last executing test programs:

2m40.519193223s ago: executing program 2 (id=125):
r0 = socket$inet(0x2, 0xa, 0x5)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)

2m40.519008963s ago: executing program 2 (id=126):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7ffe}]})
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./file0\x00', 0x1, 0x1a)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./mnt/trace_marker\x00', &(0x7f00000001c0), 0x60, &(0x7f0000000200)={'trans=virtio,', {[], [{@smackfshat={'smackfshat', 0x3d, 'tracefs\x00'}}]}})
readlink(&(0x7f0000000000)='./mnt/trace_pipe\x00', &(0x7f0000000040)=""/210, 0xd2)
write(r3, &(0x7f0000000000), 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff})
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r7], 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

2m39.618981816s ago: executing program 2 (id=144):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x18000000)

2m39.504621152s ago: executing program 2 (id=147):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00')
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x16f)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x8)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r3, 0x2000009)
sendfile(r2, r3, 0x0, 0x20000000000006)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
tee(0xffffffffffffffff, r4, 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, {0x306, @multicast}, 0x4, {0x2, 0xa9d7, @loopback}, 'gre0\x00'})
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$peekuser(0x3, r6, 0x118)
fchown(r5, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0xffffffffffffff76, 0x3)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000940)=""/250, 0xfa}, {&(0x7f0000000500)=""/286, 0x11e}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f0000000880)=""/152, 0x98}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xfffffff3}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x22, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4)

2m39.349146759s ago: executing program 2 (id=153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r2, 0x0, 0x4)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x8080000, 0x1, '\x00', 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m39.183187516s ago: executing program 2 (id=156):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001000000084513083000000000000109022404010000a00009040000020300000009210000ff012218000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109dc8102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x11, "352d856e2e10197f1f3295f28229ce05bf"}, 0x0})
syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYRES16=r0], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

2m39.045070543s ago: executing program 32 (id=156):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001000000084513083000000000000109022404010000a00009040000020300000009210000ff012218000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109dc8102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x11, "352d856e2e10197f1f3295f28229ce05bf"}, 0x0})
syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYRES16=r0], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

1m54.918355341s ago: executing program 3 (id=785):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @broadcast}, 0x10)
fsmount(0xffffffffffffffff, 0x0, 0x9b2642dd95d7246c)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)

1m54.860902014s ago: executing program 3 (id=786):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000040)='btrfs\x00', 0x1814018, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) (async)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x80)
preadv2(r1, 0x0, 0x0, 0x2, 0x7, 0x1f)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000140)=@filename='./trace\x00', 0xee00, &(0x7f0000000180)={0x9, 0x1, 0x0, 0x1})
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000540)={[0x3, 0xfff, 0xfffffe01, 0x1, 0x8, 0x6, 0x6, 0xfffffeff, 0xb1, 0x9, 0xd, 0x8, 0x2aed9b48, 0x2, 0x0, 0x10001, 0xc2, 0x0, 0x55f, 0xdbaf, 0x80, 0x80000000, 0xe48, 0x6, 0x5, 0xff, 0x16, 0x80000001, 0x87, 0x4, 0x7, 0x8000, 0x0, 0x2, 0x9, 0xb81c, 0x6, 0x2, 0x5, 0x7, 0x4, 0x9, 0xc05, 0x7, 0x9e, 0x0, 0x80, 0x9, 0x1000, 0x3, 0x7f, 0x4, 0xfffffffe, 0x8, 0x0, 0x1, 0x5, 0x8, 0x3ff, 0x3, 0x4, 0x40, 0x5, 0x10, 0x4, 0x3, 0x262dddf7, 0x3, 0x7fffffff, 0xfffffff1, 0x1, 0x2, 0x40, 0x9, 0x2, 0x7, 0x8000, 0xffffd023, 0x2, 0x101, 0x200, 0xec, 0x3ff, 0x8000, 0x0, 0x2, 0x8, 0x1, 0x10000, 0x9, 0xffff, 0x1, 0x1bdd, 0x8, 0x2, 0x4, 0x4, 0x1, 0x5, 0x1, 0x4, 0x2, 0x32c, 0x1, 0x5, 0xd307, 0x4, 0x2, 0x785, 0xb05d, 0x4, 0x10, 0x8, 0xfffffffd, 0x0, 0x84, 0x7fff, 0x1, 0x0, 0xc000, 0x800, 0x6, 0xffff, 0x1, 0xfffffff7, 0x2, 0x2ff3, 0x3f, 0x3ce9, 0x10000, 0x6, 0x7, 0x8, 0x9, 0xf0ce, 0x7, 0x7, 0x4, 0x0, 0x7, 0xff, 0x10000, 0xa2, 0xe5, 0xffffffff, 0x0, 0x1000, 0x8, 0x7fff, 0x7, 0x5, 0x1, 0x5, 0x9, 0xfffffffe, 0xfffff0fc, 0x1, 0xfffffffb, 0x8000, 0x9ba8, 0x8, 0xbfd9, 0xe, 0x9, 0x3482, 0xd, 0x4, 0x1, 0x56b, 0x2, 0x0, 0x8, 0xb, 0xffff, 0x9, 0xa16d, 0x6, 0x401, 0x4, 0xc3b, 0x7, 0x7, 0x5, 0x4, 0x200, 0x1000, 0x401, 0x8, 0x7, 0x8, 0x7, 0x10001, 0xfdf8, 0x7fffffff, 0xb6, 0x4, 0x8, 0x3, 0x8, 0x5, 0x16b10bbb, 0x8, 0xaa1, 0x3, 0x8, 0x3, 0x194, 0x3ff, 0x2, 0xfff, 0x3, 0x8, 0x1, 0x5, 0x3, 0x7, 0x9, 0x200, 0xb, 0xfff, 0x3, 0x6, 0x4, 0x401, 0x9, 0x6, 0xa, 0x0, 0x261, 0x8, 0x3, 0x1d4, 0x6, 0x1, 0x24f1, 0xfffffffe, 0x7ff, 0x100, 0x1, 0xb, 0x0, 0xd53, 0x8, 0x2, 0x7, 0x1, 0x9, 0x8001, 0x4, 0x3, 0xea, 0x200, 0x0, 0x2, 0x3, 0xeab3, 0xffffff00, 0x3, 0x0, 0x9, 0x200, 0xa, 0x1, 0x8, 0x879, 0xfffffffa, 0x1, 0x0, 0xe633, 0x40, 0x200, 0x4, 0x1, 0x6, 0x0, 0xb5, 0x5, 0x6, 0xfffffff7, 0x1d, 0x0, 0xf, 0x1, 0x3, 0x9, 0x560f, 0xe, 0x7ff, 0x1, 0x8000, 0x2, 0x0, 0xe7, 0x5, 0x0, 0x98f, 0xffffff26, 0x8000, 0x6, 0xfff, 0x2d, 0x9de4, 0x5, 0x7, 0x4, 0xf148, 0x2, 0xff, 0x9, 0x3, 0x2, 0x7, 0x4, 0x3000, 0x251, 0x1000, 0x4, 0x1, 0xfffffffb, 0x8000, 0x9, 0xbe0, 0xd, 0x203030ba, 0x5bab317f, 0x0, 0x40000000, 0x3c, 0x8, 0x9c, 0x7b9, 0x2, 0x7bcc, 0x9, 0x0, 0xffff, 0x4, 0x2916, 0x1, 0xff, 0x93, 0x4, 0x0, 0x4, 0x10001, 0x0, 0x10, 0xe, 0x7, 0xc, 0xf, 0xe, 0x5, 0x5, 0x0, 0x401, 0xfffffffe, 0x3, 0x1b4, 0x3, 0xfff, 0x8000, 0x7, 0x7fff, 0x6, 0xb, 0x0, 0x6, 0x6, 0x6, 0x9, 0x8, 0x6, 0x8a, 0x3e86, 0x8001, 0x7, 0xfffffff7, 0x7, 0x2, 0x5, 0x8, 0x9, 0xffffffff, 0x3, 0x4, 0x7fff, 0x2c, 0xffffffff, 0x4, 0x6, 0x8, 0x6, 0x5a60, 0x0, 0x7ff, 0x7, 0xffff, 0x1, 0x53, 0xffffffff, 0x6, 0x5, 0x80000000, 0x7, 0x0, 0xfffffffe, 0x8a, 0x4, 0x1, 0x4, 0x10, 0x7, 0x6, 0x1, 0xfffffffb, 0x40000, 0x1, 0x10001, 0x0, 0x9, 0x4, 0xf, 0x9, 0x8, 0x9, 0x5, 0x0, 0x40, 0x9, 0x8, 0x29, 0x7, 0x1, 0x0, 0xfffffffd, 0x7, 0x1, 0x1, 0x7ff, 0x2, 0xfffffffc, 0x5e44, 0x1, 0xfe, 0x0, 0x80000001, 0xc, 0x8, 0x8000, 0x7, 0x5, 0x7ff, 0x4, 0x4, 0x3, 0xb, 0x5, 0x3, 0x33d9, 0x1ff, 0x2, 0x6, 0x1, 0x1cbdb308, 0x5, 0x5, 0x7, 0x7ff, 0x1, 0x1, 0x6, 0x8, 0x80000001, 0xde, 0x2, 0x9, 0x8000000, 0x1c000000, 0xe1, 0xa, 0x1000, 0x2, 0x81, 0xfffffff6, 0x1, 0xe, 0x7, 0x10001, 0x7fff, 0x7, 0xffffffff, 0x1, 0x80000001, 0x1, 0x7, 0x72d2058b, 0xb, 0x1, 0x10001, 0x3, 0x5, 0xffffff80, 0x61, 0x1, 0xd, 0x0, 0x8, 0x48, 0x4, 0x2, 0x7fff, 0x10000, 0x0, 0xfffffffc, 0x80010001, 0x80000000, 0xffff, 0x8000, 0x2, 0x2, 0x8, 0xffffffff, 0x7, 0x3, 0x9, 0xff, 0xffffffff, 0x5, 0xe, 0x0, 0x7f, 0x7, 0x2, 0x8e, 0x6, 0x200, 0x6, 0x7, 0x3, 0x7, 0x2, 0xff, 0xfd37, 0x8, 0xfff, 0x5, 0x466, 0x2, 0x7, 0x3, 0x7, 0x5, 0x7, 0xd0, 0x400, 0x6, 0x6, 0x430, 0x7, 0x5, 0x10000, 0x1, 0x1000, 0x5, 0x5, 0x6, 0x1, 0x6, 0x76, 0x3, 0x7fff, 0x7a1b, 0x7ff, 0x200, 0xba79, 0xff, 0x8001, 0x9, 0x3, 0x40, 0x1000, 0x400, 0x7, 0x6, 0x15e3, 0xfffffffb, 0x7fff, 0xfffffffa, 0x7, 0x401, 0x4, 0x8, 0xb54, 0x1, 0x1, 0xc, 0x9ed0, 0x5, 0xb, 0x7ff, 0x5, 0xd, 0x0, 0x8, 0x0, 0x2, 0x8, 0x2, 0xbf3, 0xfffffffa, 0x6, 0x97, 0x10001, 0x2, 0xa71, 0x813, 0x9, 0x3, 0x2, 0x2, 0x5, 0x4, 0xe, 0x2c, 0x4, 0x5, 0x8000, 0xa, 0x4, 0x9, 0xe5, 0x9, 0x6, 0x4, 0x3ff, 0x2a8, 0xa, 0x1, 0x6, 0x9, 0x0, 0x8d5b, 0x5, 0x800, 0x10001, 0x124, 0x7, 0x3, 0x7, 0x0, 0x1, 0x3, 0x101, 0x6d5602dc, 0x8, 0xfffffffa, 0x80000001, 0x3, 0x8, 0x4, 0x6, 0x7, 0x0, 0x80000001, 0xfffff800, 0x5, 0x0, 0x1, 0x85a3, 0x7, 0x8001, 0x2, 0x9, 0x0, 0x401, 0x7, 0x1ff, 0x6e84, 0x6bc6, 0x9, 0x4, 0x2, 0x9, 0xffffffff, 0x2, 0xf, 0x1, 0x6, 0x8000, 0x1, 0x2, 0x3ff, 0x8d, 0x4, 0x27, 0x2, 0x7ff, 0xffff, 0x8, 0xe0, 0x3, 0xfffffffe, 0x6, 0x66a, 0x9, 0x7, 0xfffffffe, 0x5, 0x0, 0xdf2, 0xb829, 0x8, 0x0, 0x6, 0x9, 0xffffff1b, 0x2, 0xffffffb7, 0x7, 0x7, 0x0, 0xfff, 0x4, 0x25fb17d, 0xc534, 0x5, 0x5, 0x800, 0xc5, 0x7, 0x5fcf9756, 0x6, 0x66, 0x2, 0x31, 0xffff8b6c, 0x4, 0xf, 0x15bf, 0x0, 0x4, 0x6, 0x6, 0x7, 0x7, 0x5, 0x2, 0x4, 0x2, 0xfffeffff, 0xf28, 0x7fffffff, 0xb, 0x4e5, 0x0, 0x40, 0x2, 0x7, 0x1, 0x9, 0x1, 0x401, 0x4, 0x2, 0x3, 0x5, 0x0, 0xfffffc01, 0x4, 0x76, 0x3, 0x38f, 0x8, 0xffffffff, 0x5, 0x9, 0x62a, 0x4, 0x1855, 0x3ff, 0x2, 0xff, 0x7, 0x2, 0x80000001, 0x9, 0xffff05c2, 0x2, 0xfffffffa, 0x6b, 0x1, 0x3, 0x9, 0x6, 0xffffffff, 0x8, 0x3, 0x9, 0x80000000, 0xa, 0xc76d, 0x911, 0x8da, 0x7fff, 0x4246, 0x4, 0x0, 0x7, 0x3, 0x1, 0x3ff, 0xb1, 0x0, 0x1, 0x6b7d, 0x7, 0xffffff2b, 0x8cc, 0x3, 0xd, 0x2, 0x0, 0xd, 0x101, 0x8, 0x81, 0xe1, 0x5, 0x7f, 0xde90, 0x3, 0x7fffffff, 0x6, 0x9, 0x9, 0xff, 0x40, 0xb040, 0xfffffffa, 0x5, 0x7, 0x2, 0x7, 0x272, 0x80000000, 0x17, 0x3ff, 0x5, 0xffff1b72, 0xc, 0x8d, 0x2, 0x8, 0x1, 0x8, 0xfffffffc, 0x6, 0x7, 0x400, 0xfffffff8, 0xc3, 0xc2, 0x8000, 0xe8, 0x7, 0x9, 0xe, 0x69725a27, 0x8, 0x9, 0x2, 0xf02, 0xf742, 0x7ff, 0x800, 0x2, 0xba, 0x0, 0x8, 0x2, 0x5a3, 0x5, 0x3, 0x4, 0x6f, 0x0, 0x914, 0x3ff, 0x5, 0x7ff, 0x5, 0x4007, 0x10000, 0x4, 0x4, 0x9000000, 0x81, 0x9, 0xd611, 0x4, 0xc4, 0x1, 0x5, 0x5ba3396e, 0x7, 0x7, 0x5, 0x5, 0x6, 0x6, 0x9, 0x10001, 0xab, 0x8000, 0xfff, 0x7, 0x3ff, 0xfd, 0xfffffffa, 0x7, 0xc, 0x7, 0x400, 0x40, 0x5cd, 0x869, 0x7, 0x2ee4, 0x0, 0x68f, 0x9, 0x0, 0x5, 0x8, 0x10000, 0x2, 0x9, 0x6, 0x1, 0x1000, 0x400, 0x80000000, 0xffffff81, 0x6, 0x9, 0x800, 0xeae, 0xf, 0x9, 0x28, 0x6, 0x9, 0x100000, 0x1, 0x80000001, 0x3, 0x9, 0x7, 0xaf73, 0xb, 0xa0, 0x4d, 0x4, 0xaec, 0x8, 0xfffff801, 0x4, 0x3, 0x7, 0x7fffffff, 0x2d1455dc, 0x1000, 0x5, 0x4, 0x3, 0x5, 0x2, 0x4, 0xffffffff, 0x2, 0x9, 0x100, 0x96, 0x3ff, 0x6e9a, 0x7b07, 0x7, 0x0, 0x8, 0x9, 0xfffffff9, 0x0, 0x7, 0x7, 0x0, 0x9, 0x2, 0x8000, 0x1000, 0x1, 0x2, 0x803, 0x7ff, 0x442, 0x5, 0x10, 0x80000000, 0xfff, 0x3, 0x4, 0x3, 0x8, 0x4, 0x3, 0xe, 0x9, 0x1, 0x800, 0x2, 0x4, 0xbc, 0x75b06d85, 0x5]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240, 0x0, 0x0, 0x5})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
write(r3, &(0x7f0000000500)=',1', 0x2) (async)
write(r3, &(0x7f0000000500)=',1', 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000270001000000000000000000040201"], 0x14}], 0x1, 0x0, 0x0, 0x404c080}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = openat(r3, &(0x7f0000000080)='./file0\x00', 0xe08c3, 0xa4)
write$P9_RVERSION(r7, 0x0, 0x0) (async)
write$P9_RVERSION(r7, 0x0, 0x0)

1m54.860596464s ago: executing program 3 (id=787):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x1ff, 0x2000000, 0x1150, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x40)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x510fe7f7cad1750)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x80fd})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x40005}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xb06f}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0x10, &(0x7f0000000400)={&(0x7f0000000300)={0x1, 0x23, 0x0, {0x77359400}, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x3}, 0x8, 0x2, 0x0, 0x0, "767e715656da9958"}}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1m54.860232124s ago: executing program 3 (id=788):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', <r1=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="e60efa80ce0aacfb8bbc60e5035cae65650e29a72342e544", 0x18}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x4008844) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b80)={&(0x7f00000046c0)=ANY=[@ANYBLOB='P+\x00\x00', @ANYRES16=0x0, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800030000000000080003004d546c180800010003987bf508840a15748f1b", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="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"], 0x2b50}, 0x1, 0x0, 0x0, 0x4010}, 0x44000)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000080)=0x30003, 0x4) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x65}, 0x1c)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @local}, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x1})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
r7 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r7, 0x0, 0x9}, &(0x7f0000000080)=ANY=[@ANYBLOB='unc=raw hash=md5-generic\x00'/77], 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x8d0)
ioctl$KVM_NMI(r6, 0xae9a) (async)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
io_setup(0x80000000, &(0x7f0000000040)) (async)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8) (async)
ptrace$setsig(0x4203, r8, 0x3, &(0x7f0000000280)={0x1f, 0x3, 0x5})
sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4d040, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) (async)
recvmmsg(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40010162, 0x0)

1m54.860144544s ago: executing program 3 (id=789):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x120000, &(0x7f00000001c0)={[{@volatile}, {@xino_off, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
dup3(r0, r2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000004, 0x10, r1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0xfeea)

1m54.799139277s ago: executing program 3 (id=790):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x8, 0x80000000)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15)

1m38.374925311s ago: executing program 33 (id=790):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x8, 0x80000000)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15)

1m31.992267013s ago: executing program 4 (id=1010):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000007b0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0)

1m31.913882906s ago: executing program 4 (id=1013):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x12b)
write(r0, &(0x7f0000000200)='of', 0x2)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0xdddd0000, 0x11a000})
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x2000028, 0x0)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000800)=[@code={0xa, 0x18, {"b81000c0fe8b00"}}], 0x18})
r5 = epoll_create(0x3)
ppoll(&(0x7f0000000200)=[{r5, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x3, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x2, 0xa7, {0x7, 0x25, 0x1, 0xc, 0x75}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3f, 0x4, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x81, 0x4, 0x7, 0xc8}]}, {{0x9, 0x5, 0x82, 0x9, 0x1af, 0x2, 0x1, 0x8, {0x7, 0x25, 0x1, 0x0, 0xf, 0xc1cd}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

1m31.341107283s ago: executing program 4 (id=1025):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x204}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1m31.309569614s ago: executing program 4 (id=1026):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000061000014001080800418e00000004fcff", 0x58}], 0x1)

1m31.171021791s ago: executing program 4 (id=1028):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0xf8, 0x0, 0x7fff0000}]})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000005000000002d0000ff010000000008000000000000165bf429982afe5e8d4ccd50e5f386762515fdf252c8226ff5faa41907d7ccb812365caf3180a4072062139a76b632381ad2619354b20247f185d99133fe60daa0e89eb24b1a2d0bc5a52acf1f08a74507de2abe510dbf1ee8c0a96c00ccdf742bcd7c8a6ce7446e16b7a840c8d085c782b194d0adbdbd1b55a8bf4684705d3877195826b649dcd9fa2f458e68e6d4416b5735b6127425739c567ea1c2814e8746a43bb00d87771a82c7a277ca8842c72c388180f71ba665dd8e97fa8b473faff90066605341d07bb266521afea2d19506bc1e8c"], 0x18}}], 0x1, 0x8004)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
r2 = fcntl$dupfd(r0, 0x0, r0)
lremovexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00')
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x1e)

1m31.157446932s ago: executing program 4 (id=1029):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d00, &(0x7f0000000900)="000001000000000000000100")
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x3f00000000000000)
r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f00000001c0))
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r2, 0x0, 0x8a)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=unix'])
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000000), 0xa)
fchdir(r4)
rmdir(&(0x7f0000000080)='./bus\x00')

1m14.875726319s ago: executing program 34 (id=1029):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d00, &(0x7f0000000900)="000001000000000000000100")
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x3f00000000000000)
r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f00000001c0))
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r2, 0x0, 0x8a)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=unix'])
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000000), 0xa)
fchdir(r4)
rmdir(&(0x7f0000000080)='./bus\x00')

43.127123563s ago: executing program 5 (id=1700):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0xd0fe0000, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

43.126765623s ago: executing program 5 (id=1702):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x70, 0x51, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0x3, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x650, 0x4, 0x7, 0x2, {0x8, 0x25, 0x1, 0x2, 0xf, 0x6, 0x3}}}}}}}}]}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a74000000060a030400000000000000000a00000a0900010073797a3100000000400004803c0001800a00010071756575650000002c000280060002400fea000006000140000100000600034000010000060002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1400000010000100000000ff0f0000000000000a20000000000a01040000000000000000010000000900010073797a30000000004c000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a3000000000100008800c00014000000000000007ff140000000a00000a"], 0x94}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x141a82, 0x88)
sendfile(r5, r5, 0x0, 0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070025bd7000fddbff2505000000180001801400020073797a5f74756e0000000000000015000c0003800400038004000100080005001027"], 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x6e22, 0x400009, @empty, 0x8}, 0x1c)
r6 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0xa8041, 0x0)
ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000580))
listen(r0, 0x0)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e22"], 0x54}}, 0x20044010)

42.550282443s ago: executing program 5 (id=1712):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1) (async)
readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff)

