805c53c6b2ec9daddb70435b0c2d5cd136e8a26ac1ecfbeceed7d1fa65c02a10bfb09b1ba87105e8f748115efb60d9ad7a349e09ce85ab173dd92d30139bc70b5bc01953e6eea24e87a130448a07bf2bd0f56e3cd39e8f989f008dc8f9fb683d7dc02f94fb73777aa8bfd5c68c175eadd76e68035f29f58da8cf0f1cf5e7b23e03651366dc4665182c391b209e5d4733ab36af573d5a2d3eb42fa224219e08284eeddca5bfca5aa60f7f61e2268e247c5a0f3250e9574710d3999cfdffeb9c553088ed81b0fcb6d6c3dc35687442550588c908f1bd1fe633395d4cf286bc058d8329209d7539d60b976c5564fb1e58c94f1a09c454281116a2558aa85cd3a43a80f4e2ce183b179734c673b18c862ddf2afac92bcd055fb448dc39e8a9f5bcc2a4f9305aef256b6d9105bc8ad1a1eaeb8ea0cdd1b8b38d68c3f4ddbee3d2abba8aec95e9b7261277918f7480961b0da66d27319e0ab42fa3233e9e5c4cab46f0966fcbbf8822bf569204eb6498eaa3939e0ce4f26b738c8dd4006da4bf1bf3c1d518a7be44be3c321fc4d8ada0bc2174f173ce00ede11548fb20f67b03d665acd230526493eb5b0e1b6a2049417a50753a1c7b0773498efd4b5a89128ff1b39dff28d7f5524f5c57071ebccc41e1679f7b3ac70a90cce9adb917f1cc50dae1f010223f647152d5c3046cd41d8c5faafee642a541739024c44ab349547a637f3b8e7b539aa841f9bbf5a86ba6e0c1660ad01b1aa18d792c24b6e2f5c62db36e35543e7230ccec5304f6ffae4164fdd8b052353ab6bb85c5fd6bcb23e1d4dc3ee931f1a0a732bfeadae09be59a9ec577b5b53f845fe66262a9d2ad4b84028f048e02b0fdf48aa8620b2366999a89a98c8de948ca9d9c840f9e2e73ff4124b2fb534429189d63716c83d5e56f590588c97e0663226633efc56a0b4cf4ec4977b77d450ac7b4ef802f9cea3b658072c30246a2306d36032383ea1ea9232a44b9a7de3569a1768afab437ad21111529deaf9b0c673c272f57dcf526162ba2b3f41f6b048e91a35105d505d6c4388029981e8d26bf797cbeae9199e2a690f5bb9477f9dcc2e8651bce362443bca57fe29eefd93ac0cc4cf1ff62cd5592a66b927d169683bd9ccbae344feff0ec4b6a1872c8e6fe6d303f50b31f9c6243e234fd7a7b5bd982d2bfe081915d59c1301ef02d958e034bb604cf53d68d206b44426e330ff8baa80dac8afe09a770466ed80a305e3f78cbeccaf9da5cbad75d4f4390367c31871993b9b307e1a0a3dafed0e31fae8a04120ac140f0ea2078a3a4432ba133446aac5cd99c466756f98fcd8b07472e24a476a8d2791f3352db8887b22bb9c398a66dfff558c27a15fefa0dbc04f84d45db2a5c1cfa177898480ad5c0212da074b3a41570e55b89ecb9feb3dc5ed57910eed28f8f94665ed026dd3f4c668f44e0cd89240d6809bcacf412ffe2600c09b20657da6baeaabb817eccdf2571a62cef0212c61e9c4e5669ec026ee84cfa1c81c15ab82d9887e1f8f7f2a8ac44fa72e9193dc1b1922676240936617e84a87961ae8ed446401555ec00a325aa727f59240966d66e46c90fcc359c122513d44dd003c5598b15a712b08a760c8c8b6875b27dfb0ca9a74cef53aa859eb43168e6de66b1d05f3f78f55d6bc7ccd3ad21f8d08bb4c94d812bcbcacc6e4e33189366f873eefc433bfef03a044503d01a1bd520d5a26b237aeb1a56b96513015bb837acd1710b8c7958609889fe3b326f004b917ef3b7cf9e569b5e7da763db58fa9ba6e7d61a4960aac58539beeb0d541652be2bb6877f0fb403490b9c6da21f78d5e7213abf3730ebf3cb56173d449c17da4f2bb7de655662d268b29fd1f8f4213129464e39e57679337c7017a512ec6c652110530e19337d9dc8bd3072d2445387a9a882ba806023c068da9a3c1d030c92463486e3e014863999a8a6130849624893f4c5a3c85da986656edc07a4a22a6ac18d9090f7cf558713acd5d0150f545f741fbe2a5d6cc6d941a79cba9c3ebcc4c0513971c0e0d0d65f1eabd6ccf142b00c1c31b9889157b8fc3600b0bc76289c1190718b773135966070731d1e10784b4dfcb26d550dd795e1a408b8b347c7e9bec6752abe946af9047388cf2e421d9a5fb389b508b0788713f211fa8f8c9c4ef65344bfa69fc801bf050749f244723b0734d489008e4316eec1934e996bd3017c55112007f9ab01f2c553d3323ce95db56977d4c87cdf0b2a7388600326a495e4dd5bcf2f30f065fd7b33f403f8558d43f3afe2927f824dc4a5fc8ce95189344522cc90129a1cd0c47bda8c9c291ccea8ae0ee2929ad017b85677db94ae66415aa6bae44006a4137267cdb4449ecebc2c2c45ce298fa15e8f065582251f724d68b1e16fbc83d2fae288190b3f34a82e634f258fc1d636bcd6f23446593c5a76b962f2a00051a123ee984835c480b3f89fe6ea0ca11e53f620e67d0fa876862ac949096c14a1fd3b307742ccea2c2ea6507096d46a3789b864cc405c7c504aee16047cc746247c43537230550312e384b2e54f87fba58ff215f418e7540e29a310a99007f3eb9899c053e4949a41a37fe2fd50ada9605a439be100863242887adca92137631f082d78c1d763b8fdb24b8dbae7a52fc9f6859fac5641481a4b13b8fa8b2ee25682cb595103ae9c522770658fd203d0fe8de826eba91f18b4035bea607c6449056d38da483860cfb5df9f8798e0905ab93a10938a1ce090b0f3efdc8f2a5ef1971d7a1bbf8927c678971be5fb6c71dfd0543bd57cb4261e3bd6fe52fa331594480fc0558d154c8fbb84ee6b7f16bafdb9d81692ba9fece7feeb85863077e1cbf6a567a306c6920f0cd60a4a777366c8eb8b4ee2cd21ef0b96e0fef789e257b54b1de8d700a30d5dcf00470a57ce05689ded78895432eccb2bbf05253470c6b9314bf062890126f7cc59779fc306f505db718a4dd90c97ec622b623668281f3204696ec714a02ec84fecd82e566e29f7eba61c2f9acc56e0453cb89ec27a9e34f7dbb59a96e65895ba5552488d838bad256d618cec9f9d0a6f53a3d576afe9fd7bf080ad7abeeb4bf211b8c5623544d1280087bc62a83b97645bc47cd3680fd15b2f279bd78e10e8f64e37e38c61bcde83e4d220084c62895fbcec4eb29b8f0becb128a7a009504f3b0a7f9c51ecc5a0746fb826dd58a9eaf5fcef95166356b1a1cd5a7e607ee47ba6bb17a1dc0e91617d55247df888eba1814a4ebc3be72ffaabd66dc6fbd85113a3b5543e2d19b42dec07f4db0b56fc49a835b9a9fcf7ce5719c1dc00c199f77d8f244eec0f3111d50d276cd6ef88b9ad8df712b0a93f2ba70306a1f180a5e6b41b088bd2dd3c9256cbccce2b07612c7f133e02ecab2da45e642ef99e5fffdf79d3d9ff9dee4a6633b4f9e1a9b37e3a56bf5d65fbe885876745cf2db5718139eeadef46a13614594a57cf8c61ae00f12dc47cee61f6a99863e945795983c6612949bfd98f648897d9d7d0bed3f218c63b3409f7326eab5403614f3e2323b6d8b4b0c0126c20b66c8d99d4d80450cf12145286e4e018b625cb1dbd39f05f4e286fca95848875a6ce1ffbc260e49b411f957f9687a6cc2af0387ee760e3f7204f5448ad204a18adb7005ed7bbea8b21f69cfa92085e7132bdfc3dbc5d71e047e6b7de969138b0b7f5783f20548690be71f65904ba8f53f0fd088a74da739d8197b68388319a241008072241e97f236fa18da50a0015c524f1dd64a493dede14ceeb8f5a485aaab096423beca85dc14cbb0b28d8ff240ea503978fa55c7abada7606b026fd3902dd9b52d8d00d06c2096dac1a1025bed945466db3c686a111dcd9410aacab34c01091740a05651415daa6a656025e9bf9f2bd8fa58d7b55ba4aae7080864274b5ea588960c2dc2ac2c0b1481864a5991c1aa3e88e1a7242c33c1b14260b5c47156d974dcba569aca88ad59cbb8f0267e08588193f235e3862ac2a05e3b78a04088909741d4117792059a99f1124fbd2d5a7a993b1778f5be3eb7121976a3e6a3b36e3226be5e33ada9a32dcb4be3bb7ac1769974599aeb505753a28a170b6868df5527a6daee2d2fc792328f0c2347d71540aa3ed9018d5578483454309482d2f7952edd5597faf25da5e7721490435526907b00407ed79e7c8ca3a2f77b50e65208a00cefc8c4c037487f3fdd2d7a6782e849e598ad19daca8cd78b495f2f2eb6bac123a71f19e124e5bec7f0d895662647f05a2f393c503e5547a8045a03ce65036727997372ed3e4a16dddf6722afa4d419e489e884dabfcbf6f275f05dbad65650bb81a7c2043b459df91047d42e0adc17093450eed6309b41f5c950e66e0785f5ff9fdf7405128d75e1fdae9e8bf6c8c6ac35b744b20090e5a6f33811c8942253368898bd02b05ffc3b88c5a5720610200df95e63278f30a0d623946a16e6a376559a67e3a06151aa9cf391782a18e3dd151ce92d9f34bdd6bd6210c5d1b3864597b998a93f74e217de74b57b96fed75809a32db6ff70c823d0dc281b4ed57e146e0689e8e2869bf234ed9f718ff62390475996019cdab2b0b7c3f6d0bb67035b6d042f9f50d4e267272b4abb827ed4910b6ce50cfa2d129eb36b7682406f8b6bae25b416511cef08d537f79bee1e9f7b617d611f20949fb5184db2f750885902a7e55a54a5709a8c97f5d0ddf10f3d318c23ebb9e0d1cf5647c3c493d638211db76086914c819b00a21ab2108599e07f4ed7", 0x1000}], 0x2, &(0x7f00000050c0)=[{0x90, 0xff, 0x5, "5fd2daf76370be14126cf04cc9d273d3aa35deadc4f0c362a15df04d36fb4b7becda649328ecd4e8fb58c74912726e6737688a7eee0e6302b0e51494d200baaf24b226947b333aceaee90c1f3e1f4c4cc15d10af56e8f686fb8e825b592e0530fd1667d7da60a29e936fb397a2ddc56ef36d08f2da40352926093f550850"}, {0x20, 0xff, 0x3e21, "cee5fb1141346e928517"}, {0xc0, 0x0, 0x1, "b2e7a266d769a01485b243afcca9d0ea8cac2dfc5392ddc091ff5087deedf6bfab6a2a4121566913de9246c7197a38d13f9a54fe341f324825d5f724ff94acd060d8ab3dccddc690974620592aba1d287b4cf19dd7d0a1c94305fc1e817589000719c249427962c6d875e569d49ed14a63e9bb5ed1223bb507875c4e07a028c48e2bdda1b20036605bb2a4c57c40d86384212a526a598716dec4a9adb71af86467d748ff83009cd9e4ad94b3"}, {0x1010, 0x1, 0x9, "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"}, {0x40, 0x108, 0x6, "020f33e0be4cd7a58eedc585a9a353575d1c0e60c8429dbee0c87278674196cd0d0e2d106795eb00b509348d"}], 0x11c0}}], 0x4, 0x2008041)
ioctl$KDSKBMETA(r13, 0x4b63, &(0x7f0000006380)=0x3) (async)
sendmsg$OSF_MSG_ADD(r12, &(0x7f0000007980)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x80800678}, 0xc, &(0x7f0000007940)={&(0x7f0000006400)={0x1508, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x8}, 0x6, 0xe, 0xffff, 0x4, 0x0, 'syz1\x00', "31f18896b802ebd47c26e5a383dca02b45bd15d1c8298fef6f7ee58b42800137", "5a0aaa3b0e6fbbdc48cfce6a368739f71c40767ba15e2c7f2b96223caa9be06e", [{0x62a, 0x2e, {0x3, 0x9}}, {0x4, 0x446, {0x3, 0x4}}, {0xd8fe, 0x6, {0x1, 0xd68}}, {0x2, 0x9, {0x2, 0x6}}, {0x5, 0x0, {0x3, 0x2}}, {0x3, 0x3, {0x2, 0x6f9}}, {0x1}, {0x2, 0x4, {0x0, 0x4}}, {0xb, 0x0, {0x0, 0x7}}, {0xfff, 0x2122}, {0xc8e, 0x7, {0x3, 0x7}}, {0xd8, 0x6, {0x0, 0x2258556e}}, {0x1ff, 0x8, {0x1, 0x9}}, {0x3, 0x7fff, {0x0, 0x9}}, {0xf800, 0x200, {0x2, 0x54d9}}, {0x4, 0x4, {0x3fe823afe2ee62be, 0xca9}}, {0x401, 0xe77, {0x1, 0xb0}}, {0x3, 0x4, {0x3, 0x4}}, {0xa1, 0x2, {0x2, 0xfffffff7}}, {0x4, 0xfffb, {0x1, 0x9}}, {0x5, 0xc60, {0x1, 0x2}}, {0x9, 0xfffa, {0x1, 0x9}}, {0x8, 0xf04a, {0x0, 0x7}}, {0x4, 0x7, {0x0, 0x200}}, {0x8, 0x6, {0x2, 0x4}}, {0x401, 0x9, {0x3, 0xffff}}, {0xc1, 0x40, {0x0, 0x6}}, {0x5, 0x800, {0x2, 0x5}}, {0xff6d, 0x2, {0x3, 0xc716cdd}}, {0x40, 0x9, {0x2, 0xd}}, {0x7, 0xbac, {0x0, 0xff}}, {0x8, 0xf6e7, {0x0, 0x4}}, {0x8, 0x101, {0x1, 0x10001}}, {0x4, 0x8, {0x1, 0x9}}, {0x5a29, 0x100, {0x1, 0x6}}, {0x9, 0x4, {0x2, 0xfffffffc}}, {0x4, 0x9, {0x1, 0x7}}, {0xa1c, 0x2, {0x2, 0x4}}, {0xa5, 0x9, {0x2, 0x9}}, {0x0, 0x6, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x4, 0x7, 0x7f, 0x5, 0xf, 'syz0\x00', "f4719c2850405737e0f837aa2b53c99293e137198f7f53a3d1e33eec2c2738db", "896fd90b3ff94ad7a2c501c1657a3a0337bb1babb3ab05fcf1e7138dc4ec4cf8", [{0x3, 0x7ff, {0x1, 0xfff}}, {0x8000, 0xf, {0x1, 0xe8}}, {0x0, 0xa3, {0x3, 0x6}}, {0xe74, 0xfff, {0x0, 0x1}}, {0x7, 0xfffd, {0x2}}, {0x8, 0x7, {0x3, 0x20d1}}, {0xe000, 0x0, {0x0, 0x80}}, {0x0, 0x1, {0x3, 0x400}}, {0x3, 0x2, {0x1, 0x73}}, {0x1, 0x1, {0x3, 0x9}}, {0x4, 0xffff, {0x0, 0x3173}}, {0xfffe, 0x1, {0x1, 0x3}}, {0x5, 0x2, {0x2, 0xfffffff9}}, {0xfffe, 0x2, {0x3, 0x81}}, {0x0, 0x5, {0x1, 0x9}}, {0x4, 0x7f, {0x3, 0x1}}, {0x2, 0x9, {0x2}}, {0xcb1, 0x200, {0x2, 0x4}}, {0x0, 0x4000, {0x2, 0x8}}, {0x7, 0xe47a, {0x3, 0x80}}, {0x1, 0xa8, {0x3, 0x80000000}}, {0x10, 0x4, {0x2, 0x3}}, {0x10, 0x6, {0x2, 0x3}}, {0x0, 0x6, {0x1, 0xff}}, {0x1, 0x2, {0x2, 0xff}}, {0xb77, 0x5, {0x3, 0x6}}, {0x2, 0x2e, {0x2, 0xffffffff}}, {0x4, 0x9, {0x3, 0x4}}, {0x0, 0x6, {0x1, 0x1}}, {0x2, 0x7, {0x2, 0xbf8}}, {0xd3, 0x9, {0x0, 0x8000}}, {0x81, 0x7f, {0x2, 0x2407}}, {0xc, 0x0, {0x2, 0x9}}, {0xffff, 0xd, {0x0, 0x7}}, {0x3, 0x5ed3, {0x2}}, {0x6, 0x3ff, {0x3, 0xb}}, {0x2, 0x6cad, {0x0, 0x9}}, {0x1, 0x7}, {0x4, 0x7fff, {0x3, 0x1}}, {0x9, 0x7f, {0x1, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0xffffffff}, 0x95, 0x5, 0x8000, 0x8, 0x26, 'syz1\x00', "0f6f04997bf086ddb3a0f62ea6ea9f744050b5caa8e0f0a2f7908e25773a7d47", "51107bb5fdaad2c59801289d6910b5b22492cbca7ae59155d2c3a7856db8928a", [{0x3, 0x6, {0x2, 0x8}}, {0xf3, 0x5, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0xffff}}, {0xba, 0x53, {0x1, 0x6}}, {0x4, 0x2, {0x2, 0x4}}, {0x8, 0xa, {0x3, 0x1}}, {0x7ff, 0x3, {0x1, 0x9}}, {0x2, 0x0, {0x0, 0x3}}, {0x9, 0x8, {0x3}}, {0xf, 0x9, {0x2, 0x90a}}, {0x40, 0x6, {0x0, 0x4}}, {0x1, 0x8, {0x3, 0x8}}, {0x2, 0x8, {0x3, 0xdb4a}}, {0x8, 0x2, {0x1, 0xfffffd93}}, {0x642a, 0x8, {0x1, 0x8}}, {0x1, 0x2, {0x3, 0x9}}, {0x0, 0x5, {0x2, 0xfffffc00}}, {0x5, 0x3, {0x2, 0x7}}, {0x3, 0x8001, {0x0, 0xcd}}, {0x1, 0xf, {0x2, 0xff}}, {0x7, 0x752, {0x2, 0x2}}, {0x0, 0x4, {0x0, 0x7}}, {0xf, 0x7, {0x1, 0x6e03307e}}, {0x80, 0x4, {0x1, 0x1}}, {0x6, 0x7, {0x0, 0x400}}, {0x3ff, 0x6, {0x1, 0x3}}, {0x3, 0x2, {0x3, 0x7}}, {0x3, 0x6, {0x0, 0xdc7}}, {0x0, 0x2, {0x2, 0xa}}, {0x9, 0x3, {0x2, 0xfff}}, {0x2e86, 0x2, {0x3, 0xfff}}, {0x8001, 0x3, {0x0, 0x200}}, {0xfff9, 0x0, {0x3, 0xd}}, {0x2, 0x8000, {0x3, 0x1}}, {0x101, 0xfff8, {0x1, 0x8}}, {0x8, 0x5, {0x0, 0xff}}, {0x8, 0x5, {0x1, 0x6}}, {0xfffa, 0x6, {0x3, 