last executing test programs:

1m16.599013302s ago: executing program 3 (id=136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00000f1000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000380)="0f079a00d0ffff8e00260f22a40f78646c00c4e275369f80000000640f78fb0f002ff00fb347640f22110f01c8", 0x2d}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xfb, 0xff, 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0x7000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14, 0xb477782f6a6b86e6)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x3, 0x4, 0x10000, 0x5e, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7800, 0x5e1f}})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x9})
syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x5})
ioctl$KVM_KVMCLOCK_CTRL(r7, 0xaead)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m16.298972839s ago: executing program 3 (id=138):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362b, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
wait4(0x0, 0x0, 0xa, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1e, {[@global=@item_4={0x3, 0x1, 0xa, "87e87b8f"}, @local=@item_4={0x3, 0x2, 0xa, "5b59009e"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x2, "621307cf"}, @main=@item_012={0x1, 0x0, 0x8, 'M'}, @main=@item_4={0x3, 0x0, 0x9, "7b805979"}, @local=@item_012={0x1, 0x2, 0xa, '{'}, @main=@item_4={0x3, 0x0, 0xb, "f34a2aac"}]}}, 0x0}, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1m13.258152893s ago: executing program 3 (id=160):
r0 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040), &(0x7f00000010c0)=0x1)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1m12.776409855s ago: executing program 3 (id=162):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x3f, 0xfb, 0x5, 0xc, 0x2, 0x4, 0x41, 0x1, 0xf0}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x4, 0x20, 0x3, 0x2, 0xff, 0x100, 0x7ffffffffffffffd, 0x80000004000080, 0x380000, 0x2000008, 0x40000000000008, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f00000004c0)={{0x5c, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x3, 'lblcr\x00', 0x2c, 0xf9, 0x4c}, {@local, 0x4e22, 0x2000, 0x9, 0x6, 0x8}}, 0x44)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x10c7, 0x1, 0x1, 0x2, 0x8000, 0x9}, 0x20)

1m12.634163869s ago: executing program 3 (id=169):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
write(r0, &(0x7f0000000000)="2ce37bc1ad53b3737e4701e073c79487b1d79b97a4dbd4ec5754296cadab4fca1ca26a0bb234bfd40e8008a6e600fc06266269a69fe00b6cc402b0c016b1e1694f892566b30fdb4c4e45b2e8d6b46a34c50b7aca79e51d2a5066e16e8c8edc6afa2be00432fc9f2c04a28984f6bdb7068702225e2ed810a02f582561ab7c9be1dba2c66732473f92e18ef55fe00fd8cb52accae28e52c031b695c62cbd7504d5d580edc088570cbb1c1988ce94cb5765c668dae3b17abad2", 0xb8) (async)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) (rerun: 32)
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async, rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 64)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xffff, 0x4, 0x1010, r1, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x3b12e000) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (rerun: 64)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone3(&(0x7f0000003240)={0x8004000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m12.57776922s ago: executing program 3 (id=171):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
writev(r1, &(0x7f0000000880)=[{&(0x7f00000001c0)="64656e7986", 0x5}], 0x1)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, &(0x7f00000000c0)) (async)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, &(0x7f00000000c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x460100, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x6, 0x0, 0x1, 0x8c, 0x7f46, 0x6}]})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x2a, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x8e2}], 0x1)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x8, 0x5, 0x20, 0x5})
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r5, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x300}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x300}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x300}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x300}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) (async)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r8, 0x107, 0x7, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e24, 0x8b, @mcast2, 0x9}, 0x1c)
sendto$inet6(r9, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') (async)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
getsockopt$MRT6(r10, 0x29, 0xd0, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
write$binfmt_format(r10, &(0x7f0000000300)='1\x00', 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

56.998842113s ago: executing program 32 (id=171):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
writev(r1, &(0x7f0000000880)=[{&(0x7f00000001c0)="64656e7986", 0x5}], 0x1)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, &(0x7f00000000c0)) (async)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, &(0x7f00000000c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x460100, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x6, 0x0, 0x1, 0x8c, 0x7f46, 0x6}]})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x2a, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x8e2}], 0x1)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x8, 0x5, 0x20, 0x5})
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r5, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x300}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x300}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x300}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x300}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) (async)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r8, 0x107, 0x7, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e24, 0x8b, @mcast2, 0x9}, 0x1c)
sendto$inet6(r9, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') (async)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
getsockopt$MRT6(r10, 0x29, 0xd0, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
write$binfmt_format(r10, &(0x7f0000000300)='1\x00', 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

41.134946982s ago: executing program 2 (id=402):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
signalfd(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x74)
write(r1, &(0x7f0000000180)='enable_event:s', 0xe)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
socket$tipc(0x1e, 0x2, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
signalfd(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x74) (async)
write(r1, &(0x7f0000000180)='enable_event:s', 0xe) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)

41.063297373s ago: executing program 2 (id=403):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x3172, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{<r1=>0x0, 0xffffffff, 0x7, 0xf, 0x4, 0x8, 0x4, 0x8, 0x9, 0x0, 0x4, 0x9, 0x1, 0xffff, 0xffffffffffffffff}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000340)={{r1, 0x7f, 0x2, 0xffffffffffffffff, 0x1, 0x1000, 0x8, 0x3, 0x3, 0xfffffffc, 0x7, 0x6, 0x9, 0xfffffffeffffffff, 0x6}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="d88910c1d1f7560ed6c52cccc0ba36e8d93f5c49d08405a10f59d21afa672b9cdad5c091b301238074951dce421e4f275f7dee31056d6cce8af3b406314afa9d0645966367af80d98e813e9d48006de200fa72f2f3c88a03925dc15a81b0ee694e5244d9626c03de1febabdd724809492dfba7a5863462da3c4e4a0d3933249162a6e68157751b7e13c57e997b8debd60be9f730b456ebf2dcb146fb7995faccc162"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40102, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000040)={{0xfffffffffffffff8, 0x4}, {0x2, 0x253a7a40}, 0x5, 0x3}) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

40.996352505s ago: executing program 2 (id=404):
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/76, 0x4c}, &(0x7f00000010c0)=0x40)
r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000001100))
symlink(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)='./file0\x00')
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000011c0)={<r1=>r0, 0x0, 0x7, 0x4})
getpeername$unix(r1, &(0x7f0000001200), &(0x7f0000001280)=0x6e)
recvfrom(r0, &(0x7f00000012c0)=""/112, 0x70, 0x40010002, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x800)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r1)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001)
ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000001600)={0x3, 0x1, &(0x7f00000015c0)={&(0x7f0000ffa000/0x4000)=nil, 0x8080000, 0x5}})
mkdirat(r1, &(0x7f0000001640)='./file0\x00', 0x95)
mremap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ff9000/0x1000)=nil)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000002680)={&(0x7f0000001680)=""/4096, 0x1000, 0x6, 0x9})
utimensat(r1, &(0x7f00000026c0)='./file0/file0\x00', &(0x7f0000002700)={{0x0, 0xea60}}, 0x100)
ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000002880)={&(0x7f0000002740)=0x6, 0x3, &(0x7f0000002780)=[{}], &(0x7f0000002840)})
write$bt_hci(r1, &(0x7f00000028c0)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
recvfrom$inet(r1, &(0x7f0000002900)=""/191, 0xbf, 0x0, 0x0, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000029c0)={0x7, 0x2})
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0x90, 0x0, 0x8, 0x600, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8e}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40001)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000002b80)={0x9, 0xfe, 0x5, 0x58, 0x1, 0x6840})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000002bc0)=@gcm_128={{}, "d4625972b029c7a0", "c7cefd387a595abe3331fec97530c448", "06a13aa9", "a0a5996de13cb8e8"}, 0x28)
read$FUSE(r1, &(0x7f0000002c00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = getpgrp(0xffffffffffffffff)
kcmp(r4, r5, 0x1, r0, r1)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000004c40)={0x10000, 0x1})
write(0xffffffffffffffff, &(0x7f0000004c80)="83ebca077535ae7bc4b870f0e8193f820d0bf20a2cec5ad9d2efb9d5c670bc91bb65639d15aae3b1ad53ec8875b029d70dd952e5cc6632c5066eb7b4acdabae8c85d5b24f649994d7591c031058c3446c02a4307bd2692419a3b83aee1eeecee2b5cc5c1b1952497a4e8bcd77fa02bc954e36f756c411c2e1a50ed39ef8fd1ec70829949832932a357bd43eeed954931f6d24989d290a76f826676d3e89e50346f8114e86cac14efb3742a", 0xab)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000004d80)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x9, 0x7a62, 0x7fffffff, 0x10, 0xfb], 0x7, &(0x7f0000004d40)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000004e80)={<r7=>0x0, 0x4000000000000000, 0x9})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000005280)={{r1}, 0x0, 0x0, @unused=[0x1a80, 0x7, 0x8, 0x7f], @devid=r7})

40.944915376s ago: executing program 2 (id=405):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x1, 0x1})
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f0000000400)='{\x00')
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8411, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206", @ANYRES8=r3], 0xdd12}], 0x1}, 0x20000400)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000faffffff220000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2)
chdir(&(0x7f0000000140)='./file0\x00')
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0)

40.000721239s ago: executing program 2 (id=410):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
set_robust_list(0x0, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88300, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x10, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000580)={'#! ', '', [], 0xa, "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"}, 0x10e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x964, 0x0, 0x1}]}) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
lsm_list_modules(0x0, &(0x7f0000000040)=0xfffffffffffffc4b, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x23)
open(&(0x7f0000000100)='./file0\x00', 0xa201, 0x90)

39.817865453s ago: executing program 2 (id=411):
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x80, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x14, 0x2a, 0x2, 0x0, 0x0, "", [@typed={0x4, 0x3ffd}]}, 0x14}], 0x1, 0x0, 0x0, 0xea}, 0xc0)

39.681234557s ago: executing program 33 (id=411):
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x80, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x14, 0x2a, 0x2, 0x0, 0x0, "", [@typed={0x4, 0x3ffd}]}, 0x14}], 0x1, 0x0, 0x0, 0xea}, 0xc0)

32.525819273s ago: executing program 1 (id=466):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x5838c1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) (async, rerun: 32)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x4d, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="28010000000000000100000001f009af18cba4d2998fcbc84bbb0a5f59303de9ba2c448c9408a06d2c3d27a4ce77617bb9b332bc0223cd08b628910c35b385e96e8383b20003b828ba32a413a76cf4fa9349f835f3235d8958025f29216ce6b9a9e69eab2f49b5c4d5f455fb4e6fddc48d40b0f285fb8ebc3afbec72c3a3d22acd70da539faf5004d578a7ea0ffd10fdd29d0611335ee1c7932abffb9cc15c21549fb9691bd4425d9c81372ce4df998c765844fa96fde34dfc625f15c05751ac20bf729b7875c888f716d73d7d90fa7cf614053987bdcfdbbd3adf9b305b5d115857dd0b0b084fa3751e80f5b2556fc15261fb24889162", @ANYRESDEC=r2], 0x128}, 0x4044800) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 64)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRES16=r4, @ANYRES32=r4], 0x128}, 0x24008804) (async)
recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x42, 0x0, 0x0, &(0x7f0000000540)}, 0x0) (async)
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x8000) (async)
open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) (async)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x473870269b5b19fe, r2, 0xffffe000)
r7 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r7, 0x3a, 0x1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x129}}}, &(0x7f0000000300)=<r8=>0x0) (async)
syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x2000, 0x0, 0x38a}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0))
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20601, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x1}) (async, rerun: 64)
ioctl$TUNSETLINK(r10, 0x400454cd, 0x301) (async, rerun: 64)
r11 = dup(r9)
syz_ublk_setup_queues(r11, r8, &(0x7f0000000080)={0x0, 0xfd8e, 0x2, 0x1, 0x1b, 0x0, r11}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc70a, 0x400, 0xffffffff, 0x35d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80e0, 0x556881f987503c6d, 0x4, 0x3a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x100093f9, 0x10000, 0x2, 0x283}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x80000, 0x0, 0x1c7}}], 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e0fc7bf07ba8ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0x30}], 0x1, 0x0, 0x0, 0x0)

31.650226954s ago: executing program 1 (id=473):
r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0x3ff, 0x10, 0x3, 0xfffffc00, 0x2, [0x5, 0x5, 0x9, 0x10000]})
r1 = syz_open_procfs(0x0, &(0x7f0000000880)='mountinfo\x00')
ppoll(&(0x7f0000000840)=[{r1, 0x8000}], 0x1, &(0x7f0000000780)={0x0, 0x3938700}, 0x0, 0x0)

31.531452827s ago: executing program 1 (id=474):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000080)={0x0})
syz_open_procfs(r1, &(0x7f0000000040)='net/ip_tables_matches\x00')

30.724442957s ago: executing program 1 (id=483):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984", 0x4}], 0x1}}], 0x1, 0x2090)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f0000000680)="66430f38824c057c66baf80cb8152cb58def66bafc0cec410f3266bad104ed0f01c265450fc73bc7442400c9000000c7442402d1ef0000ff2c24c4a34d7aa200000000a666baf80cb8e4f3dc84ef66bafc0cec66420f38802d2300c0fe", 0x5d}], 0x1, 0x20, &(0x7f0000000740)=[@flags={0x3, 0x10100}], 0x1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'gretap0\x00', <r3=>0x0, 0x20, 0x40, 0x8, 0x9, {{0x2b, 0x4, 0x0, 0x3f, 0xac, 0x67, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0xc, 0x3c, 0x0, 0x7, [0x5, 0x1000]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x85, [@broadcast, @local, @rand_addr=0x64010102, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @local, @multicast2]}, @ssrr={0x89, 0x2b, 0xa3, [@multicast1, @empty, @local, @remote, @rand_addr=0x64010100, @multicast1, @multicast2, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x8, "52d0b6168c7d"}, @timestamp={0x44, 0x24, 0x93, 0x0, 0x7, [0x12, 0xca2, 0x3, 0x0, 0x3, 0x1, 0x1, 0x7]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r4=>0x0})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@rand_addr, @loopback, <r5=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3a}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040001)
futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000500)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff9, 0x34bd, 0x4, 0x2, 0x6, 0x3]}, &(0x7f0000000580)=0x78)
write(r0, &(0x7f0000001e00)="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", 0x7fb1)

30.698561997s ago: executing program 1 (id=484):
socketpair(0x1, 0x6, 0x4100000, &(0x7f0000000080))

30.399190345s ago: executing program 1 (id=485):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}) (async)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x845}, 0x8800) (async)
mkdirat(r6, &(0x7f00000002c0)='./file0\x00', 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000300)=@ethtool_regs={0x4, 0x6, 0x21, "2ac3a6aceb14f13d566be1a93b63dd9751bed45cdcff4590964bf1dd4674fcca7c"}})
r8 = accept$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000440)=0x30)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00', <r10=>0x0}) (async)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_DIRENT(r11, &(0x7f0000002540)={0x30, 0x0, r12, [{0x6, 0x800, 0x8, 0x10, 'ip6tnl0\x00'}]}, 0x30) (async)
r13 = dup(r8)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r13, 0x4008941a, &(0x7f0000002580)=0x2) (async)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000025c0)={'ipvlan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x68000000, 0x2, "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"}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002780)={<r14=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0xb8, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r15 = accept$packet(r6, 0x0, &(0x7f0000002900))
connect$pppl2tp(r8, &(0x7f0000002940)=@pppol2tp={0x18, 0x1, {0x0, r15, {0x2, 0x4e20, @empty}, 0x2}}, 0x26) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000002980), r0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f00000029c0)={0x1, 'hsr0\x00', {}, 0x1000}) (async)
r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a40), r13)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x6c, r16, 0x800, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async)
r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002bc0), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, r17, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040094}, 0x4010)

30.390991415s ago: executing program 34 (id=485):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff}) (async)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x845}, 0x8800) (async)
mkdirat(r6, &(0x7f00000002c0)='./file0\x00', 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000300)=@ethtool_regs={0x4, 0x6, 0x21, "2ac3a6aceb14f13d566be1a93b63dd9751bed45cdcff4590964bf1dd4674fcca7c"}})
r8 = accept$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000440)=0x30)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00', <r10=>0x0}) (async)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_DIRENT(r11, &(0x7f0000002540)={0x30, 0x0, r12, [{0x6, 0x800, 0x8, 0x10, 'ip6tnl0\x00'}]}, 0x30) (async)
r13 = dup(r8)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r13, 0x4008941a, &(0x7f0000002580)=0x2) (async)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000025c0)={'ipvlan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x68000000, 0x2, "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"}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002780)={<r14=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0xb8, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r15 = accept$packet(r6, 0x0, &(0x7f0000002900))
connect$pppl2tp(r8, &(0x7f0000002940)=@pppol2tp={0x18, 0x1, {0x0, r15, {0x2, 0x4e20, @empty}, 0x2}}, 0x26) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000002980), r0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f00000029c0)={0x1, 'hsr0\x00', {}, 0x1000}) (async)
r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a40), r13)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x6c, r16, 0x800, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async)
r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002bc0), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, r17, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040094}, 0x4010)

26.971268449s ago: executing program 6 (id=518):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00')
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2})
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, 0xee01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x0, 0x4, 0x70, {0x70, 0x11, "6019a4920036cfaecd232daaf50967e2508299f258be05ac49ac2a627df4531a7e3fdaf3bae001a78a863fb8dbc1b972cadf034cfeb416f730dc289766244748c78bc0985c482374a3ccb16456b6cd44b892e6c60764f40dd5c6cc1e3b014c222a9b91c06edb6738293d7408dd4e"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000380)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x8, "5802da5c"}, @local=@item_012={0x1, 0x2, 0x3, 'h'}, @global=@item_4={0x3, 0x1, 0x5, "ff27e121"}, @main=@item_4={0x3, 0x0, 0x8, "41d8bcd5"}, @global=@item_4={0x3, 0x1, 0xa, "22c79bae"}, @local=@item_012={0x1, 0x2, 0x5, "fc"}, @main=@item_012={0x2, 0x0, 0xa, "351d"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x4, "0639b51b"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x64d, 0x1, 0x1, {0x22, 0x3d0}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0x1c, "1313b9e67e43c2b0a8310a66e52376c958041f0e5427f6994a121ded"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x1, 0x75, "918a51720e528c71205b1acfafa0830a2ec00a36ba68f402f914783e9ff09f98b6e0413b6fcb8c1e9c41aa929c78bd35372ec02d0b89dff9b0e0d48e9e98fe717c6a2f331dba338655f148327b0e58f0e317bac952c955c9acb80bc72e74a3c29e73382d5d4f6cdc533707d33416b174dbdf8adc67"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x1}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
write$tun(r7, &(0x7f00000004c0)=ANY=[], 0xfdef)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4800, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000640))