42.498868075s ago: executing program 5 (id=1714):
inotify_init()
open(&(0x7f0000000180)='file0\x00', 0x108242, 0x78e22799f4a46fa9)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0xb)
r2 = openat(r1, &(0x7f0000000140)='file0\x00', 0x410a00, 0x40)
read(r2, &(0x7f0000000000), 0x12)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x202000, 0x2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000001c40)={&(0x7f0000001880)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000880)={0xc1, 0xe, &(0x7f0000000480)})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340)="7421fa037200e900000000003208fb67f558f7fec39d3cba64791755e8e39a582cac0eeb10dbad4ddb4bedae491902123ce73d604f99a53d16938e76e496d17997ab95bcb098d092235648ba3cc6f4e56845b6d40a168403bc227417d10663d061df21843c88ff275dd768fd495e754cca933a4bbcf0a41ccd85c1950edd37e33effdc717337ac5a6f1267e521dd6062daaf94fe984c57772072e397c7338f71941c000000000000000000", 0xab)
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x3000007, 0x40011, r1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x1b8}, 0x10000)

41.931149991s ago: executing program 5 (id=1727):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) (async)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), 0x4) (async)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="14030000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048091) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
syz_clone3(&(0x7f0000003440)={0x88000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1}, 0x58)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f0000000180)={0x10000001})
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x800000000000, 0x0, 0x0, 0x2, 0x1, 0x4}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async)
write$selinux_load(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf9081e0000005345204c5e6e75"], 0x2000) (async)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x15, 0x1, 0x4, 0x7, 0x3, 0x5}, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x30048007}, 0x20000040)
ptrace(0x10, r0)
ptrace$setregs(0xf, r0, 0xba, &(0x7f0000000080)="ef5f0f5fb96edcf382510cdb2bd260673866d0051647c299d534ba") (async)
sched_setattr(r0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x8001, 0xd4, 0x8, 0x9, 0x6, 0xdfffffff, 0x5}, 0x0) (async)
sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) (async)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) (async)
ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000080)={0x62, 0x3, 0x3, 0x8}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121300, 0x0) (async)
writev(r1, &(0x7f0000000100), 0x0)

41.858736515s ago: executing program 5 (id=1729):
modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file1\x00', 0xffffffffffffff9c)
sendto$inet6(r0, 0x0, 0xae, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c)
close_range(r0, r0, 0x0)
getresgid(&(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0, &(0x7f00000002c0))
pipe2(&(0x7f0000001cc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}})
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
lstat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)) (async)
lstat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=0x0, @ANYBLOB="040001000000000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0800fe47", @ANYRES32=r8, @ANYBLOB="10000600000000002000070000000000"], 0x64, 0x3) (async)
setxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=0x0, @ANYBLOB="040001000000000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0800fe47", @ANYRES32=r8, @ANYBLOB="10000600000000002000070000000000"], 0x64, 0x3)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d4b420a34101ff", 0x9, 0x20000000, 0x0, 0x0)
syz_clone(0x200, 0x0, 0xfffffffffffffc9f, 0x0, 0x0, 0x0) (async)
r9 = syz_clone(0x200, 0x0, 0xfffffffffffffc9f, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r11) (async)
r12 = dup(r11)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c010800060400"], 0x32) (async)
write$tun(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c010800060400"], 0x32)
ptrace(0x10, r9)
ptrace$setregs(0xd, r9, 0x20000000002, &(0x7f0000000040)) (async)
ptrace$setregs(0xd, r9, 0x20000000002, &(0x7f0000000040))
modify_ldt$write(0x1, &(0x7f0000000000)={0x10001, 0xffffffffffefffff, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
r13 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00')
preadv(r13, &(0x7f00000004c0), 0x0, 0x7, 0x0)
ptrace$cont(0x21, r9, 0x80000001, 0x4)

25.134399976s ago: executing program 35 (id=1729):
modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file1\x00', 0xffffffffffffff9c)
sendto$inet6(r0, 0x0, 0xae, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c)
close_range(r0, r0, 0x0)
getresgid(&(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0, &(0x7f00000002c0))
pipe2(&(0x7f0000001cc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}]}})
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
lstat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)) (async)
lstat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=0x0, @ANYBLOB="040001000000000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0800fe47", @ANYRES32=r8, @ANYBLOB="10000600000000002000070000000000"], 0x64, 0x3) (async)
setxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=0x0, @ANYBLOB="040001000000000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0800fe47", @ANYRES32=r8, @ANYBLOB="10000600000000002000070000000000"], 0x64, 0x3)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d4b420a34101ff", 0x9, 0x20000000, 0x0, 0x0)
syz_clone(0x200, 0x0, 0xfffffffffffffc9f, 0x0, 0x0, 0x0) (async)
r9 = syz_clone(0x200, 0x0, 0xfffffffffffffc9f, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r11) (async)
r12 = dup(r11)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c010800060400"], 0x32) (async)
write$tun(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c010800060400"], 0x32)
ptrace(0x10, r9)
ptrace$setregs(0xd, r9, 0x20000000002, &(0x7f0000000040)) (async)
ptrace$setregs(0xd, r9, 0x20000000002, &(0x7f0000000040))
modify_ldt$write(0x1, &(0x7f0000000000)={0x10001, 0xffffffffffefffff, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
r13 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00')
preadv(r13, &(0x7f00000004c0), 0x0, 0x7, 0x0)
ptrace$cont(0x21, r9, 0x80000001, 0x4)

4.477063439s ago: executing program 7 (id=2166):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001a"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4.44626193s ago: executing program 7 (id=2167):
socket(0x1e, 0x6, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000100), 0x9, 0xa000)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f00305d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710d74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdf51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe400"/237, 0xed)

4.371110044s ago: executing program 7 (id=2168):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x6d5)
syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000002380)=ANY=[@ANYBLOB="12010102000000106307302040000102030109027000030106307f0904000000010100000a240104001a0002010207240802600b00092403060203060206090401001801020000090480d4e54aa95e56b187b31db8010f01010002000801072501040804000904"], 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)

3.414526719s ago: executing program 7 (id=2180):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x109700)
r2 = dup3(r1, r0, 0x80000)
read$FUSE(r2, 0x0, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x6, 0x0, [{0x80000019, 0x3, 0x2, 0x401, 0x1, 0xdb, 0x650}, {0x80000001, 0x2a709463, 0x4, 0x3ff, 0x4, 0xfffff608, 0x5}, {0x7, 0x1da008e7, 0x1, 0x58, 0x210, 0x1e, 0x6}, {0x2, 0x2, 0x1, 0x1, 0x3, 0x6, 0x3}, {0xd, 0x6, 0x2, 0x7ae, 0xee, 0x5, 0x7}, {0x7, 0xffffffff, 0x6, 0x10001, 0xe, 0x9c, 0x1ff}]})

3.332052743s ago: executing program 7 (id=2181):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x12b)
write(r0, &(0x7f0000000200)='of', 0x2)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0xdddd0000, 0x11a000})
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x2000028, 0x0)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000800)=[@code={0xa, 0x18, {"b81000c0fe8b00"}}], 0x18})
r5 = epoll_create(0x3)
ppoll(&(0x7f0000000200)=[{r5, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0xc, 0x0, 0xfec00000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x3, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x2, 0xa7, {0x7, 0x25, 0x1, 0xc, 0x75}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3f, 0x4, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x81, 0x4, 0x7, 0xc8}]}, {{0x9, 0x5, 0x82, 0x9, 0x1af, 0x2, 0x1, 0x8, {0x7, 0x25, 0x1, 0x0, 0xf, 0xc1cd}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

1.816697864s ago: executing program 6 (id=2194):
r0 = socket(0x23, 0x3, 0x3)
r1 = epoll_create1(0x0)
chroot(&(0x7f0000000000)='./file0\x00')
ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800, 0x0, 0x400})
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x200000)
readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000a80)=""/256, 0x100}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000340)=ANY=[], 0x30)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

1.768441197s ago: executing program 6 (id=2195):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, &(0x7f0000000880)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000002380)=ANY=[@ANYBLOB="12010102000000106307302040000102030109027000030106307f0904000000010100000a240104001a0002010207240802600b000924030602030602060904013f0001020000090480d4e54aa95e56b187b31db8010f0101000200080107250104"], &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0})

1.612589264s ago: executing program 1 (id=2197):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0))
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x120401, 0x0)
ioctl$TIOCNXCL(r5, 0x540d)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x3, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x0, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1.558226567s ago: executing program 1 (id=2198):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, '6Fu^', {0x3, 0x1, 0x0, 0x81, 0x6, 0x2, 0xa8}})
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}])
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ec)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000000)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$TUNSETIFF(r3, 0x41009432, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000000)={0x26000, 0x209000})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r11)
sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x28, r12, 0x1, 0x70bd28, 0x25dfdbf8, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000000)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)}, 0x20004011)
fcntl$setown(r11, 0x8, 0x0)

1.27232215s ago: executing program 0 (id=2203):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c0011"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.207113433s ago: executing program 0 (id=2204):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x6d5)
syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000002380)=ANY=[@ANYBLOB="12010102000000106307302040000102030109027000030106307f0904000000010100000a240104001a0002010207240802600b00092403060203060206090401001801020000090480d4e54aa95e56b187b31db8010f01010002000801072501040804000904"], 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)

1.195621354s ago: executing program 6 (id=2205):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000840)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232332234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaae018c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f0380931423fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533a3e6afb7d99e6c4f7f7db367e29a257dc6a2c90df88259315967dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cde13ea7b60200a709999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e557b960d14563582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17632976de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf911ae19520460c7c6d020274f3ac65580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca4000040000000000007263a8f02baf452a48196de3fbf9196669c8cc62876c53082d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195", 0x55d, r0)
r2 = socket$inet6(0xa, 0x802, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x3e, 0x0, &(0x7f0000000300))
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1, 0x500}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0)
keyctl$get_keyring_id(0x0, r0, 0x100)
syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[], 0x0)

961.016845ms ago: executing program 1 (id=2206):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="550000007b007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0)

871.102269ms ago: executing program 1 (id=2207):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a)
readlink(&(0x7f0000000000)='./mnt/trace_pipe\x00', &(0x7f0000000040)=""/210, 0xd2)
write(r3, &(0x7f0000000000), 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff})
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r7], 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

691.743848ms ago: executing program 0 (id=2208):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000002180)="000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

638.84037ms ago: executing program 6 (id=2209):
mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000), 0x8c03, &(0x7f0000000100)=ANY=[@ANYBLOB])
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
getresuid(&(0x7f0000000280)=<r0=>0x0, &(0x7f00000002c0), &(0x7f00000003c0))
getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) (async)
getresuid(&(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500), &(0x7f0000000540))
mount$overlay(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000680)={[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r1}}]}) (async)
mount$overlay(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000680)={[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r1}}]})
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/68, 0x44}], 0x1, 0x5c, 0x65a)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x16, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a90000000300060000000000020000000000000100000000000000000200010001000000000019fd00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10)
socket$netlink(0x10, 0x3, 0x9) (async)
r5 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0xc, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
modify_ldt$write2(0x11, &(0x7f0000000100)={0xb34, 0x100000, 0x2000, 0x1}, 0x10)
syz_clone(0x8a040080, 0x0, 0xffffffffffffff41, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4e20, 0x0, 0x4e22, 0xfff8, 0x2}, {0xffffffff, 0xff7fffffffffffff, 0x0, 0x10001, 0x5, 0x8000000000000001, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0x2, 0x0, 0x20000000000000}, 0x24c7, 0x6e6bb2, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x2, 0x3, 0xfc, 0x7, 0x3, 0x200000}}, 0xe8)
socket$inet6(0xa, 0x2, 0x8b) (async)
r9 = socket$inet6(0xa, 0x2, 0x8b)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x8000000000000003, 0x200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0xffffffffffffbffe}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x2, 0x0, 0x0, 0x9, 0x3}}, 0xe8)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffc}, 0x1c)
ioctl$TUNSETIFF(r3, 0x400454da, 0x0)

583.117803ms ago: executing program 0 (id=2210):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1, 0x0, 0x4000}, 0x0)

582.724833ms ago: executing program 0 (id=2211):
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x200000c, 0x40010, 0xffffffffffffffff, 0x20000000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0xe, 0x0, 0x8, 0x0, 0x0, 0xff, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xfb, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x5000, 0xd000, 0x0, 0xb4, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0x4}, {0xeeee8000, 0xffff1000, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x5, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x40000000000, 0x0, 0x0, [0x0, 0x0, 0x4, 0x40]})
modify_ldt$write2(0x11, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
r2 = fsmount(r1, 0x1, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x6, 0x81, 0x9, 0xd, 0x40, "31e1627d60a95fe29aad0d68f264f03e632fc2", 0x7, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$KDSETMODE(r2, 0x4b3a, 0x1)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x217)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
syz_open_procfs(0x0, 0x0)
r7 = epoll_create1(0x0)
epoll_pwait2(r7, &(0x7f0000000140)=[{}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x54000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd7, 0x0, 0xd7, 0xa, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x7000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xbf, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x2, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0x7000, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0x1110fffd, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0xe000, [0x3, 0x400, 0x7, 0xc5]})

553.220274ms ago: executing program 0 (id=2212):
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x40200200, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r0, 0x1, 0xfffffffff0000000, 0xfffffffffffff000})
ftruncate(r0, 0xffff)
fcntl$addseals(r0, 0x409, 0x7)
r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x0, 0x0, 0x8000})
write$khugepaged_scan(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="00300400f3b041da46582b000e6e987511"], 0x0, 0x0, 0x0, 0x0, 0x0})
fsopen(0x0, 0x1)
syz_usb_control_io$hid(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005)
syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000ec0)={0x0, 0x16, 0x5, "5ffcac73d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0xe0000014})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x1d13, 0x10c39, 0x1, 0x10e}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc15b, 0x400, 0x2, 0x209}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ed6, 0x800, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92af, 0x80, 0x3, 0x152}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5272, 0x8, 0x2, 0x2f8}}], 0x4, &(0x7f0000002200)={0x2e, 0x46, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x0, 0x686, 0x0, &(0x7f0000001200)=@buf_4k="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"}}, &(0x7f0000002280))