0x4}}, {0x6a23, 0x1, {0x5, 0x5}}, {0x4, 0x26c, {0x3, 0xa06}}]}}}, {{0x254, 0x1, {{0x2}, 0x1, 0x1, 0xf, 0x40, 0x7, 'syz1\x00', "f5bf9638411b61697c10a20e2799a534bd5e523b6dee1db789de5399ab6fb56b", "106b7d2d55a90146196b45bd4b795ef78f69e6baac9299f80d543a491de99c01", [{0x1, 0x6, {0x3, 0x1}}, {0x9, 0xfff7, {0x1, 0x2}}, {0x9, 0x8}, {0x8001, 0x2, {0x0, 0x9}}, {0xfff7, 0x0, {0x0, 0x4}}, {0x377, 0x1000, {0x3, 0x4}}, {0x8, 0x1ff, {0x1, 0x2}}, {0x8, 0x5, {0x0, 0x5ce}}, {0x5, 0x1, {0x0, 0x5}}, {0x7, 0x4, {0x1, 0xc42}}, {0x9, 0xb, {0x2, 0x1}}, {0x9, 0x37, {0x0, 0x101}}, {0x2, 0x0, {0x1, 0x7fffffff}}, {0x2, 0x2, {0x0, 0x29d}}, {0xdc2a, 0x7ff, {0x0, 0xb9}}, {0x100, 0xfffb, {0x3, 0xe3}}, {0x4, 0x0, {0x2, 0xfffffff8}}, {0x0, 0x2, {0x0, 0x3}}, {0xf2, 0x2, {0x2, 0x4}}, {0x2, 0x8, {0x2, 0xfffffffd}}, {0x3, 0x0, {0x2, 0xd}}, {0x1, 0xfff7, {0x0, 0x2}}, {0x6, 0xd, {0x3, 0xfffffff8}}, {0x400, 0xa, {0x0, 0x4}}, {0x5, 0x6, {0x1, 0x5}}, {0x4, 0x7, {0x0, 0x8}}, {0x5, 0x3, {0x2}}, {0x7f, 0xfff9, {0x3, 0xff}}, {0x96, 0x8, {0x0, 0xedc6}}, {0x54c7, 0x683, {0x3, 0x8}}, {0x0, 0x2, {0x1, 0xc}}, {0x1, 0xf, {0x2, 0xcb5}}, {0xf47, 0x96, {0x3, 0x8}}, {0x3, 0x4, {0x1, 0x3}}, {0x3, 0x4, {0x3, 0xd20a}}, {0x7fff, 0x0, {0x2, 0xffff}}, {0xd00, 0x2, {0x0, 0x40}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0xfff3, {0x2, 0x3}}, {0x3, 0x68fb, {0x0, 0xaf}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffffd}, 0xa, 0x0, 0x1, 0xffff, 0x24, 'syz0\x00', "2ed76534cdbd2abe12b0ea32a3dd0892e6c1f80a524cfd84c0df2e5e25fe3a48", "b16698fe26c2c5ad9c7d982a6f69554c7e62e28d9d67b265bfae2cd9d7d3dc2f", [{0x4, 0x2, {0x2, 0x9}}, {0x4, 0x0, {0x3, 0x1}}, {0x7, 0x2, {0x1, 0x5}}, {0xff, 0xfffa, {0x0, 0x5}}, {0x100, 0x965c, {0x2, 0xffffffff}}, {0x6, 0x0, {0x0, 0x3}}, {0xb, 0x800, {0x0, 0x5}}, {0x8001, 0xd, {0x0, 0x7fff}}, {0x3, 0x8, {0x1, 0x4}}, {0x3, 0x4d, {0x3, 0xb1c6}}, {0x7, 0x1, {0x2, 0x6}}, {0x3, 0x6, {0x2, 0x2}}, {0x4, 0x0, {0x3, 0x724}}, {0x4f34, 0x6, {0x0, 0x6}}, {0x1, 0x2, {0x2, 0x7290}}, {0x3, 0x2, {0x1, 0x886}}, {0xec, 0x5, {0x3, 0x8001}}, {0x1, 0x9, {0x1, 0x9}}, {0x5, 0x8, {0x2, 0x4}}, {0x8, 0x8, {0x2, 0x3}}, {0x212, 0xb, {0x0, 0x7}}, {0x3ff, 0x0, {0x3, 0x8}}, {0x8, 0x9, {0x1, 0x81}}, {0x6, 0x7, {0x3, 0x100}}, {0x3, 0x7, {0x0, 0x80000001}}, {0x8, 0x4, {0x2, 0x7}}, {0x4, 0x7fff, {0x3, 0xcab6}}, {0x8, 0x9, {0x0, 0x80000000}}, {0x3, 0x0, {0x0, 0x9}}, {0xfff8, 0x3d, {0x3, 0x8}}, {0x8, 0x500a, {0x3, 0x2}}, {0x0, 0x7f, {0x1, 0xfffffff9}}, {0x1, 0x5fc3, {0x1, 0x2}}, {0x3ff, 0x9, {0x3, 0x49ce}}, {0x4, 0x6, {0x3, 0x80}}, {0x8, 0x190, {0x3, 0x7ff}}, {0x7, 0x4376, {0x1, 0x27}}, {0x0, 0xfffb, {0x2, 0x7}}, {0x8, 0x55, {0x3, 0x1}}, {0x10e8, 0x9, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x62d5}, 0x40, 0x8, 0x8000, 0x7, 0x13, 'syz1\x00', "6ead52a59f54b49bec2bb540b44fd328560c1289e8e6fd437a93a41e50a36014", "836d03062c4d2ef1198848da0d5d185fb34d9123d672642be609a01864cbb5bd", [{0x4000, 0x0, {0x1, 0x7}}, {0xc, 0x7, {0x3, 0x1}}, {0xec, 0x0, {0x3, 0x5}}, {0x2, 0xd, {0x1, 0x1}}, {0x8, 0x9, {0x1, 0x140}}, {0x7529, 0x3f7d, {0x2, 0x6}}, {0x3, 0xc, {0x0, 0x2}}, {0x8, 0xffff, {0x2, 0x1}}, {0x9, 0x9, {0x1, 0x8000}}, {0x6, 0x4, {0x1, 0x6}}, {0x1, 0x8, {0x2, 0xae6}}, {0x3ff, 0x9, {0x0, 0x54}}, {0x2, 0x8, {0x0, 0x1}}, {0x8, 0x6, {0x2, 0x9}}, {0x0, 0x8, {0x3, 0x81}}, {0x4, 0x1, {0x1, 0xc}}, {0x9, 0x8, {0x2, 0x9}}, {0x9, 0x4, {0x1, 0xb88f}}, {0x3, 0x0, {0x2, 0x6}}, {0xb680, 0x1, {0x1, 0xffffcf87}}, {0x6, 0xfff, {0x3, 0x81}}, {0x7fff, 0x6, {0x0, 0x9}}, {0x83, 0xa3, {0x2, 0x88}}, {0x852, 0x4, {0x3, 0x7}}, {0x8000, 0x2, {0x3, 0x3}}, {0x1, 0x2, {0x0, 0x8}}, {0x1000, 0xfff, {0x0, 0x2}}, {0x2d82, 0x2, {0x0, 0x7fffffff}}, {0xb39, 0xd, {0x3, 0xa4}}, {0x1, 0x9, {0x3, 0x2}}, {0x80, 0x6, {0x1, 0x1}}, {0x8, 0x2, {0x1, 0x9}}, {0x8, 0x7, {0x0, 0x9}}, {0x0, 0x6, {0x2, 0x1}}, {0x5, 0x8, {0x1, 0x1}}, {0x7, 0xfffc, {0x2, 0x5}}, {0x5, 0xf729, {0x2, 0xfffffff8}}, {0xe7, 0xcc9e, {0x0, 0xff}}, {0xe, 0x542, {0x3}}, {0x9, 0x2, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x80000001}, 0xc, 0x4, 0x4, 0x400, 0x5, 'syz0\x00', "ae501935b420948f66575229a56d5a075311ab1fd72e0226c6d6692906e137e1", "4c82e4c7073bc8e7a8a9bbf991cc2a18d7cd138307128c98fa14f7d540b6b9ed", [{0x8, 0x0, {0x1, 0x4}}, {0x5, 0x0, {0x1, 0x4}}, {0x7, 0x1ff, {0x2, 0x9}}, {0x7ff, 0x9, {0x3, 0x76}}, {0x401, 0x7a, {0x3, 0x5}}, {0x2, 0x44bc, {0x1, 0x9}}, {0x1, 0x9, {0x0, 0x5}}, {0x9, 0x8, {0x1, 0x1}}, {0x7fff, 0x8, {0x2, 0x7ed}}, {0x4, 0xbd, {0x0, 0x2}}, {0x3, 0x3, {0x3, 0x8000}}, {0x1, 0x2, {0x2, 0x1}}, {0x101, 0x200, {0x1, 0x1}}, {0x2, 0x7, {0x2, 0x4}}, {0x8, 0xa534, {0x2, 0x8}}, {0xb489, 0xa, {0x0, 0x9}}, {0x100, 0x40, {0x2, 0x5}}, {0x8001, 0xfffe, {0x3, 0x8000}}, {0x100, 0xd8c9, {0x0, 0x4}}, {0x2, 0x0, {0x1}}, {0x6, 0xba7d, {0x3, 0x5}}, {0x800, 0x800, {0x2, 0x9}}, {0x800, 0x752, {0x2, 0x9}}, {0x2, 0x7, {0x2, 0x4}}, {0x326, 0x32, {0x2, 0x4}}, {0x46ed, 0x2, {0x3, 0x1}}, {0x1, 0x5, {0x1, 0x8001}}, {0x5, 0x3, {0x1}}, {0x5, 0x7, {0x1, 0x6}}, {0x68d5, 0x0, {0x2, 0x1a18}}, {0x2, 0x47, {0x3, 0x9}}, {0x1, 0xffff, {0x0, 0xfffffff8}}, {0x0, 0x2, {0x3, 0x7fff}}, {0x8000, 0x9, {0x3, 0xb}}, {0x3, 0xd, {0x3, 0x8}}, {0x8, 0x7, {0x0, 0x7}}, {0x5, 0x6, {0x0, 0x3}}, {0xd, 0x8000, {0x3, 0x2}}, {0x80, 0x1, {0x2, 0x401}}, {0xff, 0x2, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x10000000}, 0x80, 0x81, 0xd9ab, 0x5, 0xc, 'syz0\x00', "ffcc00d7149922ab25229d94a247a153e81f0e1154f963fc787c5e535bb97cc2", "078f728dc65614235d4f81c9e5f71a0f3ae16a85cf82f1a31bc05707885a5bba", [{0x7fff, 0x800, {0x2, 0x8b}}, {0xce, 0xc, {0x0, 0x8}}, {0x8, 0x101, {0x0, 0x9b9}}, {0xffff, 0x3, {0x2, 0x40}}, {0xff, 0xf5, {0x3, 0x8}}, {0x3, 0xd, {0x2, 0xd6b9}}, {0x5, 0x5cb, {0x1, 0x1}}, {0xff, 0x4, {0x1, 0x2}}, {0x8, 0x200, {0x3, 0xe}}, {0x2, 0x1}, {0x5, 0x9, {0x1, 0x10001}}, {0x7ff, 0x7, {0x0, 0xffffffff}}, {0x955, 0x200, {0x3, 0x7}}, {0x3, 0xfff5, {0x2}}, {0x9, 0x2, {0x0, 0x4}}, {0x0, 0xffff, {0x0, 0x1}}, {0x3, 0x9, {0x2, 0x8}}, {0x7, 0x100, {0x1, 0x70e7}}, {0x4000, 0x7, {0x1, 0x4}}, {0x0, 0x8f7, {0x1, 0x4}}, {0x4a, 0x9, {0x3, 0x7f}}, {0x4, 0x80, {0x1, 0x8}}, {0x7, 0x6, {0x3, 0x10001}}, {0x6, 0x3, {0x2, 0x100}}, {0x8, 0x7ff, {0x3, 0x7}}, {0x5, 0x9, {0x3, 0xfffffff9}}, {0x3, 0x4, {0x0, 0x9}}, {0xc, 0x7fff, {0x1, 0xe9d3}}, {0x55, 0x7, {0x2, 0x2}}, {0x1000, 0x5, {0x2, 0xff}}, {0x9, 0x0, {0x3, 0x3}}, {0xcaf, 0x72a, {0x2, 0x6}}, {0x400, 0xca9, {0x0, 0x200}}, {0x6, 0x9, {0x0, 0x9}}, {0x6, 0x80, {0x0, 0x7}}, {0x4, 0x5, {0x0, 0x753}}, {0x0, 0x9be, {0x2, 0x7}}, {0x4, 0x3, {0x3, 0x81}}, {0x4, 0x3, {0x0, 0x1}}, {0xffff, 0x1, {0x2, 0x8000}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x8, 0x8, 0x1, 0x1, 0x1ff, 'syz1\x00', "0f4c93d0c148c243f030e7698dab54e76b8fb5466d0fae855f7c0052d36fb126", "49b8ccdb3ea253740ef6d4c89600b7763b9aa6672aef8931d80943b9b1079542", [{0x6b7, 0x6, {0x1, 0x1}}, {0xf, 0xa, {0x3, 0x1}}, {0xa, 0x1, {0x0, 0x3}}, {0x31d7, 0x3, {0x1}}, {0xfa6, 0x7, {0x0, 0x1}}, {0xd0ab, 0x0, {0x2, 0xa}}, {0x3, 0x400, {0x1, 0xc5}}, {0xbd2, 0x2, {0x3, 0x3}}, {0xff, 0xfff7, {0x0, 0x5}}, {0x3ff, 0xffff, {0x1, 0x72}}, {0xb7e, 0x5942, {0x3, 0x7}}, {0x5, 0x6, {0x2, 0x7}}, {0x6, 0x2, {0x1, 0x9}}, {0x1, 0x7, {0x1, 0x8}}, {0x0, 0x0, {0x2}}, {0x6, 0x3, {0x3, 0x10000}}, {0x9, 0x3, {0x2, 0xfffffffb}}, {0x8, 0x400, {0x0, 0x3}}, {0x4, 0xfffe, {0x2, 0x1}}, {0x80, 0xd71, {0x3, 0xcb}}, {0x5, 0x1, {0x0, 0xce}}, {0x3ff, 0x8, {0x2, 0xe}}, {0x2, 0x71, {0x1, 0x3}}, {0xc, 0x8, {0x2, 0xfffffd77}}, {0x3, 0x851, {0x0, 0x4}}, {0x1, 0x5, {0x1, 0xfffffff7}}, {0x3, 0xcbcc, {0x1, 0x8}}, {0x1ff, 0xcd, {0x0, 0x7fffffff}}, {0x6, 0x32b3, {0x1, 0x4}}, {0x0, 0xc00, {0x1, 0x9}}, {0x7, 0x8, {0x0, 0x7e}}, {0x2, 0x81, {0x1, 0x5}}, {0x100, 0xc}, {0xf9, 0x3, {0x2, 0x3}}, {0x0, 0x1ff, {0x2, 0x7fff}}, {0x1, 0x0, {0x1, 0x8}}, {0x7fff, 0x65bb, {0x1, 0x1}}, {0x9, 0x6, {0x0, 0x5}}, {0x87b, 0x9, {0x2, 0x8}}, {0x4, 0x0, {0x3, 0x1}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x44804}, 0x2000c030)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000007ac0)={<r14=>r0, &(0x7f00000079c0)='.@$\x00', 0x200, &(0x7f0000007a00)={@_ha_fsid={[0x8, 0x7]}, {0x3, 0x6, 0x9, 0x8}}, 0x10000, &(0x7f0000007a40), &(0x7f0000007a80)=0x4})
fsmount(r14, 0x0, 0x9c)

65.456633ms ago: executing program 0 (id=679):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/rcu_expedited', 0x149d40, 0x88)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101842, 0x84)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000580)=0x20)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r0, 0xb, {0x0, 0x0, 0x0, 0x9, 0x140, 0x0, 0x15, 0xf, 0x8, "c0f41d9e9a0d511667613263320f2b015b4dec2389f5ad574831dc4d4b3a623035085411910f1d330029d97d8460ca4a7cd0499a895240dbacdca3c00b786e02", "7798b864af9cb725282df38e0aaac50d183dd31793e34d891d11cd93abc039abab6a90178f5cf2b50bbbd6c34a4a43efe181c88d63d4e03ebb7c56e3987fab72", "6bc9780d233ad351ce68001000f8f92256c66800000000000000080000f300", [0x7fff, 0x5]}})
prlimit64(0x0, 0x3, &(0x7f0000000800)={0x8, 0x80000008b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
accept4$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c, 0x80800)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_cmd={0x4e, 0xa1, 0x9, 0x7, 0x2, 0x8, 0xff, 0xdb, 0x7c, 0xc5, 0x7, 0x8, 0x5, 0x1, 0x4, 0x7, [0x5, 0x9]}})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x20, 0x8e, 0x5, 0xfffeffff}]})
r5 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r7, 0x0, 0x40000000, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000480)={0x79, 0x0, 0x1})
mkdirat(0xffffffffffffff9c, 0x0, 0x108)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
fdatasync(r0)
setuid(0xee00)
r8 = eventfd2(0x40007, 0x80000)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000500)={r8, 0x4})
close_range(r4, 0xffffffffffffffff, 0x0)
r9 = syz_ublk_setup_io_uring(0xc, &(0x7f00000005c0)={0x0, 0x30b2, 0x1, 0x0, 0x3f7}, &(0x7f0000000640)=<r10=>0x0, &(0x7f0000000680)=<r11=>0x0, &(0x7f00000006c0)=<r12=>0x0)
unshare(0x60000600)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000700)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f00000007c0))
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r13, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000106010800070000000000000200000505000100070000002c09f17b245d4deaf2523f050001005b008000"], 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x4805)
syz_clone(0x10100a00, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000840))

10.306799ms ago: executing program 6 (id=680):
setrlimit(0x0, &(0x7f0000000100)={0x1, 0x72e})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}]})

9.176179ms ago: executing program 6 (id=681):
r0 = syz_usb_connect$uac2(0x0, 0xa8, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e1024a04"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
setpgid(0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000001c0)={0x1, 0x100, 0xe, 0x2, 0x6, 0x1})
ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000c01000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 7 (id=605):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r0, 0x1, &(0x7f0000000040)="35738b86")
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x8e2b00)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000240)=""/127)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x8)
write(r3, &(0x7f0000000180)='11', 0x2)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffbfc, 0x2}, 0x2e)

kernel console output (not intermixed with test programs):

384] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense
[   46.459221][  T384] playstation 0003:054C:0DF2.0004: Failed to create dualsense.
[   46.467732][  T384] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -22
[   46.550426][ T1054] cgroup: fork rejected by pids controller in /syz0
[   46.690867][  T384] usb 5-1: USB disconnect, device number 3
