last executing test programs:

1m46.104276944s ago: executing program 3 (id=82):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000640)={0x9, 0x0, [{0x80000008, 0x7ff, 0x4, 0xe, 0x2, 0x400, 0x1000}, {0x2, 0xb56, 0x0, 0x7, 0xc7, 0x7}, {0xc0000001, 0x3, 0x9, 0xba, 0x1, 0x5, 0xd0}, {0x6, 0xff, 0x3, 0x3, 0x0, 0x7, 0xe8d}, {0x6, 0xfffffff8, 0x6, 0xf, 0x5, 0x50, 0x7}, {0xa, 0x4, 0x5, 0x6, 0xffffffff, 0xffffffc0, 0x7}, {0xb, 0x1, 0x0, 0x6, 0x7, 0xdd, 0x22}, {0x7, 0x4, 0x3, 0x5, 0x5, 0xfffff557, 0x700c8a0e}, {0x80000007, 0x5, 0x5, 0x0, 0x5, 0x10, 0x7}]})
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0)
lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000500)={0x110, 0x22, 0x2, 0x70bd2a, 0x4f6, "", [@generic="7e4cec607eadebf8c0226ba249414e91ca6cb270141c4d0b3a85b08a5d96628a92d5fddb51c7612d2c903025ace37e4d0c943779486273a4c4d5a9d51ed529a9ccbf562efacf2fdb62d62884e8b1957e695b7374fac3c62707a915469b82d17d825bf2da797e9adcf929ed0d41ef790c116ea81f743073e7577d8c42885cbe9a13a68caf1fc2a53d773a3035000e519190fd22e66103916b2c63", @generic="abb32ebd9eba4ca46a4fe3e317f9e93a887beb35032945a2a6bedc72b0652759ae2344e29b053e60c4262b9dd94ed7", @typed={0xc, 0x157, 0x0, 0x0, @u64=0x7f}, @nested={0xc, 0x116, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @pid}]}, @generic="fc1634246bcec1f1aa154e7cb4b67022", @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x7}]}, 0x110}], 0x1, 0x0, 0x0, 0x40000}, 0x8180)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x100000000, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x12, 0xffffffffffffffff], 0x0, 0x2300})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5433, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffe)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x36, 0xefffffffffffffff, 0x0, 0x187, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m45.85496869s ago: executing program 3 (id=84):
r0 = socket$netlink(0x10, 0x3, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000600)="fc0000004800071fa3092504090007000aab6001000000000008e293210001c0000000000000000000000000c0fe00ea25001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e20008934d07302ade01720d7d5bbc91a3e2e80772c05de4de280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d970e784b489cd58cf02fcdcc7f0619d1f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a9579484e03464afa0fd1b9e61e76d86f4371ed94e0ad91bd0734babc7c737d670133750800"/252, 0xfc)

1m45.828784096s ago: executing program 3 (id=85):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/sys/kernel/core_pattern\x00', 0x2, 0x102)
write$FUSE_INIT(r1, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8001af84, 0x0)

1m45.791616804s ago: executing program 3 (id=86):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) (async)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
r2 = syz_usb_connect$midi(0x6, 0xa6, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x1, 0x1, 0xff, 0x80, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x8, [@midi_out_jack={0x13, 0x24, 0x3, 0xd6b091205ad3041a, 0x6, 0x6, [{0xd1, 0x6}, {0x4, 0xc}, {0xfa, 0x7f}, {0xfe, 0x3}, {0x6, 0x3}, {0x2, 0xc}], 0x9}], [{{0x9, 0x5, 0xc, 0x2, 0x428, 0x3, 0xfb, 0x1, {0x11, 0x25, 0x1, 0xd, "73b3a7e934b650a15f4c0c808d"}}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x10, 0xe, 0x7, {0x5, 0x25, 0x1, 0x1, "e2"}}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x7, 0x6, 0xff, {0x11, 0x25, 0x1, 0xd, "eb4db22c76a6da61ab07ee188a"}}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x0, 0x81, 0x6, {0x11, 0x25, 0x1, 0xd, "aa9cb6fde5c137c29661f1420b"}}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x80, 0x7, 0xe, {0xa, 0x25, 0x1, 0x6, "91fe42d944a0"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x101, 0x3, 0x15, 0x6, 0x40, 0x3}, 0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f2000021410040f00003f395aa5920ebf70824c6fb883bc07100210890100"], 0x8, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x7b, &(0x7f0000000440)=@string={0x7b, 0x3, "63b8d0d65e0d11ee42a55558769b7e7a8283e323fb1231dea059b6886088c46fee0d15329b7bd9e82fe9cdf7ec82c660e0e24edcc24e40d0763609821c179fbccf11b8c9690e9224c37ca1a1a31ae1c92972bfb4a9a5158c8527eca4b6b8dea91c2f866d52c5140a3a0123f198f1c68cb72bca163be25feefc"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0a}}, {0x19, &(0x7f0000000540)=@string={0x19, 0x3, "c6752f255ff9b8fe5f398870e26e6e48e5d7acf261adc0"}}, {0xd5, &(0x7f0000000680)=@string={0xd5, 0x3, "9dd1cb5375cbf7b7e9955cf0bbf6d686cc085d340c667a47c0f8a2ff8ed35782eddd3e4d009df577992653227c6a4e5f7b8a7de44c09b9b01d742224eb9c9bdf536a1cd23595ec46b9595df06ee7e098202441675d4565a8475d8c0be6439e53b45f020fcea0495cb442f35af6593a30b9c2ba87617edd91a51e2cfa30d72d1a158b240219d2254c7d335adc65751d7dcefc808aba3489ecc59ffa60366d4a14989e7e229a4d51039466d13d792c1a946efaca2dc16b14a4e83c13f15c60b646db8cb4e0d30d9867a2a2f9943bd3e70c2843d1"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x38, &(0x7f00000007c0)=@string={0x38, 0x3, "2301dbb31a7329d29ba8fbd3412f24f1a8e1174bdadab80ed0605e52edc3c6b715b4fee88651386050ee59bb53a065e6d899dce5257a"}}]})
syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000880)={0x0, 0x21, 0x5b, {0x5b, 0xe, "a0944ab0c362931a84f70bd3ddce6d9cb21e5ac6dd135ecb1439768ba10c88bfbd91a9204e7dd055f4f7436f6bdfc43c4bdf2afe5ec18d068b1d46a1e33bf1e4921383ead1f269df6d1f3ba50dfc3ff18b1e52d2c4dbaf0f32"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000940)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0xa, "249cd37f"}, @local=@item_012={0x1, 0x2, 0x2, "bf"}, @global=@item_4={0x3, 0x1, 0x1, "7a87d075"}, @main=@item_4={0x3, 0x0, 0x9, "af2ee791"}, @local=@item_4={0x3, 0x2, 0x7, "ea6bcc07"}, @global=@item_4={0x3, 0x1, 0x1, "6cdfe39a"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xb8}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a00)={0x20, 0xd, 0x8c, "a804e42a8fddc16aa311df04565e46c3ad78f2d01543e84b3394dcfff490dda7813f27be9c2ff64dedd615465f0958448ff5c862537840cb7f7d218c9e4ebf1d206a7e23de05ba0d499d528f8701defe8bf5713a84fd864462284d7f26d6cc5c2b4ec2e76e107bd1a5943d9c81fb3e6b6c5b24e1403633390842971494bbb148fd62a412a94170fe4a0c5b44"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xc3}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b40)={0x20, 0x1, 0xdd, "f817fd2c79815ae35e1a737b919c51d5ad595c188906937807ef517debec5926643e456fa66ca910f9cfadf93e4022ce2e02977cc441998c02f1027dcf31ed7763b8563165a40c9ead2554695af995b688295a086999faf8258dd9b9b8e3c0e4824ae0903221a7aff9bf4e78de3ead97931caccc9df2197cc80e005cb8f414746b279bbfefc70d61cae071aab64739c43c07823a073785024a5110c95b853db8e9599d94177702f1a52444d1b4a5a780a00896e31ffc1d989608d755b6457093beabf286dfa2414b153d0c57a4c07b3b43ec8ee21129364838a671ccbf"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x4}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) (async)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) (async)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
syz_usb_control_io$sierra_net(r2, &(0x7f0000000cc0)={0x14, &(0x7f0000000180)={0x0, 0xb, 0x18, {0x18, 0x2, "0cfcf0e7da310c3bbda0537dae510fcd75fe57cc2c9d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000001280)={0x1c, &(0x7f0000000d00)={0x0, 0xc, 0xcf, "f4c097e1049cffe6a78942e38d9c2104b15312c8892cce78a92dddae370a1231ccefb516c5bb8e36cd786de4d9cc25eea13a83096ca222f635f595b929f3660f2323299d4f127595076f773ce7ed7b15d970a633059cd4b2792dd2bc8daec7b136241499ef19ebd1efd9ea38ce3dc2d42dbb1416a2bef87441b564cef9928699c9cc36383ee70326ad7658727b66954ac6f2056fa0ffd273578ffe883feb80bf70cb21930f2138e7d3782ff45ea2d545af99952c710bcdab93c19bc42bf37afd8e9ba2096fce19790872a465e6aee5"}, &(0x7f0000000e00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001240)={0x21, 0x0, 0x2, "46b7"}}) (async)
syz_usb_control_io$sierra_net(r2, &(0x7f0000000cc0)={0x14, &(0x7f0000000180)={0x0, 0xb, 0x18, {0x18, 0x2, "0cfcf0e7da310c3bbda0537dae510fcd75fe57cc2c9d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000001280)={0x1c, &(0x7f0000000d00)={0x0, 0xc, 0xcf, "f4c097e1049cffe6a78942e38d9c2104b15312c8892cce78a92dddae370a1231ccefb516c5bb8e36cd786de4d9cc25eea13a83096ca222f635f595b929f3660f2323299d4f127595076f773ce7ed7b15d970a633059cd4b2792dd2bc8daec7b136241499ef19ebd1efd9ea38ce3dc2d42dbb1416a2bef87441b564cef9928699c9cc36383ee70326ad7658727b66954ac6f2056fa0ffd273578ffe883feb80bf70cb21930f2138e7d3782ff45ea2d545af99952c710bcdab93c19bc42bf37afd8e9ba2096fce19790872a465e6aee5"}, &(0x7f0000000e00)={0xa1, 0x1, 0x400, "751a6c60f91c7e7e354b25ab696d4acbb30e6027d77b0d6bb97fc64ad73e9c91e81aac33aeb6358b0534dff52a7f74993a413432ffb7cebce8ff4c68060e68b28f94c93e2969f3d382720e320cfdc9503e410a87b2d7c4a15840d35be8de254bcea0cb4f063ebdc9ebcfc6264c53df80f3b0d94c33ef04a28ff86a16343e25baa66291ab0198f971f50b18dbf37992c6d799aaa972609e813b1686437e3a607e1d038913e4f77db2a3f1b2fea756789ca549c365a86e0103ddad38401d2ce67903d631007feebb76b52b6f7b0ab5ee8dc45e680c333d3700a83f872445fb784e5b9b47a73a322488f950e4df8d2e08372943e90dbf51b7066d78d19bfa9d973285286becb10f104afa1b2c1f79e3ef130b55bcadac0f5a8ad6d90ba0e6ad59d8aec538976f10217e37787e15db14267ea8ed63ec7d0aaee0015fa5d0420d6bc3fdd5975e9fe90f6bcd7b940986ad85f7287f5361be215adccfe15c55a60b54ad63a4321783a2be9ed2657b91fb3b5bd49ddd6d414d5e0ae96748e6b1de33442352809de6d97fdab8e29bbb950af5d606bf426278528bdbdcff912c1c8c478c5b4f04672352a03d4db94529b7106eef7743d992c0e15c65618c7016a19fe1da8208476bba9a9d04bb2dd0134763405684c9154bc708ef66f75da3a685557a5c219360331a85610ff38d5707385b6910113d74861896141d5c573712b80d49421fdae73c5d4e74b586ff00fe6a65c7d4d0706d2b9299286883c661b176e66be85eb30a282f043b0ee2cac159cb10b2ceece7d0fd206ae74015ddd94ec4c575a952f0b3ba0e803fa6720cf4d9a35edeaf7433cbee1067128e74527c60b94da731fb1194df4d7e3c9f8f27f48cc5c2f0d708bcc4cc0a92900e771d98b053cf97cd44ef49111cf882e9101e473e103052cc7f6586b29c9ea83cc2b72e03c2a373a7659a88808be1455e5d4e0ec439195698cb9c598b1afa1641968d8da1119635babe170f2898fe9e265031529662f47e62cd32e1939fa99f4093b397e6488588fbfce75bc04d5f01615c03757e9afee84034bb3e0aa57a24e34b0a149b8572bbe82d15c7886a1013c7c14d0935ba0f85e5e8689d4de4cb5078933338401c974c41d8a7a26dab81559e1eaf35dcbc2cd4f9adbd1b175c6d3c3cb72251e69ec7880129882e7738538f703a65c2b9dcf2ceadd396d9c1795f384514ebde8fd441f610359c9eb8a020785d88907e9bda9d3dba3c50ce428b5cd8c77568339573731cc986cdf45b3b1bb30f45f09cae8b67f615753152368e26a663ea6fc417801d9c16c954fde45286ad140a3d4c388a6f286bcfe5eeea3fac3c212e3eaa646b456d03fb6fcf710fbcb9b514fb081e9c4df209579b855175f709878d991703759639a2b44ecfc86d1f8357222f6f2cf13d5c8eba3f49d313d93ade60ed30920be18b4390"}, &(0x7f0000001240)={0x21, 0x0, 0x2, "46b7"}})
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='\x00')
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000200)='\x00') (async)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000200)='\x00')
syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xfcff}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

1m42.72711847s ago: executing program 3 (id=102):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf2503000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x4)
write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x87, 0x8, 0x10, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0xb7, 0x38, 0x260, 0x1fffc, 0x2, 0x20, 0x2, 0x80, 0x28dc, 0x8}, [{0x2, 0x63c9, 0xffffffff, 0xd, 0x0, 0x3, 0x3, 0x1}, {0x7, 0x8, 0x5, 0xc9, 0x4, 0xfffffffb, 0x3, 0x3}], "aa0cf65e0bac1a0fc5036c14b6840fabc0f305c220fed6b5583ecc6cc045111c9a846dbd3be6eccfc3cd4820d1bde2dc099a0b4079c63fdbce6485317a2dc09d51df00d58fc96b9bb4522f2ae02b34dea8daeaff34ca02249d50236dba750f69fdb3f258d04462732174b99eb643fe360f7acb4fe2ae996b5e1e48076d917d15124930490caed0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6ff)
syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0)

1m42.705192245s ago: executing program 3 (id=103):
r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4a1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m27.669890557s ago: executing program 32 (id=103):
r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4a1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m17.581187363s ago: executing program 1 (id=294):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./tracing/uprobe_events\x00', &(0x7f0000000080)='hfs\x00', 0x40020, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000880)='-:s/p .', 0x7)

1m17.515329717s ago: executing program 1 (id=295):
socketpair(0x2b, 0xa, 0x6aa3175c, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040088)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x0)
syz_usb_connect$uac2(0x4, 0xb9, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x18, 0x41e, 0x3263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x80, 0xe0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x7, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x3, "5fb4154520e0"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x21, 0x5, "0bdf", 'F'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xa, 0x8, 0x3, 0x8}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7f, 0x5, "d350", "0081"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x63, 0x4, 0x1, 0x0, "e8", "c3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x4, 0x9, {0x8, 0x25, 0x1, 0x3, 0x0, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0)

1m17.021702588s ago: executing program 1 (id=296):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x11140, 0x2, 0x0, 0x10000, 0x6, 0x3}, 0x30, 0x1)
landlock_restrict_self(r3, 0x8)
setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
recvmmsg(r2, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010163, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregset(0x4212, r5, 0x0, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x3, 0x5004)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
clock_getres(0x4531edd1b3b0c2f9, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1}, 0x10022)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8000)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r11, 0x54a3)
syz_ublk_add_dev(0xffffffffffffffff, r8, r9, r10, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffff5d3, 0x0, <r12=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x5f5, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0x1aa}}}, &(0x7f0000000280)=<r13=>0x0)
syz_ublk_setup_queues(r7, r13, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x400, 0x401, 0x31b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x3e1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x7b, 0x0, r7}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r12, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)
setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x57)
futex(0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0xb000, 0xdddd1000, 0x0, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x3000, 0x0, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x4, 0xb5}, {0xeeef0000, 0x0, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xdddd9000, 0x2, 0xd9, 0x3, 0x89, 0xab, 0x7d, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0x3, 0x7, 0xb1, 0x9, 0x21, 0x83, 0x80, 0xff, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x9, 0x7f, 0x81, 0x1, 0x70}, {0x70000, 0x25000, 0x9, 0x5, 0xe, 0x7, 0xf, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x8080000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x8, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0x80]})

1m16.462576273s ago: executing program 1 (id=302):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000000c0))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

1m16.395109788s ago: executing program 1 (id=303):
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x12, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7d}}}}}]}}]}}, 0x0)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000200)={0x0, 0x5fc6, 0x20000, 0xfbffffff, 0x3b5, 0x0, r0}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000002c0)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300))
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0xb, 0xf3, &(0x7f0000000080)={0x5, 0x3, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x0, &(0x7f0000000f00)})
write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc)
write$selinux_load(r5, &(0x7f0000000280)=ANY=[], 0x65)

1m16.336304681s ago: executing program 1 (id=304):
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x100)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
setxattr$security_ima(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
truncate(0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x200000000000000)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
poll(&(0x7f0000000000)=[{r3, 0x40}, {}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
r4 = syz_ublk_setup_io_uring(0x75be, &(0x7f0000010240)={0x0, 0x6443, 0x21804, 0x1, 0x1e2}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x4000010, r4, 0x2635a000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4703, 0x10, 0x1000000, 0x33d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8e, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0)

1m16.276604024s ago: executing program 33 (id=304):
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x100)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
setxattr$security_ima(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
truncate(0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x200000000000000)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
poll(&(0x7f0000000000)=[{r3, 0x40}, {}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
r4 = syz_ublk_setup_io_uring(0x75be, &(0x7f0000010240)={0x0, 0x6443, 0x21804, 0x1, 0x1e2}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x4000010, r4, 0x2635a000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4703, 0x10, 0x1000000, 0x33d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8e, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0)

1m3.031082356s ago: executing program 2 (id=419):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x5000011)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RVERSION(r0, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmsg(r2, 0x0, 0x30)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r3, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, 0x0)
r5 = getpgrp(r4)
pread64(r0, &(0x7f0000000240)=""/130, 0x82, 0xaca000000)
ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000180)={0x2, 0x1, 0xfff, 0x8001, 0x0, 0x3, 0x0, 0x5, 0xe, 0x3, 0x3, 0x5, 0x8000, 0x9})
syz_open_procfs(r5, &(0x7f0000000100)='net/vlan/vlan0\x00')
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast})
close(0x3)

1m3.001545773s ago: executing program 2 (id=420):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0x69}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x20000006) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00')
preadv(r4, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) (async)
pread64(r3, &(0x7f0000000600), 0x100, 0x3f00) (async)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8993, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r6)

1m2.911218113s ago: executing program 2 (id=421):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x134, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbff, {}, [{0x120, 0x1, [@m_ipt={0x11c, 0x1, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x48, 0x6, {0xba15, 'security\x00', 0xdb, 0xffff, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x51, 0x6, "e12cb06f812c449ae6674b1368645696270b66f3208948bb90f8d17d2fef72f2ab3f51ca7515ace60ac4b87a2988bf4e4bfd12747e38a3b70ebca833a7d591e3986f8bd4aee4fd000000000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r3, &(0x7f0000004200)='t', 0x1)
r4 = inotify_init1(0x800)
sendfile(r2, r4, 0x0, 0xa)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x5, 0x3, 0x2ffc, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x2010, 0xffffffffffffffff, 0x3e3d6000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r5)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20000802)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0)