494.930257ms ago: executing program 6 (id=2213):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14800080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x80)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x352f}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xca}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x10)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x158, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x4, 0x4}, {0x7a, 0x1}, {0xc0, 0x3}, {0x4, 0x4}, {0x5, 0x4}, {0x8}, {0x9, 0x1}], "3cb572b6acc2a99a"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xf, 0x7}, {0xf, 0x3}, {0x2, 0x7}, {0x10, 0x3}, {0x80, 0x5}, {0x81, 0x7}, {0x6b, 0x5}, {0x8, 0x5}, {0xb, 0x3}, {0x1, 0x1}, {0xe8, 0x6}, {0xff, 0x1c}, {0xa}, {0x5}, {0x5, 0x3}, {0xbe, 0x4}], "c37e8524bb0c5cad"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xa, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x5, 0x1}, {0x80, 0x1}, {0xa, 0x1}, {0x7f}, {0x3c, 0x2}, {0xf, 0x1}], "22fb2616e0a3db8d"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "7886525beab7a75b"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xc8, 0x4}, {0x6, 0x7}, {0x3}, {0x0, 0x1}, {0x7f, 0x4}, {0x9, 0x6}, {0xb, 0x5}, {0x1, 0x5}, {0xf, 0x3}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x4}, {0xb8, 0x1}, {0x6, 0x4}, {0x2, 0x1}, {0x43, 0x4}, {0xff, 0x7}, {0x8, 0x7}], "5ab12ad256024e13"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x80, 0x4}, {0x6, 0x3}, {0x4, 0x5}, {0x5}, {0x1, 0x4}], "b70699183cd71038"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xf8}, {0x8, 0x4}, {0x9, 0x2}, {0xff, 0x6}], "b0e7866e48feac74"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x1, 0x6}, {0xcb}, {0x8f, 0x2}, {0x8, 0x4}, {0x5, 0x6}, {0x9, 0x3}, {0xad, 0x1}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x5}, {0xc3, 0x1}], "f130e136c2a202cf"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x7}, {0x2, 0x4}, {0x4, 0x2}, {0x9}, {0xc4, 0x3}, {0xa, 0x4}, {0xd, 0x6}, {0x48, 0x6}, {0x92, 0x2}, {0x0, 0x7}, {0xff, 0x5}, {0x5, 0x2}, {0xcf, 0x7}, {0x4, 0x3}, {0xf, 0x6}], "7cdcd7d00d4f0c63"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x6e, 0x3}, {0x0, 0x2}, {0xe, 0x4}, {0x1, 0x4}, {0x3, 0x4}], "d2159111939954be"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x801}, 0x4)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x101044, 0x0)
ioctl$int_out(r2, 0x5460, &(0x7f0000000500))
link(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00')
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002780)=<r4=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002940)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000002a40)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x800)
lstat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002dc0)={0x0, <r8=>0x0}, &(0x7f0000002e00)=0xc)
fstat(r2, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002ec0)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000002fc0)=0xe8)
fstat(r2, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x800)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003140)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000003240)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003280)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000003380)=0xe8)
lstat(&(0x7f00000033c0)='./file0/file0\x00', &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000003580)=0xe8)
r17 = getegid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000035c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000036c0)=0xe8)
getgroups(0x5, &(0x7f0000003700)=[0xee01, <r19=>0x0, 0x0, 0xee01, 0xee01])
newfstatat(0xffffffffffffff9c, &(0x7f0000003740)='./file0\x00', &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, <r20=>0x0}, 0x2000)
r21 = getgid()
r22 = geteuid()
statx(0xffffffffffffffff, &(0x7f0000003800)='./file0\x00', 0x0, 0x20, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0})
syz_fuse_handle_req(r3, &(0x7f0000000600)="ed1639940b8aa1df9e5e2a9a4a902b93ada27dec8f11fddfed6ffdad4b7201533e184a65b00fcb33d8314c46963cdee48b0c43fecbfc0fd7de2646d3fae307181fac246974f9677772e2629e3a3bec709e9c7d9399bb0d7e50ea154bdb97344f02abf521136dd2f960a17b515a2aaf8bb29cfa276f86c4d10b7f6cb3bd1fcbb6f124815398db9374a0ad439efcddabebe7cb5b23553ed0045b075bc5f116de4c16606cc03f21ff9aae33ac439bef66b2c28538cdffa197c9286de82ee52cf2943075eb483399d67ae90e88b3263b48137a7fc0b5cb59be553e876d02391bddaec3dbdcc7160e0cbc3aeb1ad726058ba7ac39aced444e0628c2c62f01c7bffdf0b511a78ccce3e4e138da9870749c8278cefcf6c606492aa0bc2236ba7814443fe0f2cf065f91c22a0f61d2214636aa38e5ebdababaa8c4d0c1d35cd7c578e7ef882aa078d3460e1279f657c1d11039c3169d64c6b3d3ff031590ce032258929a9d65c6f5cf21539e8c40f8966086439a1be83cac71e5a4f24adb4e24709d26a4ba008071c8fe663fa3db66d676dd70323180d948582c00e2da475c29f533c1c743c0a17791e6a94560487c10f26df2b61c23af782309c25cacbe2597e41e1a8105b49e3e5f4f59f7c249f77198c8dda6e82a84c5b54872a7f12ae47a5aedf99381367d39d16eb07e4013ac3501c94a1da6c1067f0ae8fdafd0c13380cb57b96b79c2cbbd80dea3c54c611c82e41a8c707d92d12511ed7d44e2c86bb16e9125d1564d06ae838c8464dd0552836356c3f8d216b24392d25746f160462af3fdc71cf4ffb1c23b7425e6d6b29d50b03b2133ce8d54ebb340d85cec2c47dbe0b63a26da4f316f5055b29d62402b18934eeb3f3c1a515507cd00410e89ed440862d981b2664dedbb3c187d249621e5604e82b1b0feff4c6dd7d54565eaae61b97df68fdf56e94d42bfa472c43ce69664e2a46064c1533b339e65fa2f759358a726bdf4611245c2e6f60223fe270f80c294a9cc1dffdb0ec5242164772efdb491647ecfcb697e1ca149bd125435c9e15706d9e15fdd5ad378a1720b859bd89d4be015607d128146a00983ace27d05cf7031097cf1b28fcb5f17a7cb32349002afd7aebde669db05bee76766526a7b92edb7a59f501602d20842e2c2eb4b078b9f410487d4afdec8519f8f92320c376c2f7fa47456a0ecf611419ce7ac05b3640fad2bd645761920cf98211037849cbb77632e0923d11637b97bf56fbf98fba42dd78ecc320c20b1e7c9f710a2e1ab337ab39abf6d8d2108967f0dd950806de65e473e0bdb5076d2927cea4f3cbdab8071f2410c2c431c9d2041c3b903933f09eff77c41c52ab7235c873df13a270cf3deeac1d9dd9dbeb6a88be94dfe4d4c7f1de93864cd9e70a30c2b63c540dd0473920197b04fa5b2d649a12b975ab15ebf1518ce1ca10155ebb922e6d35302acca0b3e9632842d8ba54f63662f6a0814eaed8ab30e3090f1ef1bb90f69152aa528cb8c7e96e86a2f914e318f599137e5d67fe64b27d6ce4fd340b8c023d698810954e95fab48db2ee8b14f4f6053658d02c4e9eb1e36225e6dd4b507e849c988987e9c1da869179b2a0e4cdc04d8a2360b4d9d348456297f99c43edfd374121b5ffaf1d060e2e44fb3843f0fe871e80b9e3042d08fbe1f505c7cbb66e38beed01e217f7b0d98303c29126bd8d67b83988c36ab191c5c5eb36df2d3df25fa2facd358db37b85b1680bef05dc84b7b276b1455b76c743f2a8a7af2c0090de31f32accea09ae863ccebde7be170c9afef3ebef18891760739f2f496ed14f0d44048c3a1b97833def53c888a1f1c1648e75a53f1c933f744c9ef729c528664577988d77e9757d00d0c9eb6143c1d869812df378c4a5c4a006687d0da0b44e48f5a193cdd58c8aa0431a1c775b3c445bfae36cce96a4addbeca21cef235fb32dd5835fd34cd65dcd0c6eebd847c81391cd9cc37702d590412451c5a1276b32f6f543523c3f33d859b58fb87dba700cb1e7b9dbba0ff79a40fc0ada15213d142f5a9553b1dd5b62730ab15629e19a312e93f52e0cb4d56c083b2500bc1347b105b173f10f065b43ced72956de8e8429fbdf6d3daaae6a769c57cc86788e86d6a2c265be6c8f076d901613320fa009a5a8d510691f40dac7639d99f7e5a6631ac865b6fb0b03394beba23d6133659a71783144a38ba1efa3e5e95189910c711563e54da383eb2a21094037f97fe859f84b1a3f9a6c0b7fc246f7eb0aae177015e649d86713824fbacefb23cd07205a29e96ed1a2e55ab7569ab5a1c5ae95c8618476b79420b7f9cce0a496f71315965653af1422288e7db966cc1b6097693e69664c20297c4efc4416f41d66a8ba1cf4467542bb40a0e1a1353ea2c3c409bcad7649f84f2a5ffaac17f3ea95ff1a27324a882ab192409f3ed498e18ea17a501eddc71d8d07ce9f6c0d71fdc5f589e3954b291238cad24ea0b656c0c5aabc7bbb6b1d955cdcc7b46894d152f4ca698d1de5338c58c28988035f952bdb0dc60e426485e6f2810701a45a67503b2e9333cac301fe7a65bc94ff01c6e90c8e6157fa1462fe7a213f1d65655de5309f6d8138c7eaa6930f0ab26e13b1f7d7258079282a4e450c8465a9f5ff15b5c2c8c5241b14da25b78f9ca9a02e5e2a6d2bd86f576dfdeb0bce8cedf535fe8e2a67a0673cfffa2bf6a0b3e76e097fabc0bc3b7bdbcdfc2c9c1badfb8e9a20a78ca45941a7ea943f98fe22039c4a7f611b175cf855e9f8090080dd2b91f44f4b2a1ef04e189869a6c6d5cefdc698ca10c9c94edd4507ddd7fe0e68ae5c3b4374c9d6698df1dc7a9a949fed5ee0805f479eed50bcda8a9e8b4e680eaa9856361f4e701ac93d9324e95f5cd451f564afbb6826077dac687a874e361dfbfb0e00eb55cc98073cd669a3e3b7567319df7f780c5e7654397c46f2fd70b10063d63b2dc79b028b53d98190a9288ba5a9cd21d46dcf264433fb3d9903121668528436e407872f36120d4aa7545d5f3d1d93990d9b692bdffc80cbc520cab8e885525bbf5dd2c649d798b29166bdae20c3de97881f36e8b5db123dadafe1dad4e0be31692ba91623c6f60d8688978b603286753b5594247f27e1c30b532b3ddcd2976e4c683b7186e1c4cb9afe6b3823c647a614f9cfd761c29f5ffdc77edf8bee6b3fb123ef5f9520e42c00007c8c22051856a40c3314c2f44e0c9406d38c2175d49db5f0590a54f34fcd49cbff49bfefd708f9d3483cb84f778b7413af478069f94f45aa824d39c824833c299ec54cc093ef8f9cd02ca6e4f3f3e6bba256b2708bcd356d96320baf629e7fbddfcf61b6baa6f0c87406bdf6617ede6d60dcf44a8b10269ed74c34396787865b9caa19c7e7a001f1dd85619a97e44d386b5ef38784e3c43c3e9ce6a2fe7f363aed6fb7fa4c4b684dbf2ab06e3a972cb2a5db139611c3d8278cb8118db5c8d0acba9438f892b6189eac123e5e054b0a1afe41716f583c37f41ac83f83f2178a8aefc4edfb20b1db78409ac8f4efafd7597b492d69b4c5d08c9a271451bcbb56ae8b563d955e16f07d5f6b3b532d00b81bae780acc35bfd3486574bcbd987d959238d7286be535b8cd4d51504efb58cdcaa91adbb43f123318d3864550a91e5259d2ad1e19341a190ee95f8241a5fc814a923d11880408a955f65e1e835f8e887699013742cfd36c12be431c863dedecd7cc8a67b7fcd9e570e34d44512b5ace2b41b2d268ea36885c9654e8acb3fec5bc7988a517c8d305de89d4b247f44bc8049ede68c2f6fcf012a282d662e9e17cb6fbfdc38e257a02f3504a8e99efcb30554e4b84d0c7f631974dd0fc1cbb5edbe2b322e6bd2f86cd9fbde2243b98bcaf576a2b5f14f865c7a11ffab4b04fc7385543d84a4056e00fbe3e9a7261a771169507ac1d0bf13ce507654ff2269f5a6b38795046fbd6c732999373223160b3994f971eba81316105777ce4ac9e7093d0b0c005a9bfda31adf44ed433150a96473902cce1235a440bf2f03558d4b096e5c1295e9b8948f53df85e7e70766da60cfdc6c43229eeb814ec7ac9525c8ff3955c02ca770bd085c3c51d13466c4377b9dc217c6a3eb0f6ad2dbdab8cbbec9f6e7d72c22cdba83fd10a99d01d0d2ff0185471b6493907486fd5fb30c9b63beaf77a5b414ef4902c6a8654ae2238f1599f5c865db48e252642870a0e40e008be38912232860fe0ee9508d3820a539441aa689cdceace6d31789b252f7ccc2fe5e50ab65da2d3f8cc91f64e069da33f85f225b50bc2968bbf2dced8fef8acf8d433bc601b323edfd95471bf76ddb7ff600715ccb258e9a1ef55eebbd1c1377c7ace8791187e02cd7955203fac789ea60b2ec075bdf0da71b5a9ee8f07c912c4e1ffb282303695f92ac0962a049715900745612766e3f99039629d6389d1ad8725b1bb75d18067e9b2008a512776eada2585de332b266c31895311167d5231b5114252f70d209950f40f80b4030c25da3ef9312a80db50e5c13eca5a2c11c309a13aba81934e5d41a0ae663419c41944b451907b92841ec80c4f28c971246026de316bd6fe05a1581aa725d45e6f6c4ad6e97a44049b7046793b2b5dbc2ebe5269fe13e131e4a3a16300027fd7677107e7fa83e91f2099d0e8ef348914797784ac4cee138899f8008eb27e096798e87829298207e4ebfa250160a242ab838906cb52ca38a36f88606f8f13c0e00d69e42bc228a2e02d7668851a752ae46cc865ee507298bffe47ba7163e87901797093eb76f75e9f3c37d2ee2235e62c3b267ffb3fcec16e52bab0c2d3061095cb3251107558ca2062b1d8ff397d6efdc5f78ebad655d3eceb009def7d91e559925cc80c4a452fd8207aed5ce6ffb61ce7bcccc000129fb60a144613c99d38daa28f6906aef17ec3cd2d05668d192f8666441cea10545ae29e64949bc16c3c0fdd67d7d0ba52d8313cc698054854c1510a4c0bb9446c3c60d043a02773d50b7ac94eae7abe7fda3a7aebfc01390b33399d935c0f5255c53813c0c63b7f33d2ab5d6ad12408c33bd806cf2e4305cc8c4a4791a6b0ba5bb48df4dce8ba0a34244d0f27cab123ef972371dcb9e90aa4333dac3d5fd926888655c416330a8b587bb8879c4e5814157e5b567a06e8404ce771be6244d7a7d70280de1c01375fe1acc3d42a8687010c712a4804aa16a19ed7e1cd47ad2f9806614833203b2e1f6919e79c7c02bd7b5c03d4b75cb647ce0ca9ae7c674ec7becc75667e19a5adf311045d2277c41231277983afaa5db8b12d171a7829b52ab214d2ff3ba6ef15e0ee40a6714069a2b8438f815edffdf7ace7e98e4192792a33a15ff8da8dbaa785fc67dd86e48af4fa7efd17c1b614dee1de011d3dd2efe92540032887bc9caa776d14f752d257bd9fdde85946ebcd155438a5070b8449128fdfb141796ed9c578ea1aebb69278903b0e50500e4b4623e557f0430b5181c8d505218bc7233fc9fb7a8b9abeb4154a5d1fa7b6ff950f123f046ce5301c489b46379e08435708c95649a4706a369b6e59afcbee8af31d71d9928d304ceae5d94149bfe0a2b874393a628ee55bb1637f584af69ebeabb545a33a5d86a0026a5320041bf22c71de2a20470e132f1052b5bf1d6bb19e40f7c7e3e93d3f73a26303d0f295dc4e606d30bec1b2e25cd93a2a838c4535b1049618835fec06ae0ffb4ff88c206a81fcbf6b8982318beb199ec36f53798073b7eaa1974c194f8a53a48b078a25073c07d9de6c2ab8a3aca6d99eea9413c0459d2329c3a6f38b4b7fcc6811eac076cdeb779e719048827ee364f3655810fe181164122a4a3b1537b24bbcfc776f2093ae62c9f8e0c2c981b9dc4048af3fac77c33478c53eb4193e0ab377902247bb77b5d07e5611bfca501130415e820fa4c771aa1e85e293fc1200e745ca1e3dc0cb73bd17b5fddf9c58179c09c8e86d31bd5ca17edd6da03b12ab8a9a07de90bab4f1a6309e2ef2e512ee5a7e78ae6f627c235a1e6707c8cc8563e7fa8cb1ae39cdaf7857a980ad115a0a297400521cedd0e8871edf86a3802a09f8c230f4c47865ec32b581ad378882a0bd669c0c60e7c748348d782330bde329d15d8fe4b9e7aa1965edc2ab994bb75e65e5b2810dd4a199b08b0b833520dd51d19bb3bd935f7734a30418044d74cbb51274ab917c1f56bbd314766b1e9a14f80d98a4c550eb7bd2b8ea1e8217c209b2a7363bf99f30e6a88d44980a0e009c7192f1905bd7c759146dabd5da3606fb85b85345888b9e9744cb24b6fb18cb4ea923b0211fd37903a13712f890de5a8e8aa122541a6e3c0c0197a27fb630eafdd9e0610efa743454fd26acf969086eef27f5e7a9af95804fc403d5450b1432f16b79a0a606b6b2b974ecb0681b8822f310d241aa58a0293ceb1151ea36c0f9fc3fd37acdb032cfa65511b1815e6bff318d89410d278383141b21d5ffef23d78aecf3ed7aa7fe8d59956264d486465fce45df806afba65838a1e149c6ffdb1cee2a5246e8585d4c350eca7f4cce65820a078c5527f8e344541d4d3663f41aeb74c6f51b00dc0bfe0c16176ca6b7e709a3b3bb7cfc1e55c4935684503627d1a215be4dbeb050f0cb38b086f96f40bdbaa776107d95a42c1d548c3e2142d9557186b7edca3e05ff498a0ee34cc50f7d87aea3ac9918320deb9a77b3615d33b6060cca479da9c34af1ea6edb9083427fc294ca1a29104e96ebf78965ebdbad723669a2af9619f15b1d36104259f704c5644431acd832a5bb8e24538362930c079a33da669c5fd8196bacea02d74fc9d319118839ac633ae1f01c47c3ff1f21898eaacc17812fadd24884ca5bc004f2c446c5e55b6c8bda1a6aa0b3a3d96c9d42cbc3a6306c4219257407a0f99aca7411251717ae5298f5363e34bc1daa05f04e9f8c02d9bd59fc71493096c2ded3ab7c9d8c323d911761b3c34630939f8fe765da3375014b61b605ffedf93446fbcf6398f08b94003fce259254f94b828ca4718b0c8901c42b38f3935207804625904e2136993c896bba2555f56d2369a7e399927fbc3c415e691d89ce4351d1e364f5bfc8b400739738f431aa77b3739a91430c4437cbba74e805fff055254bc601b47dbc21f5e51e959fe252014509551fc0141d67f1cdf8062ebf2f5b767c0361568614d50cbab6be14157d348c728d80a4c0f2f1e94896d77f46ed32e4bd58278078a6a0a3c120b52e220c88afa0cb1925c5a24f860173328cc3ef9d641be4e4c035ec95f7eac4f242525f28f2e3c18b7e0d54fa927c12dbb4ec83567d9ef871ff801d0543e6d4dd7f9564627cc2be0782f78a801fa84905ef1d58a8957815c647241003057c37081e3ea1df330b36c6dc51c342c27c589d1a6aa12f689840f2268b8288ee29bd1e8d57a0af3df44a408bc2f82ba44d5567a8216c1cc9ca118eed4d463b39386fa43db0e042a397f9c5071b7e1662c0c487f42ce2216122c4485bfa7254a5515ea0f56a7c3e8678151b833b3599ec33fb1def29f1454e0a08d2976eb7b9f10a0005e1b936e2bcc3afb97763505c72a67df1bffe8458c51fc4fd53499b0d2af9872dc366c0432ec06ada5dfa1b5636cdc27bc264424ee296a5908d6a075f17b8a73eb0a12763000717ec8f0410433247b2de6def4c51f042ada4a48f959e96f5b704dbd13457459cc081f09a4c34867384b725f45fb02271b5824e58dcd5fc9b8253709fc10c72021558920ada507f57855c8c15ef9b6a0d8f47fbf37971a56b719ecb5f16cec97e889f81b28e6c3638162e67bdee737e01afb6ee17f525ccbbaf192aee620fbc59b1876910c257769aee75a42bba2489af576d5df7970216a28efa2a49263db3edc745c358838418d08a523457620c84bc18634cb9c4621347ee1063e48714aef5eda265172af40b5f731d8fa00c88b4a038a579401750c009df72236a6637cc6fb10809977156c7afe19d1dc3cbf58ee4c21f480a1c014b5553526e2475974837a665a49ad2092d1fbed5fdd00cadef03686e7293e91d0de905d6e3eb13d8d47dc3526597817ee72ddd264bb91419149db450faa74afff5a728b2d9228cff60fd8adb57e09862e77fce0f27502d351856f6d58e7ea0c23b3449c7bedb3ee27f3b98fd5550ee0bedc847367b4ea5846db1e0781f9ec7c2431b1595c3cc105b363c0922be689804de05c19e2673970777c22ff8bb8923c7d3ada2fcb445fafd2fb06633cf114a698e7f3fa954cb689ec5f4dffdc155e161bdd5ef17a9e4f69ff0cefc942634d578af78af9631d00150eec084daefbb42542c7b03b0de6ff2b010be653fb0e7568a219491c3af158bd76a80a80d028bec26b81640e6f799f2527da3f0455a7da408353673428c5f69b391511a4dd46c54d3032d15a09f24c2b9618ebcefd1c2f06bb38beab5c57833d8e8997b169bf0a4bc786e5ba09d1bfc32e97f78025b05fd71bdb822fb272b617f86069e18456f4fb01b8eae8eb05ec33d4c204375e99eb1d319fe12a7a6fb3d2f352cd04d8ceaef74f194dd1317afa5eb213e43d1126bc35e45d7c23b9a138c42dcebce577b9b4e94906059422df77019098d1ab1f395d9a32f590a3f0293e164fabf0862273882ffd5000dfaf87b8a220d5e9451b04fb227a9c40456c5985864a19085eaac1b6a92245e81da74a3dfbdaaa047edeba212c8ff0ae0b7ec88947c5f782bb33757f97d2cb09ebc1cc5433fb521c67b65960004f74278853e5996870e86074cff2eefc7501356e727137418a98ef37f54ff505022864a95509bbd7769aa24362ff923c07592fe1e103bbff038a9a174be1d576c5c69fb796469018b17ab9eb01c671738d7111a812f9cb2b9b73c6c42a317686ccfda649c6ebcfca230a49eb619c2bbcfcc1fc4f682cac4019d087f45d51e69c6a2decb18dc2bc8ba88d58f3e785d5bc9056e9aab5e2712ed4067c7264803fe26146e7f70925b3c98600062a920a46814d76920b90a3186509093ac6db3054470b82c467949ae0ff7e3edd6b3f088120542bf69c822e5f39ea0bac3444344104897f5eca85e1bab577fda9903671f79e676a20794fde775c43cb5bbead481c177ec5c59e37775540934952f87d156f7bddae65a226a24f997460b1a3d71d4979f300fa998b7286462d92e69e33aa7538cdb36471905434bde35ced9e51d7673456507569d23ac031a80e0a6b3f0aa340f82ad40e30366bb7f3f17f0f93db07f4c7f4a5396d09940540ac17a30bf07ea7b99e58af3c121765e20fd9470891a2e6f4bb6d59a7ec6a3bcab181f1b4679cae2350e7f5834c86ea239f0d7ea4465df19712869b1c6cf9698f3ee700c8587c419b4c2ed2fcf558878b8b3864c47e2877202ea10c7b44760bb7d70d12948a28a3605854f5e28ef99212627bee91fc3d657ed04fb03ebbf38c08a6f023edf91e8b0a8f1381aafce24b4d49a8c9c9940b2a93f70d11a38ef4c70733527d32367719687ea57526f01a76157d8f6dfd7937e9181ef3d2fbac2899b37dbe5c648ec76cbedc1da2e3c96d61f03211c55954d705297bbee339199cfab465182113d06e39ff5f3b3736276ebc84c576c1c4a00af2b51fb227f4c99edba054664f0181d77cf6fc6218aaa54a1f9e30e40df300f681d01d47aeb9f7ea8eff85523b469acdaa3f239c4f5d62eb6dc564c8cdd289dd6274c3077e3b13653865dc8b0f4415baeb62a9bb9894e89894dd550211323fdf493f4195f5becbbf7c92d5769a01ef3a24391d7e0a39288590dc3fcb6b637b2793d14c0ae1b89e19a21f6a56637467b8cebc677b0492afeac793851955a42cdc7fd1f1861da75dc6694b54733bd30f1559a126039eb4bbf4fed041fa2eae867d839c2ce6391006f099b5f2e8ce757f998b150fba75005be612a55fb10391a69251ec1da7a2849d7ee55e99c2473651f23e7049f40ec1b075dfc61024c66a30e8edffc5fe73ae8c680106d6bdf3d6331ce8a01ac1d9c94363133b51f73d6c4bfbcb7cf195ee8a31eb78b284ce17b76839c334348ed803eeb4cdebed24a313adcf24fab58d6f8a1e93947cd0cf08d775cad58c48d238b4a6cb582ae4eb1feb4c0a81df08e228a129edd841f4f90d02b0e698e798f0d107d631a28b6b1c7e2ba4d62fdfa77626f6a3644f415e307fd200294be3b8428d2e3e893c422de8faaad25850e0430398718c1979057a85e1ad216e77cb00c48312ffe452f484b838b9fc87368842337fe32bc7abd5de548fb8d72adedbf021c9c8099902fc30e17acbb3e4185c64bff930f3e8eeb996839efcaf319ce0ff9e519f66e9cb2e06638cdc427b86357e5a979cb5777c13188d57fce14a506ca43b2464c9027e7f9544bb6c0d1d350694ecbd86f2dd1690faae5bcb34b7b9a7999478b7f892dcaac349286c8f6e623ef217c8f19fe86832030f387482e7cf8336ecc396f8da1759f29193a8e2687ff53f6fc60253826bac9034eda0c3c8007d42208cceec498b082501ed0ef831b6b52e46aac9f1643128dea76219f94e16537cf7d388e21129b3092b0209b0629e0eeb367da19377ee19cd3d2d0f64bdbbf99bdb97800920f6cf088cb7208c6aadb961f5824fd27c77276a1eba27f420c153074d6ca768bba4eba049b80ae06bfb2be6d1da67e1abb96d529456e18481a180d76952a81bbb7b74d2eb27cbd92e038d671c46ae65cf341fa242369bf19b1cac391c0f5390b348be0d463cdd7964e67d53de4b2b5462b7716764b93a06993344c10aed186c05827542fd3f025d85a3d74e3c181635ddf1766d0b80795ecddeab3300d979677eae7957ca79685d6fe69582aa9b4ffffae0ed17e568c7c5ca0999b618390a6566bebda4cea1389b8e44f21330abbdba64fb0fd73db95547bb65eb440749987dbe4f1f4d82ba10e91d48cbe0eb81f11b768dfa83120278d486efe7e124eb246ceca1d305ec287919e69cc4dbc47dc06de262eac9158e6807255145aa33fd59807507e244e9495efd230069ca2d440f0bb8fc021b201cb9342b4eb46d73ff19f11eede6564c3e283ad462e48370dadec294c1f5f9b498483950fa0352eb2f4593b7c4b9d8dafb332328245fdfb8003a1b3c8827139cff14085840d69f1ca655c5565ee853e12f6d1f1ef59704ba3be1015bbe18f8e0faee34fa66a376a0db7fff010cf8d9f9e7c2f5e5035c06ca9d8ef1e491c606aec75bb2aedc8bd1a60e65527d797631d25275e5fad19d86749f2be77bf7b86b0099d5ef5536de878ce8a350960fbf5900aa48c4a9f958030cf9e980e6f1532e85f63df7b9a17fb8a4827acc33cf808c16bae4e0537b2f57a7263ea6d8993107f28deb421a63dfe468936a09f9eb88ecb624869abeda808c54fceebdb29ee589a60243ad13777c609eb62620356b062d1e29cd1bd33a3aeaeb159390df38bb24835ba2e5f6cefec01af0e4ffb863c981b1d525b3e70a5bf9d53a02c10bdf2ed79302f053e47b2bad4b6068f6bf272971cca7df7f038326a8798487017ec3b07ca9c3b3eec19fcd005663569c7ccf910320acd31d3788cec0bc4e414e3421af3a1094d95d12913c79161e2d423aa39e", 0x2000, &(0x7f00000045c0)={&(0x7f0000002600)={0x50, 0x0, 0x7, {0x7, 0x2d, 0x9, 0x4800, 0x0, 0x40e, 0xa, 0x0, 0x0, 0x0, 0x2, 0x745}}, &(0x7f0000002680)={0x18, 0x0, 0x0, {0x7}}, &(0x7f00000026c0)={0x18, 0x0, 0x4, {0xffffffff}}, &(0x7f0000002700)={0x18, 0x0, 0x100, {0x8}}, &(0x7f0000002740)={0x18, 0x0, 0x8, {0xd2}}, &(0x7f00000027c0)={0x28, 0x0, 0x7fffffff, {{0x6, 0x1, 0x2, r4}}}, &(0x7f0000002800)={0x60, 0x0, 0x5, {{0x401, 0x7fffffffffffffff, 0x3, 0x7fffffff, 0x2, 0x1, 0x8000, 0x80000000}}}, &(0x7f0000002880)={0x18, 0xfffffffffffffff5, 0x100, {0x88cb}}, &(0x7f00000028c0)={0x15, 0x0, 0xfff, {'$*-%\x00'}}, &(0x7f0000002900)={0x20, 0x0, 0xffffffffffff8000}, &(0x7f0000002b40)={0x78, 0x2c6baa2d42584c52, 0xfffffffffffffe00, {0x1, 0x3ffc, 0x0, {0x3, 0xffffffffffffffc0, 0x7f, 0xfffffffffffffe01, 0xde, 0xfdc2, 0x8, 0xd8, 0x1, 0xa000, 0x101, r5, r6, 0x100, 0xffff}}}, &(0x7f0000002c80)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x5, 0x1, 0x5, 0xe, 0x3, 0x0, {0x0, 0xa, 0x6, 0xe42b, 0x4, 0x4, 0x7e85, 0x0, 0x9, 0x8000, 0x8001, 0xffffffffffffffff, r7, 0x38, 0x2}}}, &(0x7f0000002d40)={0x68, 0xfffffffffffffff5, 0x8b73, [{0x5, 0x737e061, 0x4, 0x7, 'pci\x00'}, {0x3, 0x6, 0x3, 0x1, '\xc2]/'}, {0x1, 0x8, 0x0, 0x10000}]}, &(0x7f0000003940)={0x5b0, 0xfffffffffffffff5, 0xf, [{{0x4, 0x3, 0x4, 0x1, 0x4, 0x8, {0x3, 0xffffffffffffffff, 0x8, 0x3, 0x7, 0x0, 0x1344, 0x9, 0x100, 0x8000, 0x8, r8, r9, 0x1, 0x9}}, {0x1, 0x200000000, 0x2, 0x5, '-$'}}, {{0x2, 0x0, 0x7, 0x730, 0x8, 0x5, {0x0, 0x6, 0xffffffffffffff00, 0x8, 0x7, 0xffffffff, 0xc, 0x2, 0x2, 0x4000, 0x3, r10, r11, 0x9, 0x7}}, {0x3, 0x7, 0x3, 0x8001, ':-*'}}, {{0x1, 0x1, 0xf1f, 0x2, 0xff, 0x3, {0x0, 0x7, 0x6, 0xffffffffffff7fff, 0x42, 0x5, 0x4a, 0xd68, 0x9, 0x8000, 0x2, 0xffffffffffffffff, r12, 0x6, 0x5}}, {0x0, 0xffffffffffffa99a, 0x4, 0x2, 'pci\x00'}}, {{0x0, 0x1, 0x85, 0x10000, 0x1, 0x9, {0x3, 0x0, 0x80, 0x9, 0x8, 0x2, 0x200, 0x2, 0xff, 0xc000, 0x1, r13, 0xffffffffffffffff, 0xeef, 0x80}}, {0x0, 0xd, 0x4, 0x4, 'pci\x00'}}, {{0x6, 0x1, 0x1, 0xd87b, 0x80000000, 0x9, {0x4, 0x8, 0xfff, 0x0, 0xd, 0x3, 0xffffd0a3, 0x5, 0x4, 0x6000, 0x7f, r14, r15, 0x7f, 0x5}}, {0x6, 0xc, 0x0, 0x7fffffff}}, {{0x4, 0x2, 0x5, 0x9, 0xffffffff, 0x8, {0x0, 0xe84, 0x81, 0x0, 0x7, 0x1, 0x7, 0x5, 0x101, 0x8000, 0x6, r16, r17, 0x3, 0x1}}, {0x5, 0x80000000, 0x8, 0x5, 'devlink\x00'}}, {{0x4, 0x3, 0x9, 0xd, 0x8001, 0xf, {0x0, 0x30, 0x1, 0x10000, 0x4, 0x8, 0x4, 0x8, 0x6, 0x0, 0xfa, r18, r19, 0x7, 0x8}}, {0x1, 0x8, 0xd, 0xde, '0000:00:10.0\x00'}}, {{0x3, 0x0, 0x840, 0x5, 0x0, 0x5, {0x1, 0x1, 0x72, 0x71, 0x101, 0xffffffffffff2180, 0x0, 0x0, 0xf4, 0xa000, 0x6216e9d5, r20, r21, 0x4, 0x5}}, {0x0, 0x8, 0x0, 0x8}}, {{0x4, 0x1, 0x8, 0x8, 0x7fff, 0x7, {0x1, 0x5, 0x3cdd, 0x49b, 0x8, 0xfffffffffffffff7, 0x0, 0x2, 0x9, 0x1000, 0x0, r22, r23, 0x8001, 0x4d}}, {0x4, 0x8, 0xd, 0x70, '0000:00:10.0\x00'}}]}, &(0x7f0000004180)={0xa0, 0x0, 0x8, {{0x2, 0x0, 0x2, 0xffffffffffffffff, 0x9, 0x401, {0x3, 0x3ff, 0x5, 0x6, 0x6, 0xf1, 0x0, 0x6, 0x2, 0xc000, 0x7, 0x0, 0x0, 0x10, 0x4}}}}, &(0x7f0000004240)={0x20, 0x1c5e95433062639, 0x3, {0x9, 0x4, 0x4, 0x5}}, &(0x7f0000004480)={0x130, 0xfffffffffffffffe, 0x2, {0xd6aa00000000000, 0x1, 0x0, '\x00', {0x7ff, 0x3ff, 0xffffffff96375f7c, 0x8001, 0x0, 0x0, 0x1000, '\x00', 0x3, 0x0, 0x1, 0x0, {0x200, 0x80000000}, {0xfffffffffffffffd, 0x3}, {0x1, 0x3}, {0x400000000000000, 0x5}, 0x1, 0x0, 0x1b9, 0x80000000}}}})