[   46.703231][    T9] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   46.915136][   T45] usb 2-1: USB disconnect, device number 7
[   47.279444][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[   47.573814][ T1110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[   47.605556][ T1110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[   47.982712][  T502] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   48.142660][  T502] usb 2-1: Using ep0 maxpacket: 16
[   48.153437][  T502] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.173666][  T502] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x5 has an invalid bInterval 37, changing to 7
[   48.202623][  T502] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[   48.222628][  T502] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   48.236021][  T502] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   48.247276][  T502] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[   48.262630][  T502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.272746][  T502] usb 2-1: Product: syz
[   48.276913][  T502] usb 2-1: Manufacturer: syz
[   48.291812][  T502] usb 2-1: SerialNumber: syz
[   48.503187][   T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   48.514168][   T65] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   48.514801][ T1119] capability: warning: `syz.1.208' uses 32-bit capabilities (legacy support in use)
[   48.523785][   T65] usb 3-1: USB disconnect, device number 6
[   48.540685][  T502] usb 2-1: Can't get UAC3 power state for id 10
[   48.551929][  T502] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[   48.561595][  T502] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[   48.582002][  T502] usb 2-1: USB disconnect, device number 8
[   48.907809][ T1126] netlink: 104 bytes leftover after parsing attributes in process `syz.0.210'.
[   48.916836][ T1127] netlink: 104 bytes leftover after parsing attributes in process `syz.0.210'.
[   49.068334][   T13] bridge_slave_1: left allmulticast mode
[   49.074327][   T13] bridge_slave_1: left promiscuous mode
[   49.080093][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.089151][   T13] bridge_slave_0: left allmulticast mode
[   49.095118][   T13] bridge_slave_0: left promiscuous mode
[   49.100732][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.187944][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.195009][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.202035][ T1133] bridge_slave_0: entered allmulticast mode
[   49.208618][ T1133] bridge_slave_0: entered promiscuous mode
[   49.215734][   T13] veth1_macvtap: left promiscuous mode
[   49.221259][   T13] veth0_vlan: left promiscuous mode
[   49.254718][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.261858][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.269064][ T1133] bridge_slave_1: entered allmulticast mode
[   49.275258][ T1133] bridge_slave_1: entered promiscuous mode
[   49.292688][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   49.319379][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.326450][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.333735][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.340751][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.348102][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   49.354223][  T318] Bluetooth: hci0: command 0x1003 tx timeout
[   49.365371][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.372631][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.381621][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.388688][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.397364][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.404418][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.426964][ T1133] veth0_vlan: entered promiscuous mode
[   49.443868][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.453269][ T1133] veth1_macvtap: entered promiscuous mode
[   49.460911][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.471779][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   49.481721][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.493110][   T36] kauditd_printk_skb: 28 callbacks suppressed
[   49.493124][   T36] audit: type=1400 audit(1793833921.902:309): avc:  denied  { mount } for  pid=1133 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   49.494836][    T9] usb 2-1: config 0 descriptor??
[   49.638012][ T1142] netlink: 393 bytes leftover after parsing attributes in process `syz.5.215'.
[   49.650427][   T36] audit: type=1400 audit(1793833922.052:310): avc:  denied  { write } for  pid=1141 comm="syz.5.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   49.880208][ T1149] incfs: Error accessing: ./proc/thread-self/fail-nth.
[   49.887136][ T1149] incfs: mount failed -2
[   49.929676][    T9] savu 0003:1E7D:2D5A.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   50.132700][   T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   50.195208][    T9] usb 2-1: USB disconnect, device number 9
[   50.283891][   T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   50.294421][   T36] audit: type=1400 audit(1793833922.692:311): avc:  denied  { create } for  pid=1153 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   50.295098][   T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.324160][   T10] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.336948][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[   50.343582][   T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   50.352630][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.361278][   T10] usb 5-1: config 0 descriptor??
[   50.492652][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   50.569561][ T1156] bridge: RTM_NEWNEIGH with invalid ether address
[   50.576441][   T10] input: HID 17ef:6047 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6047.0006/input/input10
[   50.592307][   T10] lenovo 0003:17EF:6047.0006: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[   50.642655][    T9] usb 2-1: Using ep0 maxpacket: 16
[   50.649802][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[   50.659147][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 193, changing to 7
[   50.671759][    T9] usb 2-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40
[   50.680916][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.689014][    T9] usb 2-1: Product: syz
[   50.693244][    T9] usb 2-1: Manufacturer: syz
[   50.697877][    T9] usb 2-1: SerialNumber: syz
[   50.714092][   T36] audit: type=1400 audit(1793833923.122:312): avc:  denied  { set_context_mgr } for  pid=1161 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   50.736261][ T1162] netlink: 'syz.5.220': attribute type 7 has an invalid length.
[   50.743945][ T1162] netlink: 'syz.5.220': attribute type 5 has an invalid length.
[   50.751591][ T1162] netlink: 17 bytes leftover after parsing attributes in process `syz.5.220'.
[   50.904448][ T1130] hid_roccat: roccat device with minor 0 doesn't exist
[   50.913697][   T36] audit: type=1400 audit(1793833923.322:313): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   50.935723][   T36] audit: type=1400 audit(1793833923.322:314): avc:  denied  { search } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.936132][    T9] usb 2-1: 1:1 : unknown format tag 0x2 is detected.  processed as MPEG.
[   50.957299][   T36] audit: type=1400 audit(1793833923.322:315): avc:  denied  { write } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.966323][    T9] usb 2-1: found format II with max.bitrate = 0, frame size=37623
[   50.987223][   T36] audit: type=1400 audit(1793833923.322:316): avc:  denied  { add_name } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.994797][   T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   51.015634][   T36] audit: type=1400 audit(1793833923.322:317): avc:  denied  { create } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   51.022737][    T9] usb 2-1: 1:1 : unknown format tag 0x2 is detected.  processed as MPEG.
[   51.043123][   T36] audit: type=1400 audit(1793833923.322:318): avc:  denied  { append open } for  pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   51.052698][    T9] usb 2-1: found format II with max.bitrate = 0, frame size=37623
[   51.083038][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   51.094213][    T9] usb 2-1: USB disconnect, device number 10
[   51.224090][   T65] usb 6-1: unable to get BOS descriptor or descriptor too short
[   51.232531][   T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   51.242734][   T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   51.253058][   T65] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   51.262115][   T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.270416][   T65] usb 6-1: Product: syz
[   51.274928][   T65] usb 6-1: Manufacturer: syz
[   51.279519][   T65] usb 6-1: SerialNumber: syz
[   51.572401][ T1180] overlayfs: failed to resolve './bus': -2
[   51.832823][   T45] usb 5-1: reset full-speed USB device number 4 using dummy_hcd
[   51.892676][  T502] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   51.962675][   T45] usb 5-1: device descriptor read/64, error -32
[   51.992045][   T65] usb 6-1: selecting invalid altsetting 1
[   52.000225][   T65] usb 6-1: unit 3 not found!
[   52.005401][   T65] usb 6-1: cannot request logical cluster ID: 0 (err: -71)
[   52.012641][   T65] usb 6-1: invalid MIXER UNIT descriptor 6
[   52.019898][   T65] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[   52.031006][   T65] usb 6-1: USB disconnect, device number 2
[   52.043799][  T502] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   52.044029][  T498] udevd[498]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   52.051890][  T502] usb 2-1: config 0 has no interface number 0
[   52.074709][  T502] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   52.086953][  T502] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.097307][  T502] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   52.111059][  T502] usb 2-1: config 0 interface 1 has no altsetting 0
[   52.117930][  T502] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   52.127176][  T502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.135834][  T502] usb 2-1: config 0 descriptor??
[   52.242651][   T45] usb 5-1: device descriptor read/64, error -32
[   52.492691][   T45] usb 5-1: reset full-speed USB device number 4 using dummy_hcd
[   52.505480][ T1270] overlayfs: failed to clone lowerpath
[   52.551572][  T502] input: HID 145f:0212 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0007/input/input11
[   52.568973][  T502] input: HID 145f:0212 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0007/input/input12
[   52.583079][  T502] uclogic 0003:145F:0212.0007: input,hidraw1: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.1-1/input1
[   52.622870][   T45] usb 5-1: device descriptor read/64, error -32
[   52.632721][   T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   52.763727][  T502] usb 2-1: USB disconnect, device number 11
[   52.782686][   T31] usb 6-1: Using ep0 maxpacket: 32
[   52.788918][   T31] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[   52.797177][   T31] usb 6-1: config 0 has no interface number 0
[   52.804836][   T31] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   52.814164][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.822357][   T31] usb 6-1: Product: syz
[   52.827227][   T31] usb 6-1: Manufacturer: syz
[   52.832011][   T31] usb 6-1: SerialNumber: syz
[   52.839276][   T31] usb 6-1: config 0 descriptor??