1m2.725746284s ago: executing program 2 (id=423):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14)
getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b91c0000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f01c80fc79d53bf0000c4b9e16dc3010122", 0x61}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
write(r5, &(0x7f0000000000)="9c", 0x1)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, 0x0)
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xca, 0x3a, '/dev/uinput\x00', 0x3a, '/dev/uinput\x00', 0x3a, './file0', 0x3a, [0x43]}, 0x40)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x9fa42f0, 0x60, 0x9, 0x1fe, 0x1000000010000d, 0x8001, 0x8000458, 0x80000008, 0xfffffffffffffff9, 0x2000100000000, 0xfffffffffffffff, 0x200008, 0x1, 0xffff, 0x2, 0x4], 0xffffffff, 0x40445})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m2.38741744s ago: executing program 2 (id=431):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000480)={{0xb000, 0xdddd1000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x4, 0xb5}, {0xeeef0000, 0x0, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0xeeef0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xdddd9000, 0x2, 0xd9, 0x3, 0x89, 0xab, 0x7d, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0x3, 0x7, 0xb1, 0x9, 0x21, 0x83, 0x80, 0xff, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x9, 0x7f, 0x81, 0x1, 0x70}, {0x70000, 0x25000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x8, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]})

1m2.331385542s ago: executing program 2 (id=433):
prctl$PR_SET_SECUREBITS(0x1c, 0x30)
prctl$PR_SET_SECUREBITS(0x1c, 0x1b) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x1b)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00')
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setuid(0xee00) (async)
setuid(0xee00)

1m2.324235974s ago: executing program 34 (id=433):
prctl$PR_SET_SECUREBITS(0x1c, 0x30)
prctl$PR_SET_SECUREBITS(0x1c, 0x1b) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x1b)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00')
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setuid(0xee00) (async)
setuid(0xee00)

53.911887815s ago: executing program 5 (id=495):
r0 = socket$inet(0x2, 0x1, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4880)
splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x9)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setns(0xc9, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002a00030500000000000000000a0000800c"], 0x28}], 0x1, 0x0, 0x0, 0x20001}, 0x14008850)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xec0})
write(r2, &(0x7f0000000000)="9da651a6e0139a65fcfe7ca29bf47c03d1bcf78b45439caf2e93c09eb87be22545a7a80316e39962a43b3d58eaaf9917378fa743d5a236189996f542a1a504d2268871e36feefe0ece53b37aade396a0fe55b01e8031", 0x56)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1fb, 0x75, 0xffffffffefffff15, 0x3, 0x4, 0x0, 0x4]}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

53.811252278s ago: executing program 5 (id=496):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
setns(0xc9, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x4000001, 0x50, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400100, 0x22)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x61}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff54e9}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfe2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x54}, 0x4004011)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000100f24c"], 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0})
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0xfffd, 0x0, @empty, 0x6}, 0x1c)
read(r0, &(0x7f0000000000)=""/21, 0x15)
sendfile(r2, r4, &(0x7f00000001c0)=0xea, 0x5)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r7, 0x0, 0x25, &(0x7f0000000040)={@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)

51.936232137s ago: executing program 5 (id=504):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70]}}]})
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0)
close(0x3)
unlink(&(0x7f0000000180)='./file1\x00')
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)

51.884294909s ago: executing program 5 (id=505):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000000)='\"', 0x1) (async)
write(r0, &(0x7f0000000000)='\"', 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0xa000002, 0x4) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0xa000002, 0x4)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x9, 0xb4, {0xb4, 0x3, "2fd7224c9ede3804c2cab8009d50b156e87d2d9b6d0148b08faec471ea92e1354155313482962f05699efa70b07290b30b445bf3f8b1a9f426f7a5bd073dc283b9efe4c26a8a500224e830dbf98c6d3455126e74cfd25c56b1f626006f6faccd3a39b1b847e75c0fd88cce5983f22ce7e40fb6118116681bd797e88e8e57bb3447644420f8acfc340200b2fb06ac34c6b6ce9879800400357758d809ef4d72996cce2bfc5dc55fa0f0e636aeecb468894370"}}, 0x0, 0x0, 0x0}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
getpid() (async)
getpid()
ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") (async)
ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f")
ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/42)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x30c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x50, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x55f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x6, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x4, 0xc}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0xa5f663634ee4392f, 0xb, 0xe, 0x0, 0x40, 0x5}, 0xb0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3, [{0xab, &(0x7f0000000340)=ANY=[@ANYBLOB="ab03999c3f6735e130fa8bea4346a8a5f052f83d08659205e505a20f29d40b11ab7d4ee379846537f21a71b2bd1331700a0ab0072b5865a7539c8d35943c73ba14c7433eaf3436385abeaf90c5c72ecef30417066a1c4a4f81801599dd1c469062c0a366d007145434435374c581948b570565d2da130f40ce483799ed96a0ebad9fe9c9f90d8cbe0e65111d5fba58ce3a402d7adac7f9bcdb353bdb80e680822836cd97b302d705761895b9e3150898d070213763c761ddce68b0a4515bfb7747aa1cce1d9086de750c9dc7a85c86ad3d85128d7a6e5416f4d532543fd8eb877aa5d06323fcce49595d93b88e21b28604e83790"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x98acce82c03eb111}}]})

51.223185497s ago: executing program 5 (id=513):
setns(0xc9, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0)
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x442880, 0x0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={0x0})
prlimit64(r0, 0x9, &(0x7f0000000140)={0x5, 0x9}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r3, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff})
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r4, 0x5393, 0x0)
tkill(r3, 0x10)
waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000101"], 0x80}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast1}, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80080)
write$P9_RREADLINK(r6, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10)
r7 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0)
landlock_restrict_self(r7, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c4082, 0x0)

51.219223227s ago: executing program 5 (id=516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}}, 0x4000040)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000001a80)={0x2020}, 0x2020)

35.952480191s ago: executing program 35 (id=516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}}, 0x4000040)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000001a80)={0x2020}, 0x2020)

27.562422447s ago: executing program 7 (id=649):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket(0x10, 0x803, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket(0x1, 0x2, 0x0) (async)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
clock_adjtime(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x105c87, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0)

27.562306027s ago: executing program 7 (id=650):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x400000f3, 0x3}}], 0x20})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r5=>0x0, <r6=>0x0})
setitimer(0x0, &(0x7f00000002c0)={{0x0, 0xea60}, {r5, r6/1000+10000}}, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8)
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)
link(&(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x0)

27.560817248s ago: executing program 7 (id=656):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20)
rmdir(&(0x7f00000001c0)='./file1\x00')
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10, 0x0}, 0x4000891)

27.480218925s ago: executing program 7 (id=660):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=<r5=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
mprotect(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x6e1f, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
r7 = dup(r6)
ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d07, &(0x7f0000000040)={0x4, 0x3})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/cpu_dma_latency\x00', 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe)
write(r8, &(0x7f0000000500)="00943577", 0x4)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x14df, 0x10, 0x3, 0xaf}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x8, 0x0, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x8, 0xfffffffe, 0x30d, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x0, 0x1, 0x35e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x0, 0x38e, 0x0, r0}}], 0x4, &(0x7f0000000540)={0x2e, 0x19, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0xc8b, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

26.367015474s ago: executing program 7 (id=667):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000006c80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8404, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @private2, 0x4201f805}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000290000000b00000000080000000000001400000000000000290000003400000008000000000000001400000000000000290000000b0000000000f48700000000240000000000000029"], 0x70}}], 0x2, 0x4004000)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x14)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x0, 0x9, 0x5, 0xa84}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
close(0x3)
syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000005000/0x4000)=nil)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000006c80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8404, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @private2, 0x4201f805}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000290000000b00000000080000000000001400000000000000290000003400000008000000000000001400000000000000290000000b0000000000f48700000000240000000000000029"], 0x70}}], 0x2, 0x4004000) (async)
accept$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x14) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x0, 0x9, 0x5, 0xa84}, 0x10) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
connect$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async)
close(0x3) (async)
syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000005000/0x4000)=nil) (async)
timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async)

25.84976191s ago: executing program 7 (id=672):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00')
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0xffffffff}}, 0x2e)
io_submit(r2, 0x2, &(0x7f0000000480)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x2, r0, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0xcf51, 0x0, 0x2}])

25.696245464s ago: executing program 36 (id=672):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00')
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0xffffffff}}, 0x2e)
io_submit(r2, 0x2, &(0x7f0000000480)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x2, r0, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0xcf51, 0x0, 0x2}])

8.705816353s ago: executing program 6 (id=737):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@rand_addr, @empty, <r3=>0x0}, &(0x7f00000005c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000600)={'ip_vti0\x00', <r4=>0x0, 0x80, 0x700, 0x4, 0x6, {{0xa, 0x4, 0x2, 0x2a, 0x28, 0x67, 0x0, 0x5c, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x26, [@remote, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010102]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf250f0000003800018008000100", @ANYRES32=0x0, @ANYBLOB="083500b82da518d05f0000000008030100000800"/38, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="180001801400020064766d7270310000000000000000000034000180140002006e657464657673696d3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468300000000000000000000000200001801400020077673200000000000000000000000000080003000200000038000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="20000180140002006d6163766c616e30000000000000000008000300020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="2c0001801400020073797a5f74756e0000000000000000001400020076657468315f766c616e0000000000001400018008000300010000000800030000000000"], 0x164}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001800)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x20, 0x1, 0x8, 0xfffff009}]}, 0x10)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB='\a'])
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000200)="f08194d3b100000065160000c4e27da86000c744240000200000c7442402a3ac0000c7442406000000000f011c24c4c105ef86aa0000000f06b9800000c00f3235010000000f30de13c4c3a55c0a00c4c17b12bf00000000da7301", 0x5b}], 0x1, 0x4f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000100)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x286, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r9 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r9, 0x0, 0xa, &(0x7f00000000c0))
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x33144a6, 0x0)
syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0)
syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSBRK(r10, 0x5427)

8.660851283s ago: executing program 4 (id=738):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xfcff}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

7.782813979s ago: executing program 6 (id=739):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r0=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
preadv(r4, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x1c)

7.711968395s ago: executing program 6 (id=740):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x224}], 0x1, 0x0, 0x0, 0x2000a014}, 0x8d2b33bcafc19fd1)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/key-users\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000080)=[{&(0x7f0000001240)=""/4159, 0x103f}], 0x1, 0x8b3, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r6, 0xe3)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0)

7.516626769s ago: executing program 6 (id=741):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0x37}, 0x40}, 0x1c)

7.395089616s ago: executing program 6 (id=742):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a80)={[0x5]}, 0x8, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1070, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x81100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000001a80)={[0x5]}, 0x8, 0x80000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
getpid() (async)
syz_pidfd_open(r2, 0x0) (async)
setns(r3, 0x24020000) (async)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1070, 0x0) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x81100, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

6.941703178s ago: executing program 6 (id=745):
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x1e, 0x0, 0x1, [@nested={0x9, 0x3d, 0x0, 0x1, [@generic="f1df62fd16"]}]}]}]}, 0x30}}, 0x0)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86500011}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3fb, 0x4, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x58f4c017b9a8fd3d)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x1e, 0x0, 0x1, [@nested={0x9, 0x3d, 0x0, 0x1, [@generic="f1df62fd16"]}]}]}]}, 0x30}}, 0x0) (async)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86500011}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3fb, 0x4, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x58f4c017b9a8fd3d) (async)

5.586427311s ago: executing program 4 (id=755):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) (async)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x14d)
open(0x0, 0x60840, 0x1d2) (async)
open(0x0, 0x60840, 0x1d2)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000040)='./dev\x00', 0x6ca7e, 0x10) (async)
r2 = open(&(0x7f0000000040)='./dev\x00', 0x6ca7e, 0x10)
fallocate(r2, 0x0, 0x0, 0x1000f4)
sendfile(r2, r2, 0x0, 0x40000000800) (async)
sendfile(r2, r2, 0x0, 0x40000000800)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000040))
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x31) (async)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x31)
copy_file_range(r7, &(0x7f0000000000)=0x7, r7, 0x0, 0x7, 0x0)
sendfile(r7, r7, &(0x7f0000000200)=0xff, 0x9)
capset(0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xae8})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

5.400838072s ago: executing program 4 (id=757):
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000fc0)=""/4108, 0x100c}], 0x4}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800003}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xae}, {{0x0, 0x0, 0x0}, 0x80}], 0x7, 0x40000020, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000300)={0x24, @long={0x3, 0xfffb, {0xaaaaaaaaaaaa0202}}}, 0x14)

5.299178765s ago: executing program 8 (id=758):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0xffffffff)
open(&(0x7f0000000040)='./file0\x00', 0xc040, 0x100)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f0000000800)={0x0, 0x23, 0x19, {0x19, 0x30, "0a2c4ea99ae6998676e8fba8da2d500e2be1bc94f912d2"}}, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f00000008c0)={0x20, 0x0, 0xa, "29d629c4bb5da4ce50c2"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x53}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x580, 0xfff9, 0x1, 0x94, 0x1, 0x0, 0x7, 0x25f, 0x101, 0xba, 0x8, 0xbedb}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000a80)={0x20, 0x89, 0x2}})
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0xe, 0x1c, {0x1c, 0x10, "8fbeecbc39d22d7b6dec88ac4ecddc4b1aec82135b1502897643"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x80, 0x17, 0x1b, "04d87202205cfcb8df1bc64032a9faf384ac7a2fbd18108f3e929a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}})
syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000300)={0x0, 0x10, 0x3, {0x3, 0x31, "d5"}}, &(0x7f0000000340)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "708016bf38bb365537121200d8845b7f18db60ffc769a70655a1e561eeac7eb362a0be6c9a9478d3e72a6ecf17b47683f0fd7eff798e5dbc741dee5049c01a1303a3c5768a386f70d55def38e19beae49e1c8b127efeac1142e46d3d4dc82b2ef16e5741f660d786ac5a367ffea5fd7d26f8dc2df671e4a5cab00a96a9bcb847b757e0727475c0d79f"}}, &(0x7f0000000440)={0x0, 0x22, 0x1b, {[@global=@item_012={0x1, 0x1, 0x3, '\x00'}, @main=@item_4={0x3, 0x0, 0xa, "6ee8a072"}, @main=@item_012={0x2, 0x0, 0x8, "0e80"}, @local=@item_4={0x3, 0x2, 0x7, "fc065f3e"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0x3, "48c8051e"}, @local=@item_4={0x3, 0x2, 0x3, "d97bdf24"}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x280}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)={0x20, 0x17, 0xd5, "f2dfe82f6b19fd052286d96810ce957b8d204cefcddb801e97530251cedfdb5e82820b9f3b0431f43f66ec246a1183fb916b7949901183ac0b2cdd911bd1cb45bc643c56fc1e8377ec756e18650baa3c14267b65560586d26a414fe26fb87272e8822f82845cd7b36ace134bc84d7296ee9f03b95dbd180d564a829546e5ab07f714cb7d85705ec8513b12b30c9294223883243302ef896b10c3971be8ec7534038e6a8c6425e03973645303b1fbddb23cffcc88d5e66a67bc56c7d7b8f183fa0b520d25930a5218bdee6a12ccfb57c75d8d5fdc42"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000680)={0x20, 0x1, 0x9f, "ad003f0df300be158fe3d72da3d75e9696dbf5902e11672be68f820262d8ba3723e1de9b47d4610dcb1176b0801aed07de1c1d621e3eb883d70ec8258713d09c470b3d36a7e340e368277d6b0fcf6ba43ab78dc01daad5ffb4add00fac5d4da4a5e3a6c086010730c5da98c45f3a38725be2dde86d8c2d512042007327387c3ddb6005ea46a24fa9d95f78c78a67917030da8b150b8c7fe65cc5457d180ed2"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0xa}})

5.298332186s ago: executing program 4 (id=759):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006200)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
r5 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4)
sendmmsg$inet6(r5, &(0x7f0000000200), 0x0, 0x4001c00)
write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x7}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x1, {0x0, 0x8000076, 0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffff, 0x4, 0xc000, 0x0, r3, r4, 0x80, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000001000f0000000000040004000000000008000200", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08be08721b", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="10000000000000002000040000000000"], 0x6c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './cgroup'}}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040490d00700100010203010902270001010080320904000003080650000705010200020007058202"], 0x0)
write$cgroup_pid(r6, &(0x7f00000024c0), 0x12)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', <r10=>0x0})
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
sendmsg$can_raw(r11, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r10}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="020067dfaf5798384771c3f8504050a12197ccd8299cbcc7b542f5e7e62142fa6f11f947972ea4437ff1641071b15eb9d91b57e9f8184b428bee8943136ba34d1ebda643e65269b5bbb20f21d24ad7dfbbb2411fbf", @ANYRES16=r8, @ANYBLOB="010000000000000000001b0000000700210061000000"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

3.093926388s ago: executing program 8 (id=767):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x10, {0x4000009f}}], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.871215628s ago: executing program 8 (id=769):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x6, 0xfffe, 0x3, 0x2, 0x0, 0x0, 0x2, 0x100}}, 0x50) (async)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x28})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.709555884s ago: executing program 8 (id=770):
timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1df) (async)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x18202, 0x0)
sendto(r0, &(0x7f0000000140)="78bdae579e665ee725a21631cbeceaf7388ba47aff7b380a8ef4309262172427bf54403480235e9124a83e6eb71ba57bcd143dc01c5700fc479e686ccbe05fb77a1ee7eb4bfa7d6816f41a129734366a716961181f34aeadb4375fd155e77ce68b2b7f2ed5e48cbf379601d89d0f32a3cc", 0x71, 0x0, &(0x7f0000000200)=@phonet={0x23, 0x4, 0x4, 0x85}, 0x80) (async)
umount2(&(0x7f00000001c0)='./debug\x00', 0x1)

2.675228972s ago: executing program 8 (id=771):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x4004662b, 0x0)

2.583319132s ago: executing program 8 (id=772):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xfcff}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

2.293249117s ago: executing program 4 (id=773):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)="c8e1112b", 0x4)
syz_io_uring_setup(0x3aff, &(0x7f0000000240)={0x0, 0x6a9f, 0x0, 0x0, 0x2d8}, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000580), &(0x7f00000005c0))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x0, 0xff9d, 0x1, 0x2, 0x234}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9bc0, 0x10000, 0x0, 0x291}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda45, 0x2005, 0x3, 0x364}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a4f, 0x80000, 0x0, 0x4b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe2f3, 0x8, 0x2, 0x397}, 0xffffffffffffffff, 0x0, <r2=>0x0}], 0x4, &(0x7f0000001900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x145}, 0x0, 0x0, '\x00', {0x0, 0x9a2, 0x0, &(0x7f0000000900)=@buf_4k="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"}}, &(0x7f0000001980))
syz_ublk_setup_io_uring(0x65e, &(0x7f00000019c0)={0x0, 0x20ae, 0x40000, 0x1, 0x2dd}, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0)=<r3=>0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000002640)=ANY=[@ANYRESHEX=0x0], 0x8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b00)={<r5=>0x0}, &(0x7f0000001b40)=0xc)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000001bc0)={0x2e, 0x5c, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001b80)=@any_dev={0x1, 0xbce, 0x0, 0x0, 0x1000, 0x7, r5}}}, &(0x7f0000001c40))
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r6, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000080)=[{0x0, 0x4, 0xffffffff, {0xe, 0x6}, 0x1, 0x5, 0x7}, {0xfff, 0x1, 0x0, {0x0, 0x2}, 0x8, 0x4, 0x4}], 0x2, 0x40, 0x4, 0x4c}, {&(0x7f0000000180)=[{0x3, 0x8000}, {0xffff, 0x8}, {0x7fff, 0x8}], 0x3, 0x10, 0x1, 0x6}, {&(0x7f00000001c0)=[0x1, 0x9, 0x9, 0x3, 0xa, 0x5, 0x5, 0x8000000000000000, 0x80000001, 0x9], 0xa, 0x8, 0xe5e, 0x3}, {&(0x7f0000000300)=[{0x2, 0xa, 0xfffffffffffffff2, 0x4, 0x10000}, {0x800, 0x8, 0x1, 0x7, 0xfff}, {0x8, 0x4, 0x60000, 0xfffffffffffffff8, 0x2}, {0x491e, 0x9, 0x8000000000000001, 0xffffffffffff8000, 0x4}, {0x2, 0x27, 0x8000, 0x3, 0x5}, {0x53d, 0x9, 0x9, 0x5, 0x61210303}, {0xfffffffffffffff8, 0x9, 0x1, 0x7, 0x1eb7c00}, {0x4, 0xd, 0x9535, 0x2, 0x4}, {0x31, 0x2, 0x2, 0xb0, 0x9}], 0x9, 0x28, 0x6, 0x200}, {&(0x7f0000000480)=[0x0, 0x3, 0x3ff, 0x9, 0x7, 0x7fffffff, 0x8, 0x77d4257b], 0x8, 0x8, 0x80, 0x5}})