383.155672ms ago: executing program 6 (id=2214):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, &(0x7f0000000880)})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000002380)=ANY=[@ANYBLOB="12010102000000106307302040000102030109027000030106307f0904000000010100000a240104001a0002010207240802600b00092403060203060206090401001801020000090480d4e54aa95e56b187b31db8010f0101000200080107250104"], &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0})

200.558051ms ago: executing program 1 (id=2215):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0))
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x120401, 0x0)
ioctl$TIOCNXCL(r4, 0x540d)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x3, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x0, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0)

106.562295ms ago: executing program 1 (id=2216):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x6d5)
syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000002380)=ANY=[@ANYBLOB="12010102000000106307302040000102030109027000030106307f0904000000010100000a240104001a0002010207240802600b00092403060203060206090401003f01020000090480d4e54aa95e56b187b31db8010f01010002000801072501040804000904"], 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 7 (id=2217):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async, rerun: 64)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x40000, 0x4)
write$selinux_load(r2, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "8445416312e9ebb5c631e27e8ad3d15c202a9a33002a42fcdee45c88e720c18065588f8c0506f93f064974296f241e82a194202f59a9df6ecb13e0ed800a13f6c0823eccbf8eb85e662a14d5ff45ac0e30ba9550aeee922669ce91730b2940ebb8e8da2caa1795dcf3f59dfc112fd18962026d1fbbad672be97325986efef1b89fa1117426a0482f61a7b84418a4046c6cb63323518eb684f9be65aab2f6b3d1b0e99d7a5c588d905f1c1c000f"}, 0xbd)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000)

kernel console output (not intermixed with test programs):