[   52.845422][   T31] smsc95xx v2.0.0
[   52.862667][   T45] usb 5-1: device descriptor read/64, error -32
[   53.030973][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.037216][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.043637][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.049855][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.056325][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.062819][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.068962][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.075265][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.081662][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.087859][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.094023][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.100150][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.106327][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.112469][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.118636][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.124773][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.130882][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.137047][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.143207][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.149758][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.155932][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.162085][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.168252][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.174399][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.180533][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.187164][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.193489][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.199672][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.205892][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.212066][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.218253][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.224480][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.230622][ T1288] 9pnet_fd: Insufficient options for proto=fd
[   53.247133][   T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   53.248747][ T1292] futex_wake_op: syz.0.237 tries to shift op by 144; fix this program
[   53.258183][   T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   53.294180][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   53.300814][ T1294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.238'.
[   53.312657][   T45] usb 5-1: reset full-speed USB device number 4 using dummy_hcd
[   53.333423][   T45] usb 5-1: device reset changed ep0 maxpacket size!
[   53.340289][  T312] usb 5-1: USB disconnect, device number 4
[   53.382189][ T1297] overlayfs: conflicting options: metacopy=off,verity=require
[   53.430553][ T1308] VFS: file-max limit 2 reached
[   53.492648][  T312] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   53.643755][  T312] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   53.654779][  T312] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   53.665819][  T312] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   53.676737][  T312] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   53.688809][  T312] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   53.697895][  T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.705941][  T312] usb 5-1: Product: syz
[   53.710113][  T312] usb 5-1: Manufacturer: syz
[   53.714730][  T312] usb 5-1: SerialNumber: syz
[   53.720695][ T1284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   53.728491][  T312] cdc_mbim 5-1:1.0: skipping garbage
[   53.928588][ T1284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   53.935791][ T1284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   54.542295][ T1328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1328 comm=syz.0.252
[   54.545228][ T1284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   54.555546][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   54.555563][   T36] audit: type=1400 audit(1793833926.952:326): avc:  denied  { ioctl } for  pid=1283 comm="syz.4.235" path="cgroup:[4026532307]" dev="nsfs" ino=4026532307 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   54.563063][ T1284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   54.600265][  T312] cdc_mbim 5-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048
[   54.608075][  T312] cdc_mbim 5-1:1.0: setting rx_max = 2048
[   54.646395][   T36] audit: type=1400 audit(1793833927.052:327): avc:  denied  { ioctl } for  pid=1346 comm="syz.0.257" path="socket:[12343]" dev="sockfs" ino=12343 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   54.690046][ T1350] SELinux:  Context system_u: is not valid (left unmapped).
[   54.697796][   T36] audit: type=1400 audit(1793833927.102:328): avc:  denied  { relabelto } for  pid=1349 comm="syz.0.258" name="136" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:"
[   54.722307][   T36] audit: type=1400 audit(1793833927.102:329): avc:  denied  { associate } for  pid=1349 comm="syz.0.258" name="136" dev="tmpfs" ino=802 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:"
[   54.747914][   T36] audit: type=1400 audit(1793833927.102:330): avc:  denied  { write } for  pid=1349 comm="syz.0.258" name="136" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:"
[   54.771507][   T36] audit: type=1400 audit(1793833927.102:331): avc:  denied  { add_name } for  pid=1349 comm="syz.0.258" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:"
[   54.794000][   T36] audit: type=1400 audit(1793833927.102:332): avc:  denied  { create } for  pid=1349 comm="syz.0.258" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   54.814800][   T36] audit: type=1400 audit(1793833927.102:333): avc:  denied  { associate } for  pid=1349 comm="syz.0.258" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   54.836250][   T36] audit: type=1400 audit(1793833927.102:334): avc:  denied  { remove_name } for  pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:"
[   54.861522][   T36] audit: type=1400 audit(1793833927.102:335): avc:  denied  { unlink } for  pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   54.884065][  T312] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[   54.890877][  T312] wwan wwan0: port wwan0mbim0 attached
[   54.897855][  T312] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 2e:bb:6e:6b:6f:95
[   54.910238][  T312] usb 5-1: USB disconnect, device number 5
[   54.924230][  T312] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[   54.973530][  T312] wwan wwan0: port wwan0mbim0 disconnected
[   55.342658][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   55.344128][  T318] Bluetooth: hci0: command 0x1003 tx timeout
[   55.357265][ T1360] ./dev/sda1: Can't lookup blockdev
[   55.491797][   T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   55.502708][   T31] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[   55.513595][   T31] usb 6-1: USB disconnect, device number 3
[   55.674165][   T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   55.823423][   T45] usb 5-1: Using ep0 maxpacket: 8
[   55.829936][   T45] usb 5-1: unable to get BOS descriptor or descriptor too short
[   55.838312][   T45] usb 5-1: config index 0 descriptor too short (expected 575, got 63)
[   55.846541][   T45] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[   55.854708][   T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[   55.863745][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   55.874641][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   55.884515][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[   55.896054][   T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[   55.906791][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   55.916730][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   55.927932][   T45] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   55.937177][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.945745][   T45] usb 5-1: Product: syz
[   55.950025][   T45] usb 5-1: Manufacturer: syz
[   55.954781][   T45] usb 5-1: SerialNumber: syz
[   55.960122][   T45] usb 5-1: config 0 descriptor??
[   55.965485][ T1373] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   55.981666][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   56.175889][ T1373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.184379][ T1373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.192661][   T45] usb 5-1: USB disconnect, device number 6
[   56.215538][ T1409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.279'.
[   56.252669][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   56.332667][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   56.412677][   T10] usb 2-1: Using ep0 maxpacket: 8
[   56.420015][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   56.428364][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[   56.435946][   T10] usb 2-1: can't read configurations, error -71
[   56.482665][    T9] usb 6-1: Using ep0 maxpacket: 16
[   56.488887][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   56.496920][    T9] usb 6-1: config 0 has no interface number 0
[   56.503074][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.514033][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.523780][    T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   56.532811][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.541291][    T9] usb 6-1: config 0 descriptor??
[   56.706881][ T1411] binder: Bad value for 'defcontext'
[   56.948650][ T1407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.278'.
[   56.957876][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   56.973146][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   56.985465][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   56.997764][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   57.010059][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   57.022581][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   57.034970][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   57.047309][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   57.059604][ T1407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1407 comm=syz.5.278
[   57.074739][    T9] usbhid 6-1:0.1: can't add hid device: -71
[   57.080654][    T9] usbhid 6-1:0.1: probe with driver usbhid failed with error -71
[   57.089253][    T9] usb 6-1: USB disconnect, device number 4
[   57.282662][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   57.432755][   T10] usb 2-1: Using ep0 maxpacket: 32
[   57.438961][   T10] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[   57.447219][   T10] usb 2-1: config 0 has no interface number 0
[   57.453329][   T10] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   57.463335][   T10] usb 2-1: config 0 interface 196 has no altsetting 0
[   57.471453][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   57.480525][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.488512][   T10] usb 2-1: Product: syz
[   57.492708][   T65] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   57.500213][   T10] usb 2-1: Manufacturer: syz
[   57.504864][   T10] usb 2-1: SerialNumber: syz
[   57.510047][   T10] usb 2-1: config 0 descriptor??
[   57.515318][ T1421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   57.652683][   T65] usb 5-1: Using ep0 maxpacket: 16
[   57.659000][   T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.670212][   T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.680146][   T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   57.693220][   T65] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   57.702281][   T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.712853][   T65] usb 5-1: config 0 descriptor??
[   57.725128][ T1421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.734177][ T1421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.748984][ T1421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.757806][ T1421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.796687][   T10] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[   57.807275][   T10] ipheth 2-1:0.196: probe with driver ipheth failed with error -71
[   57.819329][   T10] usb 2-1: USB disconnect, device number 13
[   58.120552][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.128506][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.136033][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.143319][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.150600][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.157867][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.165147][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.172418][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.179715][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.186989][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.194260][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.201525][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.208805][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.216084][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.223358][   T65] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   58.233783][   T65] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input13
[   58.252814][   T65] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   58.361910][ T1442] ./dev/sda1: Can't lookup blockdev
[   58.381000][ T1230] Bluetooth: hci0: Frame reassembly failed (-84)
[   58.387820][ T1445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.292'.
[   58.395252][ T1230] Bluetooth: hci0: Frame reassembly failed (-84)
[   58.447403][   T31] usb 5-1: USB disconnect, device number 7
[   58.496802][ T1460] FAULT_INJECTION: forcing a failure.
[   58.496802][ T1460] name fail_futex, interval 1, probability 0, space 0, times 1
[   58.522643][ T1460] CPU: 0 UID: 0 PID: 1460 Comm: syz.5.297 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   58.522677][ T1460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   58.522690][ T1460] Call Trace:
[   58.522697][ T1460]  <TASK>
[   58.522705][ T1460]  __dump_stack+0x21/0x30
[   58.522729][ T1460]  dump_stack_lvl+0x140/0x1c0
[   58.522744][ T1460]  ? __cfi_dump_stack_lvl+0x10/0x10
[   58.522762][ T1460]  dump_stack+0x19/0x20
[   58.522783][ T1460]  should_fail_ex+0x3c2/0x510
[   58.522812][ T1460]  should_fail+0xf/0x20
[   58.522828][ T1460]  get_futex_key+0x178/0x940
[   58.522873][ T1460]  ? kasan_save_track+0x3e/0x80
[   58.522892][ T1460]  ? __cfi_get_futex_key+0x10/0x10
[   58.522911][ T1460]  ? do_sys_openat2+0x170/0x1d0
[   58.522934][ T1460]  ? x64_sys_call+0x131a/0x2ee0
[   58.522955][ T1460]  ? do_syscall_64+0x57/0xf0
[   58.522975][ T1460]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   58.523001][ T1460]  futex_wake+0x150/0x950
[   58.523026][ T1460]  ? __cfi_futex_wake+0x10/0x10
[   58.523052][ T1460]  do_futex+0x37d/0x510
[   58.523073][ T1460]  ? __cfi_do_futex+0x10/0x10
[   58.523094][ T1460]  __se_sys_futex+0x13c/0x320
[   58.523114][ T1460]  ? fput+0x1a4/0x230
[   58.523136][ T1460]  ? __x64_sys_futex+0x110/0x110
[   58.523158][ T1460]  __x64_sys_futex+0xe9/0x110
[   58.523179][ T1460]  x64_sys_call+0x227f/0x2ee0
[   58.523199][ T1460]  do_syscall_64+0x57/0xf0
[   58.523218][ T1460]  ? clear_bhb_loop+0x50/0xa0
[   58.523243][ T1460]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   58.523268][ T1460] RIP: 0033:0x7f6e94b9fb19
[   58.523284][ T1460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.523301][ T1460] RSP: 002b:00007f6e935e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   58.523323][ T1460] RAX: ffffffffffffffda RBX: 00007f6e94e25fa8 RCX: 00007f6e94b9fb19
[   58.523337][ T1460] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6e94e25fac
[   58.523351][ T1460] RBP: 00007f6e94e25fa0 R08: 4000000000000000 R09: 0000000000000000
[   58.523365][ T1460] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[   58.523378][ T1460] R13: 00007f6e94e26038 R14: 00007fffbe465eb0 R15: 00007fffbe465f98
[   58.523394][ T1460]  </TASK>
[   59.002647][   T31] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   59.163611][   T31] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[   59.171856][   T31] usb 6-1: config 0 has no interface number 0
[   59.184138][   T31] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   59.193399][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.201386][   T31] usb 6-1: Product: syz
[   59.212794][   T31] usb 6-1: Manufacturer: syz
[   59.217416][   T31] usb 6-1: SerialNumber: syz
[   59.225129][   T31] usb 6-1: config 0 descriptor??
[   59.272660][   T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   59.424091][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[   59.432798][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[   59.441241][   T10] usb 5-1: config 0 has an invalid interface number: 253 but max is 0
[   59.449446][   T10] usb 5-1: config 0 has no interface number 0
[   59.455601][   T10] usb 5-1: config 0 interface 253 has no altsetting 0
[   59.464383][   T10] usb 5-1: string descriptor 0 read error: -22
[   59.470564][   T10] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a02, bcdDevice=5b.e6
[   59.479639][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.488221][   T10] usb 5-1: config 0 descriptor??
[   59.696362][   T36] kauditd_printk_skb: 88 callbacks suppressed
[   59.696378][   T36] audit: type=1400 audit(1793833933.101:424): avc:  denied  { mounton } for  pid=1465 comm="syz.4.299" path="/proc/56/task" dev="proc" ino=12840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   59.725729][   T36] audit: type=1400 audit(1793833933.131:425): avc:  denied  { associate } for  pid=1482 comm="syz.4.299" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   59.738162][   T45] usb 5-1: USB disconnect, device number 8
[   59.836325][   T31] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[   59.846719][   T31] asix 6-1:0.251: probe with driver asix failed with error -524
[   60.053866][   T45] usb 6-1: USB disconnect, device number 5
[   60.309985][   T36] audit: type=1400 audit(1793833933.711:426): avc:  denied  { ioctl } for  pid=1487 comm="syz.4.307" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   60.382673][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   60.414158][ T1492] devpts: called with bogus options
[   60.462020][   T36] audit: type=1326 audit(1793833933.861:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.0.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11f9fb19 code=0x7fc00000
[   60.579507][   T36] audit: type=1400 audit(1793833933.981:428): avc:  denied  { mounton } for  pid=1497 comm="syz.5.310" path="/17/proc/57/task/58/fail-nth" dev="proc" ino=12866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   60.582792][ T1498] syz.5.310: vmalloc error: size 8192, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[   60.603431][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   60.603518][ T1498] ,cpuset=syz5,mems_allowed=0
[   60.630213][ T1498] CPU: 1 UID: 0 PID: 1498 Comm: syz.5.310 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   60.630230][ T1498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   60.630238][ T1498] Call Trace:
[   60.630243][ T1498]  <TASK>
[   60.630247][ T1498]  __dump_stack+0x21/0x30
[   60.630262][ T1498]  dump_stack_lvl+0x140/0x1c0
[   60.630272][ T1498]  ? __cfi_dump_stack_lvl+0x10/0x10
[   60.630283][ T1498]  dump_stack+0x19/0x20
[   60.630292][ T1498]  warn_alloc+0x1e7/0x2c0
[   60.630305][ T1498]  ? __cfi_warn_alloc+0x10/0x10
[   60.630317][ T1498]  ? __kmalloc_node_noprof+0x252/0x500
[   60.630332][ T1498]  ? __vmalloc_node_range_noprof+0x529/0x1300
[   60.630347][ T1498]  __vmalloc_node_range_noprof+0x100b/0x1300
[   60.630362][ T1498]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   60.630376][ T1498]  ? vsnprintf+0x19ef/0x1ad0
[   60.630387][ T1498]  ? kvm_dev_ioctl+0x12a/0x14c0
[   60.630398][ T1498]  __vmalloc_noprof+0x104/0x1d0
[   60.630411][ T1498]  ? kvm_dev_ioctl+0x12a/0x14c0
[   60.630421][ T1498]  ? alloc_fd+0x4c1/0x570
[   60.630431][ T1498]  ? __cfi___vmalloc_noprof+0x10/0x10
[   60.630444][ T1498]  kvm_dev_ioctl+0x12a/0x14c0
[   60.630455][ T1498]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[   60.630466][ T1498]  ? bpf_lsm_file_ioctl+0xd/0x20
[   60.630477][ T1498]  ? security_file_ioctl+0x3e/0x110
[   60.630492][ T1498]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[   60.630502][ T1498]  __se_sys_ioctl+0x123/0x1b0
[   60.630513][ T1498]  __x64_sys_ioctl+0x7f/0xa0
[   60.630524][ T1498]  x64_sys_call+0x1878/0x2ee0
[   60.630535][ T1498]  do_syscall_64+0x57/0xf0
[   60.630546][ T1498]  ? clear_bhb_loop+0x50/0xa0
[   60.630560][ T1498]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   60.630574][ T1498] RIP: 0033:0x7f6e94b9fb19
[   60.630584][ T1498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.630593][ T1498] RSP: 002b:00007f6e935e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   60.630605][ T1498] RAX: ffffffffffffffda RBX: 00007f6e94e25fa0 RCX: 00007f6e94b9fb19
[   60.630613][ T1498] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
[   60.630620][ T1498] RBP: 00007f6e94c37b70 R08: 0000000000000000 R09: 0000000000000000
[   60.630627][ T1498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.630633][ T1498] R13: 00007f6e94e26038 R14: 00007f6e94e25fa0 R15: 00007fffbe465f98
[   60.630642][ T1498]  </TASK>
[   60.630656][ T1498] Mem-Info:
[   60.772631][   T10] usb 5-1: Using ep0 maxpacket: 32
[   60.772877][ T1498] active_anon:10952 inactive_anon:0 isolated_anon:0
[   60.772877][ T1498]  active_file:16871 inactive_file:2349 isolated_file:0
[   60.772877][ T1498]  unevictable:0 dirty:95 writeback:0
[   60.772877][ T1498]  slab_reclaimable:6120 slab_unreclaimable:70600
[   60.772877][ T1498]  mapped:24862 shmem:3036 pagetables:1018
[   60.772877][ T1498]  sec_pagetables:0 bounce:0
[   60.772877][ T1498]  kernel_misc_reclaimable:0
[   60.772877][ T1498]  free:1520969 free_pcp:2363 free_cma:0
[   60.778507][   T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   60.781751][ T1498] Node 0 active_anon:43808kB inactive_anon:0kB active_file:67484kB inactive_file:9396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99448kB dirty:380kB writeback:0kB shmem:12144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6812kB pagetables:4072kB sec_pagetables:0kB all_unreclaimable? no
[   60.787019][   T10] usb 5-1: config 0 has no interface number 0
[   60.792346][ T1498] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:4552kB free_cma:0kB
[   60.798550][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   60.816406][ T1498] lowmem_reserve[]: 0 3920 3920
[   60.816438][ T1498] Normal free:3133904kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43808kB inactive_anon:0kB active_file:67484kB inactive_file:9396kB unevictable:0kB writepending:380kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4428kB local_pcp:2948kB free_cma:0kB
[   60.825378][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.832970][ T1498] lowmem_reserve[]: 0 0 0
[   60.841252][   T10] usb 5-1: Product: syz
[   60.848933][ T1498] 
[   60.848945][ T1498] DMA32: 
[   60.857032][   T10] usb 5-1: Manufacturer: syz
[   60.865242][ T1498] 3*4kB 
[   60.868169][   T10] usb 5-1: SerialNumber: syz
[   60.871117][ T1498] (M) 
[   60.877595][   T10] usb 5-1: config 0 descriptor??