2.252283536s ago: executing program 4 (id=774):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x10, 0xc, 0x0, 0x2, 0x6}}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x4)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000b3b000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, &(0x7f0000001500)=[@wrmsr={0x65, 0x20, {0x400000b3, 0x8000}}], 0x20})
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000080)={0xe, 0x0, [{0x40000001, 0x6, 0x5, 0x31237648, 0x6, 0x2, 0x2}]})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000480)={0xc7, 0x0, 0x1})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_control_io$lan78xx(r2, &(0x7f0000000340)={0x14, &(0x7f0000000180)={0x40, 0xb, 0xe3, {0xe3, 0x31, "2f54e602b56f15ace69a66fec43e73298308e9b395fbfbeeabd505dcb338d09cd4b1fa55c60f69659889d2088b50807c739ca72f816edaa6d0ec24dd9186d625fe897345435b4c814073245e290fb6d89adba3b6b354051f0ffdd339ae6ad54268083ab3799c75c8fd1ebafedf373d167d8783f33e6ae5759396c0b617441c871351dfa5fe667fa7c9d905dcf0e01a3594951864574fd1fddb0988317a730e9d9b1bc480ec4798500f3e70961b608078d9fa52142edabb0407c87c21340859b63af0e62d56eca19f6e92f7df2038edc2299b5f9db152a8494944e1c39edb9586dd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}}, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x40, 0x9, 0xab, "b3817c9e19a2cc34ff9cbd553601694ad684433852f286352806f406db956bee3d59af8580dd79d76d26dd2c678aee9425e56139ef84234262f0825d5f031c2cd2208495697373cee6d29d8e89252b87c60aefc0ac49cbf873a2f72af7e08fc3b66cce4e3f1e48e35b6a1e6def409f74cdc801bd7dc6c9762f40b66d1e0100f5c2cc748960e019f43d2406536caec64afb23df9d1dcaf2d34efb9cf6adee2a0a94b8029bfe5ad00b447d81"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x7869ca4}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "25151e7852a228050ac0f7d16ece5fe006bafb4ed49f72dd6121b6610adc22b79704dc80d052846dac7f117e475846"}})
ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000000600)={'veth0_to_bond\x00'})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

1.275493685s ago: executing program 0 (id=782):
add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x5, 0x401}, 0x0) (async)
r2 = syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRESHEX=r1], 0x0)
syz_usb_control_io$uac1(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003230000002303"]}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4b0042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
r6 = eventfd2(0x4001, 0x800)
r7 = eventfd2(0x4, 0x0) (async)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6, 0x7, 0x0, r6})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r6, 0x17, 0x2, r7}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
open_tree(r8, &(0x7f00000008c0)='\x00', 0x1001) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x2b, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x1, 0x3], 0xeeee8000, 0x202})
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000000000002000002e0000002"], 0x110) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

777.111466ms ago: executing program 0 (id=783):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00') (async)
unshare(0x20000400) (async)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7) (async)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0xfffffffc, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x6)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
fallocate(r3, 0x0, 0x0, 0x1000f4) (async)
sendfile(r3, r3, 0x0, 0x40000000800)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
mount$incfs(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x2080007, &(0x7f0000000400)={[{@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x9}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x1}}, {@no_bf_readahead}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x6}}], [{@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', r6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '&\\'}}, {@uid_eq={'uid', 0x3d, r7}}, {@subj_type={'subj_type', 0x3d, '\'@@&'}}]}) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) (async)
r9 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
pwrite64(r8, &(0x7f0000001000)="fc", 0x1, 0x1000)

731.346256ms ago: executing program 0 (id=784):
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0xe})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

658.953243ms ago: executing program 0 (id=785):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='\x00', 0x20200, &(0x7f0000000080)={@align=0x9, {0x6, 0x5, 0x2, 0x8}}, 0x800, &(0x7f00000000c0), &(0x7f0000000100)=0x9})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3000}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x21, 0x8, 0x70bd25, 0x25dfdbff, {0x8}, [@generic="140e269e3aafa906824b47a7124aaf85d4597278edb978f102f24086cecc74f3e99c25e61b99248201b6256816610a9098c8167884d2347c9f9964b05413520e5a99d8897efe5a51def9f79a04463df4999e9ec8fd063e56c41a38d5bc3a79e19d64a1619599c483d19dfa2d207d20f5465da35d2aad5db70c86d09580b2f179827e3ddc5e8cf0eccaa059ae0c48e441f716ce61e1179ef7b611c7522e4923c30bad93cfa4c40eb90e1dc04fe6ba48cf15e8ec6339ab98512a5cabd80641bfe41b3770135e59e28524464075d18f4b38bedf5a7010f199"]}, 0xec}, 0x1, 0x0, 0x0, 0x41c4}, 0x8000)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000004c0)=@rnullb, 0xee01, &(0x7f0000000500)={0x1000, 0x6, 0xb, 0x7, 0x3, 0xb, 0x7, 0x9})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xda3, 0x7f}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x1}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x57, 0x2a, [@mesh_chsw={0x76, 0x6, {0xfd, 0x2, 0x2b, 0x81}}, @mesh_chsw={0x76, 0x6, {0x7, 0xe7, 0x21, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x10, 0x5, @device_b, 0x9, @value=@device_b, 0x0, 0xe513, @device_b, 0x2e51a230}}, @ht={0x2d, 0x1a, {0x4000, 0x3, 0x5, 0x0, {0x2, 0x97, 0x0, 0xf, 0x0, 0x0, 0x1, 0x1}, 0x806, 0x2}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r5, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x4000800)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000005}, 0xc001)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x248, r10, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1ff}, @NL80211_ATTR_VENDOR_DATA={0x12, 0xc5, "27233ec5c83121da3458ec5bc4b6"}, @NL80211_ATTR_VENDOR_DATA={0xb4, 0xc5, "9ed6fa46f27cb71dac8402004a2c875ec7d87e5e873f5bdd7a410a7d98869b6b3acfe990a1d43ff99acf81fbe62461586c06f676a2866a656c61d88bbb160e20ab7fe649bd7a546274e02c60269b6553da387a746cac0b19ebdedd095f5da47227979b5c13228c9c3ec5a4402b6892b34604a88f0813fd19a0d16846465e6eab8e988758d5394fe4c9fb94d57f5b6054f053eb45d493dc86452423eda61fb9f91a4d05123968ab579014e44d83555fbf"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x4b, 0xc5, "f86bc167b56ea4f1c06947afcb47e46fa545f04f7a0aa0de3479aa08de8633cf1b2ae7b2ad4ea33f61602169a362de2f6e6d260b421cab8d95f3a8a5b55560b1569151695ffbac"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ac0}, @NL80211_ATTR_VENDOR_DATA={0xf1, 0xc5, "d84dd5195a33fe0b06b9a986474650dfb7396ffb842e2dc214a7eac8bcb106ff0a8d5613b4ad7677d34f6cb9a4fbc75ba8df6583002f7e600bd7ff8f78cf0757db79b718e73a2d356c0f88314e31d9362e6cb3a5fa544b069b1e5fc1e7e4a619c55a17a86a3630ade55ee26c41f67977d8bde5d56474e4170111ba7eec6cc8a61e9dedb4f744c92ef824f8961320d6ec3d6c8f2b3d17b54e99b16aede4329586a3f3754c215cd9ef43a11afd2fe8ad8f1b5da2b282d2bbcfbd4fc0a2856c4a9406e4bf1a41f9899befd5c6ea8600702eb032b7214ff91eac3f7de7add12776ee0163ecaa002533f299ec73b0c4"}]}, 0x248}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x84, r10, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x40}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2a, 0x4}, {0x5}, {0x5, 0x5}, {0x0, 0x7}], "cfa39286711af87b"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x1}], "99bf112fa80c0283"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x7, 0x5}, {0x0, 0x2}, {0x0, 0x6}], "93cf1c03d95c9d80"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "dd7ce5a47f1abe33"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x8, 0x5}, {0x2, 0x7}, {0x3}, {0x3d, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x8, 0x5}], "6fc46f2daa525b2a"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x20000080)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000001080)={0x81, 0x0, 0x3})
readlink(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)=""/167, 0xa7)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000a0c}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x200c0010)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000001300)={0xdb03})
r11 = syz_io_uring_complete(0x0, 0x0)
write$selinux_create(r11, &(0x7f0000001340)=@objname={'system_u:object_r:faillog_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x6, 0x20, './file0\x00'}, 0x4b)
ioctl$sock_netdev_private(r1, 0x89fc, &(0x7f00000013c0)="4ce28ecd1a5be3552ed1400f9855f512f937d431995cf093ec3af9d8f59c2690816543ae616040fb154ec1bcb7e732d0fdff148de01439aba3e0996baa8b00be6e0987bdcb6d5c7acf1eb5895b868560a4018cf2bdda34e7c3246df51e69879dd6be0409d3c17af2e4ef35630c6f532432708b12deaf717f5c725f39abc1000174f6fcd0cda00d4507c0c2c668033b550cae154de8f3f1ab74a6848efde9ffc0cdf97ce93d48c2c9343bea3b8b4d0f4658a5a11a9cd6b24c36ff8b02e926db3fa462c76ee78ed39030aa7b1490c94d974ef7110c98")
openat$snapshot(0xffffffffffffff9c, &(0x7f00000014c0), 0x3, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4085}, 0x20008000)

619.881701ms ago: executing program 0 (id=786):
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x6)
write$cgroup_netprio_ifpriomap(r0, 0x0, 0x8)
mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./dev\x00', 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
setitimer(0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f0000000440))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0x1c}}, 0x44801)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
recvfrom$inet6(r4, &(0x7f00000006c0)=""/205, 0xfffffffffffffd95, 0x10100, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r1, 0x0)
writev(r4, &(0x7f0000000600)=[{&(0x7f0000000480)="315d9fd9ba12b2ddb7990cd512676820f36cb0bd3b16807dd5d55315523fa8af05ee13556136c7054885b98498743e1108e4184f2c2c5fd87d0559e87c2a4d65cd582fa1c819e6b2c9d888", 0x4b}, {&(0x7f0000000240)="15b40de49df0f1ff5ed8ee28def3fa3d98dc692c77beb27e894090c6e0fadb330e3c4e79058c8d40fb2ea9199b5b1b460d16f4", 0x33}, {&(0x7f0000000540)="a68273a5b251e688426944514c7593f14105fc8a991f020c8922cfaab6dcd04bd53ff90843cc54c86f341ef0eda0d743e53540ff9096337a9390cc1d9ecceee7d4c437eafd6d9c09f1523a34509c3524566272d7ab7e347582ccb8171d77e19c7c1cde2c303fdf63c65626efd44d5be7e301a92d8690a76731a86494ca4566410f092b3baf286e121454064669efdb88476d27d37a1587ae65953411cdbaa409a2f783215d8ae3df537ed91e", 0xac}], 0x3)
openat$cgroup_ro(r0, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
ioctl$TUNSETIFF(r3, 0x40086610, 0x0)

0s ago: executing program 0 (id=787):
r0 = inotify_init()
r1 = socket(0x2b, 0x3, 0x0)
setsockopt(r1, 0x104, 0xfffe, &(0x7f0000000100)="00008634", 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0)
syz_usb_ep_read(r3, 0x2, 0x28, &(0x7f0000000100)=""/8)
setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0xfd, 0x4)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
close(0x3)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = socket(0xa, 0x3, 0xff)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c)
connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0x1c)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4044084}, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x1000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40080}, 0x1c)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0)
write$binfmt_format(r6, &(0x7f0000000140)='1\x00', 0x2)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0x0, 0x10c000, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