T36] audit: type=1400 audit(1789603179.769:361): avc:  denied  { mounton } for  pid=2033 comm="syz.4.671" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   69.943920][   T36] audit: type=1400 audit(1789603179.797:362): avc:  denied  { mount } for  pid=2033 comm="syz.4.671" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   70.199516][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[   70.362056][   T10] usb 5-1: Using ep0 maxpacket: 32
[   70.374045][   T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   70.388571][   T10] usb 5-1: config 0 has no interface number 0
[   70.403115][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   70.417885][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.435318][   T10] usb 5-1: Product: syz
[   70.444090][   T10] usb 5-1: Manufacturer: syz
[   70.453811][   T10] usb 5-1: SerialNumber: syz
[   70.467323][   T10] usb 5-1: config 0 descriptor??
[   70.479687][   T10] smsc95xx v2.0.0
[   70.806240][ T2077] overlayfs: failed to resolve './cgroup': -2
[   70.912606][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   70.923449][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   71.288225][ T2090] overlayfs: failed to clone upperpath
[   71.888843][ T2096] ./dev/sda1: Can't lookup blockdev
[   71.895379][ T2097] FAULT_INJECTION: forcing a failure.
[   71.895379][ T2097] name failslab, interval 1, probability 0, space 0, times 0
[   71.919067][ T2097] CPU: 0 UID: 0 PID: 2097 Comm: syz.0.691 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[   71.919094][ T2097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   71.919104][ T2097] Call Trace:
[   71.919108][ T2097]  <TASK>
[   71.919114][ T2097]  __dump_stack+0x21/0x30
[   71.919140][ T2097]  dump_stack_lvl+0x140/0x1c0
[   71.919162][ T2097]  ? __cfi_dump_stack_lvl+0x10/0x10
[   71.919185][ T2097]  ? handle_mm_fault+0x16fe/0x1ba0
[   71.919204][ T2097]  dump_stack+0x19/0x20
[   71.919225][ T2097]  should_fail_ex+0x3c2/0x510
[   71.919243][ T2097]  should_failslab+0xac/0x100
[   71.919262][ T2097]  kmem_cache_alloc_noprof+0x42/0x410
[   71.919278][ T2097]  ? __cfi_handle_mm_fault+0x10/0x10
[   71.919295][ T2097]  ? lock_vma_under_rcu+0x4cf/0x590
[   71.919313][ T2097]  ? getname_flags+0xcc/0x6b0
[   71.919331][ T2097]  getname_flags+0xcc/0x6b0
[   71.919348][ T2097]  getname+0x1b/0x30
[   71.919363][ T2097]  do_sys_openat2+0xda/0x1d0
[   71.919385][ T2097]  ? do_sys_open+0x100/0x100
[   71.919407][ T2097]  ? __kasan_check_write+0x18/0x20
[   71.919422][ T2097]  ? do_user_addr_fault+0xbf5/0x1230
[   71.919436][ T2097]  __x64_sys_openat+0x13a/0x170
[   71.919459][ T2097]  x64_sys_call+0xe69/0x2ee0
[   71.919472][ T2097]  do_syscall_64+0x57/0xf0
[   71.919486][ T2097]  ? clear_bhb_loop+0x50/0xa0
[   71.919505][ T2097]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   71.919522][ T2097] RIP: 0033:0x7fd74695e98e
[   71.919535][ T2097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   71.919547][ T2097] RSP: 002b:00007fd74791bea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   71.919564][ T2097] RAX: ffffffffffffffda RBX: 00007fd74791e6c0 RCX: 00007fd74695e98e
[   71.919587][ T2097] RDX: 0000000000000002 RSI: 00007fd746a3440a RDI: ffffffffffffff9c
[   71.919598][ T2097] RBP: 00007fd746a3506b R08: 0000000000000000 R09: 0000000000000000
[   71.919607][ T2097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000082
[   71.919617][ T2097] R13: 0000200000002380 R14: 0000000000000000 R15: 00007ffe740cf378
[   71.919629][ T2097]  </TASK>
[   72.360445][ T2132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'.
[   72.391500][ T2132] overlayfs: failed to clone upperpath
[   72.425830][ T2136] 9pnet_fd: Insufficient options for proto=fd
[   72.517679][ T2142] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.527452][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   72.527464][   T36] audit: type=1400 audit(1789603182.187:365): avc:  denied  { create } for  pid=2139 comm="syz.3.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   72.650892][   T36] audit: type=1400 audit(1789603182.297:366): avc:  denied  { getopt } for  pid=2144 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   72.674424][ T2145] tmpfs: Bad value for 'gid'
[   72.679840][ T2145] tmpfs: Bad value for 'gid'
[   72.704231][ T2148] wireguard: wg1: Could not create IPv4 socket
[   72.973965][   T36] audit: type=1400 audit(1789603182.584:367): avc:  denied  { ioctl } for  pid=2158 comm="syz.0.714" path="socket:[13991]" dev="sockfs" ino=13991 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   73.023461][ T2162] Bluetooth: hci0: Frame reassembly failed (-84)
[   73.030029][   T53] Bluetooth: hci0: Frame reassembly failed (-84)
[   73.036613][ T2162] Bluetooth: hci0: Frame reassembly failed (-84)
[   73.043384][ T2162] Bluetooth: hci0: Frame reassembly failed (-84)
[   73.194715][   T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   73.244270][   T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   73.253108][ T2170] netlink: 'syz.4.719': attribute type 17 has an invalid length.
[   73.273895][   T10] usb 5-1: USB disconnect, device number 19
[   73.330662][ T2176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'.
[   73.339705][ T2176] erspan0: entered promiscuous mode
[   73.350955][ T2176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'.
[   73.775755][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[   73.959964][   T10] usb 5-1: Using ep0 maxpacket: 8
[   73.966149][   T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   73.974669][   T10] usb 5-1: config 179 has no interface number 0
[   73.980984][   T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   73.992471][   T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   74.004753][   T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   74.016955][   T10] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   74.030560][   T10] usb 5-1: config 179 interface 65 has no altsetting 0
[   74.037579][   T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   74.046834][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.059472][   T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9
[   74.111856][   T96] input input9: unable to receive magic message: -110
[   74.122866][   T96] input input9: unable to receive magic message: -32
[   74.134210][   T96] input input9: unable to receive magic message: -32
[   74.290726][ T2181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.299893][ T2181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.309217][   T10] usb 5-1: USB disconnect, device number 20
[   74.315168][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   74.326194][   T10] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   74.408115][ T2211] ./dev/sda1: Can't lookup blockdev
[   74.518995][ T2226] No source specified
[   75.217107][   T55] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   75.267000][ T2238] FAULT_INJECTION: forcing a failure.
[   75.267000][ T2238] name failslab, interval 1, probability 0, space 0, times 0
[   75.279829][ T2238] CPU: 0 UID: 0 PID: 2238 Comm: syz.0.745 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[   75.279854][ T2238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   75.279864][ T2238] Call Trace:
[   75.279870][ T2238]  <TASK>
[   75.279876][ T2238]  __dump_stack+0x21/0x30
[   75.279905][ T2238]  dump_stack_lvl+0x140/0x1c0
[   75.279928][ T2238]  ? __cfi_dump_stack_lvl+0x10/0x10
[   75.279956][ T2238]  dump_stack+0x19/0x20
[   75.279978][ T2238]  should_fail_ex+0x3c2/0x510
[   75.279999][ T2238]  should_failslab+0xac/0x100
[   75.280020][ T2238]  kmem_cache_alloc_noprof+0x42/0x410
[   75.280038][ T2238]  ? getname_flags+0xcc/0x6b0
[   75.280057][ T2238]  getname_flags+0xcc/0x6b0
[   75.280075][ T2238]  ? memdup_user+0xb1/0x170
[   75.280091][ T2238]  user_path_at+0x2b/0x60
[   75.280112][ T2238]  __se_sys_mount+0x28a/0x480
[   75.280130][ T2238]  ? __x64_sys_mount+0xf0/0xf0
[   75.280148][ T2238]  ? __kasan_check_write+0x18/0x20
[   75.280165][ T2238]  ? fpregs_restore_userregs+0x11c/0x260
[   75.280186][ T2238]  __x64_sys_mount+0xc3/0xf0
[   75.280204][ T2238]  x64_sys_call+0x2021/0x2ee0
[   75.280219][ T2238]  do_syscall_64+0x57/0xf0
[   75.280234][ T2238]  ? clear_bhb_loop+0x50/0xa0
[   75.280255][ T2238]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   75.280275][ T2238] RIP: 0033:0x7fd74699e159
[   75.280288][ T2238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.280303][ T2238] RSP: 002b:00007fd74791e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   75.280321][ T2238] RAX: ffffffffffffffda RBX: 00007fd746c25fa0 RCX: 00007fd74699e159
[   75.280333][ T2238] RDX: 00002000000040c0 RSI: 0000200000004080 RDI: 0000000000000000
[   75.280351][ T2238] RBP: 00007fd746a3506b R08: 0000000000000000 R09: 0000000000000000
[   75.280362][ T2238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.280372][ T2238] R13: 00007fd746c26038 R14: 00007fd746c25fa0 R15: 00007ffe740cf378
[   75.280387][ T2238]  </TASK>
[   75.480514][ T2238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.531123][ T2238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.574721][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[   75.738490][   T10] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   75.750920][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.761322][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   75.775943][   T10] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   75.785219][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.793619][   T10] usb 5-1: Product: syz
[   75.797796][   T10] usb 5-1: Manufacturer: syz
[   75.802607][   T10] usb 5-1: SerialNumber: syz
[   75.810598][   T10] usb 5-1: config 0 descriptor??
[   75.824069][   T10] usb-storage 5-1:0.0: USB Mass Storage device detected
[   75.836226][   T10] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[   76.041370][   T10] usb 5-1: USB disconnect, device number 21
[   76.109777][   T36] audit: type=1400 audit(1789603185.490:368): avc:  denied  { read } for  pid=2264 comm="syz.0.750" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   76.132786][ T2265] MTRR 1 not used
[   76.186681][ T2269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.197376][ T2269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.207794][ T2269] tipc: Started in network mode
[   76.212693][ T2269] tipc: Node identity _:, cluster identity 4711
[   76.219322][ T2269] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   76.229222][ T2269] FAULT_INJECTION: forcing a failure.
[   76.229222][ T2269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.242553][ T2269] CPU: 0 UID: 0 PID: 2269 Comm: syz.0.752 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[   76.242578][ T2269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   76.242589][ T2269] Call Trace:
[   76.242594][ T2269]  <TASK>
[   76.242601][ T2269]  __dump_stack+0x21/0x30
[   76.242628][ T2269]  dump_stack_lvl+0x140/0x1c0
[   76.242651][ T2269]  ? __cfi_dump_stack_lvl+0x10/0x10
[   76.242675][ T2269]  ? __seq_puts+0xee/0x140
[   76.242699][ T2269]  dump_stack+0x19/0x20
[   76.242721][ T2269]  should_fail_ex+0x3c2/0x510
[   76.242742][ T2269]  should_fail+0xf/0x20
[   76.242760][ T2269]  should_fail_usercopy+0x1e/0x30
[   76.242782][ T2269]  _copy_to_iter+0x3b6/0x1520
[   76.242812][ T2269]  ? __kvmalloc_node_noprof+0x128/0x300
[   76.242830][ T2269]  ? __cfi__copy_to_iter+0x10/0x10
[   76.242852][ T2269]  ? __check_object_size+0x54c/0x870
[   76.242871][ T2269]  ? __cfi___check_object_size+0x10/0x10
[   76.242888][ T2269]  ? __kasan_check_write+0x18/0x20
[   76.242905][ T2269]  ? proc_single_show+0x17f/0x1b0
[   76.242929][ T2269]  seq_read_iter+0xcb2/0xf30
[   76.242953][ T2269]  seq_read+0x368/0x490
[   76.242975][ T2269]  ? __cfi_seq_read+0x10/0x10
[   76.242997][ T2269]  ? bpf_lsm_file_permission+0xd/0x20
[   76.243019][ T2269]  ? __cfi_seq_read+0x10/0x10
[   76.243040][ T2269]  vfs_read+0x288/0xc70
[   76.243057][ T2269]  ? speculation_ctrl_update+0x12f/0x5a0
[   76.243073][ T2269]  ? __cfi_vfs_read+0x10/0x10
[   76.243090][ T2269]  ? __kasan_check_write+0x18/0x20
[   76.243106][ T2269]  ? mutex_lock+0x97/0x1d0
[   76.243125][ T2269]  ? __cfi_mutex_lock+0x10/0x10
[   76.243146][ T2269]  ksys_read+0x145/0x260
[   76.243163][ T2269]  ? xfd_validate_state+0x68/0x140
[   76.243185][ T2269]  ? __cfi_ksys_read+0x10/0x10
[   76.243203][ T2269]  ? __kasan_check_write+0x18/0x20
[   76.243219][ T2269]  ? fpregs_restore_userregs+0x11c/0x260
[   76.243240][ T2269]  __x64_sys_read+0x7f/0x90
[   76.243257][ T2269]  x64_sys_call+0x2638/0x2ee0
[   76.243273][ T2269]  do_syscall_64+0x57/0xf0
[   76.243288][ T2269]  ? clear_bhb_loop+0x50/0xa0
[   76.243308][ T2269]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   76.243328][ T2269] RIP: 0033:0x7fd74699e159
[   76.243342][ T2269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.243356][ T2269] RSP: 002b:00007fd74791e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   76.243373][ T2269] RAX: ffffffffffffffda RBX: 00007fd746c25fa0 RCX: 00007fd74699e159
[   76.243386][ T2269] RDX: 000000000000006d RSI: 0000200000002580 RDI: 0000000000000007
[   76.243402][ T2269] RBP: 00007fd746a3506b R08: 0000000000000000 R09: 0000000000000000
[   76.243412][ T2269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.243423][ T2269] R13: 00007fd746c26038 R14: 00007fd746c25fa0 R15: 00007ffe740cf378
[   76.243437][ T2269]  </TASK>
[   76.245353][ T2269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.535341][ T2269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.277842][ T2301] netlink: 140 bytes leftover after parsing attributes in process `syz.4.764'.
[   77.287351][ T2293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.764'.
[   77.473666][ T2316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'.
[   77.492991][ T2316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'.
[   77.546497][   T36] audit: type=1400 audit(1789603186.810:369): avc:  denied  { write } for  pid=2317 comm="syz.4.771" path="socket:[14914]" dev="sockfs" ino=14914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   77.612526][ T2328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.773'.
[   77.710142][ T2331] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[   77.727714][ T2338] FAULT_INJECTION: forcing a failure.
[   77.727714][ T2338] name failslab, interval 1, probability 0, space 0, times 0
[   77.764705][ T2338] CPU: 0 UID: 0 PID: 2338 Comm: syz.0.779 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[   77.764731][ T2338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   77.764742][ T2338] Call Trace:
[   77.764747][ T2338]  <TASK>
[   77.764754][ T2338]  __dump_stack+0x21/0x30
[   77.764782][ T2338]  dump_stack_lvl+0x140/0x1c0
[   77.764806][ T2338]  ? __cfi_dump_stack_lvl+0x10/0x10
[   77.764833][ T2338]  ? avc_has_perm_noaudit+0x289/0x360
[   77.764856][ T2338]  dump_stack+0x19/0x20
[   77.764878][ T2338]  should_fail_ex+0x3c2/0x510
[   77.764899][ T2338]  should_failslab+0xac/0x100
[   77.764920][ T2338]  kmem_cache_alloc_lru_noprof+0x44/0x410
[   77.764939][ T2338]  ? sock_alloc_inode+0x48/0x150
[   77.764957][ T2338]  sock_alloc_inode+0x48/0x150
[   77.764974][ T2338]  ? __cfi_sock_alloc_inode+0x10/0x10
[   77.764990][ T2338]  alloc_inode+0x7a/0x270
[   77.765011][ T2338]  ? bpf_lsm_socket_create+0xd/0x20
[   77.765030][ T2338]  new_inode_pseudo+0x19/0x40
[   77.765052][ T2338]  __sock_create+0x130/0x810
[   77.765072][ T2338]  __sys_socket+0xe1/0x1c0
[   77.765090][ T2338]  __x64_sys_socket+0x7e/0x90
[   77.765116][ T2338]  x64_sys_call+0x2608/0x2ee0
[   77.765132][ T2338]  do_syscall_64+0x57/0xf0
[   77.765160][ T2338]  ? clear_bhb_loop+0x50/0xa0
[   77.765181][ T2338]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   77.765200][ T2338] RIP: 0033:0x7fd74699e159
[   77.765214][ T2338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.765228][ T2338] RSP: 002b:00007fd74791e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   77.765246][ T2338] RAX: ffffffffffffffda RBX: 00007fd746c25fa0 RCX: 00007fd74699e159
[   77.765258][ T2338] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028
[   77.765268][ T2338] RBP: 00007fd746a3506b R08: 0000000000000000 R09: 0000000000000000
[   77.765278][ T2338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.765288][ T2338] R13: 00007fd746c26038 R14: 00007fd746c25fa0 R15: 00007ffe740cf378
[   77.765301][ T2338]  </TASK>
[   77.765317][ T2338] socket: no more sockets
[   77.986922][ T2345] tipc: Enabled bearer <eth:dummy0>, priority 10
[   78.075077][ T2351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.095821][ T2351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.132367][ T1162] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[   78.217765][ T2368] overlayfs: lower data-only dirs require metacopy support.
[   78.273236][ T1162] usb 5-1: device descriptor read/64, error -71
[   78.533243][ T1162] usb 5-1: device descriptor read/64, error -71
[   78.685759][ T2251] Bluetooth: hci0: Frame reassembly failed (-84)
[   78.692940][   T55] Bluetooth: hci0: unexpected event 0x2f length: 0 < 1
[   78.793322][ T1162] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[   78.934249][ T1162] usb 5-1: device descriptor read/64, error -71
[   79.194300][ T1162] usb 5-1: device descriptor read/64, error -71
[   79.313600][ T1162] usb usb5-port1: attempt power cycle
[   79.681974][ T1162] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[   79.704672][ T1162] usb 5-1: device descriptor read/8, error -71
[   79.845546][ T1162] usb 5-1: device descriptor read/8, error -71
[   80.104640][ T1162] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[   80.127275][ T1162] usb 5-1: device descriptor read/8, error -71
[   80.268168][ T1162] usb 5-1: device descriptor read/8, error -71
[   80.386485][ T1162] usb usb5-port1: unable to enumerate USB device
[   80.939269][   T55] Bluetooth: hci0: command 0x1003 tx timeout
[   80.945308][ T1825] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   80.988454][   T36] audit: type=1400 audit(1789603189.984:370): avc:  denied  { bind } for  pid=2378 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   81.110669][ T2389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'.
[   81.119672][ T2389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'.
[   81.130145][   T36] audit: type=1400 audit(1789603190.122:371): avc:  denied  { search } for  pid=2388 comm="syz.0.798" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   81.437572][ T1162] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[   81.606954][ T1162] usb 5-1: config 240 has an invalid interface number: 170 but max is 0
[   81.626432][ T1162] usb 5-1: config 240 has no interface number 0
[   81.641003][ T1162] usb 5-1: config 240 interface 170 has no altsetting 0
[   81.659210][ T1162] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.6a
[   81.674467][ T1162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.693832][ T1162] usb 5-1: Product: syz
[   81.706450][ T1162] usb 5-1: Manufacturer: syz
[   81.719359][ T1162] usb 5-1: SerialNumber: syz
[   81.861660][ T2414] No source specified
[   81.915574][ T2416] wireguard: wg1: Could not create IPv4 socket
[   81.985520][ T1162] usb_ehset_test 5-1:240.170: probe with driver usb_ehset_test failed with error -32
[   82.018499][ T1162] usb 5-1: USB disconnect, device number 26
[   82.302814][   T36] audit: type=1400 audit(1789603191.193:372): avc:  denied  { ioctl } for  pid=2425 comm="syz.0.811" path="socket:[17738]" dev="sockfs" ino=17738 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   82.407289][   T36] audit: type=1400 audit(1789603191.294:373): avc:  denied  { bind } for  pid=2434 comm="syz.0.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   82.438608][   T36] audit: type=1400 audit(1789603191.322:374): avc:  denied  { accept } for  pid=2434 comm="syz.0.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   82.796105][ T2452] FAULT_INJECTION: forcing a failure.
[   82.796105][ T2452] name failslab, interval 1, probability 0, space 0, times 0
[   82.808929][ T2452] CPU: 0 UID: 0 PID: 2452 Comm: syz.0.821 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[   82.808955][ T2452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   82.808966][ T2452] Call Trace:
[   82.808971][ T2452]  <TASK>
[   82.808977][ T2452]  __dump_stack+0x21/0x30
[   82.809005][ T2452]  dump_stack_lvl+0x140/0x1c0
[   82.809028][ T2452]  ? __cfi_dump_stack_lvl+0x10/0x10
[   82.809052][ T2452]  dump_stack+0x19/0x20
[   82.809074][ T2452]  should_fail_ex+0x3c2/0x510
[   82.809094][ T2452]  ? kobject_get_path+0xc3/0x2d0
[   82.809119][ T2452]  should_failslab+0xac/0x100
[   82.809147][ T2452]  __kmalloc_noprof+0x69/0x510
[   82.809164][ T2452]  ? kasan_save_alloc_info+0x3a/0x50
[   82.809178][ T2452]  ? kobject_get_path+0xc3/0x2d0
[   82.809202][ T2452]  ? __kasan_kmalloc+0x96/0xb0
[   82.809223][ T2452]  kobject_get_path+0xc3/0x2d0
[   82.809247][ T2452]  kobject_uevent_env+0x2bc/0x7e0
[   82.809265][ T2452]  kobject_uevent+0x21/0x40
[   82.809281][ T2452]  driver_register+0x373/0x3c0
[   82.809298][ T2452]  usb_gadget_register_driver_owner+0xfc/0x270
[   82.809319][ T2452]  raw_ioctl+0x144c/0x37a0
[   82.809334][ T2452]  ? __cfi_raw_ioctl+0x10/0x10
[   82.809348][ T2452]  ? selinux_file_ioctl+0x732/0x1480
[   82.809365][ T2452]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   82.809386][ T2452]  ? __fget_files+0x2bc/0x330
[   82.809406][ T2452]  ? bpf_lsm_file_ioctl+0xd/0x20
[   82.809427][ T2452]  ? security_file_ioctl+0x3e/0x110
[   82.809443][ T2452]  ? __cfi_raw_ioctl+0x10/0x10
[   82.809456][ T2452]  __se_sys_ioctl+0x123/0x1b0
[   82.809476][ T2452]  __x64_sys_ioctl+0x7f/0xa0
[   82.809496][ T2452]  x64_sys_call+0x1878/0x2ee0
[   82.809510][ T2452]  do_syscall_64+0x57/0xf0
[   82.809524][ T2452]  ? clear_bhb_loop+0x50/0xa0
[   82.809545][ T2452]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   82.809563][ T2452] RIP: 0033:0x7fd74699ddeb
[   82.809577][ T2452] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   82.809590][ T2452] RSP: 002b:00007fd74791bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   82.809608][ T2452] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fd74699ddeb
[   82.809619][ T2452] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[   82.809629][ T2452] RBP: 00007fd74791cfd0 R08: 0000000000000001 R09: 00000000ffffffff
[   82.809640][ T2452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.809650][ T2452] R13: 0000200000002380 R14: 0000000002000000 R15: 0000000000000000
[   82.809662][ T2452]  </TASK>
[   82.809684][ T2452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.069727][ T2452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.128159][ T1162] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[   83.290702][ T1162] usb 5-1: Using ep0 maxpacket: 32
[   83.296896][ T1162] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   83.305330][ T1162] usb 5-1: config 0 has no interface number 0
[   83.311422][ T1162] usb 5-1: config 0 interface 184 has no altsetting 0
[   83.319796][ T1162] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   83.328983][ T1162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.337145][ T1162] usb 5-1: Product: syz
[   83.341334][ T1162] usb 5-1: Manufacturer: syz
[   83.346098][ T1162] usb 5-1: SerialNumber: syz
[   83.354033][ T1162] usb 5-1: config 0 descriptor??
[   83.360822][ T1162] smsc75xx v1.0.0
[   83.708075][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.717951][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.729027][   T36] audit: type=1400 audit(1789603192.522:375): avc:  denied  { mounton } for  pid=2459 comm="syz.0.825" path="/149/mnt" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   83.751378][ T2460] No source specified
[   83.794456][ T2442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.804395][ T2442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.822752][ T2442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.831603][ T1162] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   83.853369][   T36] audit: type=1400 audit(1789603192.623:376): avc:  denied  { write } for  pid=2459 comm="syz.0.825" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   83.875041][ T2442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.885653][ T1162] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[   83.906581][ T1162] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   83.917088][ T1162] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[   84.651983][ T2477] fuse: Unknown parameter 'fm'
[   85.431758][ T2481] syz_tun: entered allmulticast mode
[   85.654136][ T2489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.668302][ T2491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.837'.
[   85.677386][ T2489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.685959][ T2491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'.
[   85.695151][ T2489] No source specified
[   86.485202][   T36] audit: type=1400 audit(1789603195.059:377): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   86.532863][ T2522] netlink: 'syz.0.850': attribute type 12 has an invalid length.
[   86.548510][   T10] usb 5-1: USB disconnect, device number 27
[   86.654048][ T2252] Bluetooth: hci0: Frame reassembly failed (-84)
[   86.663916][   T55] Bluetooth: hci0: Received unexpected HCI Event 0x00
[   86.750956][ T2531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.759810][ T2531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.768027][ T2531] No source specified
[   87.396322][   T36] audit: type=1326 audit(1789603195.899:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   87.422795][ T2535] fuseblk: Unknown parameter 're'
[   87.450199][ T2537] ./dev/sda1: Can't lookup blockdev
[   87.459032][   T36] audit: type=1326 audit(1789603195.927:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   87.531835][   T36] audit: type=1326 audit(1789603195.927:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   87.579651][ T2543] FAULT_INJECTION: forcing a failure.
[   87.579651][ T2543] name failslab, interval 1, probability 0, space 0, times 0
[   87.594831][   T36] audit: type=1326 audit(1789603195.927:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   87.620738][ T2543] CPU: 0 UID: 0 PID: 2543 Comm: syz.0.858 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[   87.620761][ T2543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   87.620772][ T2543] Call Trace:
[   87.620777][ T2543]  <TASK>
[   87.620783][ T2543]  __dump_stack+0x21/0x30
[   87.620810][ T2543]  dump_stack_lvl+0x140/0x1c0
[   87.620832][ T2543]  ? __cfi_dump_stack_lvl+0x10/0x10
[   87.620859][ T2543]  dump_stack+0x19/0x20
[   87.620880][ T2543]  should_fail_ex+0x3c2/0x510
[   87.620901][ T2543]  should_failslab+0xac/0x100
[   87.620922][ T2543]  __kmalloc_cache_noprof+0x41/0x470
[   87.620940][ T2543]  ? __kasan_check_write+0x18/0x20
[   87.620956][ T2543]  ? ovl_iterate+0xcb7/0x2020
[   87.620972][ T2543]  ? override_creds+0x82/0x110
[   87.620991][ T2543]  ovl_iterate+0xcb7/0x2020
[   87.621008][ T2543]  ? _parse_integer+0x2e/0x40
[   87.621026][ T2543]  ? kstrtoull+0x13b/0x1e0
[   87.621042][ T2543]  ? __cfi_ovl_iterate+0x10/0x10
[   87.621058][ T2543]  ? kstrtouint+0x78/0xf0
[   87.621075][ T2543]  ? kstrtouint_from_user+0x117/0x170
[   87.621100][ T2543]  ? __x64_sys_openat+0x13a/0x170
[   87.621125][ T2543]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   87.621144][ T2543]  ? selinux_file_permission+0x318/0xb60
[   87.621164][ T2543]  ? __kasan_check_write+0x18/0x20
[   87.621180][ T2543]  ? __kasan_check_write+0x18/0x20
[   87.621196][ T2543]  ? __kasan_check_write+0x18/0x20
[   87.621213][ T2543]  ? down_write+0xee/0x2b0
[   87.621234][ T2543]  ? __cfi_down_write+0x10/0x10
[   87.621254][ T2543]  ? __cfi_selinux_file_permission+0x10/0x10
[   87.621271][ T2543]  ? __kasan_check_write+0x18/0x20
[   87.621288][ T2543]  wrap_directory_iterator+0xa7/0xf0
[   87.621308][ T2543]  ? __cfi_ovl_iterate+0x10/0x10
[   87.621324][ T2543]  shared_ovl_iterate+0x28/0x40
[   87.621339][ T2543]  iterate_dir+0x1fd/0x5c0