[   60.921311][ T1498] 1*8kB 
[   60.931125][   T10] smsc95xx v2.0.0
[   60.961148][ T1498] (M) 
[   60.981281][ T1501] rust_binder: 1500:1501 got reply transaction with no transaction stack
[   60.997343][ T1498] 2*16kB 
[   61.006341][ T1501] rust_binder: 1500:1501 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1556
[   61.013987][ T1498] (M) 5*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 3*512kB (M) 5*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB
[   61.127352][ T1498] Normal: 280*4kB (UE) 379*8kB (UE) 227*16kB (UME) 365*32kB (UME) 437*64kB (UME) 59*128kB (UME) 4*256kB (M) 5*512kB (UME) 3*1024kB (M) 14*2048kB (UME) 743*4096kB (UM) = 3133640kB
[   61.146757][   T36] audit: type=1326 audit(1793833934.551:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.0.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f11f40e99 code=0x7fc00000
[   61.152669][ T1498] 22252 total pagecache pages
[   61.172744][   T36] audit: type=1326 audit(1793833934.551:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.0.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1f11f40f5d code=0x7fc00000
[   61.181866][ T1498] 0 pages in swap cache
[   61.205780][ T1498] Free swap  = 124668kB
[   61.206543][   T36] audit: type=1326 audit(1793833934.551:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1485 comm="syz.0.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f11f9fb19 code=0x7fc00000
[   61.211416][ T1498] Total swap = 124996kB
[   61.239386][ T1498] 2097051 pages RAM
[   61.243230][ T1498] 0 pages HighMem/MovableOnly
[   61.248640][ T1498] 354592 pages reserved
[   61.253170][ T1498] 0 pages cma reserved
[   61.258764][ T1498] Memory allocations:
[   61.262781][ T1498]          0 B        0 init/main.c:1477 func:do_initcalls
[   61.269982][ T1498]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   61.278073][ T1498]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   61.285724][ T1498]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   61.293633][ T1498]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   61.301529][ T1498]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   61.310143][ T1498]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   61.318061][ T1498]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   61.325985][ T1498]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   61.333897][ T1498]          0 B        0 init/initramfs.c:101 func:find_link
[   61.346841][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   61.357707][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   61.363920][ T1507] process 'syz.5.314' launched '/dev/fd/3' with NULL argv: empty string added
[   61.375871][   T36] audit: type=1400 audit(1793833934.781:432): avc:  denied  { execute_no_trans } for  pid=1506 comm="syz.5.314" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   61.486253][   T36] audit: type=1400 audit(1793833934.891:433): avc:  denied  { read } for  pid=1509 comm="syz.5.315" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   61.524623][ T1511] device-mapper: table: 252:3: striped: Target length not divisible by chunk size (-EINVAL)
[   61.534815][ T1511] device-mapper: ioctl: error adding target to table
[   61.541596][ T1512] device-mapper: table: 252:3: striped: Target length not divisible by chunk size (-EINVAL)
[   61.551701][ T1512] device-mapper: ioctl: error adding target to table
[   61.743719][ T1213] Bluetooth: hci0: Frame reassembly failed (-84)
[   61.745498][ T1528] netlink: 28 bytes leftover after parsing attributes in process `syz.5.319'.
[   61.759183][ T1528] ip6gretap0: entered promiscuous mode
[   61.764693][ T1528] ip6gretap0: entered allmulticast mode
[   61.813704][   T45] rust_binder: 1500: undelivered TRANSACTION_ERROR: 29201
[   62.087386][ T1537] overlayfs: failed to clone lowerpath
[   62.089726][ T1538] ./dev/sda1: Can't lookup blockdev
[   62.092961][   T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   62.099463][ T1539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'.
[   62.263691][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.274517][   T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   62.283428][   T31] usb 2-1: config 1 has no interface number 0
[   62.292150][   T31] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   62.301298][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.309307][   T31] usb 2-1: Product: syz
[   62.313515][   T31] usb 2-1: Manufacturer: syz
[   62.318099][   T31] usb 2-1: SerialNumber: syz
[   62.537721][   T31] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[   62.548113][   T31] usb 2-1: USB disconnect, device number 14
[   62.556428][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   63.576409][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   63.590604][   T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   63.602525][   T10] usb 5-1: USB disconnect, device number 9
[   63.832655][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   63.832667][  T318] Bluetooth: hci0: command 0x1003 tx timeout
[   64.349758][ T1614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'.
[   64.486193][ T1631] overlayfs: failed to clone upperpath
[   64.573273][ T1616] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[   64.598385][ T1633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.352'.
[   64.599284][ T1218] Bluetooth: hci0: Frame reassembly failed (-84)
[   64.613671][ T1218] Bluetooth: hci0: Frame reassembly failed (-84)
[   64.712665][   T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   64.792515][ T1635] input: syz0 as /devices/virtual/input/input15
[   64.862646][   T31] usb 2-1: Using ep0 maxpacket: 32
[   64.868764][   T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   64.876874][   T31] usb 2-1: config 0 has no interface number 0
[   64.884307][   T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   64.893364][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.901337][   T31] usb 2-1: Product: syz
[   64.905504][   T31] usb 2-1: Manufacturer: syz
[   64.910090][   T31] usb 2-1: SerialNumber: syz
[   64.915332][   T31] usb 2-1: config 0 descriptor??
[   64.920940][   T31] smsc95xx v2.0.0
[   65.023900][ T1644] 9pnet_fd: Insufficient options for proto=fd
[   65.323971][   T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   65.334870][   T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   66.622649][  T318] Bluetooth: hci0: command 0x1003 tx timeout
[   66.622643][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   66.782643][  T312] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   66.932627][  T312] usb 5-1: Using ep0 maxpacket: 16
[   66.939058][  T312] usb 5-1: unable to get BOS descriptor or descriptor too short
[   66.947419][  T312] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 38, changing to 7
[   66.959655][  T312] usb 5-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40
[   66.968726][  T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.976744][  T312] usb 5-1: Product: syz
[   66.980914][  T312] usb 5-1: Manufacturer: syz
[   66.985540][  T312] usb 5-1: SerialNumber: syz
[   67.166587][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   67.166602][   T36] audit: type=1400 audit(1793833940.571:446): avc:  denied  { read } for  pid=1682 comm="syz.5.366" name="dm0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   67.206191][  T312] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   67.217229][  T312] usb 5-1: USB disconnect, device number 10
[   67.229266][  T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   67.263420][   T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[   67.274315][   T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[   67.283941][   T31] usb 2-1: USB disconnect, device number 15
[   67.311357][ T1692] device-mapper: table: 252:4: crypt: Error decoding and setting key (-EINVAL)
[   67.320325][ T1692] device-mapper: ioctl: error adding target to table
[   67.344945][   T36] audit: type=1400 audit(1793833940.751:447): avc:  denied  { search } for  pid=1697 comm="syz.5.369" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   67.622670][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   67.708068][ T1702] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   67.716178][ T1702] rust_binder: Read failure Err(EFAULT) in pid:85
[   67.723473][ T1702] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   67.731466][ T1702] rust_binder: Read failure Err(EFAULT) in pid:85
[   67.738425][   T36] audit: type=1400 audit(1793833941.141:448): avc:  denied  { call } for  pid=1701 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   67.742887][   T31] rust_binder: 1701: undelivered TRANSACTION_ERROR: 29189
[   67.773874][    T9] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.786632][    T9] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[   67.798779][    T9] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   67.812046][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[   67.832232][ T1209] Bluetooth: hci0: Frame reassembly failed (-84)
[   67.835554][ T1707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'.
[   67.839497][    T9] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[   67.852730][   T36] audit: type=1400 audit(1793833941.261:449): avc:  denied  { wake_alarm } for  pid=1708 comm="syz.4.374" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   67.856763][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.879292][ T1707] ip6gretap0: entered promiscuous mode
[   67.886658][    T9] usb 6-1: config 0 descriptor??
[   67.895971][ T1707] ip6gretap0: entered allmulticast mode
[   67.902127][ T1700] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   67.954684][   T36] audit: type=1400 audit(1793833941.361:450): avc:  denied  { write } for  pid=1710 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.974713][   T36] audit: type=1400 audit(1793833941.361:451): avc:  denied  { nlmsg_read } for  pid=1710 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   68.312142][ T1700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.321077][ T1700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.329875][    T9] usbhid 6-1:0.0: can't add hid device: -71
[   68.335893][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   68.345983][    T9] usb 6-1: USB disconnect, device number 6
[   68.900559][ T1725] netlink: 37 bytes leftover after parsing attributes in process `syz.5.379'.
[   68.910357][   T36] audit: type=1400 audit(1793833942.311:452): avc:  denied  { search } for  pid=1722 comm="syz.5.379" name="/" dev="configfs" ino=2409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.932386][   T36] audit: type=1400 audit(1793833942.311:453): avc:  denied  { write } for  pid=1722 comm="syz.5.379" name="usb_gadget" dev="configfs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.955205][   T36] audit: type=1400 audit(1793833942.311:454): avc:  denied  { add_name } for  pid=1722 comm="syz.5.379" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.975374][   T36] audit: type=1400 audit(1793833942.311:455): avc:  denied  { create } for  pid=1722 comm="syz.5.379" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   69.422672][   T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   69.449121][ T1753] selinux_netlink_send: 24 callbacks suppressed
[   69.449142][ T1753] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=1753 comm=syz.0.387
[   69.552685][   T31] usb 6-1: device descriptor read/64, error -71
[   69.802666][   T31] usb 6-1: device descriptor read/64, error -71
[   69.902896][  T318] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   70.042691][   T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   70.172671][   T31] usb 6-1: device descriptor read/64, error -71
[   70.372153][ T1767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[   70.412643][   T31] usb 6-1: device descriptor read/64, error -71
[   70.522732][   T31] usb usb6-port1: attempt power cycle
[   70.742665][  T457] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[   70.872740][   T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   70.893916][  T457] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.904101][   T31] usb 6-1: device descriptor read/8, error -71
[   70.910268][  T457] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   70.921241][  T457] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   70.933356][  T457] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   70.942506][  T457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.950691][  T457] usb 2-1: Product: syz
[   70.954898][  T457] usb 2-1: Manufacturer: syz
[   70.959469][  T457] usb 2-1: SerialNumber: syz
[   70.964934][ T1778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   70.972530][  T457] cdc_mbim 2-1:1.0: skipping garbage
[   71.033675][   T31] usb 6-1: device descriptor read/8, error -71
[   71.062666][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   71.174492][ T1778] FAULT_INJECTION: forcing a failure.
[   71.174492][ T1778] name fail_futex, interval 1, probability 0, space 0, times 0
[   71.187600][ T1778] CPU: 0 UID: 0 PID: 1778 Comm: syz.1.395 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[   71.187633][ T1778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   71.187647][ T1778] Call Trace:
[   71.187653][ T1778]  <TASK>
[   71.187661][ T1778]  __dump_stack+0x21/0x30
[   71.187686][ T1778]  dump_stack_lvl+0x140/0x1c0
[   71.187714][ T1778]  ? __cfi_dump_stack_lvl+0x10/0x10
[   71.187726][ T1778]  ? __kasan_check_write+0x18/0x20
[   71.187743][ T1778]  dump_stack+0x19/0x20
[   71.187753][ T1778]  should_fail_ex+0x3c2/0x510
[   71.187769][ T1778]  should_fail+0xf/0x20
[   71.187780][ T1778]  get_futex_key+0x178/0x940
[   71.187801][ T1778]  ? ttwu_queue_wakelist+0x323/0x520
[   71.187826][ T1778]  ? __cfi_get_futex_key+0x10/0x10
[   71.187844][ T1778]  ? __smp_call_single_queue+0xd5/0x380
[   71.187867][ T1778]  ? ttwu_do_activate+0x620/0x620
[   71.187879][ T1778]  ? ttwu_queue_wakelist+0x323/0x520
[   71.187892][ T1778]  futex_wait_setup+0xae/0x260
[   71.187904][ T1778]  ? __cfi___futex_queue+0x10/0x10
[   71.187915][ T1778]  ? __cfi_futex_wait_setup+0x10/0x10
[   71.187932][ T1778]  ? __asan_memcpy+0x5a/0x80
[   71.187959][ T1778]  __futex_wait+0x12c/0x3d0
[   71.187983][ T1778]  ? __cfi___futex_wait+0x10/0x10
[   71.188006][ T1778]  ? __cfi_futex_wake_mark+0x10/0x10
[   71.188018][ T1778]  ? futex_wake+0x666/0x950
[   71.188030][ T1778]  futex_wait+0x128/0x7c0
[   71.188043][ T1778]  ? __cfi_futex_wait+0x10/0x10
[   71.188055][ T1778]  ? vfs_write+0xbd2/0xfd0
[   71.188073][ T1778]  do_futex+0x32a/0x510
[   71.188094][ T1778]  ? __cfi_do_futex+0x10/0x10
[   71.188113][ T1778]  ? mutex_unlock+0x90/0x240
[   71.188138][ T1778]  __se_sys_futex+0x13c/0x320
[   71.188153][ T1778]  ? fput+0x1a4/0x230
[   71.188165][ T1778]  ? __x64_sys_futex+0x110/0x110
[   71.188175][ T1778]  ? __cfi_ksys_write+0x10/0x10
[   71.188185][ T1778]  __x64_sys_futex+0xe9/0x110
[   71.188197][ T1778]  x64_sys_call+0x227f/0x2ee0
[   71.188210][ T1778]  do_syscall_64+0x57/0xf0
[   71.188229][ T1778]  ? clear_bhb_loop+0x50/0xa0
[   71.188254][ T1778]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   71.188278][ T1778] RIP: 0033:0x7f450399fb19
[   71.188295][ T1778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.188304][ T1778] RSP: 002b:00007f45048e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   71.188317][ T1778] RAX: ffffffffffffffda RBX: 00007f4503c25fa8 RCX: 00007f450399fb19
[   71.188325][ T1778] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4503c25fa8
[   71.188331][ T1778] RBP: 00007f4503c25fa0 R08: 0000000000000000 R09: 0000000000000000
[   71.188338][ T1778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.188345][ T1778] R13: 00007f4503c26038 R14: 00007ffe3ea8f100 R15: 00007ffe3ea8f1e8
[   71.188353][ T1778]  </TASK>
[   71.272629][   T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   71.273245][    T9] usb 5-1: device descriptor read/64, error -71
[   71.293678][   T31] usb 6-1: device descriptor read/8, error -71
[   71.491551][ T1787] 9pnet_fd: Insufficient options for proto=fd
[   71.500099][ T1788] 9pnet_fd: Insufficient options for proto=fd
[   71.552672][    T9] usb 5-1: device descriptor read/64, error -71
[   71.559669][ T1799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.403'.