000000000000000000300000000000000000003'
[   68.825221][   T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   68.978824][   T31] usb 3-1: Using ep0 maxpacket: 32
[   68.985378][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.996818][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.007012][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   69.020219][   T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   69.029762][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.039267][   T31] usb 3-1: config 0 descriptor??
[   69.245581][ T1274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.254311][ T1274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.307534][ T1307] netlink: 'syz.4.275': attribute type 12 has an invalid length.
[   69.437495][ T1316] tipc: Started in network mode
[   69.442495][ T1316] tipc: Node identity ac1414aa, cluster identity 4711
[   69.449598][ T1316] tipc: New replicast peer: 0.0.0.0
[   69.455203][ T1316] tipc: Enabled bearer <udp:syz2>, priority 10
[   69.463302][ T1274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.469334][ T1316] netlink: 104 bytes leftover after parsing attributes in process `syz.0.278'.
[   69.472453][ T1274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.490322][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   69.490339][   T36] audit: type=1400 audit(1790522226.460:364): avc:  denied  { ioctl } for  pid=1273 comm="syz.2.267" path="socket:[12636]" dev="sockfs" ino=12636 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   69.523964][   T66] usb 2-1: USB disconnect, device number 23
[   69.526410][ T1321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.538611][ T1318] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   69.550336][   T36] audit: type=1400 audit(1790522226.490:365): avc:  denied  { create } for  pid=1273 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   69.570072][ T1274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.578681][ T1274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.593740][ T1318] tipc: Enabled bearer <udp:syz0>, priority 10
[   69.602636][ T1321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.615285][ T1323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.624097][ T1323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.655739][ T1341] netlink: 'syz.0.281': attribute type 10 has an invalid length.
[   69.668867][  T311] tipc: Node number set to 9874090
[   69.978851][   T66] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   70.128860][   T66] usb 2-1: Using ep0 maxpacket: 32
[   70.135505][   T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.146752][   T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.156794][   T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   70.169869][   T66] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   70.178997][   T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.190390][   T66] usb 2-1: config 0 descriptor??
[   70.202785][ T1343] overlayfs: failed to clone upperpath
[   70.602808][   T66] hid (null): bogus close delimiter
[   70.608096][   T66] hid (null): unknown global tag 0xe
[   70.622779][   T66] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000C/input/input15
[   70.636862][   T66] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000C/input/input16
[   70.668820][   T66] kye 0003:0458:5011.000C: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[   70.708840][  T311] tipc: Node number set to 2886997162
[   70.766211][   T36] audit: type=1400 audit(1790522227.730:366): avc:  denied  { bind } for  pid=1351 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   70.806127][ T1340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.817081][ T1340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.826679][   T66] usb 2-1: USB disconnect, device number 24
[   70.833286][   T36] audit: type=1400 audit(1790522227.800:367): avc:  denied  { create } for  pid=1355 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   70.863819][   T36] audit: type=1326 audit(1790522227.830:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.288" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f856d19e159 code=0x0
[   71.603667][   T31] usbhid 3-1:0.0: can't add hid device: -71
[   71.614492][ T1371] sock: sock_timestamping_bind_phc: sock not bind to device
[   71.620935][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   71.638462][   T31] usb 3-1: USB disconnect, device number 18
[   71.740910][   T36] audit: type=1400 audit(1790522228.710:369): avc:  denied  { create } for  pid=1383 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   72.540612][   T36] audit: type=1400 audit(1790522229.510:370): avc:  denied  { mounton } for  pid=1391 comm="syz.4.297" path="/14/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   72.587795][ T1392] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1986356271.1836347439.120), cmd(5)
[   72.616289][   T36] audit: type=1400 audit(1790522229.550:371): avc:  denied  { read } for  pid=1391 comm="syz.4.297" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   72.647561][   T36] audit: type=1400 audit(1790522229.550:372): avc:  denied  { open } for  pid=1391 comm="syz.4.297" path="/14/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   72.699179][   T36] audit: type=1400 audit(1790522229.550:373): avc:  denied  { ioctl } for  pid=1391 comm="syz.4.297" path="/newroot/14/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   72.801915][ T1407] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.811004][ T1407] netlink: 'syz.4.301': attribute type 1 has an invalid length.
[   72.819112][ T1407] netlink: 9 bytes leftover after parsing attributes in process `syz.4.301'.
[   72.922378][   T44] bridge_slave_1: left allmulticast mode
[   72.928095][   T44] bridge_slave_1: left promiscuous mode
[   72.933818][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.942245][   T44] bridge_slave_0: left allmulticast mode
[   72.948048][   T44] bridge_slave_0: left promiscuous mode
[   72.954566][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.971310][   T44] tipc: Disabling bearer <eth:ip_vti0>
[   73.060590][   T44] tipc: Disabling bearer <udp:syz2>
[   73.066163][   T44] tipc: Left network mode
[   73.157887][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.165573][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.172894][ T1415] bridge_slave_0: entered allmulticast mode
[   73.179311][ T1415] bridge_slave_0: entered promiscuous mode
[   73.186246][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.193724][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.201017][ T1415] bridge_slave_1: entered allmulticast mode
[   73.207509][ T1415] bridge_slave_1: entered promiscuous mode
[   73.249008][  T311] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[   73.270332][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.277421][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.284816][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.291923][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.315305][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.323024][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.333596][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.340732][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.350967][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.358084][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.386564][ T1415] veth0_vlan: entered promiscuous mode
[   73.399582][ T1415] veth1_macvtap: entered promiscuous mode
[   73.409692][  T311] usb 3-1: Using ep0 maxpacket: 8
[   73.417816][  T311] usb 3-1: config 0 has no interfaces?
[   73.427260][  T311] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[   73.437713][  T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.447570][  T311] usb 3-1: Product: syz
[   73.452548][  T311] usb 3-1: Manufacturer: syz
[   73.457204][  T311] usb 3-1: SerialNumber: syz
[   73.462817][  T311] usb 3-1: config 0 descriptor??
[   73.477595][ T1420] ptp ptp0: new virtual clock ptp1
[   73.485815][ T1420] ptp ptp0: new virtual clock ptp2
[   73.492214][ T1420] ptp ptp0: new virtual clock ptp3
[   73.498710][ T1420] ptp ptp0: new virtual clock ptp4
[   73.505318][ T1420] ptp ptp0: new virtual clock ptp5
[   73.511184][ T1420] ptp ptp0: guarantee physical clock free running
[   73.672405][  T322] usb 3-1: USB disconnect, device number 19
[   73.759434][  T311] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   73.858911][  T444] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[   73.911822][  T311] usb 6-1: Using ep0 maxpacket: 8
[   73.918517][  T311] usb 6-1: unable to get BOS descriptor or descriptor too short
[   73.929672][  T311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 88, changing to 7
[   73.945514][  T311] usb 6-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[   73.958061][  T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.969754][  T311] usb 6-1: Product: ᅽ爎韺妑괂耣荔餘 넻䯶᳣띐檧ꁞᾸ飞ቤ鰚쒰莆澻⹀葲抆⓼鐑糃猴὏챙䵤紭䞴ᓡ挪ᤵ㐣玷筡居ద䫌ꄪ殲露ᓬ涊퇛짅鞅멩䕪ড켈僼物깫˂ⓦἠབྷ양驕귏䕶皥㬢ᥔ쟒䧹⫁主臣뢥扌䉝㆛ⅵḻ嘑儩﹇ﻈ馀ꑳ䕓깵몽湆䅉鴜䧼藭ﴇ拧簈￱媈చ탘ⴟ
[   74.003539][  T311] usb 6-1: Manufacturer: Б
[   74.008210][  T311] usb 6-1: SerialNumber: У
[   74.020351][  T444] usb 5-1: unable to get BOS descriptor or descriptor too short
[   74.028735][  T444] usb 5-1: not running at top speed; connect to a high speed hub
[   74.037683][  T444] usb 5-1: unable to read config index 0 descriptor/start: -61
[   74.045562][  T444] usb 5-1: can't read configurations, error -61
[   74.188843][  T444] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   74.217919][  T311] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[   74.231746][  T311] usb 6-1: USB disconnect, device number 2
[   74.341171][  T444] usb 5-1: unable to get BOS descriptor or descriptor too short
[   74.349564][  T444] usb 5-1: not running at top speed; connect to a high speed hub
[   74.359183][  T444] usb 5-1: unable to read config index 0 descriptor/start: -61
[   74.367348][  T444] usb 5-1: can't read configurations, error -61
[   74.374221][  T444] usb usb5-port1: attempt power cycle
[   74.709438][ T1477] netlink: 'syz.0.323': attribute type 46 has an invalid length.
[   74.719426][  T444] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[   74.745065][  T444] usb 5-1: unable to get BOS descriptor or descriptor too short
[   74.753701][  T444] usb 5-1: not running at top speed; connect to a high speed hub
[   74.766507][  T444] usb 5-1: unable to read config index 0 descriptor/start: -61
[   74.779802][  T444] usb 5-1: can't read configurations, error -61
[   74.828716][ T1491] usb usb9: usbfs: process 1491 (syz.5.329) did not claim interface 30 before use
[   74.918945][  T444] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[   74.940824][  T444] usb 5-1: unable to get BOS descriptor or descriptor too short
[   74.949046][  T444] usb 5-1: not running at top speed; connect to a high speed hub
[   74.958045][  T444] usb 5-1: unable to read config index 0 descriptor/start: -61
[   74.966687][  T444] usb 5-1: can't read configurations, error -61
[   74.973245][  T444] usb usb5-port1: unable to enumerate USB device
[   75.098863][  T311] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   75.248836][  T311] usb 6-1: Using ep0 maxpacket: 8
[   75.255243][  T311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.265902][  T311] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   75.275013][  T311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   75.286689][  T311] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   75.295957][  T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.304299][  T311] usb 6-1: Product: syz
[   75.308550][  T311] usb 6-1: Manufacturer: syz
[   75.313289][  T311] usb 6-1: SerialNumber: syz
[   75.578905][  T444] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[   75.708851][  T444] usb 3-1: device descriptor read/64, error -71
[   75.731070][  T311] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   75.739870][  T311] usb 6-1: clock source 0 is not valid, cannot use
[   75.947539][  T311] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   75.956267][  T444] usb 3-1: device descriptor read/64, error -71
[   75.968293][  T311] usb 6-1: USB disconnect, device number 3
[   76.198868][  T444] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[   76.328834][  T444] usb 3-1: device descriptor read/64, error -71
[   76.568842][  T444] usb 3-1: device descriptor read/64, error -71
[   76.653761][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   76.653780][   T36] audit: type=1400 audit(1790522233.620:382): avc:  denied  { module_load } for  pid=1504 comm="syz.4.334" path="/17/bus" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[   76.653880][ T1505] Invalid ELF header len 7
[   76.688919][  T444] usb usb3-port1: attempt power cycle
[   76.728948][   T36] audit: type=1400 audit(1790522233.700:383): avc:  denied  { load_policy } for  pid=1511 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   76.739234][   T66] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   76.772567][ T1512] SELinux: failed to load policy
[   76.782847][   T36] audit: type=1400 audit(1790522233.750:384): avc:  denied  { remount } for  pid=1511 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   76.782853][ T1512] cgroup2: Unknown parameter '?;	Y-��wlj/y�y���l�!!���!�������xS�Z�X./_���u'
[   76.888859][   T66] usb 6-1: device descriptor read/64, error -71
[   77.028850][  T444] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   77.050006][  T444] usb 3-1: device descriptor read/8, error -71
[   77.128845][   T66] usb 6-1: device descriptor read/64, error -71
[   77.179989][  T444] usb 3-1: device descriptor read/8, error -71
[   77.368891][   T66] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   77.418854][  T444] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   77.440193][  T444] usb 3-1: device descriptor read/8, error -71
[   77.498885][   T66] usb 6-1: device descriptor read/64, error -71
[   77.570058][  T444] usb 3-1: device descriptor read/8, error -71
[   77.679303][  T444] usb usb3-port1: unable to enumerate USB device
[   77.720051][ T1519] kvm: emulating exchange as write
[   77.725812][ T1519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   77.738824][   T66] usb 6-1: device descriptor read/64, error -71
[   77.808277][   T36] audit: type=1400 audit(1790522234.770:385): avc:  denied  { mounton } for  pid=1524 comm="syz.0.339" path="/96/file0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   77.849339][   T66] usb usb6-port1: attempt power cycle
[   77.859426][ T1526] netlink: 'syz.0.339': attribute type 16 has an invalid length.
[   77.867475][ T1526] netlink: 51802 bytes leftover after parsing attributes in process `syz.0.339'.
[   77.998893][  T321] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   78.148864][  T321] usb 5-1: Using ep0 maxpacket: 16
[   78.156040][  T321] usb 5-1: config 0 has an invalid interface number: 98 but max is 0
[   78.164413][  T321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.174840][  T321] usb 5-1: config 0 has no interface number 0
[   78.181024][  T321] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[   78.190942][   T66] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   78.198474][  T321] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   78.208597][  T321] usb 5-1: config 0 interface 98 has no altsetting 0
[   78.217017][  T321] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[   78.226197][  T321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.234354][  T321] usb 5-1: Product: syz
[   78.238687][  T321] usb 5-1: Manufacturer: syz
[   78.243387][  T321] usb 5-1: SerialNumber: syz
[   78.248461][   T66] usb 6-1: device descriptor read/8, error -71
[   78.255366][  T321] usb 5-1: config 0 descriptor??
[   78.260701][ T1519] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   78.268044][ T1519] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   78.379947][   T66] usb 6-1: device descriptor read/8, error -71
[   78.469732][   T36] audit: type=1400 audit(1790522235.440:386): avc:  denied  { setopt } for  pid=1537 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   78.489519][ T1519] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   78.498871][ T1519] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[   78.628863][   T66] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   78.649945][   T66] usb 6-1: device descriptor read/8, error -71
[   78.738837][  T322] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   78.779932][   T66] usb 6-1: device descriptor read/8, error -71
[   78.889076][   T66] usb usb6-port1: unable to enumerate USB device
[   78.900146][  T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.911189][  T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.921099][  T322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   78.933991][  T322] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[   78.943531][  T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.952415][  T322] usb 3-1: config 0 descriptor??
[   79.030961][ T1543] overlayfs: failed to clone upperpath
[   79.055841][   T36] audit: type=1326 audit(1790522236.020:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1544 comm="syz.0.346" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f856d19e159 code=0x0
[   79.130242][  T321] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   79.141897][  T321] asix 5-1:0.98: probe with driver asix failed with error -71
[   79.150802][  T321] usb 5-1: USB disconnect, device number 11
[   79.161518][   T36] audit: type=1326 audit(1790522236.130:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1544 comm="syz.0.346" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f856d19e159 code=0x0
[   79.187220][  T322] usb 3-1: string descriptor 0 read error: -71
[   79.196148][  T322] usbhid 3-1:0.0: can't add hid device: -71
[   79.202545][  T322] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   79.211712][  T322] usb 3-1: USB disconnect, device number 24
[   79.898820][  T322] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   79.932736][ T1581] 9pnet_fd: Insufficient options for proto=fd
[   80.027364][   T36] audit: type=1400 audit(1790522236.990:389): avc:  denied  { setopt } for  pid=1586 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   80.058851][  T322] usb 6-1: Using ep0 maxpacket: 8
[   80.066958][  T322] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[   80.076676][  T322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.084792][  T322] usb 6-1: Product: syz
[   80.089822][  T322] usb 6-1: Manufacturer: syz
[   80.094499][  T322] usb 6-1: SerialNumber: syz
[   80.298826][   T31] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[   80.310570][  T322] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[   80.326477][  T322] usb 6-1: USB disconnect, device number 8
[   80.450281][   T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 4
[   80.461757][   T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 61247, setting to 1023
[   80.480006][   T31] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[   80.489428][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.497509][   T31] usb 3-1: Product: syz
[   80.501885][   T31] usb 3-1: Manufacturer: syz
[   80.506560][   T31] usb 3-1: SerialNumber: syz
[   80.588151][ T1605] netlink: 'syz.0.364': attribute type 10 has an invalid length.
[   80.596073][ T1605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'.
[   80.605146][ T1605] veth1: entered promiscuous mode
[   80.720007][   T31] usb 3-1: USB disconnect, device number 25
[   80.738430][  T615] udevd[615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   81.256666][   T36] audit: type=1400 audit(1790522238.220:390): avc:  denied  { execute_no_trans } for  pid=1615 comm="syz.2.368" path="/81/file0/file1" dev="overlay" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   81.313645][ T1620] netlink: 80 bytes leftover after parsing attributes in process `syz.5.369'.
[   81.341695][ T1624] rust_binder: 1623:1624 FDA parent offset not aligned correctly
[   81.342754][   T36] audit: type=1400 audit(1790522238.310:391): avc:  denied  { call } for  pid=1623 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   81.350054][ T1624] rust_binder: 1623:1624 error while translating object: EINVAL
[   81.376980][ T1624] rust_binder: Failure in copy_transaction_data: EINVAL
[   81.377025][ T1624] rust_binder: 1623:1624 transaction async to 1623:0 failed EINVAL, code 0 size 80-24
[   81.638845][  T322] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   81.788842][  T322] usb 3-1: Using ep0 maxpacket: 16
[   81.796622][  T322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.808506][  T322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[   81.818677][  T322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[   81.829140][  T322] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   81.842910][  T322] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.852126][  T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   81.860211][  T322] usb 3-1: SerialNumber: syz
[   81.866313][ T1631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   81.873610][ T1631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   81.881490][  T322] hub 3-1:1.0: bad descriptor, ignoring hub
[   81.887479][  T322] hub 3-1:1.0: probe with driver hub failed with error -5
[   82.083481][ T1628] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   82.090812][ T1628] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   82.173704][  T444] rust_binder: 1623: undelivered TRANSACTION_ERROR: 29201
[   82.303069][  T322] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[   82.329299][   T36] kauditd_printk_skb: 1 callbacks suppressed
[   82.329324][   T36] audit: type=1400 audit(1790522239.290:393): avc:  denied  { search } for  pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.380918][   T36] audit: type=1400 audit(1790522239.350:394): avc:  denied  { read } for  pid=1658 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.404184][   T36] audit: type=1400 audit(1790522239.350:395): avc:  denied  { open } for  pid=1658 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.429472][   T36] audit: type=1400 audit(1790522239.350:396): avc:  denied  { getattr } for  pid=1658 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.455257][   T31] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[   82.499315][   T36] audit: type=1400 audit(1790522239.470:397): avc:  denied  { write } for  pid=1657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.522438][   T36] audit: type=1400 audit(1790522239.470:398): avc:  denied  { add_name } for  pid=1657 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.552849][   T36] audit: type=1400 audit(1790522239.520:399): avc:  denied  { remove_name } for  pid=1668 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=2631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.598837][   T31] usb 6-1: device descriptor read/64, error -71
[   82.660277][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   82.668883][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   82.839609][   T31] usb 6-1: device descriptor read/64, error -71
[   82.886026][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   82.894256][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   83.017498][ T1694] capability: warning: `syz.4.381' uses 32-bit capabilities (legacy support in use)
[   83.078826][   T31] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[   83.111042][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   83.119434][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   83.218846][   T31] usb 6-1: device descriptor read/64, error -71
[   83.254364][ T1717] fuse: Bad value for 'fd'
[   83.335877][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   83.343838][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   83.458836][   T31] usb 6-1: device descriptor read/64, error -71
[   83.559962][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   83.567870][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   83.569250][   T31] usb usb6-port1: attempt power cycle