[   87.621359][ T2543]  __se_sys_getdents+0xf6/0x250
[   87.621379][ T2543]  ? fput+0x1a4/0x230
[   87.621400][ T2543]  ? __x64_sys_getdents+0xa0/0xa0
[   87.621420][ T2543]  ? ksys_write+0x1f3/0x260
[   87.621437][ T2543]  ? __cfi_filldir+0x10/0x10
[   87.621457][ T2543]  ? __cfi_ksys_write+0x10/0x10
[   87.621475][ T2543]  ? __kasan_check_read+0x15/0x20
[   87.621491][ T2543]  __x64_sys_getdents+0x7f/0xa0
[   87.621512][ T2543]  x64_sys_call+0x26e0/0x2ee0
[   87.621527][ T2543]  do_syscall_64+0x57/0xf0
[   87.621541][ T2543]  ? clear_bhb_loop+0x50/0xa0
[   87.621561][ T2543]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   87.621581][ T2543] RIP: 0033:0x7fd74699e159
[   87.621595][ T2543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.621608][ T2543] RSP: 002b:00007fd74791e028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[   87.621626][ T2543] RAX: ffffffffffffffda RBX: 00007fd746c25fa0 RCX: 00007fd74699e159
[   87.621638][ T2543] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000003
[   87.621649][ T2543] RBP: 00007fd74791e090 R08: 0000000000000000 R09: 0000000000000000
[   87.621659][ T2543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.621669][ T2543] R13: 00007fd746c26038 R14: 00007fd746c25fa0 R15: 00007ffe740cf378
[   87.621682][ T2543]  </TASK>
[   87.933555][   T36] audit: type=1326 audit(1789603195.927:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   87.958762][   T36] audit: type=1326 audit(1789603195.927:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   87.983915][   T36] audit: type=1326 audit(1789603195.927:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   88.009122][   T36] audit: type=1326 audit(1789603195.927:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   88.034626][   T36] audit: type=1326 audit(1789603195.927:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.1.854" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x7ffc0000
[   88.110167][ T2550] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   88.119019][ T2550] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   88.128207][ T2550] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   88.165891][ T2554] rust_binder: 2553:2554 BC_REQUEST_DEATH_NOTIFICATION death notification already set
[   88.228807][ T2561] device-mapper: ioctl: Invalid target message parameters.
[   88.348287][ T2565] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[   88.430306][ T2568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.439578][ T2568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.447736][ T2568] No source specified
[   88.621720][ T2572] wireguard: wg1: Could not create IPv4 socket
[   88.828477][   T55] Bluetooth: hci0: command 0x1003 tx timeout
[   88.834662][ T1825] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   89.771575][ T2252] Bluetooth: hci0: Frame reassembly failed (-84)
[   90.063935][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[   90.227803][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[   90.237671][   T10] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[   90.246770][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.254890][   T10] usb 5-1: Product: syz
[   90.259307][   T10] usb 5-1: Manufacturer: syz
[   90.263915][   T10] usb 5-1: SerialNumber: syz
[   90.490458][ T2604] ./dev/sda1: Can't lookup blockdev
[   90.509645][ T2606] No source specified
[   91.841156][    C0] Clock: inserting leap second 23:59:60 UTC
[   91.949580][ T1825] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   91.955725][   T55] Bluetooth: hci0: command 0x1003 tx timeout
[   91.988117][ T2621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.996807][ T2621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.571614][   T36] kauditd_printk_skb: 24 callbacks suppressed
[   92.571642][   T36] audit: type=1400 audit(1789603199.679:411): avc:  denied  { mounton } for  pid=2622 comm="syz.0.887" path="/175/mnt/trace_marker" dev="tracefs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   92.603121][ T2623] fuse: Bad value for 'fd'
[   92.633729][   T36] audit: type=1400 audit(1789603199.734:412): avc:  denied  { bind } for  pid=2624 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   92.708879][   T36] audit: type=1400 audit(1789603199.808:413): avc:  denied  { read } for  pid=2624 comm="syz.1.888" path="socket:[19478]" dev="sockfs" ino=19478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   93.085618][   T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   93.101016][   T10] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   93.124800][   T10] usb 5-1: USB disconnect, device number 28
[   93.142437][   T36] audit: type=1400 audit(1789603200.196:414): avc:  denied  { remount } for  pid=2628 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   93.242479][   T36] audit: type=1400 audit(1789603200.251:415): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   93.351976][ T2635] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[   93.505902][ T2649] overlayfs: failed to resolve './file1': -2
[   93.529865][ T2651] FAULT_INJECTION: forcing a failure.
[   93.529865][ T2651] name failslab, interval 1, probability 0, space 0, times 0
[   93.548302][ T2651] CPU: 0 UID: 0 PID: 2651 Comm: syz.0.898 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[   93.548328][ T2651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.548338][ T2651] Call Trace:
[   93.548343][ T2651]  <TASK>
[   93.548348][ T2651]  __dump_stack+0x21/0x30
[   93.548374][ T2651]  dump_stack_lvl+0x140/0x1c0
[   93.548395][ T2651]  ? __cfi_dump_stack_lvl+0x10/0x10
[   93.548418][ T2651]  dump_stack+0x19/0x20
[   93.548438][ T2651]  should_fail_ex+0x3c2/0x510
[   93.548456][ T2651]  should_failslab+0xac/0x100
[   93.548481][ T2651]  __kmalloc_node_track_caller_noprof+0x65/0x4f0
[   93.548499][ T2651]  ? kmemdup_nul+0x98/0x1a0
[   93.548512][ T2651]  ? security_context_to_sid_core+0x153/0x5c0
[   93.548536][ T2651]  ? __asan_memcpy+0x5a/0x80
[   93.548551][ T2651]  kstrdup+0x4d/0x130
[   93.548563][ T2651]  ? security_context_to_sid_core+0x13e/0x5c0
[   93.548586][ T2651]  security_context_to_sid_core+0x153/0x5c0
[   93.548609][ T2651]  ? security_context_to_sid+0x60/0x60
[   93.548633][ T2651]  security_context_to_sid_force+0x37/0x50
[   93.548656][ T2651]  selinux_lsm_setattr+0x43b/0x8e0
[   93.548672][ T2651]  ? selinux_lsm_getattr+0x380/0x380
[   93.548688][ T2651]  ? __kasan_check_write+0x18/0x20
[   93.548703][ T2651]  ? _copy_from_user+0x87/0xa0
[   93.548725][ T2651]  selinux_setselfattr+0x50/0x70
[   93.548744][ T2651]  security_setselfattr+0x49e/0x4e0
[   93.548764][ T2651]  __x64_sys_lsm_set_self_attr+0xfb/0x140
[   93.548781][ T2651]  x64_sys_call+0x1214/0x2ee0
[   93.548795][ T2651]  do_syscall_64+0x57/0xf0
[   93.548815][ T2651]  ? clear_bhb_loop+0x50/0xa0
[   93.548834][ T2651]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   93.548870][ T2651] RIP: 0033:0x7fd74699e159
[   93.548890][ T2651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.548904][ T2651] RSP: 002b:00007fd74791e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc
[   93.548927][ T2651] RAX: ffffffffffffffda RBX: 00007fd746c25fa0 RCX: 00007fd74699e159
[   93.548940][ T2651] RDX: 0000000000000021 RSI: 0000200000000440 RDI: 0000000000000066
[   93.548951][ T2651] RBP: 00007fd746a3506b R08: 0000000000000000 R09: 0000000000000000
[   93.548963][ T2651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.548973][ T2651] R13: 00007fd746c26038 R14: 00007fd746c25fa0 R15: 00007ffe740cf378
[   93.548987][ T2651]  </TASK>
[   93.790601][ T2651] netlink: 'syz.0.898': attribute type 2 has an invalid length.
[   93.852290][ T2664] wireguard: wg1: Could not create IPv4 socket
[   93.929588][   T36] audit: type=1400 audit(1789603200.925:416): avc:  denied  { remount } for  pid=2665 comm="syz.1.903" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   94.028704][   T36] audit: type=1400 audit(1789603201.017:417): avc:  denied  { mount } for  pid=2675 comm="syz.1.907" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   94.065358][ T2678] ./dev/sda1: Can't lookup blockdev
[   94.085997][ T2680] ./dev/sda1: Can't lookup blockdev
[   94.845626][ T2690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.895707][ T2690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.932726][ T2690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.963837][ T2690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.056585][ T2694] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.095895][ T2694] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.117761][ T2702] ./dev/sda1: Can't lookup blockdev
[   95.129045][ T2694] bridge_slave_0: entered allmulticast mode
[   95.158882][ T2694] bridge_slave_0: entered promiscuous mode
[   95.185224][ T2694] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.210508][ T2694] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.232026][ T2694] bridge_slave_1: entered allmulticast mode
[   95.254656][ T2694] bridge_slave_1: entered promiscuous mode
[   95.360685][ T2694] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.367780][ T2694] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.375081][ T2694] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.382120][ T2694] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.395580][ T2715] fuse: Bad value for 'fd'
[   95.457143][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.469602][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.489315][ T2254] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.496388][ T2254] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.529837][ T2254] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.536941][ T2254] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.569808][ T2694] veth0_vlan: entered promiscuous mode
[   95.597382][ T2694] veth1_macvtap: entered promiscuous mode
[   95.637269][   T36] audit: type=1400 audit(1789603202.502:418): avc:  denied  { mounton } for  pid=2694 comm="syz-executor" path="/root/syzkaller.PZnCX6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   95.767545][ T2725] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[   95.861427][ T2252] Bluetooth: hci0: Frame reassembly failed (-84)
[   96.215302][   T36] audit: type=1400 audit(1789603203.038:419): avc:  denied  { create } for  pid=2733 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   96.411590][   T36] audit: type=1400 audit(1789603203.213:420): avc:  denied  { create } for  pid=2742 comm="syz.4.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   96.667587][ T2747] ./dev/sda1: Can't lookup blockdev
[   97.579904][ T2768] ./dev/sda1: Can't lookup blockdev
[   98.105075][   T55] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   98.111276][ T1825] Bluetooth: hci0: command 0x1003 tx timeout
[   98.358553][ T2793] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[   98.405075][ T2793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.423060][ T2793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.751691][ T2834] overlay: ./file0 is not a directory
[   98.762301][ T2827] overlay: ./file0 is not a directory
[   98.822617][ T2838] 8021q: VLANs not supported on ip_vti0
[   98.972537][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   99.125507][ T2848] process 'syz.0.972' launched './file1' with NULL argv: empty string added
[   99.135162][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   99.135176][   T36] audit: type=1400 audit(1789603205.723:423): avc:  denied  { execute } for  pid=2846 comm="syz.0.972" name="file1" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   99.166555][   T10] usb 6-1: Using ep0 maxpacket: 16
[   99.185707][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[   99.202910][   T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   99.229878][   T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64
[   99.251394][   T36] audit: type=1400 audit(1789603205.834:424): avc:  denied  { getopt } for  pid=2854 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   99.278801][   T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   99.303090][ T2859] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   99.317603][   T10] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   99.329173][ T2859] FAULT_INJECTION: forcing a failure.
[   99.329173][ T2859] name fail_futex, interval 1, probability 0, space 0, times 0
[   99.350033][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.363726][   T10] usb 6-1: Product: syz
[   99.367922][   T10] usb 6-1: Manufacturer: syz
[   99.379896][ T2859] CPU: 0 UID: 0 PID: 2859 Comm: syz.0.977 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[   99.379920][ T2859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   99.379930][ T2859] Call Trace:
[   99.379935][ T2859]  <TASK>
[   99.379941][ T2859]  __dump_stack+0x21/0x30
[   99.379969][ T2859]  dump_stack_lvl+0x140/0x1c0
[   99.379993][ T2859]  ? __cfi_dump_stack_lvl+0x10/0x10
[   99.380019][ T2859]  ? _parse_integer_limit+0x195/0x1e0
[   99.380039][ T2859]  dump_stack+0x19/0x20
[   99.380061][ T2859]  should_fail_ex+0x3c2/0x510
[   99.380081][ T2859]  should_fail+0xf/0x20
[   99.380127][ T2859]  get_futex_key+0x178/0x940
[   99.380148][ T2859]  ? kstrtouint+0x78/0xf0
[   99.380165][ T2859]  ? __cfi_get_futex_key+0x10/0x10
[   99.380185][ T2859]  ? kstrtouint_from_user+0x117/0x170
[   99.380206][ T2859]  futex_wake+0x150/0x950
[   99.380221][ T2859]  ? __cfi_futex_wake+0x10/0x10
[   99.380235][ T2859]  ? proc_fail_nth_write+0x184/0x220
[   99.380261][ T2859]  ? bpf_lsm_file_permission+0xd/0x20
[   99.380283][ T2859]  ? vfs_write+0xbcf/0xfd0
[   99.380301][ T2859]  do_futex+0x37d/0x510
[   99.380323][ T2859]  ? __cfi_do_futex+0x10/0x10
[   99.380344][ T2859]  ? mutex_unlock+0x90/0x240
[   99.380366][ T2859]  __se_sys_futex+0x13c/0x320
[   99.380388][ T2859]  ? fput+0x1a4/0x230
[   99.380409][ T2859]  ? __x64_sys_futex+0x110/0x110
[   99.380432][ T2859]  ? __cfi_ksys_write+0x10/0x10
[   99.380450][ T2859]  __x64_sys_futex+0xe9/0x110
[   99.380473][ T2859]  x64_sys_call+0x227f/0x2ee0
[   99.380488][ T2859]  do_syscall_64+0x57/0xf0
[   99.380502][ T2859]  ? clear_bhb_loop+0x50/0xa0
[   99.380523][ T2859]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   99.380542][ T2859] RIP: 0033:0x7fd74699e159
[   99.380556][ T2859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.380570][ T2859] RSP: 002b:00007fd74791e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   99.380587][ T2859] RAX: ffffffffffffffda RBX: 00007fd746c25fa8 RCX: 00007fd74699e159
[   99.380599][ T2859] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd746c25fac
[   99.380610][ T2859] RBP: 00007fd746c25fa0 R08: 4000000000000000 R09: 0000000000000000
[   99.380621][ T2859] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[   99.380631][ T2859] R13: 00007fd746c26038 R14: 00007ffe740cf290 R15: 00007ffe740cf378
[   99.380646][ T2859]  </TASK>
[   99.382493][   T10] usb 6-1: SerialNumber: syz
[   99.631675][ T2859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.642417][ T2859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.653425][   T36] audit: type=1400 audit(1789603206.184:425): avc:  denied  { mounton } for  pid=2858 comm="syz.0.977" path="/190/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   99.686961][ T2864] ./dev/sda1: Can't lookup blockdev
[   99.710270][ T2867] ./dev/sda1: Can't lookup blockdev
[   99.720000][ T2833] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   99.750220][ T2833] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   99.983682][   T36] audit: type=1400 audit(1789603206.516:426): avc:  denied  { mounton } for  pid=2832 comm="syz.5.967" path="/12/bus/file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  100.222001][ T2878] input: syz0 as /devices/virtual/input/input11
[  100.370616][ T2888] ./dev/sda1: Can't lookup blockdev
[  100.450711][ T2898] ./dev/sda1: Can't lookup blockdev
[  100.571987][   T10] usb 6-1: MIDIStreaming interface descriptor not found
[  100.592821][   T10] usb 6-1: USB disconnect, device number 2
[  100.618205][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  100.645586][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  100.785374][ T2906] bridge0: port 3(vlan0) entered blocking state
[  100.791739][ T2906] bridge0: port 3(vlan0) entered disabled state
[  100.799548][ T2906] vlan0: entered allmulticast mode
[  100.809534][ T2906] veth0_vlan: entered allmulticast mode
[  100.815699][ T2906] vlan0: entered promiscuous mode
[  100.820965][ T2906] bridge0: port 3(vlan0) entered blocking state
[  100.827231][ T2906] bridge0: port 3(vlan0) entered forwarding state
[  100.847066][ T2909] ./dev/sda1: Can't lookup blockdev
[  100.892246][ T2913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1002'.
[  100.921498][ T2913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'.
[  100.954670][ T2917] bridge0: port 3(vlan0) entered blocking state
[  100.962071][ T2917] bridge0: port 3(vlan0) entered disabled state
[  100.968825][ T2917] vlan0: entered allmulticast mode
[  100.974007][ T2917] veth0_vlan: entered allmulticast mode
[  100.980205][ T2917] vlan0: entered promiscuous mode
[  100.985425][ T2917] bridge0: port 3(vlan0) entered blocking state
[  100.991694][ T2917] bridge0: port 3(vlan0) entered forwarding state
[  101.027644][ T2923] fuse: Bad value for 'fd'
[  101.090214][ T2931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2931 comm=syz.4.1010
[  101.141370][ T2937] ./dev/sda1: Can't lookup blockdev
[  101.161780][ T2939] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1014'.
[  101.193612][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  101.205011][   T36] audit: type=1400 audit(1789603207.633:427): avc:  denied  { read write } for  pid=2940 comm="syz.0.1015" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  101.259610][ T2947] overlayfs: empty lowerdir
[  101.269611][   T36] audit: type=1400 audit(1789603207.633:428): avc:  denied  { open } for  pid=2940 comm="syz.0.1015" path="/193/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  101.400888][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.417988][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.428107][   T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  101.453716][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  101.462647][   T10] usb 6-1: SerialNumber: syz
[  101.694848][ T2967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.716230][ T2967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.838523][ T2974] SELinux:  Context Ï is not valid (left unmapped).
[  101.877289][   T36] audit: type=1400 audit(1789603208.260:429): avc:  denied  { create } for  pid=2973 comm="syz.1.1027" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF
[  101.937104][   T10] usb 6-1: 0:2 : does not exist
[  101.968610][   T10] usb 6-1: USB disconnect, device number 3
[  101.993138][   T36] audit: type=1400 audit(1789603208.260:430): avc:  denied  { associate } for  pid=2973 comm="syz.1.1027" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CF
[  102.065939][   T36] audit: type=1400 audit(1789603208.260:431): avc:  denied  { write } for  pid=2973 comm="syz.1.1027" name="file0" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF
[  102.117288][   T36] audit: type=1400 audit(1789603208.260:432): avc:  denied  { add_name } for  pid=2973 comm="syz.1.1027" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF
[  102.151226][ T2992] ./dev/sda1: Can't lookup blockdev
[  102.172731][ T2994] ./dev/sda1: Can't lookup blockdev
[  102.562308][ T2996] wireguard: wg1: Could not create IPv4 socket
[  102.580935][ T2998] netlink: 'syz.5.1036': attribute type 13 has an invalid length.
[  102.589151][ T2998] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1036'.
[  102.611127][ T3000] wireguard: wg1: Could not create IPv4 socket
[  102.647244][ T3004] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.668306][ T3006] netlink: 'syz.5.1040': attribute type 27 has an invalid length.
[  102.689996][ T3010] fuse: Bad value for 'fd'
[  102.752078][ T3010] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  102.867587][ T3020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1045'.
[  103.044326][ T3068] ./dev/sda1: Can't lookup blockdev
[  103.051349][ T3068] ./dev/sda1: Can't lookup blockdev
[  103.497311][ T3076] ./dev/sda1: Can't lookup blockdev
[  103.690125][ T3084] fuse: Bad value for 'fd'
[  103.709869][ T3086] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1055'.
[  104.972363][ T3106] ./dev/sda1: Can't lookup blockdev
[  105.153925][   T36] kauditd_printk_skb: 8 callbacks suppressed
[  105.153939][   T36] audit: type=1400 audit(1789603211.287:441): avc:  denied  { accept } for  pid=3115 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  105.353850][   T36] audit: type=1400 audit(1789603211.462:442): avc:  denied  { read } for  pid=3134 comm="syz.0.1074" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  105.391104][ T3135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'.
[  105.409170][   T36] audit: type=1400 audit(1789603211.462:443): avc:  denied  { open } for  pid=3134 comm="syz.0.1074" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  105.573617][ T3145] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1078'.
[  105.601800][   T36] audit: type=1400 audit(1789603211.693:444): avc:  denied  { mounton } for  pid=3144 comm="syz.5.1078" path="/42/file0" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.637411][ T3148] wireguard: wg1: Could not create IPv4 socket
[  105.734374][ T3161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61430 sclass=netlink_route_socket pid=3161 comm=syz.0.1081
[  105.762539][ T3164] netlink: 'syz.5.1084': attribute type 4 has an invalid length.
[  105.778057][ T3164] netlink: 'syz.5.1084': attribute type 5 has an invalid length.
[  105.785817][ T3164] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1084'.
[  105.930141][   T36] audit: type=1400 audit(1789603212.000:445): avc:  denied  { read } for  pid=3160 comm="syz.0.1081" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  105.974695][   T36] audit: type=1400 audit(1789603212.000:446): avc:  denied  { open } for  pid=3160 comm="syz.0.1081" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  106.023875][   T36] audit: type=1400 audit(1789603212.010:447): avc:  denied  { ioctl } for  pid=3160 comm="syz.0.1081" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  106.422350][   T36] audit: type=1400 audit(1789603212.453:448): avc:  denied  { module_load } for  pid=3178 comm="syz.5.1089" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  106.451931][ T3179] Invalid ELF header magic: != ELF
[  106.516969][   T36] audit: type=1400 audit(1789603212.499:449): avc:  denied  { execute_no_trans } for  pid=3178 comm="syz.5.1089" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  107.311809][ T3181] overlayfs: failed to clone upperpath
[  107.335739][ T3183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1091'.
[  107.355734][ T3183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1091'.
[  107.405695][ T3185] sock: sock_set_timeout: `syz.5.1093' (pid 3185) tries to set negative timeout
[  107.517067][ T3192] 9pnet_fd: Insufficient options for proto=fd
[  107.533800][   T36] audit: type=1326 audit(1789603213.477:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  109.072829][  T111] udevd[111]: worker [314] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time
[  109.272068][ T3211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.310953][ T3211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.629522][ T3221] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.398267][ T3233] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  110.449976][ T3235] /dev/loop0: Can't lookup blockdev
[  110.484345][ T3237] ./dev/sda1: Can't lookup blockdev
[  110.587069][   T36] kauditd_printk_skb: 22626 callbacks suppressed
[  110.587084][   T36] audit: type=1326 audit(1789603216.300:23077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  110.719716][   T36] audit: type=1326 audit(1789603216.300:23078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  110.794536][   T36] audit: type=1326 audit(1789603216.300:23079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  110.876095][   T36] audit: type=1326 audit(1789603216.300:23080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  110.928659][ T3246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.947506][ T3246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.962189][   T36] audit: type=1326 audit(1789603216.300:23081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  111.019629][   T36] audit: type=1326 audit(1789603216.300:23082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  111.072095][   T36] audit: type=1326 audit(1789603216.300:23083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  111.098344][ T3246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.107696][ T3248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.117561][ T3248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.125434][   T36] audit: type=1326 audit(1789603216.300:23084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  111.150708][ T3246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.160776][ T3247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.170641][ T3247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.178621][   T36] audit: type=1326 audit(1789603216.300:23085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  111.204848][   T36] audit: type=1326 audit(1789603216.300:23086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3188 comm="syz.5.1095" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x50000
[  111.279904][ T3255] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1120'.
[  111.289166][ T3250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3250 comm=syz.1.1127
[  111.301864][ T3255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1120'.
[  111.312752][ T3250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'.
[  111.477430][ T3273] tc_dump_action: action bad kind
[  111.932477][   T55] Bluetooth: hci0: unexpected event 0x2f length: 0 < 1
[  113.097713][ T3335] netlink: 'syz.1.1155': attribute type 15 has an invalid length.
[  113.114851][ T3335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'.
[  113.202931][ T3341] overlayfs: failed to resolve './cgroup': -2
[  113.260776][ T3345] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29980 sclass=netlink_xfrm_socket pid=3345 comm=syz.1.1160
[  114.144480][   T55] Bluetooth: hci0: command 0x1003 tx timeout
[  114.150541][ T1825] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  115.060017][ T3407] fuse: Bad value for 'user_id'
[  115.065011][ T3407] fuse: Bad value for 'user_id'
[  115.071215][ T3407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3407 comm=syz.5.1186
[  115.294378][ T3417] ./dev/sda1: Can't lookup blockdev
[  115.311048][ T3419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.326405][ T3419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.527126][ T3430] overlayfs: failed to clone upperpath
[  116.077773][ T3440] fuse: Bad value for 'fd'
[  116.244577][ T3448] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1203'.
[  116.266583][   T36] kauditd_printk_skb: 64 callbacks suppressed
[  116.266597][   T36] audit: type=1326 audit(1789603477.534:23151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.5.1204" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7c4d9e159 code=0x0
[  116.672408][ T3455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'.
[  118.223140][ T3508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1229'.
[  118.255109][ T1546] syz_tun (unregistering): left allmulticast mode
[  118.289832][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'.
[  118.353967][ T3511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3511 comm=syz.5.1231
[  118.392976][ T3511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3511 comm=syz.5.1231
[  118.447075][ T3519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1231'.
[  118.506813][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.534237][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.563218][ T3512] bridge_slave_0: entered allmulticast mode