[   71.568689][ T1799] sit0: entered promiscuous mode
[   71.573665][ T1799] sit0: entered allmulticast mode
[   71.592174][  T457] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS
[   71.593095][ T1778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.598318][  T457] cdc_mbim 2-1:1.0: bind() failure
[   71.608115][ T1778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.612573][  T457] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   71.627134][  T457] cdc_ncm 2-1:1.1: bind() failure
[   71.632995][   T31] usb 6-1: device descriptor read/8, error -71
[   71.742739][   T31] usb usb6-port1: unable to enumerate USB device
[   71.792686][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   71.922645][    T9] usb 5-1: device descriptor read/64, error -71
[   72.088848][ T1802] overlayfs: failed to clone upperpath
[   72.095856][ T1802] netlink: 'syz.0.404': attribute type 40 has an invalid length.
[   72.162666][    T9] usb 5-1: device descriptor read/64, error -71
[   72.204039][ T1192] Bluetooth: hci0: Frame reassembly failed (-84)
[   72.272729][    T9] usb usb5-port1: attempt power cycle
[   72.602659][  T384] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   72.622669][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   72.663594][    T9] usb 5-1: device descriptor read/8, error -71
[   72.698517][ T1810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'.
[   72.709165][ T1812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'.
[   72.762716][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   72.762732][   T36] audit: type=1400 audit(1793834202.173:472): avc:  denied  { nlmsg_write } for  pid=1827 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   72.789544][  T384] usb 6-1: Using ep0 maxpacket: 32
[   72.795955][  T384] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.800819][ T1830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.412'.
[   72.806291][  T384] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64
[   72.826051][  T384] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64
[   72.837017][  T384] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 32
[   72.847109][  T384] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[   72.860138][    T9] usb 5-1: device descriptor read/8, error -71
[   72.867982][  T384] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   72.877073][  T384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.885170][  T384] usb 6-1: Product: syz
[   72.889327][  T384] usb 6-1: Manufacturer: syz
[   72.893928][  T384] usb 6-1: SerialNumber: syz
[   72.899290][ T1804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   73.102860][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   73.116361][  T384] usb 6-1: USB disconnect, device number 11
[   73.124036][    T9] usb 5-1: device descriptor read/8, error -71
[   73.253630][    T9] usb 5-1: device descriptor read/8, error -71
[   73.362729][    T9] usb usb5-port1: unable to enumerate USB device
[   73.517034][    T9] usb 2-1: USB disconnect, device number 16
[   73.532969][ T1835] rust_binder: 1833:1835 no such ref 0
[   73.538488][ T1836] rust_binder: 1833:1836 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   73.546708][ T1835] rust_binder: 1833:1835 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   73.546910][ T1836] rust_binder: Write failure EINVAL in pid:219
[   73.554958][ T1835] rust_binder: Write failure EINVAL in pid:219
[   73.561150][ T1834] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.414' resets device
[   73.576217][ T1836] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.414' resets device
[   73.828123][ T1843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'.
[   73.883875][   T36] audit: type=1400 audit(1793834203.293:473): avc:  denied  { mounton } for  pid=1845 comm="syz.0.417" path="/225/file0" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   73.907005][ T1848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.417'.
[   73.942651][    T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[   73.946862][   T36] audit: type=1400 audit(1793834203.353:474): avc:  denied  { create } for  pid=1850 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   73.986096][   T36] audit: type=1400 audit(1793834203.393:475): avc:  denied  { watch watch_reads } for  pid=1852 comm="syz.4.419" path="/file0" dev="ramfs" ino=15150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   74.046897][ T1857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'.
[   74.103681][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.113781][    T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   74.122765][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[   74.134908][    T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40
[   74.143976][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.151953][    T9] usb 2-1: Product: syz
[   74.156112][    T9] usb 2-1: Manufacturer: syz
[   74.160702][    T9] usb 2-1: SerialNumber: syz
[   74.232629][  T318] Bluetooth: hci0: command 0x1003 tx timeout
[   74.232629][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   74.262653][  T457] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   74.370007][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   74.376956][    T9] usb 2-1: incorrect wMaxPacketSize 0x20 for BADD profile
[   74.385928][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   74.397153][    T9] usb 2-1: USB disconnect, device number 17
[   74.402778][  T498] udevd[498]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   74.418749][  T457] usb 5-1: Using ep0 maxpacket: 32
[   74.424898][  T457] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   74.433125][  T457] usb 5-1: config 0 has no interface number 0
[   74.439201][  T457] usb 5-1: config 0 interface 184 has no altsetting 0
[   74.447192][  T457] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   74.456253][  T457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.464276][  T457] usb 5-1: Product: syz
[   74.468435][  T457] usb 5-1: Manufacturer: syz
[   74.473049][  T457] usb 5-1: SerialNumber: syz
[   74.478141][  T457] usb 5-1: config 0 descriptor??
[   74.483870][  T457] smsc75xx v1.0.0
[   75.025144][ T1232] Bluetooth: hci0: Frame reassembly failed (-84)
[   75.031579][ T1887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.430'.
[   75.040508][ T1232] Bluetooth: hci0: Frame reassembly failed (-84)
[   75.052677][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   75.085313][  T457] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   75.096285][  T457] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   75.202626][    T9] usb 6-1: Using ep0 maxpacket: 32
[   75.208881][    T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[   75.217147][    T9] usb 6-1: config 0 has no interface number 0
[   75.224711][    T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   75.233888][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.241895][    T9] usb 6-1: Product: syz
[   75.246088][    T9] usb 6-1: Manufacturer: syz
[   75.250672][    T9] usb 6-1: SerialNumber: syz
[   75.255907][    T9] usb 6-1: config 0 descriptor??
[   75.262566][    T9] smsc95xx v2.0.0
[   75.663867][    T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   75.674838][    T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   76.073866][  T457] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   76.084801][  T457] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   76.094477][  T457] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   76.103943][  T457] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[   76.113261][  T457] usb 5-1: USB disconnect, device number 15
[   76.637064][   T36] audit: type=1400 audit(1793834206.043:476): avc:  denied  { execute } for  pid=1894 comm="syz.4.433" path="/38/cgroup.kill" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   76.660561][   T36] audit: type=1400 audit(1793834206.063:477): avc:  denied  { create } for  pid=1894 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   76.680851][   T36] audit: type=1400 audit(1793834206.063:478): avc:  denied  { write } for  pid=1894 comm="syz.4.433" path="socket:[15812]" dev="sockfs" ino=15812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   77.102654][   T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[   77.102669][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   77.263626][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.273762][   T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30
[   77.284643][   T10] usb 5-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 254
[   77.297778][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[   77.304396][   T10] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e4, bcdDevice= 0.00
[   77.313465][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.322026][   T10] usb 5-1: config 0 descriptor??
[   77.327870][   T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   77.529594][ T1902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.538111][ T1902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.546922][   T10] usb 5-1: USB disconnect, device number 16
[   77.587123][ T1904] overlayfs: failed to resolve './cgroup': -2
[   77.603061][ T1906] ./dev/sda1: Can't lookup blockdev
[   77.609951][ T1906] overlayfs: failed to resolve './cgroup': -2
[   77.882647][ T1029] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   77.923264][    T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   77.934120][    T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[   77.944446][    T9] usb 6-1: USB disconnect, device number 12
[   78.032633][ T1029] usb 2-1: Using ep0 maxpacket: 8
[   78.039065][ T1029] usb 2-1: unable to get BOS descriptor or descriptor too short
[   78.047364][ T1029] usb 2-1: config 138 has no interfaces?
[   78.057697][ T1029] usb 2-1: New USB device found, idVendor=045e, idProduct=0443, bcdDevice=61.02
[   78.063653][ T1918] overlay: ./file0 is not a directory
[   78.067076][ T1029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.080826][ T1029] usb 2-1: Product: Р
[   78.084930][ T1029] usb 2-1: Manufacturer: о
[   78.089437][ T1029] usb 2-1: SerialNumber: syz
[   78.299068][ T1029] usb 2-1: USB disconnect, device number 18
[   78.314919][ T1232] Bluetooth: hci0: Frame reassembly failed (-84)
[   78.315015][ T1930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'.
[   78.433014][   T36] audit: type=1400 audit(1793834207.843:479): avc:  denied  { map } for  pid=1931 comm="syz.5.447" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   78.433467][ T1932] rust_binder: 1931:1932 got reply transaction with no transaction stack
[   78.465097][ T1932] rust_binder: 1931:1932 transaction reply to 0:0 failed EINVAL, code 0 size 120-0 line thread.rs:1556
[   78.573015][ T1937] IPv6: Can't replace route, no match found
[   78.605773][ T1943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'.
[   79.052649][  T457] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[   79.204098][  T457] usb 2-1: unable to get BOS descriptor or descriptor too short
[   79.212299][  T457] usb 2-1: not running at top speed; connect to a high speed hub
[   79.221152][  T457] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.231423][  T457] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   79.242060][  T457] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[   79.251337][  T457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.259668][  T457] usb 2-1: Product: syz
[   79.264038][  T457] usb 2-1: Manufacturer: syz
[   79.268678][  T457] usb 2-1: SerialNumber: syz
[   79.480172][   T36] audit: type=1400 audit(1793834208.883:480): avc:  denied  { view } for  pid=1953 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   79.508883][  T457] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[   79.518521][  T457] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[   79.528117][  T457] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[   79.537618][  T457] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3)
[   79.545994][  T457] usb 2-1: 3:0: failed to get current value for ch 0 (-71)
[   79.563531][  T457] usb 2-1: USB disconnect, device number 19
[   79.738686][ T1966] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.745836][ T1966] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.752938][ T1966] bridge_slave_0: entered allmulticast mode
[   79.759131][ T1966] bridge_slave_0: entered promiscuous mode
[   79.766617][ T1966] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.773702][ T1966] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.780818][ T1966] bridge_slave_1: entered allmulticast mode
[   79.787182][ T1966] bridge_slave_1: entered promiscuous mode
[   79.821324][ T1966] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.828388][ T1966] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.835677][ T1966] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.842718][ T1966] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.861442][ T1232] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.868809][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.877832][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.884885][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.894536][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.901565][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.924059][ T1966] veth0_vlan: entered promiscuous mode
[   79.934166][ T1966] veth1_macvtap: entered promiscuous mode
[   80.016399][   T36] audit: type=1400 audit(1793834209.423:481): avc:  denied  { mount } for  pid=1973 comm="syz.1.462" name="/" dev="pstore" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   80.021047][ T1974] input: syz0 as /devices/virtual/input/input16
[   80.055971][   T36] audit: type=1400 audit(1793834209.463:482): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   80.092208][ T1978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4377 sclass=netlink_route_socket pid=1978 comm=syz.6.464
[   80.216584][ T1987] input: syz0 as /devices/virtual/input/input17
[   80.216685][ T1986] ./dev/sda1: Can't lookup blockdev
[   80.268705][ T1995] overlayfs: failed to clone upperpath
[   80.275441][ T1997] overlayfs: failed to resolve './file0': -2
[   80.300828][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.310623][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.318448][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.326292][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.334074][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.341810][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.350002][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.357948][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.366273][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.374056][ T2004] netlink: 'syz.0.474': attribute type 11 has an invalid length.
[   80.382637][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[   80.382831][  T318] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   80.442660][  T457] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   80.482652][   T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   80.602716][  T457] usb 2-1: Using ep0 maxpacket: 8
[   80.608790][  T457] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.619959][  T457] usb 2-1: config 0 interface 0 has no altsetting 0
[   80.626607][  T457] usb 2-1: New USB device found, idVendor=046d, idProduct=c125, bcdDevice= 0.e7
[   80.633710][   T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 69, using maximum allowed: 30
[   80.635894][  T457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.646654][   T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   80.655464][  T457] usb 2-1: config 0 descriptor??
[   80.668562][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   80.681853][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   80.692950][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 69
[   80.707714][   T10] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[   80.716789][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.724807][   T10] usb 7-1: Product: syz
[   80.728947][   T10] usb 7-1: Manufacturer: syz
[   80.733562][   T10] usb 7-1: SerialNumber: syz
[   80.738640][   T10] usb 7-1: config 0 descriptor??
[   80.743873][ T1991] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[   80.752021][   T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input18
[   80.874401][ T2008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.882937][ T2008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.927863][ T2015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'.
[   80.946215][ T2015] veth2: entered allmulticast mode
[   80.965044][  T457] usb 7-1: USB disconnect, device number 2
[   80.989008][   T10] usb 2-1: USB disconnect, device number 20
[   81.014125][ T2023] overlayfs: failed to clone upperpath
[   81.049410][   T36] audit: type=1400 audit(1793834210.453:483): avc:  denied  { execute_no_trans } for  pid=2029 comm="syz.0.482" path="/253/file0" dev="tmpfs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   81.072787][ T2032] overlayfs: failed to clone lowerpath
[   81.086933][ T2034] netlink: 104 bytes leftover after parsing attributes in process `syz.0.484'.
[   81.105437][ T2036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'.
[   81.516126][ T1238] Bluetooth: hci0: Frame reassembly failed (-84)
[   81.522516][ T1238] Bluetooth: hci0: Frame reassembly failed (-84)
[   81.630948][ T2047] 9pnet_fd: Insufficient options for proto=fd
[   81.639070][ T2047] fuse: Bad value for 'fd'
[   81.752947][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   81.757151][   T36] audit: type=1400 audit(1793834211.163:484): avc:  denied  { nlmsg_tty_audit } for  pid=2066 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   81.760477][    T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[   81.882707][   T10] usb 7-1: device descriptor read/64, error -71
[   81.904630][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[   81.912212][    T9] usb 2-1: can't read configurations, error -71
[   81.973527][ T1238] Bluetooth: hci1: Frame reassembly failed (-84)
[   81.980112][ T2072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.497'.
[   82.132636][   T10] usb 7-1: device descriptor read/64, error -71
[   82.372655][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   82.502648][   T10] usb 7-1: device descriptor read/64, error -71
[   82.742705][   T10] usb 7-1: device descriptor read/64, error -71
[   82.852809][   T10] usb usb7-port1: attempt power cycle
[   83.192666][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   83.213673][   T10] usb 7-1: device descriptor read/8, error -71
[   83.344958][   T10] usb 7-1: device descriptor read/8, error -71
[   83.582646][ T2073] Bluetooth: hci0: command 0x1003 tx timeout
[   83.582727][  T318] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   83.594833][   T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   83.613660][   T10] usb 7-1: device descriptor read/8, error -71
[   83.743792][   T10] usb 7-1: device descriptor read/8, error -71
[   83.852753][   T10] usb usb7-port1: unable to enumerate USB device
[   83.982804][  T318] Bluetooth: hci1: command 0x1003 tx timeout
[   83.988878][   T54] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   84.108159][ T2082] futex_wake_op: syz.1.501 tries to shift op by 144; fix this program
[   84.362655][  T384] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   84.378059][ T2089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'.