[   83.788701][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   83.796626][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   83.810818][   T36] audit: type=1400 audit(1790522240.780:400): avc:  denied  { ioctl } for  pid=1728 comm="syz.4.390" path="socket:[15109]" dev="sockfs" ino=15109 ioctlcmd=0x89ff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   83.836857][   T36] audit: type=1400 audit(1790522240.790:401): avc:  denied  { create } for  pid=1730 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   83.918825][   T31] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[   83.939814][   T31] usb 6-1: device descriptor read/8, error -71
[   84.011116][   T36] audit: type=1400 audit(1790522240.980:402): avc:  denied  { ioctl } for  pid=1740 comm="syz.0.395" path="socket:[16275]" dev="sockfs" ino=16275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   84.013877][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   84.043635][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   84.068845][ T1743] overlay: ./file0 is not a directory
[   84.070500][   T31] usb 6-1: device descriptor read/8, error -71
[   84.075121][ T1744] overlay: ./file0 is not a directory
[   84.101471][ T1746] bridge0: port 3(vlan0) entered blocking state
[   84.107979][ T1746] bridge0: port 3(vlan0) entered disabled state
[   84.114406][ T1746] vlan0: entered allmulticast mode
[   84.119967][ T1746] veth0_vlan: entered allmulticast mode
[   84.126158][ T1746] vlan0: entered promiscuous mode
[   84.131626][ T1746] bridge0: port 3(vlan0) entered blocking state
[   84.137943][ T1746] bridge0: port 3(vlan0) entered forwarding state
[   84.178811][  T438] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   84.260938][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68!
[   84.268861][    C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03!
[   84.318815][   T31] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[   84.328819][  T438] usb 5-1: Using ep0 maxpacket: 16
[   84.336981][  T438] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   84.346780][  T438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.355667][  T438] usb 5-1: Product: syz
[   84.355903][   T31] usb 6-1: device descriptor read/8, error -71
[   84.366642][  T438] usb 5-1: Manufacturer: syz
[   84.371607][  T438] usb 5-1: SerialNumber: syz
[   84.460034][  T322] usb 3-1: USB disconnect, device number 26
[   84.472849][  T322] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[   84.489833][   T31] usb 6-1: device descriptor read/8, error -71
[   84.598922][   T31] usb usb6-port1: unable to enumerate USB device
[   84.720997][  T438] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[   84.738517][  T438] usb 5-1: USB disconnect, device number 12
[   84.838986][  T322] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   84.988841][  T322] usb 3-1: Using ep0 maxpacket: 16
[   84.995514][  T322] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[   85.005539][  T322] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   85.014770][  T322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.022841][  T322] usb 3-1: Product: syz
[   85.027035][  T322] usb 3-1: Manufacturer: syz
[   85.031693][  T322] usb 3-1: SerialNumber: syz
[   85.038829][  T322] r8152-cfgselector 3-1: Unknown version 0x0000
[   85.045299][  T322] r8152-cfgselector 3-1: config 0 descriptor??
[   85.421315][ T1805] 9p: Unknown uid 00000000004294967295
[   85.456710][  T444] r8152-cfgselector 3-1: USB disconnect, device number 27
[   85.512717][ T1810] ��: renamed from xfrm0 (while UP)
[   85.598826][   T31] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   85.750132][   T31] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.761158][   T31] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   85.774114][   T31] usb 6-1: config 0 interface 0 has no altsetting 0
[   85.780822][   T31] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[   85.790403][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.799181][   T31] usb 6-1: config 0 descriptor??
[   86.157336][ T1832] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.272983][ T1838] ������: renamed from vlan0 (while UP)
[   86.346722][ T1848] tc_dump_action: action bad kind
[   86.452943][ T1794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.475760][ T1794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.492219][   T31] sony 0003:054C:0268.000D: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[   86.509301][   T31] sony 0003:054C:0268.000D: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.5-1/input0
[   86.528574][   T31] sony 0003:054C:0268.000D: failed to claim input
[   86.537482][ T1848] mmap: syz.2.421 (1848) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   86.556833][   T31] usb 6-1: USB disconnect, device number 13
[   86.576489][ T1853] fido_id[1853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[   86.681453][ T1855] kvm: kvm [1854]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x187) = 0x9fa0000
[   86.693351][ T1855] kvm: kvm [1854]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x186) = 0x9fa0000
[   86.713565][ T1855] kvm: kvm [1854]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x11e) = 0x9fa0000
[   86.725425][ T1855] kvm: kvm [1854]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc2) = 0x9fa0000
[   86.734705][ T1855] kvm: kvm [1854]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc1) = 0x9fa0000
[   86.838506][ T1871] netlink: 96 bytes leftover after parsing attributes in process `syz.4.429'.
[   86.972975][ T1882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=1882 comm=syz.4.435
[   87.051409][ T1399] bridge_slave_1: left allmulticast mode
[   87.068697][ T1399] bridge_slave_1: left promiscuous mode
[   87.074796][ T1399] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.087067][ T1399] bridge_slave_0: left allmulticast mode
[   87.095879][ T1399] bridge_slave_0: left promiscuous mode
[   87.101780][ T1399] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.188112][ T1896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.197082][ T1896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.235276][ T1399] tipc: Disabling bearer <eth:veth0_to_batadv>
[   87.243175][ T1399] tipc: Left network mode
[   87.262313][ T1399] veth1_macvtap: left promiscuous mode
[   87.269657][ T1399] veth0_vlan: left promiscuous mode
[   87.328275][   T13] tipc: Subscription rejected, illegal request
[   87.358299][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.374514][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.381783][ T1890] bridge_slave_0: entered allmulticast mode
[   87.388398][ T1890] bridge_slave_0: entered promiscuous mode
[   87.397812][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.405123][ T1890] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.412620][ T1890] bridge_slave_1: entered allmulticast mode
[   87.418931][  T444] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   87.420088][ T1890] bridge_slave_1: entered promiscuous mode
[   87.499197][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.506337][ T1890] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.513795][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.520889][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.553364][  T319] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.561282][  T319] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.580843][  T319] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.587980][  T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.588903][  T444] usb 6-1: Using ep0 maxpacket: 32
[   87.596781][  T319] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.607513][  T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.613804][  T444] usb 6-1: config index 0 descriptor too short (expected 76, got 36)
[   87.626995][  T444] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[   87.648257][  T444] usb 6-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config
[   87.669895][  T444] usb 6-1: config 0 has no interface number 0
[   87.676063][  T444] usb 6-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   87.690300][ T1890] veth0_vlan: entered promiscuous mode
[   87.703270][  T444] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[   87.713454][ T1890] veth1_macvtap: entered promiscuous mode
[   87.715153][  T444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.728544][  T444] usb 6-1: Product: syz
[   87.733051][  T444] usb 6-1: Manufacturer: syz
[   87.737783][  T444] usb 6-1: SerialNumber: syz
[   87.745611][  T444] usb 6-1: config 0 descriptor??
[   87.752624][  T444] plusb 6-1:0.231: probe with driver plusb failed with error -22
[   87.787108][ T1918] netlink: 'syz.6.434': attribute type 39 has an invalid length.
[   87.795428][   T36] kauditd_printk_skb: 106 callbacks suppressed
[   87.795445][   T36] audit: type=1400 audit(1790522244.760:509): avc:  denied  { accept } for  pid=1917 comm="syz.6.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   87.822719][   T36] audit: type=1400 audit(1790522244.760:510): avc:  denied  { bind } for  pid=1917 comm="syz.6.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   87.859526][ T1918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1918 comm=syz.6.434
[   87.888704][ T1921] SELinux:  Context � is not valid (left unmapped).
[   87.948868][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   87.954068][  T438] usb 6-1: USB disconnect, device number 14
[   88.085251][ T1936] FAULT_INJECTION: forcing a failure.
[   88.085251][ T1936] name failslab, interval 1, probability 100, space 0, times 0
[   88.098294][ T1936] CPU: 1 UID: 0 PID: 1936 Comm: syz.6.451 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[   88.098331][ T1936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   88.098346][ T1936] Call Trace:
[   88.098353][ T1936]  <TASK>
[   88.098363][ T1936]  __dump_stack+0x21/0x30
[   88.098403][ T1936]  dump_stack_lvl+0x140/0x1c0
[   88.098435][ T1936]  ? __cfi_dump_stack_lvl+0x10/0x10
[   88.098474][ T1936]  dump_stack+0x19/0x20
[   88.098497][ T1936]  should_fail_ex+0x3c2/0x510
[   88.098518][ T1936]  should_failslab+0xac/0x100
[   88.098540][ T1936]  __kmalloc_cache_noprof+0x41/0x470
[   88.098558][ T1936]  ? create_filter_start+0x175/0x380
[   88.098589][ T1936]  ? kstrdup+0x7b/0x130
[   88.098603][ T1936]  create_filter_start+0x175/0x380
[   88.098625][ T1936]  ? strim+0xf0/0x1d0
[   88.098641][ T1936]  apply_subsystem_event_filter+0x1c2/0x1190
[   88.098665][ T1936]  ? avc_policy_seqno+0xd/0x30
[   88.098687][ T1936]  ? __check_object_size+0xe6/0x870
[   88.098704][ T1936]  ? __kasan_kmalloc+0x96/0xb0
[   88.098726][ T1936]  ? __cfi_apply_subsystem_event_filter+0x10/0x10
[   88.098782][ T1936]  ? should_fail+0xf/0x20
[   88.098810][ T1936]  ? __kasan_check_write+0x18/0x20
[   88.098833][ T1936]  ? _copy_from_user+0x87/0xa0
[   88.098868][ T1936]  ? memdup_user_nul+0xad/0x1a0
[   88.098888][ T1936]  ? subsystem_filter_write+0x57/0xf0
[   88.098913][ T1936]  subsystem_filter_write+0x99/0xf0
[   88.098939][ T1936]  ? __cfi_subsystem_filter_write+0x10/0x10
[   88.098962][ T1936]  vfs_write+0x3c1/0xfd0
[   88.098985][ T1936]  ? __cfi_vfs_write+0x10/0x10
[   88.099006][ T1936]  ? __kasan_check_write+0x18/0x20
[   88.099028][ T1936]  ? mutex_lock+0x97/0x1d0
[   88.099057][ T1936]  ? __cfi_mutex_lock+0x10/0x10
[   88.099086][ T1936]  ksys_write+0x145/0x260
[   88.099108][ T1936]  ? __cfi_ksys_write+0x10/0x10
[   88.099130][ T1936]  ? __kasan_check_write+0x18/0x20
[   88.099152][ T1936]  ? fpregs_restore_userregs+0x11c/0x260
[   88.099182][ T1936]  __x64_sys_write+0x7f/0x90
[   88.099205][ T1936]  x64_sys_call+0x271c/0x2ee0
[   88.099225][ T1936]  do_syscall_64+0x57/0xf0
[   88.099244][ T1936]  ? clear_bhb_loop+0x50/0xa0
[   88.099271][ T1936]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   88.099297][ T1936] RIP: 0033:0x7fce5a79e159
[   88.099317][ T1936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.099335][ T1936] RSP: 002b:00007fce5b6c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   88.099358][ T1936] RAX: ffffffffffffffda RBX: 00007fce5aa25fa0 RCX: 00007fce5a79e159
[   88.099374][ T1936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   88.099387][ T1936] RBP: 00007fce5a83506b R08: 0000000000000000 R09: 0000000000000000
[   88.099400][ T1936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.099412][ T1936] R13: 00007fce5aa26038 R14: 00007fce5aa25fa0 R15: 00007ffd38d0ed58
[   88.099430][ T1936]  </TASK>
[   88.110928][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.398611][   T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   88.408073][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.417103][   T10] usb 5-1: config 0 descriptor??
[   88.470420][   T36] audit: type=1400 audit(1790522245.440:511): avc:  denied  { create } for  pid=1939 comm="syz.6.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   88.498831][   T36] audit: type=1400 audit(1790522245.440:512): avc:  denied  { write } for  pid=1939 comm="syz.6.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   88.554051][   T36] audit: type=1400 audit(1790522245.520:513): avc:  denied  { setattr } for  pid=1947 comm="syz.6.455" name="NETLINK" dev="sockfs" ino=18248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   88.625007][   T10] usbhid 5-1:0.0: can't add hid device: -71
[   88.631515][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   88.641554][   T10] usb 5-1: USB disconnect, device number 13
[   88.744192][ T1959] 9pnet_fd: p9_fd_create_unix (1959): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   88.747860][   T36] audit: type=1400 audit(1790522245.710:514): avc:  denied  { lock } for  pid=1958 comm="syz.5.458" path="socket:[18407]" dev="sockfs" ino=18407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   88.883801][   T36] audit: type=1400 audit(1790522245.850:515): avc:  denied  { read } for  pid=1963 comm="syz.5.460" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   88.907399][   T36] audit: type=1400 audit(1790522245.880:516): avc:  denied  { open } for  pid=1963 comm="syz.5.460" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   88.938997][   T66] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   88.970731][ T1968] kvm_intel: kvm [1967]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[   88.978491][ T1962] ./dev/sda1: Can't lookup blockdev
[   89.088855][   T66] usb 7-1: Using ep0 maxpacket: 16
[   89.098081][   T66] usb 7-1: config 9 has an invalid interface number: 105 but max is 0
[   89.108022][   T66] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[   89.118615][   T66] usb 7-1: config 9 has no interface number 0
[   89.125777][   T66] usb 7-1: config 9 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   89.139029][   T66] usb 7-1: config 9 interface 105 has no altsetting 0
[   89.147596][   T66] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   89.148930][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   89.157185][   T66] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   89.173275][   T66] usb 7-1: Product: syz
[   89.177506][   T66] usb 7-1: Manufacturer: syz
[   89.182253][   T66] usb 7-1: SerialNumber: syz
[   89.295530][ T1984] netlink: 'syz.5.465': attribute type 58 has an invalid length.
[   89.320235][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.331220][   T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   89.340310][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.349174][   T10] usb 5-1: config 0 descriptor??
[   89.429564][   T66] usb 7-1: USB disconnect, device number 2
[   89.528888][  T311] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   89.658864][  T311] usb 6-1: device descriptor read/64, error -71
[   89.898970][  T311] usb 6-1: device descriptor read/64, error -71
[   90.089413][ T2002] netlink: 176 bytes leftover after parsing attributes in process `syz.0.472'.
[   90.089418][   T36] audit: type=1400 audit(1790522247.060:517): avc:  denied  { nlmsg_write } for  pid=2001 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   90.138865][  T311] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   90.159310][   T10] aiptek 5-1:0.0: Aiptek using 400 ms programming speed
[   90.168860][   T10] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19
[   90.268872][  T311] usb 6-1: device descriptor read/64, error -71
[   90.279025][  T322] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   90.408889][  T322] usb 7-1: device descriptor read/64, error -71
[   90.462673][  T444] usb 5-1: USB disconnect, device number 14
[   90.468698][    C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[   90.508885][  T311] usb 6-1: device descriptor read/64, error -71
[   90.618976][  T311] usb usb6-port1: attempt power cycle
[   90.648838][  T322] usb 7-1: device descriptor read/64, error -71
[   90.888881][  T322] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   90.968824][  T311] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[   90.991753][ T2016] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   91.000398][   T36] audit: type=1326 audit(1790522247.970:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2015 comm="syz.4.477" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ee459e159 code=0x0
[   91.026254][  T311] usb 6-1: device descriptor read/8, error -71
[   91.032580][  T322] usb 7-1: device descriptor read/64, error -71
[   91.169981][  T311] usb 6-1: device descriptor read/8, error -71
[   91.278841][  T322] usb 7-1: device descriptor read/64, error -71
[   91.388943][  T322] usb usb7-port1: attempt power cycle
[   91.408814][  T311] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[   91.429988][  T311] usb 6-1: device descriptor read/8, error -71
[   91.560013][  T311] usb 6-1: device descriptor read/8, error -71
[   91.669061][  T311] usb usb6-port1: unable to enumerate USB device
[   91.728830][  T322] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[   91.750028][  T322] usb 7-1: device descriptor read/8, error -71
[   91.889958][  T322] usb 7-1: device descriptor read/8, error -71
[   92.088837][  T438] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   92.128825][  T322] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[   92.149955][  T322] usb 7-1: device descriptor read/8, error -71
[   92.239915][  T438] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.251698][  T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   92.262690][  T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   92.273954][  T438] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   92.280849][  T322] usb 7-1: device descriptor read/8, error -71
[   92.283023][  T438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.298160][  T438] usb 5-1: config 0 descriptor??
[   92.310536][ T2022] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   92.398936][  T322] usb usb7-port1: unable to enumerate USB device
[   92.708901][   T66] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[   92.720670][ T2022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.729423][ T2022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.739801][  T438] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[   92.746995][  T438] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[   92.754418][  T438] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[   92.762031][  T438] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[   92.769158][  T438] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[   92.776187][  T438] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[   92.783452][  T438] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[   92.791182][  T438] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[   92.838838][   T66] usb 6-1: device descriptor read/64, error -71
[   92.939225][  T438] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00
[   93.067460][ T2041] usb usb8: usbfs: process 2041 (syz.6.487) did not claim interface 0 before use
[   93.078853][   T66] usb 6-1: device descriptor read/64, error -71
[   93.300684][ T2046] netlink: 'syz.0.488': attribute type 9 has an invalid length.
[   93.318819][   T66] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[   93.458854][   T66] usb 6-1: device descriptor read/64, error -71
[   93.543930][  T438] cp2112 0003:10C4:EA90.000E: error reading lock byte: -71
[   93.554986][  T438] usb 5-1: USB disconnect, device number 15
[   93.708913][   T66] usb 6-1: device descriptor read/64, error -71
[   93.818969][   T66] usb usb6-port1: attempt power cycle
[   94.070563][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   94.070584][   T36] audit: type=1400 audit(1790522251.040:521): avc:  denied  { ioctl } for  pid=2058 comm="syz.4.492" path="socket:[18755]" dev="sockfs" ino=18755 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   94.101341][   T36] audit: type=1400 audit(1790522251.040:522): avc:  denied  { getopt } for  pid=2058 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   94.158873][   T66] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[   94.179952][   T66] usb 6-1: device descriptor read/8, error -71
[   94.310073][   T66] usb 6-1: device descriptor read/8, error -71
[   94.428300][   T36] audit: type=1400 audit(1790522251.390:523): avc:  denied  { ioctl } for  pid=2060 comm="syz.0.493" path="socket:[19573]" dev="sockfs" ino=19573 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.548832][   T66] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[   94.570192][   T66] usb 6-1: device descriptor read/8, error -71
[   94.699972][   T66] usb 6-1: device descriptor read/8, error -71
[   94.808953][   T66] usb usb6-port1: unable to enumerate USB device
[   94.878840][  T311] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   95.028830][  T311] usb 5-1: Using ep0 maxpacket: 32
[   95.035374][  T311] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[   95.043884][  T311] usb 5-1: config 0 has no interface number 0
[   95.050060][  T311] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   95.060201][  T311] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 155
[   95.071810][  T311] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=8e.2d
[   95.081123][  T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.089209][  T311] usb 5-1: Product: syz
[   95.093405][  T311] usb 5-1: Manufacturer: syz
[   95.098014][  T311] usb 5-1: SerialNumber: syz
[   95.103499][  T311] usb 5-1: config 0 descriptor??
[   95.108889][ T2063] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   95.116254][ T2063] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   95.324440][   T31] usb 5-1: USB disconnect, device number 16
[   95.738835][   T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[   95.855520][ T2074] netlink: 'syz.4.498': attribute type 4 has an invalid length.
[   95.863363][ T2074] netlink: 17 bytes leftover after parsing attributes in process `syz.4.498'.
[   95.875488][   T36] audit: type=1400 audit(1790522252.840:524): avc:  denied  { create } for  pid=2073 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   95.895422][   T31] usb 6-1: Using ep0 maxpacket: 32
[   95.896611][   T36] audit: type=1326 audit(1790522252.840:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2073 comm="syz.4.498" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ee459e159 code=0x0
[   95.903179][   T31] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[   95.933512][   T31] usb 6-1: config 0 has no interface number 0
[   95.941647][   T31] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   95.950767][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.958836][   T31] usb 6-1: Product: syz
[   95.963023][   T31] usb 6-1: Manufacturer: syz
[   95.967653][   T31] usb 6-1: SerialNumber: syz
[   95.973079][   T31] usb 6-1: config 0 descriptor??
[   95.979306][   T31] smsc95xx v2.0.0
[   96.158816][  T311] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[   96.321439][  T311] usb 5-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config
[   96.331824][  T311] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   96.341415][  T311] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.350526][  T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.359578][  T311] usb 5-1: config 0 descriptor??
[   96.381492][   T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   96.392441][   T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   96.602825][   T31] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[   96.613753][   T31] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61
[   96.811164][  T444] usb 6-1: USB disconnect, device number 23