25.69052163s ago: executing program 6 (id=526):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) (async)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12)
capset(&(0x7f0000000500)={0x20071026, r1}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4})
r2 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (rerun: 64)
syz_usb_disconnect(r3) (async)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000406d0439c500000000000109022400010000000109040008023e03000300092100000401221800090581030004000000"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r2, @ANYRESDEC=r1, @ANYRES32=r6, @ANYRES32=r0], 0xcc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000400) (async)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r7) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c016}, 0x20048880) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) (rerun: 64)
ioctl$BLKDISCARD(r9, 0x1277, &(0x7f0000000000)=0x600) (async, rerun: 32)
syz_open_procfs(r1, &(0x7f0000000580)='net/mcfilter6\x00') (async, rerun: 32)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRESDEC=r6, @ANYRES8=r9], 0x0)

24.921711209s ago: executing program 0 (id=534):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0xe, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0xa, 0x4, 0x43, 0x3, 0xfb, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0x4d, 0x8c, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xfe, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xf, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]})

24.711306914s ago: executing program 0 (id=535):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00')
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2})
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, 0xee01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x0, 0x4, 0x70, {0x70, 0x11, "6019a4920036cfaecd232daaf50967e2508299f258be05ac49ac2a627df4531a7e3fdaf3bae001a78a863fb8dbc1b972cadf034cfeb416f730dc289766244748c78bc0985c482374a3ccb16456b6cd44b892e6c60764f40dd5c6cc1e3b014c222a9b91c06edb6738293d7408dd4e"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000380)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x8, "5802da5c"}, @local=@item_012={0x1, 0x2, 0x3, 'h'}, @global=@item_4={0x3, 0x1, 0x5, "ff27e121"}, @main=@item_4={0x3, 0x0, 0x8, "41d8bcd5"}, @global=@item_4={0x3, 0x1, 0xa, "22c79bae"}, @local=@item_012={0x1, 0x2, 0x5, "fc"}, @main=@item_012={0x2, 0x0, 0xa, "351d"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x4, "0639b51b"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x64d, 0x1, 0x1, {0x22, 0x3d0}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0x1c, "1313b9e67e43c2b0a8310a66e52376c958041f0e5427f6994a121ded"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x1, 0x75, "918a51720e528c71205b1acfafa0830a2ec00a36ba68f402f914783e9ff09f98b6e0413b6fcb8c1e9c41aa929c78bd35372ec02d0b89dff9b0e0d48e9e98fe717c6a2f331dba338655f148327b0e58f0e317bac952c955c9acb80bc72e74a3c29e73382d5d4f6cdc533707d33416b174dbdf8adc67"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x1}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
write$tun(r7, &(0x7f00000004c0)=ANY=[], 0xfdef)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4800, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)

24.078984959s ago: executing program 6 (id=537):
r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r0, 0xee01, 0xee00)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80402, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x400000b2, 0xd}}], 0x20})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc018aec0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1})
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r1, 0x0)
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) (async)
keyctl$chown(0x4, r0, 0xee01, 0xee00) (async)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80402, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) (async)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) (async)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x400000b2, 0xd}}], 0x20}) (async)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r11, 0xc018aec0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) (async)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r1, 0x0) (async)

23.391236177s ago: executing program 6 (id=539):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10)
recvmsg$unix(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)}, 0x302)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/l2cap\x00')
unshare(0x60000080)
userfaultfd(0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00')
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0\x00')
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = getegid()
socket(0x25, 0x80000, 0x7)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [{0x8, 0x4, r4}], {0x10, 0x4}, {0x20, 0x4}}, 0x2c, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
r7 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000240)={0x2c, &(0x7f00000002c0)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc)

23.041551755s ago: executing program 0 (id=540):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2710}, 0x10, 0x800)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/audio#\x00\xc7D\n\xb9U\xff\xc1_\xc9K<\xb5s\xe6\x9f\x8aTr\xc7\x1e\xddNL\x87\xd8\xb2:\x8f\x12\xe0\xc0\x95\xbc\a\xe3\xd8')
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) (async)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000300)="f30fc7b020000000660fc5cef9c4436d7ef5f066b8a6000f00d066b889008ed83666470f1befb9800000c0c7e7240000600000c7442416f2006800b4c6442406002000000f011c2435010000000f3066ba410066b876b166ef4f0fc79c79d4f276127d1db805000100b91770000026430f07", 0x72}], 0x1, 0x6d, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000300)="f30fc7b020000000660fc5cef9c4436d7ef5f066b8a6000f00d066b889008ed83666470f1befb9800000c0c7e7240000600000c7442416f2006800b4c6442406002000000f011c2435010000000f3066ba410066b876b166ef4f0fc79c79d4f276127d1db805000100b91770000026430f07", 0x72}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0x9000) (async)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0x9000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='/dev/audio#\x00\xc7D\n\xb9U\xff\xc1_\xc9K<\xb5s\xe6\x9f\x8aTr\xc7\x1e\xddNL\x87\xd8\xb2:\x8f\x12\xe0\xc0\x95\xbc\a\xe3\xd8')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0xe91, 0x6, 0x10, 0x2}, 0x14) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0xe91, 0x6, 0x10, 0x2}, 0x14)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') (async)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22.879284719s ago: executing program 0 (id=541):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, <r1=>0x0}, 0xffffff5a)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
chroot(&(0x7f0000000100)='./file0\x00') (async)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22.070359509s ago: executing program 0 (id=545):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0xe7c) (async, rerun: 64)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) (async)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async, rerun: 32)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') (rerun: 32)
fallocate(r3, 0x2, 0xf931, 0x5) (async)
r4 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r4, &(0x7f0000000100)='map_files\x00')
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_open_procfs$namespace(r4, 0x0) (async)
r5 = inotify_init()
r6 = socket$tipc(0x1e, 0x5, 0x0)
listen(r6, 0x0) (async, rerun: 64)
close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x358, 0xffff8881f5c0a000) (async)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) (async, rerun: 64)
pipe2$9p(0x0, 0x0) (rerun: 64)

21.656886299s ago: executing program 0 (id=550):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x2})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"0189da77b6010749468f9328c9cf671d", 0x0, <r2=>0x0, {0x3ff, 0x101}, {0x6, 0x9}, 0xffff, [0x4, 0x101, 0x4c, 0xffffffff, 0x9, 0x8000000000000001, 0x1, 0x5, 0x1000, 0x6, 0x8, 0x7d1a21be, 0x10000, 0x8001, 0x1ec5, 0x1]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000340)={{r0}, r2, 0x1c, @inherit={0x70, &(0x7f00000002c0)={0x1, 0x5, 0x2, 0x56e38921, {0x2f, 0x0, 0x0, 0x4, 0xce4}, [0x8c0, 0xd, 0x6, 0x7f, 0x1]}}, @subvolid=0x4})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0xe0f, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xb60d, 0x6, 0x5, 0x7, 0x4, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0x0, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x7], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x5, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x6, 0x2, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000008, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x0, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0xf, 0x8, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x7, 0xb1, 0xaca, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x1000004, 0x25], [0x5, 0xbb33, 0x7, 0x503d, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0x1, 0x10001ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x3, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0), 0x10000000000000a6, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000023000/0x400000)=nil)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write$P9_RCREATE(r5, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x2}, 0x6}}, 0x18)

20.351125941s ago: executing program 6 (id=556):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550d, &(0x7f0000000100)=0x1b)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101900, 0x0)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x2a500, 0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
read$ptp(r2, &(0x7f0000000480)=""/238, 0xee)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xb0, 0xffffffffffffffda, 0xfffffffffffffff9, [{{0x6, 0x8, 0xffffffffffff520a, 0x8, 0xbc88, 0x209, {0x5, 0x5, 0x8, 0x6, 0x800003, 0x12a, 0x7, 0x1ff, 0xf7fffffa, 0xc000, 0xffffffff, r5, r6, 0x80, 0x8}}, {0xffffdfffffffffff, 0x401, 0x6, 0xc, '\x9e\xaf\x82\xa7\x13&'}}]}, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x6000)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80004, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303134303030302c757365725f69643d8311abf353d2668fb77db1b8ce38dd52300aedc943fd8f9629d671428ace8036e5621357fdcaddcc909efc48", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',allow_other,default_permissions,default_permissions,blksize=0x0000000000000400,allow_other,max_read=0x0000000000000000,default_permissions,default_permissions,fsmagic=0x000000004108076f,\x00'])
pipe2(&(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
pipe(&(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
write(r11, &(0x7f0000000340), 0x11000)
read(r8, &(0x7f0000000440)=""/54, 0x36)
splice(r10, 0x0, r9, 0x0, 0x100020000003, 0x0)
fcntl$setstatus(r10, 0x4, 0x6000)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x101002, 0x0)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f00000003c0))

20.291928802s ago: executing program 6 (id=557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc)
r3 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x10001)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = fcntl$dupfd(r4, 0x406, r0)
sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x4, 0x0, 0x0, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}]}, 0x20}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000400)={r3, 0x0, 0x1, 0x659e, 0x2, 0x8, [0x2, 0x79e3, 0x800, 0x1, 0x4, 0x800]})
r6 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000140))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
epoll_create1(0x80000)
socket$key(0xf, 0x3, 0x2)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9001000010001307000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000fc02000000000000000000000000000002000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000a00040050000000000000004800021f656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005800010078636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000008478b0098a3a72ec6b13aa7d25e76d54"], 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082)

20.198555655s ago: executing program 35 (id=557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc)
r3 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x10001)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = fcntl$dupfd(r4, 0x406, r0)
sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x4, 0x0, 0x0, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}]}, 0x20}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000400)={r3, 0x0, 0x1, 0x659e, 0x2, 0x8, [0x2, 0x79e3, 0x800, 0x1, 0x4, 0x800]})
r6 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000140))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
epoll_create1(0x80000)
socket$key(0xf, 0x3, 0x2)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9001000010001307000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082)

10.035169784s ago: executing program 5 (id=607):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45)
read$FUSE(r1, &(0x7f0000002740)={0x2020}, 0x2020)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCSNPMODE(r5, 0x4008744b, 0x0)
r6 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r6, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f0000000480)={0x60, 0x9, 0xd3, {0xd3, 0xd, "1e1bfbf59c62357a312d62f3aae48f4bf0e89d60bbe895e77a69e39f244b273d54311d346cb061a8aefbfa6cb94bf9e1959a2fafb08e4c0e98507b6f0dd70dd99de74879da06018a9829a7c6439309ffea2d877c278b9eb7f961034e6b9086d0148c841e5a07c0487cdce97bddde9fb9acf44dbcdf6ff62a7c56eae5744e5731f41b2d7461370864f1ba09ffe8280faf9ed74ea8c963472b1c210511ec8118943f2b5763ecb6f0ac9277451c58899529a0f1e36a36546319303671b57a2e6bd4623b14b13f9a5257df235e264197c9e1d3"}}, &(0x7f0000000880)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac3(r6, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003700)=@vmx={0x10b, 0x0, 0x2080, {0x40000, 0xffffffffffffffff, {}, 0x0, 0x7fffffff}, {"d07ee51100", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000001300)={'filter\x00', 0xb001, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120110010000002094000000000001090224000100000002090400050103008400092107000b01221800090581030800800287b78ec233245844b687f81d291b6d9b04a3bdf5fcd78bd34ec6a6f124f2a23139eb0d209fbe49f6bf0444f527c54a16d6fbde28aad78a3a794559ea7f"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r10, 0x8b0f, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000100)=0xd29, 0x4)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
renameat2(0xffffffffffffff9c, 0x0, r10, 0x0, 0x2)

10.007588665s ago: executing program 7 (id=608):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0xfffffc01)
pread64(r0, &(0x7f0000000100)=""/133, 0x85, 0x8)
syz_usb_connect$midi(0x1, 0x70, &(0x7f0000000000)=ANY=[], 0x0)

7.931336475s ago: executing program 5 (id=613):
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0xc7, &(0x7f0000000340)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b7110010000000018240501000000"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0)
r3 = dup(0xffffffffffffffff)
select(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x850)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000071, 0x0, 0x402fc}]})

6.976552829s ago: executing program 5 (id=616):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000440)={{0x2, 0x4e22, @private=0xa010100}, {0x6, @multicast}, 0x3c, {0x2, 0x4e23, @broadcast}, 'ipvlan1\x00'}) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async, rerun: 32)
timer_settime(0x0, 0x1, 0x0, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
write(r3, &(0x7f0000000000)='3', 0x4e) (async, rerun: 64)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') (async, rerun: 32)
close_range(r2, 0xffffffffffffffff, 0x0) (rerun: 32)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000020a30621064cf8c27e3d50c6410000c800000009022401ba67331188837200050103008400092109000b0122180009038becd24c2ec4549aebccc0c541f7dab9ef5c8c"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
r5 = socket$inet6(0x10, 0x6, 0x9) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) (async)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r9, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x0, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008081}, 0x20000040) (async)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)

6.92337063s ago: executing program 7 (id=617):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
r1 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write$binfmt_format(r2, &(0x7f0000000040)='0\x00', 0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}], 0x1, 0x0)
ptrace$setregs(0xd, r3, 0x0, 0x0)
ioctl$FICLONE(r2, 0x40049409, r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0)
write$eventfd(r5, 0x0, 0x0)
write$P9_RLINK(r5, 0x0, 0x0)

6.795535634s ago: executing program 7 (id=618):
r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff000000000c00000018000180140002006c6f00000000000000000000000000001c0003800800020040000000040001000c0004000100000000000000"], 0x48}}, 0x0)
poll(&(0x7f00000001c0)=[{r4, 0x100}], 0x1, 0x8)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', <r9=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x140)
chdir(0x0)
r10 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0)
io_setup(0x7d, &(0x7f0000000600)=<r11=>0x0)
io_submit(r11, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, r10}])
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1407508950109308102c0c0"], 0x0}, 0x0)

6.496186471s ago: executing program 36 (id=550):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x2})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"0189da77b6010749468f9328c9cf671d", 0x0, <r2=>0x0, {0x3ff, 0x101}, {0x6, 0x9}, 0xffff, [0x4, 0x101, 0x4c, 0xffffffff, 0x9, 0x8000000000000001, 0x1, 0x5, 0x1000, 0x6, 0x8, 0x7d1a21be, 0x10000, 0x8001, 0x1ec5, 0x1]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000340)={{r0}, r2, 0x1c, @inherit={0x70, &(0x7f00000002c0)={0x1, 0x5, 0x2, 0x56e38921, {0x2f, 0x0, 0x0, 0x4, 0xce4}, [0x8c0, 0xd, 0x6, 0x7f, 0x1]}}, @subvolid=0x4})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0xe0f, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xb60d, 0x6, 0x5, 0x7, 0x4, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0x0, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x7], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x5, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x6, 0x2, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000008, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x0, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0xf, 0x8, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x7, 0xb1, 0xaca, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x1000004, 0x25], [0x5, 0xbb33, 0x7, 0x503d, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0x1, 0x10001ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x3, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0), 0x10000000000000a6, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000023000/0x400000)=nil)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write$P9_RCREATE(r5, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x2}, 0x6}}, 0x18)

3.909096644s ago: executing program 5 (id=628):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0)
r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r10, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x25a5, 0x0)
getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e)
futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
r13 = socket$inet6(0xa, 0x2, 0x0)
io_setup(0x76, &(0x7f0000002500)=<r14=>0x0)
io_submit(r14, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r13, 0x0, 0x0, 0x7fffffffffffffff}])
r15 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000001100)={'veth0\x00', &(0x7f0000001140)=@ethtool_regs={0x4, 0x204}})
fallocate(r0, 0x0, 0x0, 0x8ffff)
write$khugepaged_scan(r0, &(0x7f0000000280), 0x1d)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x1, 0xffff, 0x80000000})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000)

3.714796129s ago: executing program 5 (id=629):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x8, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c000"], 0x0}, 0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x6e, 0x7, 0x2, 0x3, 0x3, 0x48, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x7, 0x6, 0x7f, 0x49, 0x200004, 0xc, 0x400}]}, 0x58)
close(r1)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x10, 0xa, "4c4854b8a454ff6188c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}})
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_create1(0x80000)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r5}}], 0x1, 0x0, 0x0)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000300)={0x0, 0x69cf, 0x20, 0x3, 0x12a, 0x0, r1}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee64, 0x200, 0x2, 0x306, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb17, 0x800, 0x2, 0x32e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbb25, 0x8000, 0x1, 0x2aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfba8, 0x1, 0x2, 0x11c, 0x0, r1}, <r9=>0xffffffffffffffff}], 0x4, &(0x7f0000002940)={0x2e, 0x67e2bd84c6275c72, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, 0x0, '\x00', {0x0, 0x929, 0x0, &(0x7f0000001940)=@buf_4k="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"}}, &(0x7f00000029c0))
syz_ublk_setup_queues(r1, r6, &(0x7f0000000700)={0x0, 0x0, 0x400, 0x0, 0x8f, 0x0, r1}, &(0x7f0000002a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d34, 0x1, 0x3, 0x28d, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a73, 0x8000, 0x2, 0x293}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5e9, 0x10000, 0x3, 0x1e7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b3, 0x80000, 0x2, 0x1ca, 0x0, r9}}], 0x4, &(0x7f0000003c80)={0x2e, 0x0, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9f5e}, 0x0, 0x0, '\x00', {0x3, 0xbc4, 0x0, &(0x7f0000002c80)=@buf_512="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"}}, &(0x7f0000003d00))
setns(0xc9, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r10, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x4c, 0xfffffffd)
r11 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00')
setreuid(0xee01, 0xee01)
utimensat(r12, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0)

3.628368781s ago: executing program 7 (id=631):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dummy\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000100), 0x12)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$peekuser(0x3, r1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f000073c000/0x400000)=nil)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0)
syz_clone3(&(0x7f00000003c0)={0x100000000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x2, {r4}}, 0x58)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
write(r4, &(0x7f0000000280)='4', 0x1)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
readlinkat(0xffffffffffffffff, &(0x7f0000000300)='./trace/uprobe_events\x00', &(0x7f0000000540)=""/4096, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r6, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d)