[   84.386940][ T2089] bridge_slave_1: left allmulticast mode
[   84.392666][ T2089] bridge_slave_1: left promiscuous mode
[   84.398335][ T2089] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.405959][ T2089] bridge_slave_0: left allmulticast mode
[   84.411628][ T2089] bridge_slave_0: left promiscuous mode
[   84.417299][ T2089] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.508958][ T2092] 9pnet_fd: p9_fd_create_tcp (2092): problem connecting socket to 127.0.0.1
[   84.518897][  T384] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.529902][  T384] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.533675][   T36] audit: type=1400 audit(1793834213.943:485): avc:  denied  { mounton } for  pid=2091 comm="syz.4.504" path="/49/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   84.543260][  T384] usb 2-1: config 0 interface 0 has no altsetting 0
[   84.572907][ T2098] 9pnet_fd: p9_fd_create_tcp (2098): problem connecting socket to 127.0.0.1
[   84.583133][  T384] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[   84.592198][  T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.601315][  T384] usb 2-1: config 0 descriptor??
[   84.654213][ T1238] Bluetooth: hci0: Frame reassembly failed (-84)
[   84.710597][ T2106] cgroup: fork rejected by pids controller in /syz6
[   84.812757][  T384] usbhid 2-1:0.0: can't add hid device: -71
[   84.818707][  T384] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   84.834578][  T384] usb 2-1: USB disconnect, device number 23
[   85.219062][   T36] audit: type=1400 audit(1793834214.623:486): avc:  denied  { write } for  pid=2185 comm="syz.6.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   85.247795][ T2186] fuse: Bad value for 'fd'
[   85.362451][ T1226] Bluetooth: hci1: Frame reassembly failed (-84)
[   85.363344][ T2193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.512'.
[   86.702670][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   86.702759][ T2073] Bluetooth: hci0: command 0x1003 tx timeout
[   86.776065][ T2239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'.
[   86.785009][ T2239] bridge_slave_1: left allmulticast mode
[   86.790664][ T2239] bridge_slave_1: left promiscuous mode
[   86.801708][ T2239] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.813100][ T2239] bridge_slave_0: left allmulticast mode
[   86.815455][ T2241] netlink: 72 bytes leftover after parsing attributes in process `syz.0.527'.
[   86.818937][ T2239] bridge_slave_0: left promiscuous mode
[   86.828667][   T36] audit: type=1400 audit(1793834216.233:487): avc:  denied  { remount } for  pid=2240 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   86.833302][ T2239] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.900953][ T2247] validate_nla: 55 callbacks suppressed
[   86.900971][ T2247] netlink: 'syz.0.529': attribute type 28 has an invalid length.
[   86.976665][   T36] audit: type=1400 audit(1793834216.383:488): avc:  denied  { create } for  pid=2255 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1
[   87.275370][ T2288] input: syz1 as /devices/virtual/input/input19
[   87.284039][ T2289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.292804][ T2289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.422648][  T318] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   87.428800][   T54] Bluetooth: hci1: command 0x1003 tx timeout
[   87.522638][  T457] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[   87.673752][  T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.684743][  T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.694842][  T457] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   87.707243][  T457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.716198][  T457] usb 5-1: config 0 descriptor??
[   87.925012][  T457] usbhid 5-1:0.0: can't add hid device: -71
[   87.930985][  T457] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   87.941605][  T457] usb 5-1: USB disconnect, device number 17
[   88.250171][   T36] audit: type=1400 audit(1793834217.653:489): avc:  denied  { setopt } for  pid=2326 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   88.272646][   T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   88.422641][   T45] usb 2-1: Using ep0 maxpacket: 8
[   88.429138][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   88.438864][   T45] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40
[   88.447949][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.455981][   T45] usb 2-1: Product: syz
[   88.460164][   T45] usb 2-1: Manufacturer: syz
[   88.465019][   T45] usb 2-1: SerialNumber: syz
[   88.506408][ T2329] netlink: 64 bytes leftover after parsing attributes in process `syz.4.544'.
[   88.671871][ T2321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.680497][ T2321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.787770][   T36] audit: type=1400 audit(1793834218.193:490): avc:  denied  { create } for  pid=2337 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   88.813284][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   88.823593][ T2340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'.
[   88.826675][   T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   88.841367][   T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[   88.852669][   T45] usb 2-1: USB disconnect, device number 24
[   88.858337][  T498] udevd[498]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   88.962622][    T9] usb 5-1: Using ep0 maxpacket: 32
[   88.969022][    T9] usb 5-1: config 0 has no interfaces?
[   88.976222][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19
[   88.985294][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.993321][    T9] usb 5-1: Product: syz
[   88.997480][    T9] usb 5-1: Manufacturer: syz
[   89.002048][    T9] usb 5-1: SerialNumber: syz
[   89.007237][    T9] usb 5-1: config 0 descriptor??
[   89.262634][  T502] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   89.338277][   T36] audit: type=1400 audit(1793834218.743:491): avc:  denied  { relabelfrom } for  pid=2346 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   89.358217][   T36] audit: type=1400 audit(1793834218.743:492): avc:  denied  { relabelto } for  pid=2346 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   89.379431][ T2351] netlink: 57 bytes leftover after parsing attributes in process `syz.0.552'.
[   89.392657][  T502] usb 7-1: device descriptor read/64, error -71
[   89.404662][   T36] audit: type=1326 audit(1793834218.813:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2355 comm="syz.0.553" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11f9fb19 code=0x7ffc0000
[   89.430971][   T36] audit: type=1326 audit(1793834218.813:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2355 comm="syz.0.553" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f11f9fb19 code=0x7ffc0000
[   89.471032][ T2363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.610834][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.620549][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.628846][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.634085][  T502] usb 7-1: device descriptor read/64, error -71
[   89.639021][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.842639][   T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   89.882635][  T502] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   89.992637][   T10] usb 2-1: Using ep0 maxpacket: 16
[   89.998787][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.009721][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.019467][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   90.022622][  T502] usb 7-1: device descriptor read/64, error -71
[   90.032310][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   90.047536][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.056461][   T10] usb 2-1: config 0 descriptor??
[   90.213409][ T2399] raw_sendmsg: syz.0.564 forgot to set AF_INET. Fix it!
[   90.229398][   T36] kauditd_printk_skb: 32 callbacks suppressed
[   90.229432][   T36] audit: type=1400 audit(1793834219.633:527): avc:  denied  { create } for  pid=2401 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   90.264777][   T10] usbhid 2-1:0.0: can't add hid device: -71
[   90.270766][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   90.272644][  T502] usb 7-1: device descriptor read/64, error -71
[   90.280030][   T10] usb 2-1: USB disconnect, device number 25
[   90.392693][  T502] usb usb7-port1: attempt power cycle
[   90.732669][  T502] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   90.753672][  T502] usb 7-1: device descriptor read/8, error -71
[   90.775895][ T2411] rust_binder: 2406:2411 got reply transaction with no transaction stack
[   90.784437][ T2411] rust_binder: 2406:2411 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1556
[   90.796479][   T10] rust_binder: 2406: undelivered TRANSACTION_ERROR: 29201
[   90.883606][  T502] usb 7-1: device descriptor read/8, error -71
[   91.042660][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   91.122649][  T502] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   91.143714][  T502] usb 7-1: device descriptor read/8, error -71
[   91.192621][   T10] usb 2-1: Using ep0 maxpacket: 16
[   91.198822][   T10] usb 2-1: config 1 has an invalid interface association descriptor of length 5, skipping
[   91.208856][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.218967][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[   91.230013][   T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[   91.239924][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   91.253963][   T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[   91.263028][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.271018][   T10] usb 2-1: Product: syz
[   91.275234][   T10] usb 2-1: Manufacturer: syz
[   91.279821][   T10] usb 2-1: SerialNumber: syz
[   91.283602][  T502] usb 7-1: device descriptor read/8, error -71
[   91.287099][ T2417] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   91.392711][  T502] usb usb7-port1: unable to enumerate USB device
[   91.512604][  T502] usb 5-1: USB disconnect, device number 18
[   91.533965][ T2420] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   91.542037][ T2420] rust_binder: Read failure Err(EFAULT) in pid:195
[   91.549270][ T2420] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   91.557330][ T2420] rust_binder: Read failure Err(EFAULT) in pid:195
[   91.576834][ T2422] overlayfs: failed to resolve './file2/file0': -2
[   91.594605][ T2424] x_tables: unsorted underflow at hook 4
[   91.617012][   T10] usb 2-1: MIDIStreaming interface descriptor not found
[   91.627424][   T10] usb 2-1: USB disconnect, device number 26
[   91.637207][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   91.972647][  T502] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[   92.122621][  T502] usb 5-1: Using ep0 maxpacket: 8
[   92.134438][  T502] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   92.147031][  T502] usb 5-1: config 179 has no interface number 0
[   92.158005][  T502] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   92.182695][  T502] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   92.202605][  T502] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   92.232607][  T502] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   92.246132][  T502] usb 5-1: config 179 interface 65 has no altsetting 0
[   92.253765][   T36] audit: type=1400 audit(1793834221.663:528): avc:  denied  { connect } for  pid=2440 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   92.262785][  T502] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   92.292621][  T502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.308727][  T502] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input20
[   92.362823][   T95] input input20: unable to receive magic message: -110
[   92.370200][   T95] input input20: unable to receive magic message: -32
[   92.382191][   T95] input input20: unable to receive magic message: -32
[   92.462623][   T45] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[   92.532126][   T36] audit: type=1400 audit(1793834221.933:529): avc:  denied  { bind } for  pid=2433 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   92.532716][ T2434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'.
[   92.559504][   T36] audit: type=1400 audit(1793834221.933:530): avc:  denied  { setopt } for  pid=2433 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   92.625897][   T65] usb 5-1: USB disconnect, device number 19
[   92.625961][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   92.640328][   T65] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   92.642429][   T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.663393][   T45] usb 7-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[   92.672454][   T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.681077][   T45] usb 7-1: config 0 descriptor??
[   92.752618][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   92.895561][   T45] input: HID 0458:5005 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5005.0009/input/input21
[   92.903677][    T9] usb 2-1: config 0 has an invalid interface number: 200 but max is 0
[   92.915404][    T9] usb 2-1: config 0 has no interface number 0
[   92.921507][    T9] usb 2-1: config 0 interface 200 has no altsetting 0
[   92.922704][   T45] input: HID 0458:5005 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5005.0009/input/input22
[   92.929677][    T9] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=67.93
[   92.945879][   T45] kye 0003:0458:5005.0009: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.6-1/input0
[   92.963747][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.971809][    T9] usb 2-1: Product: syz
[   92.976466][    T9] usb 2-1: Manufacturer: syz
[   92.981166][    T9] usb 2-1: SerialNumber: syz
[   92.986712][    T9] usb 2-1: config 0 descriptor??
[   93.092286][   T65] usb 7-1: USB disconnect, device number 11
[   93.165914][ T2453] ./dev/sda1: Can't lookup blockdev
[   93.166224][ T2454] overlayfs: failed to resolve './bus': -2
[   93.195163][    T9] ftdi_sio 2-1:0.200: FTDI USB Serial Device converter detected
[   93.203536][    T9] ftdi_sio ttyUSB0: unknown device type: 0x6793
[   93.211623][    T9] usb 2-1: USB disconnect, device number 27
[   93.219356][    T9] ftdi_sio 2-1:0.200: device disconnected
[   93.262450][   T36] audit: type=1400 audit(1793834222.663:531): avc:  denied  { create } for  pid=2460 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   93.262938][ T2461] netlink: 'syz.4.581': attribute type 16 has an invalid length.
[   93.294872][ T2461] tmpfs: Bad value for 'nr_inodes'
[   93.462318][   T36] audit: type=1400 audit(1793834222.863:532): avc:  denied  { read } for  pid=2462 comm="syz.4.582" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   93.485577][   T36] audit: type=1400 audit(1793834222.863:533): avc:  denied  { open } for  pid=2462 comm="syz.4.582" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   93.509161][   T36] audit: type=1400 audit(1793834222.883:534): avc:  denied  { ioctl } for  pid=2462 comm="syz.4.582" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   93.524843][ T2465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.542801][ T2465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.552629][   T45] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[   93.783403][ T2478] netlink: 'syz.0.586': attribute type 19 has an invalid length.
[   93.882642][   T65] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[   94.033609][   T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.044572][   T65] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00
[   94.053634][   T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.462662][   T45] usb 5-1: device descriptor read/64, error -71
[   94.469417][   T65] hid (null): unknown global tag 0xc
[   94.475892][   T65] hid-sensor-hub 0003:8086:0000.000A: unknown main item tag 0x0
[   94.483592][   T65] hid-sensor-hub 0003:8086:0000.000A: unknown main item tag 0x0
[   94.491240][   T65] hid-sensor-hub 0003:8086:0000.000A: unknown main item tag 0xd
[   94.498925][   T65] hid-sensor-hub 0003:8086:0000.000A: unknown global tag 0xc
[   94.506318][   T65] hid-sensor-hub 0003:8086:0000.000A: item 0 4 1 12 parsing failed
[   94.514392][   T65] hid-sensor-hub 0003:8086:0000.000A: parse failed
[   94.520930][   T65] hid-sensor-hub 0003:8086:0000.000A: probe with driver hid-sensor-hub failed with error -22
[   94.551370][ T2492] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1
[   94.560692][ T2492] EXT4-fs warning (device sda1): ext4_resize_fs:2019: can't read last block, resize aborted
[   94.672639][  T457] usb 7-1: USB disconnect, device number 12
[   94.724972][   T45] usb 5-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40
[   94.734141][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.742130][   T45] usb 5-1: Product: syz
[   94.746321][   T45] usb 5-1: Manufacturer: syz
[   94.750931][   T45] usb 5-1: SerialNumber: syz
[   94.871231][   T36] audit: type=1400 audit(1793834224.273:535): avc:  denied  { rmdir } for  pid=296 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   94.896708][   T36] audit: type=1326 audit(1793834224.303:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2497 comm="syz.0.594" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f11f9fb19 code=0x0
[   94.957740][ T2482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.966297][ T2482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.978193][   T45] usb 5-1: MIDIStreaming interface descriptor not found
[   94.988984][   T45] usb 5-1: USB disconnect, device number 20
[   95.001208][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   95.401253][  T296] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid
[   95.412606][  T296] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid
[   95.482861][   T45] rust_binder: 2481: undelivered transaction 21, process died
[   95.490498][   T45] rust_binder: 2481: undelivered transaction 20, process died
[   95.506586][ T2516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=2516 comm=syz.4.601
[   95.529641][ T2524] overlayfs: failed to clone upperpath
[   95.549368][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   95.549385][   T36] audit: type=1400 audit(1793834224.953:539): avc:  denied  { execute } for  pid=2520 comm="syz.0.603" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   95.604708][ T1192] bridge_slave_1: left allmulticast mode
[   95.614998][ T1192] bridge_slave_1: left promiscuous mode
[   95.623423][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.641662][ T1192] bridge_slave_0: left allmulticast mode
[   95.651721][ T1192] bridge_slave_0: left promiscuous mode
[   95.662810][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.782026][   T36] audit: type=1400 audit(1793834225.183:540): avc:  denied  { getopt } for  pid=2549 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   95.814255][ T1192] veth1_macvtap: left promiscuous mode
[   95.819801][ T1192] veth0_vlan: left promiscuous mode
[   96.022819][   T45] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[   96.152842][   T45] usb 5-1: device descriptor read/64, error -71
[   96.392880][   T45] usb 5-1: device descriptor read/64, error -71
[   96.456679][ T2563] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294967106
[   96.461714][   T36] audit: type=1400 audit(1793834225.863:541): avc:  denied  { watch watch_reads } for  pid=2562 comm="syz.0.615" path="/321/file0" dev="tmpfs" ino=1845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   96.632888][   T45] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[   96.702939][  T502] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[   96.762891][   T45] usb 5-1: device descriptor read/64, error -71
[   96.853958][  T502] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.864148][  T502] usb 7-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   96.875050][  T502] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   96.889277][  T502] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   96.898340][  T502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.906327][  T502] usb 7-1: Product: syz
[   96.910478][  T502] usb 7-1: Manufacturer: syz
[   96.915072][  T502] usb 7-1: SerialNumber: syz
[   97.012927][   T45] usb 5-1: device descriptor read/64, error -71
[   97.123865][   T45] usb usb5-port1: attempt power cycle
[   97.462960][   T45] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[   97.483867][   T45] usb 5-1: device descriptor read/8, error -71
[   97.613879][   T45] usb 5-1: device descriptor read/8, error -71
[   97.853006][   T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[   97.874022][   T45] usb 5-1: device descriptor read/8, error -71
[   97.923412][  T502] cdc_ncm 7-1:1.0: bind() failure
[   97.929594][  T502] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71
[   97.937888][  T502] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71
[   97.946858][  T502] usb 7-1: USB disconnect, device number 13
[   98.004015][   T45] usb 5-1: device descriptor read/8, error -71
[   98.113163][   T45] usb usb5-port1: unable to enumerate USB device
[   98.663561][   T36] audit: type=1400 audit(1793834228.073:542): avc:  denied  { sys_module } for  pid=2587 comm="syz.0.621" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   99.455016][ T2597] netlink: 'syz.6.624': attribute type 12 has an invalid length.