[   97.156446][ T2091] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   97.365803][   T36] audit: type=1400 audit(1790522254.330:526): avc:  denied  { remount } for  pid=2095 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   97.386663][ T2096] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[   97.415145][ T2098] sit0: entered promiscuous mode
[   97.422231][ T2098] netlink: 'syz.5.505': attribute type 1 has an invalid length.
[   97.430065][ T2098] netlink: 'syz.5.505': attribute type 3 has an invalid length.
[   97.439435][   T36] audit: type=1400 audit(1790522254.410:527): avc:  denied  { write } for  pid=2097 comm="syz.5.505" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   97.466322][ T2098] device-mapper: ioctl: only supply one of name or uuid, cmd(9)
[   98.067086][   T36] audit: type=1400 audit(1790522255.030:528): avc:  denied  { read } for  pid=1415 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   98.114767][   T36] audit: type=1400 audit(1790522255.030:529): avc:  denied  { open } for  pid=1415 comm="syz-executor" path="/29/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   98.149194][   T36] audit: type=1400 audit(1790522255.030:530): avc:  denied  { validate_trans } for  pid=2125 comm="syz.6.515" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   98.230055][ T2129] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.230252][ T2129] rust_binder: 2127:2129 got transaction to invalid handle 1
[   98.253759][ T2129] rust_binder: 2127:2129 transaction call to 0:0 failed ENOENT, code 0 size 120-24
[   98.277918][  T322] rust_binder: 2127: undelivered TRANSACTION_ERROR: 29201
[   98.728835][ T2141] FAULT_INJECTION: forcing a failure.
[   98.728835][ T2141] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   98.758844][ T2141] CPU: 1 UID: 0 PID: 2141 Comm: syz.6.520 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[   98.758884][ T2141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.758908][ T2141] Call Trace:
[   98.758915][ T2141]  <TASK>
[   98.758925][ T2141]  __dump_stack+0x21/0x30
[   98.758966][ T2141]  dump_stack_lvl+0x140/0x1c0
[   98.759000][ T2141]  ? __cfi_dump_stack_lvl+0x10/0x10
[   98.759034][ T2141]  ? get_sigframe+0x60d/0x830
[   98.759057][ T2141]  dump_stack+0x19/0x20
[   98.759088][ T2141]  should_fail_ex+0x3c2/0x510
[   98.759119][ T2141]  should_fail+0xf/0x20
[   98.759146][ T2141]  should_fail_usercopy+0x1e/0x30
[   98.759177][ T2141]  _copy_to_user+0x24/0xa0
[   98.759211][ T2141]  copy_siginfo_to_user+0x26/0xb0
[   98.759247][ T2141]  x64_setup_rt_frame+0x774/0xc20
[   98.759274][ T2141]  ? __cfi_x64_setup_rt_frame+0x10/0x10
[   98.759297][ T2141]  arch_do_signal_or_restart+0x328/0x700
[   98.759321][ T2141]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   98.759347][ T2141]  ? __kasan_check_read+0x15/0x20
[   98.759374][ T2141]  syscall_exit_to_user_mode+0x57/0xb0
[   98.759410][ T2141]  do_syscall_64+0x63/0xf0
[   98.759433][ T2141]  ? clear_bhb_loop+0x50/0xa0
[   98.759481][ T2141]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   98.759510][ T2141] RIP: 0033:0x7fce5a79e157
[   98.759530][ T2141] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[   98.759550][ T2141] RSP: 002b:00007fce5b6c1028 EFLAGS: 00000246
[   98.759572][ T2141] RAX: 0000000000000113 RBX: 00007fce5aa25fa0 RCX: 00007fce5a79e159
[   98.759589][ T2141] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004
[   98.759603][ T2141] RBP: 00007fce5a83506b R08: 0000000000039000 R09: 0000000000000000
[   98.759619][ T2141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.759633][ T2141] R13: 00007fce5aa26038 R14: 00007fce5aa25fa0 R15: 00007ffd38d0ed58
[   98.759655][ T2141]  </TASK>
[   98.969622][ T2145] 9pnet_fd: Insufficient options for proto=fd
[   99.003011][ T2147] FAULT_INJECTION: forcing a failure.
[   99.003011][ T2147] name failslab, interval 1, probability 100, space 0, times 0
[   99.015916][ T2147] CPU: 0 UID: 0 PID: 2147 Comm: syz.6.523 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[   99.015959][ T2147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   99.015976][ T2147] Call Trace:
[   99.015986][ T2147]  <TASK>
[   99.015995][ T2147]  __dump_stack+0x21/0x30
[   99.016045][ T2147]  dump_stack_lvl+0x140/0x1c0
[   99.016082][ T2147]  ? __cfi_dump_stack_lvl+0x10/0x10
[   99.016118][ T2147]  ? ref_tracker_alloc+0x356/0x5b0
[   99.016154][ T2147]  ? __cfi_ref_tracker_alloc+0x10/0x10
[   99.016188][ T2147]  ? __netlink_kernel_create+0x173/0x8a0
[   99.016225][ T2147]  ? genl_pernet_init+0xb8/0x170
[   99.016252][ T2147]  dump_stack+0x19/0x20
[   99.016288][ T2147]  should_fail_ex+0x3c2/0x510
[   99.016320][ T2147]  ? __netlink_kernel_create+0x2bb/0x8a0
[   99.016356][ T2147]  should_failslab+0xac/0x100
[   99.016389][ T2147]  __kmalloc_noprof+0x69/0x510
[   99.016416][ T2147]  ? sock_init_data_uid+0x5da/0x870
[   99.016443][ T2147]  ? __netlink_kernel_create+0x2bb/0x8a0
[   99.016488][ T2147]  __netlink_kernel_create+0x2bb/0x8a0
[   99.016524][ T2147]  ? __netlink_kernel_create+0x6ff/0x8a0
[   99.016560][ T2147]  ? __cfi___netlink_kernel_create+0x10/0x10
[   99.016597][ T2147]  ? __asan_memcpy+0x5a/0x80
[   99.016624][ T2147]  genl_pernet_init+0xb8/0x170
[   99.016648][ T2147]  ? __cfi_genl_pernet_init+0x10/0x10
[   99.016673][ T2147]  ? rtnetlink_net_init+0xbf/0x140
[   99.016700][ T2147]  ? __cfi_genl_rcv+0x10/0x10
[   99.016724][ T2147]  ? __cfi_genl_bind+0x10/0x10
[   99.016749][ T2147]  ? __cfi_genl_unbind+0x10/0x10
[   99.016773][ T2147]  ? __cfi_genl_release+0x10/0x10
[   99.016798][ T2147]  ? __cfi_rtnetlink_rcv+0x10/0x10
[   99.016821][ T2147]  ? __cfi_rtnetlink_bind+0x10/0x10
[   99.016846][ T2147]  ? __kasan_check_write+0x18/0x20
[   99.016869][ T2147]  ? __mutex_init+0xa6/0x1a0
[   99.016903][ T2147]  ops_init+0x2ff/0x5d0
[   99.016925][ T2147]  ? __kasan_check_write+0x18/0x20
[   99.016949][ T2147]  ? rwsem_read_trylock+0x275/0x5a0
[   99.016985][ T2147]  setup_net+0x227/0x9b0
[   99.017007][ T2147]  ? copy_net_ns+0xa20/0xa20
[   99.017031][ T2147]  ? down_read_killable+0x7f/0x100
[   99.017067][ T2147]  ? __cfi_down_read_killable+0x10/0x10
[   99.017104][ T2147]  copy_net_ns+0x4fc/0xa20
[   99.017127][ T2147]  create_new_namespaces+0x390/0x6f0
[   99.017166][ T2147]  unshare_nsproxy_namespaces+0x124/0x180
[   99.017204][ T2147]  ksys_unshare+0x4f9/0x920
[   99.017240][ T2147]  ? __cfi_ksys_unshare+0x10/0x10
[   99.017275][ T2147]  ? __kasan_check_write+0x18/0x20
[   99.017302][ T2147]  __x64_sys_unshare+0x3c/0x50
[   99.017337][ T2147]  x64_sys_call+0x2998/0x2ee0
[   99.017363][ T2147]  do_syscall_64+0x57/0xf0
[   99.017388][ T2147]  ? clear_bhb_loop+0x50/0xa0
[   99.017422][ T2147]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   99.017454][ T2147] RIP: 0033:0x7fce5a79e159
[   99.017477][ T2147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.017512][ T2147] RSP: 002b:00007fce5b6c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   99.017540][ T2147] RAX: ffffffffffffffda RBX: 00007fce5aa25fa0 RCX: 00007fce5a79e159
[   99.017558][ T2147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   99.017574][ T2147] RBP: 00007fce5a83506b R08: 0000000000000000 R09: 0000000000000000
[   99.017590][ T2147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.017606][ T2147] R13: 00007fce5aa26038 R14: 00007fce5aa25fa0 R15: 00007ffd38d0ed58
[   99.017628][ T2147]  </TASK>
[   99.367208][  T311] usb 5-1: string descriptor 0 read error: -71
[   99.380545][  T311] usb 5-1: USB disconnect, device number 17
[   99.488242][ T2154] overlayfs: failed to resolve './bus': -2
[   99.494206][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   99.494227][   T36] audit: type=1400 audit(1790522256.450:533): avc:  denied  { mounton } for  pid=2153 comm="syz.6.526" path="/" dev="ramfs" ino=20088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   99.526143][ T2158] fuse: Unknown parameter './file0'
[   99.540446][ T2164] overlayfs: failed to resolve './bus': -2
[   99.939181][ T2176] netlink: 108 bytes leftover after parsing attributes in process `syz.4.528'.
[   99.949627][   T36] audit: type=1400 audit(1790522256.920:534): avc:  denied  { setopt } for  pid=2175 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   99.952249][ T2176] netlink: 108 bytes leftover after parsing attributes in process `syz.4.528'.
[  100.096179][ T2193] netlink: 'syz.0.530': attribute type 12 has an invalid length.
[  100.120948][ T2195] netlink: 'syz.0.531': attribute type 4 has an invalid length.
[  100.129018][ T2195] netlink: 'syz.0.531': attribute type 5 has an invalid length.
[  100.136799][ T2195] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.531'.
[  100.286026][   T36] audit: type=1400 audit(1790522257.250:535): avc:  denied  { unmount } for  pid=1890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  100.448819][   T66] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  100.611009][   T66] usb 5-1: no configurations
[  100.629090][   T66] usb 5-1: can't read configurations, error -22
[  100.693100][ T2228] overlayfs: failed to clone upperpath
[  100.701764][ T2228] overlayfs: failed to clone upperpath
[  100.758842][   T66] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  100.820210][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.834796][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.840523][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.845987][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.851498][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.856950][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.862589][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.868073][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.873597][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.879042][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.884518][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.890002][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.895495][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.900950][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.906440][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.911912][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.917397][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.922924][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.928417][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.929532][   T66] usb 5-1: no configurations
[  100.934206][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.939195][   T66] usb 5-1: can't read configurations, error -22
[  100.944227][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.955500][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.961974][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.967556][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.969400][   T66] usb usb5-port1: attempt power cycle
[  100.973512][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.983786][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.989281][ T2242] ./dev/sda1: Can't lookup blockdev
[  100.994826][ T2242] ./dev/sda1: Can't lookup blockdev
[  101.000283][ T2242] ./dev/sda1: Can't lookup blockdev
[  101.005847][ T2242] ./dev/sda1: Can't lookup blockdev
[  101.011310][ T2242] ./dev/sda1: Can't lookup blockdev
[  101.016867][ T2242] ./dev/sda1: Can't lookup blockdev
[  101.022364][ T2242] ./dev/sda1: Can't lookup blockdev
[  101.070305][   T36] audit: type=1400 audit(1790522258.040:536): avc:  denied  { connect } for  pid=2249 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  101.151860][ T2258] process '/newroot/191/file0' started with executable stack
[  101.308820][   T66] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  101.339574][   T66] usb 5-1: no configurations
[  101.344323][   T66] usb 5-1: can't read configurations, error -22
[  101.488820][   T66] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  101.509676][   T66] usb 5-1: no configurations
[  101.514446][   T66] usb 5-1: can't read configurations, error -22
[  101.522214][   T66] usb usb5-port1: unable to enumerate USB device
[  102.420507][ T2290] rust_binder: Read failure Err(EAGAIN) in pid:113
[  102.658822][  T311] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  102.849963][  T311] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  102.868829][  T311] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[  102.889093][  T311] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  102.902442][  T311] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  102.914251][ T2324] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  102.918984][  T311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.924210][ T2324] overlayfs: failed to clone lowerpath
[  102.937654][  T311] usb 7-1: Product: syz
[  102.942079][  T311] usb 7-1: Manufacturer: syz
[  102.946747][  T311] usb 7-1: SerialNumber: syz
[  102.949546][ T2324] overlayfs: failed to resolve '/{Fn�Vx': -2
[  102.969647][ T2290] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  102.976984][ T2290] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  102.986933][  T311] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  102.998520][  T311] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  103.009630][  T311] usbserial_generic 7-1:1.0: generic converter detected
[  103.019248][  T311] usb 7-1: generic converter now attached to ttyUSB0
[  103.259359][  T322] usb 7-1: USB disconnect, device number 7
[  103.266473][  T322] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  103.276503][  T322] usbserial_generic 7-1:1.0: device disconnected
[  103.356807][   T36] audit: type=1400 audit(1790522260.320:537): avc:  denied  { write } for  pid=2332 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.800916][   T36] audit: type=1400 audit(1790522260.770:538): avc:  denied  { read write } for  pid=2346 comm="syz.4.569" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  103.839751][ T2349] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  103.840043][  T438] rust_binder: 2348: undelivered TRANSACTION_ERROR: 29189
[  103.865379][   T36] audit: type=1400 audit(1790522260.770:539): avc:  denied  { open } for  pid=2346 comm="syz.4.569" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  103.909539][   T36] audit: type=1400 audit(1790522260.770:540): avc:  denied  { ioctl } for  pid=2346 comm="syz.4.569" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  104.038855][  T322] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  104.165427][ T2361] ./dev/sda1: Can't lookup blockdev
[  104.211601][  T322] usb 5-1: no configurations
[  104.216315][  T322] usb 5-1: can't read configurations, error -22
[  104.368837][  T322] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  104.559234][  T322] usb 5-1: no configurations
[  104.563973][  T322] usb 5-1: can't read configurations, error -22
[  104.580676][  T322] usb usb5-port1: attempt power cycle
[  104.712945][ T2379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[  104.928841][  T322] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  104.959959][  T322] usb 5-1: no configurations
[  104.964638][  T322] usb 5-1: can't read configurations, error -22
[  105.098833][  T322] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  105.129554][  T322] usb 5-1: no configurations
[  105.134229][  T322] usb 5-1: can't read configurations, error -22
[  105.148935][  T322] usb usb5-port1: unable to enumerate USB device
[  105.312365][ T2383] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  105.325772][   T36] audit: type=1400 audit(1790522262.290:541): avc:  denied  { mounton } for  pid=2382 comm="syz.6.576" path="/37/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  105.357456][ T2383] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  105.679314][  T438] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  105.841098][  T438] usb 7-1: No LPM exit latency info found, disabling LPM.
[  105.849588][  T438] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  105.860858][  T438] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  105.871796][  T438] usb 7-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  105.884987][  T438] usb 7-1: config 1 interface 0 has no altsetting 0
[  105.896682][  T438] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.40
[  105.905970][  T438] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.914063][  T438] usb 7-1: Product: Ў
[  105.918297][  T438] usb 7-1: Manufacturer: и
[  105.923461][  T438] usb 7-1: SerialNumber: 䖌퀙元㮄ቻ텉ꔇ비㫧ߒ佒ኹꄎ韥췃₼ᇬ籌鳊눉㱩핆냭଩‒튀艬쑚坈蹗幻轧阪咟ڎ颬傽栊縍馕ʡ矲ጨ櫤靖에밄߅콧뢺满㲳욥乯㆐퐤镺̉嗋姲쵫%榨썣ᱳ䟕㔌䡳ᕹ䈬㧺逦哼莣ꦚ퉠荩㙊ﱛぉ⣸錐㶡旰둊甬齼剦ᲆߋᤇ韕驣羷
[  105.962607][ T2391] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  105.970103][ T2391] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  106.593942][  T438] usbhid 7-1:1.0: can't add hid device: -71
[  106.600048][  T438] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  106.621197][  T438] usb 7-1: USB disconnect, device number 8
[  107.348951][  T438] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  107.541043][  T438] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  107.552920][  T438] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.567437][ T2426] netlink: 'syz.4.588': attribute type 16 has an invalid length.
[  107.573271][  T438] usb 7-1: Product: syz
[  107.579062][ T2426] netlink: 'syz.4.588': attribute type 2 has an invalid length.
[  107.585850][  T438] usb 7-1: Manufacturer: syz
[  107.592810][  T438] usb 7-1: SerialNumber: syz
[  107.597502][ T2426] netlink: 64110 bytes leftover after parsing attributes in process `syz.4.588'.
[  107.748775][   T36] audit: type=1400 audit(1790522264.710:542): avc:  denied  { write } for  pid=2427 comm="syz.4.589" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  107.803699][ T2414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.813281][ T2414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.822449][ T2414] netlink: 24 bytes leftover after parsing attributes in process `syz.6.585'.
[  107.839229][ T2414] netlink: 96 bytes leftover after parsing attributes in process `syz.6.585'.
[  108.009692][  T444] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  108.045270][  T438] rtl8150 7-1:1.0: couldn't reset the device
[  108.051484][  T438] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[  108.061762][  T438] usb 7-1: USB disconnect, device number 9
[  108.171418][  T444] usb 5-1: unable to get BOS descriptor or descriptor too short
[  108.179644][  T444] usb 5-1: not running at top speed; connect to a high speed hub
[  108.188303][  T444] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  108.209962][  T444] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  108.219120][  T444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.227351][  T444] usb 5-1: Product: syz
[  108.231659][  T444] usb 5-1: Manufacturer: syz
[  108.236356][  T444] usb 5-1: SerialNumber: syz
[  108.458506][  T444] usb 5-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  108.467556][  T444] usb 5-1: found format II with max.bitrate = 512, frame size=4095
[  108.475605][  T444] usb 5-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  108.484260][  T444] usb 5-1: found format II with max.bitrate = 512, frame size=4095
[  108.493498][  T444] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  108.518031][  T444] usb 5-1: USB disconnect, device number 26
[  109.019053][ T2447] input: syz1 as /devices/virtual/input/input21
[  109.338798][  T321] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  109.478800][  T321] usb 5-1: device descriptor read/64, error -71
[  109.728805][  T321] usb 5-1: device descriptor read/64, error -71
[  109.744868][ T2461] netlink: 'syz.6.600': attribute type 150 has an invalid length.
[  109.753250][ T2461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.600'.
[  109.968882][  T321] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  110.038846][  T438] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  110.098902][  T321] usb 5-1: device descriptor read/64, error -71
[  110.168841][  T438] usb 7-1: device descriptor read/64, error -71
[  110.338861][  T321] usb 5-1: device descriptor read/64, error -71
[  110.376125][   T36] audit: type=1400 audit(1790522267.340:543): avc:  denied  { mount } for  pid=2467 comm="syz.0.604" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  110.409056][  T438] usb 7-1: device descriptor read/64, error -71
[  110.448980][  T321] usb usb5-port1: attempt power cycle
[  110.648847][  T438] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  110.778814][  T438] usb 7-1: device descriptor read/64, error -71
[  110.788958][  T321] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  110.810061][  T321] usb 5-1: device descriptor read/8, error -71
[  110.940013][  T321] usb 5-1: device descriptor read/8, error -71
[  111.029497][  T438] usb 7-1: device descriptor read/64, error -71
[  111.149029][  T438] usb usb7-port1: attempt power cycle
[  111.188852][  T321] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  111.220008][  T321] usb 5-1: device descriptor read/8, error -71
[  111.359719][  T321] usb 5-1: device descriptor read/8, error -71
[  111.468960][  T321] usb usb5-port1: unable to enumerate USB device
[  111.488839][  T438] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  111.510013][  T438] usb 7-1: device descriptor read/8, error -71
[  111.639846][  T438] usb 7-1: device descriptor read/8, error -71
[  111.888807][  T438] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  111.930194][  T438] usb 7-1: device descriptor read/8, error -71
[  111.949270][   T36] audit: type=1400 audit(1790522268.920:544): avc:  denied  { listen } for  pid=2486 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  112.069864][  T438] usb 7-1: device descriptor read/8, error -71
[  112.183801][  T438] usb usb7-port1: unable to enumerate USB device
[  112.762631][   T36] audit: type=1400 audit(1790522269.730:545): avc:  denied  { getopt } for  pid=2503 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  113.389341][   T36] audit: type=1400 audit(1790522270.360:546): avc:  denied  { write } for  pid=2514 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  113.419394][   T36] audit: type=1400 audit(1790522270.380:547): avc:  denied  { accept } for  pid=2514 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  113.545024][   T36] audit: type=1400 audit(1790522270.510:548): avc:  denied  { associate } for  pid=2520 comm="syz.0.622" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  113.615081][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.627688][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.640438][ T2519] bridge_slave_0: entered allmulticast mode
[  113.653086][ T2519] bridge_slave_0: entered promiscuous mode
[  113.666679][ T2363] bridge_slave_1: left allmulticast mode
[  113.674232][ T2363] bridge_slave_1: left promiscuous mode
[  113.685612][ T2363] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.695798][ T2363] bridge_slave_0: left allmulticast mode
[  113.701835][ T2363] bridge_slave_0: left promiscuous mode
[  113.707609][ T2363] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.781261][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.788695][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.796140][ T2519] bridge_slave_1: entered allmulticast mode
[  113.803058][ T2519] bridge_slave_1: entered promiscuous mode
[  113.834170][ T2363] veth1_macvtap: left promiscuous mode
[  113.839870][ T2363] veth0_vlan: left promiscuous mode
[  113.958925][    T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  113.981184][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.988357][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.995741][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.002830][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.033531][ T2318] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.041605][ T2318] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.052848][ T2292] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.060018][ T2292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.075468][ T2292] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.082634][ T2292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.116266][ T2519] veth0_vlan: entered promiscuous mode
[  114.124225][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.135960][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.152655][    T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  114.163424][ T2519] veth1_macvtap: entered promiscuous mode