3.488681605s ago: executing program 7 (id=632):
r0 = socket(0x1, 0x3, 0x1)
getsockopt$SO_COOKIE(r0, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8)
r1 = syz_usb_connect$hid(0x3, 0xffffffffffffffd8, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x2, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0xf2, 0x0, 0x3, 0x0, 0xcc28163f40625b84, 0x80, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0xf, 0x19}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0)

3.346704008s ago: executing program 7 (id=633):
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)="c61c010ba000", 0x6}], 0x1, 0xa) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) (async, rerun: 64)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (rerun: 64)
write$uinput_user_dev(r2, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x80000000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) (async, rerun: 64)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
write$uinput_user_dev(r2, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0x0, 0x5}, 0x4f, [0xff, 0x1, 0x5, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xbc, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0x9, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x9, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc60, 0xb92, 0x9, 0x6, 0x800000, 0xffffffff, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9514, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x4, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x200081, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x2, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x6, 0xe03, 0x3, 0x9, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0x3, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9b, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x7, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000010500010001"], 0x1c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0)
read(r4, &(0x7f0000000700), 0x1000) (async)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r6=>r3, 0x3, 0x4, 0x401})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)=@x86={0x1, 0x30, 0x7, 0x0, 0x3ff, 0xff, 0x5, 0x77, 0x6, 0xf8, 0x25, 0x3, 0x0, 0x0, 0x1, 0x6, 0xea, 0xd, 0x8, '\x00', 0x0, 0xc95})
ptrace(0x10, r5)
ptrace(0x11, r5)
ptrace$peekuser(0x3, r5, 0xfffffffffffffffc) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000200)="f30138ddf77f2b380b7bb71c04010003e600020000000003f4ff00061000bb000010090000000000000015051d000000000000000000003f00", 0x0, 0x48) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async, rerun: 64)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x19, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x54, 0x86, 0xdd, 0x68, 0x0, 0x20b, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x3}) (async, rerun: 64)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
write$eventfd(r9, &(0x7f00000001c0)=0x3, 0x50)

3.295060049s ago: executing program 37 (id=633):
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)="c61c010ba000", 0x6}], 0x1, 0xa) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) (async, rerun: 64)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (rerun: 64)
write$uinput_user_dev(r2, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x80000000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) (async, rerun: 64)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) (async, rerun: 64)
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
write$uinput_user_dev(r2, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0x0, 0x5}, 0x4f, [0xff, 0x1, 0x5, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xbc, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0x9, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x9, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc60, 0xb92, 0x9, 0x6, 0x800000, 0xffffffff, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9514, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x4, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x200081, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x2, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x6, 0xe03, 0x3, 0x9, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0x3, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9b, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x7, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000010500010001"], 0x1c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0)
read(r4, &(0x7f0000000700), 0x1000) (async)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r6=>r3, 0x3, 0x4, 0x401})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)=@x86={0x1, 0x30, 0x7, 0x0, 0x3ff, 0xff, 0x5, 0x77, 0x6, 0xf8, 0x25, 0x3, 0x0, 0x0, 0x1, 0x6, 0xea, 0xd, 0x8, '\x00', 0x0, 0xc95})
ptrace(0x10, r5)
ptrace(0x11, r5)
ptrace$peekuser(0x3, r5, 0xfffffffffffffffc) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000200)="f30138ddf77f2b380b7bb71c04010003e600020000000003f4ff00061000bb000010090000000000000015051d000000000000000000003f00", 0x0, 0x48) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async, rerun: 64)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x19, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x54, 0x86, 0xdd, 0x68, 0x0, 0x20b, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x3}) (async, rerun: 64)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
write$eventfd(r9, &(0x7f00000001c0)=0x3, 0x50)

3.173997162s ago: executing program 4 (id=636):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0)
fcntl$setstatus(r2, 0x4, 0x42c00)
fcntl$setstatus(r2, 0x4, 0x2400)
write(r0, &(0x7f0000000040), 0xffffff4a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000100000800a5be2bc172"], 0x44}}, 0x0)
write(r4, &(0x7f0000000180)="600000001000e3ff0100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280022802400010020a1070000000000000000000000000000e8a011abc0c53d00"/99, 0x63)

2.279360264s ago: executing program 4 (id=640):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000081, 0x0, 0x1}]})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x32)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)={0x28, 0x4, 0x0, {0x1, 0x3}}, 0x28)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x5, 0x89, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000010630780204000010203010902770003017f0006080b0002012030230904000000010130000a24011013000b0000000924090603000000000904010000010230000904010101010230000905010960002510050a252504040000000500090402"], 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1)

2.268765584s ago: executing program 9 (id=641):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket(0x10, 0x3, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/uinput\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/uinput\x00')
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x18, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff]}}], 0x48}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_io_uring_setup(0x41f4, &(0x7f0000000140)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3, 0x0, r7}, &(0x7f00000002c0)=<r9=>0x0, &(0x7f0000000340), &(0x7f0000000380))
syz_ublk_add_dev(0xffffffffffffffff, r9, r3, 0x0, &(0x7f0000000200)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup(r11)
syz_ublk_setup_queues(r12, r10, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18})
r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r13, 0x4068aea3, &(0x7f0000001000))
ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000002000)={0x3, 0x0, [{0x40000083, 0x0, 0x8000000000000fff}, {0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0x5}]})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

2.134312128s ago: executing program 9 (id=642):
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14)
sendto$packet(r0, &(0x7f0000000040)="496c3792ff40c58104ad0c7ef9633542dc93622e0ef7096828629ffe4d7a0a1ce13b31a6ee77586b33052fbed7c9b491d0df46387032cf2d5b68ab2f2c05db974614da323191792fffa947376c46bb7dd534bb327823c715d005a50f58b33bcbde87f114914269f8de7c995729465f447fabe28b8980a519410701217405975765a41fc7c6e690a281d39b89", 0x8c, 0x4000, &(0x7f0000000180)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x503200, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480), 0xa1c0, 0x0)

2.055297349s ago: executing program 9 (id=643):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x8000006, 0x80000})
syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00')

1.793951066s ago: executing program 4 (id=644):
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x57)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x48, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.779321956s ago: executing program 4 (id=645):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/104, 0x68}], 0x1)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/250, 0xfa}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040ac05a81201000102030109022900010100c0320904000000fffd01"], 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x321800, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}})
syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f00000005c0)={0x40, 0x31, 0x102, {0x102, 0xf, "2b62619e9bd95e1ec6f2275f6b85c14c3f4c04fa10c3a6a4bf6a2c03000000107cb4b7f5192c27b898eb706cea4d6dd20884909f421c517d289f11d2199beb7db6878e642731ba5e22ef91cdbad2ae5d8e9e971e1c69c6aa4d111f248f6639e4b93568d66a32fd7a7a637e150813a21edf1fb5834ae03e4503a2cd98826deec306d5dbbf28b6dc053ff48e0e49ef12a1f9aeea3c33da5ebd36984c8497b13f4c5b04d8373644455ea5eb184e0359cac94979453b627e4d1073ae9bd16c4e71adbe967f3a8bfa210f2751331f7e1f10f1409ca016ed10433869fae8f326a7336c48d72d5823fd488ab0d280add059877b01f48a0c39cd4765822504fc4a78dada"}}, &(0x7f0000000180)={0x0, 0x3, 0xba, @string={0xba, 0x3, "d18a37f454e9ea5a8d4e9a6703d8cfff2f4be7c959b449bd12e8c6d90c0d7e81baf7e31ed8a103e71eb4b3d70170b92879dbb61895030c27f97faecbb9568196a9251243496309378aebfd4c88bbbcf56cddd24df99acc76ad0e77686458dff3631a11fd33004929db2ba32beda07315a22cf8a45a467d16aecb5bdea9c2355eaa168287429b6c0751b22ad78f5ec7888848b0dc7f38187b03b68b2b324af14b1c37596f90c89c8dc9b3de1bf982c452f36a936aef4bef46"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000700)={0x20, 0x16, 0x100, "3c4c0de0f593a3f240112c1a8c9d6788afc119784c21d9346849e36192bd260c6c451cb64f9ca7ee6cd12772b198b39c0061b54a47f38a81f25eaa0a54b0c4801cbb7535f123701994aedce062d08116d1c88b49497cb104e7808bd351f890aac89d174416748c35580f986860fadc22c7807ac64c8767bd103d6dd169c5d7de1b505a96dcea16b436962636c9ff2413419694c490b10732a51f4a8eabc5c4b2615fec00b9376d6da11edd0d8466069c83f439c31402e6c0fa7194ba0ee56ca5ab8f112b4af183a9179c4e78964463b1732f7ae63fefbc00e16fd04e7e75ee8e4368add9e686708dca43c5034c623cd1907804902b4870d96caf28b1f9453e97"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0xc0, 0x5, 0x6, "000000380601"}, &(0x7f0000000340)={0x40, 0x5, 0x6, "b3ffcc65c567"}})
socket(0xa, 0x3, 0x87)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x4, 0x8, 0x0, 0x1, 0x7, 0x7, 0x4, 0x5, 0x4, 0x6, 0x6, 0x0, 0x3fe, 0x985, 0x7, 0x7, 0x1, 0x7, '\x00', 0x7, 0x5})

1.187569131s ago: executing program 9 (id=646):
socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000000000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0xeb, 0x7}]})
dup3(r5, r3, 0x80000)
ppoll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4)
write(0xffffffffffffffff, &(0x7f0000000100)='!:my_eprobe raw_', 0x10)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2})
r8 = openat$incfs(r7, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r8, 0xc058671e, &(0x7f00000000c0))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x61, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0x154, 0x0, 0x0, 0x1000, 0x10001, r6, 0x0, 0x11e}}}, &(0x7f0000000300)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc246, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.078674273s ago: executing program 4 (id=648):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
mmap(&(0x7f0000362000/0x1000)=nil, 0x1000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
getresgid(0x0, 0x0, 0x0) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) (async)
listen(r2, 0x5) (async, rerun: 32)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32)
r4 = accept$inet(r2, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES8=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080402002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000002030000000000000000000005000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000200000a0000a02e00000045fcde545c9af480debfb6a07df1755c1699a62605bfd744fb7f96dd98613306bf78065963f5c503f228677560", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414bb00000000000000000000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000003c0200000000000008000200"], 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3)
setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "5e2043c1da420a92", "0200550200000000917794865181c67a", "212ac500", "f9d632d01e424eff"}, 0x28) (async, rerun: 32)
prctl$PR_MCE_KILL_GET(0x22) (rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x8)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

639.204404ms ago: executing program 5 (id=649):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x95, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0xc, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x64c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x66, 0x0, 0xfc}}}}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x2, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1029}}, {0x0, 0x0}]})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x2}, 0xe)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5381})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0xfffc, 0x8003}, 0x20)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r3=>0x0)
prlimit64(r3, 0xc, &(0x7f00000000c0)={0x0, 0x8}, 0x0)
socket(0x26, 0x4, 0x8)
sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x4000)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000000)=0x800, 0x4)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x80081270, 0x0)

393.450681ms ago: executing program 8 (id=654):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcda87000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c347b726f69a49b8c5c89601c8f0beb097da03679eaf8e6c5272333eba42ff4d65c188c1b6226af84199717dd0614f55beee619b27ca107185d98b7281401b5afe6d21bb412024afee194", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r2, &(0x7f000000e400)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
gettid() (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcda87000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c347b726f69a49b8c5c89601c8f0beb097da03679eaf8e6c5272333eba42ff4d65c188c1b6226af84199717dd0614f55beee619b27ca107185d98b7281401b5afe6d21bb412024afee194", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
read$FUSE(r2, &(0x7f000000e400)={0x2020}, 0x2020) (async)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) (async)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

390.107731ms ago: executing program 9 (id=655):
r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xc)
write$UHID_CREATE2(r1, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xed, 0x7, 0x6, 0x8, 0x3, 0x9, "17f9b3ff3bceb48775b6c273a8ec7038c94ac8c532a42dc17f0c17715bdbbe80f31c2b52382835d368536ed76015e4a22b58510985f2a2f441f9e884e07dea7691e7d478ee111fb38192add186bae7f20c82533440ff1cb0396c075db0a82da8e5fb5ef5e1c2681879307aa7bf8c8eb571dafd68484bd0b8ba8bf516ce3657297edaee3eb5eb337f546281c98f37eb2bfd3c34b4a7f137c9d7b58a3e61d92b22c495e72b3d5c1f06f9736bde841017ab1d75128654087ad5344fae5f37a13d18b633a070d3092433ba6d65e9841815ef3352cc0fe76f7658011f9fd5b4acb9d751f1877810181c40a4b8353c17"}}, 0x205)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
readlinkat(r1, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000c00)=""/171, 0xab)

302.186003ms ago: executing program 9 (id=656):
getuid()
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
exit(0xfffffffffffffffd)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x11, r1, 0x25847000)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000439000/0x2000)=nil, 0x2000}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100"/54, 0x36)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x58}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e21, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x6, 0x4}, {}, {0x9}, 0x70bd29, 0x3503, 0xa, 0x2, 0x0, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0)
listxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000240)=""/175, 0xaf)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x408, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]})
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', &(0x7f00000001c0), 0x4000)

298.383503ms ago: executing program 8 (id=657):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xe, 0x11, r0, 0xf9770000)

274.687813ms ago: executing program 8 (id=658):
lsm_set_self_attr(0x69, &(0x7f0000001940)={0x65, 0xa, 0x25, 0x5, "0a5cb59ce8"}, 0x25, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='dummy_udc.0\n', 0xc) (async)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0)
write(r2, &(0x7f0000000000)='3', 0xa5) (async)
clock_gettime(0x0, 0x0)
r3 = socket(0xa, 0x801, 0x0)
getsockopt(r3, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) (async)
clock_gettime(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000180)) (async)
openat$cgroup_ro(r1, 0x0, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20000000) (async)
ioctl(r1, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074")

254.069344ms ago: executing program 8 (id=659):
prctl$PR_GET_NAME(0x10, &(0x7f0000000540)=""/152)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4) (async)
setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x169100, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x169100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000000c0)={@empty, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000000001)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000240)='./sys/class/rtc/rtc0/wakealarm\x00') (async)
chdir(&(0x7f0000000240)='./sys/class/rtc/rtc0/wakealarm\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
epoll_create1(0x0) (async)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)={0xe000202b})
epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) (async)
epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)

181.828886ms ago: executing program 4 (id=660):
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0xfffffffe, 0x1, 0x7fe, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x20, 0x10, 0x30, {0x30, 0xa, "1330ef40b56fda2135771f14fd4466597a9f123e41fc811389a6ab59a4dd34224371eb9f29ad4208f26f58fdd254"}}, 0x0}, 0x0)

148.689027ms ago: executing program 8 (id=661):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x7, 0x2, 0x9, 0x1, 0x8, 0x0, 0x51, 0x0, 0x40004, 0x10, 0xff, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000005})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"])
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000030, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x8150}}]})
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x8], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x58000, 0x8, 0x8, 0x0, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0x4, 0xe, 0x5, 0x3, 0x0, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0xb, 0xf7, 0x97}, {0x30000, 0xdddd0000, 0xe, 0xa0, 0x0, 0x8, 0x1, 0xa0, 0x82, 0x8, 0x1, 0x5}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x4, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x89, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x25000, 0x2024, 0x200002, 0x4400, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 8 (id=662):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00')
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2})
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, 0xee01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x0, 0x4, 0x70, {0x70, 0x11, "6019a4920036cfaecd232daaf50967e2508299f258be05ac49ac2a627df4531a7e3fdaf3bae001a78a863fb8dbc1b972cadf034cfeb416f730dc289766244748c78bc0985c482374a3ccb16456b6cd44b892e6c60764f40dd5c6cc1e3b014c222a9b91c06edb6738293d7408dd4e"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000380)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x8, "5802da5c"}, @local=@item_012={0x1, 0x2, 0x3, 'h'}, @global=@item_4={0x3, 0x1, 0x5, "ff27e121"}, @main=@item_4={0x3, 0x0, 0x8, "41d8bcd5"}, @global=@item_4={0x3, 0x1, 0xa, "22c79bae"}, @local=@item_012={0x1, 0x2, 0x5, "fc"}, @main=@item_012={0x2, 0x0, 0xa, "351d"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x4, "0639b51b"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x64d, 0x1, 0x1, {0x22, 0x3d0}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0x1c, "1313b9e67e43c2b0a8310a66e52376c958041f0e5427f6994a121ded"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x1, 0x75, "918a51720e528c71205b1acfafa0830a2ec00a36ba68f402f914783e9ff09f98b6e0413b6fcb8c1e9c41aa929c78bd35372ec02d0b89dff9b0e0d48e9e98fe717c6a2f331dba338655f148327b0e58f0e317bac952c955c9acb80bc72e74a3c29e73382d5d4f6cdc533707d33416b174dbdf8adc67"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x1}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
write$tun(r7, &(0x7f00000004c0)=ANY=[], 0xfdef)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