[  118.574598][ T3512] bridge_slave_0: entered promiscuous mode
[  118.596631][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.620564][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.627696][ T3512] bridge_slave_1: entered allmulticast mode
[  118.666812][ T3512] bridge_slave_1: entered promiscuous mode
[  118.808803][ T3535] ./dev/sda1: Can't lookup blockdev
[  118.829214][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.836292][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.843591][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.850621][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.935195][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.945504][ T3049] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.971508][ T3049] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.978710][ T3049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.000586][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.007660][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.077957][   T36] audit: type=1326 audit(1789603480.127:23152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3538 comm="syz.1.1239" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb23b9e159 code=0x0
[  119.118698][ T3512] veth0_vlan: entered promiscuous mode
[  119.161036][ T3512] veth1_macvtap: entered promiscuous mode
[  119.430149][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1241'.
[  119.439698][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1241'.
[  119.505052][ T3552] FAULT_INJECTION: forcing a failure.
[  119.505052][ T3552] name failslab, interval 1, probability 0, space 0, times 0
[  119.540867][ T3552] CPU: 0 UID: 0 PID: 3552 Comm: syz.6.1244 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[  119.540902][ T3552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.540913][ T3552] Call Trace:
[  119.540919][ T3552]  <TASK>
[  119.540926][ T3552]  __dump_stack+0x21/0x30
[  119.540957][ T3552]  dump_stack_lvl+0x140/0x1c0
[  119.540980][ T3552]  ? __cfi_dump_stack_lvl+0x10/0x10
[  119.541004][ T3552]  ? __kasan_check_write+0x18/0x20
[  119.541022][ T3552]  ? _raw_spin_lock+0x92/0x120
[  119.541038][ T3552]  dump_stack+0x19/0x20
[  119.541071][ T3552]  should_fail_ex+0x3c2/0x510
[  119.541092][ T3552]  should_failslab+0xac/0x100
[  119.541112][ T3552]  __kmalloc_cache_noprof+0x41/0x470
[  119.541130][ T3552]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  119.541150][ T3552]  ? dummy_alloc_request+0x8e/0x1f0
[  119.541167][ T3552]  dummy_alloc_request+0x8e/0x1f0
[  119.541183][ T3552]  usb_ep_alloc_request+0x78/0x1c0
[  119.541197][ T3552]  gadget_bind+0xe5/0x590
[  119.541211][ T3552]  ? __cfi_mutex_unlock+0x10/0x10
[  119.541230][ T3552]  ? kernfs_put+0x314/0x360
[  119.541251][ T3552]  ? __cfi_gadget_bind+0x10/0x10
[  119.541265][ T3552]  gadget_bind_driver+0x304/0x9c0
[  119.541285][ T3552]  ? sysfs_create_link+0x6c/0x90
[  119.541302][ T3552]  ? __cfi_gadget_bind_driver+0x10/0x10
[  119.541322][ T3552]  really_probe+0x2e4/0x8b0
[  119.541338][ T3552]  __driver_probe_device+0x193/0x280
[  119.541353][ T3552]  driver_probe_device+0x54/0x3f0
[  119.541369][ T3552]  __driver_attach+0x422/0x5e0
[  119.541384][ T3552]  bus_for_each_dev+0x249/0x2d0
[  119.541403][ T3552]  ? __cfi___driver_attach+0x10/0x10
[  119.541418][ T3552]  ? __cfi_bus_for_each_dev+0x10/0x10
[  119.541437][ T3552]  ? __kasan_kmalloc+0x96/0xb0
[  119.541457][ T3552]  ? _raw_spin_unlock+0x45/0x60
[  119.541471][ T3552]  ? klist_add_tail+0x1dd/0x220
[  119.541494][ T3552]  driver_attach+0x46/0x50
[  119.541508][ T3552]  bus_add_driver+0x393/0x730
[  119.541528][ T3552]  driver_register+0x2b7/0x3c0
[  119.541545][ T3552]  usb_gadget_register_driver_owner+0xfc/0x270
[  119.541564][ T3552]  raw_ioctl+0x144c/0x37a0
[  119.541580][ T3552]  ? __cfi_raw_ioctl+0x10/0x10
[  119.541593][ T3552]  ? selinux_file_ioctl+0x732/0x1480
[  119.541611][ T3552]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  119.541631][ T3552]  ? __fget_files+0x2bc/0x330
[  119.541651][ T3552]  ? bpf_lsm_file_ioctl+0xd/0x20
[  119.541672][ T3552]  ? security_file_ioctl+0x3e/0x110
[  119.541688][ T3552]  ? __cfi_raw_ioctl+0x10/0x10
[  119.541701][ T3552]  __se_sys_ioctl+0x123/0x1b0
[  119.541721][ T3552]  __x64_sys_ioctl+0x7f/0xa0
[  119.541740][ T3552]  x64_sys_call+0x1878/0x2ee0
[  119.541755][ T3552]  do_syscall_64+0x57/0xf0
[  119.541769][ T3552]  ? clear_bhb_loop+0x50/0xa0
[  119.541789][ T3552]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  119.541808][ T3552] RIP: 0033:0x7fb89999ddeb
[  119.541822][ T3552] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  119.541835][ T3552] RSP: 002b:00007fb89a87af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  119.541853][ T3552] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb89999ddeb
[  119.541881][ T3552] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005
[  119.541891][ T3552] RBP: 00007fb89a87bfd0 R08: 0000000000000001 R09: 00000000ffffffff
[  119.541902][ T3552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.541930][ T3552] R13: 0000200000002380 R14: 0000000000000000 R15: 0000000000000000
[  119.541943][ T3552]  </TASK>
[  119.895057][   T36] audit: type=1400 audit(1789603480.884:23153): avc:  denied  { getopt } for  pid=3555 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  119.918796][ T3552] raw-gadget.1 gadget.6: usb_ep_alloc_request failed
[  119.925880][ T3552] udc dummy_udc.6: failed to start USB Raw Gadget: -12
[  120.000551][   T36] audit: type=1400 audit(1789603480.976:23154): avc:  denied  { create } for  pid=3563 comm="syz.1.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  120.322009][ T3552] raw-gadget.1 gadget.6: probe with driver raw-gadget.1 failed with error -12
[  120.360454][ T3552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.395000][ T3552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.338184][ T3623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=3623 comm=syz.1.1271
[  121.517000][ T3641] overlayfs: failed to resolve './cgroup': -2
[  121.536034][ T3643] wireguard: wg1: Could not create IPv4 socket
[  121.554474][ T3645] netlink: 'syz.0.1281': attribute type 9 has an invalid length.
[  121.949984][ T3658] fuse: Bad value for 'group_id'
[  121.954984][ T3658] fuse: Bad value for 'group_id'
[  121.976132][   T36] audit: type=1400 audit(1789603482.803:23155): avc:  denied  { bind } for  pid=3657 comm="syz.6.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  122.042672][   T36] audit: type=1400 audit(1789603482.831:23156): avc:  denied  { write } for  pid=3657 comm="syz.6.1286" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  122.139946][   T36] audit: type=1400 audit(1789603482.831:23157): avc:  denied  { open } for  pid=3657 comm="syz.6.1286" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  122.227466][   T36] audit: type=1400 audit(1789603482.831:23158): avc:  denied  { ioctl } for  pid=3657 comm="syz.6.1286" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  122.522025][ T1828] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  122.664742][ T1828] usb 7-1: device descriptor read/64, error -71
[  122.921058][ T3697] overlayfs: failed to clone lowerpath
[  122.926728][ T1828] usb 7-1: device descriptor read/64, error -71
[  122.989243][ T3698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'.
[  123.194008][ T1828] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  123.336071][ T1828] usb 7-1: device descriptor read/64, error -71
[  123.393113][ T3709] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  123.402384][ T3709] overlayfs: missing 'lowerdir'
[  123.409271][ T3716] syz.0.1308 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  123.434318][ T3719] wireguard: wg1: Could not create IPv4 socket
[  123.452810][ T3721] ./dev/sda1: Can't lookup blockdev
[  123.595436][ T1828] usb 7-1: device descriptor read/64, error -71
[  123.714291][ T1828] usb usb7-port1: attempt power cycle
[  123.829184][ T3734] ./dev/sda1: Can't lookup blockdev
[  124.084427][ T1828] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  124.127068][ T1828] usb 7-1: device descriptor read/8, error -71
[  124.283539][ T1828] usb 7-1: device descriptor read/8, error -71
[  124.423640][ T3761] 9p: Unknown Cache mode or invalid value dev/kvm
[  124.550598][ T1828] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  124.561054][ T3767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42590 sclass=netlink_route_socket pid=3767 comm=syz.0.1331
[  124.603864][ T1828] usb 7-1: device descriptor read/8, error -71
[  124.692003][ T3776] fuse: Bad value for 'user_id'
[  124.696914][ T3776] fuse: Bad value for 'user_id'
[  124.744918][ T1828] usb 7-1: device descriptor read/8, error -71
[  124.754521][ T3783] overlayfs: failed to resolve './cgroup': -2
[  124.846450][ T3793] overlayfs: failed to clone upperpath
[  124.854311][   T36] audit: type=1400 audit(1789603485.470:23159): avc:  denied  { sqpoll } for  pid=3792 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  124.882625][ T1828] usb usb7-port1: unable to enumerate USB device
[  124.917196][ T3797] wireguard: wg1: Could not create IPv4 socket
[  125.082288][   T36] audit: type=1400 audit(1789603485.673:23160): avc:  denied  { create } for  pid=3810 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  125.113973][ T3813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1353'.
[  125.123264][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'.
[  125.186562][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1357'.
[  125.231834][ T3787] netlink: 'syz.5.1341': attribute type 4 has an invalid length.
[  125.241862][ T3787] netlink: 'syz.5.1341': attribute type 4 has an invalid length.
[  125.481590][ T3824] veth0_virt_wifi: entered promiscuous mode
[  125.757828][ T3835] raw_sendmsg: syz.1.1363 forgot to set AF_INET. Fix it!
[  125.851599][ T3844] fuse: Bad value for 'user_id'
[  125.863665][ T3844] fuse: Bad value for 'user_id'
[  125.872890][    T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  125.897154][ T3846] overlayfs: failed to resolve './cgroup': -2
[  126.056175][    T9] usb 7-1: config 0 has an invalid interface number: 49 but max is 0
[  126.075410][    T9] usb 7-1: config 0 has no interface number 0
[  126.081828][    T9] usb 7-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30
[  126.109140][    T9] usb 7-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[  126.133296][    T9] usb 7-1: config 0 interface 49 has no altsetting 0
[  126.151998][    T9] usb 7-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23
[  126.176132][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.200510][    T9] usb 7-1: Product: syz
[  126.219264][    T9] usb 7-1: Manufacturer: syz
[  126.228036][    T9] usb 7-1: SerialNumber: syz
[  126.247352][    T9] usb 7-1: config 0 descriptor??
[  126.255570][ T3857] wireguard: wg1: Could not create IPv4 socket
[  126.493250][    T9] ftdi_sio 7-1:0.49: FTDI USB Serial Device converter detected
[  126.516369][    T9] ftdi_sio ttyUSB0: unknown device type: 0x223
[  126.548181][    T9] usb 7-1: USB disconnect, device number 6
[  126.587638][    T9] ftdi_sio 7-1:0.49: device disconnected
[  126.665503][ T3880] netlink: 'syz.5.1384': attribute type 16 has an invalid length.
[  126.679808][ T3882] fuse: Bad value for 'fd'
[  126.693989][ T3880] netlink: 'syz.5.1384': attribute type 3 has an invalid length.
[  126.712683][ T3880] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.1384'.
[  126.735213][ T3880] devpts: called with bogus options
[  126.801789][ T3889] netlink: 'syz.1.1388': attribute type 8 has an invalid length.
[  128.382356][ T3962] fuse: Bad value for 'fd'
[  129.367732][   T36] audit: type=1400 audit(1789603489.631:23161): avc:  denied  { append } for  pid=3976 comm="syz.6.1417" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  129.430787][ T3979] FAULT_INJECTION: forcing a failure.
[  129.430787][ T3979] name failslab, interval 1, probability 0, space 0, times 0
[  129.456642][ T3979] CPU: 0 UID: 0 PID: 3979 Comm: syz.6.1418 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[  129.456670][ T3979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  129.456682][ T3979] Call Trace:
[  129.456688][ T3979]  <TASK>
[  129.456695][ T3979]  __dump_stack+0x21/0x30
[  129.456726][ T3979]  dump_stack_lvl+0x140/0x1c0
[  129.456752][ T3979]  ? __cfi_dump_stack_lvl+0x10/0x10
[  129.456783][ T3979]  dump_stack+0x19/0x20
[  129.456807][ T3979]  should_fail_ex+0x3c2/0x510
[  129.456831][ T3979]  should_failslab+0xac/0x100
[  129.456854][ T3979]  kmem_cache_alloc_noprof+0x42/0x410
[  129.456873][ T3979]  ? __kasan_check_write+0x18/0x20
[  129.456893][ T3979]  ? skb_clone+0x21d/0x470
[  129.456924][ T3979]  ? __cfi__raw_read_lock_irqsave+0x10/0x10
[  129.456945][ T3979]  skb_clone+0x21d/0x470
[  129.456969][ T3979]  netlink_broadcast_filtered+0x691/0x11d0
[  129.456997][ T3979]  netlink_broadcast+0x3e/0x60
[  129.457022][ T3979]  kobject_uevent_net_broadcast+0x3de/0x5e0
[  129.457044][ T3979]  kobject_uevent_env+0x551/0x7e0
[  129.457065][ T3979]  kobject_uevent+0x21/0x40
[  129.457084][ T3979]  gadget_bind_driver+0x5e2/0x9c0
[  129.457108][ T3979]  ? __cfi_gadget_bind_driver+0x10/0x10
[  129.457131][ T3979]  really_probe+0x2e4/0x8b0
[  129.457150][ T3979]  __driver_probe_device+0x193/0x280
[  129.457168][ T3979]  driver_probe_device+0x54/0x3f0
[  129.457186][ T3979]  __driver_attach+0x422/0x5e0
[  129.457203][ T3979]  bus_for_each_dev+0x249/0x2d0
[  129.457226][ T3979]  ? __cfi___driver_attach+0x10/0x10
[  129.457243][ T3979]  ? __cfi_bus_for_each_dev+0x10/0x10
[  129.457277][ T3979]  ? __kasan_kmalloc+0x96/0xb0
[  129.457299][ T3979]  ? _raw_spin_unlock+0x45/0x60
[  129.457334][ T3979]  ? klist_add_tail+0x1dd/0x220
[  129.457361][ T3979]  driver_attach+0x46/0x50
[  129.457377][ T3979]  bus_add_driver+0x393/0x730
[  129.457401][ T3979]  driver_register+0x2b7/0x3c0
[  129.457421][ T3979]  usb_gadget_register_driver_owner+0xfc/0x270
[  129.457444][ T3979]  raw_ioctl+0x144c/0x37a0
[  129.457462][ T3979]  ? __cfi_raw_ioctl+0x10/0x10
[  129.457478][ T3979]  ? selinux_file_ioctl+0x732/0x1480
[  129.457499][ T3979]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  129.457522][ T3979]  ? __fget_files+0x2bc/0x330
[  129.457545][ T3979]  ? bpf_lsm_file_ioctl+0xd/0x20
[  129.457569][ T3979]  ? security_file_ioctl+0x3e/0x110
[  129.457588][ T3979]  ? __cfi_raw_ioctl+0x10/0x10
[  129.457603][ T3979]  __se_sys_ioctl+0x123/0x1b0
[  129.457635][ T3979]  __x64_sys_ioctl+0x7f/0xa0
[  129.457655][ T3979]  x64_sys_call+0x1878/0x2ee0
[  129.457670][ T3979]  do_syscall_64+0x57/0xf0
[  129.457685][ T3979]  ? clear_bhb_loop+0x50/0xa0
[  129.457706][ T3979]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  129.457725][ T3979] RIP: 0033:0x7fb89999ddeb
[  129.457738][ T3979] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  129.457753][ T3979] RSP: 002b:00007fb89a87af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  129.457770][ T3979] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb89999ddeb
[  129.457783][ T3979] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  129.457793][ T3979] RBP: 00007fb89a87bfd0 R08: 0000000000000001 R09: 00000000ffffffff
[  129.457804][ T3979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.457814][ T3979] R13: 0000200000002380 R14: 0000000000000000 R15: 0000000000000000
[  129.457827][ T3979]  </TASK>
[  130.238509][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  130.444573][    T9] usb 7-1: Using ep0 maxpacket: 16
[  130.451119][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  130.459702][    T9] usb 7-1: config 1 has an invalid interface number: 128 but max is 2
[  130.474897][    T9] usb 7-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config
[  130.507151][    T9] usb 7-1: config 1 has no interface number 2
[  130.527337][    T9] usb 7-1: too many endpoints for config 1 interface 128 altsetting 212: 229, using maximum allowed: 30
[  130.564029][    T9] usb 7-1: config 1 interface 128 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 229
[  130.606989][    T9] usb 7-1: config 1 interface 128 has no altsetting 0
[  130.630640][    T9] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  130.642194][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.670924][    T9] usb 7-1: Product: syz
[  130.684371][    T9] usb 7-1: Manufacturer: syz
[  130.699370][    T9] usb 7-1: SerialNumber: syz
[  130.934558][    T9] usb 7-1: 0:2 : does not exist
[  130.967456][    T9] usb 7-1: USB disconnect, device number 7
[  131.541763][ T3990] ./dev/sda1: Can't lookup blockdev
[  132.124284][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  132.321606][    T9] usb 7-1: Using ep0 maxpacket: 32
[  132.347907][    T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  132.397462][    T9] usb 7-1: config 0 has no interface number 0
[  132.514442][    T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  132.556409][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.602251][    T9] usb 7-1: Product: syz
[  132.635231][    T9] usb 7-1: Manufacturer: syz
[  132.639912][    T9] usb 7-1: SerialNumber: syz
[  132.688028][    T9] usb 7-1: config 0 descriptor??
[  132.720260][    T9] smsc95xx v2.0.0
[  132.916520][ T4026] x_tables: duplicate underflow at hook 1
[  133.164397][    T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  133.193250][ T4036] overlay: Unknown parameter 'fsuuid'
[  133.218886][    T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  133.349855][ T4048] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1447'.
[  133.391648][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'.
[  133.824202][    T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  133.846114][    T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  133.854374][ T4079] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1462'.
[  133.877210][    T9] usb 7-1: USB disconnect, device number 8
[  133.885470][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1462'.
[  134.093127][ T4093] wireguard: wg1: Could not create IPv4 socket
[  135.041155][ T4135] overlayfs: failed to clone upperpath
[  135.072294][ T4136] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1486'.
[  135.169693][  T355] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  135.177411][ T4140] ./dev/sda1: Can't lookup blockdev
[  135.267070][ T4146] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1491'.
[  135.319462][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1491'.
[  135.366849][  T355] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.393014][  T355] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.444289][  T355] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  135.468303][  T355] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.511536][  T355] usb 7-1: SerialNumber: syz
[  135.991744][  T355] usb 7-1: 0:2 : does not exist
[  136.044776][  T355] usb 7-1: USB disconnect, device number 9
[  136.184557][ T4163] x_tables: unsorted entry at hook 1
[  137.441218][ T4183] wireguard: wg1: Could not create IPv4 socket
[  138.197522][   T36] audit: type=1326 audit(1789603497.779:23162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4195 comm="syz.1.1512" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb23b9e159 code=0x0
[  139.083183][   T36] audit: type=1326 audit(1789603498.600:23163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  139.244690][   T36] audit: type=1326 audit(1789603498.600:23164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  139.301673][ T4231] wireguard: wg1: Could not create IPv4 socket
[  139.383410][   T36] audit: type=1326 audit(1789603498.600:23165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  139.507504][ T4242] overlayfs: missing 'workdir'
[  139.524455][   T36] audit: type=1326 audit(1789603498.600:23166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  139.562426][ T4247] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1534'.
[  139.602516][ T4246] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1534'.
[  139.614897][ T4251] overlayfs: failed to clone upperpath
[  139.640598][ T4251] af_packet: packet size is too long (25449 > 2016)
[  139.657710][   T36] audit: type=1326 audit(1789603498.600:23167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  139.767061][   T36] audit: type=1326 audit(1789603498.618:23168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  139.800155][ T4277] wireguard: wg1: Could not create IPv4 socket
[  139.874671][   T36] audit: type=1326 audit(1789603498.618:23169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  139.936505][ T4286] overlayfs: failed to clone upperpath
[  139.958266][   T36] audit: type=1326 audit(1789603498.618:23170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  140.040121][   T36] audit: type=1326 audit(1789603498.618:23171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.5.1524" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7c4d9e159 code=0x7ffc0000
[  141.703530][ T4375] futex_wake_op: syz.1.1577 tries to shift op by 144; fix this program
[  141.748292][ T4375] futex_wake_op: syz.1.1577 tries to shift op by 144; fix this program
[  141.812162][ T4382] IPv6: Can't replace route, no match found
[  142.034439][ T4398] fuse: Bad value for 'fd'
[  142.939709][ T4433] 9pnet_fd: Insufficient options for proto=fd
[  143.983025][ T4458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1605'.
[  144.065922][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[  144.766355][   T36] kauditd_printk_skb: 55 callbacks suppressed
[  144.766393][   T36] audit: type=1401 audit(1789603503.841:23227): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A7573626D6F6E5F6465766963655F743A7330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E00726F632F7379732F66732F62696E666D745F6D6973632F7265676973746572000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073656375726974792E73656C696E7578000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
[  145.072074][ T4487] ./dev/sda1: Can't lookup blockdev
[  145.330278][ T4495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1620'.
[  145.340886][   T36] audit: type=1400 audit(1789603504.330:23228): avc:  denied  { connect } for  pid=4492 comm="syz.5.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  145.389777][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1620'.
[  145.454751][   T36] audit: type=1326 audit(1789603504.394:23229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4496 comm="syz.5.1621" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c4d9e159 code=0x0
[  145.621697][ T4514] futex_wake_op: syz.0.1625 tries to shift op by -1; fix this program
[  145.650591][ T4514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1625'.
[  146.260069][   T36] audit: type=1400 audit(1789603505.215:23230): avc:  denied  { create } for  pid=4535 comm="syz.5.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  146.334695][ T4541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'.
[  146.484841][ T4557] ./dev/sda1: Can't lookup blockdev
[  147.294929][ T4587] netlink: 'syz.0.1653': attribute type 7 has an invalid length.
[  147.316108][ T4587] netlink: 'syz.0.1653': attribute type 5 has an invalid length.
[  147.338325][ T4587] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1653'.
[  147.654716][ T4604] overlayfs: failed to clone upperpath
[  147.882677][ T4615] overlayfs: conflicting options: userxattr,verity=on
[  147.953652][ T4616] overlayfs: conflicting options: userxattr,verity=on
[  149.084452][ T4670] ./dev/sda1: Can't lookup blockdev
[  149.572656][   T36] audit: type=1400 audit(1789603508.270:23231): avc:  denied  { read } for  pid=4675 comm="syz.0.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  150.196646][ T4744] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1705'.
[  150.264283][ T4748] syz.0.1707 (4748): attempted to duplicate a private mapping with mremap.  This is not supported.
[  150.296643][ T4748] netlink: 'syz.0.1707': attribute type 4 has an invalid length.
[  150.334928][ T4748] netlink: 'syz.0.1707': attribute type 17 has an invalid length.
[  150.452515][ T4752] wireguard: wg1: Could not create IPv4 socket
[  150.704806][ T4776] overlayfs: failed to clone lowerpath
[  150.710372][   T36] audit: type=1400 audit(1789603509.318:23232): avc:  denied  { read } for  pid=4775 comm="syz.0.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  150.743019][ T4776] overlayfs: failed to clone lowerpath
[  150.785034][ T4786] wireguard: wg1: Could not create IPv4 socket
[  150.802415][ T4788] tipc: Cannot configure node identity twice
[  151.250942][ T4816] overlayfs: failed to clone lowerpath
[  152.277144][ T4851] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1741'.
[  153.583248][   T36] audit: type=1400 audit(1789603511.975:23233): avc:  denied  { name_bind } for  pid=4888 comm="syz.0.1757" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  153.754427][ T4898] tmpfs: Invalid gid '0x00000000ffffffff'
[  155.560246][   T36] audit: type=1326 audit(1789603513.793:23234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.6.1771" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb89999e159 code=0x0
[  155.737536][ T4929] ./dev/sda1: Can't lookup blockdev
[  156.076965][ T4933] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1774'.
[  156.205902][   T36] audit: type=1400 audit(1789603514.393:23235): avc:  denied  { map } for  pid=4936 comm="syz.0.1776" path="socket:[28527]" dev="sockfs" ino=28527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  156.370421][ T4945] wireguard: wg1: Could not create IPv4 socket
[  156.422422][ T4947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4947 comm=syz.0.1780
[  156.894512][   T36] audit: type=1400 audit(1789603515.029:23236): avc:  denied  { create } for  pid=4972 comm="syz.6.1789" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  156.958914][ T4975] netlink: 'syz.6.1790': attribute type 9 has an invalid length.
[  156.986159][   T36] audit: type=1400 audit(1789603515.057:23237): avc:  denied  { mounton } for  pid=4972 comm="syz.6.1789" path="/110/file0" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  157.867327][ T5003] 9pnet_fd: Insufficient options for proto=fd
[  159.260823][ T5043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1817'.
[  159.281977][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'.
[  159.853375][ T5065] wireguard: wg1: Could not create IPv4 socket
[  160.316329][ T5079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1832'.
[  160.370004][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'.
[  162.372764][ T5143] wireguard: wg1: Could not create IPv4 socket
[  163.810503][ T5174] wireguard: wg1: Could not create IPv4 socket
[  163.888627][ T5180] overlayfs: failed to clone lowerpath
[  164.435348][ T5190] netlink: 'syz.6.1871': attribute type 46 has an invalid length.
[  164.467185][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1871'.
[  164.632757][ T5198] wireguard: wg1: Could not create IPv4 socket
[  164.686857][ T5202] fuse: Unknown parameter 'n;î?vðS%?¿X—×¾ƒg¨8Øý¼îKI
[  164.686857][ T5202] '
[  165.285216][ T5224] wireguard: wg1: Could not create IPv4 socket
[  166.166443][ T5241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=5241 comm=syz.1.1892
[  166.203351][ T5241] ./dev/sda1: Can't lookup blockdev
[  166.219578][ T5243] x_tables: duplicate underflow at hook 1
[  166.781399][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.815925][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.837642][ T5247] bridge_slave_0: entered allmulticast mode
[  166.843951][ T5247] bridge_slave_0: entered promiscuous mode
[  166.872977][ T3053] veth1_macvtap: left promiscuous mode
[  166.878524][ T3053] veth0_vlan: left promiscuous mode
[  166.976624][ T5256] overlayfs: failed to clone upperpath
[  167.178061][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.223748][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.251849][ T5247] bridge_slave_1: entered allmulticast mode
[  167.258193][ T5247] bridge_slave_1: entered promiscuous mode