[  114.172489][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.225815][   T36] audit: type=1400 audit(1790522271.190:549): avc:  denied  { create } for  pid=2526 comm="syz.7.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  114.488821][  T321] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  114.650500][  T321] usb 8-1: unable to read config index 0 descriptor/start: -61
[  114.659121][  T321] usb 8-1: can't read configurations, error -61
[  114.666124][    T9] input: HID 04d8:c002 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:04D8:C002.000F/input/input22
[  114.689204][    T9] hid-picolcd 0003:04D8:C002.000F: No report with id 0x94 found
[  114.696932][    T9] hid-picolcd 0003:04D8:C002.000F: failed to configure display
[  114.797497][   T66] usb 7-1: USB disconnect, device number 14
[  114.804005][  T321] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  114.960895][  T321] usb 8-1: unable to read config index 0 descriptor/start: -61
[  114.969066][  T321] usb 8-1: can't read configurations, error -61
[  114.975626][  T321] usb usb8-port1: attempt power cycle
[  115.318856][  T321] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  115.351464][  T321] usb 8-1: unable to read config index 0 descriptor/start: -61
[  115.361468][  T321] usb 8-1: can't read configurations, error -61
[  115.406884][   T36] audit: type=1326 audit(1790522272.370:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.0.627" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f856d19e159 code=0x0
[  115.498823][  T321] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  115.530666][  T321] usb 8-1: unable to read config index 0 descriptor/start: -61
[  115.538502][  T321] usb 8-1: can't read configurations, error -61
[  115.545131][  T321] usb usb8-port1: unable to enumerate USB device
[  115.588845][   T66] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  115.718815][   T66] usb 7-1: device descriptor read/64, error -71
[  115.958858][   T66] usb 7-1: device descriptor read/64, error -71
[  116.198884][   T66] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  116.298717][ T2549] veth1: entered allmulticast mode
[  116.305598][ T2548] veth1: left allmulticast mode
[  116.328908][   T66] usb 7-1: device descriptor read/64, error -71
[  116.568868][   T66] usb 7-1: device descriptor read/64, error -71
[  116.679020][   T66] usb usb7-port1: attempt power cycle
[  116.768893][    T9] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  116.840244][ T2557] batadv_slave_1: entered promiscuous mode
[  116.846708][ T2557] batadv_slave_1: left promiscuous mode
[  116.920046][    T9] usb 5-1: unable to get BOS descriptor set
[  116.926477][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  116.935245][    T9] usb 5-1: config 5 has an invalid interface number: 114 but max is 2
[  116.943533][    T9] usb 5-1: config 5 has an invalid interface descriptor of length 5, skipping
[  116.952446][    T9] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 3
[  116.961614][    T9] usb 5-1: config 5 has no interface number 0
[  116.969362][    T9] usb 5-1: Dual-Role OTG device on HNP port
[  116.975502][    T9] usb 5-1: New USB device found, idVendor=07d1, idProduct=3e02, bcdDevice=f1.49
[  116.984657][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.992736][    T9] usb 5-1: Product: syz
[  116.996931][    T9] usb 5-1: Manufacturer: syz
[  117.001602][    T9] usb 5-1: SerialNumber: syz
[  117.028835][   T66] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  117.049892][   T66] usb 7-1: device descriptor read/8, error -71
[  117.179936][   T66] usb 7-1: device descriptor read/8, error -71
[  117.211844][ T2555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.220535][ T2555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.418878][   T66] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  117.441051][   T66] usb 7-1: device descriptor read/8, error -71
[  117.569999][   T66] usb 7-1: device descriptor read/8, error -71
[  117.628815][  T321] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  117.679140][   T66] usb usb7-port1: unable to enumerate USB device
[  117.748876][    T9] usb 5-1: USB disconnect, device number 31
[  117.781722][  T321] usb 8-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00
[  117.790883][  T321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.798964][  T321] usb 8-1: Product: syz
[  117.803163][  T321] usb 8-1: Manufacturer: syz
[  117.807781][  T321] usb 8-1: SerialNumber: syz
[  118.020048][  T321] cdc_acm 8-1:1.0: ttyACM0: USB ACM device
[  118.036753][  T321] usb 8-1: USB disconnect, device number 6
[  118.088827][    T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  118.147897][   T36] audit: type=1400 audit(1790522275.110:551): avc:  denied  { wake_alarm } for  pid=2599 comm="syz.7.647" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  118.186106][ T2602] netlink: 72 bytes leftover after parsing attributes in process `syz.7.648'.
[  118.249912][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  118.268154][ T2607] FAULT_INJECTION: forcing a failure.
[  118.268154][ T2607] name fail_futex, interval 1, probability 0, space 0, times 0
[  118.271953][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  118.281601][ T2607] CPU: 1 UID: 0 PID: 2607 Comm: syz.7.650 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[  118.281705][ T2607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  118.281747][ T2607] Call Trace:
[  118.281770][ T2607]  <TASK>
[  118.281792][ T2607]  __dump_stack+0x21/0x30
[  118.281924][ T2607]  dump_stack_lvl+0x140/0x1c0
[  118.282002][ T2607]  ? __cfi_dump_stack_lvl+0x10/0x10
[  118.282107][ T2607]  dump_stack+0x19/0x20
[  118.282226][ T2607]  should_fail_ex+0x3c2/0x510
[  118.282330][ T2607]  should_fail+0xf/0x20
[  118.282404][ T2607]  get_futex_key+0x178/0x940
[  118.282511][ T2607]  ? kasan_save_track+0x3e/0x80
[  118.282599][ T2607]  ? __cfi_get_futex_key+0x10/0x10
[  118.282704][ T2607]  ? do_sys_openat2+0x170/0x1d0
[  118.282812][ T2607]  ? x64_sys_call+0xe69/0x2ee0
[  118.282859][ T2607]  ? do_syscall_64+0x57/0xf0
[  118.282923][ T2607]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  118.283001][ T2607]  futex_wake+0x150/0x950
[  118.283065][ T2607]  ? __cfi_futex_wake+0x10/0x10
[  118.283137][ T2607]  do_futex+0x37d/0x510
[  118.283232][ T2607]  ? __cfi_do_futex+0x10/0x10
[  118.283317][ T2607]  __se_sys_futex+0x13c/0x320
[  118.283400][ T2607]  ? fput+0x1a4/0x230
[  118.283495][ T2607]  ? __x64_sys_futex+0x110/0x110
[  118.283574][ T2607]  __x64_sys_futex+0xe9/0x110
[  118.283660][ T2607]  x64_sys_call+0x227f/0x2ee0
[  118.283707][ T2607]  do_syscall_64+0x57/0xf0
[  118.283769][ T2607]  ? clear_bhb_loop+0x50/0xa0
[  118.283844][ T2607]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  118.283918][ T2607] RIP: 0033:0x7fc3ba39e159
[  118.283983][ T2607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.284065][ T2607] RSP: 002b:00007fc3bb2ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  118.284141][ T2607] RAX: ffffffffffffffda RBX: 00007fc3ba625fa8 RCX: 00007fc3ba39e159
[  118.284191][ T2607] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc3ba625fac
[  118.284226][ T2607] RBP: 00007fc3ba625fa0 R08: 4000000000000000 R09: 0000000000000000
[  118.284287][ T2607] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  118.284328][ T2607] R13: 00007fc3ba626038 R14: 00007ffea7cfddb0 R15: 00007ffea7cfde98
[  118.284381][ T2607]  </TASK>
[  118.516622][    T9] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  118.525911][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.534176][    T9] usb 5-1: Product: syz
[  118.538498][    T9] usb 5-1: Manufacturer: syz
[  118.543168][    T9] usb 5-1: SerialNumber: syz
[  118.548997][    T9] usb 5-1: config 0 descriptor??
[  118.555796][   T36] audit: type=1400 audit(1790522275.520:552): avc:  denied  { accept } for  pid=2612 comm="syz.6.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  118.846707][ T2577] GUP no longer grows the stack in syz.4.642 (2577): 200000005000-200000008000 (200000004000)
[  118.857124][ T2577] CPU: 0 UID: 0 PID: 2577 Comm: syz.4.642 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[  118.857164][ T2577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  118.857182][ T2577] Call Trace:
[  118.857191][ T2577]  <TASK>
[  118.857208][ T2577]  __dump_stack+0x21/0x30
[  118.857237][ T2577]  dump_stack_lvl+0x140/0x1c0
[  118.857262][ T2577]  ? __cfi_dump_stack_lvl+0x10/0x10
[  118.857287][ T2577]  ? find_vma+0xd3/0x120
[  118.857306][ T2577]  dump_stack+0x19/0x20
[  118.857329][ T2577]  fixup_user_fault+0x616/0x6a0
[  118.857371][ T2577]  fault_in_user_writeable+0x75/0xe0
[  118.857406][ T2577]  futex_lock_pi+0x2ed/0xa70
[  118.857446][ T2577]  ? futex_unqueue+0x136/0x160
[  118.857483][ T2577]  ? __cfi_futex_lock_pi+0x10/0x10
[  118.857514][ T2577]  ? __cfi_futex_wake_mark+0x10/0x10
[  118.857533][ T2577]  ? __cfi_futex_wake_mark+0x10/0x10
[  118.857551][ T2577]  do_futex+0x270/0x510
[  118.857575][ T2577]  ? __cfi_do_futex+0x10/0x10
[  118.857597][ T2577]  ? __vm_munmap+0x30d/0x3d0
[  118.857617][ T2577]  __se_sys_futex+0x13c/0x320
[  118.857642][ T2577]  ? __x64_sys_futex+0x110/0x110
[  118.857666][ T2577]  ? __kasan_check_write+0x18/0x20
[  118.857684][ T2577]  __x64_sys_futex+0xe9/0x110
[  118.857708][ T2577]  x64_sys_call+0x227f/0x2ee0
[  118.857724][ T2577]  do_syscall_64+0x57/0xf0
[  118.857741][ T2577]  ? clear_bhb_loop+0x50/0xa0
[  118.857763][ T2577]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  118.857784][ T2577] RIP: 0033:0x7f1ee459e159
[  118.857799][ T2577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.857814][ T2577] RSP: 002b:00007f1ee53a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  118.857832][ T2577] RAX: ffffffffffffffda RBX: 00007f1ee4825fa0 RCX: 00007f1ee459e159
[  118.857845][ T2577] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000
[  118.857856][ T2577] RBP: 00007f1ee463506b R08: 0000000000000000 R09: 0000000000000001
[  118.857867][ T2577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.857877][ T2577] R13: 00007f1ee4826038 R14: 00007f1ee4825fa0 R15: 00007ffe61484b78
[  118.857892][ T2577]  </TASK>
[  118.860583][  T321] usb 5-1: USB disconnect, device number 32
[  121.732230][   T36] audit: type=1400 audit(1790522278.700:553): avc:  denied  { read } for  pid=2624 comm="syz.4.658" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  121.756423][   T36] audit: type=1400 audit(1790522278.700:554): avc:  denied  { open } for  pid=2624 comm="syz.4.658" path="/88/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  121.795387][   T36] audit: type=1400 audit(1790522278.740:555): avc:  denied  { create } for  pid=2626 comm="syz.6.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  121.840462][   T36] audit: type=1400 audit(1790522278.810:556): avc:  denied  { mounton } for  pid=2640 comm="syz.4.659" path="/89/config" dev="configfs" ino=2607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  121.864389][   T36] audit: type=1400 audit(1790522278.810:557): avc:  denied  { write } for  pid=2637 comm="syz.7.660" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  121.997943][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  122.007965][ T2657] netlink: 328 bytes leftover after parsing attributes in process `syz.4.662'.
[  122.031389][ T2656] netlink: 328 bytes leftover after parsing attributes in process `syz.4.662'.
[  122.105798][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  122.333355][ T2666] ./dev/sda1: Can't lookup blockdev
[  122.518928][   T66] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  122.535933][   T36] audit: type=1326 audit(1790522280.496:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2673 comm="syz.0.666" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f856d19e159 code=0x0
[  122.659044][   T66] usb 7-1: device descriptor read/64, error -71
[  122.928881][   T66] usb 7-1: device descriptor read/64, error -71
[  122.993237][   T36] audit: type=1400 audit(1790522280.956:559): avc:  denied  { mounton } for  pid=2679 comm="syz.4.668" path="/91/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  123.168846][   T66] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  123.248626][ T2368] bridge_slave_1: left allmulticast mode
[  123.273652][ T2368] bridge_slave_1: left promiscuous mode
[  123.289064][ T2368] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.301400][ T2368] bridge_slave_0: left allmulticast mode
[  123.308608][ T2368] bridge_slave_0: left promiscuous mode
[  123.309377][   T66] usb 7-1: device descriptor read/64, error -71
[  123.319553][ T2368] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.369041][  T322] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  123.437581][ T2687] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2687 comm=syz.0.671
[  123.463474][ T2368] veth1_macvtap: left promiscuous mode
[  123.471081][ T2368] veth0_vlan: left promiscuous mode
[  123.532759][  T322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.548833][  T322] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  123.568905][   T66] usb 7-1: device descriptor read/64, error -71
[  123.574101][  T322] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.594931][  T322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.608825][  T322] usb 5-1: Product: syz
[  123.613085][  T322] usb 5-1: Manufacturer: syz
[  123.638359][  T322] usb 5-1: SerialNumber: syz
[  123.651894][  T322] cdc_mbim 5-1:1.0: skipping garbage
[  123.683409][   T66] usb usb7-port1: attempt power cycle
[  123.858293][ T2683] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  123.964662][ T2697] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.972839][ T2697] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.980564][ T2697] bridge_slave_0: entered allmulticast mode
[  123.988065][ T2697] bridge_slave_0: entered promiscuous mode
[  123.995946][ T2697] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.003709][ T2697] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.011396][ T2697] bridge_slave_1: entered allmulticast mode
[  124.018612][ T2697] bridge_slave_1: entered promiscuous mode
[  124.028962][   T66] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  124.070635][   T66] usb 7-1: device descriptor read/8, error -71
[  124.159357][ T2697] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.166582][ T2697] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.174051][ T2697] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.181203][ T2697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.211094][   T66] usb 7-1: device descriptor read/8, error -71
[  124.240774][ T2368] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.268601][ T2368] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.297261][ T2319] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.304434][ T2319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.341011][ T2319] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.348173][ T2319] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.420174][ T2697] veth0_vlan: entered promiscuous mode
[  124.444285][ T2697] veth1_macvtap: entered promiscuous mode
[  124.450300][   T66] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  124.472133][   T66] usb 7-1: device descriptor read/8, error -71
[  124.600709][   T66] usb 7-1: device descriptor read/8, error -71
[  124.719102][   T66] usb usb7-port1: unable to enumerate USB device
[  124.733250][ T2711] sd 0:0:1:0: PR command failed: 1026
[  124.739005][ T2711] sd 0:0:1:0: Sense Key : 0x5 [current] 
[  124.745348][ T2711] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 
[  124.761138][ T2711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.679'.
[  124.773812][ T2712] sd 0:0:1:0: PR command failed: 1026
[  124.781535][ T2717] netlink: 4 bytes leftover after parsing attributes in process `syz.8.679'.
[  124.792244][ T2712] sd 0:0:1:0: Sense Key : 0x5 [current] 
[  124.800995][ T2712] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 
[  124.938413][  T322] cdc_mbim 5-1:1.0: SET_NTB_FORMAT failed
[  124.970749][  T322] cdc_mbim 5-1:1.0: bind() failure
[  124.993877][  T322] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  125.001924][  T322] cdc_ncm 5-1:1.1: bind() failure
[  125.012276][  T322] usb 5-1: USB disconnect, device number 33
[  125.304447][   T36] audit: type=1400 audit(1790522283.266:560): avc:  denied  { write } for  pid=2733 comm="syz.6.685" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  125.514311][ T2739] netlink: 104 bytes leftover after parsing attributes in process `syz.4.686'.
[  125.514955][   T36] audit: type=1400 audit(1790522283.476:561): avc:  denied  { nlmsg_read } for  pid=2738 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  125.558052][ T2368] device offline error, dev sda, sector 1134902 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.568962][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2027 starting block 141862)
[  125.580881][ T2368] Buffer I/O error on device sda1, logical block 141824
[  125.587984][ T2368] device offline error, dev sda, sector 1138998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.598709][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2029 starting block 142374)
[  125.610643][ T2368] Buffer I/O error on device sda1, logical block 142336
[  125.617742][ T2368] device offline error, dev sda, sector 1143094 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.628484][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 142886)
[  125.640305][ T2368] Buffer I/O error on device sda1, logical block 142848
[  125.647362][ T2368] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.658093][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143398)
[  125.669976][ T2368] Buffer I/O error on device sda1, logical block 143360
[  125.677033][ T2368] device offline error, dev sda, sector 1147694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.689092][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143461)
[  125.701060][ T2368] Buffer I/O error on device sda1, logical block 143423
[  125.708119][ T2368] device offline error, dev sda, sector 1155374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.719094][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144421)
[  125.731108][ T2368] Buffer I/O error on device sda1, logical block 144383
[  125.738184][ T2368] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.749144][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145446)
[  125.761132][ T2368] Buffer I/O error on device sda1, logical block 145408
[  125.769275][ T2368] device offline error, dev sda, sector 1164078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.780794][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145509)
[  125.793238][ T2368] Buffer I/O error on device sda1, logical block 145471
[  125.801060][ T2368] device offline error, dev sda, sector 1171678 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2
[  125.812333][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146459)
[  125.824710][ T2368] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146461)
[  125.824740][ T2365] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2030, error -5)
[  125.838114][ T2368] Buffer I/O error on device sda1, logical block 146423
[  125.859995][   T36] audit: type=1400 audit(1790522283.826:562): avc:  denied  { read } for  pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  125.869179][ T2365] Buffer I/O error on device sda1, logical block 146421
[  125.888981][ T2368] device offline error, dev sda, sector 1171758 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  125.909518][ T2365] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2036, error -5)
[  125.927741][   T74] Aborting journal on device sda1-8.
[  125.933794][   T74] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  125.954403][ T2740] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.0.687: Detected aborted journal
[  125.968901][   T74] JBD2: I/O error when updating journal superblock for sda1-8.
[  125.986967][  T287] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal
[  126.001102][  T287] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  126.009876][ T2740] EXT4-fs (sda1): previous I/O error to superblock detected
[  126.017624][ T2740] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  126.026495][  T287] EXT4-fs (sda1): I/O error while writing superblock
[  126.033562][ T2740] EXT4-fs (sda1): I/O error while writing superblock
[  126.040797][  T287] EXT4-fs (sda1): Remounting filesystem read-only
[  126.047530][ T2740] EXT4-fs (sda1): Remounting filesystem read-only
[  126.151761][ T2739] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  126.221935][ T2752] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  126.519020][  T311] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  126.648908][  T311] usb 7-1: device descriptor read/64, error -71
[  126.888983][  T311] usb 7-1: device descriptor read/64, error -71
[  127.128989][  T311] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  127.258968][  T311] usb 7-1: device descriptor read/64, error -71
[  127.498963][  T311] usb 7-1: device descriptor read/64, error -71
[  127.619134][  T311] usb usb7-port1: attempt power cycle
[  127.959029][  T311] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  127.980423][  T311] usb 7-1: device descriptor read/8, error -71
[  128.120414][  T311] usb 7-1: device descriptor read/8, error -71
[  128.358956][  T311] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  128.380393][  T311] usb 7-1: device descriptor read/8, error -71
[  128.510393][  T311] usb 7-1: device descriptor read/8, error -71
[  128.619272][  T311] usb usb7-port1: unable to enumerate USB device
[  136.664433][ T2761] FAULT_INJECTION: forcing a failure.
[  136.664433][ T2761] name failslab, interval 1, probability 100, space 0, times 0
[  136.680433][ T2761] CPU: 1 UID: 0 PID: 2761 Comm: syz.8.695 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[  136.680477][ T2761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  136.680496][ T2761] Call Trace:
[  136.680507][ T2761]  <TASK>
[  136.680519][ T2761]  __dump_stack+0x21/0x30
[  136.680566][ T2761]  dump_stack_lvl+0x140/0x1c0
[  136.680601][ T2761]  ? __cfi_dump_stack_lvl+0x10/0x10
[  136.680639][ T2761]  ? __d_add+0x636/0xac0
[  136.680685][ T2761]  dump_stack+0x19/0x20
[  136.680720][ T2761]  should_fail_ex+0x3c2/0x510
[  136.680752][ T2761]  should_failslab+0xac/0x100
[  136.680784][ T2761]  kmem_cache_alloc_lru_noprof+0x44/0x410
[  136.680812][ T2761]  ? __d_alloc+0x42/0x8c0
[  136.680838][ T2761]  __d_alloc+0x42/0x8c0
[  136.680864][ T2761]  d_alloc_parallel+0xe4/0x1370
[  136.680893][ T2761]  ? __kasan_check_write+0x18/0x20
[  136.680922][ T2761]  ? security_inode_permission+0x77/0x150
[  136.680961][ T2761]  ? downgrade_write+0x470/0x470
[  136.680999][ T2761]  ? __d_lookup+0x4e8/0x550
[  136.681028][ T2761]  ? __cfi_d_alloc_parallel+0x10/0x10
[  136.681056][ T2761]  ? down_read+0x7f/0xe0
[  136.681088][ T2761]  ? __cfi_down_read+0x10/0x10
[  136.681123][ T2761]  path_openat+0xa09/0x35a0
[  136.681163][ T2761]  ? do_filp_open+0x440/0x440
[  136.681200][ T2761]  do_filp_open+0x1f2/0x440
[  136.681235][ T2761]  ? __cfi_do_filp_open+0x10/0x10
[  136.681273][ T2761]  ? __cfi_kfree_link+0x10/0x10
[  136.681311][ T2761]  ? alloc_fd+0x4c1/0x570
[  136.681343][ T2761]  do_sys_openat2+0x134/0x1d0
[  136.681380][ T2761]  ? do_sys_open+0x100/0x100
[  136.681428][ T2761]  __x64_sys_openat+0x13a/0x170
[  136.681468][ T2761]  x64_sys_call+0xe69/0x2ee0
[  136.681493][ T2761]  do_syscall_64+0x57/0xf0
[  136.681519][ T2761]  ? clear_bhb_loop+0x50/0xa0
[  136.681553][ T2761]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  136.681585][ T2761] RIP: 0033:0x7ff68715e98e
[  136.681609][ T2761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  136.681635][ T2761] RSP: 002b:00007ff68808eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  136.681670][ T2761] RAX: ffffffffffffffda RBX: 00007ff68808f6c0 RCX: 00007ff68715e98e
[  136.681692][ T2761] RDX: 0000000000000002 RSI: 00007ff68808ef90 RDI: ffffffffffffff9c
[  136.681712][ T2761] RBP: 00007ff68723506b R08: 0000000000000000 R09: 0000000000000000
[  136.681731][ T2761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.681749][ T2761] R13: 00007ff687426038 R14: 00007ff687425fa0 R15: 00007fff81e8fde8
[  136.681773][ T2761]  </TASK>
[  136.683187][ T2761] 9pnet_fd: Insufficient options for proto=fd