8 bytes leftover after parsing attributes in process `syz.4.286'.
[   65.219600][ T1415] netlink: 'syz.1.294': attribute type 11 has an invalid length.
[   65.238357][   T36] audit: type=1400 audit(1791167718.861:385): avc:  denied  { nlmsg_read } for  pid=1411 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   65.478834][  T690] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   65.639862][  T690] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.657127][  T690] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.667600][  T690] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.680929][  T690] usb 1-1: config 0 interface 0 has no altsetting 0
[   65.687736][  T690] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   65.699325][  T690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.708605][   T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   65.717290][  T690] usb 1-1: config 0 descriptor??
[   65.788546][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   65.888918][   T45] usb 5-1: Using ep0 maxpacket: 16
[   65.895331][   T45] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[   65.905823][   T45] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   65.915588][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.927358][   T45] usb 5-1: Product: syz
[   65.932011][   T45] usb 5-1: Manufacturer: syz
[   65.937306][   T45] usb 5-1: SerialNumber: syz
[   65.944582][   T45] r8152-cfgselector 5-1: Unknown version 0x0000
[   65.948683][    T9] usb 2-1: Using ep0 maxpacket: 16
[   65.952122][   T45] r8152-cfgselector 5-1: config 0 descriptor??
[   65.958257][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   65.973856][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   65.987096][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00
[   65.996297][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.005752][    T9] usb 2-1: config 0 descriptor??
[   66.128441][  T690] usbhid 1-1:0.0: can't add hid device: -71
[   66.138953][  T690] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   66.148172][  T690] usb 1-1: USB disconnect, device number 17
[   66.168290][ T1432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=1432 comm=syz.4.301
[   66.188706][   T45] r8152-cfgselector 5-1: Unknown version 0x7800
[   66.195481][   T45] r8152-cfgselector 5-1: bad CDC descriptors
[   66.383883][  T690] r8152-cfgselector 5-1: USB disconnect, device number 2
[   66.414418][    T9] apple 0003:05AC:027C.0008: unknown main item tag 0x0
[   66.421486][    T9] apple 0003:05AC:027C.0008: invalid report_count 34525
[   66.428687][    T9] apple 0003:05AC:027C.0008: item 0 2 1 9 parsing failed
[   66.436112][    T9] apple 0003:05AC:027C.0008: parse failed
[   66.442167][   T62] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   66.449931][    T9] apple 0003:05AC:027C.0008: probe with driver apple failed with error -22
[   66.609969][   T62] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.621013][   T62] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.629307][ T1434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.302'.
[   66.630950][   T62] usb 3-1: New USB device found, idVendor=056a, idProduct=3f3b, bcdDevice= 0.00
[   66.648992][   T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.655340][ T1434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.667764][ T1434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.682360][  T690] usb 2-1: USB disconnect, device number 15
[   66.723838][ T1440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'.
[   66.845918][   T36] audit: type=1400 audit(1791167720.511:386): avc:  denied  { read } for  pid=1446 comm="syz.0.307" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   66.852806][ T1447] fuse: Bad value for 'fd'
[   66.870315][   T36] audit: type=1400 audit(1791167720.511:387): avc:  denied  { open } for  pid=1446 comm="syz.0.307" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   67.128568][    T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[   67.218042][   T36] audit: type=1400 audit(1791167720.881:388): avc:  denied  { bind } for  pid=1456 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.218356][ T1457] tmpfs: Bad value for 'nr_inodes'
[   67.252679][  T690] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   67.264979][   T36] audit: type=1400 audit(1791167720.931:389): avc:  denied  { connect } for  pid=1456 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.287205][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   67.295813][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[   67.306757][    T9] usb 1-1: config 1 has an invalid interface number: 81 but max is 0
[   67.319591][    T9] usb 1-1: config 1 has no interface number 0
[   67.325792][    T9] usb 1-1: config 1 interface 81 altsetting 215 endpoint 0x7 has invalid wMaxPacketSize 0
[   67.353532][    T9] usb 1-1: config 1 interface 81 has no altsetting 0
[   67.370031][    T9] usb 1-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1
[   67.382559][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.398504][    T9] usb 1-1: Product: syz
[   67.408676][    T9] usb 1-1: Manufacturer: syz
[   67.418205][    T9] usb 1-1: SerialNumber: syz
[   67.429873][  T690] usb 5-1: config index 0 descriptor too short (expected 1051, got 27)
[   67.444963][  T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[   67.467356][  T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   67.492061][  T690] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[   67.502610][  T690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.518578][  T690] usb 5-1: Product: syz
[   67.523070][  T690] usb 5-1: Manufacturer: syz
[   67.527798][  T690] usb 5-1: SerialNumber: syz
[   67.535230][  T690] usb 5-1: config 0 descriptor??
[   67.634366][ T1469] fuse: Bad value for 'fd'
[   67.645570][ T1470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.669837][ T1470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.686512][    T9] usb 1-1: USB disconnect, device number 18
[   67.704419][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.81/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   67.792483][ T1452] netlink: 140 bytes leftover after parsing attributes in process `syz.4.309'.
[   67.802834][ T1452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.813568][ T1452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.825658][   T62] usbhid 3-1:1.0: can't add hid device: -71
[   67.831927][   T62] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   67.840986][   T62] usb 3-1: USB disconnect, device number 10
[   67.882515][  T690] usb 5-1: USB disconnect, device number 3
[   68.227517][   T36] audit: type=1400 audit(1791167721.891:390): avc:  denied  { map } for  pid=1474 comm="syz.0.314" path="/dev/usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   68.303613][  T905] Bluetooth: hci0: Frame reassembly failed (-84)
[   68.313479][   T36] audit: type=1400 audit(1791167721.991:391): avc:  denied  { read } for  pid=1477 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   68.450422][ T1485] FAULT_INJECTION: forcing a failure.
[   68.450422][ T1485] name failslab, interval 1, probability 0, space 0, times 0
[   68.468302][ T1485] CPU: 1 UID: 0 PID: 1485 Comm: syz.2.316 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71
[   68.468343][ T1485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   68.468359][ T1485] Call Trace:
[   68.468367][ T1485]  <TASK>
[   68.468376][ T1485]  __dump_stack+0x21/0x30
[   68.468417][ T1485]  dump_stack_lvl+0x140/0x1c0
[   68.468449][ T1485]  ? __cfi_dump_stack_lvl+0x10/0x10
[   68.468487][ T1485]  dump_stack+0x19/0x20
[   68.468516][ T1485]  should_fail_ex+0x3c2/0x510
[   68.468546][ T1485]  should_failslab+0xac/0x100
[   68.468588][ T1485]  kmem_cache_alloc_noprof+0x42/0x410
[   68.468612][ T1485]  ? sk_prot_alloc+0x69/0x3a0
[   68.468644][ T1485]  ? __kasan_slab_alloc+0x73/0x90
[   68.468672][ T1485]  sk_prot_alloc+0x69/0x3a0
[   68.468703][ T1485]  sk_alloc+0x40/0x590
[   68.468731][ T1485]  ? bpf_lsm_inode_alloc_security+0xd/0x20
[   68.468760][ T1485]  unix_create1+0xb7/0x760
[   68.468785][ T1485]  ? inode_init_always_gfp+0x76e/0x9e0
[   68.468816][ T1485]  unix_create+0x15a/0x220
[   68.468844][ T1485]  __sock_create+0x3a5/0x810
[   68.468872][ T1485]  __sys_socket+0xe1/0x1c0
[   68.468901][ T1485]  __x64_sys_socket+0x7e/0x90
[   68.468928][ T1485]  x64_sys_call+0x2608/0x2ee0
[   68.468950][ T1485]  do_syscall_64+0x57/0xf0
[   68.468973][ T1485]  ? clear_bhb_loop+0x50/0xa0
[   68.469006][ T1485]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   68.469038][ T1485] RIP: 0033:0x7fcaf6f9e159
[   68.469059][ T1485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.469080][ T1485] RSP: 002b:00007fcaf7de2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   68.469106][ T1485] RAX: ffffffffffffffda RBX: 00007fcaf7226090 RCX: 00007fcaf6f9e159
[   68.469125][ T1485] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[   68.469160][ T1485] RBP: 00007fcaf703506b R08: 0000000000000000 R09: 0000000000000000
[   68.469176][ T1485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.469191][ T1485] R13: 00007fcaf7226128 R14: 00007fcaf7226090 R15: 00007ffe2a3348d8
[   68.469212][ T1485]  </TASK>
[   68.698424][ T1491] syzkaller0: entered promiscuous mode
[   68.708603][ T1491] syzkaller0: entered allmulticast mode
[   68.968665][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   68.998819][   T62] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   69.119830][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.130907][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.140810][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   69.153750][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   69.162925][   T62] usb 3-1: Using ep0 maxpacket: 8
[   69.168090][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.177387][   T62] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.187785][    T9] usb 2-1: config 0 descriptor??
[   69.193406][   T62] usb 3-1: config 0 has no interfaces?
[   69.201257][   T62] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[   69.210488][   T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.218753][   T62] usb 3-1: Product: syz
[   69.223012][   T62] usb 3-1: Manufacturer: syz
[   69.227737][   T62] usb 3-1: SerialNumber: syz
[   69.233983][   T62] usb 3-1: config 0 descriptor??
[   69.435288][ T1514] netlink: 160 bytes leftover after parsing attributes in process `syz.4.328'.
[   69.444670][ T1515] netlink: 160 bytes leftover after parsing attributes in process `syz.4.328'.
[   69.601701][    T9] plantronics 0003:047F:FFFF.0009: item fetching failed at offset 12/15
[   69.610728][    T9] plantronics 0003:047F:FFFF.0009: parse failed
[   69.617056][    T9] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22
[   69.738613][   T62] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   69.888575][   T62] usb 5-1: Using ep0 maxpacket: 16
[   69.895763][   T62] usb 5-1: unable to get BOS descriptor or descriptor too short
[   69.904344][   T62] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   69.917202][   T62] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   69.926348][   T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.934475][   T62] usb 5-1: Product: syz
[   69.938795][   T62] usb 5-1: Manufacturer: syz
[   69.943469][   T62] usb 5-1: SerialNumber: syz
[   70.176142][   T62] usb 5-1: Audio class v2/v3 interfaces need an interface association
[   70.184697][   T62] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[   70.198819][   T62] usb 5-1: USB disconnect, device number 4
[   70.216078][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   70.358859][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   70.715711][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   70.715734][   T36] audit: type=1400 audit(1791167724.381:394): avc:  denied  { append } for  pid=1535 comm="syz.4.334" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   70.748545][  T690] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[   70.899904][  T690] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   70.911002][  T690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   70.922347][  T690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   70.932230][  T690] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   70.946519][  T690] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   70.955889][  T690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   70.964351][  T690] usb 1-1: SerialNumber: syz
[   71.094889][   T45] rust_binder: 1546: undelivered freeze notification, 0000000000000000
[   71.172845][  T690] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[   71.186857][  T690] usb 1-1: USB disconnect, device number 19
[   71.295148][   T36] audit: type=1400 audit(1791167724.961:395): avc:  denied  { create } for  pid=1553 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   71.662097][   T62] usb 2-1: USB disconnect, device number 16
[   71.744333][   T36] audit: type=1400 audit(1791167725.411:396): avc:  denied  { mounton } for  pid=1567 comm="syz.1.343" path="/102/file0" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   71.790781][ T1571] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   71.863911][   T36] audit: type=1400 audit(1791167725.531:397): avc:  denied  { read } for  pid=1576 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   71.936707][   T36] audit: type=1400 audit(1791167725.601:398): avc:  denied  { shutdown } for  pid=1576 comm="syz.1.347" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   71.972659][ T1577] syzkaller0: entered promiscuous mode
[   71.978399][ T1577] syzkaller0: entered allmulticast mode
[   72.059130][   T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[   72.123599][   T36] audit: type=1400 audit(1791167725.791:399): avc:  denied  { connect } for  pid=1583 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   72.143403][   T36] audit: type=1400 audit(1791167725.791:400): avc:  denied  { create } for  pid=1583 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   72.222869][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[   72.231878][   T10] usb 1-1: config 8 has an invalid interface number: 102 but max is 0
[   72.240213][   T10] usb 1-1: config 8 has no interface number 0
[   72.246357][   T10] usb 1-1: config 8 interface 102 altsetting 7 endpoint 0x9 has invalid maxpacket 58747, setting to 64
[   72.257645][   T10] usb 1-1: config 8 interface 102 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[   72.268822][   T10] usb 1-1: config 8 interface 102 altsetting 7 endpoint 0xC has invalid wMaxPacketSize 0
[   72.278863][   T10] usb 1-1: config 8 interface 102 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[   72.289973][   T10] usb 1-1: config 8 interface 102 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64
[   72.301256][   T10] usb 1-1: config 8 interface 102 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   72.312421][   T10] usb 1-1: config 8 interface 102 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[   72.323405][   T10] usb 1-1: config 8 interface 102 has no altsetting 0
[   72.332075][   T10] usb 1-1: New USB device found, idVendor=2001, idProduct=3c05, bcdDevice=b9.91
[   72.341325][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.349538][   T10] usb 1-1: Product: т
[   72.353779][   T10] usb 1-1: Manufacturer: ఁ
[   72.358431][   T10] usb 1-1: SerialNumber: ᰉ
[   72.361248][   T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   72.370858][  T690] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   72.530015][   T45] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[   72.540076][  T690] usb 5-1: No LPM exit latency info found, disabling LPM.
[   72.548963][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   72.562939][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   72.572207][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   72.580432][   T45] usb 2-1: SerialNumber: syz
[   72.585278][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.596400][ T1584] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   72.605950][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.614308][  T690] usb 5-1: string descriptor 0 read error: -22
[   72.620849][  T690] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   72.630104][  T690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.636092][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.647026][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.652552][  T690] usb 5-1: MIDIStreaming interface descriptor not found
[   72.667948][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.677203][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.690919][ T1587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.705334][ T1588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.710475][ T1587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.722080][ T1588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.866368][    T9] usb 5-1: USB disconnect, device number 5
[   73.235496][   T10] asix 1-1:8.102: probe with driver asix failed with error -22
[   73.246539][   T10] usb 1-1: USB disconnect, device number 20
[   73.277541][   T36] audit: type=1400 audit(1791167726.941:401): avc:  denied  { getopt } for  pid=1589 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   73.331367][   T45] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[   73.355450][   T45] usb 2-1: USB disconnect, device number 17
[   73.628711][ T1071] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   73.708573][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   73.790408][ T1071] usb 5-1: unable to get BOS descriptor or descriptor too short
[   73.800094][ T1071] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.810596][ T1071] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   73.822039][ T1071] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   73.831369][ T1071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.839716][ T1071] usb 5-1: Product: syz
[   73.844039][ T1071] usb 5-1: Manufacturer: syz
[   73.849082][ T1071] usb 5-1: SerialNumber: syz
[   73.856451][ T1071] usb 5-1: selecting invalid altsetting 1
[   73.858673][   T10] usb 1-1: Using ep0 maxpacket: 32
[   73.862879][ T1071] usb 5-1: unit 6 not found!
[   73.875153][   T10] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[   73.884986][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.893645][   T10] usb 1-1: Product: syz
[   73.898152][   T10] usb 1-1: Manufacturer: syz
[   73.902928][   T10] usb 1-1: SerialNumber: syz
[   74.099827][   T45] usb 3-1: USB disconnect, device number 11
[   74.114554][   T10] usb 1-1: Fast Track Pro switching to config #2
[   74.127808][   T10] usb 1-1: USB disconnect, device number 21
[   74.189150][ T1627] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[   74.233729][ T1629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.361'.
[   74.243612][ T1629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.361'.
[   74.268501][   T36] audit: type=1400 audit(1791167727.931:402): avc:  denied  { write } for  pid=1631 comm="syz.2.362" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   74.635793][   T36] audit: type=1400 audit(1791167728.301:403): avc:  denied  { getopt } for  pid=1634 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.920836][ T1071] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[   74.931926][ T1071] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[   74.942516][ T1071] usb 5-1: USB disconnect, device number 6
[   74.956799][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   75.148597][   T45] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[   75.299998][   T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.310327][   T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   75.322377][   T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.332696][   T45] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   75.345845][   T45] usb 2-1: config 0 interface 0 has no altsetting 0
[   75.352737][   T45] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[   75.362092][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.371093][   T45] usb 2-1: config 0 descriptor??
[   75.558313][ T1655] kvm: kvm [1654]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   75.567488][ T1655] kvm: kvm [1654]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   75.703783][ T1663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.371'.
[   75.718603][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   75.779869][   T45] kye 0003:0458:0138.000A: unexpected long global item
[   75.787290][   T45] kye 0003:0458:0138.000A: parse failed
[   75.793207][   T45] kye 0003:0458:0138.000A: probe with driver kye failed with error -22
[   75.868543][   T10] usb 5-1: device descriptor read/64, error -71
[   75.918539][   T62] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   76.068530][   T62] usb 1-1: Using ep0 maxpacket: 16
[   76.079371][   T62] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   76.091420][   T45] usb 2-1: USB disconnect, device number 18
[   76.108532][   T62] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.121558][   T10] usb 5-1: device descriptor read/64, error -71
[   76.128080][   T62] usb 1-1: config 0 interface 0 has no altsetting 0
[   76.134846][   T62] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[   76.143969][   T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.159047][   T62] usb 1-1: config 0 descriptor??
[   76.359135][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   76.498589][   T10] usb 5-1: device descriptor read/64, error -71
[   76.538792][   T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   76.577270][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   76.577291][   T36] audit: type=1400 audit(1791167730.241:406): avc:  denied  { append } for  pid=1660 comm="syz.0.370" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   76.689751][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.700156][   T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   76.709303][   T45] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00
[   76.719379][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.738354][   T45] usb 3-1: 0:1 : does not exist
[   76.748562][   T10] usb 5-1: device descriptor read/64, error -71
[   76.858575][ T1071] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[   76.858973][   T10] usb usb5-port1: attempt power cycle
[   76.931155][  T564] usb 3-1: USB disconnect, device number 12
[   76.961800][   T62] usbhid 1-1:0.0: can't add hid device: -71
[   76.968149][   T62] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   76.977312][   T62] usb 1-1: USB disconnect, device number 22
[   77.009753][ T1071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.020779][ T1071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.030677][ T1071] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   77.040124][ T1071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.048960][ T1071] usb 2-1: config 0 descriptor??
[   77.228784][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   77.249821][   T10] usb 5-1: device descriptor read/8, error -71
[   77.379856][   T10] usb 5-1: device descriptor read/8, error -71