[  167.573217][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.580344][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.587629][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.594672][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.781807][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.802875][ T3049] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.869355][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.876454][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.031068][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.038154][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.198136][ T5247] veth0_vlan: entered promiscuous mode
[  168.244501][ T5247] veth1_macvtap: entered promiscuous mode
[  168.438685][ T5297] FAULT_INJECTION: forcing a failure.
[  168.438685][ T5297] name failslab, interval 1, probability 0, space 0, times 0
[  168.506660][ T5297] CPU: 0 UID: 0 PID: 5297 Comm: syz.1.1894 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[  168.506690][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.506700][ T5297] Call Trace:
[  168.506706][ T5297]  <TASK>
[  168.506712][ T5297]  __dump_stack+0x21/0x30
[  168.506739][ T5297]  dump_stack_lvl+0x140/0x1c0
[  168.506763][ T5297]  ? __cfi_dump_stack_lvl+0x10/0x10
[  168.506788][ T5297]  dump_stack+0x19/0x20
[  168.506810][ T5297]  should_fail_ex+0x3c2/0x510
[  168.506830][ T5297]  ? kobject_get_path+0xc3/0x2d0
[  168.506856][ T5297]  should_failslab+0xac/0x100
[  168.506877][ T5297]  __kmalloc_noprof+0x69/0x510
[  168.506895][ T5297]  ? kasan_save_alloc_info+0x3a/0x50
[  168.506910][ T5297]  ? kobject_get_path+0xc3/0x2d0
[  168.506935][ T5297]  ? __kasan_kmalloc+0x96/0xb0
[  168.506956][ T5297]  kobject_get_path+0xc3/0x2d0
[  168.506981][ T5297]  kobject_uevent_env+0x2bc/0x7e0
[  168.507000][ T5297]  kobject_uevent+0x21/0x40
[  168.507017][ T5297]  driver_bound+0x449/0x480
[  168.507032][ T5297]  really_probe+0x7ef/0x8b0
[  168.507048][ T5297]  __driver_probe_device+0x193/0x280
[  168.507064][ T5297]  driver_probe_device+0x54/0x3f0
[  168.507080][ T5297]  __driver_attach+0x422/0x5e0
[  168.507095][ T5297]  bus_for_each_dev+0x249/0x2d0
[  168.507116][ T5297]  ? __cfi___driver_attach+0x10/0x10
[  168.507131][ T5297]  ? __cfi_bus_for_each_dev+0x10/0x10
[  168.507151][ T5297]  ? __kasan_kmalloc+0x96/0xb0
[  168.507172][ T5297]  ? _raw_spin_unlock+0x45/0x60
[  168.507187][ T5297]  ? klist_add_tail+0x1dd/0x220
[  168.507211][ T5297]  driver_attach+0x46/0x50
[  168.507234][ T5297]  bus_add_driver+0x393/0x730
[  168.507256][ T5297]  driver_register+0x2b7/0x3c0
[  168.507274][ T5297]  usb_gadget_register_driver_owner+0xfc/0x270
[  168.507296][ T5297]  raw_ioctl+0x144c/0x37a0
[  168.507312][ T5297]  ? __cfi_raw_ioctl+0x10/0x10
[  168.507327][ T5297]  ? selinux_file_ioctl+0x732/0x1480
[  168.507346][ T5297]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  168.507367][ T5297]  ? __fget_files+0x2bc/0x330
[  168.507388][ T5297]  ? bpf_lsm_file_ioctl+0xd/0x20
[  168.507409][ T5297]  ? security_file_ioctl+0x3e/0x110
[  168.507426][ T5297]  ? __cfi_raw_ioctl+0x10/0x10
[  168.507439][ T5297]  __se_sys_ioctl+0x123/0x1b0
[  168.507461][ T5297]  __x64_sys_ioctl+0x7f/0xa0
[  168.507481][ T5297]  x64_sys_call+0x1878/0x2ee0
[  168.507496][ T5297]  do_syscall_64+0x57/0xf0
[  168.507511][ T5297]  ? clear_bhb_loop+0x50/0xa0
[  168.507531][ T5297]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  168.507551][ T5297] RIP: 0033:0x7f5b91b9ddeb
[  168.507565][ T5297] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  168.507579][ T5297] RSP: 002b:00007f5b92b38f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.507597][ T5297] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5b91b9ddeb
[  168.507609][ T5297] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  168.507619][ T5297] RBP: 00007f5b92b39fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  168.507630][ T5297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.507640][ T5297] R13: 0000200000002380 R14: 0000000000000000 R15: 0000000000000000
[  168.507652][ T5297]  </TASK>
[  169.461408][ T5313] x_tables: unsorted underflow at hook 4
[  169.528152][ T1162] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  169.662779][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.679181][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.694264][ T5293] bridge_slave_0: entered allmulticast mode
[  169.707996][ T5293] bridge_slave_0: entered promiscuous mode
[  169.720633][ T1162] usb 2-1: Using ep0 maxpacket: 16
[  169.727195][ T1162] usb 2-1: unable to get BOS descriptor or descriptor too short
[  169.737921][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.746493][ T1162] usb 2-1: config 1 has an invalid interface number: 128 but max is 2
[  169.755943][ T1162] usb 2-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config
[  169.774669][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.784107][ T1162] usb 2-1: config 1 has no interface number 2
[  169.794832][ T5293] bridge_slave_1: entered allmulticast mode
[  169.803081][ T1162] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24
[  169.827443][ T5293] bridge_slave_1: entered promiscuous mode
[  169.842426][ T1162] usb 2-1: too many endpoints for config 1 interface 128 altsetting 212: 229, using maximum allowed: 30
[  169.880674][ T1162] usb 2-1: config 1 interface 128 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 229
[  169.926436][ T1162] usb 2-1: config 1 interface 128 has no altsetting 0
[  169.949037][ T1162] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  169.958216][ T1162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.974450][ T1162] usb 2-1: Product: syz
[  169.987579][ T5293] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.994659][ T5293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.001927][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.008983][ T5293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.017541][ T1162] usb 2-1: Manufacturer: syz
[  170.035081][ T1162] usb 2-1: SerialNumber: syz
[  170.094414][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.108738][ T3049] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.131587][ T3049] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.138759][ T3049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.165117][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.172195][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.264074][ T1162] usb 2-1: 0:2 : does not exist
[  170.278691][ T5293] veth0_vlan: entered promiscuous mode
[  170.296142][ T1162] usb 2-1: USB disconnect, device number 4
[  170.328699][ T5293] veth1_macvtap: entered promiscuous mode
[  170.431373][   T36] audit: type=1400 audit(1789603527.514:23238): avc:  denied  { ioctl } for  pid=5323 comm="syz.7.1898" path="socket:[29926]" dev="sockfs" ino=29926 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  170.468719][ T3053] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.730170][ T5336] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1906'.
[  170.877803][ T5343] SELinux:  Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped).
[  170.909585][   T36] audit: type=1400 audit(1789603527.956:23239): avc:  denied  { relabelto } for  pid=5341 comm="syz.7.1910" name="7" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0"
[  171.048934][   T36] audit: type=1400 audit(1789603527.984:23240): avc:  denied  { associate } for  pid=5341 comm="syz.7.1910" name="7" dev="tmpfs" ino=48 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0"
[  171.166373][   T36] audit: type=1400 audit(1789603527.984:23241): avc:  denied  { write } for  pid=5341 comm="syz.7.1910" name="7" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0"
[  171.228826][ T5366] FAULT_INJECTION: forcing a failure.
[  171.228826][ T5366] name fail_futex, interval 1, probability 0, space 0, times 0
[  171.252073][   T36] audit: type=1400 audit(1789603527.993:23242): avc:  denied  { remove_name } for  pid=5293 comm="syz-executor" name="binderfs" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0"
[  171.280613][ T5366] CPU: 0 UID: 0 PID: 5366 Comm: syz.1.1920 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[  171.280637][ T5366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  171.280648][ T5366] Call Trace:
[  171.280653][ T5366]  <TASK>
[  171.280659][ T5366]  __dump_stack+0x21/0x30
[  171.280689][ T5366]  dump_stack_lvl+0x140/0x1c0
[  171.280711][ T5366]  ? __cfi_dump_stack_lvl+0x10/0x10
[  171.280735][ T5366]  dump_stack+0x19/0x20
[  171.280756][ T5366]  should_fail_ex+0x3c2/0x510
[  171.280777][ T5366]  should_fail+0xf/0x20
[  171.280794][ T5366]  get_futex_key+0x178/0x940
[  171.280815][ T5366]  ? __cfi_get_futex_key+0x10/0x10
[  171.280837][ T5366]  futex_wake+0x150/0x950
[  171.280851][ T5366]  ? has_cap_mac_admin+0xd0/0xd0
[  171.280868][ T5366]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  171.280908][ T5366]  ? __cfi_futex_wake+0x10/0x10
[  171.280931][ T5366]  ? selinux_file_ioctl+0x732/0x1480
[  171.280949][ T5366]  ? vfs_write+0xbcf/0xfd0
[  171.280966][ T5366]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  171.280984][ T5366]  do_futex+0x37d/0x510
[  171.281007][ T5366]  ? __cfi_do_futex+0x10/0x10
[  171.281028][ T5366]  ? mutex_unlock+0x90/0x240
[  171.281049][ T5366]  __se_sys_futex+0x13c/0x320
[  171.281072][ T5366]  ? __x64_sys_futex+0x110/0x110
[  171.281095][ T5366]  ? __kasan_check_write+0x18/0x20
[  171.281113][ T5366]  __x64_sys_futex+0xe9/0x110
[  171.281141][ T5366]  x64_sys_call+0x227f/0x2ee0
[  171.281156][ T5366]  do_syscall_64+0x57/0xf0
[  171.281171][ T5366]  ? clear_bhb_loop+0x50/0xa0
[  171.281192][ T5366]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  171.281212][ T5366] RIP: 0033:0x7f5b91b9e159
[  171.281226][ T5366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.281240][ T5366] RSP: 002b:00007f5b92b3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  171.281258][ T5366] RAX: ffffffffffffffda RBX: 00007f5b91e25fa8 RCX: 00007f5b91b9e159
[  171.281271][ T5366] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5b91e25fac
[  171.281282][ T5366] RBP: 00007f5b91e25fa0 R08: 4000000000000000 R09: 0000000000000000
[  171.281294][ T5366] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  171.281304][ T5366] R13: 00007f5b91e26038 R14: 00007ffe4ca817e0 R15: 00007ffe4ca818c8
[  171.281319][ T5366]  </TASK>
[  171.790454][   T36] audit: type=1400 audit(1789603527.993:23243): avc:  denied  { rmdir } for  pid=5293 comm="syz-executor" name="7" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0"
[  172.473254][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  172.667135][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.689155][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.724149][    T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  172.751317][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  172.795253][    T9] usb 2-1: SerialNumber: syz
[  172.926449][   T66] scsi host1: usb-storage 1-1:0.0
[  172.950933][  T314] udevd[314]: setting mode of /dev/bus/usb/001/007 to 020664 failed: Read-only file system
[  172.963948][   T66] usb 1-1: USB disconnect, device number 7
[  172.999401][  T314] udevd[314]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: Read-only file system
[  173.214724][    T9] usb 2-1: 0:2 : does not exist
[  173.234982][    T9] usb 2-1: USB disconnect, device number 5
[  174.072211][   T36] audit: type=1400 audit(1789603531.881:23244): avc:  denied  { sys_module } for  pid=5417 comm="syz.6.1935" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  174.550787][ T5444] input: syz0 as /devices/virtual/input/input12
[  174.592280][   T36] audit: type=1400 audit(1789603532.361:23245): avc:  denied  { read } for  pid=5443 comm="syz.7.1948" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  174.787568][ T5460] netlink: 4380 bytes leftover after parsing attributes in process `syz.7.1957'.
[  174.864708][ T5464] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1959'.
[  175.499079][   T36] audit: type=1400 audit(1789603533.200:23246): avc:  denied  { accept } for  pid=5491 comm="syz.1.1970" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  176.045108][   T36] audit: type=1400 audit(1789603533.699:23247): avc:  denied  { map } for  pid=5530 comm="syz.0.1988" path="/446/file0" dev="tmpfs" ino=2542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  176.156519][ T5540] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.169050][   T36] audit: type=1400 audit(1789603533.791:23248): avc:  denied  { map } for  pid=5535 comm="syz.7.1990" path="/dev/usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  176.467772][   T36] audit: type=1400 audit(1789603534.086:23249): avc:  denied  { listen } for  pid=5562 comm="syz.7.1999" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  176.548057][ T5582] netlink: 'syz.6.2002': attribute type 7 has an invalid length.
[  176.587441][ T5582] netlink: 'syz.6.2002': attribute type 5 has an invalid length.
[  176.623224][ T5582] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2002'.
[  176.706528][ T5588] netlink: 'syz.6.2005': attribute type 7 has an invalid length.
[  176.745836][ T5588] netlink: 'syz.6.2005': attribute type 5 has an invalid length.
[  176.778470][ T5588] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2005'.
[  176.797515][ T1162] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  176.971927][ T1162] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.993952][ T1162] usb 8-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01
[  177.011114][ T1162] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.037196][ T1162] usb 8-1: Product: syz
[  177.049522][ T1162] usb 8-1: Manufacturer: syz
[  177.063732][ T1162] usb 8-1: SerialNumber: syz
[  177.074285][ T1162] ipheth 8-1:1.0: Unable to find alternate settings interface
[  177.114728][ T5603] tipc: Can't bind to reserved service type 2
[  177.177064][ T5608] netlink: 'syz.1.2013': attribute type 7 has an invalid length.
[  177.202781][ T5608] netlink: 'syz.1.2013': attribute type 5 has an invalid length.
[  177.219456][ T5608] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2013'.
[  177.293069][ T1162] usb 8-1: USB disconnect, device number 2
[  177.361373][ T5622] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2020'.
[  177.387263][   T36] audit: type=1400 audit(1789603540.931:23250): avc:  denied  { create } for  pid=5623 comm="syz.0.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  177.466167][   T36] audit: type=1400 audit(1789603540.986:23251): avc:  denied  { accept } for  pid=5629 comm="syz.0.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  177.622925][ T5648] netlink: 'syz.0.2031': attribute type 7 has an invalid length.
[  177.633015][ T5648] netlink: 'syz.0.2031': attribute type 5 has an invalid length.
[  177.651703][ T5648] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2031'.
[  177.879377][ T5659] Bluetooth: hci0: Frame reassembly failed (-84)
[  177.896786][ T2252] Bluetooth: hci0: Frame reassembly failed (-84)
[  177.903618][ T5659] Bluetooth: hci0: Frame reassembly failed (-84)
[  178.696363][ T5680] ./dev/sda1: Can't lookup blockdev
[  178.992666][ T5682] overlayfs: failed to clone upperpath
[  179.011721][ T5682] overlayfs: failed to clone upperpath
[  179.235271][ T5702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3130 sclass=netlink_route_socket pid=5702 comm=syz.1.2055
[  179.293016][ T5706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2057'.
[  179.467116][   T36] audit: type=1400 audit(1806380985.878:23252): avc:  denied  { execute } for  pid=5717 comm="syz.6.2063" path="/memory.swap.current" dev="ramfs" ino=31583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  179.519033][ T5720] ./dev/sda1: Can't lookup blockdev
[  179.656922][ T5726] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2067'.
[  179.678811][ T5733] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2067'.
[  180.124990][ T1825] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  180.131293][   T55] Bluetooth: hci0: command 0x1003 tx timeout
[  180.181219][   T36] audit: type=1400 audit(1806380986.543:23253): avc:  denied  { name_bind } for  pid=5773 comm="syz.7.2081" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  180.415240][ T5787] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5787 comm=syz.7.2084
[  180.627354][ T5782] netlink: 'syz.7.2084': attribute type 7 has an invalid length.
[  180.659389][ T5782] netlink: 'syz.7.2084': attribute type 5 has an invalid length.
[  180.688320][ T5782] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2084'.
[  180.712044][ T5793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5793 comm=syz.7.2084
[  180.757705][ T5787] vcan0: entered allmulticast mode
[  180.787461][ T5801] ./dev/sda1: Can't lookup blockdev
[  180.822808][ T2243] Bluetooth: hci0: Frame reassembly failed (-84)
[  180.840134][ T5803] Bluetooth: hci0: Frame reassembly failed (-84)
[  180.846832][ T5803] Bluetooth: hci0: Frame reassembly failed (-84)
[  182.399280][ T5832] overlayfs: disabling nfs_export due to verity=require
[  182.422283][ T5832] overlayfs: missing 'lowerdir'
[  182.765282][   T36] audit: type=1400 audit(1806380988.914:23254): avc:  denied  { setopt } for  pid=5848 comm="syz.0.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  182.870364][   T36] audit: type=1400 audit(1806380989.016:23255): avc:  denied  { getopt } for  pid=5857 comm="syz.6.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  183.072691][ T1825] Bluetooth: hci0: command 0x1003 tx timeout
[  183.078805][   T55] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  183.101685][   T66] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  183.130140][   T66] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  183.377086][ T5877] netlink: 'syz.1.2115': attribute type 7 has an invalid length.
[  183.402759][ T5877] netlink: 'syz.1.2115': attribute type 5 has an invalid length.
[  183.426255][ T5877] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2115'.
[  184.007924][ T5890] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1.
[  184.297844][ T1162] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  184.459791][ T1162] usb 8-1: device descriptor read/64, error -71
[  184.719953][ T1162] usb 8-1: device descriptor read/64, error -71
[  184.981772][ T1162] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  185.142586][ T1162] usb 8-1: device descriptor read/64, error -71
[  185.402681][ T1162] usb 8-1: device descriptor read/64, error -71
[  185.521986][ T1162] usb usb8-port1: attempt power cycle
[  185.539941][ T5911] ./dev/sda1: Can't lookup blockdev
[  185.902961][ T1162] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  185.949255][ T1162] usb 8-1: device descriptor read/8, error -71
[  186.097300][ T1162] usb 8-1: device descriptor read/8, error -71
[  186.356554][ T1162] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  186.412167][ T1162] usb 8-1: device descriptor read/8, error -71
[  186.563289][ T1162] usb 8-1: device descriptor read/8, error -71
[  186.692537][ T1162] usb usb8-port1: unable to enumerate USB device
[  187.397400][ T5980] 9pnet_fd: Insufficient options for proto=fd
[  187.646095][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  187.680752][ T5993] sock: sock_set_timeout: `syz.6.2156' (pid 5993) tries to set negative timeout
[  187.800810][ T6000] netlink: 'syz.6.2157': attribute type 25 has an invalid length.
[  187.830534][    T9] usb 8-1: Using ep0 maxpacket: 16
[  187.849911][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.890679][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.938724][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.973363][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.994807][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.037600][    T9] usb 8-1: string descriptor 0 read error: -71
[  188.059502][    T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  188.091402][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[  188.116201][    T9] usb 8-1: can't set config #1, error -71
[  188.145155][    T9] usb 8-1: USB disconnect, device number 7
[  188.411369][   T36] audit: type=1326 audit(1806380994.127:23256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.2165" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74699e159 code=0x0
[  188.527710][   T36] audit: type=1326 audit(1806380994.238:23257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.2165" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74699e159 code=0x0
[  188.768492][ T6039] ./dev/sda1: Can't lookup blockdev
[  188.914117][   T66] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  189.087504][   T66] usb 8-1: Using ep0 maxpacket: 16
[  189.098989][   T66] usb 8-1: unable to get BOS descriptor or descriptor too short
[  189.107239][   T66] usb 8-1: unable to read config index 0 descriptor/start: -71
[  189.116117][   T66] usb 8-1: can't read configurations, error -71
[  189.429772][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2174'.
[  189.462090][   T36] audit: type=1400 audit(1806380995.096:23258): avc:  denied  { getopt } for  pid=6046 comm="syz.6.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  189.683083][   T36] audit: type=1400 audit(1806380995.299:23259): avc:  denied  { append } for  pid=6063 comm="syz.7.2180" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  189.782375][   T36] audit: type=1400 audit(1806380995.345:23260): avc:  denied  { unmount } for  pid=6057 comm="syz.6.2179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  190.158448][ T6068] ./dev/sda1: Can't lookup blockdev
[  190.194041][ T6078] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6078 comm=syz.0.2183
[  190.261138][ T6080] netlink: 'syz.0.2184': attribute type 25 has an invalid length.
[  190.269219][   T66] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  190.442255][   T66] usb 8-1: device descriptor read/64, error -71
[  190.702525][   T66] usb 8-1: device descriptor read/64, error -71
[  190.830324][   T66] usb usb8-port1: attempt power cycle
[  191.211722][   T66] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  191.263567][   T36] audit: type=1400 audit(1806380996.757:23261): avc:  denied  { create } for  pid=6102 comm="syz.6.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  191.294238][   T66] usb 8-1: device descriptor read/8, error -71
[  191.402749][ T6107] netlink: 'syz.1.2196': attribute type 7 has an invalid length.
[  191.451122][   T66] usb 8-1: device descriptor read/8, error -71
[  191.468739][ T6117] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2197'.
[  191.512401][ T6119] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2198'.
[  191.531916][ T6119] ./dev/sda1: Can't lookup blockdev
[  191.710263][   T66] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  191.743780][   T66] usb 8-1: device descriptor read/8, error -71
[  191.906308][   T66] usb 8-1: device descriptor read/8, error -71
[  192.024638][   T66] usb usb8-port1: unable to enumerate USB device
[  192.110823][ T6138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6138 comm=syz.1.2206
[  192.438616][ T6146] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  192.467761][ T6147] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  192.586753][   T36] audit: type=1400 audit(1806380997.975:23262): avc:  denied  { getopt } for  pid=6169 comm="syz.6.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  192.898976][ T6176] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2215'.
[  193.100400][ T6180] ------------[ cut here ]------------
[  193.105910][ T6180] WARNING: CPU: 0 PID: 6180 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0
[  193.115556][ T6180] Modules linked in:
[  193.119486][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.7.2217 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72
[  193.131096][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  193.141172][ T6180] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0
[  193.147160][ T6180] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a5 c8 0b 06 00 0f 85 c2 00 00 00 c6 05 98 c8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24
[  193.166971][ T6180] RSP: 0018:ffffc9000275f640 EFLAGS: 00010246
[  193.173049][ T6180] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000
[  193.181045][ T6180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000275f6f8
[  193.189043][ T6180] RBP: ffffc9000275f780 R08: ffffc9000275f6f7 R09: 0000000000000000
[  193.197028][ T6180] R10: ffffc9000275f6e0 R11: fffff520004ebedf R12: ffffc9000275f680
[  193.205006][ T6180] R13: dffffc0000000000 R14: 1ffff920004ebecc R15: 0000000000000000
[  193.212990][ T6180] FS:  00007f4b039256c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  193.222003][ T6180] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  193.228649][ T6180] CR2: 0000200000001000 CR3: 000000011bb02000 CR4: 00000000003526b0
[  193.236626][ T6180] Call Trace:
[  193.239912][ T6180]  <TASK>
[  193.242841][ T6180]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  193.248578][ T6180]  ? __kasan_slab_alloc+0x73/0x90
[  193.253621][ T6180]  ? kmem_cache_alloc_noprof+0x1e2/0x410
[  193.259270][ T6180]  ? hashtab_init+0xd6/0x1f0
[  193.263880][ T6180]  ___kmalloc_large_node+0x81/0x220
[  193.269076][ T6180]  ? hashtab_init+0xd6/0x1f0
[  193.273684][ T6180]  __kmalloc_large_node_noprof+0x1e/0xd0
[  193.279316][ T6180]  ? hashtab_init+0xd6/0x1f0
[  193.283925][ T6180]  __kmalloc_noprof+0x326/0x510
[  193.288775][ T6180]  ? __cfi_ebitmap_read+0x10/0x10
[  193.293827][ T6180]  hashtab_init+0xd6/0x1f0
[  193.298265][ T6180]  ? policydb_read+0x865/0x2860
[  193.303122][ T6180]  symtab_init+0x44/0x70
[  193.307535][ T6180]  policydb_read+0x8e1/0x2860
[  193.312219][ T6180]  ? __kasan_kmalloc+0x96/0xb0
[  193.317005][ T6180]  ? __cfi_policydb_read+0x10/0x10
[  193.322113][ T6180]  ? security_load_policy+0x130/0x12d0
[  193.327592][ T6180]  security_load_policy+0x16a/0x12d0
[  193.332883][ T6180]  ? irqentry_exit+0x4a/0x60
[  193.337491][ T6180]  ? __kasan_check_write+0x18/0x20
[  193.342599][ T6180]  ? mutex_lock+0x97/0x1d0
[  193.347028][ T6180]  ? __cfi_security_load_policy+0x10/0x10
[  193.352775][ T6180]  ? rep_movs_alternative+0x4a/0xa0
[  193.357998][ T6180]  sel_write_load+0x258/0x600
[  193.362676][ T6180]  ? __cfi_sel_write_load+0x10/0x10
[  193.367875][ T6180]  ? bpf_lsm_file_permission+0xd/0x20
[  193.373264][ T6180]  ? __cfi_sel_write_load+0x10/0x10
[  193.378464][ T6180]  vfs_write+0x3c1/0xfd0
[  193.382722][ T6180]  ? __cfi_vfs_write+0x10/0x10
[  193.387489][ T6180]  ? __kasan_check_write+0x18/0x20
[  193.392632][ T6180]  ? mutex_lock+0x97/0x1d0
[  193.397066][ T6180]  ? __cfi_mutex_lock+0x10/0x10
[  193.401949][ T6180]  ksys_write+0x145/0x260
[  193.406290][ T6180]  ? xfd_validate_state+0x68/0x140
[  193.411413][ T6180]  ? __cfi_ksys_write+0x10/0x10
[  193.416289][ T6180]  ? __kasan_check_write+0x18/0x20
[  193.421400][ T6180]  ? fpregs_restore_userregs+0x11c/0x260
[  193.427047][ T6180]  __x64_sys_write+0x7f/0x90
[  193.431652][ T6180]  x64_sys_call+0x271c/0x2ee0
[  193.436348][ T6180]  do_syscall_64+0x57/0xf0
[  193.440761][ T6180]  ? clear_bhb_loop+0x50/0xa0
[  193.445459][ T6180]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  193.451351][ T6180] RIP: 0033:0x7f4b0299e159
[  193.455800][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.475462][ T6180] RSP: 002b:00007f4b03925028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  193.483888][ T6180] RAX: ffffffffffffffda RBX: 00007f4b02c25fa0 RCX: 00007f4b0299e159
[  193.491872][ T6180] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  193.499866][ T6180] RBP: 00007f4b02a3506b R08: 0000000000000000 R09: 0000000000000000
[  193.507835][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.515831][ T6180] R13: 00007f4b02c26038 R14: 00007f4b02c25fa0 R15: 00007ffc44ab5a98
[  193.523821][ T6180]  </TASK>
[  193.526841][ T6180] ---[ end trace 0000000000000000 ]---
[  193.537199][   T36] audit: type=1400 audit(1806380998.455:23263): avc:  denied  { load_policy } for  pid=6179 comm="syz.7.2217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  194.131381][ T6180] SELinux: failed to load policy