[   99.462978][ T2596] netlink: 'syz.6.624': attribute type 12 has an invalid length.
[  100.447921][ T2604] FAULT_INJECTION: forcing a failure.
[  100.447921][ T2604] name failslab, interval 1, probability 0, space 0, times 0
[  100.469236][ T2604] CPU: 0 UID: 0 PID: 2604 Comm: syz.4.626 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[  100.469272][ T2604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  100.469285][ T2604] Call Trace:
[  100.469291][ T2604]  <TASK>
[  100.469299][ T2604]  __dump_stack+0x21/0x30
[  100.469322][ T2604]  dump_stack_lvl+0x140/0x1c0
[  100.469341][ T2604]  ? __cfi_dump_stack_lvl+0x10/0x10
[  100.469358][ T2604]  ? do_syscall_64+0x57/0xf0
[  100.469381][ T2604]  dump_stack+0x19/0x20
[  100.469407][ T2604]  should_fail_ex+0x3c2/0x510
[  100.469438][ T2604]  should_failslab+0xac/0x100
[  100.469459][ T2604]  kmem_cache_alloc_noprof+0x42/0x410
[  100.469487][ T2604]  ? __proc_create+0x535/0xb40
[  100.469512][ T2604]  __proc_create+0x535/0xb40
[  100.469537][ T2604]  ? proc_symlink+0x2d0/0x2d0
[  100.469562][ T2604]  ? __kasan_check_write+0x18/0x20
[  100.469586][ T2604]  ? _raw_write_lock+0x92/0xf0
[  100.469606][ T2604]  proc_create_reg+0x9a/0x120
[  100.469624][ T2604]  proc_create_net_data+0x99/0x1b0
[  100.469650][ T2604]  ? __cfi_proc_create_net_data+0x10/0x10
[  100.469677][ T2604]  nf_log_net_init+0x69/0x750
[  100.469704][ T2604]  ops_init+0x302/0x5d0
[  100.469721][ T2604]  ? __kasan_check_write+0x18/0x20
[  100.469744][ T2604]  ? rwsem_read_trylock+0x275/0x5a0
[  100.469767][ T2604]  setup_net+0x227/0x9b0
[  100.469792][ T2604]  ? copy_net_ns+0xa20/0xa20
[  100.469816][ T2604]  ? down_read_killable+0x7f/0x100
[  100.469841][ T2604]  ? __cfi_down_read_killable+0x10/0x10
[  100.469868][ T2604]  copy_net_ns+0x4fc/0xa20
[  100.469895][ T2604]  create_new_namespaces+0x390/0x6f0
[  100.469915][ T2604]  unshare_nsproxy_namespaces+0x124/0x180
[  100.469934][ T2604]  ksys_unshare+0x4f9/0x920
[  100.469952][ T2604]  ? fput+0x1a4/0x230
[  100.469972][ T2604]  ? __cfi_ksys_unshare+0x10/0x10
[  100.469988][ T2604]  ? __kasan_check_write+0x18/0x20
[  100.470013][ T2604]  __x64_sys_unshare+0x3c/0x50
[  100.470029][ T2604]  x64_sys_call+0x2998/0x2ee0
[  100.470049][ T2604]  do_syscall_64+0x57/0xf0
[  100.470067][ T2604]  ? clear_bhb_loop+0x50/0xa0
[  100.470092][ T2604]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  100.470113][ T2604] RIP: 0033:0x7fe48439fb19
[  100.470129][ T2604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.470144][ T2604] RSP: 002b:00007fe485186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  100.470166][ T2604] RAX: ffffffffffffffda RBX: 00007fe484625fa0 RCX: 00007fe48439fb19
[  100.470181][ T2604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  100.470194][ T2604] RBP: 00007fe484437b70 R08: 0000000000000000 R09: 0000000000000000
[  100.470205][ T2604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.470217][ T2604] R13: 00007fe484626038 R14: 00007fe484625fa0 R15: 00007ffc65498fd8
[  100.470232][ T2604]  </TASK>
[  100.524053][ T2608] netlink: 'syz.4.626': attribute type 46 has an invalid length.
[  100.578571][ T2612] syz.4.626: attempt to access beyond end of device
[  100.578571][ T2612] loop4: rw=0, sector=0, nr_sectors = 1 limit=0
[  100.770440][ T2612] FAT-fs (loop4): unable to read boot sector
[  101.580291][ T2616] fuse: Bad value for 'fd'
[  101.630113][ T2625] input: syz1 as /devices/virtual/input/input23
[  101.644621][   T36] audit: type=1400 audit(1793834231.053:543): avc:  denied  { create } for  pid=2624 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  101.863537][   T65] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  102.024530][   T65] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  102.033594][   T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.857597][ T2619] kvm: kvm [2618]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  102.867455][ T2619] kvm: kvm [2618]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  102.904687][   T65] usb 5-1: Cannot set autoneg
[  102.911953][   T65] MOSCHIP usb-ethernet driver 5-1:7.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  102.926046][   T65] usb 5-1: USB disconnect, device number 25
[  104.135749][ T2641] incfs: Error accessing: ./file0.
[  104.140922][ T2641] incfs: mount failed -20
[  104.249609][   T36] audit: type=1400 audit(1793834233.652:544): avc:  denied  { write } for  pid=2656 comm="syz.6.641" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  104.484686][  T384] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  104.644832][  T384] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  104.656066][  T384] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.674385][  T384] usb 5-1: config 0 interface 0 has no altsetting 0
[  104.685363][  T384] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  104.703817][  T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.712484][  T384] usb 5-1: config 0 descriptor??
[  104.925240][  T384] usbhid 5-1:0.0: can't add hid device: -71
[  104.931197][  T384] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  104.941972][  T384] usb 5-1: USB disconnect, device number 26
[  105.854022][  T384] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  105.864005][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  106.005059][  T384] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  106.016050][  T384] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.028849][   T10] usb 7-1: Using ep0 maxpacket: 32
[  106.034034][  T384] usb 5-1: config 0 interface 0 has no altsetting 0
[  106.040619][  T384] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  106.049683][  T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.058505][   T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  106.069421][  T384] usb 5-1: config 0 descriptor??
[  106.074406][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.085331][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  106.098319][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  106.108024][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.116540][   T10] usb 7-1: config 0 descriptor??
[  106.308693][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.317097][ T2679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.317636][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.326511][ T2679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.341362][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.349864][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.525129][  T384] usbhid 5-1:0.0: can't add hid device: -71
[  106.531121][  T384] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  106.539803][   T10] logitech 0003:046D:C50C.000B: item fetching failed at offset 5/6
[  106.548620][  T384] usb 5-1: USB disconnect, device number 27
[  106.555310][   T10] logitech 0003:046D:C50C.000B: parse failed
[  106.561313][   T10] logitech 0003:046D:C50C.000B: probe with driver logitech failed with error -22
[  106.740831][  T502] usb 7-1: USB disconnect, device number 14
[  107.107859][ T2687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'.
[  107.131637][ T2691] netlink: 'syz.0.649': attribute type 8 has an invalid length.
[  107.354217][   T10] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  107.505271][   T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  107.513374][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.523452][   T10] usb 5-1: config 0 has no interface number 0
[  107.530878][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  107.539947][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.547936][   T10] usb 5-1: Product: syz
[  107.552070][   T10] usb 5-1: Manufacturer: syz
[  107.556661][   T10] usb 5-1: SerialNumber: syz
[  107.561708][   T10] usb 5-1: config 0 descriptor??
[  108.272053][  T502] usb 5-1: USB disconnect, device number 28
[  108.710728][   T36] audit: type=1400 audit(1793834238.112:545): avc:  denied  { setattr } for  pid=2699 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  108.752021][ T2706] overlayfs: failed to clone upperpath
[  108.768110][ T2712] overlayfs: failed to clone upperpath
[  108.780132][   T36] audit: type=1400 audit(1793834238.182:546): avc:  denied  { write } for  pid=2713 comm="syz.4.656" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  108.804254][ T2714] random: crng reseeded on system resumption
[  108.832157][   T36] audit: type=1400 audit(1793834238.202:547): avc:  denied  { open } for  pid=2713 comm="syz.4.656" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  108.855694][ T2714] device-mapper: ioctl: The device has no table.
[  110.455641][   T36] audit: type=1400 audit(1793834239.862:548): avc:  denied  { append } for  pid=2724 comm="syz.6.658" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.456299][ T2728] FAULT_INJECTION: forcing a failure.
[  110.456299][ T2728] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  110.493301][ T2728] CPU: 0 UID: 0 PID: 2728 Comm: syz.6.658 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815
[  110.493334][ T2728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  110.493348][ T2728] Call Trace:
[  110.493354][ T2728]  <TASK>
[  110.493362][ T2728]  __dump_stack+0x21/0x30
[  110.493384][ T2728]  dump_stack_lvl+0x140/0x1c0
[  110.493403][ T2728]  ? __cfi_dump_stack_lvl+0x10/0x10
[  110.493420][ T2728]  ? __kvmalloc_node_noprof+0x173/0x300
[  110.493445][ T2728]  ? kasan_save_alloc_info+0x3a/0x50
[  110.493470][ T2728]  dump_stack+0x19/0x20
[  110.493487][ T2728]  should_fail_ex+0x3c2/0x510
[  110.493515][ T2728]  should_fail+0xf/0x20
[  110.493531][ T2728]  should_fail_usercopy+0x1e/0x30
[  110.493551][ T2728]  _copy_to_user+0x24/0xa0
[  110.493573][ T2728]  io_uring_create+0xb9e/0x13f0
[  110.493595][ T2728]  __se_sys_io_uring_setup+0x2a4/0x2b0
[  110.493621][ T2728]  ? __se_sys_futex+0x13c/0x320
[  110.493642][ T2728]  ? __x64_sys_io_uring_setup+0x80/0x80
[  110.493689][ T2728]  ? __kasan_check_write+0x18/0x20
[  110.493716][ T2728]  __x64_sys_io_uring_setup+0x5f/0x80
[  110.493740][ T2728]  x64_sys_call+0x22c0/0x2ee0
[  110.493761][ T2728]  do_syscall_64+0x57/0xf0
[  110.493781][ T2728]  ? clear_bhb_loop+0x50/0xa0
[  110.493806][ T2728]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  110.493831][ T2728] RIP: 0033:0x7fa9fdd9fb19
[  110.493847][ T2728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.493864][ T2728] RSP: 002b:00007fa9febd8fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  110.493884][ T2728] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007fa9fdd9fb19
[  110.493898][ T2728] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 0000000000000020
[  110.493911][ T2728] RBP: 00007fa9fde37b70 R08: 0000000000000000 R09: 0000000000000000
[  110.493923][ T2728] R10: 0000200000000340 R11: 0000000000000206 R12: 0000200000000300
[  110.493936][ T2728] R13: 0000200000000340 R14: 00002000000002c0 R15: 00007ffee71390b8
[  110.493952][ T2728]  </TASK>
[  110.701647][   T36] audit: type=1400 audit(1793834240.102:549): avc:  denied  { read } for  pid=2724 comm="syz.6.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  112.386599][   T36] audit: type=1400 audit(1793834241.791:550): avc:  denied  { ioctl } for  pid=2738 comm="syz.4.662" path="socket:[20944]" dev="sockfs" ino=20944 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  112.420335][ T2739] ./dev/sda1: Can't lookup blockdev
[  112.423376][ T2740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.662'.
[  112.459218][   T36] audit: type=1400 audit(1793834241.861:551): avc:  denied  { setopt } for  pid=2748 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  112.489831][   T36] audit: type=1400 audit(1793834241.861:552): avc:  denied  { append } for  pid=2748 comm="syz.4.666" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  112.597902][ T2759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.606855][ T2759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.834838][  T384] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  112.994851][  T384] usb 7-1: Using ep0 maxpacket: 16
[  113.000964][  T384] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.011055][  T384] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.020596][  T384] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  113.029687][  T384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  113.037686][  T384] usb 7-1: SerialNumber: syz
[  113.044245][  T384] usb 7-1: 0:2 : does not exist
[  114.316768][   T36] audit: type=1400 audit(1793834243.721:553): avc:  denied  { read } for  pid=2763 comm="syz.4.668" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  114.364820][   T36] audit: type=1400 audit(1793834243.721:554): avc:  denied  { open } for  pid=2763 comm="syz.4.668" path="/93/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  114.399327][ T2772] ./dev/sda1: Can't lookup blockdev
[  115.441695][  T384] usb 7-1: USB disconnect, device number 15
[  116.388324][   T36] audit: type=1326 audit(1793834245.791:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2782 comm="syz.0.673" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f11f9fb19 code=0x0
[  116.635387][  T384] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  116.785324][  T384] usb 5-1: Using ep0 maxpacket: 16
[  116.791659][  T384] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.801797][  T384] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.812662][  T384] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.822405][  T384] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  116.835198][  T384] usb 5-1: config 0 interface 0 has no altsetting 0
[  116.841801][  T384] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  116.850867][  T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.859373][  T384] usb 5-1: config 0 descriptor??
[  117.069414][  T384] logitech-djreceiver 0003:046D:C53A.000C: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0
[  117.077391][ T2791] udevd[2791]: open /dev/null failed: No such file or directory
[  117.271158][ T2797] incfs: Error accessing: ./file0.
[  117.276355][ T2797] incfs: mount failed -2
[  118.305713][   T10] usb 5-1: reset high-speed USB device number 29 using dummy_hcd
[  118.520679][ T2812] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  118.539349][   T36] audit: type=1400 audit(1793834247.941:556): avc:  denied  { unmount } for  pid=1966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  118.569124][ T2816] VFS: file-max limit 2 reached
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open(/proc/self/ns/net) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=7 req=605 state=3 status=67 (errno 9: Bad file descriptor)
[  118.601027][   T36] audit: type=1400 audit(1793834248.001:557): avc:  denied  { write } for  pid=286 comm="syz-executor" path="pipe:[1655]" dev="pipefs" ino=1655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  118.805559][   T45] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  118.847595][ T1216] veth1_macvtap: left promiscuous mode
[  118.853093][ T1216] veth0_vlan: left promiscuous mode
[  119.096850][ T1216] bridge_slave_1: left allmulticast mode
[  119.102504][ T1216] bridge_slave_1: left promiscuous mode
[  119.108179][ T1216] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.115585][ T1216] bridge_slave_0: left allmulticast mode
[  119.121247][ T1216] bridge_slave_0: left promiscuous mode
[  119.126932][ T1216] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.278385][ T1216] veth1_macvtap: left promiscuous mode
[  119.283877][ T1216] veth0_vlan: left promiscuous mode
[  119.289409][ T1216] veth1_macvtap: left promiscuous mode
[  119.294877][ T1216] veth0_vlan: left promiscuous mode
[  119.536560][  T384] usb 5-1: USB disconnect, device number 29