[   77.460737][   T36] audit: type=1400 audit(1791167731.131:407): avc:  denied  { accept } for  pid=1677 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   77.465250][ T1071] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[   77.489087][ T1071] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0
[   77.515001][ T1071] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[   77.535673][   T36] audit: type=1400 audit(1791167731.201:408): avc:  denied  { setopt } for  pid=1682 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   77.628596][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   77.655304][   T10] usb 5-1: device descriptor read/8, error -71
[   77.664773][ T1675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.675043][ T1675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.684120][   T45] usb 2-1: USB disconnect, device number 19
[   77.690471][ T1691] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   77.691677][   T36] audit: type=1400 audit(1791167731.361:409): avc:  denied  { load_policy } for  pid=1690 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   77.700566][ T1691] SELinux: failed to load policy
[   77.789854][   T10] usb 5-1: device descriptor read/8, error -71
[   77.808663][ T1071] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   77.898677][   T10] usb usb5-port1: unable to enumerate USB device
[   77.960296][ T1071] usb 3-1: unable to get BOS descriptor or descriptor too short
[   77.968818][ T1071] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 51, changing to 7
[   77.981665][ T1071] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   77.990906][  T393] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   77.998777][ T1071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.006820][ T1071] usb 3-1: Product: syz
[   78.011117][ T1071] usb 3-1: Manufacturer: syz
[   78.015862][ T1071] usb 3-1: SerialNumber: syz
[   78.169771][  T393] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.181871][  T393] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   78.191059][  T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.199524][  T393] usb 1-1: Product: syz
[   78.203931][  T393] usb 1-1: Manufacturer: syz
[   78.208785][  T393] usb 1-1: SerialNumber: syz
[   78.215653][  T393] usb-storage 1-1:1.0: USB Mass Storage device detected
[   78.225435][ T1685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.234844][  T393] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   78.245210][ T1685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.259547][ T1071] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   78.266688][ T1071] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc
[   78.279271][ T1071] usb 3-1: USB disconnect, device number 13
[   78.290091][ T1701] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   78.299508][ T1701] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   78.311478][ T1701] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   78.313300][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   78.319539][ T1701] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   78.348557][   T36] audit: type=1400 audit(1791167732.011:410): avc:  denied  { connect } for  pid=1700 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   78.384950][ T1705] can0: slcan on ttynull.
[   78.565656][  T393] usb 1-1: USB disconnect, device number 23
[   78.886634][ T1705] can0 (unregistered): slcan off ttynull.
[   79.007581][ T1761] tmpfs: Unknown parameter 'appraise_type'
[   79.020031][ T1761] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00
[   79.060323][ T1772] batadv_slave_1: entered promiscuous mode
[   79.066763][ T1772] batadv_slave_1: left promiscuous mode
[   79.088588][  T393] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[   79.116956][ T1776] netlink: 'syz.4.394': attribute type 4 has an invalid length.
[   79.259909][  T393] usb 3-1: unable to get BOS descriptor or descriptor too short
[   79.278343][  T393] usb 3-1: not running at top speed; connect to a high speed hub
[   79.289809][  T393] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4
[   79.306653][  T393] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40
[   79.316743][  T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.325168][  T393] usb 3-1: Product: syz
[   79.329968][  T393] usb 3-1: Manufacturer: syz
[   79.334821][  T393] usb 3-1: SerialNumber: syz
[   79.538546][ T1071] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   79.548946][  T393] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[   79.560144][  T393] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71
[   79.570221][  T393] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71
[   79.580601][  T393] usb 3-1: USB disconnect, device number 14
[   79.668576][  T564] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   79.689980][ T1071] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10
[   79.701481][ T1071] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.715226][ T1071] usb 5-1: config 0 interface 0 has no altsetting 0
[   79.722343][ T1071] usb 5-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[   79.731595][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.740701][ T1071] usb 5-1: config 0 descriptor??
[   79.828561][  T564] usb 2-1: Using ep0 maxpacket: 8
[   79.835342][  T564] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.846705][  T564] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.856960][  T564] usb 2-1: config 0 interface 0 has no altsetting 0
[   79.863684][  T564] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[   79.873078][  T564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.882266][  T564] usb 2-1: config 0 descriptor??
[   80.093111][ T1810] SELinux:  policydb string length 1 does not match expected length 8
[   80.103399][ T1810] SELinux: failed to load policy
[   80.111651][ T1814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'.
[   80.149219][ T1071] wacom 0003:056A:00B5.000C: unknown main item tag 0x3
[   80.156613][ T1071] wacom 0003:056A:00B5.000C: Unknown device_type for 'HID 056a:00b5'. Assuming pen.
[   80.182064][ T1071] wacom 0003:056A:00B5.000C: hidraw0: USB HID v10.01 Device [HID 056a:00b5] on usb-dummy_hcd.4-1/input0
[   80.205664][ T1071] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B5.000C/input/input9
[   80.289319][ T1835] random: crng reseeded on system resumption
[   80.334169][  T564] kye 0003:0458:5019.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   80.351463][   T10] usb 5-1: USB disconnect, device number 11
[   80.373683][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.387898][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.394972][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.403349][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.410459][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.420335][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.438736][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.452431][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x2
[   80.459753][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.464989][ T1845] usb usb8: usbfs: process 1845 (syz.2.405) did not claim interface 0 before use
[   80.475819][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.480476][ T1845] /dev/nullb0: Can't lookup blockdev
[   80.492224][   T36] audit: type=1326 audit(1791167734.161:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1844 comm="syz.2.405" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaf6f9e159 code=0x0
[   80.493493][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.527362][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.534286][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.541798][ T1810] fuse: Bad value for 'user_id'
[   80.547002][ T1810] fuse: Bad value for 'user_id'
[   80.566144][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.573677][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.580624][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.587550][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.596597][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.606542][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.626215][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.633208][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.640233][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.647001][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.654628][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.662384][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.670211][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.677186][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.684438][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.691533][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.698669][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.705585][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.713297][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.720373][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.727185][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.734246][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.741433][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.748244][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.755318][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.762452][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.769778][  T564] kye 0003:0458:5019.000D: unknown main item tag 0x0
[   80.778751][  T564] kye 0003:0458:5019.000D: hidraw0: USB HID v0.81 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0
[   80.793897][  T564] kye 0003:0458:5019.000D: tablet-enabling feature report not found
[   80.802036][  T564] kye 0003:0458:5019.000D: tablet enabling failed
[   80.897562][ T1873] overlayfs: workdir and upperdir must reside under the same mount
[   80.910496][ T1873] overlayfs: workdir and upperdir must reside under the same mount
[   81.128524][ T1071] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   81.288512][ T1071] usb 1-1: Using ep0 maxpacket: 16
[   81.306164][ T1071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.338559][ T1071] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.358173][ T1071] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.506462][  T893] bridge_slave_1: left allmulticast mode
[   81.527327][  T893] bridge_slave_1: left promiscuous mode
[   81.542379][  T893] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.565291][  T893] bridge_slave_0: left allmulticast mode
[   81.579103][  T893] bridge_slave_0: left promiscuous mode
[   81.592022][  T893] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.724992][  T893] tipc: Left network mode
[   81.736817][  T893] veth1_macvtap: left promiscuous mode
[   81.748543][  T893] veth0_vlan: left promiscuous mode
[   81.945795][ T1935] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.950655][ T1944] random: crng reseeded on system resumption
[   81.953085][   T36] audit: type=1400 audit(1791167735.611:412): avc:  denied  { append } for  pid=1943 comm="syz.4.415" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   81.959383][ T1935] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.990524][ T1935] bridge_slave_0: entered allmulticast mode
[   81.997760][ T1935] bridge_slave_0: entered promiscuous mode
[   82.009481][ T1935] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.016968][ T1935] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.024906][ T1935] bridge_slave_1: entered allmulticast mode
[   82.032408][ T1935] bridge_slave_1: entered promiscuous mode
[   82.104964][   T36] audit: type=1400 audit(1791167735.771:413): avc:  denied  { write } for  pid=1943 comm="syz.4.415" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   82.127980][   T36] audit: type=1400 audit(1791167735.771:414): avc:  denied  { setattr } for  pid=1943 comm="syz.4.415" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[   82.133686][ T1935] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.157383][ T1935] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.164806][ T1935] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.171988][ T1935] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.204085][  T898] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.212033][  T898] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.224219][  T898] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.231362][  T898] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.238166][ T1949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.244125][  T898] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.253372][ T1949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.254315][  T898] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.296241][ T1935] veth0_vlan: entered promiscuous mode
[   82.310737][ T1935] veth1_macvtap: entered promiscuous mode
[   82.384519][   T36] audit: type=1326 audit(1791167736.051:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1806 comm="syz.1.397" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed539e159 code=0x7fc00000
[   82.479356][  T393] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   82.491045][   T45] usb 2-1: USB disconnect, device number 20
[   82.502259][ T1956] input: syz1 as /devices/virtual/input/input12
[   82.542017][ T1960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'.
[   82.590901][ T1953] 9pnet_fd: Insufficient options for proto=fd
[   82.638563][  T393] usb 5-1: Using ep0 maxpacket: 32
[   82.645972][  T393] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.657530][  T393] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   82.671202][  T393] usb 5-1: config 0 interface 0 has no altsetting 0
[   82.677949][  T393] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[   82.688240][  T393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.697283][  T393] usb 5-1: config 0 descriptor??
[   82.888615][  T564] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   82.909505][  T393] usbhid 5-1:0.0: can't add hid device: -71
[   82.915646][  T393] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   82.924985][  T393] usb 5-1: USB disconnect, device number 12
[   83.040033][  T564] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   83.051619][  T564] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.061713][  T564] usb 6-1: config 0 interface 0 has no altsetting 0
[   83.068516][  T564] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   83.078325][  T564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.087607][  T564] usb 6-1: config 0 descriptor??
[   83.298239][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.305686][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.313922][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.328568][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.336012][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.343882][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.351062][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.358245][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.365462][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.372916][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.380075][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.387698][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.395165][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.404150][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.413045][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.420453][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.428259][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.438618][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.446233][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.458665][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.466338][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.473796][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.481563][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.498533][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.515846][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.523086][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.530409][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.537612][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.544935][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.556982][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.568627][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.577579][   T36] audit: type=1400 audit(1791167737.241:416): avc:  denied  { getopt } for  pid=1980 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   83.588182][ T1979] ./dev/sda1: Can't lookup blockdev
[   83.603493][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.618141][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.625847][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.633072][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.642111][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.649378][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.656606][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.664146][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.677640][  T564] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0
[   83.706333][ T1989] netlink: 'syz.4.429': attribute type 4 has an invalid length.
[   83.716894][ T1989] netlink: 'syz.4.429': attribute type 4 has an invalid length.
[   83.765302][   T36] audit: type=1400 audit(1791167737.431:417): avc:  denied  { setopt } for  pid=1991 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   83.788527][   T36] audit: type=1326 audit(1791167737.451:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1991 comm="syz.1.430" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed539e159 code=0x0
[   83.841790][   T36] audit: type=1326 audit(1791167737.511:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1991 comm="syz.1.430" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed539e159 code=0x0
[   83.868209][ T1966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.880905][ T1966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.898673][   T36] audit: type=1400 audit(1791167737.551:420): avc:  denied  { map } for  pid=1965 comm="syz.5.421" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   83.928644][  T564] hid-led 0003:0FC5:B080.000E: probe with driver hid-led failed with error -71
[   83.948151][  T564] usb 6-1: USB disconnect, device number 2
[   83.953079][ T1071] usb 1-1: string descriptor 0 read error: -71
[   83.961976][ T1071] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   83.972086][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[   83.986931][ T1071] usb 1-1: can't set config #1, error -71
[   83.999735][ T1071] usb 1-1: USB disconnect, device number 24
[   84.057800][ T1994] kvm: kvm [1993]: vcpu1, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[   84.255263][ T2014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.265465][ T2014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.388620][ T1071] usb 1-1: new low-speed USB device number 25 using dummy_hcd
[   84.479414][ T2017] netlink: 'syz.5.436': attribute type 12 has an invalid length.
[   84.488541][   T62] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   84.548617][ T1071] usb 1-1: Invalid ep0 maxpacket: 32
[   84.638570][   T62] usb 5-1: device descriptor read/64, error -71
[   84.672694][ T2030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2030 comm=syz.1.440
[   84.685677][ T1071] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[   84.839176][ T1071] usb 1-1: Invalid ep0 maxpacket: 32
[   84.844908][ T1071] usb usb1-port1: attempt power cycle
[   84.849923][  T564] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[   84.878574][   T62] usb 5-1: device descriptor read/64, error -71
[   85.009855][  T564] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   85.038534][  T564] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8
[   85.049422][  T564] usb 6-1: config 0 interface 0 has no altsetting 0
[   85.056119][  T564] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[   85.065489][  T564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.075085][  T564] usb 6-1: config 0 descriptor??
[   85.084142][ T2027] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[   85.118552][   T62] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   85.188558][ T1071] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[   85.208942][ T1071] usb 1-1: Invalid ep0 maxpacket: 32
[   85.258576][   T62] usb 5-1: device descriptor read/64, error -71
[   85.338597][ T1071] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[   85.359002][ T1071] usb 1-1: Invalid ep0 maxpacket: 32
[   85.364589][ T1071] usb usb1-port1: unable to enumerate USB device
[   85.499245][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.507744][   T62] usb 5-1: device descriptor read/64, error -71
[   85.514829][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.523301][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.531749][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.540862][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.549271][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.557676][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.567445][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.576513][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.586181][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.594999][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.603857][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.612921][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.621664][   T62] usb usb5-port1: attempt power cycle
[   85.627754][  T564] logitech-hidpp-device 0003:046D:C086.000F: unknown main item tag 0x0
[   85.637382][  T564] logitech-hidpp-device 0003:046D:C086.000F: unbalanced collection at end of report description
[   85.648443][  T564] logitech-hidpp-device 0003:046D:C086.000F: hidpp_probe:parse failed
[   85.657303][  T564] logitech-hidpp-device 0003:046D:C086.000F: probe with driver logitech-hidpp-device failed with error -22
[   85.760572][ T1071] usb 6-1: USB disconnect, device number 3
[   85.978597][   T62] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   85.999985][   T62] usb 5-1: device descriptor read/8, error -71
[   86.048603][   T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   86.130189][   T62] usb 5-1: device descriptor read/8, error -71
[   86.200225][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.211423][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.222004][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   86.235098][   T45] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[   86.244484][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.253891][   T45] usb 2-1: config 0 descriptor??
[   86.368595][   T62] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   86.389793][   T62] usb 5-1: device descriptor read/8, error -71
[   86.520210][   T62] usb 5-1: device descriptor read/8, error -71
[   86.628789][   T62] usb usb5-port1: unable to enumerate USB device
[   86.662377][   T45] steelseries 0003:1038:1410.0010: unknown main item tag 0x7
[   86.670370][   T45] steelseries 0003:1038:1410.0010: missing HID_OUTPUT_REPORT 0