[  136.927511][   T36] kauditd_printk_skb: 8 callbacks suppressed
[  136.927575][   T36] audit: type=1400 audit(1790522294.896:571): avc:  denied  { read append } for  pid=2766 comm="syz.6.699" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  136.977843][   T36] audit: type=1400 audit(1790522294.896:572): avc:  denied  { open } for  pid=2766 comm="syz.6.699" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  137.006504][ T2769] netlink: 96 bytes leftover after parsing attributes in process `syz.6.699'.
[  137.060684][ T2770] Write-error on swap-device (8:0:815982)
Sep 27 15:18:15 syzkaller kern.alert kernel: [  137.060684][ T2770] Write-error on swap-device (8:0:815982)
[  137.242843][ T2786] rust_binder: 2785:2786 no such ref 5
[  137.361884][   T36] audit: type=1400 audit(1790522295.326:573): avc:  denied  { accept } for  pid=2790 comm="syz.8.706" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  137.439157][  T322] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  137.578987][  T322] usb 7-1: device descriptor read/64, error -71
[  137.818922][  T322] usb 7-1: device descriptor read/64, error -71
[  137.907697][ T2803] block device autoloading is deprecated and will be removed.
[  137.958216][ T2807] incfs: Error accessing: ./file0.
[  137.963952][ T2807] incfs: mount failed -20
[  138.058913][  T322] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  138.157835][   T36] audit: type=1400 audit(1790522296.116:574): avc:  denied  { read write } for  pid=2814 comm="syz.8.715" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  138.167028][ T2815] tipc: Started in network mode
[  138.186724][ T2815] tipc: Node identity 1000001, cluster identity 4711
[  138.187380][   T36] audit: type=1400 audit(1790522296.116:575): avc:  denied  { open } for  pid=2814 comm="syz.8.715" path="/9/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  138.194509][  T322] usb 7-1: device descriptor read/64, error -71
[  138.221528][ T2815] tipc: Node number set to 16777217
[  138.228952][ T2815] tipc: Cannot configure node identity twice
[  138.235410][ T2816] tipc: New replicast peer: 127.0.0.1
[  138.241746][ T2816] tipc: Enabled bearer <udp:syz0>, priority 10
[  138.249170][  T438] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  138.258118][   T36] audit: type=1400 audit(1790522296.216:576): avc:  denied  { ioctl } for  pid=2814 comm="syz.8.715" path="/9/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  138.258217][ T2815] zero sized request
[  138.321488][   T36] audit: type=1400 audit(1790522296.286:577): avc:  denied  { map } for  pid=2817 comm="syz.8.716" path="pipe:[27957]" dev="pipefs" ino=27957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  138.400573][  T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  138.423267][  T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.434146][  T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  138.448429][  T438] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  138.459709][  T438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.469540][  T438] usb 5-1: config 0 descriptor??
[  138.478889][  T322] usb 7-1: device descriptor read/64, error -71
[  138.589206][  T322] usb usb7-port1: attempt power cycle
[  138.888376][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.898722][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x4
[  138.906497][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.914425][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.922160][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.929768][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.930098][  T322] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  138.937216][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.937253][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.937283][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.967348][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.974176][  T322] usb 7-1: device descriptor read/8, error -71
[  138.974964][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.988418][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  138.995964][  T438] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  139.003834][  T438] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  139.014094][  T438] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  139.039888][ T2850] udevd[2850]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  139.089951][  T438] usb 5-1: USB disconnect, device number 34
[  139.110977][  T322] usb 7-1: device descriptor read/8, error -71
[  139.348956][  T322] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  139.374667][  T322] usb 7-1: device descriptor read/8, error -71
[  139.510248][  T322] usb 7-1: device descriptor read/8, error -71
[  139.529748][ T2854] netlink: 'syz.8.725': attribute type 4 has an invalid length.
[  139.537454][ T2854] netlink: 'syz.8.725': attribute type 5 has an invalid length.
[  139.545224][ T2854] netlink: 'syz.8.725': attribute type 5 has an invalid length.
[  139.552941][ T2854] netlink: 3269 bytes leftover after parsing attributes in process `syz.8.725'.
[  139.629796][  T322] usb usb7-port1: unable to enumerate USB device
[  139.732187][ T2859] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  140.488088][ T2887] overlay: ./file0 is not a directory
[  140.538880][  T438] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  140.678852][  T438] usb 9-1: device descriptor read/64, error -71
[  140.868887][  T322] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  140.918881][  T438] usb 9-1: device descriptor read/64, error -71
[  141.018874][  T322] usb 5-1: device descriptor read/64, error -71
[  141.178854][  T438] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  141.258858][  T322] usb 5-1: device descriptor read/64, error -71
[  141.318849][  T438] usb 9-1: device descriptor read/64, error -71
[  141.498878][  T322] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  141.558881][  T438] usb 9-1: device descriptor read/64, error -71
[  141.658938][  T322] usb 5-1: device descriptor read/64, error -71
[  141.669545][  T438] usb usb9-port1: attempt power cycle
[  141.802059][   T36] audit: type=1400 audit(1790522299.766:578): avc:  denied  { watch_reads } for  pid=2912 comm="syz.6.741" path="/65" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  141.919020][  T322] usb 5-1: device descriptor read/64, error -71
[  142.008862][  T438] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  142.022195][   T36] audit: type=1400 audit(1790522299.986:579): avc:  denied  { remount } for  pid=2914 comm="syz.6.742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  142.041963][  T438] usb 9-1: device descriptor read/8, error -71
[  142.048998][  T322] usb usb5-port1: attempt power cycle
[  142.180256][  T438] usb 9-1: device descriptor read/8, error -71
[  142.400137][  T322] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  142.419006][  T438] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  142.430292][  T322] usb 5-1: device descriptor read/8, error -71
[  142.450376][  T438] usb 9-1: device descriptor read/8, error -71
[  142.570747][  T322] usb 5-1: device descriptor read/8, error -71
[  142.580414][  T438] usb 9-1: device descriptor read/8, error -71
[  142.694133][  T438] usb usb9-port1: unable to enumerate USB device
[  142.828846][  T322] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  142.870730][  T322] usb 5-1: device descriptor read/8, error -71
[  143.010266][  T322] usb 5-1: device descriptor read/8, error -71
[  143.129215][  T322] usb usb5-port1: unable to enumerate USB device
[  143.461368][ T2946] kvm: pic: non byte write
[  143.678184][ T2960] batadv_slave_1: entered promiscuous mode
[  143.695284][ T2961] batadv_slave_1: left promiscuous mode
[  143.730807][ T2960] ./dev/sda1: Can't lookup blockdev
[  144.208864][  T438] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  144.285460][ T2918] Read-error on swap-device (8:0:806494)
[  144.298951][   T66] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  144.308925][ T2918] Read-error on swap-device (8:0:806502)
[  144.314938][ T2918] Read-error on swap-device (8:0:806510)
Sep 27 15:18:22 syzkaller kern.alert kernel: [  144.285460][ T2918] Read-error on swap-device (8:0:806494)
Sep 27 15:18:22 syzkaller kern.alert kernel: [  144.308925][ T2918] [  144.339148][ T2918] Read-error on swap-device (8:0:806518)
Read-error on swap-device (8:0:806502)
Sep 27 15:18:22 syzkaller kern.alert kernel: [  144.314938][ T2918] Read-error on swap-device (8:0:806510)
Sep 27 15:18:22 syzkaller kern.alert kernel: [  144.339148][ T2918] Read-error on swap-device (8:0:806518)
[  144.371062][  T438] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.388820][  T438] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.410381][  T438] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  144.420121][  T438] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  144.428174][  T438] usb 9-1: Manufacturer: syz
[  144.441169][  T438] usb 9-1: config 0 descriptor??
[  144.458884][   T66] usb 5-1: device descriptor read/64, error -71
[  144.698946][   T66] usb 5-1: device descriptor read/64, error -71
[  144.938880][   T66] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  145.108959][   T66] usb 5-1: device descriptor read/64, error -71
[  145.348967][   T66] usb 5-1: device descriptor read/64, error -71
[  145.459632][   T66] usb usb5-port1: attempt power cycle
[  145.669560][  T438] uclogic 0003:256C:006D.0011: v1 frame probing failed: -71
[  145.678914][  T438] uclogic 0003:256C:006D.0011: failed probing parameters: -71
[  145.686524][  T438] uclogic 0003:256C:006D.0011: probe with driver uclogic failed with error -71
[  145.711913][  T438] usb 9-1: USB disconnect, device number 6
[  145.808902][   T66] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  145.830193][   T66] usb 5-1: device descriptor read/8, error -71
[  145.960354][   T66] usb 5-1: device descriptor read/8, error -71
[  146.040650][ T2987] overlayfs: failed to clone upperpath
[  146.202135][   T66] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  146.260496][   T66] usb 5-1: device descriptor read/8, error -71
[  146.390203][   T66] usb 5-1: device descriptor read/8, error -71
[  146.436277][ T2999] kvm: kvm [2998]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  146.509011][   T66] usb usb5-port1: unable to enumerate USB device
[  146.635265][ T3008] ./dev/sda1: Can't lookup blockdev
[  146.918862][   T66] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  147.082444][   T66] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.093161][   T66] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  147.102851][   T66] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  147.112670][   T66] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.122984][   T66] usb 9-1: config 0 descriptor??
[  147.339136][   T66] usb 9-1: USB disconnect, device number 7
[  147.398979][    T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  147.552515][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.577593][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  147.587412][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.598876][    T9] usb 5-1: config 0 descriptor??
[  147.710233][   T36] audit: type=1400 audit(1790522305.676:580): avc:  denied  { rename } for  pid=3016 comm="syz.0.775" name="file0" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  147.798921][  T438] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  147.824150][ T3027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'.
[  147.960827][  T438] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.978817][  T438] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  147.998394][  T438] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  148.008642][  T438] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.018553][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  148.032043][  T438] usb 9-1: config 0 descriptor??
[  148.035557][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  148.061150][    T9] usb 5-1: USB disconnect, device number 43
[  148.529228][    T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  148.712584][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.719928][ T3053] ./dev/sda1: Can't lookup blockdev
[  148.734414][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  148.753998][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.774464][    T9] usb 5-1: config 0 descriptor??
[  149.197206][ T3015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.220215][ T3015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.689904][    T9] aiptek 5-1:0.0: Aiptek using 400 ms programming speed
[  149.709448][    T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23
[  149.751878][    C1] ------------[ cut here ]------------
[  149.757441][    C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
[  149.766170][    C1] index 27730 is out of range for type 'const int[34]'
[  149.773074][    C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[  149.773125][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  149.773148][    C1] Call Trace:
[  149.773161][    C1]  <IRQ>
[  149.773175][    C1]  __dump_stack+0x21/0x30
[  149.773225][    C1]  dump_stack_lvl+0x140/0x1c0
[  149.773266][    C1]  ? __cfi_dump_stack_lvl+0x10/0x10
[  149.773308][    C1]  dump_stack+0x19/0x20
[  149.773347][    C1]  ubsan_epilogue+0xe/0x40
[  149.773373][    C1]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  149.773418][    C1]  aiptek_irq+0x208d/0x2a00
[  149.773461][    C1]  ? _raw_spin_unlock+0x45/0x60
[  149.773490][    C1]  ? kcov_remote_start+0x1d2/0x3c0
[  149.773521][    C1]  __usb_hcd_giveback_urb+0x371/0x530
[  149.773554][    C1]  usb_hcd_giveback_urb+0x12b/0x400
[  149.773583][    C1]  dummy_timer+0xa3f/0x4900
[  149.773628][    C1]  ? __cfi_dummy_timer+0x10/0x10
[  149.773660][    C1]  ? __cfi_dummy_timer+0x10/0x10
[  149.773691][    C1]  __hrtimer_run_queues+0x3ae/0x8e0
[  149.773733][    C1]  ? trace_event_buffer_commit+0x256/0x8f0
[  149.773769][    C1]  ? hrtimer_interrupt+0xf30/0xf30
[  149.773813][    C1]  hrtimer_run_softirq+0x159/0x560
[  149.773840][    C1]  ? irqtime_account_irq+0x51/0x1c0
[  149.773881][    C1]  handle_softirqs+0x1aa/0x620
[  149.773913][    C1]  ? __cfi_slab_free_after_rcu_debug+0x10/0x10
[  149.773954][    C1]  __do_softirq+0xf/0x16
[  149.773993][    C1]  do_softirq+0xb8/0x110
[  149.774022][    C1]  </IRQ>
[  149.774034][    C1]  <TASK>
[  149.774046][    C1]  ? __cfi_do_softirq+0x10/0x10
[  149.774075][    C1]  ? __kasan_slab_free+0x6a/0x80
[  149.774113][    C1]  __local_bh_enable_ip+0x74/0x80
[  149.774142][    C1]  rcu_do_batch+0x590/0xcb0
[  149.774174][    C1]  ? rcu_core+0xcc0/0xcc0
[  149.774203][    C1]  ? __kasan_check_write+0x18/0x20
[  149.774235][    C1]  ? __kasan_check_read+0x15/0x20
[  149.774265][    C1]  ? rcu_nocb_cb_kthread+0x51e/0xb60
[  149.774296][    C1]  rcu_nocb_cb_kthread+0x533/0xb60
[  149.774329][    C1]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  149.774359][    C1]  ? __kasan_check_write+0x18/0x20
[  149.774389][    C1]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  149.774418][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  149.774447][    C1]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  149.774478][    C1]  ? set_cpus_allowed_ptr+0xa1/0xf0
[  149.774510][    C1]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  149.774543][    C1]  ? __kasan_check_read+0x15/0x20
[  149.774572][    C1]  ? __kthread_parkme+0x12f/0x180
[  149.774602][    C1]  ? schedule+0xc5/0x240
[  149.774633][    C1]  kthread+0x2c4/0x360
[  149.774666][    C1]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  149.774697][    C1]  ? __cfi_kthread+0x10/0x10
[  149.774730][    C1]  ret_from_fork+0x67/0xa0
[  149.774770][    C1]  ? __cfi_kthread+0x10/0x10
[  149.774804][    C1]  ret_from_fork_asm+0x1a/0x30
[  149.774834][    C1]  </TASK>
[  149.774846][    C1] ---[ end trace ]---
[  150.056003][    C1] ------------[ cut here ]------------
[  150.061494][    C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
[  150.070132][    C1] index 27731 is out of range for type 'const int[34]'
[  150.077030][    C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[  150.077077][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  150.077099][    C1] Call Trace:
[  150.077111][    C1]  <IRQ>
[  150.077124][    C1]  __dump_stack+0x21/0x30
[  150.077173][    C1]  dump_stack_lvl+0x140/0x1c0
[  150.077216][    C1]  ? __cfi_dump_stack_lvl+0x10/0x10
[  150.077257][    C1]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  150.077290][    C1]  dump_stack+0x19/0x20
[  150.077328][    C1]  ubsan_epilogue+0xe/0x40
[  150.077356][    C1]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  150.077401][    C1]  aiptek_irq+0x1f3c/0x2a00
[  150.077444][    C1]  ? _raw_spin_unlock+0x45/0x60
[  150.077472][    C1]  ? kcov_remote_start+0x1d2/0x3c0
[  150.077504][    C1]  __usb_hcd_giveback_urb+0x371/0x530
[  150.077536][    C1]  usb_hcd_giveback_urb+0x12b/0x400
[  150.077565][    C1]  dummy_timer+0xa3f/0x4900
[  150.077608][    C1]  ? __cfi_dummy_timer+0x10/0x10
[  150.077641][    C1]  ? __cfi_dummy_timer+0x10/0x10
[  150.077679][    C1]  __hrtimer_run_queues+0x3ae/0x8e0
[  150.077721][    C1]  ? trace_event_buffer_commit+0x256/0x8f0
[  150.077757][    C1]  ? hrtimer_interrupt+0xf30/0xf30
[  150.077800][    C1]  hrtimer_run_softirq+0x159/0x560
[  150.077828][    C1]  ? irqtime_account_irq+0x51/0x1c0
[  150.077869][    C1]  handle_softirqs+0x1aa/0x620
[  150.077900][    C1]  ? __cfi_slab_free_after_rcu_debug+0x10/0x10
[  150.077939][    C1]  __do_softirq+0xf/0x16
[  150.077970][    C1]  do_softirq+0xb8/0x110
[  150.077997][    C1]  </IRQ>
[  150.078008][    C1]  <TASK>
[  150.078020][    C1]  ? __cfi_do_softirq+0x10/0x10
[  150.078047][    C1]  ? __kasan_slab_free+0x6a/0x80
[  150.078083][    C1]  __local_bh_enable_ip+0x74/0x80
[  150.078124][    C1]  rcu_do_batch+0x590/0xcb0
[  150.078156][    C1]  ? rcu_core+0xcc0/0xcc0
[  150.078183][    C1]  ? __kasan_check_write+0x18/0x20
[  150.078215][    C1]  ? __kasan_check_read+0x15/0x20
[  150.078245][    C1]  ? rcu_nocb_cb_kthread+0x51e/0xb60
[  150.078276][    C1]  rcu_nocb_cb_kthread+0x533/0xb60
[  150.078310][    C1]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  150.078342][    C1]  ? __kasan_check_write+0x18/0x20
[  150.078371][    C1]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  150.078400][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  150.078429][    C1]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  150.078461][    C1]  ? set_cpus_allowed_ptr+0xa1/0xf0
[  150.078495][    C1]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  150.078528][    C1]  ? __kasan_check_read+0x15/0x20
[  150.078557][    C1]  ? __kthread_parkme+0x12f/0x180
[  150.078588][    C1]  ? schedule+0xc5/0x240
[  150.078619][    C1]  kthread+0x2c4/0x360
[  150.078652][    C1]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  150.078691][    C1]  ? __cfi_kthread+0x10/0x10
[  150.078724][    C1]  ret_from_fork+0x67/0xa0
[  150.078765][    C1]  ? __cfi_kthread+0x10/0x10
[  150.078799][    C1]  ret_from_fork_asm+0x1a/0x30
[  150.078830][    C1]  </TASK>
[  150.078845][    C1] ---[ end trace ]---
[  150.365754][    C1] ==================================================================
[  150.373887][    C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x1f5a/0x2a00
[  150.381525][    C1] Read of size 4 at addr ffffffff86720eac by task rcuop/1/33
[  150.388958][    C1] 
[  150.391337][    C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7
[  150.391383][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  150.391407][    C1] Call Trace:
[  150.391420][    C1]  <IRQ>
[  150.391435][    C1]  __dump_stack+0x21/0x30
[  150.391485][    C1]  dump_stack_lvl+0x140/0x1c0
[  150.391527][    C1]  ? __cfi_dump_stack_lvl+0x10/0x10
[  150.391571][    C1]  ? __cfi__printk+0x10/0x10
[  150.391610][    C1]  print_address_description+0x71/0x210
[  150.391655][    C1]  print_report+0x4a/0x70
[  150.391695][    C1]  kasan_report+0x162/0x1a0
[  150.391735][    C1]  ? aiptek_irq+0x1f5a/0x2a00
[  150.391779][    C1]  ? aiptek_irq+0x1f5a/0x2a00
[  150.391822][    C1]  __asan_report_load4_noabort+0x18/0x20
[  150.391853][    C1]  aiptek_irq+0x1f5a/0x2a00
[  150.391896][    C1]  ? _raw_spin_unlock+0x45/0x60
[  150.391926][    C1]  ? kcov_remote_start+0x1d2/0x3c0
[  150.391961][    C1]  __usb_hcd_giveback_urb+0x371/0x530
[  150.391994][    C1]  usb_hcd_giveback_urb+0x12b/0x400
[  150.392025][    C1]  dummy_timer+0xa3f/0x4900
[  150.392078][    C1]  ? __cfi_dummy_timer+0x10/0x10
[  150.392112][    C1]  ? __cfi_dummy_timer+0x10/0x10
[  150.392143][    C1]  __hrtimer_run_queues+0x3ae/0x8e0
[  150.392186][    C1]  ? trace_event_buffer_commit+0x256/0x8f0
[  150.392223][    C1]  ? hrtimer_interrupt+0xf30/0xf30
[  150.392268][    C1]  hrtimer_run_softirq+0x159/0x560
[  150.392296][    C1]  ? irqtime_account_irq+0x51/0x1c0
[  150.392338][    C1]  handle_softirqs+0x1aa/0x620
[  150.392370][    C1]  ? __cfi_slab_free_after_rcu_debug+0x10/0x10
[  150.392411][    C1]  __do_softirq+0xf/0x16
[  150.392444][    C1]  do_softirq+0xb8/0x110
[  150.392471][    C1]  </IRQ>
[  150.392485][    C1]  <TASK>
[  150.392498][    C1]  ? __cfi_do_softirq+0x10/0x10
[  150.392528][    C1]  ? __kasan_slab_free+0x6a/0x80
[  150.392564][    C1]  __local_bh_enable_ip+0x74/0x80
[  150.392593][    C1]  rcu_do_batch+0x590/0xcb0
[  150.392625][    C1]  ? rcu_core+0xcc0/0xcc0
[  150.392653][    C1]  ? __kasan_check_write+0x18/0x20
[  150.392686][    C1]  ? __kasan_check_read+0x15/0x20
[  150.392716][    C1]  ? rcu_nocb_cb_kthread+0x51e/0xb60
[  150.392747][    C1]  rcu_nocb_cb_kthread+0x533/0xb60
[  150.392782][    C1]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  150.392814][    C1]  ? __kasan_check_write+0x18/0x20
[  150.392844][    C1]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  150.392874][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  150.392911][    C1]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  150.392941][    C1]  ? set_cpus_allowed_ptr+0xa1/0xf0
[  150.392975][    C1]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[  150.393009][    C1]  ? __kasan_check_read+0x15/0x20
[  150.393038][    C1]  ? __kthread_parkme+0x12f/0x180
[  150.393078][    C1]  ? schedule+0xc5/0x240
[  150.393110][    C1]  kthread+0x2c4/0x360
[  150.393143][    C1]  ? __cfi_rcu_nocb_cb_kthread+0x10/0x10
[  150.393175][    C1]  ? __cfi_kthread+0x10/0x10
[  150.393208][    C1]  ret_from_fork+0x67/0xa0
[  150.393251][    C1]  ? __cfi_kthread+0x10/0x10
[  150.393285][    C1]  ret_from_fork_asm+0x1a/0x30
[  150.393317][    C1]  </TASK>
[  150.393329][    C1] 
[  150.642979][    T9] usb 9-1: USB disconnect, device number 8
[  150.644655][    C1] The buggy address belongs to the variable:
[  150.644677][    C1]  .str.321+0xc/0x20
[  150.709016][    C1] 
[  150.711389][    C1] The buggy address belongs to the physical page:
[  150.717872][    C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6720
[  150.726603][    C1] flags: 0x4000(reserved|zone=0)
[  150.731605][    C1] raw: 0000000000004000 ffffea000019c808 ffffea000019c808 0000000000000000
[  150.740252][    C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  150.748883][    C1] page dumped because: kasan: bad access detected
[  150.755364][    C1] page_owner info is not present (never set?)
[  150.761482][    C1] 
[  150.763876][    C1] Memory state around the buggy address:
[  150.769558][    C1]  ffffffff86720d80: 00 00 07 f9 f9 f9 f9 f9 00 00 07 f9 f9 f9 f9 f9
[  150.777678][    C1]  ffffffff86720e00: 00 00 07 f9 f9 f9 f9 f9 00 00 03 f9 f9 f9 f9 f9
[  150.785793][    C1] >ffffffff86720e80: 00 06 f9 f9 00 06 f9 f9 00 06 f9 f9 00 06 f9 f9
[  150.793904][    C1]                                   ^
[  150.799346][    C1]  ffffffff86720f00: 00 00 05 f9 f9 f9 f9 f9 00 00 01 f9 f9 f9 f9 f9
[  150.807466][    C1]  ffffffff86720f80: 00 00 f9 f9 00 00 00 04 f9 f9 f9 f9 00 00 01 f9
[  150.815606][    C1] ==================================================================
[  150.823717][    C1] Disabling lock debugging due to kernel taint
Sep 27 15:18:28 syzkaller kern.alert kernel: [  150.755364][    C1] page_owner info is not present (never set?)
[  151.025874][  T322] usb 5-1: USB disconnect, device number 44
[  151.025924][    C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19