[   86.862797][  T564] usb 2-1: USB disconnect, device number 21
[   87.138631][   T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   87.288538][   T45] usb 6-1: Using ep0 maxpacket: 32
[   87.299480][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.310642][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.321757][   T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   87.331576][   T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.340874][   T45] usb 6-1: config 0 descriptor??
[   87.349611][   T45] hub 6-1:0.0: USB hub found
[   87.384924][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.399124][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.408213][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.416446][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.424455][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.432611][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.440556][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.448668][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.457670][ T2059] netlink: 'syz.4.450': attribute type 12 has an invalid length.
[   87.465186][ T2069] FAULT_INJECTION: forcing a failure.
[   87.465186][ T2069] name failslab, interval 1, probability 0, space 0, times 0
[   87.478382][ T1071] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[   87.486567][ T2069] CPU: 1 UID: 0 PID: 2069 Comm: syz.1.452 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71
[   87.486610][ T2069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   87.486625][ T2069] Call Trace:
[   87.486634][ T2069]  <TASK>
[   87.486644][ T2069]  __dump_stack+0x21/0x30
[   87.486686][ T2069]  dump_stack_lvl+0x140/0x1c0
[   87.486717][ T2069]  ? __cfi_dump_stack_lvl+0x10/0x10
[   87.486749][ T2069]  ? kfree+0x158/0x440
[   87.486775][ T2069]  ? setup_net+0x227/0x9b0
[   87.486800][ T2069]  ? create_new_namespaces+0x390/0x6f0
[   87.486838][ T2069]  ? unshare_nsproxy_namespaces+0x124/0x180
[   87.486875][ T2069]  ? ksys_unshare+0x4f9/0x920
[   87.486909][ T2069]  ? x64_sys_call+0x2998/0x2ee0
[   87.486931][ T2069]  ? do_syscall_64+0x57/0xf0
[   87.486957][ T2069]  dump_stack+0x19/0x20
[   87.486991][ T2069]  should_fail_ex+0x3c2/0x510
[   87.487024][ T2069]  should_failslab+0xac/0x100
[   87.487057][ T2069]  kmem_cache_alloc_noprof+0x42/0x410
[   87.487081][ T2069]  ? __proc_create+0x535/0xb40
[   87.487122][ T2069]  __proc_create+0x535/0xb40
[   87.487147][ T2069]  ? proc_symlink+0x2d0/0x2d0
[   87.487174][ T2069]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   87.487203][ T2069]  proc_create_reg+0x9a/0x120
[   87.487229][ T2069]  proc_create_net_data+0x99/0x1b0
[   87.487253][ T2069]  ? fib_default_rule_add+0x5c/0x430
[   87.487283][ T2069]  ? __cfi_proc_create_net_data+0x10/0x10
[   87.487321][ T2069]  ? __cfi___netlink_kernel_create+0x10/0x10
[   87.487359][ T2069]  ? fib_default_rule_add+0x1f9/0x430
[   87.487387][ T2069]  fib_proc_init+0x60/0x140
[   87.487417][ T2069]  fib_net_init+0x1de/0x3a0
[   87.487439][ T2069]  ? __cfi_fib_net_init+0x10/0x10
[   87.487461][ T2069]  ? __cfi_nl_fib_input+0x10/0x10
[   87.487484][ T2069]  ? devinet_init_net+0x34e/0x740
[   87.487509][ T2069]  ops_init+0x302/0x5d0
[   87.487534][ T2069]  ? __kasan_check_write+0x18/0x20
[   87.487560][ T2069]  ? rwsem_read_trylock+0x275/0x5a0
[   87.487597][ T2069]  ? sysvec_apic_timer_interrupt+0x50/0x90
[   87.487633][ T2069]  setup_net+0x227/0x9b0
[   87.487657][ T2069]  ? copy_net_ns+0xa20/0xa20
[   87.487680][ T2069]  ? down_read_killable+0x7f/0x100
[   87.487715][ T2069]  ? __cfi_down_read_killable+0x10/0x10
[   87.487752][ T2069]  copy_net_ns+0x4fc/0xa20
[   87.487775][ T2069]  create_new_namespaces+0x390/0x6f0
[   87.487811][ T2069]  unshare_nsproxy_namespaces+0x124/0x180
[   87.487853][ T2069]  ksys_unshare+0x4f9/0x920
[   87.487890][ T2069]  ? __cfi_ksys_unshare+0x10/0x10
[   87.487923][ T2069]  ? __kasan_check_write+0x18/0x20
[   87.487949][ T2069]  __x64_sys_unshare+0x3c/0x50
[   87.487982][ T2069]  x64_sys_call+0x2998/0x2ee0
[   87.488006][ T2069]  do_syscall_64+0x57/0xf0
[   87.488033][ T2069]  ? clear_bhb_loop+0x50/0xa0
[   87.488067][ T2069]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   87.488098][ T2069] RIP: 0033:0x7f4ed539e159
[   87.488130][ T2069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.488154][ T2069] RSP: 002b:00007f4ed3df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   87.488183][ T2069] RAX: ffffffffffffffda RBX: 00007f4ed5625fa0 RCX: 00007f4ed539e159
[   87.488204][ T2069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   87.488220][ T2069] RBP: 00007f4ed543506b R08: 0000000000000000 R09: 0000000000000000
[   87.488236][ T2069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.488251][ T2069] R13: 00007f4ed5626038 R14: 00007f4ed5625fa0 R15: 00007ffe3f5f19d8
[   87.488275][ T2069]  </TASK>
[   87.839949][   T45] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[   87.848645][ T2070] netlink: 80 bytes leftover after parsing attributes in process `syz.1.452'.
[   87.859057][   T36] audit: type=1400 audit(1791167741.531:421): avc:  denied  { create } for  pid=2068 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   87.881005][   T36] audit: type=1400 audit(1791167741.531:422): avc:  denied  { write } for  pid=2068 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   87.921998][   T36] audit: type=1400 audit(1791167741.591:423): avc:  denied  { execmem } for  pid=2073 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   87.963588][   T36] audit: type=1400 audit(1791167741.631:424): avc:  denied  { nlmsg_write } for  pid=2075 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   88.007654][ T1071] usb 1-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config
[   88.018514][ T1071] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   88.034382][ T1071] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40
[   88.044745][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.053314][ T1071] usb 1-1: Product: syz
[   88.057813][ T1071] usb 1-1: Manufacturer: syz
[   88.062626][ T1071] usb 1-1: SerialNumber: syz
[   88.075475][ T2087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[   88.091528][   T36] audit: type=1400 audit(1791167741.761:425): avc:  denied  { lock } for  pid=2086 comm="syz.4.459" path="socket:[24225]" dev="sockfs" ino=24225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   88.127623][ T2089] rust_binder: 2088:2089 got reply transaction with no transaction stack
[   88.136943][   T36] audit: type=1400 audit(1791167741.801:426): avc:  denied  { bind } for  pid=2088 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   88.146981][ T2089] rust_binder: 2088:2089 transaction reply to 0:0 failed EINVAL, code 0 size 88-24
[   88.158639][ T2094] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[   88.169057][   T62] rust_binder: 2088: undelivered TRANSACTION_ERROR: 29189
[   88.179411][   T31] rust_binder: 2088: undelivered TRANSACTION_ERROR: 29201
[   88.246398][   T45] hid-generic 0003:046D:C31C.0011: item fetching failed at offset 0/1
[   88.257798][   T45] hid-generic 0003:046D:C31C.0011: probe with driver hid-generic failed with error -22
[   88.280083][ T1071] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[   88.296712][ T1071] usb 1-1: USB disconnect, device number 29
[   88.568927][   T62] usb 6-1: USB disconnect, device number 4
[   88.860147][   T36] audit: type=1400 audit(1791167742.531:427): avc:  denied  { create } for  pid=2102 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   88.973909][ T2122] overlayfs: failed to resolve './file1/file0': -20
[   88.981890][ T2122] overlayfs: failed to resolve './bus': -2
[   89.188794][   T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   89.340045][   T45] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[   89.350289][   T45] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[   89.360841][   T45] usb 1-1: config 1 interface 0 has no altsetting 0
[   89.369849][   T45] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[   89.379330][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.387495][   T45] usb 1-1: Product: syz
[   89.392075][   T45] usb 1-1: Manufacturer: syz
[   89.396794][   T45] usb 1-1: SerialNumber: syz
[   89.403063][ T2120] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   89.410726][ T2120] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   89.748824][ T2131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.759030][ T2131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.816576][   T36] audit: type=1326 audit(1791167743.481:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.1.474" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed539e159 code=0x0
[   89.929275][ T2140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.475'.
[   89.941503][   T36] audit: type=1400 audit(1791167743.611:429): avc:  denied  { write } for  pid=2139 comm="syz.5.475" name="mcfilter" dev="proc" ino=4026532566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   89.968545][   T36] audit: type=1400 audit(1791167743.611:430): avc:  denied  { listen } for  pid=2139 comm="syz.5.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   90.388623][   T31] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   90.519328][   T31] usb 6-1: device descriptor read/64, error -71
[   90.580757][ T2159] wireguard: wg1: Could not create IPv4 socket
[   90.599400][   T45] rtl8150 1-1:1.0: eth1: rtl8150 is detected
[   90.734890][  T907] bridge_slave_1: left allmulticast mode
[   90.741103][  T907] bridge_slave_1: left promiscuous mode
[   90.758653][  T907] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.766012][   T31] usb 6-1: device descriptor read/64, error -71
[   90.779121][  T907] bridge_slave_0: left allmulticast mode
[   90.784939][  T907] bridge_slave_0: left promiscuous mode
[   90.803360][  T907] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.839089][ T2120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3873901568 (7747803136 ns) > initial count (12 ns). Using initial count to start timer.
[   90.970230][   T45] usb 1-1: USB disconnect, device number 30
[   91.011030][  T907] tipc: Left network mode
[   91.020118][   T31] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   91.029443][  T907] veth1_macvtap: left promiscuous mode
[   91.035155][  T907] veth0_vlan: left promiscuous mode
[   91.168539][   T31] usb 6-1: device descriptor read/64, error -71
[   91.213862][ T2201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'.
[   91.258038][ T2188] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.265287][ T2188] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.272988][ T2188] bridge_slave_0: entered allmulticast mode
[   91.281613][ T2188] bridge_slave_0: entered promiscuous mode
[   91.289380][ T2188] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.296848][ T2188] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.304347][ T2188] bridge_slave_1: entered allmulticast mode
[   91.310919][ T2188] bridge_slave_1: entered promiscuous mode
[   91.319189][ T2209] ./dev/sda1: Can't lookup blockdev
[   91.378652][ T2188] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.390714][ T2188] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.399460][ T2188] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.407663][ T2188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.418516][   T31] usb 6-1: device descriptor read/64, error -71
[   91.445569][  T898] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.457862][  T898] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.471860][  T886] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.481785][  T886] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.493269][  T898] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.501617][  T898] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.530166][   T31] usb usb6-port1: attempt power cycle
[   91.547015][ T2188] veth0_vlan: entered promiscuous mode
[   91.560567][ T2188] veth1_macvtap: entered promiscuous mode
[   91.838700][   T45] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   91.878561][   T31] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[   91.898327][ T2229] ./dev/sda1: Can't lookup blockdev
[   91.901185][ T2228] ./dev/sda1: Can't lookup blockdev
[   91.905981][   T31] usb 6-1: device descriptor read/8, error -71
[   91.990009][   T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7
[   92.003445][   T45] usb 1-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40
[   92.013647][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.022368][   T45] usb 1-1: Product: syz
[   92.026741][   T45] usb 1-1: Manufacturer: syz
[   92.031707][   T45] usb 1-1: SerialNumber: syz
[   92.049965][   T31] usb 6-1: device descriptor read/8, error -71
[   92.088931][  T564] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   92.248524][  T564] usb 7-1: Using ep0 maxpacket: 16
[   92.255376][  T564] usb 7-1: config 0 has an invalid interface number: 98 but max is 0
[   92.266325][  T564] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.276818][  T564] usb 7-1: config 0 has no interface number 0
[   92.283882][  T564] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[   92.294026][  T564] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   92.304481][  T564] usb 7-1: config 0 interface 98 has no altsetting 0
[   92.308818][   T31] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[   92.314712][  T564] usb 7-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[   92.329060][  T564] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.337195][  T564] usb 7-1: Product: syz
[   92.341466][  T564] usb 7-1: Manufacturer: syz
[   92.346099][  T564] usb 7-1: SerialNumber: syz
[   92.350951][   T31] usb 6-1: device descriptor read/8, error -71
[   92.355787][  T564] usb 7-1: config 0 descriptor??
[   92.362734][ T2224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[   92.370522][ T2224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[   92.501022][   T31] usb 6-1: device descriptor read/8, error -71
[   92.582583][ T2224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.591438][ T2224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.600343][ T2224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[   92.608400][ T2224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[   92.611290][   T31] usb usb6-port1: unable to enumerate USB device
[   92.626986][   T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   92.634146][   T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   92.643657][   T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[   92.654589][   T45] usb 1-1: USB disconnect, device number 31
[   92.668904][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   93.150349][ T2258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.159781][ T2258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.228649][ T2262] kvm: kvm [2260]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   93.237855][ T2262] kvm: kvm [2260]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   93.386857][   T45] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   93.527933][   T45] usb 1-1: device descriptor read/64, error -71
[   93.769774][   T45] usb 1-1: device descriptor read/64, error -71
[   93.832736][  T564] asix 7-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   93.843385][  T564] asix 7-1:0.98 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   93.854115][  T564] asix 7-1:0.98: probe with driver asix failed with error -71
[   93.863177][  T564] usb 7-1: USB disconnect, device number 2
[   94.011662][   T45] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   94.142667][   T45] usb 1-1: device descriptor read/64, error -71
[   94.211130][ T2295] ./dev/sda1: Can't lookup blockdev
[   94.218626][ T2297] ./dev/sda1: Can't lookup blockdev
[   94.384444][   T45] usb 1-1: device descriptor read/64, error -71
[   94.392593][ T2308] bridge0: entered promiscuous mode
[   94.398017][ T2308] bridge0: entered allmulticast mode
[   94.437764][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   94.437784][   T36] audit: type=1400 audit(1791167748.094:433): avc:  denied  { create } for  pid=2309 comm="syz.5.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   94.495489][   T45] usb usb1-port1: attempt power cycle
[   94.616270][  T564] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   94.716984][ T1071] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[   94.778363][  T564] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   94.797555][  T564] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.817718][  T564] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.837897][   T45] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   94.837897][  T564] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   94.839247][  T564] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   94.868377][  T564] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   94.871527][   T45] usb 1-1: device descriptor read/8, error -71
[   94.876857][  T564] usb 7-1: Manufacturer: syz
[   94.881659][  T564] usb 7-1: config 0 descriptor??
[   94.899992][   T36] audit: type=1400 audit(1791167748.551:434): avc:  denied  { read } for  pid=2309 comm="syz.5.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   95.030436][   T45] usb 1-1: device descriptor read/8, error -71
[   95.271226][   T45] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   95.292395][   T45] usb 1-1: device descriptor read/8, error -71
[   95.321072][  T564] appleir 0003:05AC:8243.0012: item fetching failed at offset 0/1
[   95.329262][  T564] appleir 0003:05AC:8243.0012: parse failed
[   95.335465][  T564] appleir 0003:05AC:8243.0012: probe with driver appleir failed with error -22
[   95.364909][   T36] audit: type=1400 audit(1791167749.017:435): avc:  denied  { map } for  pid=2320 comm="syz.4.523" path="pipe:[14033]" dev="pipefs" ino=14033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   95.423981][   T45] usb 1-1: device descriptor read/8, error -71
[   95.534159][   T45] usb usb1-port1: unable to enumerate USB device
[   95.675738][  T564] usb 7-1: USB disconnect, device number 3
[   96.016729][  T564] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   96.079821][ T2397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.527'.
[   96.204416][ T2408] 8021q: VLANs not supported on lo
[   96.212356][  T564] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.225074][ T2408] 8021q: VLANs not supported on lo
[   96.232903][  T564] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   96.250787][  T564] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.263565][  T564] usb 7-1: config 0 descriptor??
[   96.314104][ T2416] sit0: entered promiscuous mode
[   96.335800][ T2416] validate_nla: 24 callbacks suppressed
[   96.335859][ T2416] netlink: 'syz.4.531': attribute type 1 has an invalid length.
[   96.355308][ T2416] netlink: 1 bytes leftover after parsing attributes in process `syz.4.531'.
[   96.471544][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.480625][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.491067][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.499694][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.509275][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.518964][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.536857][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.547560][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.556914][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.566165][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.580580][  T564] usbhid 7-1:0.0: can't add hid device: -71
[   96.587297][  T564] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   96.603923][  T564] usb 7-1: USB disconnect, device number 4
[   96.863220][   T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   97.015495][   T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   97.027597][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.039929][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.049859][   T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   97.063696][   T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   97.073064][   T31] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   97.081827][   T31] usb 1-1: Manufacturer: syz
[   97.088307][   T31] usb 1-1: config 0 descriptor??
[   97.469750][ T1071] usb 6-1: unable to read config index 0 descriptor/start: -71
[   97.477762][ T1071] usb 6-1: can't read configurations, error -71
[   97.521951][   T31] appleir 0003:05AC:8243.0013: item fetching failed at offset 0/1
[   97.530151][   T31] appleir 0003:05AC:8243.0013: parse failed
[   97.536109][   T31] appleir 0003:05AC:8243.0013: probe with driver appleir failed with error -22
[   97.822229][   T31] usb 1-1: USB disconnect, device number 36
[   98.012490][   T36] audit: type=1326 audit(1791167751.648:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.6.539" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52eff9e159 code=0x0
[   99.305583][   T36] audit: type=1400 audit(1791167752.929:437): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   99.341575][   T36] audit: type=1400 audit(1791167752.958:438): avc:  denied  { read } for  pid=2468 comm="syz.0.545" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   99.371561][   T36] audit: type=1400 audit(1791167752.958:439): avc:  denied  { open } for  pid=2468 comm="syz.0.545" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   99.486802][ T2480] syz_tun: refused to change device tx_queue_len
[  100.005478][  T564] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  100.179918][  T564] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  100.191313][  T564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.202337][  T564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.212187][  T564] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  100.237491][  T564] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  100.247524][  T564] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  100.255789][  T564] usb 6-1: Manufacturer: syz
[  100.287754][  T564] usb 6-1: config 0 descriptor??
[  100.719876][  T564] appleir 0003:05AC:8243.0014: item fetching failed at offset 0/1
[  100.736494][  T564] appleir 0003:05AC:8243.0014: parse failed
[  100.742555][  T564] appleir 0003:05AC:8243.0014: probe with driver appleir failed with error -22
[  101.066461][  T902] bridge_slave_1: left allmulticast mode
[  101.072290][  T902] bridge_slave_1: left promiscuous mode
[  101.079129][  T902] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.092919][  T902] bridge_slave_0: left allmulticast mode
[  101.098803][  T902] bridge_slave_0: left promiscuous mode
[  101.114774][   T62] usb 6-1: USB disconnect, device number 11
[  101.123395][  T902] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.241085][  T902] veth1_macvtap: left promiscuous mode
[  101.255022][  T902] veth0_vlan: left promiscuous mode
[  101.412065][ T2504] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.419265][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.426563][ T2504] bridge_slave_0: entered allmulticast mode
[  101.433021][ T2504] bridge_slave_0: entered promiscuous mode
[  101.445895][ T2504] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.453039][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.464562][ T2504] bridge_slave_1: entered allmulticast mode
[  101.475176][ T2504] bridge_slave_1: entered promiscuous mode
[  101.485413][ T2509] overlayfs: failed to clone upperpath
[  101.603862][ T2504] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.611367][ T2504] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.618931][ T2504] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.626103][ T2504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.715169][  T886] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.724838][  T886] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.752027][  T886] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.759527][  T886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.767470][  T886] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.774708][  T886] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.813971][ T2504] veth0_vlan: entered promiscuous mode
[  101.831774][ T2504] veth1_macvtap: entered promiscuous mode
[  102.086381][  T886] bridge_slave_1: left allmulticast mode
[  102.096078][  T886] bridge_slave_1: left promiscuous mode
[  102.110021][  T886] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.128122][  T886] bridge_slave_0: left allmulticast mode
[  102.137767][  T886] bridge_slave_0: left promiscuous mode
[  102.160276][  T886] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.324587][  T886] veth1_macvtap: left promiscuous mode
[  102.330406][  T886] veth0_vlan: left promiscuous mode
[  102.378411][ T2535] overlayfs: upper fs does not support file handles, falling back to index=off.
[  102.389342][ T2535] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  102.502058][ T2533] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.509735][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.518835][ T2533] bridge_slave_0: entered allmulticast mode
[  102.533062][ T2533] bridge_slave_0: entered promiscuous mode
[  102.540783][ T2533] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.548165][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.555567][ T2533] bridge_slave_1: entered allmulticast mode
[  102.562224][ T2533] bridge_slave_1: entered promiscuous mode
[  102.634676][ T2533] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.641846][ T2533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.649242][ T2533] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.656348][ T2533] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.663882][  T690] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  102.691466][  T902] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.699117][  T902] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.711240][  T898] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.718468][  T898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.736954][  T898] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.744518][  T898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.779066][ T2533] veth0_vlan: entered promiscuous mode
[  102.792380][ T2533] veth1_macvtap: entered promiscuous mode
[  102.815321][  T690] usb 6-1: Using ep0 maxpacket: 8
[  102.822048][  T690] usb 6-1: unable to get BOS descriptor or descriptor too short
[  102.837833][  T690] usb 6-1: config 129 has an invalid interface number: 9 but max is 0
[  102.846612][  T690] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  102.858381][  T690] usb 6-1: config 129 has no interface number 0
[  102.864793][  T690] usb 6-1: config 129 interface 9 has no altsetting 0
[  102.877886][  T690] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  102.887568][  T690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.897386][  T690] usb 6-1: Product: syz
[  102.902048][   T36] audit: type=1400 audit(1791167756.494:440): avc:  denied  { cmd } for  pid=2543 comm="iou-wrk-2544" path="socket:[28064]" dev="sockfs" ino=28064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  102.902087][  T690] usb 6-1: Manufacturer: syz
[  102.931900][  T690] usb 6-1: SerialNumber: syz
[  103.177933][  T690] usb 6-1: USB disconnect, device number 12
[  103.338812][   T36] audit: type=1400 audit(1791167756.931:441): avc:  denied  { getopt } for  pid=2567 comm="syz.7.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  103.340789][ T2570] rust_binder: 2567:2570 got reply transaction with no transaction stack
[  103.375265][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.375306][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.382727][ T2570] rust_binder: 2567:2570 transaction reply to 0:0 failed EINVAL, code 0 size 88-24
[  103.406633][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.406670][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.414166][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.421214][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.427616][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.436605][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.443111][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.449870][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.456172][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.462767][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.469169][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.475504][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.482981][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.489635][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.495964][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.503320][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.510040][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.516716][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.523411][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.529983][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.536408][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.543117][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.549377][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.556008][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.563510][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.570262][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.577152][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.585022][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.591440][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.598865][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.606397][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.612879][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.619369][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.626712][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.634921][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.642176][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.648423][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.655064][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.661572][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.668087][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.674668][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.681697][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.688015][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.694620][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.701087][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.707386][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.717576][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.726518][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.738194][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.745297][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.751811][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.758101][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.765096][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.771822][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.778563][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.791241][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.806174][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.813819][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.820312][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.827039][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.833712][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.840280][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.847633][ T2569] rust_binder: Write failure EFAULT in pid:19
[  103.972336][ T1071] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  104.134657][ T1071] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9
[  104.148213][ T1071] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.157794][ T1071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.182205][ T1071] usb 6-1: Product: syz
[  104.187175][ T1071] usb 6-1: Manufacturer: syz
[  104.191998][ T1071] usb 6-1: SerialNumber: syz
[  104.219161][   T31] rust_binder: 2567: undelivered TRANSACTION_ERROR: 29201
[  104.485707][  T564] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  104.647735][  T564] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  104.662653][  T564] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.675195][  T564] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.685506][  T564] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  104.707651][  T564] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  104.716862][  T564] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  104.725285][  T564] usb 8-1: Manufacturer: syz
[  104.736499][  T564] usb 8-1: config 0 descriptor??
[  105.184115][  T564] appleir 0003:05AC:8243.0015: item fetching failed at offset 0/1
[  105.192655][  T564] appleir 0003:05AC:8243.0015: parse failed
[  105.198691][  T564] appleir 0003:05AC:8243.0015: probe with driver appleir failed with error -22
[  105.269559][ T1071] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  105.276281][ T1071] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  105.284297][ T1071] cdc_ncm 6-1:1.0: setting rx_max = 2048
[  105.406285][   T36] audit: type=1400 audit(1791167758.987:442): avc:  denied  { create } for  pid=2596 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  105.478691][ T2574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.482445][   T36] audit: type=1400 audit(1791167759.057:443): avc:  denied  { ioctl } for  pid=2573 comm="syz.5.575" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  105.489640][ T1071] cdc_ncm 6-1:1.0: setting tx_max = 88
[  105.525590][ T2574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.539599][   T36] audit: type=1400 audit(1791167759.057:444): avc:  denied  { read write } for  pid=2573 comm="syz.5.575" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  105.567633][ T1071] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  105.596398][  T564] usb 8-1: USB disconnect, device number 2
[  105.598877][   T36] audit: type=1400 audit(1791167759.057:445): avc:  denied  { open } for  pid=2573 comm="syz.5.575" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  106.049717][ T2631] fuse: Unknown parameter '��0x0000000000000003'
[  106.764197][   T31] usb 6-1: USB disconnect, device number 13
[  106.772872][   T31] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  106.981659][  T564] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  107.112451][   T31] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  107.152690][  T564] usb 8-1: Using ep0 maxpacket: 32
[  107.159123][  T564] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.172939][  T564] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  107.186529][  T564] usb 8-1: config 0 interface 0 has no altsetting 0
[  107.193461][  T564] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  107.202641][  T564] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.216811][  T564] usb 8-1: config 0 descriptor??
[  107.253358][   T31] usb 6-1: device descriptor read/64, error -71
[  107.504928][   T31] usb 6-1: device descriptor read/64, error -71
[  107.540746][   T36] audit: type=1400 audit(1791167761.104:446): avc:  denied  { execute } for  pid=2657 comm="syz.4.592" name="file0" dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.585588][   T36] audit: type=1400 audit(1791167761.104:447): avc:  denied  { execute_no_trans } for  pid=2657 comm="syz.4.592" path="/125/file0" dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.610498][ T2660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.593'.
[  107.628368][ T2636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.589'.
[  107.645409][  T564] usbhid 8-1:0.0: can't add hid device: -71
[  107.652022][  T564] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  107.665478][  T564] usb 8-1: USB disconnect, device number 3
[  107.766581][   T31] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  107.897357][   T31] usb 6-1: device descriptor read/64, error -71
[  108.138903][   T31] usb 6-1: device descriptor read/64, error -71
[  108.209603][   T36] audit: type=1400 audit(1791167761.760:448): avc:  denied  { append } for  pid=2670 comm="syz.7.595" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  108.252605][   T31] usb usb6-port1: attempt power cycle
[  108.296614][   T36] audit: type=1400 audit(1791167761.859:449): avc:  denied  { mounton } for  pid=2674 comm="syz.4.597" path="/" dev="ramfs" ino=28431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  108.434493][ T2689] overlayfs: regular lower layers cannot follow data lower layers
[  108.443679][ T2689] overlayfs: failed to resolve '`�;l�&��um': -2
[  108.451303][ T2689] overlay: Unknown parameter 'fsmagic'
[  108.591619][   T62] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  108.611728][   T31] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[  108.635135][   T31] usb 6-1: device descriptor read/8, error -71
[  108.753762][   T62] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  108.766420][   T62] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  108.774426][   T31] usb 6-1: device descriptor read/8, error -71
[  108.777105][   T62] usb 8-1: config 1 interface 0 has no altsetting 0
[  108.791431][   T62] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  108.800838][   T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.809474][   T62] usb 8-1: Product: syz
[  108.813903][   T62] usb 8-1: Manufacturer: syz
[  108.818691][   T62] usb 8-1: SerialNumber: syz
[  108.834069][ T2687] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  108.841506][ T2687] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  109.034295][   T31] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  109.056392][   T31] usb 6-1: device descriptor read/8, error -71
[  109.199015][   T31] usb 6-1: device descriptor read/8, error -71
[  109.235221][ T2687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.244946][ T2687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.326115][   T31] usb usb6-port1: unable to enumerate USB device
[  109.845351][ T2705] rust_binder: 2704:2705 no such ref 0
[  110.066742][   T62] rtl8150 8-1:1.0: eth1: rtl8150 is detected
[  110.221398][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  110.343859][   T62] usb 8-1: USB disconnect, device number 4
[  110.419920][    T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  110.442871][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.466097][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.492997][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  110.513869][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  110.533255][    T9] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  110.541601][    T9] usb 6-1: Manufacturer: syz
[  110.563715][    T9] usb 6-1: config 0 descriptor??
[  110.918313][ T2737] MTRR 1 not used
[  110.922085][   T36] audit: type=1400 audit(1791167764.464:450): avc:  denied  { ioctl } for  pid=2736 comm="syz.7.605" path="/10/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  110.950849][ T2737] FAULT_INJECTION: forcing a failure.
[  110.950849][ T2737] name failslab, interval 1, probability 0, space 0, times 0
[  110.964548][ T2737] CPU: 1 UID: 0 PID: 2737 Comm: syz.7.605 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71
[  110.964591][ T2737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  110.964609][ T2737] Call Trace:
[  110.964616][ T2737]  <TASK>
[  110.964625][ T2737]  __dump_stack+0x21/0x30
[  110.964669][ T2737]  dump_stack_lvl+0x140/0x1c0
[  110.964704][ T2737]  ? __cfi_dump_stack_lvl+0x10/0x10
[  110.964745][ T2737]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  110.964796][ T2737]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  110.964824][ T2737]  dump_stack+0x19/0x20
[  110.964857][ T2737]  should_fail_ex+0x3c2/0x510
[  110.964890][ T2737]  should_failslab+0xac/0x100
[  110.964925][ T2737]  kmem_cache_alloc_lru_noprof+0x44/0x410
[  110.964954][ T2737]  ? __sock_create+0x3a5/0x810
[  110.964984][ T2737]  ? __sys_socket+0xe1/0x1c0
[  110.965012][ T2737]  ? __d_alloc+0x42/0x8c0
[  110.965036][ T2737]  ? expand_files+0xda/0x6f0
[  110.965069][ T2737]  __d_alloc+0x42/0x8c0
[  110.965094][ T2737]  d_alloc_pseudo+0x23/0xc0
[  110.965118][ T2737]  alloc_file_pseudo+0xde/0x1f0
[  110.965153][ T2737]  ? __cfi_alloc_file_pseudo+0x10/0x10
[  110.965188][ T2737]  ? _raw_spin_unlock+0x45/0x60
[  110.965219][ T2737]  sock_alloc_file+0xbe/0x2b0
[  110.965245][ T2737]  __sys_socket+0x14c/0x1c0
[  110.965274][ T2737]  __x64_sys_socket+0x7e/0x90
[  110.965303][ T2737]  x64_sys_call+0x2608/0x2ee0
[  110.965327][ T2737]  do_syscall_64+0x57/0xf0
[  110.965352][ T2737]  ? clear_bhb_loop+0x50/0xa0
[  110.965385][ T2737]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  110.965417][ T2737] RIP: 0033:0x7f3c4a39e159
[  110.965438][ T2737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.965460][ T2737] RSP: 002b:00007f3c4b2c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  110.965487][ T2737] RAX: ffffffffffffffda RBX: 00007f3c4a625fa0 RCX: 00007f3c4a39e159
[  110.965507][ T2737] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[  110.965532][ T2737] RBP: 00007f3c4a43506b R08: 0000000000000000 R09: 0000000000000000
[  110.965549][ T2737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.965565][ T2737] R13: 00007f3c4a626038 R14: 00007f3c4a625fa0 R15: 00007ffc7b9add98
[  110.965588][ T2737]  </TASK>
[  111.056619][   T36] audit: type=1400 audit(1791167764.493:451): avc:  denied  { create } for  pid=2736 comm="syz.7.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  111.240497][ T2741] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  111.260290][ T2741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.606'.
[  111.290475][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  111.296610][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  111.308664][    T9] usb 6-1: USB disconnect, device number 18
[  111.531849][ T2748] batadv_slave_1: entered promiscuous mode
[  111.568992][ T2752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.610'.
[  111.629719][   T31] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  111.680027][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  111.760479][   T31] usb 8-1: device descriptor read/64, error -71
[  111.842523][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  111.860792][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.873118][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.885694][    T9] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  111.894996][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.903095][    T9] usb 6-1: Product: syz
[  111.907462][    T9] usb 6-1: Manufacturer: syz
[  111.912144][    T9] usb 6-1: SerialNumber: syz
[  111.922845][    T9] usb 6-1: selecting invalid altsetting 1
[  111.931710][    T9] usb 6-1: unit 6 not found!
[  112.011913][   T31] usb 8-1: device descriptor read/64, error -71
[  112.098750][ T2754] overlayfs: failed to resolve './bus': -2
[  112.127246][   T36] audit: type=1400 audit(1791167765.667:452): avc:  denied  { mounton } for  pid=2755 comm="syz.4.612" path=2F3133352FE91F7189591E9233614B dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  112.253134][   T31] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[  112.383073][   T31] usb 8-1: device descriptor read/64, error -71
[  112.623055][   T31] usb 8-1: device descriptor read/64, error -71
[  112.733238][   T31] usb usb8-port1: attempt power cycle
[  112.760727][ T2744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.770339][ T2744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.780511][    T9] usb 6-1: 2:0: failed to get current value for ch 0 (-71)
[  112.794964][    T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  112.807338][    T9] usb 6-1: USB disconnect, device number 19
[  112.827668][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  113.085238][   T31] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  113.114270][   T31] usb 8-1: device descriptor read/8, error -71
[  113.244168][   T31] usb 8-1: device descriptor read/8, error -71
[  113.483033][   T31] usb 8-1: new low-speed USB device number 8 using dummy_hcd
[  113.514392][   T31] usb 8-1: device descriptor read/8, error -71
[  113.653047][  T690] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  113.663890][   T31] usb 8-1: device descriptor read/8, error -71
[  113.773373][   T31] usb usb8-port1: unable to enumerate USB device
[  113.815814][  T690] usb 6-1: unable to get BOS descriptor or descriptor too short
[  113.824453][  T690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.835287][  T690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  113.844608][  T690] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  113.858967][  T690] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  113.868377][  T690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  113.876690][  T690] usb 6-1: Product: syz
[  113.880999][  T690] usb 6-1: Manufacturer: syz
[  113.888223][  T690] uvcvideo 6-1:1.0: Found multiple Units with ID 1
[  114.349787][  T690] uvcvideo 6-1:1.0: Found multiple Units with ID 1
[  114.362109][  T690] usb 6-1: Found UVC 71.01 device syz (8086:0ad2)
[  114.368964][  T690] usb 6-1: No streaming interface found for terminal 2.
[  114.382368][  T690] usb 6-1: USB disconnect, device number 20
[  114.421549][   T36] audit: type=1400 audit(1791167768.951:453): avc:  denied  { bind } for  pid=2766 comm="syz.5.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  114.463088][   T36] audit: type=1400 audit(1791167768.951:454): avc:  denied  { name_bind } for  pid=2766 comm="syz.5.616" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  114.484042][ T2768] Restarting kernel threads ... done.
[  114.509622][   T36] audit: type=1400 audit(1791167768.951:455): avc:  denied  { node_bind } for  pid=2766 comm="syz.5.616" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  114.553100][   T36] audit: type=1400 audit(1791167769.021:456): avc:  denied  { ioctl } for  pid=2767 comm="syz.7.617" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  114.602900][ T2769] FAULT_INJECTION: forcing a failure.
[  114.602900][ T2769] name failslab, interval 1, probability 0, space 0, times 0
[  114.616797][ T2769] CPU: 0 UID: 0 PID: 2769 Comm: syz.5.616 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71
[  114.616831][ T2769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  114.616847][ T2769] Call Trace:
[  114.616870][ T2769]  <TASK>
[  114.616879][ T2769]  __dump_stack+0x21/0x30
[  114.616918][ T2769]  dump_stack_lvl+0x140/0x1c0
[  114.616950][ T2769]  ? __cfi_dump_stack_lvl+0x10/0x10
[  114.616985][ T2769]  dump_stack+0x19/0x20
[  114.617016][ T2769]  should_fail_ex+0x3c2/0x510
[  114.617046][ T2769]  should_failslab+0xac/0x100
[  114.617078][ T2769]  kmem_cache_alloc_noprof+0x42/0x410
[  114.617104][ T2769]  ? security_inode_alloc+0x51/0x230
[  114.617138][ T2769]  ? __cfi_make_kgid+0x10/0x10
[  114.617167][ T2769]  security_inode_alloc+0x51/0x230
[  114.617199][ T2769]  inode_init_always_gfp+0x756/0x9e0
[  114.617230][ T2769]  ? __cfi_shmem_alloc_inode+0x10/0x10
[  114.617271][ T2769]  alloc_inode+0xc5/0x270
[  114.617303][ T2769]  new_inode+0x25/0x1e0
[  114.617335][ T2769]  shmem_get_inode+0x352/0xc10
[  114.617367][ T2769]  __shmem_file_setup+0x173/0x2c0
[  114.617397][ T2769]  shmem_zero_setup+0x90/0x130
[  114.617426][ T2769]  mmap_region+0x1659/0x1d10
[  114.617452][ T2769]  ? __sched_text_start+0x10/0x10
[  114.617480][ T2769]  ? __cfi_mmap_region+0x10/0x10
[  114.617503][ T2769]  ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10
[  114.617531][ T2769]  ? __kasan_check_read+0x15/0x20
[  114.617556][ T2769]  ? __get_unmapped_area+0x406/0x470
[  114.617580][ T2769]  do_mmap+0xa47/0x1370
[  114.617601][ T2769]  ? __cfi_selinux_mmap_file+0x10/0x10
[  114.617631][ T2769]  ? __cfi_do_mmap+0x10/0x10
[  114.617651][ T2769]  ? down_write_killable+0x165/0x2d0
[  114.617680][ T2769]  ? __cfi_down_write_killable+0x10/0x10
[  114.617709][ T2769]  ? do_futex+0x32a/0x510
[  114.617738][ T2769]  vm_mmap_pgoff+0x367/0x4b0
[  114.617760][ T2769]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  114.617782][ T2769]  ? xfd_validate_state+0x68/0x140
[  114.617814][ T2769]  ksys_mmap_pgoff+0xfa/0x1e0
[  114.617835][ T2769]  ? __kasan_check_write+0x18/0x20
[  114.617858][ T2769]  __x64_sys_mmap+0x121/0x140
[  114.617879][ T2769]  x64_sys_call+0x13bf/0x2ee0
[  114.617899][ T2769]  do_syscall_64+0x57/0xf0
[  114.617921][ T2769]  ? clear_bhb_loop+0x50/0xa0
[  114.617952][ T2769]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  114.617981][ T2769] RIP: 0033:0x7f294399e159
[  114.617999][ T2769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.618019][ T2769] RSP: 002b:00007f29423e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  114.618044][ T2769] RAX: ffffffffffffffda RBX: 00007f2943c25fa0 RCX: 00007f294399e159
[  114.618062][ T2769] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000
[  114.618079][ T2769] RBP: 00007f2943a3506b R08: ffffffffffffffff R09: 0000000000000000
[  114.618105][ T2769] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000
[  114.618121][ T2769] R13: 00007f2943c26038 R14: 00007f2943c25fa0 R15: 00007ffec53e65e8
[  114.618143][ T2769]  </TASK>
[  114.938733][  T690] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  115.057264][  T898] bridge_slave_1: left allmulticast mode
[  115.063948][  T898] bridge_slave_1: left promiscuous mode
[  115.069676][  T898] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.077522][  T898] bridge_slave_0: left allmulticast mode
[  115.083385][  T898] bridge_slave_0: left promiscuous mode
[  115.089072][  T898] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.113093][  T690] usb 6-1: Using ep0 maxpacket: 32
[  115.120038][  T690] usb 6-1: too many configurations: 80, using maximum allowed: 8
[  115.129049][  T690] usb 6-1: unable to read config index 0 descriptor/start: -61
[  115.136723][  T690] usb 6-1: can't read configurations, error -61
[  115.202934][ T2786] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.210781][ T2786] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.218523][ T2786] bridge_slave_0: entered allmulticast mode
[  115.225879][ T2786] bridge_slave_0: entered promiscuous mode
[  115.233989][  T898] veth1_macvtap: left promiscuous mode
[  115.239639][  T898] veth0_vlan: left promiscuous mode
[  115.285055][  T690] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  115.296111][ T2786] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.303770][ T2786] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.310923][ T2786] bridge_slave_1: entered allmulticast mode
[  115.318201][ T2786] bridge_slave_1: entered promiscuous mode
[  115.371951][ T2786] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.379068][ T2786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.386425][ T2786] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.393523][ T2786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.417431][  T902] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.425168][  T902] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.435767][  T902] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.443077][  T902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.452668][  T892] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.459794][  T892] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.483399][  T690] usb 6-1: Using ep0 maxpacket: 32
[  115.489142][  T690] usb 6-1: too many configurations: 80, using maximum allowed: 8
[  115.498387][  T690] usb 6-1: unable to read config index 0 descriptor/start: -61
[  115.506130][  T690] usb 6-1: can't read configurations, error -61
[  115.512788][  T690] usb usb6-port1: attempt power cycle
[  115.512853][ T2786] veth0_vlan: entered promiscuous mode
[  115.531596][ T2786] veth1_macvtap: entered promiscuous mode
[  115.853366][  T690] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  115.883902][  T690] usb 6-1: Using ep0 maxpacket: 32
[  115.890874][  T690] usb 6-1: too many configurations: 80, using maximum allowed: 8
[  115.902567][  T690] usb 6-1: unable to read config index 0 descriptor/start: -61
[  115.912576][  T690] usb 6-1: can't read configurations, error -61
[  116.033102][  T564] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  116.043148][  T690] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  116.063512][  T690] usb 6-1: Using ep0 maxpacket: 32
[  116.069513][  T690] usb 6-1: too many configurations: 80, using maximum allowed: 8
[  116.078838][  T690] usb 6-1: unable to read config index 0 descriptor/start: -61
[  116.086781][  T690] usb 6-1: can't read configurations, error -61
[  116.094432][  T690] usb usb6-port1: unable to enumerate USB device
[  116.184426][  T564] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  116.194616][  T564] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  116.204951][  T564] usb 9-1: config 1 interface 0 has no altsetting 0
[  116.213546][  T564] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  116.222884][  T564] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.231066][  T564] usb 9-1: Product: syz
[  116.235388][  T564] usb 9-1: Manufacturer: syz
[  116.240142][  T564] usb 9-1: SerialNumber: syz
[  116.246770][ T2794] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  116.254302][ T2794] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  116.641694][ T2803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.651477][ T2803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.469977][  T564] rtl8150 9-1:1.0: eth1: rtl8150 is detected
[  117.713873][   T45] usb 9-1: USB disconnect, device number 2
[  117.903188][   T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  117.984221][  T892] bridge_slave_1: left allmulticast mode
[  117.989970][  T892] bridge_slave_1: left promiscuous mode
[  118.013137][  T892] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.021050][  T892] bridge_slave_0: left allmulticast mode
[  118.042564][  T892] bridge_slave_0: left promiscuous mode
[  118.053072][  T892] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.092144][   T10] usb 6-1: Using ep0 maxpacket: 16
[  118.104729][   T10] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.126919][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  118.137164][   T10] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  118.147542][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.161690][   T10] usb 6-1: config 0 descriptor??
[  118.217952][  T892] veth1_macvtap: left promiscuous mode
[  118.223753][  T892] veth0_vlan: left promiscuous mode
[  118.289808][   T36] audit: type=1400 audit(1791167772.821:457): avc:  denied  { read } for  pid=2858 comm="syz.8.637" path="socket:[29833]" dev="sockfs" ino=29833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  118.389795][ T2856] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.397140][ T2856] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.404850][ T2856] bridge_slave_0: entered allmulticast mode
[  118.411322][ T2856] bridge_slave_0: entered promiscuous mode
[  118.418544][ T2856] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.426532][ T2856] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.434075][ T2856] bridge_slave_1: entered allmulticast mode
[  118.440726][ T2856] bridge_slave_1: entered promiscuous mode
[  118.510559][ T2856] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.517957][ T2856] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.525335][ T2856] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.532418][ T2856] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.560625][  T892] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.569134][  T892] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.582288][   T10] uclogic 0003:5543:0064.0016: unknown main item tag 0x0
[  118.590665][  T898] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.600428][  T898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.608455][  T564] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  118.608865][  T898] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.616567][   T10] uclogic 0003:5543:0064.0016: unknown main item tag 0x0
[  118.623149][  T898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.637750][   T10] uclogic 0003:5543:0064.0016: unknown main item tag 0x0
[  118.645134][   T10] uclogic 0003:5543:0064.0016: unknown main item tag 0x0
[  118.652526][   T10] uclogic 0003:5543:0064.0016: unknown main item tag 0x0
[  118.660298][   T10] uclogic 0003:5543:0064.0016: No inputs registered, leaving
[  118.676754][   T10] uclogic 0003:5543:0064.0016: hiddev96,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0
[  118.699234][ T2856] veth0_vlan: entered promiscuous mode
[  118.714843][ T2856] veth1_macvtap: entered promiscuous mode
[  118.754063][ T2870] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  118.770425][   T36] audit: type=1400 audit(1791167773.311:458): avc:  denied  { link } for  pid=2868 comm="syz.9.634" name="#1f" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  118.795010][   T36] audit: type=1400 audit(1791167773.311:459): avc:  denied  { rename } for  pid=2868 comm="syz.9.634" name="#20" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  118.834342][  T564] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  118.846963][  T564] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.858680][  T564] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.873045][  T564] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  118.887255][  T564] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  118.896426][  T564] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  118.905846][  T564] usb 9-1: Manufacturer: syz
[  118.911745][  T564] usb 9-1: config 0 descriptor??
[  118.919478][   T36] audit: type=1400 audit(1791167773.451:460): avc:  denied  { execute } for  pid=2871 comm="syz.9.639" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  119.250577][   T36] audit: type=1400 audit(1791167773.781:461): avc:  denied  { associate } for  pid=2892 comm="syz.9.642" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  119.346297][  T564] appleir 0003:05AC:8243.0017: item fetching failed at offset 0/1
[  119.354594][  T564] appleir 0003:05AC:8243.0017: parse failed
[  119.360608][  T564] appleir 0003:05AC:8243.0017: probe with driver appleir failed with error -22
[  119.745058][   T10] usb 9-1: USB disconnect, device number 3
[  120.162195][   T36] audit: type=1326 audit(1791167774.691:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2904 comm="syz.9.646" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd188b9e159 code=0x0
[  120.308888][ T2912] netlink: 68 bytes leftover after parsing attributes in process `syz.4.648'.
[  120.318113][ T2914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'.
[  120.320185][ T2913] netlink: 80 bytes leftover after parsing attributes in process `syz.4.648'.
[  120.670286][ T2889] 9pnet_fd: p9_fd_create_tcp (2889): problem connecting socket to 127.0.0.1
[  120.691890][   T45] usb 6-1: USB disconnect, device number 25
[  120.909189][ T2925] netlink: 4476 bytes leftover after parsing attributes in process `syz.8.652'.
[  120.933069][ T2927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2927 comm=syz.8.653
[  120.946977][ T2927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=2927 comm=syz.8.653
[  120.960078][ T2927] netlink: 'syz.8.653': attribute type 58 has an invalid length.
[  120.990272][ T2929] fuse: Unknown parameter '4{roi���\�`��	}�6y����'#3�/��\�b&�����[���|�]��(
�����J��00000000000000000000'
[  121.003596][   T45] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  121.014973][ T2933] fuse: Unknown parameter '4{roi���\�`��	}�6y����'#3�/��\�b&�����[���|�]��(
�����J��00000000000000000000'
[  121.046406][   T36] audit: type=1400 audit(1791167775.581:463): avc:  denied  { map } for  pid=2937 comm="syz.8.657" path="/10/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  121.073348][   T36] audit: type=1400 audit(1791167775.581:464): avc:  denied  { execute } for  pid=2937 comm="syz.8.657" path="/10/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  121.153196][   T45] usb 6-1: Using ep0 maxpacket: 32
[  121.161241][   T45] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  121.172756][   T45] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.186275][   T45] usb 6-1: config 1 interface 0 has no altsetting 0
[  121.198334][   T45] usb 6-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  121.207793][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.216742][   T45] usb 6-1: Product: syz
[  121.221173][   T45] usb 6-1: SerialNumber: syz
[  121.228481][ T2939] tipc: Started in network mode
[  121.239025][ T2939] tipc: Node identity 4a8031b11a37, cluster identity 4711
[  121.246644][ T2939] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[  121.255662][ T2939] netlink: 'syz.9.656': attribute type 32 has an invalid length.
[  121.261193][ T2954] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  121.272856][   T36] audit: type=1400 audit(1791167775.791:465): avc:  denied  { remount } for  pid=2953 comm="syz.8.661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  121.274710][ T2939] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  121.353072][  T564] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  121.436855][   T36] audit: type=1400 audit(1791167775.971:466): avc:  denied  { write } for  pid=2918 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  121.503761][  T564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.515236][  T564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  121.527360][  T564] usb 1-1: Dual-Role OTG device on HNP port
[  121.536683][  T564] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12
[  121.547036][  T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.559208][    C0] ------------[ cut here ]------------
[  121.564908][    C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[  121.571950][    C0] WARNING: CPU: 0 PID: 2919 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x210/0x3c0
[  121.582337][    C0] Modules linked in:
[  121.586283][    C0] CPU: 0 UID: 0 PID: 2919 Comm: syz.5.649 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71
[  121.598346][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  121.608468][    C0] RIP: 0010:usb_ep_enable+0x210/0x3c0
[  121.614114][    C0] Code: 4d 00 48 c7 c0 a0 61 6d 86 49 c7 c0 c0 61 6d 86 4c 0f 44 c0 48 c7 c7 60 61 6d 86 48 c7 c6 63 75 1d 87 44 89 f2 e8 50 2b 4b fd <0f> 0b e9 4c ff ff ff e8 c4 59 ce fd 49 bc 00 00 00 00 00 fc ff df
[  121.633774][    C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046
[  121.639922][    C0] RAX: 39ce8986012ea200 RBX: ffff888104ec40b0 RCX: ffff88810777cc00
[  121.647943][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  121.656028][    C0] RBP: ffffc900000078a0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a
[  121.664058][    C0] R10: dffffc0000000000 R11: ffffed103edc529b R12: dffffc0000000000
[  121.672093][    C0] R13: ffff888104ec40b8 R14: 0000000000000081 R15: ffff88812765013a
[  121.680121][    C0] FS:  00007f29423e36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  121.689105][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.695730][    C0] CR2: 000020000067a000 CR3: 000000011fcaa000 CR4: 00000000003526b0
[  121.703861][    C0] Call Trace:
[  121.707185][    C0]  <IRQ>
[  121.710170][    C0]  hidg_set_alt+0x138/0xa70
[  121.714770][    C0]  set_config+0x812/0xd10
[  121.719167][    C0]  composite_setup+0x18b0/0x3320
[  121.724226][    C0]  ? __kasan_check_write+0x18/0x20
[  121.729400][    C0]  configfs_composite_setup+0xc6/0x110
[  121.734930][    C0]  dummy_timer+0x2eee/0x4900
[  121.739940][    C0]  ? __cfi_dummy_timer+0x10/0x10
[  121.744964][    C0]  ? timerqueue_del+0xd7/0x130
[  121.749930][    C0]  ? __hrtimer_run_queues+0x2bd/0x8e0
[  121.755480][    C0]  ? __cfi_dummy_timer+0x10/0x10
[  121.760515][    C0]  __hrtimer_run_queues+0x3ae/0x8e0
[  121.765795][    C0]  ? hrtimer_interrupt+0xf30/0xf30
[  121.771077][    C0]  ? read_tsc+0xd/0x20
[  121.775256][    C0]  ? ktime_get_update_offsets_now+0x3c0/0x3e0
[  121.781395][    C0]  hrtimer_run_softirq+0x159/0x560
[  121.786581][    C0]  ? irqtime_account_irq+0x51/0x1c0
[  121.791870][    C0]  handle_softirqs+0x1aa/0x620
[  121.796705][    C0]  __irq_exit_rcu+0x47/0xb0
[  121.801466][    C0]  irq_exit_rcu+0xd/0x30
[  121.805785][    C0]  sysvec_apic_timer_interrupt+0x82/0x90
[  121.811489][    C0]  </IRQ>
[  121.814468][    C0]  <TASK>
[  121.817434][    C0]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  121.823471][    C0] RIP: 0010:text_poke_bp_batch+0x111/0x6e0
[  121.829436][    C0] Code: ea 4c 89 2c 24 4c 89 f0 48 c1 e8 03 0f b6 04 18 84 c0 75 64 4a 63 04 22 48 8d b0 00 00 00 81 48 89 f0 48 c1 e8 03 0f b6 04 18 <84> c0 75 65 44 0f b6 2e 49 8d 7e 0f 48 89 f8 48 c1 e8 03 0f b6 04
[  121.849270][    C0] RSP: 0018:ffffc9000d78f740 EFLAGS: 00000a06
[  121.855421][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  121.863485][    C0] RDX: ffffffff88bab960 RSI: ffffffff812e3f11 RDI: 00000000000030ff
[  121.871601][    C0] RBP: ffffc9000d78f850 R08: 0000000000000001 R09: 000000000d78f700
[  121.879661][    C0] R10: dffffc0000000000 R11: ffffed102000d67f R12: 0000000000000570
[  121.887686][    C0] R13: 000000000000000f R14: ffffffff88babed0 R15: 00000000000007e0
[  121.895765][    C0]  ? vmx_refresh_apicv_exec_ctrl+0x1c1/0x790
[  121.901846][    C0]  ? text_poke_loc_init+0x7d0/0x7d0
[  121.907280][    C0]  ? __kasan_check_write+0x18/0x20
[  121.912533][    C0]  ? mutex_lock+0x97/0x1d0
[  121.917008][    C0]  ? __cfi_mutex_lock+0x10/0x10
[  121.922280][    C0]  ? text_poke_queue+0x109/0x1a0
[  121.927463][    C0]  text_poke_finish+0x34/0x60
[  121.932221][    C0]  arch_jump_label_transform_apply+0x1e/0x40
[  121.938282][    C0]  __jump_label_update+0x38f/0x3b0
[  121.943541][    C0]  jump_label_update+0x395/0x440
[  121.948546][    C0]  static_key_slow_inc_cpuslocked+0x85/0x100
[  121.954592][    C0]  static_key_slow_inc+0x1e/0x30
[  121.959596][    C0]  kvm_create_lapic+0x137/0x550
[  121.964502][    C0]  ? kvm_mmu_create+0x18d/0x2b0
[  121.969432][    C0]  kvm_arch_vcpu_create+0x1b9/0xb90
[  121.974716][    C0]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  121.980327][    C0]  kvm_vm_ioctl+0x7bd/0xc40
[  121.985215][    C0]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  121.990423][    C0]  ? ioctl_has_perm+0x1bc/0x500
[  121.995326][    C0]  ? __asan_memcpy+0x5a/0x80
[  122.000205][    C0]  ? ioctl_has_perm+0x408/0x500
[  122.005246][    C0]  ? has_cap_mac_admin+0xd0/0xd0
[  122.010875][    C0]  ? futex_wait+0x2b8/0x7c0
[  122.015734][    C0]  ? __cfi_futex_wait+0x10/0x10
[  122.020747][    C0]  ? _raw_spin_lock_irq+0x93/0x120
[  122.025926][    C0]  ? selinux_file_ioctl+0x732/0x1480
[  122.031627][    C0]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  122.037252][    C0]  ? __hrtimer_run_queues+0x877/0x8e0
[  122.042965][    C0]  ? do_futex+0x32a/0x510
[  122.047897][    C0]  ? sched_clock_noinstr+0xd/0x30
[  122.052983][    C0]  ? __cfi_do_futex+0x10/0x10
[  122.057727][    C0]  ? __fget_files+0x2bc/0x330
[  122.062470][    C0]  ? bpf_lsm_file_ioctl+0xd/0x20
[  122.067505][    C0]  ? security_file_ioctl+0x3e/0x110
[  122.072750][    C0]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  122.077917][    C0]  __se_sys_ioctl+0x126/0x1b0
[  122.082662][    C0]  __x64_sys_ioctl+0x7f/0xa0
[  122.087329][    C0]  x64_sys_call+0x1878/0x2ee0
[  122.092154][    C0]  do_syscall_64+0x57/0xf0
[  122.096620][    C0]  ? clear_bhb_loop+0x50/0xa0
[  122.101470][    C0]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  122.107454][    C0] RIP: 0033:0x7f294399e159
[  122.112017][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.131784][    C0] RSP: 002b:00007f29423e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.140395][    C0] RAX: ffffffffffffffda RBX: 00007f2943c25fa0 RCX: 00007f294399e159
[  122.148426][    C0] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 000000000000000a
[  122.156713][    C0] RBP: 00007f2943a3506b R08: 0000000000000000 R09: 0000000000000000
[  122.164739][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.172786][    C0] R13: 00007f2943c26038 R14: 00007f2943c25fa0 R15: 00007ffec53e65e8
[  122.180806][    C0]  </TASK>
[  122.183890][    C0] ---[ end trace 0000000000000000 ]---
[  122.189524][    C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED!
[  122.198211][   T62] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  122.201594][ T2935] tipc: Resetting bearer <eth:syzkaller0>
[  122.206249][  T564] usb 1-1: can't set config #1, error -32
[  122.223099][ T2935] tipc: Disabling bearer <eth:syzkaller0>
[  122.298829][   T45] usbhid 6-1:1.0: can't add hid device: -71
[  122.305555][   T45] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  122.314797][   T45] usb 6-1: USB disconnect, device number 26
[  122.374577][   T62] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  122.385602][   T62] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.396569][   T62] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.406358][   T62] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  122.420742][   T62] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  122.429886][   T62] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  122.438036][   T62] usb 9-1: Manufacturer: syz
[  122.443519][   T62] usb 9-1: config 0 descriptor??
[  122.864570][   T62] appleir 0003:05AC:8243.0018: item fetching failed at offset 0/1
[  122.872652][   T62] appleir 0003:05AC:8243.0018: parse failed
[  122.878690][   T62] appleir 0003:05AC:8243.0018: probe with driver appleir failed with error -22
[  123.185057][   T62] usb 9-1: USB disconnect, device number 4